From racepics at paradise.net.nz Thu Nov 6 11:23:58 2008 From: racepics at paradise.net.nz (chris morris) Date: Thu Nov 6 11:24:02 2008 Subject: [hblug] USB3 Message-ID: <49121CFE.4030607@paradise.net.nz> An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081106/40063581/attachment.htm From maggoty.haggis at gmail.com Thu Nov 6 11:46:57 2008 From: maggoty.haggis at gmail.com (E Drummond) Date: Thu Nov 6 11:47:05 2008 Subject: [hblug] USB3 In-Reply-To: <49121CFE.4030607@paradise.net.nz> References: <49121CFE.4030607@paradise.net.nz> Message-ID: Is it really necessary? So what if it offers 10 times the speed of USB 2.0 -- hard drives/flash drives cant write that fast anyway (as far as I know, of course the technology will probably improve) I'd imagine this getting into the mainline linux kernel when there are enough PC's and devices supporting it On Thu, Nov 6, 2008 at 11:23 AM, chris morris wrote: > Speedy USB 3.0 spec to be unveiled > * > The USB 3.0 specification, > a next-generation high-speed connection standard due in 2009, is significant > because all future PCs and devices will use connectors based on it. The spec > is also expected to offer 10 times the speed of USB 2.0--used in virtually > all PCs introduced in the last few years--or roughly 5 gigabits per second. > * > > I wonder how long it will take for support to filter down into the linux > Kernel > > -- > Chris > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081106/c634e483/attachment.htm From linux_mike at paradise.net.nz Thu Nov 6 20:58:59 2008 From: linux_mike at paradise.net.nz (Michael Adams) Date: Thu Nov 6 20:56:08 2008 Subject: [hblug] USB3 In-Reply-To: References: <49121CFE.4030607@paradise.net.nz> Message-ID: <20081106205859.3e9193df.linux_mike@paradise.net.nz> On Thu, 06 Nov 2008 11:46:57 +1300 Came this utterance fomulated by E Drummond to my mailbox: > Is it really necessary? > So what if it offers 10 times the speed of USB 2.0 -- hard > drives/flash drives cant write that fast anyway (as far as I know, of > course the technology will probably improve) > But reads from camera cards are. > I'd imagine this getting into the mainline linux kernel when there are > enough PC's and devices supporting it > These specs get pretty well documented early on and the kernel developers are sharp on the uptake with open spec drivers. > On Thu, Nov 6, 2008 at 11:23 AM, chris morris > wrote: > > > Speedy USB 3.0 spec to be > > unveiled > ss&subj=news&tag=2547-1_3-0-20> > > * > > The USB 3.0 > > specification, a > > next-generation high-speed connection standard due in 2009, is > > significant because all future PCs and devices will use connectors > > based on it. The spec is also expected to offer 10 times the speed > > of USB 2.0--used in virtually all PCs introduced in the last few > > years--or roughly 5 gigabits per second.* > > > > I wonder how long it will take for support to filter down into the > > linux Kernel > > > > -- > > Chris > > > > _______________________________________________ > > HBLUG mailing list > > HBLUG@linux.net.nz > > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > > > > -- Michael All shall be well, and all shall be well, and all manner of things shall be well - Julian of Norwich 1342 - 1416 From racepics at paradise.net.nz Thu Nov 6 21:29:48 2008 From: racepics at paradise.net.nz (chris morris) Date: Thu Nov 6 21:29:48 2008 Subject: [hblug] USB3 In-Reply-To: <20081106205859.3e9193df.linux_mike@paradise.net.nz> References: <49121CFE.4030607@paradise.net.nz> <20081106205859.3e9193df.linux_mike@paradise.net.nz> Message-ID: <4912AAFC.8000604@paradise.net.nz> An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081106/24cf3691/attachment.htm From safe at safemasters.co.nz Sat Nov 8 00:14:39 2008 From: safe at safemasters.co.nz (Fraser Burns) Date: Sat Nov 8 00:16:54 2008 Subject: [hblug] Wireless Message-ID: <4914231F.1040306@safemasters.co.nz> The collective advice you guys provided at the meeting solved my problem perfectly. As Rene said, clear out the entire list of computers currently listed within the router and start again. And as Perry quoted Chris as saying, use the wizard when configuring. Just choose the points at which to provide manual settings. Result was instantaneous perfection on each of the computers I have added into the network so far. Thanks guys. Fraser Burns From kirjava at gmail.com Sat Nov 8 10:45:50 2008 From: kirjava at gmail.com (Rene Bartosh) Date: Sat Nov 8 10:46:03 2008 Subject: [hblug] Christmas Event Message-ID: Morning folks, Just wondered if anyone had suggestions for a christmas event for the LUG - we have not had a successful in the last few years. Last year I recall people bought snacks + drinks to the regular meetings in December, but in the past we have had all-day BBQs and meetings on a weekend day. Regards, Rene -- >From Rene Bartosh (Gmail account) Personal: http://kirjava.net.nz/ Work: http://eksion.net/ From p.spiller at xtra.co.nz Sat Nov 8 12:17:28 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Sat Nov 8 12:18:55 2008 Subject: [hblug] Christmas Event In-Reply-To: References: Message-ID: ----------------Earlier, you commented-------------------- >Just wondered if anyone had suggestions for a christmas event for the >LUG - we have not had a successful in the last few years. > >Last year I recall people bought snacks + drinks to the regular >meetings in December, but in the past we have had all-day BBQs and >meetings on a weekend day. Fraser and I had a brief chat about this, a day or two before the meeting. If there was sufficient interest, any such most-of-the- day weekend event could be held here. http://img.photobucket.com/albums/v77/perrynz/NWfromhillPan3S30.jpg (Mere Road, 600 metres down Highway 50 from the turnoff at the end of Omahu Rd) Weather may also be a factor. There's plenty of room, but someone else would need to supply any BBQ, as I don't have such a thing. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081108/d8f5164f/attachment.htm From p.spiller at xtra.co.nz Sat Nov 8 12:11:40 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Sat Nov 8 12:18:55 2008 Subject: [hblug] Wireless In-Reply-To: <4914231F.1040306@safemasters.co.nz> References: <4914231F.1040306@safemasters.co.nz> Message-ID: ----------------Earlier, you commented-------------------- >The collective advice you guys provided at the meeting solved my >problem perfectly. >As Rene said, clear out the entire list of computers currently >listed within the router and start again. >And as Perry quoted Chris as saying, use the wizard when >configuring. Just choose the points at which to provide manual settings. > >Result was instantaneous perfection on each of the computers I have >added into the network so far. Fraser Good that even second-hand knowledge helps. Take a bow, Chris. I was sufficiently impressed that I've decided I'll try adding a WAP device to my home LAN. Just checking with Rene to see if I can borrow one for a test, and whether or not I can plug it in to the crossover jack point in my switch. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081108/6e7a849a/attachment.htm From p.spiller at xtra.co.nz Sat Nov 8 12:23:38 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Sat Nov 8 12:30:24 2008 Subject: [hblug] How Google knows everything about you Message-ID: How Google knows everything about you Excerpt People did not need to even use Google products to give themselves away. A product, Google Analytics, is installed on internet service providers (ISPs) and everyone who uses them is recognised and the information is passed onto Google. In his study they had surveyed 300,000 ISPs, and 83 percent of them had Analytics. It records every action a user takes and makes it available to the ISP who can know what their customers are doing. "It is a beautiful piece of software. It has only one little hitch and this information is passed onto Google," Professor Maurer said. Google itself says it uses the information to better target Google advertising. "My suspicion is that they maybe the can use this information for other purposes, maybe sell it to others who may be interested." The intentions are good but Google could come under pressure to sell the information to others. And under US company laws it