uninstall SP3

[colore]

hello

after installing SP3 on my XP Pro, I get the above:

http://img4.imageshack.us/img4/3669/195122.png

is there any way to uninstall it and go back to SP2 without risking anything?

thanks

[cluberti]

I don't remember specifics off of the top of my head, but this behavior reminds me of similar behavior of an older virus/worm that shows up after installation of a service pack due specifically to some of the changes that SP2 and SP3 do to a system during install, thus causing the malicious code to "break" and start to show up obviously in task manager like this with those two specific binaries over and over, and should be treated as such. In task manager, on the processes tab, if you click view > select columns, one of the options is "Command Line". I am guessing you'll see either services.exe or cmd.exe being started from somewhere other than \Windows\System32, which would indicate for sure the infection.

[jaclaz]

There are quite a number of virii that do something like that:

http://www.runscanner.net/lib/services.exe.html

AFTER a thorough antivirus scan, if the behaviour continues, check this:

http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/edd479ff-6ae3-4255-9add-57acd434c5ac

HKLM\SOFTWARE\MICROSOFT\COMMAND PROCESSOR

The autorun key should be blank however it had cmd.exe in it as soon as this was removed the fault stopped without restart.

jaclaz

[Tarun]

Please download my Anti-Malware Toolkit and get the package that matches your OS. Then follow the directions in the PC Cleanup guide. After that, please post a HijackThis log.