+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Malware, Rat, and Virus Removal (https://hackforums.net/forumdisplay.php?fid=110)
+---- Thread: [Check-Up] So many svchost? (/showthread.php?tid=5734987)
Pages: Pages
1
2
So many svchost? - 1tap - Oct 11, 2017
I need a checkup, svchost is running under my user and there is so many of them?
https://i.gyazo.com/2a323b308f83b7c66892213dcf59d232.png
ON win10
* - Biker BoyZ - Oct 11, 2017
I have so many on win 10 as well. i think its normal.
* - 1tap - Oct 11, 2017
(Oct 11, 2017 05:55 AM)Biker BoyZ Wrote: I have so many on win 10 as well. i think its normal.
Running under your user aswell?
* - 5chn4pp - Oct 11, 2017
Its common but I can also check anyways.
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
- Right click to run as administrator. When the tool opens click Yes to disclaimer.
- Press Scan button.
- It will produce logs called FRST.txt and Addition.txt in the same directory the tool is run from.
- Please copy and paste the logs back here.
* - 1tap - Oct 11, 2017
FRST https://pastebin.com/Y8D0NDbP
Addition https://pastebin.com/F6WbY21h
* - Biker BoyZ - Oct 11, 2017
(Oct 11, 2017 06:02 AM)1tap Wrote: FRST https://pastebin.com/Y8D0NDbP
Addition https://pastebin.com/F6WbY21h
you run my sort of software too. steam and vulkan.
* - 1tap - Oct 11, 2017
(Oct 11, 2017 06:03 AM)Biker BoyZ Wrote: you run my sort of software too. steam and vulkan.
Wth is vulkan? lmao
* - Biker BoyZ - Oct 11, 2017
(Oct 11, 2017 06:04 AM)1tap Wrote: Wth is vulkan? lmao
just a graphics platform.
* - BITW - Oct 11, 2017
Is your Resource usage normal as well? Can you check?
* - 5chn4pp - Oct 11, 2017
Download fixlist.txt file and save it to the Desktop.
NOTE: It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Run FRST/FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.
----------
Please download RogueKiller and save it to your desktop.
- Quit all running programs.
- Right-click on the program and select Run as Administrator to start and when prompted allow it to run.
- Read and accept the EULA (End User License Agreement)
- Click Scan to scan the system.
- When the scan completes select "Report", a log will open. Close the program > Don't Fix anything!
- Post the contents of the log in your next reply.
* - 1tap - Oct 11, 2017
(Oct 11, 2017 06:07 AM)RootLayer_Sales Wrote: Is your Resource usage normal as well? Can you check?
Looks fine
https://i.gyazo.com/151c09e02d7aefaca15dc21f55221552.png
* - BITW - Oct 11, 2017
(Oct 11, 2017 06:14 AM)1tap Wrote: Looks fine
https://i.gyazo.com/151c09e02d7aefaca15dc21f55221552.png
Then i think it is fine. :)
* - 5chn4pp - Oct 11, 2017
(Oct 11, 2017 06:17 AM)RootLayer_Sales Wrote: Then i think it is fine. :)
"Lets ignore the malware since we don't see it on task manager, must be nothing xddd"
Can we stop assuming and actually use our brains here?????
* - BITW - Oct 11, 2017
(Oct 11, 2017 06:23 AM)Bromo-DragonFLY Wrote: "Lets ignore the malware since we don't see it on task manager, must be nothing xddd"
Can we stop assuming and actually use our brains here?????
He should also use a good security provider like an antivirus provider + malware protection.
Otherwise, We can't tell 100% okay.
It seems fine but not guaranteed.
* - 5chn4pp - Oct 11, 2017
(Oct 11, 2017 06:26 AM)RootLayer_Sales Wrote: He should also use a good security provider like an antivirus provider + malware protection.
Otherwise, We can't tell 100% okay.
It seems fine but not guaranteed.
You cant read logs but I can.
I say he is infected, you say he isn't and hes fine.
Why does nobody use logic, lets trust the guy with only 40 posts in the whitehat section, don't worry about that guy with like 3000.