Virus after SP3 download-please help

aliEnRIK

Download PROCESS EXPLORER
http://www.filehippo.com/download_process_explorer/
(Make sure you select DOWNLOAD LATEST VERSION)

Run it
Goto FILE and select SAVE AS
Post the txt file here so we can see whats running

gnvqsos

aliEnRIK wrote: »

Download PROCESS EXPLORER
http://www.filehippo.com/download_process_explorer/
(Make sure you select DOWNLOAD LATEST VERSION)

Run it
Goto FILE and select SAVE AS
Post the txt file here so we can see whats running

One problem is that I cant access the net at present
John

aliEnRIK

gnvqsos wrote: »

One problem is that I cant access the net at present
John

haha

I apologise

Not had much sleep after nightshifts

aliEnRIK

Heres one so you can compare most of what windows is running (Anything microsoft related is clearly fine) ~

Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 63.70 0 K 24 K
Interrupts n/a 0 K 0 K Hardware Interrupts
DPCs n/a 0 K 0 K Deferred Procedure Calls
System 4 0.78 52 K 2,140 K
smss.exe 288 264 K 800 K Windows Session Manager Microsoft Corporation
csrss.exe 424 1,308 K 3,768 K Client Server Runtime Process Microsoft Corporation
conhost.exe 2068 492 K 2,296 K Console Window Host Microsoft Corporation
wininit.exe 496 932 K 3,372 K Windows Start-Up Application Microsoft Corporation
services.exe 544 4,508 K 7,244 K Services and Controller app Microsoft Corporation
svchost.exe 716 2,892 K 6,804 K Host Process for Windows Services Microsoft Corporation
dllhost.exe 3056 1,140 K 3,988 K COM Surrogate Microsoft Corporation
svchost.exe 816 3,004 K 5,816 K Host Process for Windows Services Microsoft Corporation
atiesrxx.exe 864 816 K 3,072 K AMD External Events Service Module AMD
atieclxx.exe 1288 1,344 K 4,520 K AMD External Events Client Module AMD
svchost.exe 944 14,824 K 15,968 K Host Process for Windows Services Microsoft Corporation
audiodg.exe 3564 17,092 K 15,656 K Windows Audio Device Graph Isolation Microsoft Corporation
svchost.exe 984 52,224 K 59,696 K Host Process for Windows Services Microsoft Corporation
dwm.exe 1832 32,472 K 43,976 K Desktop Window Manager Microsoft Corporation
WUDFHost.exe 3992 1,572 K 5,124 K Windows Driver Foundation - User-mode Driver Framework Host Process Microsoft Corporation
svchost.exe 1012 22,620 K 33,516 K Host Process for Windows Services Microsoft Corporation
taskeng.exe 1964 1,140 K 4,364 K Task Scheduler Engine Microsoft Corporation
svchost.exe 1172 6,628 K 11,832 K Host Process for Windows Services Microsoft Corporation
svchost.exe 1372 15,536 K 17,460 K Host Process for Windows Services Microsoft Corporation
spoolsv.exe 1524 5,160 K 10,336 K Spooler SubSystem App Microsoft Corporation
sched.exe 1564 3,404 K 988 K Antivirus Scheduler Avira GmbH
svchost.exe 1584 8,988 K 9,800 K Host Process for Windows Services Microsoft Corporation
taskhost.exe 1760 7,032 K 7,052 K Host Process for Windows Tasks Microsoft Corporation
AERTSrv.exe 112 456 K 1,696 K Andrea filters APO access service (32-bit) Andrea Electronics Corporation
avguard.exe 432 86,112 K 14,036 K Antivirus On-Access Service Avira GmbH
avshadow.exe 2044 956 K 3,340 K AntiVir shadow copy service Avira GmbH
svchost.exe 328 5,616 K 10,752 K Host Process for Windows Services Microsoft Corporation
