Здравейте. Забелязах, че в task manager имам два допълнителни процеса svchost.exe, принципно имам 5 такива активни, прекратих ръчно двата допълнителни, внимателно прегледах услугите които са на мануал, да не би да се е стратирал някой, но нямаше други стартирани.... Пуснах сканиране с антивирусната, но нищо не показа .... . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.6001.18702 Run by Rosen at 16:44:25 on 2011-12-13 Microsoft Windows XP Professional 5.1.2600.3.1251.359.1033.18.511.164 [GMT 2:00] . AV: ESET NOD32 Antivirus 3.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0} . ============== Running Processes =============== . C:\WINDOWS\system32\svchost.exe -k DcomLaunch svchost.exe C:\WINDOWS\System32\svchost.exe -k netsvcs svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\IObit\Advanced SystemCare 4\Suo10_SmartRAM.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Skype\Phone\Skype.exe . ============== Pseudo HJT Report =============== . uStart Page = hxxp://google.bg/ uInternet Settings,ProxyServer = http=193.124.164.253:80 BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll uRun: [smartRAM] "c:\program files\iobit\advanced systemcare 4\Suo10_SmartRAM.exe" /m uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE uPolicies-explorer: NoInstrumentation = 1 (0x1) IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - hxxp://download.eset.com/special/eos-beta/OnlineScanner.cab DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab TCP: Interfaces\{C2A023CD-E149-4041-B456-7F76BA5D7562} : NameServer = 93.155.228.1 Handler: AutorunsDisabled\skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll . ================= FIREFOX =================== . FF - ProfilePath - c:\documents and settings\rosen\application data\mozilla\firefox\profiles\714zt8gc.default\ FF - prefs.js: browser.startup.homepage - hxxp://google.bg FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} . ============= SERVICES / DRIVERS =============== . R0 RRamdisk;Ramdisk Driver;c:\windows\system32\drivers\rramdisk.sys [2011-10-4 10368] R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [2007-11-8 30728] R2 ekrn;Eset Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2007-11-8 455936] S3 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-4 14336] S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504] S4 ADASPROT;SYSTWEAKASO;\??\d:\advanced system optimizer 3\adasprot32.sys --> d:\advanced system optimizer 3\adasprot32.sys [?] S4 AdvancedSystemCareService;Advanced SystemCare Service;c:\program files\iobit\advanced systemcare 4\ASCService.exe [2011-10-24 353168] S4 CachemanXPService;CachemanXP;c:\program files\cachemanxp\cachemanxp.exe --> c:\program files\cachemanxp\CachemanXP.exe [?] S4 esihdrv;esihdrv;\??\d:\temp\esihdrv.sys --> d:\temp\esihdrv.sys [?] S4 WinFLdrv;WinFLdrv;c:\windows\system32\winfldrv.sys --> c:\windows\system32\WinFLdrv.sys [?] . =============== File Associations =============== . JSEFile=NOTEPAD.EXE %1 . =============== Created Last 30 ================ . 2011-12-07 08:50:27 -------- d-----w- c:\windows\system32\wbem\repository\FS 2011-12-07 08:50:27 -------- d-----w- c:\windows\system32\wbem\Repository 2011-12-07 08:49:59 -------- d-----w- c:\program files\Codebox 2011-12-04 15:05:19 -------- d-----w- c:\documents and settings\rosen\application data\uTorrent 2011-12-04 14:00:01 -------- d-----w- c:\documents and settings\all users\application data\Hagel Technologies 2011-12-04 13:31:08 -------- d-----w- c:\documents and settings\rosen\local settings\application data\Mozilla 2011-11-30 09:46:27 -------- d-----w- c:\windows\XSxS 2011-11-29 20:09:21 -------- d-----w- c:\documents and settings\rosen\local settings\application data\ESET 2011-11-29 20:09:21 -------- d-----w- c:\documents and settings\rosen\application data\ESET 2011-11-27 17:30:14 -------- d-----w- c:\documents and settings\rosen\local settings\application data\ESET(2) 2011-11-27 11:26:47 -------- d-----w- c:\documents and settings\rosen\local settings\application data\Temp 2011-11-27 08:06:41 -------- d-----w- c:\documents and settings\all users\application data\AltrixSoft 2011-11-21 16:36:53 -------- d-----w- c:\documents and settings\all users\application data\ESET(2) 2011-11-21 08:38:14 -------- d-----w- c:\documents and settings\rosen\application data\Mozilla(2) . ==================== Find3M ==================== . 2011-11-17 11:24:37 361344 ----a-w- c:\windows\system32\drivers\tcpip.sys 2011-11-11 11:33:00 162816 ----a-w- c:\windows\system32\drivers\netbt.sys . ============= FINISH: 16:45:11,29 =============== . UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-08-26.01) . Microsoft Windows XP Professional Boot Device: \Device\HarddiskVolume1 Install Date: 10.12.2010 г. 23:37:09 System Uptime: 13.12.2011 г. 10:05:17 (6 hours ago) . Motherboard: | | i815-W83627 Processor: Intel® Celeron CPU 1300MHz | Socket 370 | 1302/100mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 19 GiB total, 11,461 GiB free. D: is FIXED (NTFS) - 20 GiB total, 10,574 GiB free. . ==== Disabled Device Manager Items ============= . Class GUID: {4D36E969-E325-11CE-BFC1-08002BE10318} Description: Standard floppy disk controller Device ID: ACPI\PNP0700\3&13C0B0C5&0 Manufacturer: (Standard floppy disk controllers) Name: Standard floppy disk controller PNP Device ID: ACPI\PNP0700\3&13C0B0C5&0 Service: fdc . Class GUID: {4D36E978-E325-11CE-BFC1-08002BE10318} Description: Communications Port Device ID: ACPI\PNP0501\1 Manufacturer: (Standard port types) Name: Communications Port (COM1) PNP Device ID: ACPI\PNP0501\1 Service: Serial . Class GUID: {4D36E978-E325-11CE-BFC1-08002BE10318} Description: Communications Port Device ID: ACPI\PNP0501\2 Manufacturer: (Standard port types) Name: Communications Port (COM2) PNP Device ID: ACPI\PNP0501\2 Service: Serial . Class GUID: {4D36E978-E325-11CE-BFC1-08002BE10318} Description: ECP