Премини към съдържанието
Yavor Stoyanov

Съмнение за инфектирана система

    Препоръчан отговор


    Здравейте отново. Обръщам се отново към вас с зов за помощ. От няколко дена лаптопа ми се държи доста странно, страшно много се забавя при отваряне на програми, бавно се стартира. Изключих всички теми и ефекти но нямаше никаква полза. Това са логовете от програмата. . DDS (Ver_11-03-05.01) - NTFSx86 Run by user at 11:10:13,20 on ±єЎ 26.03.2011 Ј. Internet Explorer: 8.0.6001.19019 BrowserJavaVersion: 1.6.0_23 Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1251.359.1033.18.1789.1058 [GMT 2:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\Ati2evxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\Ati2evxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\SearchIndexer.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\WerCon.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\vssvc.exe C:\Windows\System32\svchost.exe -k swprv C:\Windows\system32\taskeng.exe C:\Windows\system32\RacAgent.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Users\user\Desktop\dds.scr . ============== Pseudo HJT Report =============== . uStart Page = hxxp://start.icq.com/ uDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 mDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 uInternet Settings,ProxyServer = proxy:8080 uInternet Settings,ProxyOverride = <local> uURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - uURLSearchHooks: H - No File EB: {855f3b16-6d32-4fe6-8a56-bbb695989046} - ICQToolBar uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [startCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun mRun: [skytel] Skytel.exe StartupFolder: c:\users\user\appdata\roaming\microsoft\windows\start menu\programs\startup\CurseClientStartup.ccip mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) Trusted Zone: real.com\rhap-app-4-0 Trusted Zone: real.com\rhapreg TCP: {9320EF47-532A-4291-998C-C147787C40C9} = 88.87.0.2 . ================= FIREFOX =================== . FF - ProfilePath - c:\users\user\appdata\roaming\mozilla\firefox\profiles\bkct3qx0.default\ FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\users\user\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} . ============= SERVICES / DRIVERS =============== . R2 ETService;Empowering Technology Service;c:\program files\emachines\emachines recovery management\service\ETService.exe [2010-4-21 24576] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504] R2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-4-18 11032] R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [2008-8-28 22072] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Ус»уі° Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-3-14 136176] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\program files\microsoft visual studio 8\common7\ide\remote debugger\x86\msvsmon.exe [2005-9-23 2799808] . =============== Created Last 30 ================ . 2011-03-25 20:51:22 6792528 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{2951f69a-2439-4d81-aad7-c16f8954943b}\mpengine.dll 2011-03-23 06:53:29 797696 ----a-w- c:\windows\system32\FntCache.dll 2011-03-23 06:53:29 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2011-03-23 06:53:29 1068544 ----a-w- c:\windows\system32\DWrite.dll 2011-03-10 21:07:48 -------- d-----w- c:\progra~2\IObit 2011-03-10 20:57:44 -------- d-----w- c:\users\user\appdata\roaming\IObit 2011-03-10 20:57:43 -------- d-----w- c:\program files\IObit 2011-03-09 10:45:06 429056 ----a-w- c:\windows\system32\EncDec.dll 2011-03-09 10:45:06 322560 ----a-w- c:\windows\system32\sbe.dll 2011-03-09 10:45:06 177664 ----a-w- c:\windows\system32\mpg2splt.ax 2011-03-09 10:45:05 153088 ----a-w- c:\windows\system32\sbeio.dll 2011-03-09 10:45:02 677888 ----a-w- c:\windows\system32\mstsc.exe 2011-03-09 10:45:02 2067968 ----a-w- c:\windows\system32\mstscax.dll . ==================== Find3M ==================== . 2011-02-02 16:11:20 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-01-20 16:08:16 478720 ----a-w- c:\windows\system32\dxgi.dll 2011-01-20 16:08:06 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2011-01-20 16:08:06 189952 ----a-w- c:\windows\system32\d3d10core.dll 2011-01-20 16:08:06 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2011-01-20 16:08:06 1029120 ----a-w- c:\windows\system32\d3d10.dll 2011-01-20 16:07:58 37376 ----a-w- c:\windows\system32\cdd.dll 2011-01-20 16:07:42 258048 ----a-w- c:\windows\system32\winspool.drv 2011-01-20 16:07:16 586240 ----a-w- c:\windows\system32\stobject.dll 2011-01-20 16:06:38 2873344 ----a-w- c:\windows\system32\mf.dll 2011-01-20 16:06:35 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll 2011-01-20 16:04:54 98816 ----a-w- c:\windows\system32\mfps.dll 2011-01-20 16:04:54 209920 ----a-w- c:\windows\system32\mfplat.dll 2011-01-20 14:28:38 1554432 ----a-w- c:\windows\system32\xpsservices.dll 2011-01-20 14:27:50 876032 ----a-w- c:\windows\system32\XpsPrint.dll 2011-01-20 14:26:30 