Zrobiłem tak jak XanTyp podał i mam tak: [code]AppName: explorer.exe AppVer: 6.0.2900.3156 ModName: unknown ModVer: 0.0.0.0 Offset: 029cc17a[/code] oraz jakiś błąd który mam w pliku 30bf_appocmpat a wygląda ten plik następująco [code] [/code] [b]De Niro[/b] Log z combofix [code]ComboFix 08-04-29.3 - Gani 2008-04-30 1:09:09.1 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.544 [GMT 2:00] Running from: C:\Documents and Settings\Gani\Pulpit\ComboFix.exe * Created a new restore point * Resident AV is active [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((( Files Created from 2008-03-28 to 2008-04-29 ))))))))))))))))))))))))))))))) . 2008-04-30 00:50 . 2008-04-14 22:50 1,306,624 -----c--- C:\WINDOWS\system32\dllcache\msxml6.dll 2008-04-30 00:50 . 2008-04-14 21:52 89,600 --a------ C:\WINDOWS\system32\msxml6r.dll 2008-04-30 00:50 . 2008-04-14 21:52 89,600 -----c--- C:\WINDOWS\system32\dllcache\msxml6r.dll 2008-04-30 00:48 . 2008-04-30 00:48 d-------- C:\WINDOWS\system32\pl 2008-04-30 00:48 . 2008-04-30 00:48 d-------- C:\WINDOWS\system32\bits 2008-04-30 00:48 . 2008-04-30 00:48 d-------- C:\WINDOWS\l2schemas 2008-04-30 00:48 . 2008-04-14 22:50 69,120 --------- C:\WINDOWS\system32\wlanapi.dll 2008-04-30 00:48 . 2008-04-14 22:50 53,248 --------- C:\WINDOWS\system32\tsgqec.dll 2008-04-30 00:48 . 2008-04-14 22:50 50,688 --------- C:\WINDOWS\system32\tspkg.dll 2008-04-30 00:48 . 2008-04-14 22:51 32,866 --------- C:\WINDOWS\slrundll.exe 2008-04-30 00:48 . 2008-04-14 22:51 28,672 --------- C:\WINDOWS\system32\vidcap.ax 2008-04-30 00:40 . 2008-04-30 00:50 d-------- C:\WINDOWS\ServicePackFiles 2008-04-30 00:39 . 2008-04-14 22:51 294,912 -----c--- C:\WINDOWS\system32\dllcache\dlimport.exe 2008-04-30 00:30 . 2006-12-29 00:31 19,569 --a------ C:\WINDOWS\[u]0[/u]02940_.tmp 2008-04-30 00:26 . 2008-04-30 00:26 d-------- C:\WINDOWS\EHome 2008-04-29 15:23 . 2008-04-29 22:20 d-------- C:\Program Files\UltraStar Deluxe 2008-04-29 15:13 . 2008-04-29 15:13 d-------- C:\Documents and Settings\Gani\Dane aplikacji\BESTplayer 2008-04-29 14:04 . 2008-04-29 14:04 d-------- C:\Program Files\Firefly Studios 2008-04-29 10:19 . 2008-04-29 10:19 d-------- C:\Documents and Settings\Gani\Dane aplikacji\Canon 2008-04-29 10:19 . 2008-04-29 10:19 d-------- C:\Documents and Settings\All Users\Dane aplikacji\MSScanAppDataDir 2008-04-29 09:28 . 2008-04-29 09:28 d-------- C:\Program Files\MSXML 6.0 2008-04-29 09:08 . 2008-04-29 15:13 d-------- C:\Program Files\MoorHunt 2008-04-28 19:27 . 2008-04-14 22:51 221,184 --a------ C:\WINDOWS\system32\wmpns.dll 2008-04-27 22:35 . 2008-04-27 22:35 d-------- C:\Program Files\Elfin 2008-04-27 22:23 . 2008-04-27 22:23 d-------- C:\Program Files\PITy 2008-04-27 15:24 . 2008-04-27 15:24 d----c--- C:\WINDOWS\system32\DRVSTORE 2008-04-27 15:24 . 2008-04-27 15:24 d-------- C:\WINDOWS\system32\AGEIA 2008-04-27 15:23 . 2008-04-27 15:23 d-------- C:\Program Files\Common Files\Wise Installation Wizard 2008-04-27 15:23 . 2008-04-27 15:24 d-------- C:\Program Files\AGEIA Technologies 2008-04-27 12:27 . 2008-04-27 12:27 d-------- C:\Program Files\a-TimeSync 2008-04-27 10:44 . 2008-04-27 10:44 d-------- C:\Program Files\Zhyper Networks 2008-04-26 23:59 . 