Security Toolbar 7.1

[Baron Prášil]

no,to nevím.odstranil si šmejda a nainstaloval firewall.pokud si nedělal nic jinýho....

pošli ještě log z hijackthis(jestli jsme něco tim firewallem nepodráždily)

[Reklama]

[ToXiK]

jen tak mimochodem, ten Firewall (treba Comodo) .... Je to nutný? Nestaci brana Firewall od Windowsu? O co je lepsi takovy program nez samotne funkce Windows?

[Baron Prášil]

je to velkej problém poslat log z hijackthis?

firewall ve windows je dostačující pokud jsi jeptiška dobře obeznámená s problematikou bezpečnosti na internetu.ale to ty nejsi.jsi ToXiK
takže můžeš taky zkusit jinej firewall(ne každej se snáší se všim)

[ToXiK]

Log z HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 17:26:01, on 8.7.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rmctrl.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Comodo\Firewall\CPF.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Comodo\Firewall\cmdagent.exe
C:\PROGRAM FILES\GENERALI\InterBase\bin\ibguard.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\PROGRAM FILES\GENERALI\InterBase\bin\ibserver.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Horníčkovi\Plocha\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Programy\ICQToolbar\toolbaru.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programy\Abobe Acrobat Reader 7.0.5\ActiveX\AcroIEHelper.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - E:\Programy\ICQToolbar\toolbaru.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWS\system32\rmctrl.exe
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\Comodo\Firewall\CPF.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [UberIcon] "C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [QIP2005] E:\Programy\QIP 8020\qip.exe
O4 - Startup: Cashfiesta.lnk = C:\Program Files\Cashfiesta\FiestaBar\Cashfiesta.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &ICQ Toolbar Search - res://E:\Programy\ICQToolbar\toolbaru.dll/SEARCH.HTML
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Programy\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - E:\Programy\ICQLite\ICQLite.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{98F0726B-CF08-41BC-A268-DA3B21C7079B}: NameServer = 80.250.9.201,80.250.1.161
O18 - Protocol: bw+0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: offline-8876480 - {A4F61606-848F-4838-81FA-90F51B9D72D3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - C:\Program Files\Comodo\Firewall\cmdagent.exe
O23 - Service: Firebird Guardian Service (InterBaseGuardian) - Unknown owner - C:\PROGRAM.exe (file missing)
O23 - Service: Firebird Server (InterBaseServer) - Unknown owner - C:\PROGRAM.exe (file missing)
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDSched.exe
O23 - Service: RadClock - Unknown owner - C:\WINDOWS\system32\RadClock.exe

[Baron Prášil]

log je v pořádku.
na rovinu a bez urážky-měl si problém se security toolbarem,ten sme pořešily.
použil jsi program,kterej je osvědčenej,jako že máslo chutná na chlebu.
a pro lepší zabezpečení počítače ti byl doporučen firewall Comodo.
řikáš že spomaluje a to je nejspíš pravda,protože žádnej další program běžící rezidentně ti prostě komp nezrychlí.neznáme tvojí konfiguraci-zkrátka radit na dálku má prostě taky svoje limity
takže,se podívej do taskmanagera,kolik to comodo bere,napiš jakou máš sestavu, vyzkošej jinej firewall-v tom odkazu jich je asi pět-já osobně používám ZoneAlarm. projdi si co se spouští automaticky po startu a vyházej co netřeba.
já myslim,že fixnout můžeš ještě toto
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es

zbav se messengera jestli ho nepoužíváš
http://www.viry.cz/forum/viewtopic.php?t=4950

a aby se neřeklo,že se chci zbavit odpovědnosti,tak nám pošli log z MWAV

předtím to vyčisti CCleanerem a RegCleanerem
(třeba zabere to čištění-už sem to taky viděl)

[ToXiK]

Tak jak jsem zjistil, že Comodo strašně zpomaluje internet. Když jsem ho vypnul, tak mě najednou všechno naskákalo jak normálně.....a v taskmanageru bere stále kolem 19 MB.

tady je moje sestava:
Shuttle Spacewalker MV42N
Intel(R) Celeron(R) CPU 2.00GHz (128KB) 478p
RAM DIMM 512MB DDR PC266 (PC2100) CL2.5
ATI Sapphire Radeon 9550 128MB (AGP)
HDD WD CAVIAR 320GB, ATA100, 3200JB, 7200ot./min., 8MB cache
Windows XP Professional SP2,

Zbavil jsem se messengera, to byl dobrej nápad

Vyčistil jsem to CCLeanerem a RegCleanerem.