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe 2011-01-20 14:25:25 847360 ----a-w- c:\windows\system32\OpcServices.dll 2011-01-20 14:24:26 135680 ----a-w- c:\windows\system32\XpsRasterService.dll 2011-01-20 14:15:10 979456 ----a-w- c:\windows\system32\MFH264Dec.dll 2011-01-20 14:14:39 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll 2011-01-20 14:14:03 302592 ----a-w- c:\windows\system32\mfmp4src.dll 2011-01-20 14:14:03 261632 ----a-w- c:\windows\system32\mfreadwrite.dll 2011-01-20 14:12:46 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2011-01-20 14:11:34 486400 ----a-w- c:\windows\system32\d3d10level9.dll 2011-01-20 13:47:51 683008 ----a-w- c:\windows\system32\d2d1.dll 2011-01-08 08:47:50 34304 ----a-w- c:\windows\system32\atmlib.dll 2011-01-08 06:28:49 292352 ----a-w- c:\windows\system32\atmfd.dll 2010-12-31 13:57:01 2039808 ----a-w- c:\windows\system32\win32k.sys 2010-12-28 15:55:03 413696 ----a-w- c:\windows\system32\odbc32.dll . ============= FINISH: 11:10:46,32 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft® Windows Vista™ Home Basic Boot Device: \Device\HarddiskVolume2 Install Date: 21.4.2010 г. 22:41:12 System Uptime: 26.3.2011 г. 10:53:56 (1 hours ago) . Motherboard: eMachines | | eMachines D620 Processor: AMD Athlon Processor 2650e | Socket M2/S1G1 | 1600/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 139 GiB total, 52,521 GiB free. D: is CDROM () E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP227: 17.3.2011 г. 01:05:58 - Scheduled Checkpoint RP228: 18.3.2011 г. 19:02:41 - Windows Update RP229: 19.3.2011 г. 11:23:12 - Scheduled Checkpoint RP230: 20.3.2011 г. 10:56:42 - Scheduled Checkpoint RP231: 21.3.2011 г. 16:53:30 - Scheduled Checkpoint RP232: 22.3.2011 г. 07:05:02 - Scheduled Checkpoint RP233: 23.3.2011 г. 08:47:07 - Windows Update RP234: 23.3.2011 г. 10:23:16 - Windows Update RP235: 24.3.2011 г. 07:26:42 - Windows Update RP236: 25.3.2011 г. 22:50:11 - Windows Update . ==== Installed Programs ====================== . 2007 Microsoft Office Suite Service Pack 1 (SP1) Acrobat.com Adobe AIR Adobe Flash Player 10 Plugin Adobe Flash Player ActiveX Adobe Reader 9.4.2 Advanced SystemCare 3 Agatha Christie Death on the Nile Alice Greenfingers Amazing Adventures The Lost Tomb AMD USB Audio Driver Filter Ashampoo Burning Studio 10.0.4 ATI Catalyst Install Manager AVS DVD Player version 1.3.1.82 AVS Video Converter 7 Bejeweled 2 Deluxe Bookworm Deluxe Bricks of Egypt Build-a-lot Cake Mania Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization Chinese Standard Catalyst Control Center Localization Chinese Traditional Catalyst Control Center Localization Czech Catalyst Control Center Localization Danish Catalyst Control Center Localization Dutch Catalyst Control Center Localization Finnish Catalyst Control Center Localization French Catalyst Control Center Localization German Catalyst Control Center Localization Greek Catalyst Control Center Localization Hungarian Catalyst Control Center Localization Italian Catalyst Control Center Localization Japanese Catalyst Control Center Localization Korean Catalyst Control Center Localization Norwegian Catalyst Control Center Localization Polish Catalyst Control Center Localization Portuguese Catalyst Control Center Localization Russian Catalyst Control Center Localization Spanish Catalyst Control Center Localization Swedish Catalyst Control Center Localization Thai Catalyst Control Center Localization Turkish ccc-core-static ccc-utility CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish Chuzzle Compatibility Pack for the 2007 Office system Curse Client Diner Dash Dream Day First Home eMachines eMachines Recovery Management Farm Frenzy FlexType 2K Full Tilt Poker Galapago Game Booster Google Chrome Google Update Helper Google чµјя Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) InterVideo WinDVD 8 Java Auto Updater Java 6 Update 23 K-Lite Mega Codec Pack 6.4.0 Launch Manager LightScribe 1.4.142.1 Luxor Mahjong Escape Ancient China Malwarebytes' Anti-Malware Marvell Miniport Driver Microsoft .NET Compact Framework 1.0 SP3 Developer Microsoft .NET Compact Framework 2.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft Device Emulator version 1.0 - ENU Microsoft Document Explorer 2005 Microsoft Office Excel MUI (English) 2007 Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Professional Edition 2003 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Suite Activation Assistant Microsoft Office Word MUI (English) 2007 Microsoft SQL Server 2005 Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Mobile [ENU] Developer Tools Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server Native Client Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server VSS Writer Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual J# 2.0 Redistributable Package Microsoft Visual Studio 2005 Professional Edition - ENU Microsoft Works Mozilla Firefox (3.6.15) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Mu Playring Music Unlimited Mystery Case Files - Huntsville Mystery Solitaire - Secret Island Need for Speed™ Most Wanted Need For Speed™ World Nokia Connectivity Cable Driver NTI Backup Now 5 NTI Backup Now Standard PC Connectivity Solution Realtek High Definition Audio Driver Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Skins Skype™ 5.1 TeamSpeak 2 RC2 TeamSpeak 3 Client Turbo Pizza Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Office 2007 (KB946691) Ventrilo Client VNC Free Edition 4.1.3 Winamp Windows Media Player Firefox Plugin WinRAR archiver World of Warcraft WYSIWYG Web Builder 7 Zuma Deluxe µTorrent . ==== Event Viewer Messages From Past Week ======== . 