Windows upptäckte en "backdoor".

[bridge]

Hej, tror jag hade nån typ av virus.

Datorn låste sig när jag startade den hela tiden.

När jag tittade på vilka processer som tog upp allt CPU upptäckte jag följande processer:

lxroms.exe

LUCROMS~1.EXE

wuauclt.exe

ekrn.exe

Alla dessa verkar ha nånting att göra med brandväggens uppdateringar.

Jag tog bort mitt gamla AV och la till ett annat märke.

Då började det funka och då tog Windows bort ett antal skadliga filer, bl.a. en s.k. "backdoor".

Mitt AV-program hittade dock inga virus eller trojaner.

Min fråga, hur oroad bör jag vara, och vad borde jag göra med datorn för att vara säker?

[Cylox]

Säkert trojaner,du får köra ett anti trojan program...

[Mjukis]

http://www.google.se

 

 

Process exename: lxcrcoms.exe or lxcrcoms

 

Relates to: service o23 windowssystem32 lxcr_device program forums process printer support task manager unknown owner symantec tech

Security risk: N/A

Part of OS: N/A

------------------------------------------------

The process LiveUpdate Engine COM Module belongs to the software LiveUpdate or LUCOMS~1.EXE by Symantec Corporation (http://www.symantec.com).

 

Description: File lucoms~1.exe is located in a subfolder of "C:\Program Files". The file size on Windows XP is 2,975,352 bytes.

The service can be started or stopped from Services in the Control Panel or by other programs. The program has no visible window. lucoms~1.exe is a Verisign signed file. The file is digitally signed. The program is not active. File is hidden. It is not a Windows system file. lucoms~1.exe is able to monitor applications. Therefore the technical security rating is 32% dangerous, however also read the users reviews.

----------------------------

Windows errors related to wuauclt.exe?

 

Wuauclt.exe is the AutoUpdate Client of Windows Update and is used to check for available updates (for the various versions of the MS Windows platform) from Microsoft Update. The wuauclt.exe file is included in the Task Manager’s list of active processes when it is waiting for a response or an action to be performed by the user.

----------------------------------

ekrn.exe file information

 

The process Eset Service belongs to the software ESET NOD32 Antivirus or ESET Smart Security or NOD32 v3.0.642 FiX1.2 by or ekrn.exe by ESET.

 

Description: File ekrn.exe is located in a subfolder of "C:\Program Files". Known file sizes on Windows XP are 468,224 bytes (55% of all occurrence), 472,320 bytes, 455,936 bytes.

The program has no visible window. It is a Verisign signed file. The file is certified by a trustworthy company. File ekrn.exe is not a Windows system file. The application listens for or sends data on open ports to LAN or Internet. The application can be uninstalled in the Control Panel. ekrn.exe is able to hide itself. Therefore the technical security rating is 26% dangerous, however also read the users reviews.

[shex]

De flesta av-programmen brukar väl hitta eventuella trojaner. Så om du har ett nyinstallerat och uppdaterat antivirus så borde det vara säkert.

Som sagt kan du testa att också köra någon trojan remover för säkerhets skull. Också kolla vilka processer autostartar med windows.

 

Att windows larmade om backdoor kanske kan ha att göra med att dom släppte en uppdatering med 12 stycken bugfixar som bla fixade ett säkerhetshål i IE6 och IE7