kamaa:

cmd /c tasklist /m > Pulpit\rundll32.txt

co chciałeś sprawdzić za pomocą tej komend??

Potrafisz sie skupic na calym poscie czy tez tylko wybiorczo przegladasz zdania ? Jesli potrafisz zrozumiec calego posta, przeczytaj jeszcze raz co napisal Bobi.

cmd /c tasklist /m > Pulpit\rundll32.txt

co chciałeś sprawdzić za pomocą tej komend??

mrTom:

Jest tu kilka podejrzanych procesów, takich jak ashWebSv...

Avast4

mrTom:

RaConfig.exe

RaConfig

Jest tu kilka podejrzanych procesów, takich jak ashWebSv i RaConfig.exe. ja tam bym na wszelki wypadek sprawdził, tak dla pewności.

Mylisz sie, tu nie widac wirusow.

ja uwaźam ze znaczna ilosc z tych procesów to są wirale. wejdz na www.skaner.mks.com.pl, jesli nie masz skanera antywirusowego

Sprobuj odptaszyc rundll'a w msconfig
Podmien go w konsoli odzyskiwania na nowy, formulke dostales wyzej

Nazwa obrazu PID Moduˆy
========================= ====== =============================================
System Idle Process 0 Brak
System 4 Brak
SMSS.EXE 540 ntdll.dll
CSRSS.EXE 604 ntdll.dll, CSRSRV.dll, basesrv.dll,
winsrv.dll, USER32.dll, KERNEL32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll, sxs.dll
WINLOGON.EXE 628 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, USERENV.dll, NDdeApi.dll,
CRYPT32.dll, MSASN1.dll, Secur32.dll,
WINSTA.dll, PROFMAP.dll, NETAPI32.dll,
REGAPI.dll, WS2_32.dll, WS2HELP.dll,
AUTHZ.dll, PSAPI.DLL, VERSION.dll,
SETUPAPI.dll, MSGINA.dll, SHELL32.dll,
SHLWAPI.dll, COMCTL32.dll, ODBC32.dll,
comdlg32.dll, comctl32.dll, odbcint.dll,
SHSVCS.dll, sfc.dll, sfc_os.dll,
WINTRUST.dll, ole32.dll, IMAGEHLP.dll,
WINSCARD.DLL, WTSAPI32.dll, uxtheme.dll,
WINMM.dll, SYNCOR11.DLL, cscdll.dll,
rsaenh.dll, WlNotify.dll, WINSPOOL.DRV,
MPR.dll, SAMLIB.dll, msv1_0.dll, cscui.dll,
NTMARTA.DLL, WLDAP32.dll, sxs.dll,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, COMRes.dll, OLEAUT32.dll,
CLBCATQ.DLL
SERVICES.EXE 672 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, USERENV.dll, SCESRV.dll,
AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
NCObjAPI.DLL, secur32.dll, eventlog.dll,
WS2_32.dll, WS2HELP.dll, PSAPI.DLL,
wtsapi32.dll, netapi32.dll
LSASS.EXE 684 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, LSASRV.dll, msvcrt.dll,
Secur32.dll, USER32.dll, GDI32.dll,
SAMSRV.dll, cryptdll.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, MSASN1.dll,
NETAPI32.dll, SAMLIB.dll, MPR.dll,
NTDSAPI.dll, WLDAP32.dll, msprivs.dll,