26.3.2011 і. 10:55:35, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 26.3.2011 і. 10:54:58, Error: EventLog [6008] - The previous system shutdown at 10:53 ч. on 26.3.2011 і. was unexpected. 26.3.2011 і. 10:54:08, Error: volmgr [46] - Crash dump initialization failed! 26.3.2011 і. 10:54:02, Error: volmgr [46] - Crash dump initialization failed! 26.3.2011 і. 08:02:16, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. 25.3.2011 і. 12:43:40, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 10.59.1.147 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 25.3.2011 і. 09:59:21, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ETService service. 24.3.2011 і. 07:10:23, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. 23.3.2011 і. 16:18:12, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 23.3.2011 і. 16:18:12, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 23.3.2011 і. 16:18:12, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 23.3.2011 і. 16:02:44, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 23.3.2011 і. 16:01:18, Error: volmgr [46] - Crash dump initialization failed! 23.3.2011 і. 16:01:11, Error: volmgr [46] - Crash dump initialization failed! 23.3.2011 і. 11:02:41, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 23.3.2011 і. 11:02:41, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 23.3.2011 і. 11:02:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 22.3.2011 і. 20:22:21, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 20:22:21, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 17:03:06, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 17:03:06, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 09:09:49, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 09:09:49, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 09:09:49, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 21.3.2011 і. 20:46:42, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 20:46:42, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 15:28:31, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 15:28:31, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:48:49, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:48:49, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:13:14, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:13:14, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:01:02, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:01:02, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:01:02, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 21.3.2011 і. 07:52:26, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.123.100 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 10.59.1.1 (The DHCP Server sent a DHCPNACK message). 21.3.2011 і. 07:51:46, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Ati External Event Utility service. 20.3.2011 і. 15:06:50, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 15:06:50, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 10:09:36, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 10:09:36, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 09:47:19, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ETService service. 20.3.2011 і. 03:56:24, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.1.9 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 20.3.2011 і. 02:22:06, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 02:22:06, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 01:16:50, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 01:16:50, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 00:12:23, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 00:12:23, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 00:12:23, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 19.3.2011 і. 22:14:06, Error: srv [2017] - The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations. 19.3.2011 і. 22:14:03, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.123.100 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message). 19.3.2011 і. 07:12:30, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 19.3.2011 і. 07:12:30, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 19.3.2011 і. 07:10:32, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ShellHWDetection service. . ==== End Of File ===========================

