100% cpu auslastung wegen leerlaufprozess oder svchost.exe

#16 ««
deinstalliere:
C:\Programme\Save

««
scanne mit Counterspy (2 Wochen free) - poste den Report
http://www.virus-protect.org/counterspy1.html
__________
Gruss
Pinguin

bin dabei, meine Seite + Proggies zu aktualisieren: http://www.virus-protect.org/

#17 is das das richtige, was du haben willst??

Scan History Details
Start Date: 13.01.2008 14:58:37
End Date: 13.01.2008 16:44:07
Total Time: 105 Min 30 Sec
Detected security risks

CasinoOnNet Potentially Unwanted Program more information...
Details: CasinoOnNet is an online gambling application that requires users to download software in order to play.
Status: Ignored

Files detected
C:\Dokumente und Einstellungen\Richi\Desktop\Pacific Poker.lnk
C:\Dokumente und Einstellungen\Richi\Startmenü\Pacific Poker.lnk
D:\PacificPoker\PacificPoker\ListProc.exe
D:\PacificPoker\PacificPoker\Shared_.dll
D:\PacificPoker\Shared_.dll

Registry entries detected
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\POKERINSTALLER
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\POKERINSTALLER
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\POKERINSTALLER
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\POKERINSTALLER


WhenU.Save Adware (General) more information...
Details: WhenU.SaveNow is an adware application that displays pop-up advertising on the desktop in response to users' web browsing.
Status: Quarantined

Registry entries detected
HKEY_LOCAL_MACHINE\Software\Classes\WUSN.1
HKEY_LOCAL_MACHINE\Software\Classes\WUSN.1


Bifrost Backdoor more information...
Details: Bifrost is an advanced remote administration tool that allows users to remotely control computers that are behind firewalls and routers.
Status: Quarantined

Registry entries detected
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\WGET


PartyPoker Potentially Unwanted Program more information...
Details: PartyPoker is an online gambling application that requires the user to download its software in order to play.
Status: Ignored

Files detected
D:\Opera\profile\images\de.partypoker.com.ico
D:\System Volume Information\_restore{3641652D-F5C2-4A1B-B0F8-DF92038728E9}\RP277\A0062715.ico


Trojan-Downloader.Zlob.Media-Codec Trojan Downloader more information...
Details: Trojan-Downloader.Zlob.Media-Codec is a program that typically purports to be a needed upgrade to Windows Media Player in order to view adult oriented videos on certain websites. However, Trojan-Downloader.Zlob.Media-Codec actually downloads and installs additional malware on the user's machine.
Status: Quarantined

Registry entries detected
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON


Joke Program Joke Program more information...
Status: Ignored

Files detected
E:\Programme\Moin.exe
I:\Richard\Programme\Moin.exe


Cookie: Tracking Cookies Cookie (General) more information...
Details: Cookies are small "data tags" that web sites store on PCs in order to recognize unique visitors. Cookies are used to identify returning visitors who have registered for special services; to measure and analyze visitors' use of web site features; to count unique visitors to web pages; and to allow web surfers to use virtual "shopping carts." Online advertising networks use cookies to track users across web sites and to measure ad impressions and click-throughs.
Status: Deleted

Cookies detected
c:\dokumente und einstellungen\richi\cookies\richi@atdmt[2].txt
c:\dokumente und einstellungen\richi\cookies\richi@doubleclick[1].txt

#18

Zitat

Registry entries detected
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON
HKEY_USERS\S-1-5-21-796845957-1677128483-839522115-1004\SOFTWARE\ONLINE ADD-ON

lasse das auch loeschen, oder Quarantaene ....
dann berichte, wie es mit den Leerlaufprozessen steht
__________
Gruss
Pinguin

bin dabei, meine Seite + Proggies zu aktualisieren: http://www.virus-protect.org/

#19 hab ich gestern schon gemacht. leider hat er heute wiederma ne weile 100% auslastung gehabt (svchost.exe). den leerlaufprozess kann man schwerer kontrollieren, da dies nicht so häufig aus 100% stand!


is echt zum kotzten mit dem rechner. also der leerlaufprozesss is meist sehr hoch wenn ich den pc anschalte und svchost.exe gerade wie es ma lustig is. das is manchma so 3-5min auf 100% und dann gehts ma wieder.....total komisch!