svcbas.exe ?

What the hell is that?
svcbas.exe
I cant find ANYTHING on it in Google...or any search engine for that matter...

Well, whatever it is it's currently taking up 50 - 100 % of my Memory Usage in Windows Task Manager!!!! ALWAYS!!!

I know I have the DSO Exploit, ATLEVents, and virtumundo on my computer, because when I run AdAware, and Spybot, they find it, say they removed it,...but it's back. Always.

Internet explorer runs very slow...the mouse wheel, and pointer stick sometimes...the hourglass constantly blinks every 2 seconds.....pages get stuck loading...

I dont have any popups, no crazy toolbar, no new homepage etc...this is just wearing down my computer.
Because the CPUusage is so high, the Fan is ALWAYS on....and that scares me too.

Any ideas???


I'm running XP Home, with no sort of firewall protection, (because of games) etc, and nothing this bad has ever happened.
Oh yeah....I never went to SP2, because of what I've heard about it screwing up programs, etc...so I stuck with SP1. Turned auto-updates off.


...oh yeah, the svcbas.exe program is taking up 436,256K of Memory Usage in Windows Task Manager...

Oh and when I tried to END THE PROCESS or END THE PROCES TREE, it seemed like it DOUBLED the amount of 'K' it used.



ugghhh....


I am on standby with HiJack this...



~Q~

 

Hi Quint,

Get the Fix for SpyBotSD's DSO Exploit Bug here: Spybot - Search and Destroy DSO Exploit Fix

As you've probably realized, you have a Stopguard/Virtumundo related infection.

Please see this thread: READ ME: Virtumundo Problems/Resolution Threads

Please go ahead and send us a HijackThis Log.

Note that your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt file and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

Send us a log and we'll go from there - I'll try to check back when I get a chance. Please note that I am currently working on about 10 of these threads and I'm just a regular forum contributer without a lot of free time - so, be patient


Best,
PP

 

Thanks for the help...

It's going to be a few days before I can try this stuff...but I will be back!!!



~Q~

 

Hey Quint,

Take a look in the Virtumundo link I gave you. Symantec just came out with a removal tool which may help.

PP

 

AWESOME!!!
That worked!!!

..now it's back to CS Source!!!

Thanks Major Geeks!!!!!!


~Q~

 

You're welcome. Happy we could point you to the fix!

PP