Jump to content

citydweller

Members
  • Posts

    2
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Okay... I posted here because I thought it was an issue with not using MWbytes right, or if I should be scanning while in normal mode and connected to the network. My impression from reading up was that if I could see it without any super powers, then MWbytes should see it too. Am I wrong?
  2. I've had at least 2 instances of svchost.exe (win7) seeming to come up and hijack all my cpu and most of my memory while running mozilla (firefox and t-bird). I saw a number of people on mozilla.org reporting a similar problem so I thought it was amozilla issue. Today though, when it started acting up I rebooted, and without opening any software I started the task manager. There were 2 instances of svchost.exe already sucking up all the cpu and memory. So, not mozilla's fault. I started Resource Monitor, and saw taht he two svchost's were connected to separate ip's, and were furiously sending and receiving packets. A full trace of those ip's (23.0.160.198 and 23.62.6.65) revealed that they were going to hentzler.de, while pretending to go to akamai.net. So, clearly intruders. Microslop security totally didn't see them, and a friend recommended and praised MWbytes as god-like, so I downloaded it to a flash drive on another device, rebooted my laptop in safe mode, installed it and ran it, twice, with it set o look for rootkit infestations as well. Hours later, MWbytes totally didn't see them either. I'm stumped. Still booted in safe mode, but wondering if I need to reboot in normal mode and connect to the router, then allow the svchost monsters to come alive, for them to be detected. Thoughts on all of this? I'm posting from a tablet, and I really need my laptop back, without hackers, bitcoin miners or terrorists running amok on my pc.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.