2008-04-26 23:59 d-------- C:\Program Files\Common Files\Adobe Systems Shared 2008-04-26 23:59 . 2008-04-26 23:59 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Adobe Systems 2008-04-26 23:55 . 2008-04-26 23:55 d-------- C:\Program Files\DAEMON Tools Lite 2008-04-26 23:53 . 2008-04-26 23:53 d-------- C:\Documents and Settings\Gani\Dane aplikacji\DAEMON Tools 2008-04-26 23:53 . 2008-04-26 23:53 717,296 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-04-26 22:09 . 2008-04-26 22:09 d-------- C:\WINDOWS\Sun 2008-04-26 22:09 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-04-26 22:08 . 2008-04-26 22:09 d-------- C:\Program Files\Java 2008-04-26 22:07 . 2008-04-26 22:07 d-------- C:\Program Files\Common Files\Java 2008-04-26 16:44 . 2008-04-28 17:01 d-------- C:\Program Files\mIRC 2008-04-26 16:44 . 2008-04-29 23:23 d-------- C:\Documents and Settings\Gani\Dane aplikacji\mIRC 2008-04-26 16:36 . 2008-03-01 15:02 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-04-26 16:36 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-04-26 16:36 . 2007-03-08 07:11 1,036,288 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-04-26 16:36 . 2008-03-01 15:02 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-04-26 16:36 . 2008-03-01 15:02 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-04-26 16:36 . 2008-03-01 15:02 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-04-26 16:36 . 2008-03-01 15:02 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-04-26 16:36 . 2008-03-01 15:02 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-04-26 16:36 . 2008-02-22 12:00 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-04-26 15:41 . 2008-04-26 15:41 151 --a------ C:\WINDOWS\PhotoSnapViewer.INI 2008-04-26 13:15 . 2008-04-29 16:18 69 --a------ C:\WINDOWS\NeroDigital.ini 2008-04-26 09:42 . 2008-04-26 09:42 d-------- C:\Program Files\DivX 2008-04-25 23:11 . 2008-04-25 23:11 d-------- C:\Program Files\SpeedSim 2008-04-25 23:11 . 2008-04-25 23:12 d-------- C:\Documents and Settings\Gani\Dane aplikacji\SpeedSim 2008-04-25 23:00 . 2008-04-26 09:42 1,294 --a------ C:\WINDOWS\mozver.dat 2008-04-25 22:42 . 2008-04-26 16:06 d-------- C:\Documents and Settings\Gani\Dane aplikacji\skypePM 2008-04-25 22:42 . 2008-04-25 22:42 32 --a------ C:\Documents and Settings\All Users\Dane aplikacji\ezsid.dat 2008-04-25 22:41 . 2008-04-25 22:41 d-------- C:\Program Files\Skype 2008-04-25 22:41 . 2008-04-25 22:41 d-------- C:\Program Files\Common Files\Skype 2008-04-25 22:41 . 2008-04-26 23:50 d-------- C:\Documents and Settings\Gani\Dane aplikacji\Skype 2008-04-25 22:40 . 2008-04-25 22:41 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Skype 2008-04-25 22:22 . 2008-04-25 22:22 d-------- C:\Program Files\MSXML 4.0 2008-04-25 22:02 . 2001-08-17 23:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys 2008-04-25 22:01 . 2008-04-14 21:35 58,880 --a------ C:\WINDOWS\system32\drivers\redbook.sys 2008-04-25 22:00 . 2008-04-14 22:50 77,312 --a------ C:\WINDOWS\system32\usbui.dll 2008-04-25 22:00 . 2001-08-17 23:46 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys 2008-04-25 22:00 . 2008-04-14 21:46 5,504 --a------ C:\WINDOWS\system32\drivers\intelide.sys 2008-04-14 22:51 . 