Jump to content

SUBIECTE NOI
« 1 / 5 »
RSS
Presbiopia - la 43 ani ?

Termen transcriere autovehicul

Cazare Timisoara pe 4-5 zile

Primele zile ale internetului per...
 Ditra 25

Casti USB-C ptr A-54

Aplicatie medicala / asistent med...

De ce vor atația politicieni...
 ERR_ADDRESS_UNREACHABLE

Legea 18/1968 Se mai aplica?

Digi conectare 2 routere prin fir

Succesiune notar versus instanta ...
 Montaj aer conditionat in balcon ...

Cont curent mulți valuta far...

Sugestii plan casa

Experiente cu firme care cumpara ...
 

Generic Host Process for Win32 Services

- - - - -
Last Updated: Mar 18 2010 19:05, Started by IP-XCENTRIC , Nov 01 2004 19:03  
  ·  
  • This topic is locked This topic is locked
24 replies to this topic

#1
IP-XCENTRIC
Posted 01 November 2004 - 19:03

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
Problema:navighez frumusel pe net,ascult la Winamp ceva leacuri pt suflet,cand deodata....

"Generic Host Process for Win32 Services has encountered a problem and needs to close.  We are sorry for the inconvenience.

szAppName : svchost.exe
szAppVer : 0.0.0.0    
szModName : unknown szModVer : 0.0.0.0  
offset : 00000000"(si Winampu se blocheaza)

MAI departe,error report zice asa:

" C:\DOCUME~1\Eu\LOCALS~1\Temp\WER4.tmp.dir00\svchost.exe.mdmp
  C:\DoOCUME~1\Eu\LOCALS~1\Temp\WER4.tmp.dir00\appcompat.txt"

Imi zic:-te pomenesti ca am sters ceva din greseala si mi s-a bulit comp.(Nici pomeneala,nu m-am atins d el).....So....

Trec la treaba,bag un scan cu NAV Prof IN SAFE MODE si nimic..apar clean

RESTARTEZ.Apoi iar mi se blocheaza Winampu,zice parca asa....DIRECTX Driver problem sau asa ceva...

nu ma prea pricep la PC,dar am inteles ca winampu mere si fara driver,asa ca....imi zic poate am patit-o din nou cu un virusel ca m-a cam luat valu dupa CUTREMUR...lol...si nu mi-am tras (inca)SP2.

Astept opinii,poate a mai patit-o cineva cu XP SP1.Orice parere conteaza...enorm....pls help

#2
Daisuke
Posted 01 November 2004 - 19:13

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004

IP-XENTRIC, on Nov 1 2004, 19:03, said:

"Generic Host Process for Win32 Services has encountered a problem and needs to close. We are sorry for the inconvenience.
Ca sa elimini cauza = malware e nevoie si de un log HiJackThis.  :)
You know the drill ...

#3
IP-XCENTRIC
Posted 01 November 2004 - 19:16

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
Hi cryo!tks pt promptitudine!

Logfile of HiJackThis v1.98.2
Scan saved at 19:14:15, on 01.11.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
F:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4A50B344-6073-9580-C21C-5651421BA97D} - C:\WINDOWS\system32\appyh32.dll (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [Windows AdTools] C:\Program Files\Windows AdTools\WinAdTools.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Limewire 4.0.8 Pro.lnk = C:\Program Files\LimeWire\LimeWire 4.0.8 Pro\LimeWire.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.xxxtoolbar.com
O16 - DPF: {00000000-7777-0704-0B53-2C8830E9FAEC} - http://gn.one2bill.de/soft/axload.cab
O16 - DPF: {7AD348C0-76CD-4FC0-B514-1CDD2F767212} (GTDControl Control) - http://www.camangi.com/GTD/GTD.cab
O16 - DPF: {93B52CD5-EDFF-4405-8975-754100710FD5} (GameLauncher Control) - http://www.linkmania...amelauncher.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.micro...rchsettings.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F9D2F07-F20A-48D5-AC6B-54C8F65CD834}: NameServer = 193.231.236.25,193.231.236.30

#4
Daisuke
Posted 01 November 2004 - 19:52

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
1. Iti recomand sa dezinstalezi Limewire. Ca orice program P2P poate aduce usor malware pe HDD.