A ještě ted log z MWAV:

Soubor C:\Documents and Settings\Horníčkovi\Plocha\backups\backup-20070708-014725-202.dll indentifikován jako "not-a-virus:AdWare.Win32.Softomate.v". Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\ICQ_Spammer_v2\ICQ Spammer v2.exe je infikovaný virem IM-Flooder.Win32.VB.gs !! Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\SmitfraudFix\Reboot.exe indentifikován jako "not-a-virus:RiskTool.Win32.Reboot.f". Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\SmitfraudFix.exe//data.rar/SmitfraudFix\Reboot.exe indentifikován jako "not-a-virus:RiskTool.Win32.Reboot.f". Provedené akce: Nic nebylo provedeno.

Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "grokster Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "trojan-downloader.bat.ftp.ab Trojan-Downloader" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "ieloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "ieloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "ieloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "ieloader Spyware/Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Objekt "savenow Adware" nalezen v souborovém systému! Provedené akce: Nic nebylo provedeno.

Záznam "HKCR\KMPlayer.kpl" odkazuje na neplatný objekt "{9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}". Provedené akce: Nic nebylo provedeno.

Záznam "HKCR\KMPlayer.ksf" odkazuje na neplatný objekt "{9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}". Provedené akce: Nic nebylo provedeno.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt "C:\Program Files\Kodak\Kodak Software Updater\7288971\6.3.2.62-7288971L\Program\PrvCnt.exe". Provedené akce: Nic nebylo provedeno.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt "C:\Program Files\Logitech\Desktop Messenger\8876480\7.2.0.137-8876480SL\Program\PrvCnt.exe". Provedené akce: Nic nebylo provedeno.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmjblaunch.exe". Provedené akce: Nic nebylo provedeno.

Záznam "HKCU\Software\Netscape\Netscape Navigator\User Trusted External Applications" odkazuje na neplatný objekt "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmfwlaunch.exe". Provedené akce: Nic nebylo provedeno.

Záznam "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts" odkazuje na neplatný objekt ".rlg". Provedené akce: Nic nebylo provedeno.

Záznam "HKLM\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache" odkazuje na neplatný objekt "FiestaBar". Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Data aplikací\Sun\Java\Deployment\cache\javapi\v1.0\file\java.class-3f551d86-2fb7b92e.class je infikovaný virem Exploit.Java.Gimsh.a !! Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\backups\backup-20070708-014725-202.dll indentifikován jako "not-a-virus:AdWare.Win32.Softomate.v". Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\ICQ_Spammer_v2\ICQ Spammer v2.exe je infikovaný virem IM-Flooder.Win32.VB.gs !! Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\SmitfraudFix\Reboot.exe indentifikován jako "not-a-virus:RiskTool.Win32.Reboot.f". Provedené akce: Nic nebylo provedeno.

Soubor C:\Documents and Settings\Horníčkovi\Plocha\SmitfraudFix.exe//data.rar/SmitfraudFix\Reboot.exe indentifikován jako "not-a-virus:RiskTool.Win32.Reboot.f". Provedené akce: Nic nebylo provedeno.

Soubor C:\Program Files\Eset\infected\EUFDOSAA.NQF//PE-Crypt.XorPE je infikovaný virem Trojan-Downloader.Win32.Zlob.btj !! Provedené akce: Nic nebylo provedeno.

Soubor C:\Program Files\Eset\infected\GPZASGCA.NQF//PE-Crypt.XorPE//PE_Patch indentifikován jako "not-a-virus:AdWare.Win32.Agent.cu". Provedené akce: Nic nebylo provedeno.

Soubor C:\Program Files\PokerNEWS Toolbar\tbhelper.dll indentifikován jako "not-a-virus:AdWare.Win32.Softomate.v". Provedené akce: Nic nebylo provedeno.

Soubor C:\Program Files\PokerNEWS Toolbar\tbu07633\tbhelper.dll indentifikován jako "not-a-virus:AdWare.Win32.Softomate.v". Provedené akce: Nic nebylo provedeno.