lxddcoms.exe 440 1,420 K 4,436 K Printer Communication System
FWService.exe 1856 20,232 K 13,208 K PC Tools Firewall Plus service PC Tools
svchost.exe 2136 1,108 K 4,124 K Host Process for Windows Services Microsoft Corporation
SDWinSec.exe 2228 4,600 K 8,192 K Spybot-S&D Security Center integration Safer Networking Ltd.
SearchIndexer.exe 3364 21,188 K 15,040 K Microsoft Windows Search Indexer Microsoft Corporation
svchost.exe 3748 1,028 K 3,672 K Host Process for Windows Services Microsoft Corporation
svchost.exe 3784 1,264 K 4,220 K Host Process for Windows Services Microsoft Corporation
wmpnetwk.exe 1152 8,548 K 7,412 K Windows Media Player Network Sharing Service Microsoft Corporation
svchost.exe 3448 9,176 K 11,704 K Host Process for Windows Services Microsoft Corporation
lsass.exe 560 3,204 K 8,688 K Local Security Authority Process Microsoft Corporation
lsm.exe 572 1,296 K 3,128 K Local Session Manager Service Microsoft Corporation
csrss.exe 504 1,868 K 6,380 K Client Server Runtime Process Microsoft Corporation
conhost.exe 2104 680 K 2,860 K Console Window Host Microsoft Corporation
winlogon.exe 608 1,816 K 4,896 K Windows Logon Application Microsoft Corporation
explorer.exe 1860 26,940 K 48,340 K Windows Explorer Microsoft Corporation
avgnt.exe 2468 5,044 K 2,336 K Antivirus System Tray Tool Avira GmbH
RtHDVCpl.exe 2640 6,516 K 7,432 K HD Audio Control Panel Realtek Semiconductor
jusched.exe 2880 912 K 3,536 K Java(TM) Update Scheduler Sun Microsystems, Inc.
FirewallGUI.exe 2888 14,780 K 6,144 K PC Tools Firewall GUI PC Tools
GrooveMonitor.exe 2896 2,808 K 7,548 K GrooveMonitor Utility Microsoft Corporation
firefox.exe 708 34.96 1,130,936 K 1,151,320 K Firefox Mozilla Corporation
peerblock.exe 2268 16,800 K 19,488 K PeerBlock PeerBlock, LLC
i-Speeder.exe 3132 1,304 K 4,396 K i-Speeder Micro-Star International Co.,Ltd.
taskmgr.exe 3396 0.78 2,208 K 8,736 K Windows Task Manager Microsoft Corporation
openvpn-gui-1.0.3.exe 1420 1,664 K 6,268 K
openvpn.exe 2420 2,016 K 6,220 K
ImgBurn.exe 2216 41,616 K 47,780 K ImgBurn - The Ultimate Image Burner! LIGHTNING UK!
notepad.exe 2132 1,076 K 5,568 K Notepad Microsoft Corporation
procexp.exe 2456 0.78 16,632 K 31,340 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com

fiddiwebb

gnvqsos wrote: »

One problem is that I cant access the net at present
John

Have you tried safe mode with networking?

Oooops sorry, just saw your PS about not being able to get into safe mode, what happens when you try and also same with trying to run SAS?

You are trying to run SAS from a USB memory stick and not trying to load it onto the infected computer and running it from there?

Donnie

Was I writing to myself??

fiddiwebb

Donnie wrote: »

Was I writing to myself??

No idea Donnie, would you like me to write to you?

Donnie

fiddiwebb wrote: »

No idea Donnie, would you like me to write to you?

Thanks...you just did.

fiddiwebb

Donnie wrote: »

Thanks...you just did.

Tis my pleasure, I'm here to serve

gnvqsos

Donnie wrote: »

Was I writing to myself??

Sorry I had no intention to cause offence.I have a few things to save but in general it can be wiped.It is an eight year old Athlon based model -a Vulcan purchased from John Lewis.I hope thats enough details John