Problems with my PC - DPChallenge Forums

Sigma 30mm f/1.4 EX DC HSM for Nikon

05/03/2005 12:30:39 AM · #1

I'm having some trouble with my PC. It started today, with a terrible slow down on performance. I get an "SVC error" with multiple screen with jsut an ok button at it. Then it says that the system is out of memory.
Pretty strange. CRTL+ALT+DEL doesn't work, neither any click with the right button of the mouse.
Also, the menu bar for internet explorer doesn't show up (and I can't make it show cz the damn right button won't work).
I think it's a virus. Right now I'm running the anti virus from McAfee security center, with it's latest virus definitions.

Does any1 have any idea of what it might be? What is this SVC thingie? It's SVC host or whatever, can't remember what was written on the little screen.

If it doesn't work I'll just erase the whole god damn thing and start from scratch!
But I hope I can fix it........I hate having to reinstall the whole thing.

khdoss

Nikon D300

05/03/2005 12:43:54 AM · #2

Sounds like you may have some nasty spyware.
Run this Windows AntiSpyware

It can really cure a bunch of evils...

Karen

eckoe

Canon EOS-5D Mark III

Canon EF 50mm f/1.8 II

05/03/2005 12:44:52 AM · #3

It could be related to a bit of spyware on your machine. Try downloading Spy Sweeper from www.webroot.com and see if it finds anything.

Canon EF 28-135mm f/3.5-5.6 IS USM

05/03/2005 12:49:43 AM · #4

This version of mcafee (latest with the latest virus defs) does find spyware as well, but every single operation with the pc is damn slow. I can't even open another internet explorer window.
From the last scans I saw, the file count was extremelly fast, like jumping hundreds (the numbers i mean) and now I can see it going, one by one!
It's something eating up all of my memory.

lemondster

Canon EOS-20D

05/03/2005 12:57:34 AM · #5

Start>Run

type in: taskmgr

hit the processes tab;find out what is eating all your RAM or CPU time and END IT

if you want post the name of the program up and someone here can see if it is a virus/spyware

Nikon AF Nikkor 50mm f/1.8D

05/03/2005 01:00:15 AM · #6

Originally posted by lemondster:

damn it won't open!
nothing works. I'll just wait for the AV to finish and I'll try rebooting to check what's that..........sheesh, now that......and I was having a very good day.

David.C

05/03/2005 01:16:11 AM · #7

Originally posted by scuds:

...and I was having a very good day.

...and you still are -- if you are aware of the virus or spyware, your in a lot better shape than if you weren't.

Interestingly enough, I came home from work an hour ago and found my kids/wife had gone somewhere or done something to give my system a virus -- they of course know nothing about it.

*shrug* - that's why I keep the antivirus running. ;)

David

Canon EF 28-135mm f/3.5-5.6 IS USM

05/03/2005 01:28:23 AM · #8

Ok, now I'm at "safe mode" running the administrator login.
Windows starts loading processes and it wont stop until the memory is completely full.
then it starts giving me messages like this:
"failed to load 'SMTP' from CRSS1.OCX. Your version of CRSS1.OCX may be outdated. Make sure you are using the version provided with your application."
Then a second screen:
"system error &H80070583 (-2147023485). This class does not exist"
And then the "out of memory" hit OK button.
It's pissing me off. It's friggin' 2:26 in the morning here and I can't make this god damn thing work.

Britannica, it's the same here. My mom/brother have no idea, and the virus protection is running all the time on all 3 diff logins at my pc.
It always updated (keep it on automatic updates).
God, and tomorrow I have to leave early, won't be able to reformat this shit till late in the evening!

sorry for the language ppz, it's just cz I'm really pissed

lemondster

Canon EOS-20D

05/03/2005 01:40:54 AM · #9

i would go into msconfig (start>run>"msconfig") and go to the services and hide all microsoft services. next i would look through what is left and un-check what looks suspicious/not critical to running your computer. after that i would go into the startup tab and again uncheck what wasnt vital to the computer working.

good luck man

MadMordegon

05/03/2005 01:42:24 AM · #10

Nuke pave then reload.

khdoss

Nikon D300

Sigma 30mm f/1.4 EX DC HSM for Nikon

05/03/2005 01:42:42 AM · #11

from a google search
Sophos virus analysis: Troj/Bancos-BT... clean text files called foxdll.vxd and first.dll, and a clean DLL with the filename crss1.ocx which provides an SMTP Control for Visual Basic files. ...
www.sophos.com/virusinfo/analyses/trojbancosbt.html - 22k - Cached - Similar pages

Sophos virus analysis: Troj/Bancos-BH... The clean DLL "crss1.ocx" will also be created. Troj/Bancos-BH creates the following registry entry in order te be run automatically on computer logon: ...
www.sophos.com/virusinfo/analyses/trojbancosbh.html - 22k - Cached - Similar pages

Message edited by author 2005-05-03 01:43:50.

05/03/2005 01:48:06 AM · #12

on msconfig, under the startup tab there are LOOOOOOOOADS of .EXE files running from c:\windows\help.

From that google search that khdoss did:
"Troj/Bancos-BH is a password-stealing Trojan targeted at certain Brazilian online banking websites.
The Trojan displays fake login screens to a number of Brazilian banks that offer online services in an attempt to steal bank account details."

I'm pretty sure it was my mother! god damn. Just hope she didn't open any of her accounts from this PC today. It freaking records keystrokes!
Not recording what i'm typing here cz all those processes that it starts loading aren't running on safe mode.

damn that's pretty "f*cked up"

05/03/2005 02:02:02 AM · #13

Well I guess it got it cleaned up.
Found out more info on mcafee website, and removed all the registry entries mentioned (there werre over 700 added) and something like 600 mb of .EXE files created by the virus!
Its a trojan used to steal passwords for bank accounts, and it send's itself via FTP to a brazilian website (ftp.kit.net) which is run by the biggest tv company in the country! I might be dropping them an email or 2 just to make sure to them that I'M GONNA KICK THEIR ASSES, LoL!
Lets see what the scan shows, and after that i'll try a reboot!

Sigma 30mm f/1.4 EX DC HSM for Nikon

05/03/2005 02:23:24 AM · #14

Thank you so very much Khdoss.
I'm now back on my regular logon, and it's working like a charm!
I'm gonna have a serious talk to my mother tomorrow, as I'm pretty sure she was the one that opened an email containig the dammed .EXE file, containing the trojan!

khdoss

Nikon D300

05/03/2005 07:31:48 AM · #15

Glad to be of help.. It is what I get paid to do so I guess I should have that part down.. Now my photography that is another matter.... =)
Karen

Originally posted by scuds:

Strikeslip

Canon EOS-5D

Canon EF 100-400mm f/4.5-5.6L IS

05/03/2005 07:42:09 AM · #16

If she did any banking she should change her passwords.
:-(

05/03/2005 11:22:29 AM · #17

Originally posted by Strikeslip:

If she did any banking she should change her passwords.
:-(

ever ysingle password has been changed!
oh damn, forgot the DPC one :-)

sabphoto

Samsung Galaxy S8/S8+

05/03/2005 11:53:24 AM · #18

hey scuds...aside from you computer which I'm glad to hear is working again...hows the tat healing up? Just curious