|
-
December 17th, 2004, 01:57 PM
#2
Member
more information plz Danielsd
What pc spec dp you have;
operating system.ram.processor etc...
ive just looked at one of your last posts, which led me to think you are having problems with a virus etc that may not be easy to detect.
This may be of some help to you......
You said in a previous post you were having problems with svchost.exe
have you sorted this problem out?
If you want to know what process is using svchost.exe I would recommend Process explorer from http://www.sysinternals.com/
or
To know what services are launching svchost.exe, take a look at your services list in the administrative tools (start -> settings -> control Panel -> Administrative Tools -> Services). There will be a few things there that load that executable
1. Open Regedit (start -> run -> type in regedit -> Press Okay)
2. Back up the registry (file -> Export Registry File -> Set the range to all -> Choose your save in directory -> give the file a name -> click okay)
3. Take a look at the following Reg Key : HKEY_LOCALMACHINE/Software/Microsoft/Windows/CurrentVersion/Run
4. Examine the values associated with Run. These are the items loading on boot. If you don't know what it is, then Google it. Once you know what it is, then either leave it or delete it. Either way, take note of the location of the exe cause you will be looking at the properties later on.
5. Take a look at the following Reg Key : HKEY_LOCALMACHINE/Software/Microsoft/Windows/CurrentVersion/RunOnce
6. repeat step 4.
7. Take a look at the following Reg Key :
HKEY_LOCALMACHINE/Software/Microsoft/Windows/CurrentVersion/RunOnce
8. Repeat step 4.
9. Take a look at the following Reg Key :
HKEY_CURRENTUSER/Software/Microsoft/Windows/CurrentVersion/Run
10. Repeat step 4.
11. Take a look at the following Reg Key :
HKEY_CURRENTUSER/Software/Microsoft/Windows/CurrentVersion/RunOnce
12. Repeat Step 4.
13. Close your registry editor and start finding those executables you just took note of.
14. Once you locate the executables and examine the last modified times of them. If they are windows executables and the times don't correspond with you default install times, then you will probably want to re-extract them from your windows CD Learn how to extract files, or the i386 files if you have them. If the files are not Windows files, but distributed by some other company, perhaps an uninstall and verification of the removal of their exe is in order. Take a look at their install files and see if they provide you with a files/ time list.
hope this helps
The more you know, the less you understand!
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|