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте..!Да продължим така :

    • Изтеглете програмата: ESET Online Scanner
    • Стартирайте esetsmartinstaller_enu.exe Публикувано изображение
    • Сложете отметка на YES, I accept the Terms of Use и изберете Start:

      Публикувано изображение

    • Скенерът ще започне да изтегля компонентите, които са му необходими:

      Публикувано изображение

    • Уверете се, че има отметки на следните редове:

      Публикувано изображение

      Накрая изберете Start

    • Скенерът ще започне да изтегля последните дефиниции.
    • След, като сканирането завърши изберете Finish.
    • Отидете в: C:\Program Files\ESET\ESET Online Scanner
    • Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Здравейте Яворе!

    Аз съм Maniac и ще Ви помагам да почистите вашата система от зловреден софтуер. Анализа на логовете, както и премахването на зловредния софтуер, може да отнеме време, затова моля бъдете търпеливи. Моля, имайте предвид следното:

    • Аз ще Ви помагам само за почистването на вашата система от зловреден софтуер. За всякакви други проблеми, моля създайте нова тема в съответния форум и опишете детайлно проблема Ви.
    • Решението се отнася само за този проблем и само на този компютър.
    • Задължително трябва да разполагате с администраторски привилегии, за да получим възможността успешно да почистим вашата системата.
    • Следвайте инструкциите ми стриктно, докато не Ви кажа, че системата Ви е напълно чиста. Това, че симптомите са изчезнали, не значи че всичко е наред.
    • Ако не разбирате нещо, моля Ви попитайте ме, а не рискувайте. По-добре е малко да се позабавим, отколкото да усложним нещата.
    • При наличие на руткит, аз не гарантирам 100% почистване.
    • Проявете търпение, защото процедурата по почистването на вашата система може да отнеме известно време, в зависимост от вида на зловредния софтуер.
    • Цялата кореспонденция минава през тази тема, не създавайте нова тема и не използвайте друга тема за тази цел.
    • Публикувайте лог файловете си директно във вашия коментар, вместо да бъдат прикачвани.

    По молба на @icotonev, аз поемам случая ви от тук. Предполагам, че файлът е голям и сканирането отнема повече време. Моля, изчакайте!

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6425 # api_version=3.0.2 # EOSSerial=3d417cd58f6f4c4a817f35a3681e20c9 # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-03-26 12:36:21 # local_time=2011-03-26 02:36:21 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=6.0.6002 NT Service Pack 2 # compatibility_mode=5892 16776573 100 100 50762 138666217 0 0 # compatibility_mode=8192 67108863 100 0 3828 3828 0 0 # scanned=156225 # found=1 # cleaned=1 # scan_time=9536 C:\Users\user\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\3f5168c5-1b2b6166 Java/TrojanDownloader.Agent.NBB trojan (deleted - quarantined) 00000000000000000000000000000000 C


    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Благодаря! Обновете Malwarebytes' Anti-Malware и направете бързо сканиране на вашата система. Накрая публикувайте лог файла, заедно с нов свеж лог файл от DDS.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Извинете за отсъствието ми вчера но възникна сериозен проблем и бях принуден да изляза. Пускам сканирането след като приключи ще постна лога!

