Computing.Net > Forums > Security and Virus > svchost.exe 50%, explorer.exe 50%

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

svchost.exe 50%, explorer.exe 50%

Reply to Message Icon

Name: Tim_Baldwin
Date: August 6, 2005 at 21:06:59 Pacific
OS: Win XP
CPU/Ram: 2.4 / 256
Comment:

I'm working on a friends pc. It was loaded with trojans and spyware. Had his hard drive hooked to my computer, ran a full a/v scan using McAfee 2005, and spyware scan using AdAware. Both have most recent updates. Here's the problem: after hooking his hd back up to his pc, it won't boot up regularly, gets frozen at the signon screen. When I boot into safe mode (which takes years to boot into, I might add), once it finally gets logged on as administrator, svchost.exe and explorer.exe are both clocking in at apprx 50% each. This, of course, locks everything else up, so I can't perform HijackThis or anything else. Can't "end process" of explorer, and "end process" of svchost and you get the good old "shutting down in 10...9...8...7...etc,etc,etc". I need some suggestions guys!!! Help!!!



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: August 7, 2005 at 04:21:02 Pacific
Reply:

Try downloading the Sasser worm removal tool to a floppy or cd and run it on the problem computer http://securityresponse.symantec.com/avcenter/venc/data/w32.sasser.removal.tool.html

You will need to disable system restore to purge any viruse/malware from there and you can wait until you run the removal tool.

How to purge system restore


0

Response Number 2
Name: workshop
Date: August 9, 2005 at 03:54:44 Pacific
Reply:

I agree with jabuck, disable the system restore, if the Sasser Worm removal tool doesn't find anything, find a tool called Stinger which finds and removes variuos viruses and trojans. Microsoft have also developed a simimlar tool that works as well.
Run these scanners in safe mode and diable the System Restore. AH, you can't get into the PC with the HDD in his compueter. Therefore, connect his HDD back into your PC and try the above.
You may also want to try and Boot up his PC with the McAfee CD and run a scan from there. As all the XP processors are totally disabled.
Hope this helps.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: svchost.exe 50%, explorer.exe 50%

removing svchost.exe! www.computing.net/answers/security/removing-svchostexe/7744.html

Svcpack.exe help to eliminate www.computing.net/answers/security/svcpackexe-help-to-eliminate/7866.html

SVCHOST.EXE virus??? www.computing.net/answers/security/svchostexe-virus/8092.html