Virus sau parte din Windows

#1
robertbfk

Posted 20 February 2017 - 20:30

New Member

Grup: Junior Members
Posts: 23
Înscris: 29.06.2016

Buna ziua, am urmatoarea problema si ma adresez aici in speranta ca ma poate ajuta cineva:
Am in task manager processul numit : issch.exe, care se gaseste in : C:\Users\X\AppData\Local\Programs\ISSCH.
Apare dupa circa 10 minute de la pornirea sistemului, daca ii dau end task nu mai apare, consuma 20 % din procesor si 200 m ram .
Din cate am citit poate fi InstallShield Update Service , serviciu al sistemului de operare sau bit coint miner ceva de genul.

Va rog , daca ma puteti ajuta, as dori sa stiu cum aflu ce este mai exact, si cum scap definitiv de el .

Multumesc !!!!

Back to top

#2
YOUR_GOD

Posted 20 February 2017 - 20:42

Not assigned

Grup: Senior Members
Posts: 30,915
Înscris: 01.01.2010

Esti ok, no worries.

Back to top

#3
tidicristi

Posted 20 February 2017 - 21:21

Senior Member

Grup: Senior Members
Posts: 8,276
Înscris: 06.08.2007

Vezi aici la devirusare -> https://forum.softpe...hide-topic-nou/

Parerea mea ruleaza urmatoarele :
- Adware Removal Tool by TSA ->  https://www.techsupp...e-removal-tool/
- ZHPCleaner ->  http://www.softpedia...HPCleaner.shtml
- Adwcleaner ->  http://www.softpedia...dwCleaner.shtml

Back to top

#4
_-_

Posted 20 February 2017 - 21:31

- Magister Ludi -

Grup: Moderators
Posts: 22,901
Înscris: 21.03.2013

Ce zice Process Explorer despre el?
Ai incercat sa scanezi fisierul pe Virus Total?

Edited by _-_, 20 February 2017 - 21:32.

Back to top

#5
Tort

Posted 20 February 2017 - 22:54

Member

Grup: Members
Posts: 998
Înscris: 02.01.2016

Verifica cu CCleaner ce programe ai la startup si opreste-le pe cele inutile.

Back to top

#6
mhanor

Posted 20 February 2017 - 23:04

Senior Member

Grup: Senior Members
Posts: 2,019
Înscris: 12.01.2004

Probabil este un bitcoin miner. Vezi si gradul de incarcare al GPU-ului, cu AIDA64sau GPU-Z.

Back to top

#7
mihai96alex

Posted 20 February 2017 - 23:25

Junior Member

Grup: Members
Posts: 235
Înscris: 17.06.2009

Nu stiu daca merge pe problema prezentata, si nu pot sa verific pentru procesul / serviciul respectiv, pentru ca nu apare pe pc-ul meu, dar o metoda de diagnostic generala ar fi urmatoarea: Scrii 'msconfig' in Start Menu, intri in tabul Services, bifezi casuta "Hide all Microsoft Services" si dezactivezi tot ce gasesti acolo (prin Disable All).

Alternativ, poate poti sa gasesti in lista cu servicii Microsoft chiar serviciul in cauza (InstallShield ...).

Back to top

#8
robertbfk

Posted 21 February 2017 - 15:35

New Member

Grup: Junior Members
Posts: 23
Înscris: 29.06.2016

Multumesc pentru raspunsuri!!!
   Am scanat cu cele trei softuri : Adware Removal Tool by TSA, ZHP Cleaner si Adwcleaner, au gasit ceva , am sters, restart si tot apare in task manager.
In process Explorer se gaseste la svchost si spune : Path : access is denied . Private Bytes : 2.119.328 K Working Set  116.548 k  PID 9608   Company Name   nimic.
Virustotal spune ca marea majoritate a gasit Win64.BitCoinMiner.awd
Am debifat de la startup programele care inutile
Am verificat gradul de temperatura a placii video, este undeva la 70 .  Nu cred ca stiu sa ma uit la nivelul de "stres"
Am facut asa cum mi-a spus mihai96alex    dar nu am gasit nici un serviciu InstallShield.

Cel mai probabil, din care observ este un Bit Coin Miner, acum , nu stiu cum si de unde l-am achizitionat si cum pot scapa de el. Presupun ca reinstalarea Windows-ului nu are nici un efect...

Va multumesc inca o data !!!

Back to top

#9
robertbfk

Posted 23 February 2017 - 09:05

New Member

Grup: Junior Members
Posts: 23
Înscris: 29.06.2016

Buna ziua. revin cu un update , in CCleaner, la sectiunea Tools/Startup/ Scheduled Task am gasit acest : InstallShield Update Service "C:\Users\X\AppData\Local\Programs\ISSCH\issch.exe" 873b742E92CC14e356423b840b28dd8a4b8e5556.

Back to top

Anunturi

Bun venit pe Forumul Softpedia!

Virus sau parte din Windows

#1 robertbfk Posted 20 February 2017 - 20:30

#2 YOUR_GOD Posted 20 February 2017 - 20:42

#3 tidicristi Posted 20 February 2017 - 21:21

#4 _-_ Posted 20 February 2017 - 21:31

#5 Tort Posted 20 February 2017 - 22:54

#6 mhanor Posted 20 February 2017 - 23:04

#7 mihai96alex Posted 20 February 2017 - 23:25

#8 robertbfk Posted 21 February 2017 - 15:35

#9 robertbfk Posted 23 February 2017 - 09:05

Anunturi

▶ 0 user(s) are reading this topic

Sign In

#1
robertbfk

Posted 20 February 2017 - 20:30

#2
YOUR_GOD

Posted 20 February 2017 - 20:42

#3
tidicristi

Posted 20 February 2017 - 21:21

#4
_-_

Posted 20 February 2017 - 21:31

#5
Tort

Posted 20 February 2017 - 22:54

#6
mhanor

Posted 20 February 2017 - 23:04

#7
mihai96alex

Posted 20 February 2017 - 23:25

#8
robertbfk

Posted 21 February 2017 - 15:35

#9
robertbfk

Posted 23 February 2017 - 09:05