Register for your free account! | Forgot your password?

Go Back   elitepvpers > Off-Topics > Technical Support
You last visited: Today at 14:25

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



!Virus ? [Help]!

Discussion on !Virus ? [Help]! within the Technical Support forum part of the Off-Topics category.

Reply
 
Old   #1
 
lalalilo's Avatar
 
elite*gold: 8
Join Date: Mar 2009
Posts: 968
Received Thanks: 130
!Virus ? [Help]!

Hello epvp,
Since 2 weeks I have a huge problem.
My firefox kept crashing and is slow as **** (even if i just want to write something in the chat O.o) and overall nothing is really working.
My Anti-Virus programm is "Panda-cloud-antivir free".

So,What I have noticed is that I have 67 processes on when I'm just surfing on the internet ....
I found some suspicious ones and there names are:
mn.exe
svhost.exe
2x PURctuQR.exe
taskung.exe
14x svchost.exe
2x Akami net sesseion
2x Nvidia driver helper
2x bot1.exe
cmd.exe (after startup) and it costs 15% of my CPU permanently.
Windowsdefender.exe (I TURNED IT OFF IN STARTUP MENU AND IT NEVER APPEARED B4)
In addition windows asks me for admin rights for a programm called "Data transfer" directly after startup.Never agreed to that.

Another problem is/was that I uninstalled FF and tried to download it new with IE BUT if i wanted to connect to a website that has downloads in it,it says "could not connect (...)"

Till now i tried the following programs to kill this ****:
Combofix
Panda cloud anti virus
Malwarebytes

Note:I am NEVER in my Admin account i always surf and play without admin rights.

thanks in advance
lalalilo
lalalilo is offline  
Old 08/30/2012, 00:55   #2
 
Kraim's Avatar
 
elite*gold: 1
Join Date: Nov 2007
Posts: 1,871
Received Thanks: 309
mhm lets see what i can do to help you:

at first svhost/svchost is nothing bad, dont worry about it.

if you cant to find out about a specific process, you can simply google that.

cmd.exe shouldnt be running at startup, you can cancel it.

tl;dr thats what i do if i were you:

go start->run->type "msconfig" and press enter.

then you see a window with a few tabs. the tabs "startup" and "services" are important here:

go to the startup tab and uncheck all boxes.(that means no extra processes will run when the computer starts)

then go to services and first check the box "hide all windows services"
screen for help:
then uncheck all boxes that are left.

after that go to start>all programs>autostart(its a folder) and delete everything thats inside it

then restart your pc and look if anything changed.

if not/yes go to msconfig again and turn on the processes in startup which you know you can trust(like your av)

i hope it helps
Kraim is offline  
Old 08/30/2012, 02:54   #3
 
lalalilo's Avatar
 
elite*gold: 8
Join Date: Mar 2009
Posts: 968
Received Thanks: 130
Well, thanks for ur help
Anyway I'm not a newb and i know msconfig/services.msc/dxdiag and all these standard programs.
Also svhost.exe was the virus/worm/keylogger its done for now and I deleted it with succes
For now my Computer seems to be safe again.
But the cmd.exe is still there and very suspicious becuase its open twice.
Anyway I tried to cancel some of the services from windows to close the ******* falg in the tray and i canceled the wrong one :/
Now I dont have any sound... I checked the boxes in the services again but they wont startup.
I also went in services.msc with admin rights and tried to start all the services again but one of them and thats one of the important services wont start and its kinda impossible to start it again.
It says that one of the required services for it isnt running but it is.
So I just need to wait till i get my new computer on January so IO have sound again

Thanks for ur help

lalalilo
lalalilo is offline  
Reply


Similar Threads Similar Threads
[VIRUS] Warrock Virus.Ramnit.X infinziert
07/31/2012 - WarRock Guides, Tutorials & Modifications - 2 Replies
Hallo Liebe Warrock Com. Als ich Heute mein Computer mit Malwarebytes scannte fande der einen Virus versteckt in der Warrock Launcher.exe. Dieser Virus nennt sich Ramnit, Ramnit ist ein Virus der andere Anwendungsdatein also *.exe infiziert. Ich empfehle euch da ihr noch ca. 1-2 std. Zeit wegen der Maintance habt euer System zu Prüfen. HKCR\NXCOM.NxGameControl.EU.2 (Virus.Ramnit) -> Erfolgreich gelöscht und in Quarantäne gestellt. C:\ProgramData\Nexon\Common\dbghelp.dll (Virus.Ramnit)...
Halo Reach defiant map pack download virus oder kein virus?
03/23/2011 - Off Topic - 1 Replies
Hi ich wollte mir mal den defiant map pack für halo reach dwonloaden und habe eben diese seite gefunden. Halo Reach Defiant Map Pack Download Meine frage ist die datei ein virus oder nicht? es gibt ein virusscann,aber ich weiß nicht ob es ein fake ist. Bitte um hilfe.
neuer virus im WR ordner oder eigener Virus?
06/14/2010 - WarRock - 8 Replies
hallo ich habe gerade Warrock gestartet dann meldete sich Kaspersky was es bishe rnoch nie machte und da stant das Warrock ein Virus hat oder ist namens PDS(oder so ähnlich) Keylogger.??? also ihrgend wie so. Hat Warrock jetzt wieder ein Problem mit nem Virus update was die Antivir programme erkennt oder habe ich mir mal was gedownloadet was als Virus angezeigt wird? Vieleicht sagt auch jemand was dazu der Kaspersky hat ;) Insgesammt hat er 5 Trojanische Programme gefunden meint er...



All times are GMT +1. The time now is 14:29.


Powered by vBulletin®
Copyright ©2000 - 2026, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2026 elitepvpers All Rights Reserved.