kerberos.dll, msv1_0.dll, netlogon.dll,
w32time.dll, MSVCP60.dll, iphlpapi.dll,
USERENV.dll, schannel.dll, CRYPT32.dll,
wdigest.dll, rsaenh.dll, scecli.dll,
SETUPAPI.dll, OLEAUT32.dll, OLE32.DLL,
shell32.dll, SHLWAPI.dll, comctl32.dll,
comctl32.dll, ipsecsvc.dll, oakley.DLL,
WINIPSEC.DLL, pstorsvc.dll, mswsock.dll,
wshtcpip.dll, psbase.dll, dssenh.dll
SVCHOST.EXE 836 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, rpcss.dll, msvcrt.dll,
WS2_32.dll, WS2HELP.dll, USER32.dll,
GDI32.dll, Secur32.dll, userenv.dll,
mswsock.dll, wshtcpip.dll, DNSAPI.dll,
iphlpapi.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, CLBCATQ.DLL, ole32.dll,
OLEAUT32.dll, COMRes.dll, VERSION.dll
SVCHOST.EXE 880 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, shsvcs.dll, msvcrt.dll,
SHLWAPI.dll, shell32.dll, comctl32.dll,
comctl32.dll, dhcpcsvc.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
Secur32.dll, WINSTA.dll, UxTheme.dll,
rsaenh.dll, wzcsvc.dll, rtutils.dll,
WMI.dll, OLEAUT32.dll, CRYPT32.dll,
MSASN1.dll, WTSAPI32.dll, ESENT.dll,
WLDAP32.dll, NETAPI32.dll, IMAGEHLP.dll,
SAMLIB.dll, SETUPAPI.dll, RASAPI32.dll,
rasman.dll, TAPI32.dll, WINMM.dll,
USERENV.dll, SYNCOR11.DLL, msv1_0.dll,
NTMARTA.DLL, CLBCATQ.DLL, COMRes.dll,
VERSION.dll, schedsvc.dll, NTDSAPI.dll,
mswsock.dll, wshtcpip.dll, MSIDLE.DLL,
audiosrv.dll, wkssvc.dll, cryptsvc.dll,
WINTRUST.dll, certcli.dll, ATL.DLL,
CRYPTUI.dll, WININET.dll, dmserver.dll,
ersvc.dll, es.dll, pchsvc.dll, srvsvc.dll,
msgsvc.dll, seclogon.dll, sens.dll,
winspool.drv, srsvc.dll, POWRPROF.dll,
trkwks.dll, w32time.dll, MSVCP60.dll,
wmisvc.dll, wbemcomn.dll, VSSAPI.DLL,
mspmspsv.dll, wuauserv.dll, wuaueng.dll,
ADVPACK.dll, sfc.dll, sfc_os.dll,
browser.dll, SXS.DLL, comsvcs.dll,
MTXCLU.DLL, WSOCK32.dll, colbact.DLL,
CLUSAPI.DLL, RESUTILS.DLL, mtxoci.dll,
MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll,
termsrv.dll, ICAAPI.dll, AUTHZ.dll,
mstlsapi.dll, REGAPI.dll, netman.dll,
NETSHELL.dll, credui.dll, hnetcfg.dll,
wbemcore.dll, esscli.dll, FastProx.dll,
upnp.dll, SSDPAPI.dll, wmiutils.dll,
repdrvfs.dll, wmiprvsd.dll, NCObjAPI.DLL,
wbemess.dll, netcfgx.dll, msi.dll,
sensapi.dll, rasadhlp.dll, rasmans.dll,
WINIPSEC.DLL, tapisrv.dll, PSAPI.DLL,
RASDLG.dll, urlmon.dll, winhttp.dll,
ncprov.dll, rastapi.dll, unimdm.tsp,
uniplat.dll, kmddsp.tsp, ndptsp.tsp,
ipconf.tsp, h323.tsp, hidphone.tsp, HID.DLL,
rasppp.dll, ntlsapi.dll, raschap.dll,
rastls.dll, SCHANNEL.dll, WinSCard.dll,