cannot refuse to sell a product that would enhance stockholder value. Professor Maurer said since the study was published last year, the European Union was warning ISPs and companies that Analytics violated data protection law. It was now being removed by ISPs. Google though has a new browser, Google Chrome, that if used sends every URL or internet page visited to Google. From stormcloud51090 at gmail.com Mon Nov 10 22:39:24 2008 From: stormcloud51090 at gmail.com (Haydn) Date: Mon Nov 10 22:39:43 2008 Subject: [hblug] How Google knows everything about you In-Reply-To: <4914cf99.0b0bca0a.6165.1347SMTPIN_ADDED@mx.google.com> References: <4914cf99.0b0bca0a.6165.1347SMTPIN_ADDED@mx.google.com> Message-ID: <4918014C.1010708@gmail.com> Perry Spiller wrote: > How Google knows everything about you > > Excerpt > > People did not need to even use Google products to give themselves away. > > A product, Google Analytics, is installed on internet service > providers (ISPs) and everyone who uses them is recognised and the > information is passed onto Google. > > In his study they had surveyed 300,000 ISPs, and 83 percent of them > had Analytics. > > It records every action a user takes and makes it available to the ISP > who can know what their customers are doing. > > "It is a beautiful piece of software. It has only one little hitch and > this information is passed onto Google," Professor Maurer said. > > Google itself says it uses the information to better target Google > advertising. > > "My suspicion ? is that they maybe the can use this information for > other purposes, maybe sell it to others who may be interested." > > The intentions are good but Google could come under pressure to sell > the information to others. And under US company laws it cannot refuse > to sell a product that would enhance stockholder value. > > Professor Maurer said since the study was published last year, the > European Union was warning ISPs and companies that Analytics violated > data protection law. It was now being removed by ISPs. > > Google though has a new browser, Google Chrome, that if used sends > every URL or internet page visited to Google. > > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug Out of interest, who here is particularly worried about this? I personally am not, but I'm somewhat passive on these sorts of things From linux_mike at paradise.net.nz Tue Nov 11 05:36:31 2008 From: linux_mike at paradise.net.nz (Michael Adams) Date: Tue Nov 11 05:33:31 2008 Subject: [hblug] How Google knows everything about you In-Reply-To: <78gekn$h387kc@mxin3-orange.clear.net.nz> References: <78gekn$h387kc@mxin3-orange.clear.net.nz> Message-ID: <20081111053631.1e2addde.linux_mike@paradise.net.nz> We are discussing this article here: http://www.stuff.co.nz/4753713a28.html On Sat, 08 Nov 2008 12:23:38 +1300 Came this utterance fomulated by Perry Spiller to my mailbox: > How Google knows everything about you > > Excerpt > > People did not need to even use Google products to give themselves > away. > > A product, Google Analytics, is installed on > internet service providers (ISPs) and everyone > who uses them is recognised and the information is passed onto Google. > > In his study they had surveyed 300,000 ISPs, and > 83 percent of them had Analytics. > > It records every action a user takes and makes it > available to the ISP who can know what their customers are doing. > Someone stuffed up. In the above three paragraphs replace ISP with Web Developer. Google analytics is a tool for web developers to analyse their pages web stats. It does it better than almost any other tool. Apart from that everything is pretty much correct. Google also cache every web page they visit in their database. Apparently, according to myth, it's not worth them deleting the pages from the database. But my guess is they can then see if anything has changed on the page from when it was last cached. They then use this info to rate it and to work out how often to re-spider the page. If you find a page that no longer exists, you can still look at Googles cache version. IMHO Google is the only company that Microsoft is really