Dlouhý start PC

[kala]

Dsl pise 16 Mb pripojovaci rychlost a 2Mb stahovaci. Tim to myslim nebude. zacalo to zlobit az posledni dobou.

[Rudy]

Na zkoušku vypněte firewall a vyzkoušejte, zda se něco změní.

[kala]

Omlouvam se za hlopou otazku - firewall myslíte Comodo?

[Rudy]

Omlouvam se za hlopou otazku - firewall myslíte Comodo?

Ano.

[kala]

Vypnuto a nezda se mi ze by se neco zmenilo. vse je takove divne opozdene. Sem tam neco jede jaks taks normalne, ale vetsinou to trva dlouho a treba i prepinani mezi okny nebo spusteni VLC prehravce s videem trva treba i 5-8 sekund... Stejne se zaplym i vyplym Comodem...

[Rudy]

Zkuste ho odinstalovat a na nějaký čas přejít na předchozí verzi. Kolega se domnívá, že je problém právě v tomhle.

[kala]

A co treba misto Comoda dat Aviru? Je dobra? Drive jsem ji mel nebyly problemy. Co jsem zacal resit s keyloggerem (ktery tam urcite nekde je i kdyz jsme jej tu nenasli ), tak jsem nahral i Comoda a postupne prichazi problemy.

[Rudy]

Aviru mohu doporučit. Keylogger není nikde vidět.

[kala]

Nainstaloval jsem AViru a neco nasla a odstranila. Pocitac uz nabiha rychleji (cca 60s), ale nacitani stranek na internetu trva nekdy divne dlouho a programy jsou opozdene stale. Anti-keylogger jde najednou stahnout i nainstalovat. Tady je log z Aviry, muzete mi prosim rict co to vlastne naslo a odstranilo? Je mozne, ze ten antivir odstranil keylogger nebo se k PC nekdo dostal a odinstaloval ho radeji sam? jaka varianta je moznejsi?:

Avira Free Antivirus
Report file date: 29. dubna 2013 10:48


The program is running as an unrestricted full version.
Online services are available.

Licensee : Avira Free Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Microsoft Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : MPEVNY