Printer Port Device ID: ACPI\PNP0401\3&13C0B0C5&0 Manufacturer: (Standard port types) Name: ECP Printer Port (LPT1) PNP Device ID: ACPI\PNP0401\3&13C0B0C5&0 Service: Parport . ==== System Restore Points =================== . RP35: 27.11.2011 г. 09:00:55 - Restore Operation RP36: 23.11.2011 г. 08:04:12 - Before uninstalling Mozilla Firefox (3.5.4) RP37: 27.11.2011 г. 09:00:45 - IObit Uninstaller restore point RP38: 24.11.2011 г. 08:53:09 - System Checkpoint RP39: 09.12.2011 г. 23:20:52 - System Checkpoint RP40: 29.11.2011 г. 22:51:24 - Restore Operation RP41: 29.11.2011 г. 22:51:34 - Restore Operation RP42: 09.12.2011 г. 23:21:08 - System Checkpoint RP43: 29.11.2011 г. 22:51:15 - Restore Operation RP44: 09.12.2011 г. 23:20:08 - Restore Operation RP45: 29.11.2011 г. 22:51:42 - Before uninstalling Mozilla Firefox (3.5.4) RP46: 29.11.2011 г. 22:51:45 - Before uninstalling Mozilla Firefox (3.5.4) RP47: 03.12.2011 г. 19:03:23 - Before uninstalling Mozilla Firefox (3.5.4) RP48: 03.12.2011 г. 19:04:11 - System Checkpoint RP49: 03.12.2011 г. 19:03:16 - Before uninstalling SVD RP50: 06.12.2011 г. 17:17:49 - Before uninstalling µTorrent RP51: 03.12.2011 г. 18:26:59 - Installed NetLimiter 3 RP52: 04.12.2011 г. 00:00:58 - Installed NetLimiter 3 RP53: 04.12.2011 г. 12:05:10 - Installed NetLimiter 3 RP54: 06.12.2011 г. 17:17:53 - Before uninstalling BitMeter RP55: 06.12.2011 г. 17:17:57 - Before uninstalling µTorrent RP56: 05.12.2011 г. 13:48:21 - ddd RP57: 09.12.2011 г. 23:21:15 - Restore Operation RP58: 07.12.2011 г. 10:49:31 - Restore Operation RP59: 09.12.2011 г. 11:04:40 - Before uninstalling SUPERAntiSpyware RP60: 12.12.2011 г. 20:36:33 - System Checkpoint . ==== Installed Programs ====================== . µTorrent Adobe AIR Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Reader 9.4.0 Advanced SystemCare 4 Avance AC'97 Audio Bulgarian (Phonetic Traditional) C-Media WDM Audio Driver CCleaner Compatibility Pack for the 2007 Office system ESET NOD32 Antivirus Google Chrome HD Tune 2.55 HD Tune Pro 4.60 Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) ItaEst - Taka e! K-Lite Codec Pack 7.2.0 (Standard) Malwarebytes' Anti-Malware, версия 1.51.2.1300 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Security Update (KB2416447) Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Office Professional Edition 2003 Microsoft Silverlight Microsoft Visual C++ 2005 Redistributable Mozilla Firefox (3.5.4) Opera 11.50 PowerISO SA Dictionary 2008 Beta 4 Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473) Security Update for Windows Internet Explorer 8 (KB2360131) Security Update for Windows Internet Explorer 8 (KB971961) Security Update for Windows Internet Explorer 8 (KB981332) Security Update for Windows Internet Explorer 8 (KB982381) Security Update for Windows XP (KB2360131) Security Update for Windows XP (KB971961) Security Update for Windows XP (KB975713) Security Update for Windows XP (KB981349) Skype™ 3.8 Smart Defrag SVD TeamViewer 4 Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Windows Internet Explorer 8 (KB2447568) Update for Windows Internet Explorer 8 (KB976662) Update for Windows XP (KB951978) WebFldrs XP Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray Windows Internet Explorer 8 Windows Management Framework Core Windows Media Format 11 runtime Windows Media Format SDK Hotfix - KB891122 Windows Media Player 11 WinRAR archiver Your Uninstaller! 2010 . ==== Event Viewer Messages From Past Week ======== . 13.12.2011 г. 11:00:01, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 13.12.2011 г. 10:22:20, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 13.12.2011 г. 10:09:28, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 23:16:02, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 12.12.2011 г. 23:16:02, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 12.12.2011 г. 23:16:01, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 12.12.2011 г. 23:16:01, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 12.12.2011 г. 23:14:59, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 14:41:07, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 12.12.2011 г. 14:36:40, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 12.12.2011 г. 12:13:46, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 12.12.2011 г. 11:45:29, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 11:43:24, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 11:06:34, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 12.12.2011 г. 11:05:40, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 09:42:55, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 12.12.2011 г. 09:36:16, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 09:32:27, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 12.12.2011 г. 00:00:35, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Eset Service service, but this action failed with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 12.12.2011 г. 00:00:35, error: Service Control Manager [7031] - The Eset Service service terminated unexpectedly. It has done this 3 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 11.12.2011 г. 23:59:48, error: Service Control Manager [7031] - The Eset Service service terminated unexpectedly. It has done this 2 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 11.12.2011 г. 23:59:41, error: Service Control Manager [7031] - The Eset Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 11.12.2011 г. 16:57:04, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 11.12.2011 г. 16:57:01, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 11.12.2011 г. 16:52:04, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 11.12.2011 г. 14:18:22, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 11.12.2011 г. 09:07:45, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 10.12.2011 г. 