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6173 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.19019 27.3.2011 г. 13:28:23 mbam-log-2011-03-27 (13-28-23).txt Scan type: Quick scan Objects scanned: 149353 Time elapsed: 6 minute(s), 27 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) ============================================= . DDS (Ver_11-03-05.01) - NTFSx86 Run by user at 13:42:32,57 on ­Ґ¤ 27.03.2011 Ј. Internet Explorer: 8.0.6001.19019 BrowserJavaVersion: 1.6.0_23 Microsoft® Windows Vista™ Home Basic 6.0.6002.2.1251.359.1033.18.1789.992 [GMT 3:00] . SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k rpcss C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\Ati2evxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k GPSvcGroup C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\Ati2evxx.exe C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\system32\taskeng.exe C:\Windows\Explorer.EXE C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\EMACHINES\eMachines Recovery Management\Service\ETService.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\wbem\unsecapp.exe C:\Windows\system32\wbem\wmiprvse.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\System32\spoolsv.exe C:\Windows\System32\svchost.exe -k WerSvcGroup C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\SearchIndexer.exe C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\user\Desktop\dds.scr C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://start.icq.com/ uDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 mStart Page = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 mDefault_Page_URL = hxxp://homepage.emachines.com/rdr.aspx?b=ACEW&l=0409&s=2&o=vb32&d=1209&m=d620 uInternet Settings,ProxyServer = proxy:8080 uInternet Settings,ProxyOverride = <local> uURLSearchHooks: ICQToolBar: {855f3b16-6d32-4fe6-8a56-bbb695989046} - uURLSearchHooks: H - No File EB: {855f3b16-6d32-4fe6-8a56-bbb695989046} - ICQToolBar uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide mRun: [startCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun mRun: [skytel] Skytel.exe StartupFolder: c:\users\user\appdata\roaming\microsoft\windows\start menu\programs\startup\CurseClientStartup.ccip mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) Trusted Zone: real.com\rhap-app-4-0 Trusted Zone: real.com\rhapreg TCP: {9320EF47-532A-4291-998C-C147787C40C9} = 88.87.0.2 . ================= FIREFOX =================== . FF - ProfilePath - c:\users\user\appdata\roaming\mozilla\firefox\profiles\bkct3qx0.default\ FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll FF - plugin: c:\users\user\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b} . ============= SERVICES / DRIVERS =============== . R2 ETService;Empowering Technology Service;c:\program files\emachines\emachines recovery management\service\ETService.exe [2010-4-21 24576] R2 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2008-1-21 21504] R2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-4-18 11032] R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [2008-8-28 22072] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S2 gupdate;Ус»уі° Google Update (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-3-14 136176] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\program files\microsoft visual studio 8\common7\ide\remote debugger\x86\msvsmon.exe [2005-9-23 2799808] . =============== Created Last 30 ================ . 2011-03-26 09:53:37 -------- d-----w- c:\program files\ESET 2011-03-25 20:51:22 6792528 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{2951f69a-2439-4d81-aad7-c16f8954943b}\mpengine.dll 2011-03-23 06:53:29 797696 ----a-w- c:\windows\system32\FntCache.dll 2011-03-23 06:53:29 288768 ----a-w- c:\windows\system32\XpsGdiConverter.dll 2011-03-23 06:53:29 1068544 ----a-w- c:\windows\system32\DWrite.dll 2011-03-10 21:07:48 -------- d-----w- c:\progra~2\IObit 2011-03-10 20:57:44 -------- d-----w- c:\users\user\appdata\roaming\IObit 2011-03-10 20:57:43 -------- d-----w- c:\program files\IObit 2011-03-09 10:45:06 429056 ----a-w- c:\windows\system32\EncDec.dll 2011-03-09 10:45:06 322560 ----a-w- c:\windows\system32\sbe.dll 2011-03-09 10:45:06 177664 ----a-w- c:\windows\system32\mpg2splt.ax 2011-03-09 10:45:05 153088 ----a-w- c:\windows\system32\sbeio.dll 2011-03-09 10:45:02 677888 ----a-w- c:\windows\system32\mstsc.exe 2011-03-09 10:45:02 2067968 ----a-w- c:\windows\system32\mstscax.dll . ==================== Find3M ==================== . 