2008-04-14 22:51 20,992 --------- C:\WINDOWS\system32\spupdwxp.exe 2008-04-14 22:51 . 2008-04-14 22:51 20,992 --------- C:\WINDOWS\system32\faxpatch.exe 2008-04-14 22:51 . 2008-04-14 22:51 7,680 --a------ C:\WINDOWS\system32\spdwnwxp.exe 2008-04-14 22:05 . 2008-04-14 22:05 2,524 --------- C:\WINDOWS\system32\pid.inf . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-04-29 22:58 13,440 ----a-w C:\WINDOWS\system32\drivers\USBCRFT.SYS 2008-04-29 22:57 --------- d-----w C:\Program Files\Spybot - Search & Destroy 2008-04-29 22:48 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Spybot - Search & Destroy 2008-04-29 12:04 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-04-27 20:35 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-04-27 13:23 271,360 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-04-27 13:23 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-04-26 22:01 --------- d-----w C:\Program Files\Common Files\Adobe 2008-04-26 19:14 --------- d-----w C:\Program Files\Gadu-Gadu 2008-04-26 14:39 --------- d-----w C:\Program Files\Notepad++ 2008-04-26 14:39 --------- d-----w C:\Documents and Settings\Gani\Dane aplikacji\Notepad++ 2008-04-26 12:56 --------- d-----w C:\Documents and Settings\Gani\Dane aplikacji\Ahead 2008-04-25 20:52 --------- d-----w C:\Program Files\Eset 2008-04-25 19:04 512,096 ----a-w C:\WINDOWS\system32\drivers\amon.sys 2008-04-25 19:04 298,104 ----a-w C:\WINDOWS\system32\imon.dll 2008-04-25 19:04 15,424 ----a-w C:\WINDOWS\system32\drivers\nod32drv.sys 2008-04-25 19:01 --------- d-----w C:\Program Files\Microsoft Works 2008-04-25 18:59 --------- d-----w C:\Program Files\Microsoft.NET 2008-04-25 18:55 73,728 ----a-w C:\WINDOWS\ALCFDRTM.EXE 2008-04-25 18:50 --------- d-----w C:\Documents and Settings\Gani\Dane aplikacji\Gadu-Gadu 2008-04-25 18:46 --------- d-----w C:\Program Files\Realtek 2008-04-25 18:46 --------- d-----w C:\Documents and Settings\Gani\Dane aplikacji\Talkback 2008-04-25 18:43 --------- d-----w C:\Program Files\Common Files\LightScribe 2008-04-25 18:42 --------- d-----w C:\Program Files\Common Files\Ahead 2008-04-25 18:42 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ahead 2008-04-25 18:40 --------- d-----w C:\Program Files\Nero 2008-04-25 18:40 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Nero 2008-04-25 18:36 --------- d--h--w C:\Documents and Settings\All Users\Dane aplikacji\CanonBJ 2008-04-25 18:21 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\CyberLink 2008-04-25 18:20 --------- d-----w C:\Program Files\CyberLink 2008-04-25 18:15 --------- d-----w C:\Program Files\Gigabyte 2008-04-25 18:14 --------- d-----w C:\Program Files\Intel 2008-04-25 18:08 --------- d-----w C:\Program Files\microsoft frontpage 2008-04-25 18:06 --------- d-----w C:\Program Files\Usługi online 2008-04-14 21:16 1,804 ----a-w C:\WINDOWS\system32\dcache.bin 2008-04-14 20:56 332,288 ----a-w C:\WINDOWS\system32\netsetup.exe 2008-04-14 20:52 92,424 ----a-w C:\WINDOWS\system32\rdpdd.dll 2008-04-14 20:52 87,176 ----a-w C:\WINDOWS\system32\rdpwsx.dll 2008-04-14 20:52 40,840 ----a-w C:\WINDOWS\system32\drivers\termdd.sys 2008-04-14 20:52 21,896 ----a-w