wbemsvc.dll
SVCHOST.EXE 980 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, dnsrslvr.dll, msvcrt.dll,
USER32.dll, GDI32.dll, DNSAPI.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
mswsock.dll, wshtcpip.dll
SVCHOST.EXE 1048 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, ole32.dll, GDI32.dll,
USER32.dll, lmhsvc.dll, msvcrt.dll,
iphlpapi.dll, WS2_32.dll, WS2HELP.dll,
webclnt.dll, WININET.dll, SHLWAPI.dll,
CRYPT32.dll, MSASN1.dll, OLEAUT32.dll,
comctl32.dll, shell32.dll, comctl32.dll,
Secur32.dll, wsock32.dll, regsvc.dll,
ssdpsrv.dll, mswsock.dll, wshtcpip.dll
EXPLORER.EXE 1332 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SHLWAPI.dll, SHELL32.dll,
ole32.dll, OLEAUT32.dll, BROWSEUI.dll,
SHDOCVW.dll, UxTheme.dll, comctl32.dll,
comctl32.dll, appHelp.dll, CLBCATQ.DLL,
COMRes.dll, VERSION.dll, cscui.dll,
CSCDLL.dll, themeui.dll, Secur32.dll,
MSIMG32.dll, USERENV.dll, actxprxy.dll,
netapi32.dll, urlmon.dll, LINKINFO.dll,
ntshrui.dll, ATL.DLL, WINTRUST.dll,
CRYPT32.dll, MSASN1.dll, IMAGEHLP.dll,
rsaenh.dll, msi.dll, WININET.dll,
WINSTA.dll, webcheck.dll, stobject.dll,
BatMeter.dll, POWRPROF.dll, SETUPAPI.dll,
WTSAPI32.dll, WINMM.dll, SYNCOR11.DLL,
wdmaud.drv, msacm32.drv, MSACM32.dll,
midimap.dll, NETSHELL.dll, credui.dll,
WS2_32.dll, WS2HELP.dll, iphlpapi.dll,
printui.dll, WINSPOOL.DRV, ACTIVEDS.dll,
adsldpc.dll, WLDAP32.dll, CFGMGR32.dll,
MPR.dll, drprov.dll, ntlanman.dll,
NETUI0.dll, NETUI1.dll, NETRAP.dll,
SAMLIB.dll, davclnt.dll, browselc.dll,
MSGINA.dll, ODBC32.dll, comdlg32.dll,
odbcint.dll, sti.dll, SXS.DLL, shdoclc.dll,
mydocs.dll, zipfldr.dll, WZSHLSTB.DLL,
ashShell.dll, MSVCP71.dll, MSVCR71.dll
SPOOLSV.EXE 1392 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
USER32.dll, SPOOLSS.DLL, WS2_32.dll,
WS2HELP.dll, DNSAPI.dll, iphlpapi.dll,
rasadhlp.dll, localspl.dll, ole32.dll,
OLEAUT32.dll, VERSION.dll, Secur32.dll,
sfc_os.dll, WINTRUST.dll, CRYPT32.dll,
MSASN1.dll, IMAGEHLP.dll, USERENV.dll,
winspool.drv, netapi32.dll, cnbjmon.dll,
hpzlnt08.dll, pjlmon.dll, tcpmon.dll,
usbmon.dll, mswsock.dll, winrnr.dll,
WLDAP32.dll, win32spl.dll, NETRAP.dll,
CLBCATQ.DLL, COMRes.dll, inetpp.dll, icmp.dll
RUNDLL32.EXE 1580 ntdll.dll, kernel32.dll, msvcrt.dll,
GDI32.dll, USER32.dll, ADVAPI32.dll,
RPCRT4.dll, IMAGEHLP.dll, se.dll,
WININET.dll, SHLWAPI.dll, CRYPT32.dll,
MSASN1.dll, OLEAUT32.dll, OLE32.DLL,
comctl32.dll
RUNDLL32.EXE 1592 ntdll.dll, kernel32.dll, msvcrt.dll,
