Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Dec 1st, 2008, 8:36pm
   Mischel Internet Security Forum
   Malware
   Trojans
(Moderators: Helena, Gavin_Coe, Magnus)
   sdchsve.exe? nssbsvc.exe?
« Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: sdchsve.exe? nssbsvc.exe?  (Read 289 times)
moni
Newbie
*





   


Gender: female
Posts: 29
sdchsve.exe? nssbsvc.exe?
« on: Dec 20th, 2006, 11:13am »
Quote Quote  Modify Modify

I thought that I should post here, as I have had problems with my Any Dvd which I have been using for 2 years+. My problem is that all of a sudden I can't d/l the updates.
So I posted to a forum that covers this app and also sent my purchase receipt, key info etc. that Slysoft needed to confirm that I am a registered user. I purchased 2 programs, one on each of my 2 notebooks.
 
The forum was less than helpful when I posted and gave the innuendo that I was there to bash Any Dvd. Quite the contrary I have spent $80 in the last 2 years for the program and I want the program to work as reliably as it has in the past.
I should mention that other members that have had the program as long as I have also are having issues that don't get specific solutions provided to them.
My os, xp, sp2,pent 4,512 RAM, 1.6 ghz
 
My Security NAV, Spy bot, Spyware Blaster, Trojan Hunter, sp2 firewall, Router and Alpha Shield.
All updates until the last 3 were fine and my last version still works.
 
The Sly Rep in the forum first said that there is a hanger on trojan to Any dvd occasionally and that maybe I was infected.
The alleged trojan was "sdchsvc.exe or nssbsvc.exe".
When members started to inquire how the distributor could be so sloppy and allow a trojan to attach to their purchased program which is $40 the discussion was abruptly stopped and members were told the trojan was impossible to google info on and he changed the topic into another area. He did not really answer any questions on this trojan.
He told me no program other than Dr Web Cure it  could detect and rid of it and so I tried a d/l of the app at this Link that he provided but it would not install:
[/url]http://wwwfreedrweb.com/[url]
 
I tried this and it was WINRAR self extracting and came up with the error:
 
"The archive is either unknown or damaged".
 
"Cannot open C:\Documents and Settings\Moni\Local Settings\Temp Interenet Files\Content.IE5\OPABGPER\cureit[1]exe
 
I tried to rid of this, but can't and it is still sitting there when I do a "search".
 
I advised that I use Trojan Hunter and update all of my Security daily and scan daily and he said this Dr. Web was the only one that would detect thisHuh
 
Then I got an email telling me to buy 2 new keys one for each of my notebooks at $40 which should solve my problems.
There were othere members that have used the app for 2 years plus like me and are having problems but not the same as mine and they are being told to purchase another program and key.
Extremely frustrating b/c the support is not definitive of exactly what the issue is and so I wanted to know indeed if there is such a TrojanHuh? And does anyone know anything about Dr. Web Cure It??
 
I find this odd that this program is the only one that can see if I have a Trojan and also only this program that I can't get to work can fix it??
If I have to buy 2 licences again it will be $80, they said there has been no change to the program requiring new programs simply the Trojan suggestion and buy 2 new programs.
 
I really would appreciate any and all comments on this matter, thankyou.
IP Logged

"I'd rather be secure than insecure!!"
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
Posts: 5815
Re: sdchsve.exe? nssbsvc.exe?
« Reply #1 on: Dec 20th, 2006, 1:25pm »
Quote Quote  Modify Modify

This sounds like a bit of a nightmare.  I don't think I would shell out $80 for new versions because of some type of infection that supposed only Dr. Web Cure It can get rid of.  
 
Quote:
I tried this and it was WINRAR self extracting and came up with the error:  
 
"The archive is either unknown or damaged".  
 
"Cannot open C:\Documents and Settings\Moni\Local Settings\Temp Interenet Files\Content.IE5\OPABGPER\cureit[1]exe  
 
I tried to rid of this, but can't and it is still sitting there when I do a "search".  
 

 
Let's see if we can rid of this temp file.  Please go to http://www.ccleaner.com and download CCleaner.  Install CCleaner on your hard drive.  
 
Then boot your computer into SAFE MODE.  Run the CLEANER component of CCleaner which will empty out the Temp folders and clean out other junk files.  
 
Reboot back into Normal Mode.  See if the cureit file is gone from the Temporary Internet Files.  It should be.  
 
Then follow the procedure in the link below to install HijackThis.  After you get it installed and RENAMED, run a Hijackthis scan and post the scan log here.  Let's see if anything shows up.  
 
http://www.misec.net/forum/board/FAQ/1163329424
 
IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
siliconman01
Global Moderator
*****



Trojans! Chew 'em Up, Spit 'em Out...

   


Gender: male
Posts: 5815
Re: sdchsve.exe? nssbsvc.exe?
« Reply #2 on: Dec 20th, 2006, 1:58pm »
Quote Quote  Modify Modify

Concerning Dr. Web CureIt:
 
I suspect that Dr. Web is picking out this trojan via its heuristics engine.  I went to http://www.freedrweb.com/cureit/ and downloaded CureIt.  It came through as an executible with a size of 5307 kbytes.  This is not an installer; it is a direct free standing executable that is downloaded.
 
So I closed all my other security programs and disabled my NIS 2007 anti-virus component.  When I started Cureit, it ran a quick scan to scan memory and some critical startup files.  Then I highlighted the C:\ harddrive and clicked on the go Arrow on the right side of the CureIt window.  This started a full scan of my C:\ harddrive.  It scanned all files and folders on this drive.  
 
It looks like this is neat way to perform an independent non-remote scan and does appear to work okay.  I suspect/recommend it is very important to disable your resident AV program and close down all other programs before running the CureIt scan.
« Last Edit: Dec 20th, 2006, 2:00pm by siliconman01 » IP Logged

______
TrojanHunter V5.0.962...No. 1 AT in my Book and on my Box!
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register