SVCHOST - too many times ??

pilau · Trooper Joined: Feb 21, 2004 Posts: 13 Location: Israel

SVCHOST showing multiple times ? what is this ?
(Plus: What are fphsz.exe, wkssvr.exe and lsasss.exe ?!?!?)

satchick · Posted: Tue Jun 01, 2004 5:19 pm Post subject:

Hi pilau,

SVCHOST.exe should show up multiple times on most systems. Its a service host for DLL's. All the other files you listed look like malware.

Best post a HijackThis log in a new Topic in this forum:
http://www.computercops.biz/forum67.html

Download HijackThis from here:
http://www.computercops.biz/downloads-cat-14.html

Unizip it into it's own folder, then run it from there. Click on SCAN, then SAVE LOG, and copy and paste it there.

Someone will assist you, if I don't have time. Very Happy

pilau · Trooper Joined: Feb 21, 2004 Posts: 13 Location: Israel

i have HJT thx.....
i will post my HJT log

anyway
i have noticed a file called sp.bat (ms-dos batch file) that is supposed to run a file that is called win2k3.exe. both files were found in C:\. what are these shitties ?

satchick · Posted: Wed Jun 02, 2004 6:03 pm Post subject:

No idea. There is no reference to it at the microsoft website (or anywhere else for that matter). Probably another piece of malware. Post your log into the HijackThis forum. It might give us more insight.

pilau · Trooper Joined: Feb 21, 2004 Posts: 13 Location: Israel

ok i did it is there under the name "big problema regarding SPACE EATING WORM and such"

satchick · Posted: Wed Jun 02, 2004 6:27 pm Post subject:

That's probably the most original subject I've seen. Very Happy

I will take a look.

pilau · Trooper Joined: Feb 21, 2004 Posts: 13 Location: Israel

cool!

thx!

lilliebet65 · Posted: Fri Jun 04, 2004 8:25 am Post subject:

Glad we were able to help. Smile

NOTE: I am closing this thread as your log is being addressed elsewhere. Should you need it reopened, please PM a mod.
Everyone else having a similar issue, please launch a new topic for yourselves.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 856 pages served in previous 5 minutes. Page Rendered: 0.579 seconds.