Joe_London
(HijackThis Helper)
Sat Feb 16 2008 09:17 PM
Re: "illegal operations" happening... please help

ccSvcHst.exe is the service display name for Symantec Event Manager
Quote:


Beside the fact that every time Windows starts or shuts down, it always appears a box saying that ccSvcHst.exe is making illegal operations...




Which programme is giving you the report? I suspect this may be a phone home situation.

This entry corresponds to Windows Active Desktop Components, did you deliberately create it yourself?

O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/FEDERI~1/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg



You have a huge number of programmes running at startup and this may just be a resource problem. Please post the full Speck for the Computer.

Open Hijackthis,
Click Config | Misc Tools | Open Unistall Manager.
A list of the entries in Add/remove programs will appear.
Click on Save List...
The list will be saved as 'Uninstall_list.txt'
Copy & Paste the contents in your next reply.

  1. 1. Download ComboFix.exe using either of these links:

    Link 1
    Link 2
    Link 3

  2. Double click on combofix.exe to run the programme & then follow the prompts.

    It will create a new system restore point and registry backup.

    You will be asked to type 1 (One) and then "enter" to run the programe.

    Your firewall may seek permission to allow the programme to run. Check the "Remember" checkbox and click yes

  3. When finished, it will produce a log for you. Save the log then copy and post it back here with a fresh HJT log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Joe.


Contact Us | Privacy statement Main website
Hitwise Top 10 Award Winner - Jan-Mar 2005

About us | Contact us | Link to us | Terms & Conditions | Privacy Policy
© Copyright IPC Media Limited, All rights reserved