SVCHOST Virtual Memory Usage Question

  • Thread starter Thread starter =?ISO-8859-1?Q?Andreas_R=F6nnquist?=
  • Start date Start date
?

=?ISO-8859-1?Q?Andreas_R=F6nnquist?=

Hi!

I have recently got rid of the TrojanDownloader.Win32.Ladder infection,
and I think my system is safe. But when I run the
Windows Worms Doors Cleaner sometimes it says that my systems seems to
be infected, SVCHOST virtual memory usage is beyond usual values.
(Sometimes I get that message, sometimes not.)

My (updated) ZoneLabs Antivirus and A-Squared Trojan scanner doesn't
find anything.

Is there any need to be worried?

Tips would be much appreciated.

/Andreas Rönnquist
(e-mail address removed)
 
1) Download the following two items...

Trend Sysclean Package
http://www.trendmicro.com/download/dcs.asp

Latest Trend signature files.
http://www.trendmicro.com/download/pattern.asp

Create a directory.
On drive "C:\"
(e.g., "c:\New Folder")
or the desktop
(e.g., "C:\Documents and Settings\lipman\Desktop\New Folder")

Download SYSCLEAN.COM and place it in that directory.
Dowload the signature files (pattern files) by obtaining the ZIP file.
For example; lpt234.zip

Extract the contents of the ZIP file and place the contents in the same directory as
SYSCLEAN.COM.

2) If you are using WinME or WinXP, disable System Restore
http://vil.nai.com/vil/SystemHelpDocs/DisableSysRestore.htm
3) Reboot your PC into Safe Mode
4) Using the Trend Sysclean utility, perform a Full Scan of your platform and
clean/delete any infectors found
5) Restart your PC and perform a "final" Full Scan of your platform
6) If you are using WinME or WinXP, Re-enable System Restore and re-apply any
System Restore preferences, (e.g. HD space to use suggested 400 ~ 600MB),
7) Reboot your PC.
8) If you are using WinME or WinXP, create a new Restore point
9) Please report back your results

Dave




| Hi!
|
| I have recently got rid of the TrojanDownloader.Win32.Ladder infection,
| and I think my system is safe. But when I run the
| Windows Worms Doors Cleaner sometimes it says that my systems seems to
| be infected, SVCHOST virtual memory usage is beyond usual values.
| (Sometimes I get that message, sometimes not.)
|
| My (updated) ZoneLabs Antivirus and A-Squared Trojan scanner doesn't
| find anything.
|
| Is there any need to be worried?
|
| Tips would be much appreciated.
|
| /Andreas Rönnquist
| (e-mail address removed)
 
Back
Top