ljossberir
03-15-2004, 09:56 PM
Hey everyone. Recently I posted a topic about the fact that I had a trojan called justin on my comp. I got a fully upgraded Trojan Remover program, which found it on ISNSYS.dll. The program removed it. However, I am still being attacked frequently by trojans (though my firewall is blocking them). I thought the reason for this was the trojan file I had, but now that it is gone... why do these attacks continue?
I have a feeling something must be wrong with my registry, but I don't know how to go about correcting it and no program im using has found it (Nortan, Trojan Remover, Spybot,etc) I noticed something funny, too that I wanted to ask about. There are a ton of processes running on my comp now, much more than I ever remember there being... and there are 4 instances of SVChost running at all times. I don't remember there being so many... could one of these be some kind of trojan signaler that is being run because of some malicious registry entry?
Here's what it looks like:
SVCHost.exe LOCAL SERVICE
SVCHost.exe NETWORK SERVICE
SVCHost.exe SYSTEM
SVCHost.exe SYSTEM
I have a feeling something must be wrong with my registry, but I don't know how to go about correcting it and no program im using has found it (Nortan, Trojan Remover, Spybot,etc) I noticed something funny, too that I wanted to ask about. There are a ton of processes running on my comp now, much more than I ever remember there being... and there are 4 instances of SVChost running at all times. I don't remember there being so many... could one of these be some kind of trojan signaler that is being run because of some malicious registry entry?
Here's what it looks like:
SVCHost.exe LOCAL SERVICE
SVCHost.exe NETWORK SERVICE
SVCHost.exe SYSTEM
SVCHost.exe SYSTEM