concerned about. > Google itself says it uses the information to better target Google > advertising. > > "My suspicion _ is that they maybe the can use > this information for other purposes, maybe sell > it to others who may be interested." > Yep, they give it away to the web developers, who put it on their websites. They also provide accumulated stats to the advertisers. They do not give them specific information on me or you. -- Michael All shall be well, and all shall be well, and all manner of things shall be well - Julian of Norwich 1342 - 1416 From linux_mike at paradise.net.nz Tue Nov 11 05:55:35 2008 From: linux_mike at paradise.net.nz (Michael Adams) Date: Tue Nov 11 05:52:37 2008 Subject: [hblug] How Google knows everything about you In-Reply-To: <20081111053631.1e2addde.linux_mike@paradise.net.nz> References: <78gekn$h387kc@mxin3-orange.clear.net.nz> <20081111053631.1e2addde.linux_mike@paradise.net.nz> Message-ID: <20081111055535.6805a80b.linux_mike@paradise.net.nz> On Tue, 11 Nov 2008 05:36:31 +1300 Came this utterance fomulated by Michael Adams to my mailbox: > Someone stuffed up. In the above three paragraphs replace ISP with Web > Developer. Google analytics is a tool for web developers to analyse > their pages web stats. It does it better than almost any other tool. > Features of the tool: http://64.233.179.110/analytics/tour/index_en-US.html -- Michael All shall be well, and all shall be well, and all manner of things shall be well - Julian of Norwich 1342 - 1416 From p.spiller at xtra.co.nz Tue Nov 11 16:36:44 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Wed Nov 12 00:41:55 2008 Subject: [hblug] NZX Delays Linux System Rollout Message-ID: NZX Delays Linux System Rollout By Rob O'Neill | Tuesday, 11 November 2008 The New Zealand Stock Exchange has delayed the rollout of a new Linux-based settlement and clearance system to allow stockbrokers more time to bring their technology up to date. More . . . http://www.businessday.co.nz/industries/telco_it/4757415 From p.spiller at xtra.co.nz Wed Nov 12 22:33:32 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 13 00:26:03 2008 Subject: [hblug] Svchost & The Dark Side Message-ID: Svchost & The Dark Side At the last meeting, I mentioned the problem of one instance of svchost. Fraser, Gordon and I talked a bit more about it, while the rest of the band 'played on.' Since then, I've done some dabbling . . . . My lady's PC runs W2kP, as does all the others on our home LAN. (The laptop, which is not a start-up item in the LAN, runs XP) Part of my gleanings shows that W2kP wont readily reveal just what services are being hosted by different instances of the svchosts which show up in the Task Manager. So where to start? After starting her PC in the morning, I check the CPU use and always find one instance of svchost is consuming 99% of CPU. The only time that changes is when another application (usually at start-up) calls for some CPU time. As soon as that call is over, the one instance of svchost grabs back the 99% CPU! Slows the PC to a crawl, overall. I run NOD AV and it finds a nasty and kills it. (I think is was phishing.gen, buried in something). At the same time, it emptied my lady's Thunderbird Inbox! She was not at all gruntled or impressed by that! However, the next day is no different with the CPU. So I gets the bright idea to pull the Ethernet cable out of her PC. Bingo! CPU use drops to system idle processes being at 2%. The next day, I pull the Ethernet cable before booting up. Still 99% CPU demand by one instance of svchost. Huh? It also gets up the nose of my PC, because it can't make a network connection at start-up. Plugging the connection back in seems to be a fix. Now, out in the garage is our Internet server, running IPCOP. This was set-up by Daniel and Rene and the machinations of IPCOP largely remain a mystery to me. Although this case is a work-in-progress, I'm starting to wonder if my lady's PC has some nasty loaded that is connecting to the Internet, at start-up. Then, when I pull the plug, it dies and gives up any resurrection attempt until next boot-up. I really don't know. So far, to me, there seems to be two options. The svchost instance grabbing most of the CPU time is somehow implicated in initialising the LAN. Or it's doing something bad, in some way connecting to some low-life, in the outside world. What next in the sleuthing process? Any simple suggestions? Or suggestions for a simpleton? Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081112/ac822188/attachment.htm From racepics at paradise.net.nz Thu Nov 13 07:17:39 2008 From: racepics at paradise.net.nz (chris morris) Date: Thu Nov 13 07:17:20 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <78gekn$h6ceb6@mxin3-orange.clear.net.nz> References: <78gekn$h6ceb6@mxin3-orange.clear.net.nz> Message-ID: <491B1DC3.2010905@paradise.net.nz> An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/91c17b27/attachment.htm From maggoty.haggis at gmail.com Thu Nov 13 09:03:40 2008 From: maggoty.haggis at gmail.com (E Drummond) Date: Thu Nov 13 09:03:45 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <491abd60.070bca0a.32dd.0141SMTPIN_ADDED@mx.google.com> References: <491abd60.070bca0a.32dd.0141SMTPIN_ADDED@mx.google.com> Message-ID: This is what happens when you use windows :-) On Wed, Nov 12, 2008 at 10:33 PM, Perry Spiller wrote: > Svchost & The Dark Side > > At the last meeting, I mentioned the problem of one instance > of svchost. Fraser, Gordon and I talked a bit more about it, > while the rest of the band 'played on.' Since then, I've done > some dabbling . . . . > > My lady's PC runs W2kP, as does all the others on our home > LAN. (The laptop, which is not a start-up item in the LAN, > runs XP) Part of my gleanings shows that W2kP wont > readily reveal just what services are being hosted by > different instances of the svchosts which show up in the > Task Manager. > > So where to start? > > After starting her PC in the morning, I check the CPU use > and always find one instance of svchost is consuming 99% > of CPU. The only time that changes is when another > application (usually at start-up) calls for some CPU time. As > soon as that call is over, the one instance of svchost grabs > back the 99% CPU! > > Slows the PC to a crawl, overall. > > I run NOD AV and it finds a nasty and kills it. (I think is > was phishing.gen, buried in something). At the same time, it > emptied my lady's Thunderbird Inbox! She was not at all > gruntled or impressed by that! > > However, the next day is no different with the CPU. > > So I gets the bright idea to pull the Ethernet cable out of her > PC. Bingo! CPU use drops to system idle processes being at > 2%. The next day, I pull the Ethernet cable before booting > up. Still 99% CPU demand by one instance of svchost. Huh? > It also gets up the nose of my PC, because it can't make a > network connection at start-up. Plugging the connection > back in seems to be a fix. > > Now, out in the garage is our Internet server, running > IPCOP. This was set-up by Daniel and Rene and the > machinations of IPCOP largely remain a mystery to me. > > Although this case is a work-in-progress, I'm starting to > wonder if my lady's PC has some nasty loaded that is > connecting to the Internet, at start-up. Then, when I pull the > plug, it dies and gives up any resurrection attempt until next > boot-up. I really don't know. > > So far, to me, there seems to be two options. The svchost > instance grabbing most of the CPU time is somehow > implicated in initialising the LAN. Or it's doing something > bad, in some way connecting to some low-life, in the outside > world. > > What next in the sleuthing process? Any simple > suggestions? Or suggestions for a simpleton? > > Perry > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/3fc3fd03/attachment.htm From bvidulich at gmail.com Thu Nov 13 12:50:41 2008 From: bvidulich at gmail.com (Ben Vidulich) Date: Thu Nov 13 12:50:47 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: References: <491abd60.070bca0a.32dd.0141SMTPIN_ADDED@mx.google.com> Message-ID: My suggestion is to try Sysinternals' Process Explorer. By moving your mouse over the svchost.exe's to the left or right-clicking the svchost.exe, clicking Properties, then