Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Multiple Unknown Origin Scripts . . .

Scrpts UnkwnOrgn

  • Please log in to reply

#16
NTxLSUSA

NTxLSUSA

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts

RKinner,

 

Have been atttmpting to respond to your message all morning with first one issue then another keeping me out.  Then the power cable cam\e out of my laptop just when starting to type and it died.

 

While here just say you are just a few days ahead of me in your knowledge of these systems, YA! RIGHT, being self taught using the 'trial and ERROR' methodology with as few ERRORs as possible, but' having many more than wanted.  NOT repeating any where possible.  Plus many forums on the web have been a great help.  As for the language used is only ONE and seem to murder it most of time.  Do NOT know any other and do not plan on learning any more.  The oin ne I presently use is a large enough challenge for me.

 

"svchost.exe' on my laptop has only seven - eight (7 - 8) with three (3) or four (4) with not any entries to the right columns; desktop variies between eighteen (18) and nineteen (19) with about eight (8) with not any entries in any columns to the right.  Did Windows Update this morn on desktop/w two (2) for USB Mouse and the other Keybard, have the wireless Keyboard and Mouse from Microsoft were sucessful.  The other is Windows7 for x64-based systems (KB3102429) failed and now Windows Update cannot access the update server ERROR code 8024402C AND cannot access "Mr Fix It" nor download.microsoft.com (404 server not found) from any place that gives a link to 'downloads' now what?

 

TIA CU L8R,

'd' "Lone Wanderer"


Edited by NTxLSUSA, 19 November 2015 - 10:54 AM.

  • 0

Advertisements


#17
NTxLSUSA

NTxLSUSA

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts

RKinner,

 

Thank you for this information on installing the software from Avast! have been doing this procedure for over 35 years.  Have removed Avast! from desktop as it was using about 70% - 90% of processor my laptop has 95% - 98% Idle CPU.  Does not make any sense to me.  Did a search on Avast! Forums and found about 400 complaints from about 2007 - 2015 about HIGH processor usage, removed it and told them GOOD-BYE, staying with MSE (Microspft Sectirotu Essentials).

 

Have run them together since about 2001 without any slow down nor any problems; this system, OptiPlex 960 by Dell Dual Core Intell has run AOK since January 2013, or there abouts.  This started about two months ago and when Avast! 2016 v11.1.2241 came out updated to the latest version and things went down hill from there.  Even still now after removing Avast!, using their Cleaner program, still will not SHUT down, every time at night it will still be logging off the next morning.  Power Switch for four (4) seconds is all that works.

 

Also would like to thank you for the details for setting up as well as the information about doing Boot Time Scan, which I was doing about two (2) - three (3) times a week.  Mine only took about an hour to an hour and fifteen (15) minutes.

 

You are well trained to do the job you presently are doiing

 

TIA, CU L8R,

'd' "Lone Wnaderer"


Edited by NTxLSUSA, 19 November 2015 - 04:42 PM.

  • 0

#18
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,025 posts
  • MVP

OK.  Let's look at your desktop's svchosts in detail:

 

Copy the  next 2 lines

 

tasklist /svc /fi "IMAGENAME eq svchost.exe" > \junk.txt

notepad \junk.txt

 

  Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator.  Right click and Paste or Edit then Paste and the copied lines should appear.

Hit Enter if notepad does not open.  Copy and paste the text from notepad into a reply.  Close notepad.  Close the Command Window.

  • 0

#19
NTxLSUSA

NTxLSUSA

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts

RKinner,

 

Well it is not a very large file so view it below:

 

Junk.TXT:

 

svchost.exe                    660 DcomLaunch, PlugPlay, Power                 
svchost.exe                    728 RpcEptMapper, RpcSs                         
svchost.exe                    920 AudioSrv, Dhcp, eventlog,                   
                                   HomeGroupProvider, lmhosts, wscsvc          
svchost.exe                    956 AudioEndpointBuilder, CscService, hidserv,  
                                   HomeGroupListener, Netman, PcaSvc, SysMain,
                                   TrkWks, UxSms, WdiSystemHost, Wlansvc,      
                                   WPDBusEnum, wudfsvc                         
svchost.exe                   1004 EventSystem, fdPHost, FontCache, netprofm,  
                                   nsi, W32Time, WdiServiceHost,               
                                   WinHttpAutoProxySvc                         
svchost.exe                    260 Appinfo, BITS, Browser, EapHost, IKEEXT,    
                                   iphlpsvc, LanmanServer, ProfSvc, Schedule,  
                                   seclogon, SENS, ShellHWDetection, Themes,   
                                   Winmgmt, wuauserv                           
svchost.exe                    604 gpsvc                                       
svchost.exe                   1184 CryptSvc, Dnscache, LanmanWorkstation,      
                                   NlaSvc, Wecsvc                              
svchost.exe                   1324 BFE, DPS, MpsSvc                            
svchost.exe                   1540 AppHostSvc                                  
svchost.exe                   1568 DiagTrack                                   
svchost.exe                   1700 W3SVC, WAS                                  
svchost.exe                   2720 PolicyAgent                                 
svchost.exe                   3276 FDResPub, SSDPSRV, TBS, wcncsvc             
svchost.exe                   5044 WcsPlugInService                            
svchost.exe                   4128 WerSvc                                      
svchost.exe                   4108 p2pimsvc, p2psvc, PNRPsvc                   

