Twice in the last week I have noticed that something is shutting down ashserv.exe. I can’t be certain but I think it is one of those bogus online AV sites. When it is shut down a red mark appears on the ‘a’ ball. I am not personally concerned about this because I do daily True Image backups, so when I notice ashserv.exe has been shut down I get a clean image. I will try and keep my eye open for the malware culprit.
Once the service has been shut down, it cannot be restarted without rebooting.
Oh, I am quite certain I do not have any malware on this machine, and never have since I built it 5 years ago. However, since you took the time and trouble to provide links I did the F-Secure Blacklight scan and then I ran the Avast! scan, all clean. I was surfing when I was redirected to ‘Anti Virus’ (something) and it wanted to start a scan. Then I noticed ashserv.exe was missing from Task Manager. I killed ieexplor.exe and loaded a backup TI.
The F-Secure scan was extremely fast, a couple minutes at most. I’ll keep it and thanks.
I suggest the general cleaning procedure to be sure you’re clean:
Clean your temporary files.
Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
