taskhost.exe what is ? camera access / internet access firewall blocked

 Today i faced the problem:

firewall blocked internet access for taskhostw.exe 

I tried to investigate what is it and why it wants internet access. 

After searching found some posts for asking same problem , but differently their exe tried to access camera, which triggered them to search for possible problem too.

In result i scanned pc with different malware cleaners with fixes as original dell autostarters and no other trojans as monero miners and so on..

I checked IP which was triggered to internet access - 51.104.136.2 . After checking 'IP 51.104.136.2' , it turns out it is microsoft azure servers.

For now i agreed to allow internet access, but turned off frequence to diagnostics to report in windows settings to "never"  

CPU lag spikes while moving mouse

So recently i faced with strange problem: While moving mouse i have seen noticeable lags spikes like wrapping for a several seconds and lag stops after it and mouse starts to move smoothly again. Doesn't matters what places - gaming / desktop or even bios.

My PC specs:

Windows 10
Nvidia GTX 770
Intel I5-2400 @ 3,1 Ghz
DDR3 8 GB ram
Asus mother board p8h61-m le r2.0
bios 1408

It felt like it was a virus / trojan or other bad program which uses CPU / HDD or other PC resources.

Preparation 

First thing what i did is checked Task manager. Than i have continued and monitored several hours in resource monitor. But nothing was noticed in cpu / memory / disk neither in network tab.

Secondly I have installed few free or trial versions of anti-viruses and other monitoring applications:

• Kaspersky ( https://www.kaspersky.com/downloads/thank-you/antivirus-free-trial ) install and made full scan
• Malwarebytes ( https://www.malwarebytes.com/business/ ) install and made full scan
• Bitdefender ( https://www.bitdefender.com/solutions/free.html ) made full scan
• CCleaner ( https://www.piriform.com/ccleaner/download ) full scan

But nothing was found.

Hard drive check

Next i have checked hard drive for bad sectors. Made other scans with programs like

• LatencyMon ( http://www.resplendence.com/latencymon )

Advanced task manager

For more advanced tasks monitoring i have installed programs like:

• Open hardware monitor ( http://openhardwaremonitor.org/ )
• Security task manager ( https://www.neuber.com/taskmanager/ )

But still no results and bad process was fount there. 

Notices

After multiple check noticed:

• Lag spikes was noticed even in BIOS
• Sometimes lags disappear but after some use of PC the lags appeared back.

Other tries was made to prevent lags:

• Disable cortana
• Performance windows 10 optimization ( recommended youtube video with full steb by step instuction how to clean and disable unusefull programs/services and gadgets https://www.youtube.com/watch?v=DwiHog2leMM ) 
• Disabling Realtek HD drivers
• Disabling Nvidia sound drivers
• Try to update bios ( but i had latest version )

Ask profesionals for help

Coworker/Friend of mine suggested to disconnect GPU.

After i have disconnected GPU i have noticed some improvement, but not for long... after few moments lags was noticed again. 

Finally suggestion was to try disconnect used USB port devices and look if something is interrupting. And after i have changed bluetooth mouse usb plugin i came up with idea that maybe my mouse is broken ( because of rage gaming ). So what i did i changed mouse with same model - logitech m185 ( best mouse in the world. if you want one buy it here ) my wifes one. 

And miracle happened. It worked perfectly! No lags, no spikes nothing, but smooth movements. 

Finally 

And finally i came up with idea to try changing battery on my mouse. And guess what...  It started to work perfectly again. 

Problem that i didn't though about battery at first time was because that when my battery dies mouse stops working immediately, but this time it didn't happen that way.

 

OpenX remove Trojan program HEUR:Trojan.Script.Iframer

So for last few days i was faced with the Trojan which was injected into OpenX.

So here is my guide how to remove it.

1. First of all create
`banners` copy like `banners_2` ( so it be backup if you will need it ).

2. Lanch the query to remove unwanted virus / trojan code snippets

UPDATE `banners` SET `htmltemplate` = '', `htmlcache` = '', `append` = ''
WHERE 1
AND
(
`htmltemplate` LIKE '%BrowserDetect%' OR `htmltemplate` LIKE '%function hex2a(hex)%' OR`htmlcache` LIKE '%BrowserDetect%' OR ` htmlcache ` LIKE '%function hex2a(hex)%' OR`append` LIKE '%BrowserDetect%' OR ` append ` LIKE '%function hex2a(hex)%')

[EDIT]
Launch same query for zones table

UPDATE `zones` SET `append` = ''
WHERE 1
AND
(
`append` LIKE '%BrowserDetect%' OR ` append ` LIKE '%function hex2a(hex)%')

[EDIT end]

3. Do OpenX update to latest version ( 2.8.9 for current moment )

4. After you update your OpenX, lanch query at (2) for one more time.

5. At this stage you will need to clear cache or just wait to renew it by itself.. I didnt deleted it, so i cant tell you anything about how to do it. If you OpenX is huge i dont recommend you to delete it., better ask someone who knows anything about "grep" ( Google scan command? ).
Cache exists in var/cache/

[EDIT]
6. After all this cleanings we still couldn't find the trojan by itself, but banners and zones position were infected from time to time...
Solution for this was to limit`append` field attribute length to '10' symbols. It helped us for now...
[EDIT end]

These are steps which we took and a bit more..

Hope it will help you. Good luck, you will need it.

p.s. a bit more information can be fount here:
http://www.openxconsultant.com/blog/2011/10/what-to-do-when-you-suspect-your-openx-system-has-been-hacked/

httpd.exe apache cpu 100% load

I had the problem today. When i started Apache from Xampp control panel, CPU usage became 100%. Nothing changed after apache restart and PC restart. Same.. - 100%.

So to understand what is happening you need to 

1. go to: C:\xampp\apache\logs

2. open  access.log with text editor

if file is too big to open ( bigger than 5 mb ) do this:
1. just delete access.log and error.log
2. start apache and stop it after it will start loading your CPU to 100%.

In access.log, you will be able to figure out what is happening with your apache ( httpd ).

In my situation was some kind of apache virus ( which affects my files with new scripts called webdav and webalizer ).
So if you have the folders in your xampp folder, that means you have same problem..

i solved it by this way:
1. -> Control Panel\Network and Internet\Network and Sharing Center
2. -> Windows Firewall
3. -> Allow programs to communicate through Windows Firewall
4. Removed Apache HTTP Server with checked under Public ( To do that press Change settings button on top )
5. Close everything.

It might not help you. So here is one more idea what you could do in the situation:
After finding out what IP requested execution of the script in part with error.log just Block it! Google for answer..