Version information:
BUILD.DAT : 13.0.0.3499 49286 Bytes 19.3.2013 16:37:00
AVSCAN.EXE : 13.6.0.986 639712 Bytes 28.4.2013 12:52:58
AVSCANRC.DLL : 13.4.0.360 54560 Bytes 28.4.2013 12:52:58
LUKE.DLL : 13.6.0.902 67808 Bytes 28.4.2013 12:53:18
AVSCPLR.DLL : 13.6.0.986 94944 Bytes 28.4.2013 12:53:47
AVREG.DLL : 13.6.0.940 250592 Bytes 28.4.2013 12:53:47
avlode.dll : 13.6.2.940 434912 Bytes 28.4.2013 12:52:57
avlode.rdf : 13.0.0.46 15591 Bytes 28.4.2013 12:53:47
VBASE000.VDF : 7.11.70.0 66736640 Bytes 4.4.2013 12:52:17
VBASE001.VDF : 7.11.70.1 2048 Bytes 4.4.2013 12:52:17
VBASE002.VDF : 7.11.70.2 2048 Bytes 4.4.2013 12:52:17
VBASE003.VDF : 7.11.70.3 2048 Bytes 4.4.2013 12:52:17
VBASE004.VDF : 7.11.70.4 2048 Bytes 4.4.2013 12:52:17
VBASE005.VDF : 7.11.70.5 2048 Bytes 4.4.2013 12:52:17
VBASE006.VDF : 7.11.70.6 2048 Bytes 4.4.2013 12:52:18
VBASE007.VDF : 7.11.70.7 2048 Bytes 4.4.2013 12:52:18
VBASE008.VDF : 7.11.70.8 2048 Bytes 4.4.2013 12:52:18
VBASE009.VDF : 7.11.70.9 2048 Bytes 4.4.2013 12:52:18
VBASE010.VDF : 7.11.70.10 2048 Bytes 4.4.2013 12:52:18
VBASE011.VDF : 7.11.70.11 2048 Bytes 4.4.2013 12:52:18
VBASE012.VDF : 7.11.70.12 2048 Bytes 4.4.2013 12:52:18
VBASE013.VDF : 7.11.70.13 2048 Bytes 4.4.2013 12:52:18
VBASE014.VDF : 7.11.70.103 136192 Bytes 5.4.2013 12:52:19
VBASE015.VDF : 7.11.70.183 183808 Bytes 6.4.2013 12:52:19
VBASE016.VDF : 7.11.71.9 145920 Bytes 8.4.2013 12:52:19
VBASE017.VDF : 7.11.71.115 169472 Bytes 10.4.2013 12:52:20
VBASE018.VDF : 7.11.71.197 172544 Bytes 11.4.2013 12:52:20
VBASE019.VDF : 7.11.72.17 135168 Bytes 12.4.2013 12:52:20
VBASE020.VDF : 7.11.72.103 158208 Bytes 15.4.2013 12:52:21
VBASE021.VDF : 7.11.72.137 152064 Bytes 15.4.2013 12:52:21
VBASE022.VDF : 7.11.72.223 159232 Bytes 16.4.2013 12:52:21
VBASE023.VDF : 7.11.73.59 204288 Bytes 18.4.2013 12:52:21
VBASE024.VDF : 7.11.73.133 164864 Bytes 19.4.2013 12:52:22
VBASE025.VDF : 7.11.73.201 225792 Bytes 22.4.2013 12:52:22
VBASE026.VDF : 7.11.73.251 161280 Bytes 23.4.2013 12:52:22
VBASE027.VDF : 7.11.74.55 126976 Bytes 24.4.2013 12:52:23
VBASE028.VDF : 7.11.74.117 210432 Bytes 26.4.2013 12:52:23
VBASE029.VDF : 7.11.74.169 232448 Bytes 28.4.2013 12:52:24
VBASE030.VDF : 7.11.74.170 2048 Bytes 28.4.2013 12:52:24
VBASE031.VDF : 7.11.74.184 60416 Bytes 28.4.2013 19:03:12
Engine version : 8.2.12.32
AEVDF.DLL : 8.1.2.10 102772 Bytes 28.4.2013 12:52:33
AESCRIPT.DLL : 8.1.4.108 483709 Bytes 28.4.2013 12:52:32
AESCN.DLL : 8.1.10.4 131446 Bytes 28.4.2013 12:52:32
AESBX.DLL : 8.2.5.12 606578 Bytes 28.4.2013 12:52:34
AERDL.DLL : 8.2.0.88 643444 Bytes 28.4.2013 12:52:31
AEPACK.DLL : 8.3.2.6 827767 Bytes 28.4.2013 12:52:31
AEOFFICE.DLL : 8.1.2.56 205180 Bytes 28.4.2013 12:52:30
AEHEUR.DLL : 8.1.4.318 5894521 Bytes 28.4.2013 12:52:30
AEHELP.DLL : 8.1.25.2 258423 Bytes 28.4.2013 12:52:26
AEGEN.DLL : 8.1.7.2 442741 Bytes 28.4.2013 12:52:26
AEEXP.DLL : 8.4.0.24 196982 Bytes 28.4.2013 12:52:34
AEEMU.DLL : 8.1.3.2 393587 Bytes 28.4.2013 12:52:25
AECORE.DLL : 8.1.31.2 201080 Bytes 28.4.2013 12:52:25
AEBB.DLL : 8.1.1.4 53619 Bytes 28.4.2013 12:52:25
AVWINLL.DLL : 13.6.0.480 26480 Bytes 28.4.2013 12:50:54
AVPREF.DLL : 13.6.0.480 51056 Bytes 28.4.2013 12:52:57
AVREP.DLL : 13.6.0.480 178544 Bytes 28.4.2013 12:53:47
AVARKT.DLL : 13.6.0.902 260832 Bytes 28.4.2013 12:52:50
AVEVTLOG.DLL : 13.6.0.902 167648 Bytes 28.4.2013 12:52:52
SQLITE3.DLL : 3.7.0.1 397704 Bytes 28.4.2013 12:53:33
AVSMTP.DLL : 13.6.0.480 62832 Bytes 28.4.2013 12:53:00
NETNT.DLL : 13.6.0.480 16240 Bytes 28.4.2013 12:53:24
RCIMAGE.DLL : 13.4.0.360 4782880 Bytes 28.4.2013 12:50:55
RCTEXT.DLL : 13.6.0.976 67296 Bytes 28.4.2013 12:50:56

Configuration settings for the scan:
Jobname.............................: AVGuardAsyncScan
Configuration file..................: C:\Documents and Settings\All Users\Data aplikací\Avira\AntiVir Desktop\TEMP\AVGUARD_517e32d3\guard_slideup.avp
Reporting...........................: default
Primary action......................: Repair
Secondary action....................: Quarantine
Scan master boot sector.............: on
Scan boot sector....................: off
Process scan........................: on
Scan registry.......................: off
Search for rootkits.................: off
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Limit recursion depth...............: 20
Smart extensions....................: on
Macrovirus heuristic................: on
File heuristic......................: Complete

