Numerous instances of svchost.exe & svchos1.exe. Causing
CPU to be maxxed out at 100%..have 512MB of Ram...Any
clues???
Charlie,
A Google search for "svchos1.exe", OTOH, appears to link THAT process to the
W32/Gaobot worm.
http://groups.google.com/groups?q=svchos1.exe&ie=UTF-8&oe=UTF-8&hl=en&btnG=Google+Search
For removal of Gaobot, Symantec has developed various removal tools. The tool
required may depend upon what version of Gaobot has infected your computer.
http://search.symantec.com/custom/us/query.html then type "gaobot" into the
Search: box.
How current is your virus protection? Try these free online virus scans:
<
http://www.bitdefender.com/scan/license.php>
<
http://security.symantec.com/ssc/home.asp>
<
http://housecall.trendmicro.com/housecall/start_corp.asp>
Now check for, and learn to defend against, additional carriers of infection.
First, download LSP-Fix from <
http://www.cexx.org/lspfix.htm>, and CWShredder
from <
http://www.majorgeeks.com/download4086.html>. Both free.
Next, run CWShredder. Have it fix all variants.
Now check for, and remove, spyware. Get HijackThis
<
http://www.majorgeeks.com/download.php?det=3155> and Spybot S&D
<
http://security.kolla.de/index.php?lang=en&page=download>. Both free.
1) Install and run Spybot. First update it ("Search for updates"), then run a
scan ("Check for problems"). Trust Spybot, and make all recommended deletions.
2) Install and run HijackThis. Do NOT make any changes immediately. Save the
HJT Log.
3) Have your HJT log interpreted by experts at one or more of the following
forums (and post it here):
<
http://forums.net-integration.net/>
<
http://www.spywareinfo.com/forums/>
<
http://forums.tomcoyote.org/>
<
http://www.wilderssecurity.com/>
If removal of any spyware affects your ability to access the internet (some
spyware builds itself into the network software, and its removal may damage your
network), run LSP-Fix.
Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/
Harden your operating system. Check at least monthly.
http://windowsupdate.microsoft.com/
Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above)).
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.