C:\WINDOWS\system32\drivers\tdtcp.sys 2008-04-14 20:52 139,656 ----a-w C:\WINDOWS\system32\drivers\rdpwd.sys 2008-04-14 20:52 12,168 ----a-w C:\WINDOWS\system32\tsddd.dll 2008-04-14 20:52 12,040 ----a-w C:\WINDOWS\system32\drivers\tdpipe.sys 2008-04-14 20:50 999,936 ----a-w C:\WINDOWS\system32\syssetup.dll 2008-04-14 20:49 98,304 ----a-w C:\WINDOWS\system32\actxprxy.dll 2008-04-14 20:48 5,632 ----a-w C:\WINDOWS\system32\wmi.dll 2008-04-14 20:48 1,449,472 ----a-w C:\WINDOWS\system32\winntbbu.dll 2008-04-14 20:47 57,375 ----a-w C:\WINDOWS\system32\odbcji32.dll 2008-04-14 20:43 4,126 ----a-w C:\WINDOWS\system32\msdxmlc.dll 2008-04-14 20:42 3,584 ----a-w C:\WINDOWS\system32\msafd.dll 2008-04-14 20:36 3,584 ----a-w C:\WINDOWS\system32\icmp.dll 2008-04-14 20:35 9,344 ----a-w C:\WINDOWS\system32\framebuf.dll 2008-04-14 20:33 3,072 ----a-w C:\WINDOWS\system32\dpnlobby.dll 2008-04-14 20:33 3,072 ----a-w C:\WINDOWS\system32\dpnaddr.dll 2008-04-14 20:31 16,896 ----a-w C:\WINDOWS\system32\cfgmgr32.dll 2008-04-14 20:30 285,696 ----a-w C:\WINDOWS\system32\atmfd.dll 2008-04-14 20:04 73,472 ----a-w C:\WINDOWS\system32\drivers\sr.sys 2008-04-14 20:03 80,256 ----a-w C:\WINDOWS\system32\drivers\parport.sys 2008-04-14 20:03 68,608 ----a-w C:\WINDOWS\system32\drivers\pci.sys 2008-04-14 20:03 46,848 ----a-w C:\WINDOWS\system32\drivers\p3.sys 2008-04-14 20:03 120,320 ----a-w C:\WINDOWS\system32\drivers\pcmcia.sys 2008-04-14 19:59 2,146,816 ----a-w C:\WINDOWS\system32\ntoskrnl.exe 2008-04-14 19:59 2,025,472 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe 2008-04-14 19:55 4,096 ----a-w C:\WINDOWS\system32\dsprpres.dll 2008-04-14 19:52 800,000 ----a-w C:\WINDOWS\system32\drivers\dmboot.sys 2008-04-14 19:52 153,856 ----a-w C:\WINDOWS\system32\drivers\dmio.sys 2008-04-14 19:50 80,896 ------w C:\WINDOWS\system32\msshavmsg.dll 2008-04-14 19:50 24,960 ----a-w C:\WINDOWS\system32\drivers\kbdclass.sys 2008-04-14 19:48 37,632 ----a-w C:\WINDOWS\system32\drivers\isapnp.sys 2008-04-14 19:47 40,832 ----a-w C:\WINDOWS\system32\drivers\crusoe.sys 2008-04-14 19:46 40,448 ----a-w C:\WINDOWS\system32\drivers\intelppm.sys 2008-04-14 19:45 49,664 ----a-w C:\WINDOWS\system32\inetres.dll 2008-04-14 19:45 2,977,792 ----a-w C:\WINDOWS\system32\wmploc.dll 2008-04-14 19:43 563,200 ----a-w C:\WINDOWS\system32\shdoclc.dll 2008-04-14 19:41 65,280 ----a-w C:\WINDOWS\system32\drivers\serial.sys 2008-04-14 19:41 53,248 ----a-w C:\WINDOWS\system32\drivers\i8042prt.sys 2008-04-14 19:39 25,728 ------w C:\WINDOWS\system32\drivers\hidbth.sys 2008-04-14 19:39 190,976 ----a-w C:\WINDOWS\system32\wmerror.dll 2008-04-14 19:37 10,240 ----a-w C:\WINDOWS\system32\gpkrsrc.dll 2008-04-14 19:35 67,584 ----a-w C:\WINDOWS\system32\browselc.dll 2008-04-14 19:35 273,920 ------w C:\WINDOWS\system32\drivers\bthport.sys 2008-04-14 19:35 1,845,888 ----a-w C:\WINDOWS\system32\win32k.sys 2008-04-14 19:33 44,672 ----a-w C:\WINDOWS\system32\drivers\fips.sys 2008-04-14 19:31 52,864 ----a-w C:\WINDOWS\system32\drivers\volsnap.sys 2008-04-14 19:30 701,440 ------w C:\WINDOWS\system32\drivers\ati2mtag.sys 2008-04-14 19:30 39,936 ----a-w C:\WINDOWS\system32\drivers\processr.sys 2008-04-14 19:30 327,040 ------w