unknown processes????

unknown processes????

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
unknown processes???? RobLee 06-28-2005
Posted by =?Utf-8?B?Um9iTGVl?= on June 28, 2005, 4:48 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
hi all,
in my task manager there are processes taking up memory and i am unsure as
to what they are doing, here is a list.. svchost.exe=24,500k
explorer.exe=16,000k csrss.exe=5,228k services.exe=4,212k
spoolsv.exe=2,192k. i have done a scan with spybot and ad-aware and removed
critical threats but one remains and i am unsure whether or not to remove it
because it is a registry key== Name:AltnetBDE
Category:Data Miner
Object Type:Regkey
Size:24 Bytes
Location:software\altnet\
Last Activity:6-28-2005
Relevance:Low
TAC index:4
Comment:
Description:Installs unsolicited.Connects to a remote system without the
user's awareness to transmit/receive information

Could this be the cause of memory usage, i have already removed the files it
relates to just not the key. can anyone help please.

Posted by Malke on June 28, 2005, 6:13 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
RobLee wrote:

> hi all,
> in my task manager there are processes taking up memory and i am
> unsure as
> to what they are doing, here is a list.. svchost.exe=24,500k
> explorer.exe=16,000k csrss.exe=5,228k services.exe=4,212k
> spoolsv.exe=2,192k. i have done a scan with spybot and ad-aware and
> removed critical threats but one remains and i am unsure whether or
> not to remove it because it is a registry key== Name:AltnetBDE
> Category:Data Miner
> Object Type:Regkey
> Size:24 Bytes
> Location:software\altnet\
> Last Activity:6-28-2005
> Relevance:Low
> TAC index:4
> Comment:
> Description:Installs unsolicited.Connects to a remote system without
> the user's awareness to transmit/receive information
>
> Could this be the cause of memory usage, i have already removed the
> files it relates to just not the key. can anyone help please.

Altnet is malware. Your computer is still not clean. Try again. Make
sure you have updated Spybot and Ad-aware before running them and do
the scans in Safe Mode. There are more detailed instructions about
removing malware at these links:

http://mvps.org/winhelp2002/unwanted.htm
http://aumha.net - look under "Security" for various forums
http://www.aumha.org/a/parasite.htm
http://rgharper.mvps.org/cleanit.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by PA Bear on June 28, 2005, 8:20 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
See http://www.lavasoftnews.com/ms/display_main.php?tac=AltnetBDE

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/archive/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine.blogspot.com/

When all else fails, HijackThis v1.99.1
(http://aumha.net/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware. **Post
your log to http://forums.spywareinfo.com/,
http://castlecops.com/forum67.html or http://aumha.net/viewforum.php?f=30
for expert analysis, not here.**

--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE) & Security


RobLee wrote:
> hi all,
> in my task manager there are processes taking up memory and i am unsure as
> to what they are doing, here is a list.. svchost.exe=24,500k
> explorer.exe=16,000k csrss.exe=5,228k services.exe=4,212k
> spoolsv.exe=2,192k. i have done a scan with spybot and ad-aware and
> removed critical threats but one remains and i am unsure whether or not
> to remove it because it is a registry key== Name:AltnetBDE
> Category:Data Miner
> Object Type:Regkey
> Size:24 Bytes
> Location:software\altnet\
> Last Activity:6-28-2005
> Relevance:Low
> TAC index:4
> Comment:
> Description:Installs unsolicited.Connects to a remote system without the
> user's awareness to transmit/receive information
>
> Could this be the cause of memory usage, i have already removed the files
> it relates to just not the key. can anyone help please.


Similar ThreadsPosted
Suspicious processes!!!! September 15, 2005, 10:28 pm
pass username/password between processes November 1, 2005, 2:50 am
rights to execute remote processes March 28, 2007, 7:58 am
How to enable Memory protection between different processes of one account? April 30, 2006, 6:16 am
Access to "Show processes from all users" in task manager October 27, 2005, 3:09 am
Hide system processes monitoring to remote computers under XP November 7, 2007, 6:19 am
Unknown ID and I even didn't add him or her.... August 23, 2005, 5:05 pm
UNKNOWN CONTACT August 21, 2005, 6:33 pm
Unknown pop-up on taskbar. November 14, 2005, 5:56 pm
SOME UNKNOWN SPYWARE... January 14, 2006, 2:16 pm

The site map in XML format XML site map

Contact Us | Privacy Policy