żółty i jak mojego logi są dobre

combo fix: [quote]ComboFix 08-08-27.06 - OSTRY 2008-08-28 18:16:27.2 - NTFSx86 Microsoft Windows XP Home Edition 5.1.2600.3.1250.1.1045.18.102 [GMT 2:00] Running from: C:\Documents and Settings\OSTRY\Pulpit\ComboFix.exe [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((( Files Created from 2008-07-28 to 2008-08-28 ))))))))))))))))))))))))))))))) . 2008-08-28 16:47 . 2008-08-28 16:47 d-------- C:\Program Files\Alwil Software 2008-08-28 16:47 . 2003-03-18 22:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2008-08-27 21:12 . 2008-08-27 21:12 d-------- C:\Documents and Settings\OSTRY\Dane aplikacji\Ahead 2008-08-27 19:17 . 2008-04-13 20:45 26,368 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys 2008-08-26 13:25 . 2008-08-26 13:25 d-------- C:\Program Files\SubEdit-Player 2008-08-26 13:24 . 2008-08-26 13:24 d-------- C:\Program Files\SLD Codec Pack 2008-08-26 13:22 . 2008-08-26 13:42 49 --a------ C:\WINDOWS\NeroDigital.ini 2008-08-26 13:12 . 2008-08-26 13:12 d-------- C:\Documents and Settings\OSTRY\Dane aplikacji\GanymedeNet 2008-08-26 13:12 . 2008-08-26 13:12 4 --a------ C:\WINDOWS\system32\proc1262767916.bin 2008-08-26 12:53 . 2008-08-26 12:53 30 --a------ C:\WINDOWS\Sierra.ini 2008-08-26 12:47 . 2008-08-26 12:47 d-------- C:\Documents and Settings\OSTRY\WINDOWS 2008-08-26 12:47 . 1998-10-07 12:54 327,168 --a------ C:\WINDOWS\IsUn0415.exe 2008-08-25 14:02 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys 2008-08-25 14:00 . 2008-08-25 15:11 d-------- C:\WINDOWS\BDOSCAN8 2008-08-25 13:49 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl 2008-08-25 13:47 . 2008-08-25 13:49 d-------- C:\Program Files\Java 2008-08-25 13:45 . 2008-08-25 13:45 d-------- C:\Program Files\Common Files\Java 2008-08-24 17:42 . 2008-08-24 17:42 d-------- C:\Program Files\Microsoft Silverlight 2008-08-24 17:32 . 2008-07-22 17:00 1,214,526 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb 2008-08-24 17:32 . 2008-07-22 17:00 790,846 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb 2008-08-24 17:32 . 2008-07-22 17:00 9,696 -----c--- C:\WINDOWS\system32\dllcache\drvmain.sdb 2008-08-23 20:17 . 2008-08-25 15:45 d-------- C:\Program Files\Windows Media Connect 2 2008-08-23 20:15 . 2008-08-23 20:15 d-------- C:\WINDOWS\system32\LogFiles 2008-08-23 20:15 . 2008-08-23 20:16 d-------- C:\WINDOWS\system32\drivers\UMDF 2008-08-23 18:41 . 2008-06-23 18:42 6,066,176 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll 2008-08-23 18:41 . 2007-04-17 11:32 2,455,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dat 2008-08-23 18:41 . 2007-03-08 07:11 1,036,288 -----c--- C:\WINDOWS\system32\dllcache\ieframe.dll.mui 2008-08-23 18:41 . 2008-06-23 18:42 459,264 -----c--- C:\WINDOWS\system32\dllcache\msfeeds.dll 2008-08-23 18:41 . 2008-06-23 18:42 383,488 -----c--- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2008-08-23 18:41 . 2008-06-23 18:42 267,776 -----c--- C:\WINDOWS\system32\dllcache\iertutil.dll 2008-08-23 18:41 . 2008-06-23 18:42 63,488 -----c--- C:\WINDOWS\system32\dllcache\icardie.dll 2008-08-23 18:41 . 2008-06-23 18:42 52,224 -----c--- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2008-08-23 18:41 . 2008-06-23 11:20 13,824 -----c--- C:\WINDOWS\system32\dllcache\ieudinit.exe 2008-08-21 18:59 . 2008-08-28 14:27 d-------- C:\Documents and Settings\OSTRY\Dane aplikacji\OpenOffice.org2 2008-08-20 16:25 . 2008-08-06 15:27 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll 2008-08-20 16:25 . 2008-08-06 15:29 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll 2008-08-20 13:49 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll 2008-08-20 13:49 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui 2008-08-20 11:19 . 2008-05-30 14:11 3,850,760 --a------ C:\WINDOWS\system32\D3DX9_38.dll 2008-08-20 11:19 . 2008-05-30 14:11 1,491,992 --a------ C:\WINDOWS\system32\D3DCompiler_38.dll 2008-08-20 11:19 . 2008-05-30 14:19 507,400 --a------ C:\WINDOWS\system32\XAudio2_1.dll 2008-08-20 11:19 . 2008-03-05 16:03 479,752 --a------ C:\WINDOWS\system32\XAudio2_0.dll 2008-08-20 11:19 . 2008-05-30 14:11 467,984 --a------ C:\WINDOWS\system32\d3dx10_38.dll 2008-08-20 11:19 . 2008-05-30 14:18 238,088 --a------ C:\WINDOWS\system32\xactengine3_1.dll 2008-08-20 11:19 . 2008-03-05 16:03 238,088 --a------ C:\WINDOWS\system32\xactengine3_0.dll 2008-08-20 11:19 . 2008-05-30 14:17 65,032 --a------ C:\WINDOWS\system32\XAPOFX1_0.dll 2008-08-20 11:19 . 2008-05-30 14:17 25,608 --a------ C:\WINDOWS\system32\X3DAudio1_4.dll 2008-08-20 11:17 . 2008-08-20 11:17 d-------- C:\WINDOWS\Logs 2008-08-20 11:15 . 2008-08-20 11:15 d-------- C:\Program Files\directx 2008-08-20 09:12 . 2008-08-20 09:14 d-------- C:\Program Files\Winamp 2008-08-20 09:12 . 2008-08-20 09:13 d-------- C:\Documents and Settings\OSTRY\Dane aplikacji\Winamp 2008-08-19 19:18 . 