this happened after many many emails came. Now the computer runs slower
than slow. I can't do anything on it! The darn thing is a Pentium 4 2.4Ghz
machine! If I run an antivirus scan (which I've done) it was on it's 83rd
hour and still scanning. I gave up and stopped it. What virus is this and
how do I innoculate it?

Thanks for any suggestions
Michael Mishler

"Michael Mishler" <mike@mishlercomputers.com> wrote in
news:Hmb3b.277256$Ho3.36688@sccrnsc03:

Maybe, your whole HD is being uploaded by a hacker. A friend of a friend
had that happeing as the machine was getting slower and slower. I would
use Active Ports (free) use Google and see if you have unknown IP
connections on some ports.

Duane

--
The protection of the machine is a process and not a given!

sweet fucking signature man..( no, seriously) ...
....thats profound on so many different levels it hurts my head...

( I like to imagine some diminutive 1950's robot speaking your signature
while raising a blaster of some sort towards a crowd of crazy humans....)

hey---and I'm only on my second beer.....
--jmnugent



"Duane Arnold" <notme@notme.com> wrote in message
news:Xns93E4C11F81A8Enotmenotmecom@204.127.204.17. ..

"jmnugent" <ten.tsacmoc@tnegunmj> wrote in news:1%c3b.276689$o%2.126711
@sccrnsc02:

you finish the *case*. I'll provide the tree and that way you can piss the
beer and your brains out on it.

Duane

Michael Mishler wrote:

is your firewall enabled?

As another poster suggested, your system may be being used as a file dump,
or by a worm to propogate itself. I've seen this 3 or 4 times now, so try
the following to see if there are any preliminary symptoms..

Open a command prompt and type:
netstat -a

This should show a list of what ports are being used. There will normally be
30-60 ports listed. Most should be "listening", but you would be in trouble
if you see 100s of FTP or TCP connections established! Try getting a
firewall to block all network traffic (outbound and inbound) and see if your
computer speeds up.

Hope this helps

Tobin

"Michael Mishler" <mike@mishlercomputers.com> wrote in message
news:Hmb3b.277256$Ho3.36688@sccrnsc03...

In article <Hmb3b.277256$Ho3.36688@sccrnsc03>, mike@mishlercomputers.com
says...
You haven't stated the operating system, but my guess is XP. Right buttom click
on the Task Bar and bring up the Task Manager. Click on the Performance tag and
examine CPU and memory usage. Click on the Appplications tag and end all
Running Applications. Check the Performance tag again to see if one of those
was the culprit. If not, then go to the Processes tag and look for any process
that is consuming great amounts of CPU or Memory (Sysyem Idle Process will
always consume CPU that is not being utilized). End the Process that is causing
the problem, and check the performance again.

If you still can't find the problem, then boot up the computer in Safe Mode (F8
after Windows starts to load). Check the Performance again. If it is OK, then
boot up in Safe Mode with Networking, and check it again.

In Safe Mode, the minimum services that should be running are:
TASKMGR.EXE
EXPLORER.EXE
SVCHOST.EXE
SVCHOST.EXE
LSASS.EXE
SERVICES.EXE
WINLOGON.EXE
CSRSS.EXE
SMSS.EXE
System
System Idle Process

When you find the culprit, let us know and we can advise you what to do next.

whop-pee...

____________
moondusterone


"jmnugent" <ten.tsacmoc@tnegunmj> wrote in message
news:1%c3b.276689$o%2.126711@sccrnsc02...

On Wed, 27 Aug 2003 23:43:35 GMT, "Michael Mishler"
<mike@mishlercomputers.com> wrote:
took about 5mins after desktop appeared for the mouse to stop eggtimer
& then it ran like in treacle.

Problem seemed to be the remains of a AVG virus checker that we had
tried to uninstall (uninstall failed) - one of its tasks was churning
away & using 70-80% of processor - we used START->RUN->"MSCONFIG" to
disable all its startup components - then machine was back running
smoothly.

I think the problem arose cos we installed Norton AV on top of an
incompletely uninstalled AVG - guess there is lots of scope for
conflicts there

You could also go to the registry, START>RUN>REGEDIT, and delete the
reference to those
components and they will no longer show in the startup list. After
deleting them reboot your computer to complete the process.

I did what it says below:

I found that in safe mode and safe mode with networking that the problem is
not there, but in normal mode that an svchost.exe is hogging everything and
causing the slowness. I deleted everything in startup, and in the reg keys
that start up (hkey_local_machine/software/microsoft/windows/current
version/run) &
(hkey_current_user/software/microsoft/windows/current version/run) but the
problem is still there..

what is svchost.exe and what makes it hog the cpu? I even tried to take the
network cable out to make sure it's not an outside hacker, but it continues
without it plugged in.

Any ideas?

Michael Mishler



"John Coutts" <administrator@yellowhead.com> wrote in message
news:vks4lgdf0k644@corp.supernews.com...

On that special day, Michael Mishler, (mike@mishlercomputers.com)
said...

It might not be the real cause, but somehow it resembles what I read
just yesterday on
http://www.spywareinfo.com/~merijn/cwschronicles.html

Maybe this gives you an idea where to look for.


Gabriele Neukam

Gabriele.Neukam@t-online.de


--
Ah, Information. A good, too valuable theses days, to give it away, just
so, at no cost.

I discovered that Zone Alarm was the culprit in my case.

I used the shareware program called "Filemon" a.k.a. File Monitor
Version 6.07 from www.sysinternals.com. This software tells you all
the programs that are active and currently "cooking" on your computer.


I noticed that ZoneAlarm Pro was processing and making requests while
I was not logged onto the Internet! So I uninstalled Zone Alarm Pro
and viola! my computer stopped speaking in a slow southern drawl.

I reinstalled ZoneAlarm Pro and haven't had any slowdown since.

Tom WiIlliams