[dba-Tech] Modems

Stuart McLachlan stuart at lexacorp.com.pg
Mon Aug 18 22:10:19 CDT 2003


On 18 Aug 2003 at 21:02, Steven W. Erbach wrote:

> Manager shows SVCHOST.EXE Local Service 11% 21 MB of RAM and growing. When I
> check the Security and System logs on the XP machine I see that every second
> there are 9 event ID 528 events in the Security log. In the System log there
> are 9 or 10 pairs of events (Event ID 7035 and 7036) per second. If I end
> the SVCHOST.EXE Local Service then the task bar becomes accessible. When I
> check the Security and System logs again, there aren't any more of those
> 528, 7035, and 7036 events being generated.
> 
I suspect you may have been hit by a worm.

Is there a file called MSBLAST.EXE anywhere on the system?


 
-- 
Lexacorp Ltd
http://www.lexacorp.com.pg
Information Technology Consultancy, Software Development,System 
Support.





More information about the dba-Tech mailing list