Start of the scan: 29. dubna 2013 10:48

The scan of running processes will be started:
Scan process 'plugin-container.exe' - '62' Module(s) have been scanned
Scan process 'firefox.exe' - '88' Module(s) have been scanned
Scan process 'avscan.exe' - '87' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '42' Module(s) have been scanned
Scan process 'ccc.exe' - '177' Module(s) have been scanned
Scan process 'flux.exe' - '45' Module(s) have been scanned
Scan process 'ctfmon.exe' - '25' Module(s) have been scanned
Scan process 'avgnt.exe' - '66' Module(s) have been scanned
Scan process 'MOM.exe' - '53' Module(s) have been scanned
Scan process 'USBTip.exe' - '28' Module(s) have been scanned
Scan process 'HDeck.exe' - '38' Module(s) have been scanned
Scan process 'Explorer.EXE' - '80' Module(s) have been scanned
Scan process 'alg.exe' - '33' Module(s) have been scanned
Scan process 'avshadow.exe' - '20' Module(s) have been scanned
Scan process 'wuauclt.exe' - '42' Module(s) have been scanned
Scan process 'avguard.exe' - '65' Module(s) have been scanned
Scan process 'svchost.exe' - '34' Module(s) have been scanned
Scan process 'sched.exe' - '40' Module(s) have been scanned
Scan process 'spoolsv.exe' - '52' Module(s) have been scanned
Scan process 'svchost.exe' - '37' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '36' Module(s) have been scanned
Scan process 'svchost.exe' - '32' Module(s) have been scanned
Scan process 'svchost.exe' - '162' Module(s) have been scanned
Scan process 'svchost.exe' - '38' Module(s) have been scanned
Scan process 'svchost.exe' - '33' Module(s) have been scanned
Scan process 'Ati2evxx.exe' - '27' Module(s) have been scanned
Scan process 'lsass.exe' - '58' Module(s) have been scanned
Scan process 'services.exe' - '27' Module(s) have been scanned
Scan process 'winlogon.exe' - '77' Module(s) have been scanned
Scan process 'csrss.exe' - '12' Module(s) have been scanned
Scan process 'smss.exe' - '2' Module(s) have been scanned

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\Local Settings\temp\Rar$EXa0.024\mlliywodt.exe'
The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path\Debugger> was removed successfully.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\1609> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\1609> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1609> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\1609> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2500> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500> was successfully repaired.
The registration entry <HKEY_USERS\S-1-5-21-1417001333-1708537768-1606980848-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500> was successfully repaired.
The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ynvep> was removed successfully.
C:\Documents and Settings\Administrator\Local Settings\temp\Rar$EXa0.024\mlliywodt.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE] The file was moved to the quarantine directory under the name '541ba21a.qua'!
[NOTE] The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ynvep> was successfully repaired.


End of the scan: 29. dubna 2013 10:49
Used time: 00:23 Minute(s)

The scan has been done completely.

0 Scanned directories
517 Files were scanned
1 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 Files were deleted
0 Viruses and unwanted programs were repaired
1 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
516 Files not concerned
0 Archives were scanned
0 Warnings
1 Notes

[Rudy]

Avira našla 1 vira a opravila některé registry. Na to načítání zkuste použít WinsockFix: http://www.softpedia.com/get/Tweak/Netw ... kFix.shtml . Utilte reinstalujte TCP/IP protokol. Pokud máte paramentry sítě nastaveny ručně, budete je muset po restartu znovu zadat. Dále zkuste restartovat modem, příp. další síť. prvek v datové cestě.

[kala]

A poznate nebo yvtusite co to bylo za vir?

Co rikate na to, ze najednou antikeylogger jde?

S tim TCP/IP radsi nebudu experimentovat, protoze tomu vubec nerozumim.

[Rudy]

Šlo o tyto položky:

Begin scan in 'C:\Documents and Settings\Administrator\Local Settings\temp\Rar$EXa0.024\mlliywodt.exe'
The registration entry <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path\Debugger> was removed successfully.

Podle některých odkazů na Google se opravdu jedná o keylogger. Ani jeden ze skenů nám ho ale neukázal. Musí jít o něco nového.

[kala]

Děkuji! Takze teď uz muzu byt opravdu v klidu, ze je ten smejd pryc a se zapnutym Antikeylogerem uz se tam nic takoveho ani podobneho neobjevi-nikdo nenainstaluje v me nepritomnosti?

[Rudy]

Nemáte zač! Záleží na kvalitě antikeyloggeru a antiviru, zda je schopen keylogger odchtit. S tímhle (protože asi byl nový) mělo potíže dost utilit. Momentálně tam žádný nemáte.

[kala]

Dekuji!
zrovna ted mi ten Antikeylogger napsal, ze skoncila free verze a vypnul se, ze mam koupit full... Znate nejaky jiny dobry free Antikeylogger, ktery byste doporucil?