2011-02-02 16:11:20 222080 ------w- c:\windows\system32\MpSigStub.exe 2011-01-20 16:08:16 478720 ----a-w- c:\windows\system32\dxgi.dll 2011-01-20 16:08:06 219648 ----a-w- c:\windows\system32\d3d10_1core.dll 2011-01-20 16:08:06 189952 ----a-w- c:\windows\system32\d3d10core.dll 2011-01-20 16:08:06 160768 ----a-w- c:\windows\system32\d3d10_1.dll 2011-01-20 16:08:06 1029120 ----a-w- c:\windows\system32\d3d10.dll 2011-01-20 16:07:58 37376 ----a-w- c:\windows\system32\cdd.dll 2011-01-20 16:07:42 258048 ----a-w- c:\windows\system32\winspool.drv 2011-01-20 16:07:16 586240 ----a-w- c:\windows\system32\stobject.dll 2011-01-20 16:06:38 2873344 ----a-w- c:\windows\system32\mf.dll 2011-01-20 16:06:35 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll 2011-01-20 16:04:54 98816 ----a-w- c:\windows\system32\mfps.dll 2011-01-20 16:04:54 209920 ----a-w- c:\windows\system32\mfplat.dll 2011-01-20 14:28:38 1554432 ----a-w- c:\windows\system32\xpsservices.dll 2011-01-20 14:27:50 876032 ----a-w- c:\windows\system32\XpsPrint.dll 2011-01-20 14:26:30 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe 2011-01-20 14:25:25 847360 ----a-w- c:\windows\system32\OpcServices.dll 2011-01-20 14:24:26 135680 ----a-w- c:\windows\system32\XpsRasterService.dll 2011-01-20 14:15:10 979456 ----a-w- c:\windows\system32\MFH264Dec.dll 2011-01-20 14:14:39 357376 ----a-w- c:\windows\system32\MFHEAACdec.dll 2011-01-20 14:14:03 302592 ----a-w- c:\windows\system32\mfmp4src.dll 2011-01-20 14:14:03 261632 ----a-w- c:\windows\system32\mfreadwrite.dll 2011-01-20 14:12:46 1172480 ----a-w- c:\windows\system32\d3d10warp.dll 2011-01-20 14:11:34 486400 ----a-w- c:\windows\system32\d3d10level9.dll 2011-01-20 13:47:51 683008 ----a-w- c:\windows\system32\d2d1.dll 2011-01-08 08:47:50 34304 ----a-w- c:\windows\system32\atmlib.dll 2011-01-08 06:28:49 292352 ----a-w- c:\windows\system32\atmfd.dll 2010-12-31 13:57:01 2039808 ----a-w- c:\windows\system32\win32k.sys 2010-12-28 15:55:03 413696 ----a-w- c:\windows\system32\odbc32.dll . ============= FINISH: 13:45:49,80 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_11-03-05.01) . Microsoft® Windows Vista™ Home Basic Boot Device: \Device\HarddiskVolume2 Install Date: 21.4.2010 г. 22:41:12 System Uptime: 26.3.2011 г. 10:53:56 (27 hours ago) . Motherboard: eMachines | | eMachines D620 Processor: AMD Athlon Processor 2650e | Socket M2/S1G1 | 1600/200mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 139 GiB total, 52,038 GiB free. D: is CDROM () E: is CDROM () . ==== Disabled Device Manager Items ============= . ==== System Restore Points =================== . RP229: 19.3.2011 г. 11:23:12 - Scheduled Checkpoint RP230: 20.3.2011 г. 10:56:42 - Scheduled Checkpoint RP231: 21.3.2011 г. 16:53:30 - Scheduled Checkpoint RP232: 22.3.2011 г. 07:05:02 - Scheduled Checkpoint RP233: 23.3.2011 г. 08:47:07 - Windows Update RP234: 23.3.2011 г. 10:23:16 - Windows Update RP235: 24.3.2011 г. 07:26:42 - Windows Update RP236: 25.3.2011 г. 22:50:11 - Windows Update RP237: 26.3.2011 г. 17:22:46 - Scheduled Checkpoint . ==== Installed Programs ====================== . 2007 Microsoft Office Suite Service Pack 1 (SP1) Acrobat.com Adobe AIR Adobe Flash Player 10 Plugin Adobe Flash Player ActiveX Adobe Reader 9.4.2 Advanced SystemCare 3 Agatha Christie Death on the Nile Alice Greenfingers Amazing Adventures The Lost Tomb AMD USB Audio Driver Filter Ashampoo Burning Studio 10.0.4 ATI Catalyst Install Manager AVS DVD Player version 1.3.1.82 AVS Video Converter 7 Bejeweled 2 Deluxe Bookworm Deluxe Bricks of Egypt Build-a-lot Cake Mania Catalyst Control Center Core Implementation Catalyst Control Center Graphics Full Existing Catalyst Control Center Graphics Full New Catalyst Control Center Graphics Light Catalyst Control Center Graphics Previews Vista Catalyst Control Center InstallProxy Catalyst Control Center Localization Chinese Standard Catalyst Control Center Localization Chinese Traditional Catalyst Control Center Localization Czech Catalyst Control Center Localization Danish Catalyst Control Center Localization Dutch Catalyst Control Center Localization Finnish Catalyst Control Center Localization French Catalyst Control Center Localization German Catalyst Control Center Localization Greek Catalyst Control Center Localization Hungarian Catalyst Control Center Localization Italian Catalyst Control Center Localization Japanese Catalyst Control Center Localization Korean Catalyst Control Center Localization Norwegian Catalyst Control Center Localization Polish Catalyst Control Center Localization Portuguese Catalyst Control Center Localization Russian Catalyst Control Center Localization Spanish Catalyst