21:29:52, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 21:27:40, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 21:22:11, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 13:52:27, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 09:53:01, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 09:50:16, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 10.12.2011 г. 09:15:13, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 10.12.2011 г. 00:28:58, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 09.12.2011 г. 21:20:36, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 09.12.2011 г. 21:20:36, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 09.12.2011 г. 21:20:35, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 09.12.2011 г. 21:20:35, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 09.12.2011 г. 16:45:33, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 09.12.2011 г. 11:21:29, error: PlugPlayManager [11] - The device Root\LEGACY_SASKUTIL\0000 disappeared from the system without first being prepared for removal. 09.12.2011 г. 11:21:29, error: PlugPlayManager [11] - The device Root\LEGACY_SASDIFSV\0000 disappeared from the system without first being prepared for removal. 09.12.2011 г. 11:21:13, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 09.12.2011 г. 11:21:13, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 09.12.2011 г. 11:21:12, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 09.12.2011 г. 11:21:12, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 08.12.2011 г. 18:53:45, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 18:53:43, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 18:32:11, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 08.12.2011 г. 15:05:19, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 15:05:18, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 15:02:30, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 15:02:28, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service BITS with arguments "" in order to run the server: {4991D34B-80A1-4291-83B6-3328366B9097} 08.12.2011 г. 14:49:19, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 08.12.2011 г. 14:44:03, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 08.12.2011 г. 14:27:50, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 08.12.2011 г. 12:28:13, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 08.12.2011 г. 12:17:31, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 08.12.2011 г. 10:21:58, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 08.12.2011 г. 09:12:53, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 08.12.2011 г. 09:01:46, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 07.12.2011 г. 23:10:32, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 07.12.2011 г. 23:08:47, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 07.12.2011 г. 23:07:08, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 07.12.2011 г. 18:17:40, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 06.12.2011 г. 23:53:02, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 23:35:12, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 17:44:20, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Eset Service service, but this action failed with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 06.12.2011 г. 17:44:20, error: Service Control Manager [7031] - The Eset Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 06.12.2011 г. 17:35:47, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:47, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:47, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:47, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:46, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:45, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:45, error: SideBySide [59] - Resolve Partial Assembly failed for Microsoft.Windows.Common-Controls. Reference error message: The system cannot find the path specified. . 06.12.2011 г. 17:35:45, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:35:45, error: SideBySide [59] - Generate Activation Context failed for C:\Program Files\Quick Hide IP\Quick Hide IP.exe. Reference error message: The operation completed successfully. . 06.12.2011 г. 17:13:27, error: Service Control Manager [7032] - The Service Control Manager tried to take a corrective action (Restart the service) after the unexpected termination of the Eset Service service, but this action failed with the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. 06.12.2011 г. 17:13:27, error: Service Control Manager [7031] - The Eset Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service. 06.12.2011 г. 15:23:16, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 15:13:36, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 14:01:37, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 06.12.2011 г. 13:27:39, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 13:08:51, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 12:46:26, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 06.12.2011 г. 12:46:26, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 06.12.2011 г. 12:46:25, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the HDD Information Service service to connect. 06.12.2011 г. 12:46:25, error: Service Control Manager [7000] - The HDD Information Service service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion. 06.12.2011 г. 11:56:09, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334} 06.12.2011 г. 10:18:59, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} 06.12.2011 г. 09:41:10, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE} 06.12.2011 г. 08:15:43, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service upnphost with arguments "" in order to run the server: {204810B9-73B2-11D4-BF42-00B0D0118B56} . ==== End Of File ===========================

Здравейте..!Това руско прокси познато ли ви е..?

нямам прокси в мозила прегледах браузърите за проксита - беше в опцийте на интернет експлорер .... изтрих го

Редактирано 13 декември 201114 г. от titan1976 (преглед на промените)

Прекрасно..!Иначе дневника изглежда наред..!И все пак да направим контролни сканирания:

Изтеглете Malwarebytes' Anti-Malware или от тук

* Кликнете два пъти върху mbam-setup.exe, за да инсталирате програмата.

* Уверете се, че са поставени отметки на Update Malwarebytes' Anti-Malware и Launch Malwarebytes' Anti-Malware. След това кликнете на Finish.

* Ако има намерени обновявания, тя ще ги изтегли и инсталира.

* Стартирайте програмата и изберете "Perform Full Scan", след това кликнете на Scan.

* Сканирането ще отнеме малко време, затова моля да бъдете търпеливи.

* Когато сканирането завърши, кликнете на OK, след това Show Results, за да видите резултата.

* Уверете се, че на всички редове има отметки, и кликнете на Remove Selected.

* Когато всичко бъде премахнато, в Notepad ще бъде отворен лог. Копирайте този лог и го публикувайте в следващия си коментар по темата.

Забележка: Ако MalwareBytes' Anti-Malware се затрудни в премахването на откритите вируси/заплахи, той ще поиска да рестартира компютъра Ви и по време на рестартирането да премахне проблемните вируси/заплахи. Ако бъдете попитани, потвърдете че желаете вашия компютър да бъде рестартиран.

Изтеглете програмата: ESET Online Scanner

• Стартирайте esetsmartinstaller_enu.exe
• Сложете отметка на YES, I accept the Terms of Use и изберете Start:

  

• Скенерът ще започне да изтегля компонентите, които са му необходими:

  

• Уверете се, че има отметки на следните редове:

  

  Накрая изберете Start

• Скенерът ще започне да изтегля последните дефиниции.
• След, като сканирането завърши изберете Finish.
• Отидете в: C:\Program Files\ESET\ESET Online Scanner
• Отворете файла log.txt , копирайте съдържанието му и го поставете в следващия си коментар.

ето резултата от Malwarebyte, направи ми впечатление, че програмата стигна до хилядния файл и след това прескочи на 27000-ния и продължи Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Версия на базата от данни: 8365 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 13.12.2011 г. 19:55:35 mbam-log-2011-12-13 (19-55-34).txt Тип сканиране: Пълно сканиране (C:\|) Сканирани обекти: 207959 Изминало време: 36 минута(и), 17 секунда(и) Заразени процеси в паметта: 0 Заразени модули в паметта: 0 Заразени ключове в регистратурата: 0 Заразени стойности в регистратурата: 0 Заразени информационни обекти в регистратурата: 0 Заразени папки: 0 Заразени файлове: 0 Заразени процеси в паметта: (Не бяха открити зловредни обекти) Заразени модули в паметта: (Не бяха открити зловредни обекти) Заразени ключове в регистратурата: (Не бяха открити зловредни обекти) Заразени стойности в регистратурата: (Не бяха открити зловредни обекти) Заразени информационни обекти в регистратурата: (Не бяха открити зловредни обекти) Заразени папки: (Не бяха открити зловредни обекти) Заразени файлове: (Не бяха открити зловредни обекти)