2. Dezinstaleaza daca gasesti in Add/Remove Programs:
Windows AdTools, WinAdTools, eXact Advertising sau asemanator.

3. Download System Security Suite:
System Security Suite Download & Tutorial. Unzip pe desktop.
Instaleaza programul. Nu il folosi inca.

Este o idee buna sa printezi sau sa copiezi aceste instructiuni pentru ca nu ai acces la net in SafeMode.
Daca intr-o etapa ai dificultati, treci la urmatoarea si spune-mi ce nu a mers.

4. Executa HiJackThis si bifeaza cele de mai jos:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = about:blank
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {4A50B344-6073-9580-C21C-5651421BA97D} - C:\WINDOWS\system32\appyh32.dll (file missing)

(Poate dispare daca programul merge dezinstalat)
O4 - HKLM\..\Run: [Windows AdTools] C:\Program Files\Windows AdTools\WinAdTools.exe

Optional (daca dezinstalezi LimeWire)
O4 - Global Startup: LimeWire 4.0.8 Pro.lnk = C:\Program Files\LimeWire\LimeWire 4.0.8 Pro\LimeWire.exe

O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.blazefind.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.flingstone.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchbarcash.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.slotch.com
O15 - Trusted Zone: *.xxxtoolbar.com

Foarte important: Inchide toate celelalte ferestre si browsere, in afara de HijackThis, si apasa Fix Checked.

5. REBOOT in SafeMode si ramai aici pana la pasul 8.

6. Delete urmatoarele fisiere, daca mai sunt prezente:
C:\WINDOWS\system32\appyh32.dll  <-- acest fisier

Delete urmatoarele foldere:
C:\Program Files\Windows AdTools\ <-- acest folder

Optional (daca dezinstalezi LimeWire)
C:\Program Files\LimeWire\ <-- acest folder

7. Cu toate ferestrele si browserele inchise.
Goleste temp si Temporary Internet Files.
A. Porneste System Security Suite.
B. In tab-ul Items to Clear bifeaza:
- Internet Explorer (stanga): Cookies & Temporary files
- My Computer (dreapta): Temporary files
Apasa butonul Clear Selected Items.
Inchide programul.

8. REBOOT NORMAL.

9. Run HijackThis si posteaza un nou log te rog.

#5
IP-XCENTRIC
Posted 01 November 2004 - 20:24

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
Logfile of HiJackThis v1.98.2
Scan saved at 20:22:40, on 01.11.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
F:\hjt\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\YAHOO!\MESSEN~1\YPAGER.EXE
O16 - DPF: {00000000-7777-0704-0B53-2C8830E9FAEC} - http://gn.one2bill.de/soft/axload.cab
O16 - DPF: {7AD348C0-76CD-4FC0-B514-1CDD2F767212} (GTDControl Control) - http://www.camangi.com/GTD/GTD.cab
O16 - DPF: {93B52CD5-EDFF-4405-8975-754100710FD5} (GameLauncher Control) - http://www.linkmania...amelauncher.cab
O16 - DPF: {EE8B6D5F-FEF2-11D0-B13F-00A024798EF3} (Microsoft Search Settings Control) - http://lg.home.micro...rchsettings.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9F9D2F07-F20A-48D5-AC6B-54C8F65CD834}: NameServer = 193.231.236.25,193.231.236.30

#6
Daisuke
Posted 01 November 2004 - 20:48

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Log-ul e curat. Mai ai probleme cu svchost ?

#7
IP-XCENTRIC
Posted 01 November 2004 - 20:53

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
tre sa mai astept sa vad....aparea cand vroia el,cam la 10 min dupa ce deschideam calc si implicit Winampu.daca apare revin.

Multumesc.

O intrebare de final:-in celalalt topic deschis de mine Ziceai de Spy Sweeper ORIGINAL ca e indicat sa-mi iau.
Cel cu CRACK&Stuff nu e bun,?ca de ....suntem romani..."renumeratie mica,dupa buget..." :D

#8
Daisuke
Posted 01 November 2004 - 20:56

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Ad-Aware, Spybot Search & Destroy si Spyware Blaster sunt gratuite si la fel de bune ca SpySweeper.  :D

#9
IP-XCENTRIC
Posted 01 November 2004 - 21:00

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
vad ca merge beton ,nu au aparut momentan probleme......

Ce m-a lovit(din nou)? :D

#10
Daisuke
Posted 01 November 2004 - 21:18

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004

IP-XENTRIC, on Nov 1 2004, 21:00, said:

Ce m-a lovit(din nou)?
Bargain Buddy & Co. si Adware.CDT

Verifica si setarile la Internet Explorer - seteaza default la loc daca au fost modificate de Adware.CDT

Happy Surfing  :)

#11
IP-XCENTRIC
Posted 01 November 2004 - 21:21

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
Verifica si setarile la Internet Explorer - seteaza default la loc daca au fost modificate de Adware.CDT.............CUM?

#12
Daisuke
Posted 01 November 2004 - 21:30

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Open Internet Explorer
Click Tools -> Internet Options ...

Click the Security tab
- click the Internet icon - press Default Level button
- click the Local icon - press Default Level button
- click the Trusted icon - press Default Level button
- click the Restricted icon- press Default Level button

#13
IP-XCENTRIC
Posted 01 November 2004 - 21:36

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
Multumesc pentru tot ajutorul acordat!TOT INAINTE si sa FII IUBIT!

#14
IP-XCENTRIC
Posted 01 November 2004 - 21:56

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
iar mi-a aparut dracia aia.....how bad is it?

#15
Daisuke
Posted 01 November 2004 - 23:21

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
Greu de zis. Poate fi Windows, poate fi un program, poate fi Winamp. Incearca sa elimini cate o cauza pe rand. Poate trebuie un update sau ai instalat un update cu probleme. Poate poti sa dai windows inapoi (cu System Restore) cand svchost nu facea figuri.

#16
IP-XCENTRIC
Posted 02 November 2004 - 14:01

IP-XCENTRIC

    pResident Evil

  • Grup: Senior Members
  • Posts: 4,631
  • Înscris: 13.03.2004
am dezinstalat winampu  si am facut dwld la o versiune noua,cu care vad ca nu mai apar probleme.(deocamdata)..... :D

10x cryo!

#17
Daisuke
Posted 02 November 2004 - 14:10

Daisuke

    Moderator

  • Grup: Senior Members
  • Posts: 2,173
  • Înscris: 19.01.2004
E o idee buna.

#18
omucudisku
Posted 17 March 2010 - 22:08

omucudisku

    Junior Member

  • Grup: Members
  • Posts: 95
  • Înscris: 17.10.2008
va salut
abia mi-am instalat windowsul si nu mai scap de eroarea asta; dupa ce ii dau dont send nu mai am sunet pe web si uneori si in Winamp si cand incerc sa intru in volume din taskbar din dreapta imi spune ca mixerul nu e instalat
are cineva vreo idee?

Attached Files

Anunturi

Second Opinion Second Opinion

Folosind serviciul second opinion ne puteți trimite RMN-uri, CT -uri, angiografii, fișiere .pdf, documente medicale.

Astfel vă vom putea da o opinie neurochirurgicală, fără ca aceasta să poată înlocui un consult de specialitate. Răspunsurile vor fi date prin e-mail în cel mai scurt timp posibil (de obicei în mai putin de 24 de ore, dar nu mai mult de 48 de ore). Second opinion – Neurohope este un serviciu gratuit.

www.neurohope.ro
Back to Dezbateri despre securitatea IT

▶ 0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Forumul Softpedia
  2. → Soft Related / OS
  3. → Antivirus & Security
  4. → Dezbateri despre securitatea IT
Forumul Softpedia foloseste "cookies" pentru a imbunatati experienta utilizatorilor Accept
Pentru detalii si optiuni legate de cookies si datele personale, consultati Politica de utilizare cookies si Politica de confidentialitate