Forum Home
Press F1
 
Thread ID: 98955 2009-04-14 05:35:00 Major Malfunction nzjab06 (101) Press F1
Post ID Timestamp Content User
764864 2009-04-14 05:35:00 I have had my Laptop for a while now. It is a Toshiba Satellite M30. All of a sudden it stopped recognizing flash drives. i mean it recognizes them but it doesn't come up on the auto-play and it doesn't show on my computer either. I am running windows XP home. Also, some of my Toshiba software is not working as well. Toshiba Power saver says that I need to apply it to my power scheme. i do that on power options via control panel and then it says that i need to start power saver first. It doesn't end. Also, when the flash drives stopped working, every time i log on it comes up with a message that says svhost.exe had to close. This is really annoying as i need the computer for study and using flash drives is the easiest way to transfer my data. Would appreciate some help. One more thing. When I scan my computer for viruses and do a full system scan it only scans about 2750 files. this number also varies up and down. It doesn't come up with anything. Thanks for any help you can give me. nzjab06 (101)
764865 2009-04-14 05:47:00 can u try it in safe mode ? GameJunkie (72)
764866 2009-04-14 05:53:00 What virus scanner are you using?

In device manager(run>devmgmt.msc) are there any devices with a exclaimation mark next to them? If so, right click the, select uninstall and reboot.

svhost.exe is a major worm that can spread through emails and can steal passwords and confidential data.

Disable System restore by right clicking my computer>properties>select "system restore" tab and tick "disable system restore on all drives">Click OK

Do not re-enable system restore until malware removal process is finished.

Next download MalwareBytes (files4.majorgeeks.com), update, and perform a full scan

Once it has finished, it may prompt you to reboot, which you should allow.

If the program cannot run then shutdown the computer, then boot it up, tapping F8 while booting, thene select "Safe Mode with Networking"

Download Spyware Terminator (dnl.spywareterminator.com), update and perform a full scan. Do not install the Crawler Toobar, Web Guard, or ClamAV during installation.

Once both scans are finished, download and run HijackThis (www.trendsecure.com), then copy and paste the log here for analysis. Attach scan logs from MalwareBytes and Spyware terminator also.

Blam
Blam (54)
764867 2009-04-14 06:05:00 thanks blam6 Ill do that probably tonight and post it back here tomorrow. I am running Norton Anti virus 2009 by the way nzjab06 (101)
764868 2009-04-14 06:10:00 Another thing I forgot to mention. Usually when i restart the computer it somehow automatically disables windows firewall, even though I turned it on before shut down nzjab06 (101)
764869 2009-04-14 06:11:00 Uninstall that immediately.

Its one of the many viruses that has infected your PC:p

Install something such as Avast! which is free.

www.avast.com

Requires free registration every 14 months
Blam (54)
764870 2009-04-14 06:11:00 Another thing I forgot to mention. Usually when i restart the computer it somehow automatically disables windows firewall, even though I turned it on before shut down

Probably the malware causing mayhem..
Blam (54)
764871 2009-04-14 06:13:00 Looks like that file belongs to mydoom / or socksbot. So, I would get rid of it, before you plug any usb flash drives into this system. or use it in other computers

If you use IRC get out of it, till you fix / remove this backdoor trojan

Someone may have downloaded and opened an attachment in email

If this svhost.exe file is running now (in task manager), kill its process and find that file / and delete it

Once you remove it, make sure XP is up to date
Speedy Gonzales (78)
764872 2009-04-14 06:49:00 But there is way more than 1 svchost processses running and the problem one has already closed. What do I do? nzjab06 (101)
764873 2009-04-14 06:58:00 svchost is a windows file svhost.exe isnt (notice there's no C in the 2nd file) Speedy Gonzales (78)
1 2