Valhalla Legends Archive

General => General Discussion => Topic started by: OuTLawZGoSu on January 02, 2004, 09:52 AM

Title: What process is this?
Post by: OuTLawZGoSu on January 02, 2004, 09:52 AM
What are these programs used for?

dllhost.exe
csrss.exe
lsass.exe
smss.exe
rundll32.exe

I've ot a feeeling that i got a shitload of backdoors. I've got a bunch of processes opening with "NETWORK SERVICE" lable. If you know a good trojan scanner, let me know.

Thx
Title: Re:What process is this?
Post by: iago on January 02, 2004, 10:11 AM
Those are all windows programs.  Although any of them *can* be a virus/trojan, as long as the virus names itself after that process.

To scan, use http://housecall.trendmicro.com
Title: Re:What process is this?
Post by: OuTLawZGoSu on January 02, 2004, 10:26 AM
Quote from: iago on January 02, 2004, 10:11 AM
Those are all windows programs.  Although any of them *can* be a virus/trojan, as long as the virus names itself after that process.

To scan, use http://housecall.trendmicro.com

Well, after dllhost.exe opens, a process called Msdtc.exe opens. I end it's process after it starts. Then I end dllhost. Thx for the site.
Title: Re:What process is this?
Post by: Stealth on January 02, 2004, 11:59 AM
Both of those are potentially valid Windows processes.
Title: Re:What process is this?
Post by: OuTLawZGoSu on January 02, 2004, 12:05 PM
What about LOCOMS~.exe

That opens time to time.
Got HouseCall scanning comp righ now.
Title: Re:What process is this?
Post by: iago on January 02, 2004, 01:36 PM
I've never heard of that one
Title: Re:What process is this?
Post by: OuTLawZGoSu on January 02, 2004, 04:40 PM
Quote from: iago on January 02, 2004, 01:36 PM
I've never heard of that one

Aight, prolly a trojan then. But, I scanned my comp with HouseCall from their website and it didn't find anything. Weird :/
Title: Re:What process is this?
Post by: iago on January 02, 2004, 11:17 PM
It might be spyware or something.  Look for "Spybot Search & Destroy" (NOT Spyhunter!)
Title: Re:What process is this?
Post by: Mesiah / haiseM on January 03, 2004, 02:53 PM
LUCOMSERVER.EXE is part of norton anti virus, at least thats what ive always been under the impression, do you have norton anti virus? if you do, im pretty sure it belongs to norton, if not, it may be *possible* spyware.
Title: Re:What process is this?
Post by: Stealth on January 03, 2004, 03:41 PM
http://www.liutilities.com/products/wintaskspro/processlibrary/lucomserver/
Title: Re:What process is this?
Post by: OuTLawZGoSu on January 05, 2004, 02:47 PM
Ye I got Norton Antivirus.
Title: Re:What process is this?
Post by: Mesiah / haiseM on January 06, 2004, 01:13 AM
am i good or what? :P
Title: Re:What process is this?
Post by: Adron on January 06, 2004, 04:14 AM
Quote from: MesiaH on January 06, 2004, 01:13 AM
am i good or what? :P

Stealth's response was better.