2008-08-27 21:20 d-------- C:\Program Files\Windows Live Safety Center 2008-08-19 19:16 . 2008-04-11 21:06 691,712 -----c--- C:\WINDOWS\system32\dllcache\inetcomm.dll 2008-08-19 19:16 . 2008-05-01 16:37 331,776 -----c--- C:\WINDOWS\system32\dllcache\msadce.dll 2008-08-19 19:16 . 2008-06-14 19:36 273,024 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-08-19 19:16 . 2008-05-08 16:02 203,136 -----c--- C:\WINDOWS\system32\dllcache\rmcast.sys 2008-08-19 19:02 . 2008-08-24 17:18 d-------- C:\WINDOWS\system32\pl-pl 2008-08-19 19:02 . 2008-08-19 19:02 d-------- C:\WINDOWS\system32\pl 2008-08-19 19:02 . 2008-08-19 19:02 d-------- C:\WINDOWS\system32\bits 2008-08-19 19:02 . 2008-08-19 19:02 d-------- C:\WINDOWS\l2schemas 2008-08-19 19:01 . 2008-08-19 19:03 d-------- C:\WINDOWS\ServicePackFiles . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-08-27 16:36 --------- d-----w C:\Program Files\FlashGet 2008-08-23 14:40 --------- d-----w C:\Program Files\Common Files\Adobe 2008-08-19 18:32 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab Setup Files 2008-08-19 18:17 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-08-19 18:16 --------- d-----w C:\Program Files\word 2008-08-19 16:49 --------- d-----w C:\Documents and Settings\OSTRY\Dane aplikacji\Gadu-Gadu 2008-08-19 16:48 --------- d-----w C:\Program Files\Gadu-Gadu 2008-08-19 16:40 --------- d-----w C:\Program Files\nvidia 2008-08-19 16:40 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-08-19 16:32 --------- d-----w C:\Program Files\Common Files\Ahead 2008-08-19 16:32 --------- d-----w C:\Program Files\Ahead 2008-08-19 16:27 --------- d-----w C:\Documents and Settings\OSTRY\Dane aplikacji\InterTrust 2008-08-19 16:26 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-08-19 16:18 --------- d-----w C:\Program Files\microsoft frontpage 2008-07-07 20:29 253,952 ----a-w C:\WINDOWS\system32\es.dll 2008-06-24 16:46 74,240 ----a-w C:\WINDOWS\system32\mscms.dll 2008-06-23 16:42 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-06-20 17:48 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll . ((((((((((((((((((((((((((((( snapshot@2008-08-28_18.09.10.32 ))))))))))))))))))))))))))))))))))))))))) . + 2008-08-28 16:14:00 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_51c.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2006-10-22 12:22 86016] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2006-10-22 12:22 7700480] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-07-19 16:38 78008] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 19:21 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "msacm.l3acm"= l3codecp.acm [HKLM\~\startupfolder\C:^Documents and Settings^OSTRY^Menu Start^Programy^Autostart^OpenOffice.org 2.4.lnk] path=C:\Documents and Settings\OSTRY\Menu Start\Programy\Autostart\OpenOffice.org 2.4.lnk backup=C:\WINDOWS\pss\OpenOffice.org 2.4.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2008-04-14 19:21 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] -ra------ 2001-07-09 12:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon] --a------ 2006-10-22 12:22 7700480 C:\WINDOWS\system32\nvcpl.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a------ 2008-06-10 04:27 144784 C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2008-08-04 01:02 36352 C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz] --a------ 2006-10-22 12:22 1622016 C:\WINDOWS\system32\nwiz.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] -ra------ 2002-09-11 04:57 46592 C:\WINDOWS\SOUNDMAN.EXE [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\FlashGet\\flashget.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= "C:\\Documents and Settings\\All Users\\Dane aplikacji\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 2009\\Polish\\setup.exe"= R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboot.sys [2008-06-19 17:24] R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 16:35] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 16:37] . . ------- Supplementary Scan ------- . FireFox -: Profile - C:\Documents and Settings\OSTRY\Dane aplikacji\Mozilla\Firefox\Profiles\754am858.defaultFireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://o2.pl/ FF -: plugin - C:\Program Files\Adobe\Acrobat 5.0\Reader\browser\nppdf32.dll FF -: plugin - C:\Program Files\Mozilla Firefox\plugins\NPSLOTS70.dll . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-08-28 18:18:15 Windows 5.1.2600 Dodatek Service Pack 3 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2008-08-28 18:19:35 ComboFix-quarantined-files.txt 2008-08-28 16:19:30 ComboFix2.txt 2008-08-28 16:09:33 Pre-Run: 4,389,081,088 bajtów wolnych Post-Run: 4,379,406,336 bajtów wolnych 158 --- E O F --- 2008-08-27 17:31:23 [/quote]

