Services.exe consuming 50% CPU | Page 2 | Tech Support | Forums

There is one introspection I hasten to share. In fact I cursed myself for not thinking out of the box fast enough. I'd rushed to post it; mercifully Sandeep's problem had been solved by then.

Throughout Sandeep's trouble I inferred that the "naughty Process" was a "visible" process. That is, it was not a trojan or a rootkit. How daft of me. What if the devil was actually invisible?

A rootkit/trojan process is a clever invisible devil of a process which hides itself even from a process manager itself!

I'd like someone to answer this if possible.

1) Does Anvir "visibilize" even an "invisible, rootkit, trojan process" or is it unable to do so?

2) If one wished to capture a rootkit trojan devil in Anvir can one do it this way – Physically count the number of processes in a 1, 2, 3, 4… basis & compare that with the summarized count which Anvir shows you in its icon in the system tray? The difference means you are suffering a rootkit process.

3) Does Anvir's physical process count always match the process count showed in the tray? Or can the tray count be higher – the difference being a pointer that there is a rootkit devil eating the cpu. That's dicey because the devil eating cpu cycles is an "invisible" devil rather than a "visible" devil!

4) Do Anvir & Process Tamer only catch/tame "visible" devils or "invisible" devils as well?

We fortunately have well-heeled stalwarts like Karen & also savvy stalwarts like Ashraf whose high standing in the industry owes itself not only to his intellect & honesty but also to I am sure excellent respect he commands from developers.

Therefore it would help dottechies if we get an answer to this question – does Anvir & Process Tamer catch/tame only visible devils or invisible devils too.

Sandeep – for posterity sake invisible devilry aka rootkit gets caused sometimes in the time gap between uninstalling one antivirus & installing another. Even a good antivirus catches a rootkit only if it enters AFTER that AV is installed AND NOT before that AV is installed.

Given that I shudder to think what invisible rootkit devils lurk in various computers.That's why there is a market for rootkit revealers even though there are good antivirus – it catches invisible devils even if your anti virus does not.

I don't have one yet, but plan to.Which rootkit revealer is best & why? 

Ramesh

Hi Sandeep!

That's the second good news in 2 days. Yesterday Conn09 got out of the woods & today you have. That now leaves only Steelers6 (System Dumps).

It is not important whether getting out of the woods was because of or inspite of someone. When a dottechie gets out of the woods all other dottechies are happy. Like Conn09 you too have left everyone with good learnings for the future

Ramesh