SVCHOST.EXE liika aktiivinen?

Discussion in 'Kannettavat tietokoneet' started by magnuken, Mar 13, 2015.

  1. magnuken

    magnuken Newbie

    Joined:
    Mar 13, 2015
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Tervehdys, ongelma olisi seuraava:

    Windows XP:n SVCHOST.EXE prosessi "naputtaa" useita kertoja sekunnissa Buffalon reitittimeen ja seurauksena on läppärin kovin hidas toiminta. Olen ajellut vaikka kuinka monia haittaohjelmien tunnistimia mutta mitään ei ole löytynyt.
    Microsoftin ProcessMonitor näyttää tilanteesta seuraavaa (pieni vajaan sekunnin otos):
    13:39:58,7424341,"svchost.exe","1496","TCP Send","LENOVO-KM.lan:2573 -> buffalo.setup:49152","SUCCESS","Length: 658"
    13:39:58,7540185,"svchost.exe","1496","TCP Receive","LENOVO-KM.lan:2573 -> buffalo.setup:49152","SUCCESS","Length: 189"
    13:39:58,7548407,"svchost.exe","1496","TCP Receive","LENOVO-KM.lan:2573 -> buffalo.setup:49152","SUCCESS","Length: 333"
    13:39:58,7549340,"svchost.exe","1496","TCP Disconnect","LENOVO-KM.lan:2573 -> buffalo.setup:49152","SUCCESS","Length: 0"
    13:39:58,7635460,"svchost.exe","1496","TCP Send","LENOVO-KM.lan:2574 -> buffalo.setup:49152","SUCCESS","Length: 666"
    13:39:58,7780984,"svchost.exe","1496","TCP Receive","LENOVO-KM.lan:2574 -> buffalo.setup:49152","SUCCESS","Length: 189"
    13:39:58,7789130,"svchost.exe","1496","TCP Receive","LENOVO-KM.lan:2574 -> buffalo.setup:49152","SUCCESS","Length: 349"
    13:39:58,7790044,"svchost.exe","1496","TCP Disconnect","LENOVO-KM.lan:2574 -> buffalo.setup:49152","SUCCESS","Length: 0"
    jne. loputtomiin jatkuu

    Osaisiko joku vinkata mistä päin yleensäkin vikaa lähteä hakemaan?
     
    magnuken, Mar 13, 2015
    #1
  2. Tinke8

    Tinke8 Active member

    Joined:
    Jan 23, 2010
    Messages:
    1,191
    Likes Received:
    61
    Trophy Points:
    78
    Tinke8, Mar 15, 2015
    #2
  3. magnuken

    magnuken Newbie

    Joined:
    Mar 13, 2015
    Messages:
    7
    Likes Received:
    0
    Trophy Points:
    1
    Kiitoksia ohjeesta. Nuo automaattiset päivitykset minulla olikin jo poissa. Yritin linkissä neuvottuja päivityksiä mutta ei auttanut.

    Naputtelun sain sitten pois disabloimalla prosessin "Remote access connection manager". Tuo nyt ei ole ihan hyvä konsti eikä juurisyytä siis löytynyt, mutta teki kuitenkin koneesta jälleen sukkelan! Liekö kuitenkin kyseessä jokin troijalainen?
     
    magnuken, Mar 16, 2015
    #3
  4. RatCon

    RatCon Senior member

    Joined:
    Jan 18, 2010
    Messages:
    9,502
    Likes Received:
    574
    Trophy Points:
    193
    Mitä skannauksia olet ajanut, Anti-Malwaren myös ?
     
    RatCon, Mar 22, 2015
    #4

Share This Page