colore Posted April 28, 2010 Share Posted April 28, 2010 helloafter installing SP3 on my XP Pro, I get the above:http://img4.imageshack.us/img4/3669/195122.pngis there any way to uninstall it and go back to SP2 without risking anything? thanks Link to comment Share on other sites More sharing options...
cluberti Posted April 29, 2010 Share Posted April 29, 2010 I don't remember specifics off of the top of my head, but this behavior reminds me of similar behavior of an older virus/worm that shows up after installation of a service pack due specifically to some of the changes that SP2 and SP3 do to a system during install, thus causing the malicious code to "break" and start to show up obviously in task manager like this with those two specific binaries over and over, and should be treated as such. In task manager, on the processes tab, if you click view > select columns, one of the options is "Command Line". I am guessing you'll see either services.exe or cmd.exe being started from somewhere other than \Windows\System32, which would indicate for sure the infection. Link to comment Share on other sites More sharing options...
jaclaz Posted April 29, 2010 Share Posted April 29, 2010 There are quite a number of virii that do something like that:http://www.runscanner.net/lib/services.exe.htmlAFTER a thorough antivirus scan, if the behaviour continues, check this:http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/edd479ff-6ae3-4255-9add-57acd434c5acHKLM\SOFTWARE\MICROSOFT\COMMAND PROCESSORThe autorun key should be blank however it had cmd.exe in it as soon as this was removed the fault stopped without restart.jaclaz Link to comment Share on other sites More sharing options...
Tarun Posted May 1, 2010 Share Posted May 1, 2010 Please download my Anti-Malware Toolkit and get the package that matches your OS. Then follow the directions in the PC Cleanup guide. After that, please post a HijackThis log. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now