Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

wierd process in task manager, can't get rid of it


  • Please log in to reply

#1
shishomiru04

shishomiru04

    Member

  • Member
  • PipPip
  • 41 posts
i have multiple processes running in my task manager that are exactly the same thing the process name is LUCOMS~1.EXE, ther usually is anywhere from maybe a few(3-4) of them running or alot(10-15) running at a time and they are all running under 12,000 k but never below 11,000 k......now i find it wierd that there are so many running and i can't end them or the process tree of them, when i do it says the operation could not be completed access denied...i have no clue of this is spyware or something to do with windows or what?..my computer is pretty clean and this has been going on for a long time now, i just haven't had the time to post this....i'd say its been going on for atleast a year now...wierd huh?
  • 0

Advertisements


#2
doire

doire

    Member

  • Member
  • PipPipPip
  • 210 posts
Are you running Norton on your pc? I think this process is in connection with Live Update

http://service1.syma...src=bar_sch_nam

Edited by doire, 02 February 2007 - 09:04 AM.

  • 0

#3
shishomiru04

shishomiru04

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

Are you running Norton on your pc? I think this process is in connection with Live Update

http://service1.syma...src=bar_sch_nam



ooohhhh okay thanks alot, i was worried there kinda not knowing what this was, usually it is easier to tell what the processes are for, thanks alot!
  • 0

#4
solaris

solaris

    New Member

  • Member
  • Pip
  • 7 posts

i have multiple processes running in my task manager that are exactly the same thing the process name is LUCOMS~1.EXE, ther usually is anywhere from maybe a few(3-4) of them running or alot(10-15) running at a time and they are all running under 12,000 k but never below 11,000 k......now i find it wierd that there are so many running and i can't end them or the process tree of them, when i do it says the operation could not be completed access denied...i have no clue of this is spyware or something to do with windows or what?..my computer is pretty clean and this has been going on for a long time now, i just haven't had the time to post this....i'd say its been going on for atleast a year now...wierd huh?


if u r not using register win thn dont Live Update. :whistling:
  • 0

#5
shishomiru04

shishomiru04

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

i have multiple processes running in my task manager that are exactly the same thing the process name is LUCOMS~1.EXE, ther usually is anywhere from maybe a few(3-4) of them running or alot(10-15) running at a time and they are all running under 12,000 k but never below 11,000 k......now i find it wierd that there are so many running and i can't end them or the process tree of them, when i do it says the operation could not be completed access denied...i have no clue of this is spyware or something to do with windows or what?..my computer is pretty clean and this has been going on for a long time now, i just haven't had the time to post this....i'd say its been going on for atleast a year now...wierd huh?


if u r not using register win thn dont Live Update. :whistling:



whats register win?
  • 0

#6
1101doc

1101doc

    Trusted Tech

  • Retired Staff
  • 909 posts
Yes, lucoms~1 is the Symantec live update, but when I had Norton I never had multiples running at the same time. I don't think that is normal. I suggest that you contact Symantec customer technical support and use the free email consultation service. It may be that your "Live update engine" is malfunctioning. Fortunately, that is a seperate application and can be un- and re-installed without damaging your basic Norton. Take Symantec's advice on this one, I am just a former user-not an expert.
  • 0

#7
Guest_rushin1nd_*

Guest_rushin1nd_*
  • Guest
so you have live upate process running more than once in your task manager

couple of things i would like to ask

1-have you ever changed live update to a newer version more than once

2-can you look in the registry and see if its only this

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

thats how the registry key should look

there should be no numerical value or any numbers added to it

there should not be more than one registry key

how to get there


Click Start > Run.
Type regedit

Then click OK.

navigate to
HKEY_CURRENT_USER
SOFTWARE
Microsoft
Windows
CurrentVersion
Run


remember just look
nothing else

Edited by rushin1nd, 05 February 2007 - 11:24 PM.

  • 0

#8
shishomiru04

shishomiru04

    Member

  • Topic Starter
  • Member
  • PipPip
  • 41 posts

so you have live upate process running more than once in your task manager

couple of things i would like to ask

1-have you ever changed live update to a newer version more than once

2-can you look in the registry and see if its only this

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

thats how the registry key should look

there should be no numerical value or any numbers added to it

there should not be more than one registry key

how to get there


Click Start > Run.
Type regedit

Then click OK.

navigate to
HKEY_CURRENT_USER
SOFTWARE
Microsoft
Windows
CurrentVersion
Run


remember just look
nothing else



okay i did what you said and in that very catagory in the regedit it has 3 things there
1.(defualt)
2. ctfmon.exe
3.SUPERAntispyware

so what should i do now?, i haven't changed live update to a newr version not that i'm aware of, it is norton antivirus 2006 version 12.6.0.1
  • 0

#9
Guest_rushin1nd_*

Guest_rushin1nd_*
  • Guest
Check the live update schedule..is it set too run daily weekly or monthly
or is it set to run at start-up

Let's try this first:

Go to Start > Run and type in Services.msc then click OK

Click the Extended tab.

Scroll down until you find the service...

Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

Click once on the service to highlight it.

Click Stop

Right-Click on the service.

Click on 'Properties'

Select the 'General' tab

Click the Arrow-down tab on the right-hand side on the 'Start-up Type' box

From the drop-down menu, click on 'Disabled'

Click the 'Apply' tab, then click 'OK'

The service is now stopped and disabled.

Repeat for the following service:
Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

then restart your computer....pull up task manager
are there alot of LUCOMS~1.EXE still running
if there are go back to

Go to Start > Run and type in Services.msc then click OK

Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE..
is this still disabled
how about this one
Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

download highjack this but do not post a highjack log
highjack logs are only posted in the malware forum

we are just going to use the misc tool it provides

http://filehippo.com...oad_hijackthis/

1. Open HJT
2. Click on Config>>Misc Tools>>Delete an NT Service
3. Type LiveUpdate in the space provided and click OK
4. The program will ask you to REBOOT --- Choose NO.
Repeat steps 1 & 2
Type Automatic LiveUpdate Scheduler this time.
When prompted to reboot again -- Accept

5. REBOOT into SAFE MODE

6. Using Windows Explorer, locate and DELETE the following files marked in bold (if they are still present):

C:\PROGRAM FILES\Symantec\LIVEUPDATE\LUCOMSERVER.EXE

C:\PROGRAM FILES\Symantec\LIVEUPDATE\LUCOMSERVER_2_5.EXE

C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

7. REBOOT back into Normal Mode

Then try the installation again (using the tool from Symantec's site if need be.) Remember to use Internet Explorer for this.

heres the download for live update
http://www.softwarep...liveupdate.html

Edited by rushin1nd, 06 February 2007 - 04:17 PM.

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP