Problem ccsvchst.exe

ccsvchst.exe makes my cpu usage 50% all the time :((

help me

I'm using nis 2010 v17.7.0.12


lamqsb wrote:

ccsvchst.exe makes my cpu usage 50% all the time :((

help me


HI lamqsb

 

Welcome to the Norton Community Forums

 

How long has this been happening? Are you indicating that this is continuous and does not fall below 50%?

this morning, after I extracted a .rar file and I think that there's a virus or sth like that

this is the warning

6763iD31421C0B916CF72


lamqsb wrote:

this morning, after I extracted a .rar file and I think that there's a virus or sth like that

this is the warning

 


Hi lamqsb

 

Could you look into your security history for any entry showing this threat and click on more details then post a screenshot of what is there.

6765i4CF2AE032097C1DB6767iE81DEB83C61E0422

Hi lamqsb

 

Thanks for the screenshots - it will take a little while for them to be approved by a moderator so that we can see them.

ccsvchst.exe makes my cpu usage 50% all the time :((

help me

lambqsb:

 

You will see in your picture the drop down menu where it says recent history.  Click on that and you will find "Quarantine" and "resolved threats."   When you find that, please follow mdturner's suggestion again.  What you are seing is mainly the network activities.

Unfortunately, there's nothing related to DOS 7.419

NIS just detects DOS 7.419 and does nothing to it

 

Here is some information about DOS 7.419, I hope it's useful

http://www.exterminate-it.com/malpedia/remove-dos

http://www.computerhope.com/vd.htm

 

A friend of mine told me to reinstall the OS :(

Please help me


lamqsb wrote:

Unfortunately, there's nothing related to DOS 7.419

NIS just detects DOS 7.419 and does nothing to it

 

 


Hi lamqsb

 

Could you look in "unresolved risks" and also scroll through the "Full History" for entries relating to this at the time you downloaded it and also when you did the extraction.

 

It would also be useful if you run liveupdate and then run a full scan on your system.

 

 

If it blocks it, it may be in intrusion prevent logs.  You should not have to reinstall your O/S.  More information as it regards your own machine would be best.

It's very nice of you all to help me. Thanks!

@mdturner:

This is what I downloaded this morning to test NIS

 

about 6000 viruses!!!

 

I extracted this file and NIS could not recognize 1768 and I had to delete them


lamqsb wrote:

It's very nice of you all to help me. Thanks!

@mdturner:

This is what I downloaded this morning to test NIS

 

about 6000 viruses!!!

 

I extracted this file and NIS could not recognize 1768 and I had to delete them


Hi lamqsb

 

Since you intended to download a bunch of viruses to test your system I presume that you took the precaution of imaging your system prior to this so that you could recover if it irreparably damaged your system. Do you have a full backup of your system?

lambqsb:

 

The user is a very important part of the security of the machine.  The security software is only another part of that security, not a magic bullet.  If you deliberately go out of your way to install malware to "test" your antivirus, you will inevitably become infected. 

 

It might have been more usefull to submit the files to Symantec so that definitions could be updated to prevent this particular infection.

 

If you are unable to remediate this yourself, you will need to take advantage of the services of one of these malware removal forums.

 

www.bleepingcomputer.com

http://www.geekstogo.com/forum/

http://www.cybertechhelp.com/forums/

http://forums.whatthetech.com/

http://remove-malware.com/forums/

 

 

I have a backup of my system but not full. However, it's still useful.

It was my fault that I underestimated these viruses. I thought that they could not harm my PC at all because they were all old.

So, what I should do now is to use the backup, isn't it?

Hello lamqsb

 

Please do not post links and passwords to bad sites here. Anyone reading this thread can now infect their machines too.


lamqsb wrote:

I have a backup of my system but not full. However, it's still useful.

It was my fault that I underestimated these viruses. I thought that they could not harm my PC at all because they were all old.

So, what I should do now is to use the backup, isn't it?


Hi lamqsb

 

You could either visit one of the forums that delphinium has suggested to see if they can help or restore your system from the backups that you have.

 

Given the sheer volume of malware you have allowed onto your system I think it will be quite a big undertaking to clean it all up.


floplot wrote:

Hello lamqsb

 

Please do not post links and passwords to bad sites here. Anyone reading this thread can now infect their machines too.


Hi flo

 

I have already asked a mod to remove them. Thanks for the reminder though.


lamqsb wrote:

It's very nice of you all to help me. Thanks!

@mdturner:

This is what I downloaded this morning to test NIS

 

about 6000 viruses!!!

 

I extracted this file and NIS could not recognize 1768 and I had to delete them


 

Hi lamqsb,

 

While I applaud you for your ingenuity what you have done is very risky indeed. There are precautions one should take before venturing down this path.

 

  • First, one should never do this on a production machine but only on a test machine.
  • Even doing this on a test machine can cause cross-infections of other machines on your home network if you don't completely isolate the test machine.
  • You should perform an image backup before even starting something like this.

Best wishes.

Allen