ето лога от есет ESETSmartInstaller@High as downloader log: all ok # version=7 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6583 # api_version=3.0.2 # EOSSerial=c0b4b31a5568ce4bac258d40aba58e8a # end=finished # remove_checked=true # archives_checked=true # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2011-12-13 07:34:13 # local_time=2011-12-13 09:34:13 (+0200, FLE Standard Time) # country="Bulgaria" # lang=1033 # osver=5.1.2600 NT Service Pack 3 # compatibility_mode=1536 16777215 100 0 0 0 0 0 # compatibility_mode=8192 67108823 100 0 3857 3857 0 0 # scanned=34454 # found=2 # cleaned=2 # scan_time=5317 # nod_component=V3 Build:0x30000000 D:\Rosen\My Documents\Downloads\Nod32 fix & Key.rar Win32/HackAV.HT application (deleted - quarantined) 00000000000000000000000000000000 C D:\Rosen\My Documents\Downloads\nod32 pa todo.rar Win32/HackAV.HT application (deleted - quarantined) 00000000000000000000000000000000 C

М-дааа..!Единственото което е премахнато е пиратския ключ на ESET NOD32 Antivirus 3.0..!Това се очакваше...първо защото е мнооого стара версия и второ,защото е кракната..!Това значи че досега практически не сте имали антивирусна...!

Какво да направите ...деинсталирайте вашата версия на ESET NOD32 Antivirus като използвате инструмента:

Изтеглете AppRemover и го запазете на вашия десктоп.

Стартирате програмата:

Next >> Уверете се ще е маркиран "Remove Security Application"

Next >> AppRemover ще сканира всички приложения, свързани със сигурността на вашия компютър.

Маркирайте всички приложения които са излишни и си оставете само действащите...и кликате Next>> два пъти.

Следвайте допълнителните инструкциите на екрана. Ако поиска рестарт, моля направете го.

След това си изтеглете нова безплатна антивирусна програма - препоръчвам Аваст или Авира...инсталирайте я и обновете базата и си направете пълно сканиране с нея..!

Avast Anti-Virus Free/Pro/IS - проблеми, въпроси, мнения, обсъждане-част 2

Avira AntiVirus & Security Suite - Personal, Premium & Pro

За настройки и мнения и обсъждания по програмите - Сигурност и антивирусна защита

Да поговорим малко за svchost.exe:

При стартиране Svchost.exe проверява услугите, които са част от системния регистър, за да състави списък с услуги, които трябва да зареди. По едно и също време могат да работят множество екземпляри на svchost.exe. Всяка сесия на Svchost.exe може да съдържа група от услуги.Или колкото повече услуги имаш пуснати,толкова повече svchost.exe ще работят и ще се виждат в TaskManager..!

http://support.micro...om/kb/314056/bg

1.Необходимо е инсталиране на кръпката KB958644.

2.Run => Msconfig ==> Startup - оригиналния процес svchost.exe никога не се стартира с операционната система,което значи че ако в Startup съществува svchost, то това определено е зловред.

3.Направете търсене на Svchost.exe на системния дял...Оригиналното местоположение на файла е \WINDOWS\system32 и копие в \WINDOWS\system32\dllcache.

4.Здължително си включете вградената защитна стена на Windows или си инсталирайте друга.

Внимание!

Много от функциите на операционната система се основават на процеса svchost.exe.Спирането му е крайно нежелателно и може да е критично за ОС...!

ето местоположението на svchost.exe, много от услугите ми стоят на мануал, но когато пуснах темата .... имах два допълнителни процеса svchost.exe , без да са се стартирали други услуги. Понеже имам проблем с бавен ъплоуд и бях пуснал друга тема - http://www.kaldata.com/forums/index.php?showtopic=187396&st=0&p=2127496&#entry2127496 , оттам ме посъветваха да изтегля едно hfs приложение, което беше засечено от нод32 като потенциално опасно приложение. Но казаха че нямало проблем, да спра нода да го инсталирам и т.н. , та след това се появиха тези две нежелани допълнения.... сега няма нищо ... svchost.exe са си 5 колкото принципно се зареждат и не се появяват други. Благодаря за съдействието и оказаната помощ на вашия екип

За нищо..!Пожелавам лек ден и безопасен интернет..! п.п. Прпоуснах - динсталирайте ESET Online Scanner