[Michael]

To start a thank you to who ever helps me with this.

I have in task manager four files all called svchost.exe and one of them is using 99% of my memory. Could it be I have spyware that has somehow got into my computer ( I am not connected to the Internet because of a problem with the connecting to the wireless net work in my home please rember this in your answers, I do have a 128mb USB flash drive ). I is hard to believe that one file could use 99% of my memory (unless an other program tries to take at the most 15% of it) I have 512mb ram a Pentium 4 processor and a four gigahertz chip.

Just to help here is a list of program that I have downloaded over the past six mouths tried, uninstalled but still have the installation files, IF any are known or suspected malware risk please tell me and I will delete them, thank you.

Age of Empires II - The Conquerors Expansion Trial
Age of Empires II – The Age of Kings Trial
Age of Empires Patch
AOE speed
Any background
Hover match
Wallpaper master
Ad-Adware Se Personal
Ad nuker
CleanUp 4.0
CWShredder
EllA for spam controal
Google Toolbar
HijackThis
Hover IP
Microsoft AntiSpyware
Spybot-Search & Destroy
Advanced Batch Converter
Advanced Gif Animator
UnFREEz 2.1
Antechinus Animator Professional v8.2
Quich Screen Capture 2.2
Flash SWF to GIF AVI converter
GIFSplitter
PrimoPdf
ReaConverter Pro
Squirlz Lite
1st Screensaver Powerpoint Studio
Adobe Acrobat 7
Fast File Splitter
GiPo@MoveOn Boot 1.9.5
WinZip
Audacity 1.2.3
Real Player 10
Windows Media Player 10
iTunes
QuickTime 6
Express Burn
Express Scribe
Express Rip
RecordPad Sound Recorder
Switch
WavePad

I know this is a lot but it equals only under two a week and most of them a very small.

As an after thought here is my hijack this log just in case this helps, I might be getting over the top but this is really annoying to have a really slow computer unless I end the process which seems to have a bad effect on my computer.

Logfile of HijackThis v1.99.1
Scan saved at 10:40:46 PM, on 4/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\hkcmd.exe
E:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
E:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
E:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
E:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\WINDOWS\System32\snmp.exe
E:\Program Files\Microsoft Office\Office\Winword.exe
C:\WINDOWS\System32\svchost.exe
F:\Downloads\internet\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://accountservi...egXPWizCredOnly
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - E:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - E:\Program Files\Norton AntiVirus\NavShExt.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [gcasServ] "E:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Norton Ghost 9.0] E:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [DVDLauncher] "E:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [PCMService] "E:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [D-Link AirPlus XtremeG] C:\Program Files\D-Link\AirPlus XtremeG\AirPlusCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Google Search - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Broken Internet access because of LSP provider 'c:\program files\newdotnet\newdotnet3_88-1.dll' missing
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Norton Ghost - Symantec Corporation - E:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: SAVScan - Symantec Corporation - E:\Program Files\Norton AntiVirus\SAVScan.exe

I am testing out opening and closeing topic in this one, I closes it.

Edited by Michael Buckley, 15 October 2005 - 06:52 PM.