what is this service: advcfig50wnt

[ajg75wood]

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 3/18/2009
Time: 1:01:28 AM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
The advcfig50wnt service was successfully sent a start control.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[Thee Chicago Wolf (MVP)]

Event Type: Information

Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 3/18/2009
Time: 1:01:28 AM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
The advcfig50wnt service was successfully sent a start control.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Spyware or some kind of malware. Go grab Spybot 1.62, download
updates, and do a full scan.

- Thee Chicago Wolf (MVP)

 

[PA Bear [MS MVP]]

And did you click on that link? (Don't do so now, only in Event Viewer.)

There is a very good chance are that you are seeing the affects of a
hijackware infection.

1. See if you can download/run the MSRT manually:
http://www.microsoft.com/security/malwareremove/default.mspx

2. Run the Windows Live Safety Center's 'Protection' scan (only!) in Safe
Mode with Networking, if need be:
http://onecare.live.com/site/en-us/center/howsafe.htm

3. Run a /thorough/ check for hijackware, including posting the requested
logs in an appropriate forum, not here.

Checking for/Help with Hijackware
http://aumha.net/viewtopic.php?f=30&t=4075
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://www.elephantboycomputers.com/page2.html#Removing_Malware

**Seek expert assistance in
http://spywarehammer.com/simplemachinesforum/index.php?board=10.0,
http://forums.spybot.info/forumdisplay.php?f=22,
http://aumha.net/viewforum.php?f=30, or other appropriate forums.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[Twayne]

Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 3/18/2009
Time: 1:01:28 AM
User: NT AUTHORITY\SYSTEM
Computer:
Description:
The advcfig50wnt service was successfully sent a start control.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

All I could find were foreign language hits, but they appear to refer to
a virus.

Disable the service and see if anything stops working on our machine.
It might be a configuation file of some kind if it's not malware.

Have you run an updated AV check? If not, you're wasting your time so
far.

 

[Mike DeLuca]

its actually a service for a CA product and not spyware, one of the guys at work posted the info today - http://www.radioaukiman.com/forums/showthread.php?t=2133