allen2

I don't want to discuss further without any solid evidence from the OP but it could happen that a virus running on his computer could have infected the downloaded svchost.exe right after downloading it (i've seen something similar about 10 years ago). Also, just for the record, McAfee isn't the worst antivirus out there and the latest DAT definitions is 6819. Also, i tried uploading the svchost.exe from XP SP3 to virustotal.com (SHA256: 2910ebc692d833d949bfd56059e8106d324a276d5f165f874f3fb1b6c613cdd5) and indeed it is detected as a virus by McAfee-GW-Edition but isn't detected as a virus by other Antivirus or McAfee "classic". So this one is most likely a false positive triggered by the heuristic analysis of McAfee GW and that isn't the first (and most likely not the last) time it happens. Also, the MS KB was about McAfee "classic" and not the GW edition and both don't use the same kind of virus definitions (and in this case it isn't even related to a virus definition).

I don't know how virustotal works exactly but what i find strange is that it would use virus definitions from 2 years ago (taken from your link):

No computer cooler should be able to make a magnetic field strong enough to affect the drive. In worst case, it could only have worsened the bad drive health.

I disagree with you there: - if you're right, you don't need to be that angry/harsh when you're explaining something. If he doesn't understand, that is either because he need more information or because the problem wasn't explained properly. - The OP need to learn how to diagnose those problems by himself and if no one explain properly how to do it, he will still have doubt about your (or my ) diagnostic. Of course the downloaded svchost.exe from SP3 couldn't be virus but that doesn't mean the OP resolved his problem. He is right wanting to understand why and how he got this false positive. The only way to help him now is to let him learn how monitor its computer tcp connections and how to check which process(es) are using them. Most likely, there should be a good reason for every connections but knowing the reason will help him understand what is happening there and why. Also that is the only way to reassure him.

You should use tcpview first to know which process(es) (also get the pid to check which user is launching them) are doing those requests. Then depending on the process(es) and/or the user launching them, different solutions may arise. Edit: The pid will help you to find in tasks manager or better in process explorer which user is launching them (you 'll need to add the right columns in view menu).

Then adding the certificate with a batch using certmgr.exe using runonce key might be your only solution.

As for the file being replaced, SFC is most likely the cause. Be careful, Windows XP wasn't designed to allow end user to replace files.

Certificate deployment should be done through GPO to ensure the deployment of the certificate and that it will be added back in case of removal. Of course this is only for an Active directory environment.

Hum, i disagree there: The OP is already a little paranoid (the way i see it it's a quality). It already use a firewall and is behind a router which isn't really mandatory.

While i love the way people try to customize or improve (in their own way of course) their OS, i don't really understand what's the point wanting to make things differently when there isn't any gain (and that seems to be the case here). As windows audio service use svchost.exe to host its dll (audiosrv.dll) it should not take more than a few KB in memory and also it shouldn't use too much cpu. But perhaps you're having a hard time diagnosing a problem with svchost so just in case, the proper way (disabling services isn't what i call a good way) of doing things is explained on MS Blogs. Also, if you're just looking to remove unneeded services (in the sense that you don't need them on your computer) then most of them are useless but most of them a providing functionalities and some are mandatory (like RPCSS).

Ok, but be careful the official svchost.exe can load virus like conficker as it is only a service hosting functionnality so if you see svchost.exe process downloading doing strange things it could be that the hosted dll is a trojan (like conficker). I take conficker as example, as it is the worse virus created and it is still spreading even though it was "released" in 2008 (Almost 4 years for a virus still spreading is perhaps world record).

In first place, why would you need to download svchost.exe (your windows OS already have it) ? Also using caps/bold/big font won't help more...

You could either integrate everything in your autoit script (using runwait and run command) or modify your batch script like this: start /separate "process security warning" \\MyPrintserver\WindowsSecurityInstallYes.exe

Are you using ffdshow ? You can configure hotkeys in it. Or perhaps this will help.