SILENT RUNERS: [quote]"Silent Runners.vbs", revision 58, http://www.silentrunners.org/ Operating System: Windows XP Output limited to non-default values, except where indicated by "{++}" Startup items buried in registry: --------------------------------- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++} "NvMediaCenter" = "RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit" [MS] "NvCplDaemon" = "RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup" [MS] "avast!" = "C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" ["ALWIL Software"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\(Default) = (no title provided) -> {HKLM...CLSID} = "AcroIEHlprObj Class" \InProcServer32\(Default) = "C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx" [empty string] {2F364306-AA45-47B5-9F9D-39A8B94E7EF7}\(Default) = "flashget urlcatch" -> {HKLM...CLSID} = "FGCatchUrl" \InProcServer32\(Default) = "C:\Program Files\FlashGet\jccatch.dll" ["www.flashget.com"] {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\(Default) = (no title provided) -> {HKLM...CLSID} = "SSVHelper Class" \InProcServer32\(Default) = "C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll" ["Sun Microsystems, Inc."] {F156768E-81EF-470C-9057-481BA8380DBA}\(Default) = (no title provided) -> {HKLM...CLSID} = "FlashGet GetFlash Class" \InProcServer32\(Default) = "C:\Program Files\FlashGet\getflash.dll" ["www.flashget.com"] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "Rozszerzenie ikony HyperTerminalu" -> {HKLM...CLSID} = "HyperTerminal Icon Ext" \InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."] [/quote]

a można wiedzieć jak to sprawdziłeś ???