 

TIA, CU L8R,

'd' "Lone Wanderer"

 


  • 0

#20
NTxLSUSA

NTxLSUSA

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts

RKinner,

 

I suppose you may have noticed that my fingers are less educated than myself, they speeellll their own words and then it makes for a challenging read for the other side.

 

TIA, CU L8R,

'd' "Lone Wanderer"

 

PS, Just to let you know, these last two (2) messages were sent from my desktop,  One troubleshooter message on a Windows website gave instructions on how to remove -all update files from Microsoft Secuirty client/Essentials and then do an update and it worked.

 

'd' BAG!!


Edited by NTxLSUSA, 19 November 2015 - 03:26 PM.

  • 0

#21
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,025 posts
  • MVP
This from my desktop:
 
Image Name                     PID Services                                    
========================= ======== ============================================
svchost.exe                    860 DcomLaunch, PlugPlay, Power                 
svchost.exe                    976 RpcEptMapper, RpcSs                         
svchost.exe                   1108 Audiosrv, Dhcp, eventlog,                   
                                   HomeGroupProvider, lmhosts, wscsvc          
svchost.exe                   1140 AudioEndpointBuilder, hidserv,              
                                   HomeGroupListener, Netman, PcaSvc, TrkWks,  
                                   UxSms                                       
svchost.exe                   1192 EventSystem, fdPHost, FontCache, netprofm,  
                                   nsi, W32Time, WdiServiceHost,               
                                   WinHttpAutoProxySvc                         
svchost.exe                   1220 Appinfo, BITS, Browser, iphlpsvc,           
                                   LanmanServer, MMCSS, ProfSvc, Schedule,     
                                   SENS, ShellHWDetection, Themes, Winmgmt,    
                                   wuauserv                                    
svchost.exe                   1308 gpsvc                                       
svchost.exe                   1436 CryptSvc, Dnscache, LanmanWorkstation,      
                                   NlaSvc                                      
svchost.exe                   1880 BFE, DPS, MpsSvc                            
svchost.exe                    788 DiagTrack                                   
svchost.exe                   4164 FDResPub, SSDPSRV, upnphost                 
svchost.exe                   4340 p2pimsvc, p2psvc, PNRPsvc                   
svchost.exe                   5896 WinDefend      
 
This is yours:
 
  svchost.exe                    660 DcomLaunch, PlugPlay, Power                 
svchost.exe                    728 RpcEptMapper, RpcSs                         
svchost.exe                    920 AudioSrv, Dhcp, eventlog,                   
                                   HomeGroupProvider, lmhosts, wscsvc          
svchost.exe                    956 AudioEndpointBuilder, CscService, hidserv,  
                                   HomeGroupListener, Netman, PcaSvc, SysMain,
                                   TrkWks, UxSms, WdiSystemHost, Wlansvc,      
                                   WPDBusEnum, wudfsvc                         
svchost.exe                   1004 EventSystem, fdPHost, FontCache, netprofm,  
                                   nsi, W32Time, WdiServiceHost,               
                                   WinHttpAutoProxySvc                         
svchost.exe                    260 Appinfo, BITS, Browser, EapHost, IKEEXT,    
                                   iphlpsvc, LanmanServer, ProfSvc, Schedule,  
                                   seclogon, SENS, ShellHWDetection, Themes,   
                                   Winmgmt, wuauserv                           
svchost.exe                    604 gpsvc                                       
svchost.exe                   1184 CryptSvc, Dnscache, LanmanWorkstation,      
                                   NlaSvc, Wecsvc                              
svchost.exe                   1324 BFE, DPS, MpsSvc                            
svchost.exe                   1540 AppHostSvc                                  
svchost.exe                   1568 DiagTrack                                   
svchost.exe                   1700 W3SVC, WAS                                  
svchost.exe                   2720 PolicyAgent                                 
svchost.exe                   3276 FDResPub, SSDPSRV, TBS, wcncsvc             
svchost.exe                   5044 WcsPlugInService                            
svchost.exe                   4128 WerSvc                                      
svchost.exe                   4108 p2pimsvc, p2psvc, PNRPsvc    
 
Yours appears to have IIS (Internet Information Services) turned on so it's acting as a web server.  Is that intentional?  If not you can turn it off:  https://support.micr...en-us/kb/320202    

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP