| View previous topic :: View next topic |
| Author |
Message |
Strelok
Expert Cheater
 Reputation: 2
Joined: 23 May 2009
Posts: 204
|
 Posted: Wed Jan 27, 2010 5:31 pm Post subject: svchost |
 |
|
kaspersky is telling me for about 10 minutes after starting my laptop, that svchost has an incorrect certificate and is sending encrypted files, but i scanned for virus yesterday and it came up with nothing, and svchost also takes up about 50% of my cpu. virus or a piece of shit?
EDIT: firefox is now havingfun connecting to its own shit. lets scan again shall we...
_________________
| Official Microsoft support page wrote: | | This issue occurs because of a problem |
Pingaz |
|
| Back to top |
|
 |
SF
I'm a spammer
 Reputation: 119
Joined: 19 Mar 2007
Posts: 6028
|
| Posted: Wed Jan 27, 2010 6:01 pm Post subject: |
|
|
Where is the svchost.exe that's doing so located, and where is sending stuff to?
_________________
|
|
| Back to top |
|
|
Strelok
Expert Cheater
Reputation: 2
Joined: 23 May 2009
Posts: 204
|
| Posted: Wed Jan 27, 2010 6:04 pm Post subject: |
|
|
its in windows\SYSWOW64
its constantly popping up on kaspersky, even though i have connections blocked for 10 minutes, firefox tried to connect to some random site. bigspeedpro.com
_________________
| Official Microsoft support page wrote: | | This issue occurs because of a problem |
Pingaz |
|
| Back to top |
|
|
Alphamabet
Master Cheater
![]() Reputation: 0
Joined: 03 Jan 2009
Posts: 452
|
| Posted: Thu Jan 28, 2010 4:31 am Post subject: |
|
|
| Is it me or is the svchost virus pooping up everywhere? Only a week ago did Eset Nod find one, but if seen numerous topics about it here.
|
|
| Back to top |
|
|
SF
I'm a spammer
Reputation: 119
Joined: 19 Mar 2007
Posts: 6028
|
| Posted: Thu Jan 28, 2010 4:42 am Post subject: |
|
|
I PMed him and got a bit more info (I dislike posting in public due to fear of looking like a total retard)
He's on Win7beta 64bit (explains the folder)
and he also sent me the svchost.exe - it's clean, original one from microsoft and it's modified date is from when he installed win7
_________________
|
|
| Back to top |
|
|
Alphamabet
Master Cheater
![]() Reputation: 0
Joined: 03 Jan 2009
Posts: 452
|
| Posted: Thu Jan 28, 2010 5:16 am Post subject: |
|
|
| SF wrote: | | it's clean, original one from microsoft and it's modified date is from when he installed win7 |
Did you find that out just from the date it was last modified or is there something you did to see if it is legit?
|
|
| Back to top |
|
|
Hero
I'm a spammer
 Reputation: 79
Joined: 16 Sep 2006
Posts: 7154
|
| Posted: Thu Jan 28, 2010 11:19 am Post subject: |
|
|
| even on windows 7, it shouldnt be using 50% cpu.
|
|
| Back to top |
|
|
SF
I'm a spammer
Reputation: 119
Joined: 19 Mar 2007
Posts: 6028
|
| Posted: Thu Jan 28, 2010 3:18 pm Post subject: |
|
|
| Hero wrote: | | even on windows 7, it shouldnt be using 50% cpu. |
Windows update causes mine to run at a 100% load for a few minutes.
http://forum.cheatengine.org/download.php?id=71694 for anyone else who wants to look at it
@OP: Does kaspersky tell you where it's sending to?
_________________
|
|
| Back to top |
|
|
Strelok
Expert Cheater
Reputation: 2
Joined: 23 May 2009
Posts: 204
|
| Posted: Thu Jan 28, 2010 3:41 pm Post subject: |
|
|
no. it just says that an encrypted file is being sent
_________________
| Official Microsoft support page wrote: | | This issue occurs because of a problem |
Pingaz |
|
| Back to top |
|
|
SF
I'm a spammer
Reputation: 119
Joined: 19 Mar 2007
Posts: 6028
|
| Posted: Thu Jan 28, 2010 4:35 pm Post subject: |
|
|
Should really get something better.. Comodo firewall will tell you where it's being sent, then check that IP address and see if it's from a legit company of something you have installed on your PC.
_________________
|
|
| Back to top |
|
|
acureon
How do I cheat?
![]() Reputation: 0
Joined: 03 Mar 2010
Posts: 2
|
| Posted: Wed Mar 03, 2010 9:59 am Post subject: |
|
|
hey guys my firefox did the same thing it just randomly connected me to
bigspeedpro dot commerce /xml_config/hypercam.xml
and this is what was written in it
copy-pasta dot commerce /pasta162180
guys do I have a virus?
|
|
| Back to top |
|
|
|
FAQ
Search
Memberlist
Usergroups
Register
Profile
Log in to check your private messages
Log in