To -> http://www.quickheal.co.in/alerts-Trjn-Agent-aec.asp masz Combofixa pokaż. O trybie pracy dysków zdaje sie, że w FAQ też jest

a warto używać antywirusa jak sprawdzić Sprawdzenie trybu pracy dysków ???? bo chce zobaczyc czy mam dma czy pio wklejam z hijackthis: [code]Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:46:13, on 2008-08-27 Platform: Windows XP Dodatek SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\Winamp\winamp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Defender\MSASCui.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\mmc.exe C:\Documents and Settings\OSTRY\Pulpit\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O1 - Hosts: 61.129.115.198 www.xldd.com O1 - Hosts: 61.129.115.198 www.ojiang.com O1 - Hosts: 61.129.115.198 www.shuixian.net O1 - Hosts: 61.129.115.198 www.xlarea.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\Program Files\FlashGet\getflash.dll O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Ściągnij przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_link.htm O8 - Extra context menu item: &Ściągnij wszystko przy pomocy FlashGet'a - C:\Program Files\FlashGet\jc_all.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\Program Files\FlashGet\FlashGet.exe O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {1EF9F042-C2EB-4293-8213-474CAEEF531D} (TmHcmsX Control) - http://www.trendsecure.com/framework/control/en-US/activex/TmHcmsX.CAB O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1219564376703 O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1219223013015 O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www.ca.com/us/securityadvisor/virusinfo/webscan.cab O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{6D81FDD5-1396-493D-8FBC-F02A53DF2FD6}: NameServer = 194.204.152.34,194.204.159.1 O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe -- End of file - 6281 bytes [/code]

Internet pełny polecających ;)

ok juz czytam kurde dzieki za pomoc ten plik pomógł do rejestru ale za kazdym razem tak bede musiał robic ale dlaczego tak nagle padło mi wszystko jaki antywirus polecasz ????

Masz - http://forum.centrumxp.pl/default.aspx?g=posts&m=607397#607397 komplet informacji o narzędziach.

a jak to zrobic ja mowie ze to przez akt. bo własnie przed chwila sie zainstalowały i sie stało mam windows defender i nie wykrywa zadnego syfu i mam service pack 3 Żółty zrobiłem to ten plik jakis ściągnełem zminiłem mu rozszerzenie na reg i pokazał sie plik rejestru i dałem scalaj i wszystko smiga teraz mozesz mi powiedź z czego to było zaraz po aktualizacji pierwsze wlączenie kompa i ciach

Ja jednak nie sądzę by to przez aktualizacje było. Raczej składałbym sie ku jakimś regcleanerów albo syfom w systemie. Może własciwie - pokaż logi Hijacka, Silent Runners i Combofixa.

Żółty ale dlaczego sie tak dzieje ja na bank wiem ze to przez ta aktualizacje co to za firma microsoft ze taki bejr walneła

Po pierwsze - nie pisz posta pod postem. Po drugie - w przyklejonym FAQ znajduje się fix na niedziałające pliki exe - zajrzyj.

jeszcze jak probuje włączyć centrum zabezpieczeń w panelu sterowania to wyskakuje błąd c:\windows\system32\rundll32.exe prosze pomocy wogóle to komputer jak by miał wyłączone funkcje nie wiem co sie dzieje paint tez nie chodzi komputer normalnie chodzi nic nie mieli wirusa na bank nie ma po prostu aktualizacje się zainstalowany nowe do mojego komputera i komputer poprosił i restart jak się uruchomił to już się zaczeło proszę pomóżcie mi mam oryginalnego windowsa z service pack 3 i to juz po raz drugi to samo dochodzi komputer do jakiś aktualizacji instaluje je i sie dzieje proszę o pomoc