You should try uninstalling the keyboard driver and/or replacing the keyboard.

To disable driver signing in Windows 7 try following this tutorial and then reboot. Also you script indeed disable driver signing but you need a reboot for it to be disabled as bcdedit only change boot parameter and as stated in thistutorial. As for autoit, if you still want to do it this way, there are many way of doing it, but in all cases, you'll need to wait for the security check to appear with either a sleep command (not recommended) or a loop waiting for the right windows to appear (you can use the "autoit windows info" tool to get the need infos from the window) then focus on the windows and then send a tab and a space (or enter) with the sendkey command. When you'll get some code, if you're struggling with it post it to the right forum and you'll get help.

The best value for the money is indeed the Asus. It has a faster cpu more RAM an hard drive bigger.

I saw the video and indeed it might be the hard drive. Do you have more than one hard drive ? If yes, it might already improve overall speed if you try encoding from one drive to the other. If not, you should try copying one source file and check how much time was need for this. For the SSD, no all brand and models aren't the same and doesn't give the same performance. Also the max size is a lot bigger than 256Gb even as PCi Express card: OCZ RevoDrive 3 X2 exist in different sizes up to 960GB. It is also currently the fastest SSD for the money. But again before thinking to buy new hardware, do many copy tests to check if the drive is the current root cause. If the drive is the current root cause, you might get an improvement after doing a defrag of the drive.

People think that SSD are faster than hard drive in every domain and it is wrong: - Using incompressible data or not will give you completly different result. So depending on your usage, ssd might not be the right choice. - Raid controller were optimized for hard drive not for ssd. - Raid controller disable garbage collection (trim) so even if your OS support it, it won't happen unless the drive is able to do it by itself. - You also took one the fastest enterprise hard drive and you're comparing it to a main stream ssd.

Usually for encoding video, you need the fastest available cpu and as the tool you're using is multithreaded it should be able to handle more cpu cores. Most likely, your ideal encoding station would be something like a DELL R910 with fourIntel Xeon E7-8867L (each cpu has ten cores and 30MB cache ) but be sure to find the right os to support this kind of overkill configuration. Also check if your software (vidcoder or handbrake) will be able to use this much power (80 virtual cpus with hyperthreading enabled). As for the difference between Xeon and I7, there is much difference but most of the time cache is bigger on the Xeons. Also some I7 cpu can't be used in dual or quad configuration. But most of the time, the highend Xeon are avalaible later than the desktop cpu. So you won't get latest cpu optimization if you buy a Xeon. Also as you may already know, sometimes getting the best computer isn't the right way to reduce encoding time : in your current configuration, you might perhaps gain a lot of time by using a SSD like an OCZ Revodrive 3 x2. Maybe the source or the destination drive can't follow the speed of your processor. It is easy to know if this the case: a simple copy between the source drive and the destination drive should show you the max speed that you could attain with those.

This memtest.exe isn't the same memtest (memtest86 which is an os in itself and then need to be booted or chain booted) that Jaclaz was speaking about. The most reliable one is memtest86. As for me, I would use isolinux/memdisk to make the multiboot CD you're looking to create. Edit: Also if you don't want to bother creating the bootCD yourself, you could try using Ultimate boot CD: http://www.ultimatebootcd.com/index.html

Installrite might work to monitor both registry and files changes.

use: robocopy k:\ "D:\Program Files\Windows AIK\Tools\PETools" /E /xo And it should work.

You can use the path variable (it should support unc name or mapped network drive). A simple batch launching your exe should work after modifying the path variable should work.

This asus should have an option to stop on no error in the bios (and then whatever the error maybe it will try to boot). This is only a way to avoid the F1 prompt it won't resolve the root cause. Did you tried to unplug all cables (power/keyboard/mouse, everything...) connected to your computer then remove the bios battery then push on power buton a few seconds and then reconnect every cable and power it then go to bios and "load setup default settings" if the option exist ? Also, i don't see the 1055T in CPUs support list from asus.