Control Center Localization Swedish Catalyst Control Center Localization Thai Catalyst Control Center Localization Turkish ccc-core-static ccc-utility CCC Help Chinese Standard CCC Help Chinese Traditional CCC Help Czech CCC Help Danish CCC Help Dutch CCC Help English CCC Help Finnish CCC Help French CCC Help German CCC Help Greek CCC Help Hungarian CCC Help Italian CCC Help Japanese CCC Help Korean CCC Help Norwegian CCC Help Polish CCC Help Portuguese CCC Help Russian CCC Help Spanish CCC Help Swedish CCC Help Thai CCC Help Turkish Chuzzle Compatibility Pack for the 2007 Office system Curse Client Diner Dash Dream Day First Home eMachines eMachines Recovery Management ESET Online Scanner v3 Farm Frenzy FlexType 2K Full Tilt Poker Galapago Game Booster Google Chrome Google Update Helper Google чµјя Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) InterVideo WinDVD 8 Java Auto Updater Java 6 Update 23 K-Lite Mega Codec Pack 6.4.0 Launch Manager LightScribe 1.4.142.1 Luxor Mahjong Escape Ancient China Malwarebytes' Anti-Malware Marvell Miniport Driver Microsoft .NET Compact Framework 1.0 SP3 Developer Microsoft .NET Compact Framework 2.0 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft Device Emulator version 1.0 - ENU Microsoft Document Explorer 2005 Microsoft Office Excel MUI (English) 2007 Microsoft Office Home and Student 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint Viewer 2007 (English) Microsoft Office Professional Edition 2003 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Suite Activation Assistant Microsoft Office Word MUI (English) 2007 Microsoft SQL Server 2005 Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Mobile [ENU] Developer Tools Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server Native Client Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server VSS Writer Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual J# 2.0 Redistributable Package Microsoft Visual Studio 2005 Professional Edition - ENU Microsoft Works Mozilla Firefox (3.6.15) MSXML 4.0 SP2 (KB954430) MSXML 4.0 SP2 (KB973688) Mu Playring Music Unlimited Mystery Case Files - Huntsville Mystery Solitaire - Secret Island Need for Speed™ Most Wanted Need For Speed™ World Nokia Connectivity Cable Driver NTI Backup Now 5 NTI Backup Now Standard PC Connectivity Solution Realtek High Definition Audio Driver Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Skins Skype™ 5.1 TeamSpeak 2 RC2 TeamSpeak 3 Client Turbo Pizza Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Office 2007 (KB946691) Ventrilo Client VNC Free Edition 4.1.3 Winamp Windows Media Player Firefox Plugin WinRAR archiver World of Warcraft WYSIWYG Web Builder 7 Zuma Deluxe µTorrent . ==== Event Viewer Messages From Past Week ======== . 27.3.2011 і. 06:41:35, Error: srv [2017] - The server was unable to allocate from the system nonpaged pool because the server reached the configured limit for nonpaged pool allocations. 27.3.2011 і. 06:41:13, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.123.101 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 26.3.2011 і. 20:23:50, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.123.100 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 26.3.2011 і. 20:23:13, Error: Tcpip [4199] - The system detected an address conflict for IP address 0.0.0.0 with the system having network hardware address 00-00-00-00-00-00. Network operations on this system may be disrupted as a result. 26.3.2011 і. 20:11:21, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 26.3.2011 і. 20:11:21, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 26.3.2011 і. 20:11:21, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 26.3.2011 і. 10:55:35, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 26.3.2011 і. 10:54:58, Error: EventLog [6008] - The previous system shutdown at 10:53 ч. on 26.3.2011 і. was unexpected. 26.3.2011 і. 10:54:08, Error: volmgr [46] - Crash dump initialization failed! 26.3.2011 і. 10:54:02, Error: volmgr [46] - Crash dump initialization failed! 26.3.2011 і. 08:02:16, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. 25.3.2011 і. 12:43:40, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 10.59.1.147 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 25.3.2011 і. 09:59:21, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ETService service. 24.3.2011 і. 07:10:23, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Netman service. 