newParadigm
Diamond Member
Hello,
Recently I built a new Desktop, and reconfigured an exsisting laptop for a friends business.
I put WinXP with Sevice Pack 2 on both PCs. They were wrking great when I handed them over to him.
I also AVG Anti Virus (free Edition) on both comps.
After less than a week they started to run parlessly slow, so I went and took a look at them.
On both systems the Process svchost.exe seems to be eating up resources.
(In Task Manager under the processes tap, the process is using between 2-3% CPU on the Desktop, and about 14% CPU on the Laptop.)
I had this problem on my comp about a month back, but it was a blaster worm.
It doesnt appear to be a known Blaster.worm (or variant) on these 2 computers.
I dowloaded the Blaster removal tools from Symantec.com, and they didn't detect any of the files.
I have also determined that the Instance of svchost that is using the resources is running the services "DcomLaunch", and "TermService".
From what i have read, Dcom appears to be one of the exploits of the blaster.worm family
This in turn made me believe that i had a blaster worm variant.
I verified that it wasn't a blaster worm by using the w32.blaster removal tool found at Symantec.com. The test came back on both computers saying that they were not infected.
I would greatly apreciate some insight as to wut this problem might be.
Thank you,
newParadime
Recently I built a new Desktop, and reconfigured an exsisting laptop for a friends business.
I put WinXP with Sevice Pack 2 on both PCs. They were wrking great when I handed them over to him.
I also AVG Anti Virus (free Edition) on both comps.
After less than a week they started to run parlessly slow, so I went and took a look at them.
On both systems the Process svchost.exe seems to be eating up resources.
(In Task Manager under the processes tap, the process is using between 2-3% CPU on the Desktop, and about 14% CPU on the Laptop.)
I had this problem on my comp about a month back, but it was a blaster worm.
It doesnt appear to be a known Blaster.worm (or variant) on these 2 computers.
I dowloaded the Blaster removal tools from Symantec.com, and they didn't detect any of the files.
I have also determined that the Instance of svchost that is using the resources is running the services "DcomLaunch", and "TermService".
From what i have read, Dcom appears to be one of the exploits of the blaster.worm family
This in turn made me believe that i had a blaster worm variant.
I verified that it wasn't a blaster worm by using the w32.blaster removal tool found at Symantec.com. The test came back on both computers saying that they were not infected.
I would greatly apreciate some insight as to wut this problem might be.
Thank you,
newParadime