Soubor C:\Program Files\PokerNEWS Toolbar\untitled.dll indentifikován jako "not-a-virus:AdWare.Win32.Softomate.v". Provedené akce: Nic nebylo provedeno.

Soubor E:\od Kuby\instal\ACDSee 7.0 Full Cz\Crack\ACDSee.PowerPack.6.0.3.18_CRK-FFF\fff-ap6x-reg.exe je infikovaný virem Exe.Corrupted !! Provedené akce: Nic nebylo provedeno.

Soubor E:\od Kuby\instal\G6 ftp 2.21\bpftp221_setup.exe//data0005//PE_Patch//ASProtect indentifikován jako "not-a-virus:Server-FTP.Win32.BulletProof.221". Nic nebylo provedeno.

Soubor E:\od Kuby\instal\G6 ftp 2.21\crack\G6FTPSrv.exe//UPX indentifikován jako "not-a-virus:Server-FTP.Win32.BulletProof.221". Nic nebylo provedeno.

Soubor E:\ToXiK®\others\win_vista\vtp5_5.zip/Vista Transformation Pack 5.5.exe//WISE0039.BIN indentifikován jako "not-a-virus:RiskTool.Win32.CloseApp.a". Provedené akce: Nic nebylo provedeno.



....občas je pomalá i práce ve Winech ale spíš si myslím, že to je tím, že mám starej komp....

[Baron Prášil]

požij Avenger
http://www.spyware.cz/go.php?p=spyware&t=aplikace&id=35

a tento skript

Files to delete:
C:\Documents and Settings\Horníčkovi\Plocha\ICQ_Spammer_v2\ICQ Spammer v2.exe
C:\Documents and Settings\Horníčkovi\Data aplikací\Sun\Java\Deployment\cache\javapi\v1.0\file\java.class-3f551d86-2fb7b92e.class
E:\od Kuby\instal\ACDSee 7.0 Full Cz\Crack\ACDSee.PowerPack.6.0.3.18_CRK-FFF\fff-ap6x-reg.exe
E:\od Kuby\instal\G6 ftp 2.21\bpftp221_setup.exe
E:\od Kuby\instal\G6 ftp 2.21\crack\G6FTPSrv.exe
E:\ToXiK®\others\win_vista\vtp5_5.zip

Folders to delete:
C:\Program Files\PokerNEWS Toolbar

po restartu ti Avenger vyplivne log,tak ho sem dej

[ToXiK]

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\edfrlkqb

*******************

Script file located at: \??\C:\WINDOWS\system32\avribanc.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\Documents and Settings\Horníčkovi\Plocha\ICQ_Spammer_v2\ICQ Spammer v2.exe deleted successfully.
File C:\Documents and Settings\Horníčkovi\Data aplikací\Sun\Java\Deployment\cache\javapi\v1.0\file\java.class-3f551d86-2fb7b92e.class deleted successfully.
File E:\od Kuby\instal\ACDSee 7.0 Full Cz\Crack\ACDSee.PowerPack.6.0.3.18_CRK-FFF\fff-ap6x-reg.exe deleted successfully.
File E:\od Kuby\instal\G6 ftp 2.21\bpftp221_setup.exe deleted successfully.
File E:\od Kuby\instal\G6 ftp 2.21\crack\G6FTPSrv.exe deleted successfully.
File E:\ToXiK®\others\win_vista\vtp5_5.zip deleted successfully.
Folder C:\Program Files\PokerNEWS Toolbar deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

[Baron Prášil]

potvory jsou pryč. co komp?co ten firewall?

[ToXiK]

prosimte to Comodo mi porad hlasi, jestli chci povolit pristup na internet nakejch souboru nebo co....

..v příloze ti posílam screeny jednotlivejch hlasek...hlavne by me zajimalo, co je zac ten "svchost.exe" ??? Ten totiz Comodoj neda spat...a pokazdy se tam objevi jina IP....

Zatim sem jinej firewall neskousel, ale zjistil sem, ze Comodo bere asi 19MB pameti a strasne spomaluje internet...(to sem ti uz vlastne psal)

Jinak komp zas tak spomalenej neni po tajtech čistkách :) coz je dobry;)

[Baron Prášil]

všechno povol a předtím zaškrtni Remember my....

[ToXiK]

a co je presne ten "svchost.exe" ?