Guest tcheuchter Posted January 30, 2012 Share Posted January 30, 2012 security essentials found trojan and removed it (Java type),for last 2days rscmde has been on taskbar(stopped working),have removed svchost.exe from windows/system folder,have ran command prompt sfc/scannow, all system files ok,have not yet run msconfig clean boot or restart error check. My windows mailbox became corrupted but recovered itself,for the last month while browsing internet have been redirected occasionally to forex site or gambling site: essentials found viruses each time and deleted (All were Java). Since rscmde stuck it's ugly head up my cpu jumps between 50% and2% every 5 seconds. Spyhunter and pc cleaner pro cant find anything so i will have to persevere and see what i can do before rscmde starts using all the cpu.Any ideas anybody SYSTEM IS Vista 64 ultimate intel e6850 3ghz 8gb ddr2 ram all updates installed,raid 0 2xbarracuda 250gb built jan -feb 2008. EPISODE 2: partial success,ran cleanboot msconfig reducing startup progs from 60 to 39,used taskmanager to stop rscmde which was running windows error reporting,(werfault.exe)(wermngr.exe)which IMMEDIATELY took cpu from 50% to 0-3% constant and it disappeared from taskbar.Used services.msc to reset windows error reporting from automatic to manual start so it doesn't restart every boot,no doubt windows will complain but i can sort that out later.On java,I updated to latest which i had set to automatic update but it didn't then REMOVED OLDER VERSIONS which it told me to which i did not know as i assumed it would automatically do that ,BIG THANKS TO YOU GUYS!!,THAT SHOULD BE JAVA PROBS KNOCKED ON HEAD. rscmde seems to be rootkit or similar so i downloaded system sweeper to usb flash drive(corsair voyager 16gb)reset boot in bios to voyager 1st but after installing it could not update its files from 2006!!!. there are 2 sweepers ,defenders and essentials +cd iso file option,technet will tell you more.guy called dan from texas back soon I HAVE HAD ENOUGH FOR ONE DAY,At least my cpu shouldn't fry.AGAIN BIG THANKS ,this may help somebody else,try more tomorrow.ian Can you use taskmanager to see what is running and cpu and memory usage,on mine the culprit was a trojan running windows error reporting.if you can you will see the cpu/mem tab look like the himalaya mountains.The svchost file in windows/system is a fake,I have 12 of them running,all system 32 or wow 64.the bad svchost file has a number 6.0.6001.18111 when it should be 6.0.6001.18000,yours may be different but you can compare them and see.IF THIS gives the information you need follow episode 2 above step by step carefully and you might have your pc under control.I am STILL trying to make a standalone system sweeper cd/usb to check mine as i dont think i've got rid of (TROJAN.DOS/ALUREON.A ).as it wont update,technet has more on it .It isn't easy,best of luck.ian Continue reading... Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.