C:\WINDOWS\system32\drivers\ati2mtaa.sys 2008-04-14 19:29 8,192 ----a-w C:\WINDOWS\system32\asferror.dll 2008-04-14 19:29 103,936 ----a-w C:\WINDOWS\system32\dpcdll.dll 2008-04-14 19:28 41,856 ----a-w C:\WINDOWS\system32\drivers\amdk7.sys 2008-04-14 19:28 41,472 ----a-w C:\WINDOWS\system32\drivers\amdk6.sys 2008-04-14 19:25 23,296 ----a-w C:\WINDOWS\system32\drivers\mouclass.sys 2008-04-14 19:24 30,208 ----a-w C:\WINDOWS\system32\drivers\modem.sys 2008-04-14 19:24 188,544 ----a-w C:\WINDOWS\system32\drivers\acpi.sys 2008-04-13 22:58 175,744 ----a-w C:\WINDOWS\system32\drivers\rdbss.sys 2008-04-13 22:51 162,816 ----a-w C:\WINDOWS\system32\drivers\netbt.sys 2008-04-13 22:50 91,520 ----a-w C:\WINDOWS\system32\drivers\ndiswan.sys 2008-04-13 22:50 361,344 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys 2008-04-13 22:50 182,656 ----a-w C:\WINDOWS\system32\drivers\ndis.sys 2008-04-13 22:49 75,264 ----a-w C:\WINDOWS\system32\drivers\ipsec.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-12-05 01:41 8523776] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 22:51 15360] [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\mIRC\\mirc.exe"= "C:\\Program Files\\Mozilla Firefox\\firefox.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= "C:\\Program Files\\a-TimeSync\\TimeSync.exe"= "C:\\Documents and Settings\\Gani\\Pulpit\\hfs.exe"= "C:\\Program Files\\Gadu-Gadu\\gg.exe"= "C:\\WINDOWS\\system32\\dplaysvr.exe"= "C:\\Program Files\\Firefly Studios\\Stronghold Crusader\\Stronghold Crusader.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= R3 CardReaderFilter;Card Reader Filter;C:\WINDOWS\system32\Drivers\USBCRFT.SYS [2008-04-30 00:58] R3 usbstor;Sterownik magazynu masowego USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 00:15] S3 usbscan;Sterownik skanera USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-14 00:15] S3 zlportio;zlportio;C:\Program Files\UltraStar Deluxe\zlportio.sys [] *Newly Created Service* - CATCHME [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] "C:\Program Files\Common Files\LightScribe\LSRunOnce.exe" . ************************************************************************** catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-04-30 01:11:14 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . --------------------- DLLs Loaded Under Running Processes --------------------- PROCESS: C:\WINDOWS\system32\lsass.exe -> C:\Program Files\Eset\pr_imon.dll . Completion time: 2008-04-30 1:11:41 ComboFix-quarantined-files.txt 2008-04-29 23:11:38 Pre-Run: 8,124,280,832 bajtów wolnych Post-Run: 8,134,209,536 bajtów wolnych 233 --- E O F --- 2008-04-26 18:45:15 [/code]

Podaj LOG hijack this oraz ComboFIX

Możesz uniknąć tego zjawiska, ograniczając jego występowanie do naprawdę skrajnych wypadków: [quote]Mój komputer -> Właściwości -> zakładka Zaawansowane -> Raportowanie błędów -> zaznacz: Wyłącz raportowanie błędów i zostaw zaznaczone: Powiadom mnie, jeśli wystąpią błędy krytyczne.[/quote]

jak sama nazwa wskazuje to jest błąd explorer.exe być może jakiś program gryzie się z windowsem lub masz wirusa, ale lepiej zajrzyj tu [url=http://forum.pcformat.pl/showthread.php?tid=22833]błąd w explorer.exe[/url]