just what is jswTss.exe?

[[DSX]]

---

see i've got problems with my internet connection when I got home, couldn't connect to the internet but modem PPPoE indicates it is connected. other weird thing is opening AVI files seems to take forever and PC usage shoots up to 100% for several seconds.. then after awhile the movie plays without any sound. system restore didn't fix it.Â* uninstalling/reinstalling codecs didn't fix it either.

to isolate issue on my internet connection, i changed to my spare lan card.. still no internet connectivity. reset modem and reconfigured it using CD that came with it. -- didn't work (this used to work).Â* changed DNS servers to my original settings.. didnt work.. used new DNS servers given PLDT.. didn't work either but all lights on the modem indicate everything else is ok.
so had no choice but to try to reinstall XP.Â* while reinstalling XP, router modem is still connected. reinstalled bare windows XP.. during setup.. XP did auto detect the already "on" internet connection. but when I tried ping.. couldn't find any host.
so changed it to other DNS servers again still didn't work.Â* turned modem off for at least 5 minutes as suggested by PLDT cust service (BTW i have to wait in queue for at least 2 hrs before my call got answered).Â* turned on modem.. after connecting.. tried ping yahoo.com -t and it seems to work well.Â* after a few seconds ping reply timed out, and if you manually open a new ping session, PC could no longer find any host. turned off modem again for at least 5 minutes, turned it on, and found the same symptoms consistent. after just a few ping replies.. connection times out but modem lights still indicate everything else is ok.Â* checked task manager and I've noticed a weird process that I haven't heard of before -- jswTss.exe.Â* tried to shut down that process.. and weirdly.. after a few seconds, ping replies are successful, checked ms config and saw jswTss on startup. here comes the weirdest part. when I checked for it in the registry.. here's where i can find it.

HKEY_CURRENT_USER\Software\Microsoft\OLE
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Sonytest
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\RunServices
HKEY_USERS\S-1-5-21-1214440339-1343024091-839522115-1003\Software\Microsoft\OLE

and the path for the executable is supposed to be in C:\WINDOWS\System32\jswTss.exe as listed in msconfig but if you do a search you won't find it. It has however a prefetch file in C:\WINDOWS\Prefetch whereÂ* the file name is something like JSWTSS.EXE -[some sort of code here].pf

thinking i found the solution, i manually deselected jswTss in msconfig startup and deleted the prefetch file plus removed all registry keys that has something to do with jswTss.Â* restarted pc.. and lo! there was no internet connection still.. cycled modem power for at least 5 minutes.. still no connection. frustrated I did a clean reinstall of winXP again and this time i turned off the modem and disconnected the network cable. after the setup.. everything went well even with the same apps installed plus other additional apps. internet now ok.. no sign of jswTss.exe.

i just find it weird that jswTss has a registry key entry with Sonytest --- could this be from sony itself and was installed on my pc using windows dynamic update??!?!Â* Â* a quick search on google will only give you a single page bt none of it refers to it as any malware but is listed on some hijack this log.Â* most of the other articles are non english so i have no idea what this is. anyone can shed light on this?!?

[pinadski]

r u using an orig winxp?

[[DSX]]

r u using an orig winxp?

orig or copy.. they're the same... only difference is that i'm using a corporate product key (key meant to be used on multiple systems for faster deployment) that has already been blacklisted by micro$oft

[Minuano27]

pre`- if its "sonytest", maybe its from a music CD issued by Sony that was played on your PC. If you recall, last month Sony got criticized (and sued), for selling copyright protection CDs that installed a program on a buyer's PC using "rootkit" (if i'm not mistaken) code taken from the programs that hackers usually use....

[[DSX]]

that was the first thing that came into my mind.. but remember this was a fresh install of windows no audio CD ever used. maybe it's a similar scheme.

[Minuano27]

]
that was the first thing that came into my mind.. but remember this was a fresh install of windows no audio CD ever used. maybe it's a similar scheme.

oic...i recall reading somewhere (i dunno if i'm mistaken on this) that some hackers were able to exploit the sony code...anyway, since it looks like your system is ok now, then all's well that end's well...