Stuart McLachlan
stuart at lexacorp.com.pg
Mon Aug 18 22:10:19 CDT 2003
On 18 Aug 2003 at 21:02, Steven W. Erbach wrote: > Manager shows SVCHOST.EXE Local Service 11% 21 MB of RAM and growing. When I > check the Security and System logs on the XP machine I see that every second > there are 9 event ID 528 events in the Security log. In the System log there > are 9 or 10 pairs of events (Event ID 7035 and 7036) per second. If I end > the SVCHOST.EXE Local Service then the task bar becomes accessible. When I > check the Security and System logs again, there aren't any more of those > 528, 7035, and 7036 events being generated. > I suspect you may have been hit by a worm. Is there a file called MSBLAST.EXE anywhere on the system? -- Lexacorp Ltd http://www.lexacorp.com.pg Information Technology Consultancy, Software Development,System Support.