Stalno nekakav download

 jučer sam sa avirom skenirao i nije bilo ništa. sad ću sa malwarebyte's antimalware pa da vidim

a ne bih ga baš ostavio da džabe stoji 1 sat jer imam carnet pa se sve plaća, da je adsl onda bih

 evo ga:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:40:46, on 3.5.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Avira\AntiVir Desktop\sched.exe
D:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Program Files\Sandboxie\SbieSvc.exe
C:\WINDOWS\Explorer.EXE
D:\Program Files\Comodo\COMODO Internet Security\cfp.exe
D:\Program Files\FastStone\Capture\FSCapture.exe
D:\Program Files\ObjectDock\ObjectDock.exe
D:\Program Files\Yahoo Widgets\YahooWidgets.exe
D:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Yahoo Widgets\YahooWidgets.exe
D:\Program Files\Trend Micro HijackThis\HijackThis.exe

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [COMODO Internet Security] "D:\Program Files\Comodo\COMODO Internet Security\cfp.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: FastStone Capture.lnk = D:\Program Files\FastStone\Capture\FSCapture.exe
O4 - Startup: Stardock ObjectDock.lnk = D:\Program Files\ObjectDock\ObjectDock.exe
O4 - Startup: Yahoo! Widgets.lnk = D:\Program Files\Yahoo Widgets\YahooWidgets.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - AutorunsDisabled - (no file)
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - D:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - D:\Program Files\Comodo\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - D:\Program Files\Sandboxie\SbieSvc.exe

--
End of file - 4232 bytes

 Ja ovdje nevidim nešto čudno ili nepoznato, sve djeluje OK jedino onaj wscntfy.exe(windows security notifications) je upaljen što zači da preko njega je moguće da svchost.exe troši promet.

Nedostaju ti neki updejti? Ili ti je uključeno provjeravanje update-a. Ono Notify for new updates, but let me choose...blabla..

Ja sam imao isti problem prije nekog vremena kod mene je bila riječ o W32/Jeefo-u

Pogledaj malo i ovdje KLIK

 probao sam ubit proces wscntfy.exe ali on se odmah ponovno pokrene.

nije mi uključen nikakav update. i windows update mi je isključen

vidim da si ti to riješio reinstalacijom wina. tako sam i ja, jer mi je i prije bilo tako, a reinstalirao sam ga prije 3 dana i sve je bilo ok do sinoć, tj. noćas dok sam bio u nespavalicama

i btw skenirao sam sa malwarebyteom i našao je 4 gamadi i to je uklonio ali problem je i dalje tu

 vidi, vidi. tako radi. isključio sam comodo, a windowsom sam uključio i nema downloada dok ja ne otvorim neku stranicu. samo ne znam koliko je to pametno

 ajd ja bih ipak comodo nego onaj windows firewall pa daj link za taj processbloker