clicking on the services tab, you will see what services are being hosted. For more information about Process Explorer and for downloads go to http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx I don't know if it will show any viruses or spyware that have attached (I guess not) but it should, at least, be a start towards fixing the problem with svchost. On Thu, Nov 13, 2008 at 9:03 AM, E Drummond wrote: > This is what happens when you use windows :-) > > > On Wed, Nov 12, 2008 at 10:33 PM, Perry Spiller wrote: > >> Svchost & The Dark Side >> >> At the last meeting, I mentioned the problem of one instance >> of svchost. Fraser, Gordon and I talked a bit more about it, >> while the rest of the band 'played on.' Since then, I've done >> some dabbling . . . . >> >> My lady's PC runs W2kP, as does all the others on our home >> LAN. (The laptop, which is not a start-up item in the LAN, >> runs XP) Part of my gleanings shows that W2kP wont >> readily reveal just what services are being hosted by >> different instances of the svchosts which show up in the >> Task Manager. >> >> So where to start? >> >> After starting her PC in the morning, I check the CPU use >> and always find one instance of svchost is consuming 99% >> of CPU. The only time that changes is when another >> application (usually at start-up) calls for some CPU time. As >> soon as that call is over, the one instance of svchost grabs >> back the 99% CPU! >> >> Slows the PC to a crawl, overall. >> >> I run NOD AV and it finds a nasty and kills it. (I think is >> was phishing.gen, buried in something). At the same time, it >> emptied my lady's Thunderbird Inbox! She was not at all >> gruntled or impressed by that! >> >> However, the next day is no different with the CPU. >> >> So I gets the bright idea to pull the Ethernet cable out of her >> PC. Bingo! CPU use drops to system idle processes being at >> 2%. The next day, I pull the Ethernet cable before booting >> up. Still 99% CPU demand by one instance of svchost. Huh? >> It also gets up the nose of my PC, because it can't make a >> network connection at start-up. Plugging the connection >> back in seems to be a fix. >> >> Now, out in the garage is our Internet server, running >> IPCOP. This was set-up by Daniel and Rene and the >> machinations of IPCOP largely remain a mystery to me. >> >> Although this case is a work-in-progress, I'm starting to >> wonder if my lady's PC has some nasty loaded that is >> connecting to the Internet, at start-up. Then, when I pull the >> plug, it dies and gives up any resurrection attempt until next >> boot-up. I really don't know. >> >> So far, to me, there seems to be two options. The svchost >> instance grabbing most of the CPU time is somehow >> implicated in initialising the LAN. Or it's doing something >> bad, in some way connecting to some low-life, in the outside >> world. >> >> What next in the sleuthing process? Any simple >> suggestions? Or suggestions for a simpleton? >> >> Perry >> >> _______________________________________________ >> HBLUG mailing list >> HBLUG@linux.net.nz >> http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug >> >> > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > -- Ben Vidulich -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/84632cab/attachment.htm From p.spiller at xtra.co.nz Thu Nov 13 10:32:49 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 13 14:52:13 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: References: <491abd60.070bca0a.32dd.0141SMTPIN_ADDED@mx.google.com> Message-ID: ----------------Earlier comments were-------------------- >This is what happens when you use windows :-) Unfortunately it's the system my wife uses at work. It simply wasn't fair to force her to learn Linux for home use only - especially as many of the work form letters may cause problems in Open Office. >Have you run any anti spyware apps? >I find spybot s&d pretty good. >AV programs often wont look for spyware. I have a copy on mine, but not on hers. I'll remedy that, but may be too late to find and fix the present problem, perhaps? She seems to be having problems with her Thunderbird, so I might switch her over to Eudora, now freeware. