processes

[Stern]

smss.exe
csrss.exe
lsass.exe
wuauclt.exe
vsmon.exe

what are these processes and is it normal to have them running in WinXP Pro?

 

[Schadenfroh]

smss.exe
csrss.exe
lsass.exe
wuauclt.exe
vsmon.exe

 

[Stern]

Thank you

*deletes wuauclt.exe*

 

[Stern]

Runservice.exe

can't find it any of the lists on that site. and how do i stop processes like wuauclt.exe from booting up next time i restart?

 

[Schadenfroh]

Runservice.exe

and how do i stop processes like wuauclt.exe from booting up next time i restart?

try disabling autoupdates and/or using spybot's startup list tool to deactivate it and not delete it incase you find you need it later.

 

[duragezic]

Try and disable the service, whereever you may find it, they probably have an on/off. If not, you can use msconfig (same as above program but builtin)

 

[Stern]

tftp - Trivil File and Transfer Protocol wants access to the internet, and once i give it access, one of the svchost.exe uses up 99% of CPU and lots of bandwidth. It also uses up the CPU if I deny access to tftp.exe

help?

 

[Aluf]

Don't wanna jump to conclusions but tftp.exe and svchost.exe are used by Blaster type worms extensively for spreading, so a full antivirus scan I think would be apropriate here .
Another pointer would be the IP where it tries to connect to. BTW I heard some hardware vendors use this protocol for updating its firmware (lynksys e.g.) but it has never poped up in my Win XP SP1 so not sure whether it could be just renamed and forgotten.

 

[Schadenfroh]

see if you are getting symptoms of any of these, they all could be related to tftp.exe

TelServer RAT
W32.Tkbot.Worm
W32.HLLW.Gaobot.EE

 

[Stern]

updated my antivir and found blaster, repaired, thanks all

 

[OCNewbie]

answersthatwork.com has a good area with a task list that will identify a lot of tasks for ya

 

[Stern]

it says here that spoolsv is a registered security threat. How do i remove/disable it?

*Edit* The link works now