23.3.2011 і. 16:18:12, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 23.3.2011 і. 16:18:12, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 23.3.2011 і. 16:18:12, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 23.3.2011 і. 16:02:44, Error: Service Control Manager [7000] - The Parallel port driver service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 23.3.2011 і. 16:01:18, Error: volmgr [46] - Crash dump initialization failed! 23.3.2011 і. 16:01:11, Error: volmgr [46] - Crash dump initialization failed! 23.3.2011 і. 11:02:41, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 23.3.2011 і. 11:02:41, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 23.3.2011 і. 11:02:41, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 22.3.2011 і. 20:22:21, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 20:22:21, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 17:03:06, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 17:03:06, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 09:09:49, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 22.3.2011 і. 09:09:49, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 22.3.2011 і. 09:09:49, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 21.3.2011 і. 20:46:42, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 20:46:42, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 15:28:31, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 15:28:31, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:48:49, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:48:49, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:13:14, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:13:14, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:01:02, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 21.3.2011 і. 08:01:02, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 21.3.2011 і. 08:01:02, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} 21.3.2011 і. 07:52:26, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.123.100 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 10.59.1.1 (The DHCP Server sent a DHCPNACK message). 21.3.2011 і. 07:51:46, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Ati External Event Utility service. 20.3.2011 і. 15:06:50, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 15:06:50, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 10:09:36, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 10:09:36, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 09:47:19, Error: Service Control Manager [7011] - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the ETService service. 20.3.2011 і. 03:56:24, Error: Microsoft-Windows-Dhcp-Client [1002] - The IP address lease 192.168.1.9 for the Network Card with network address 00234DA4DE72 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message). 20.3.2011 і. 02:22:06, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 02:22:06, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 01:16:50, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 01:16:50, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 00:12:23, Error: Service Control Manager [7009] - A timeout was reached (30000 milliseconds) while waiting for the Windows Search service to connect. 20.3.2011 і. 00:12:23, Error: Service Control Manager [7000] - The Windows Search service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 20.3.2011 і. 00:12:23, Error: Microsoft-Windows-DistributedCOM [10005] - DCOM got error "1053" attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC08-4F1F-BEB7-5C22C517CE39} . ==== End Of File ===========================

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Интересното е че компютъра продължава да е бавен ;(

    Редактирано от Yavor Stoyanov (преглед на промените)

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Какво стана с Windows Defender? Правим проверки, но реално погледнато никаква следа от зловреден софтуер не се забелязва.

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Въз основа на всичко, което ми предоставихте като информация, смятам че проблемът ви не се дължи на зловреден софтуер.

    • Харесва ми 1

    Сподели този отговор


    Линк към този отговор
    Сподели в други сайтове

    Регистрирайте се или влезете в профила си за да коментирате

    Трябва да имате регистрация за да може да коментирате това

    Регистрирайте се

    Създайте нова регистрация в нашия форум. Лесно е!

    Нова регистрация

    Вход

    Имате регистрация? Влезте от тук.

    Вход


    ×

    Информация

    Този сайт използва бисквитки (cookies), за най-доброто потребителско изживяване. С използването му, вие приемате нашите Условия за ползване.