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/0ce2b311/attachment.htm From p.spiller at xtra.co.nz Thu Nov 13 14:56:33 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 13 15:13:16 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: References: <491abd60.070bca0a.32dd.0141SMTPIN_ADDED@mx.google.com> Message-ID: ----------------Earlier, you commented-------------------- >My suggestion is to try Sysinternals' Process Explorer. Thanks for the prompt. I'd already downloaded it, but not installed or made use of it, yet. I'll maybe do that and what Chris suggests - add spybot to her PC. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/57dd2f3a/attachment.htm From agarnott at gmail.com Thu Nov 13 19:58:41 2008 From: agarnott at gmail.com (gordon arnott) Date: Thu Nov 13 19:58:47 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <491B1DC3.2010905@paradise.net.nz> References: <78gekn$h6ceb6@mxin3-orange.clear.net.nz> <491B1DC3.2010905@paradise.net.nz> Message-ID: <910c73490811122258t355bdb8dm7bc3dfdf434b4595@mail.gmail.com> Superantispyware Free addition or MalwareBytes' Anti-Malware are the programes at the top of the list at present. I recognmend running both to clean system !! Cheers Gordon On Wed, Nov 12, 2008 at 7:17 PM, chris morris wrote: > Have you run any anti spyware apps? > I find spybot s&d pretty good. > > AV programs often wont look for spyware. > > cheers > c > > > Perry Spiller wrote: > > Svchost & The Dark Side > > At the last meeting, I mentioned the problem of one instance > of svchost. Fraser, Gordon and I talked a bit more about it, > while the rest of the band 'played on.' Since then, I've done > some dabbling . . . . > > My lady's PC runs W2kP, as does all the others on our home > LAN. (The laptop, which is not a start-up item in the LAN, > runs XP) Part of my gleanings shows that W2kP wont > readily reveal just what services are being hosted by > different instances of the svchosts which show up in the > Task Manager. > > So where to start? > > After starting her PC in the morning, I check the CPU use > and always find one instance of svchost is consuming 99% > of CPU. The only time that changes is when another > application (usually at start-up) calls for some CPU time. As > soon as that call is over, the one instance of svchost grabs > back the 99% CPU! > > Slows the PC to a crawl, overall. > > I run NOD AV and it finds a nasty and kills it. (I think is > was phishing.gen, buried in something). At the same time, it > emptied my lady's Thunderbird Inbox! She was not at all > gruntled or impressed by that! > > However, the next day is no different with the CPU. > > So I gets the bright idea to pull the Ethernet cable out of her > PC. Bingo! CPU use drops to system idle processes being at > 2%. The next day, I pull the Ethernet cable before booting > up. Still 99% CPU demand by one instance of svchost. Huh? > It also gets up the nose of my PC, because it can't make a > network connection at start-up. Plugging the connection > back in seems to be a fix. > > Now, out in the garage is our Internet server, running > IPCOP. This was set-up by Daniel and Rene and the > machinations of IPCOP largely remain a mystery to me. > > Although this case is a work-in-progress, I'm starting to > wonder if my lady's PC has some nasty loaded that is > connecting to the Internet, at start-up. Then, when I pull the > plug, it dies and gives up any resurrection attempt until next > boot-up. I really don't know. > > So far, to me, there seems to be two options. The svchost > instance grabbing most of the CPU time is somehow > implicated in initialising the LAN. Or it's doing something > bad, in some way connecting to some low-life, in the outside > world. > > What next in the sleuthing process? Any simple > suggestions? Or suggestions for a simpleton? > > Perry > > ________________________________ > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > > -- > Chris Morris > Racepics Motorsport Photography, > Computer Repairs, Websites, > 560 Lowe Street > Hastings 4120 > 06 878 3573 > 021 2537925 > http://www.racepics.biz > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > From p.spiller at xtra.co.nz Thu Nov 13 22:39:23 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 13 22:49:54 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <910c73490811122258t355bdb8dm7bc3dfdf434b4595@mail.gmail.co m> References: <78gekn$h6ceb6@mxin3-orange.clear.net.nz> <491B1DC3.2010905@paradise.net.nz> <910c73490811122258t355bdb8dm7bc3dfdf434b4595@mail.gmail.com> Message-ID: ----------------Earlier, you commented-------------------- >Superantispyware Free addition or MalwareBytes' Anti-Malware are the >programmes at the top of the list at present. I recommend running both >to clean system !! Thanks, Gordon I'll add them to the arsenal I'm assembling. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081113/57eb06d8/attachment.htm From p.spiller at xtra.co.nz Mon Nov 17 16:55:39 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Mon Nov 17 22:44:54 2008 Subject: [hblug] Fanbox Message-ID: http://www.fanbox.com/socnet/ Anyone had a play with this? I'm averse to 'social networking' sites, but this one seems to have a few add-ons. Perry From maggoty.haggis at gmail.com Tue Nov 18 09:14:55 2008 From: maggoty.haggis at gmail.com (E Drummond) Date: Tue Nov 18 09:15:08 2008 Subject: [hblug] Fanbox In-Reply-To: <49213d1c.090bca0a.20ee.52e6SMTPIN_ADDED@mx.google.com> References: <49213d1c.090bca0a.20ee.52e6SMTPIN_ADDED@mx.google.com> Message-ID: I get this: "Access Blocked Access to this Web Page has been blocked by the Eastern Institute of Technology IT Services Department" The site must be good On Mon, Nov 17, 2008 at 4:55 PM, Perry Spiller wrote: > http://www.fanbox.com/socnet/ > > Anyone had a play with this? > I'm averse to 'social networking' > sites, but this one seems to have > a few add-ons. > > Perry > > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081118/8f87a3d8/attachment.htm From p.spiller at xtra.co.nz Thu Nov 20 14:30:09 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 20 14:30:52 2008 Subject: [hblug] Svchost & The Dark Side Message-ID: Well, the process explorer revealed what was going on. No malware, as such, just one .dll from HP grabbing all CPU time at start up. And not letting it go unless the ethernet plug was pulled. We have two HP printers. I think I've eliminated the problem - one printer yet to test and tomorrow's boot-up to monitor. Perry -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081120/1fc84eca/attachment.html From agarnott at gmail.com Thu Nov 20 15:03:59 2008 From: agarnott at gmail.com (gordon arnott) Date: Thu Nov 20 15:04:05 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <4924bdd6.010bca0a.7fb5.698cSMTPIN_ADDED@mx.google.com> References: <4924bdd6.010bca0a.7fb5.698cSMTPIN_ADDED@mx.google.com> Message-ID: <910c73490811191803mc329f28jdd42f104cc2486f1@mail.gmail.com> Dont you just Love [ computers ] >> they always Behave ! On Thu, Nov 20, 2008 at 2:30 AM, Perry Spiller wrote: > > Well, the process explorer revealed what was going on. > No malware, as such, just one .dll from HP grabbing > all CPU time at start up. And not letting it go unless > the ethernet plug was pulled. We have two HP printers. > I think I've eliminated the problem - one printer yet to > test and tomorrow's boot-up to monitor. > > > Perry > > _______________________________________________ > HBLUG mailing list > HBLUG@linux.net.nz > http://www.linux.net.nz/cgi-bin/mailman/listinfo/hblug > > From p.spiller at xtra.co.nz Thu Nov 20 16:51:12 2008 From: p.spiller at xtra.co.nz (Perry Spiller) Date: Thu Nov 20 16:51:30 2008 Subject: [hblug] Svchost & The Dark Side In-Reply-To: <910c73490811191803mc329f28jdd42f104cc2486f1@mail.gmail.com > References: <4924bdd6.010bca0a.7fb5.698cSMTPIN_ADDED@mx.google.com> <910c73490811191803mc329f28jdd42f104cc2486f1@mail.gmail.com> Message-ID: ----------------Earlier, you commented-------------------- >Don't you just Love [ computers ] >> they always Behave ! To be fair, I blame HP, rather than the PC. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://www.linux.net.nz/pipermail/hblug/attachments/20081120/6ff2f6b7/attachment.htm