GDI32.dll, USER32.dll, ADVAPI32.dll,
RPCRT4.dll, IMAGEHLP.dll, NVMCTRAY.DLL,
SHELL32.dll, SHLWAPI.dll, COMCTL32.dll,
comctl32.dll
RaConfig.exe 1604 ntdll.dll, kernel32.dll, SHLWAPI.dll,
msvcrt.dll, GDI32.dll, USER32.dll,
ADVAPI32.dll, RPCRT4.dll, VERSION.dll,
SETUPAPI.dll, comdlg32.dll, COMCTL32.dll,
SHELL32.dll, WINSPOOL.DRV, oledlg.dll,
ole32.dll, OLEPRO32.DLL, OLEAUT32.dll,
comctl32.dll
aswUpdSv.exe 2000 ntdll.dll, kernel32.dll, aswCmnS.dll,
aswCmnOS.dll, USER32.dll, GDI32.dll,
ADVAPI32.dll, RPCRT4.dll, MSVCP71.dll,
MSVCR71.dll, WSOCK32.dll, WS2_32.dll,
msvcrt.dll, WS2HELP.dll, aswCmnB.dll
ashServ.exe 2012 ntdll.dll, kernel32.dll, RPCRT4.dll,
ADVAPI32.dll, aswAux.dll, xerces.dll,
USER32.dll, GDI32.dll, MSVCR71.dll,
MSVCP71.dll, aswCmnB.dll, aswCmnOS.dll,
WSOCK32.dll, WS2_32.dll, msvcrt.dll,
WS2HELP.dll, aswEngin.dll, SHELL32.dll,
SHLWAPI.dll, ole32.dll, aswScan.dll,
aswCmnS.dll, OLEAUT32.dll, ashBase.dll,
VERSION.dll, COMCTL32.dll, ashTask.dll,
aswInteg.dll, aswIdle.dll, Aavm4h.dll,
AavmRpch.dll, Base.dll, UNACEV2.DLL,
NetApi32.dll, AhResMai.dll, ahResMes.dll,
AhResNS.dll, AhResOut.dll, ahResP2P.dll,
AhResStd.dll, AhResWS.dll, ashSODBC.dll,
ODBC32.dll, comdlg32.dll, odbcint.dll,
ODBCCP32.dll, odbcjt32.dll, msjet40.dll,
mswstr10.dll, odbcji32.dll, msjter40.dll,
MSJINT40.DLL, Secur32.dll, CLBCATQ.DLL,
COMRes.dll, msjtes40.dll, VBAJET32.DLL,
expsrv.dll, Rasapi32.dll, rasman.dll,
TAPI32.dll, rtutils.dll, WINMM.dll,
SYNCOR11.DLL, iphlpapi.dll, mswsock.dll,
DNSAPI.dll, winrnr.dll, WLDAP32.dll,
rasadhlp.dll, aswRes.dll
NVSVC32.EXE 164 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
msvcrt.dll, SHLWAPI.dll, COMCTL32.dll,
comctl32.dll
SMAgent.exe 236 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, SHELL32.dll, msvcrt.dll,
GDI32.dll, USER32.dll, SHLWAPI.dll,
comctl32.dll, comctl32.dll
SVCHOST.EXE 260 ntdll.dll, kernel32.dll, ADVAPI32.dll,
RPCRT4.dll, wiaservc.dll, msvcrt.dll,
USER32.dll, GDI32.dll, OLEAUT32.dll,
OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
setupapi.dll, USERENV.dll, mscms.dll,
WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
CLBCATQ.DLL, COMRes.dll, actxprxy.dll,
sti.dll
ashWebSv.exe 1208 ntdll.dll, kernel32.dll, WS2_32.dll,
msvcrt.dll, WS2HELP.dll, ADVAPI32.dll,
RPCRT4.dll, ashBase.dll, WSOCK32.dll,
VERSION.dll, USER32.dll, GDI32.dll,
ole32.dll, OLEAUT32.dll, MSVCP71.dll,
MSVCR71.dll, aswCmnOS.dll, aswCmnB.dll,
aswCmnS.dll, COMCTL32.dll, Aavm4h.dll,
AavmRpch.dll, aswAux.dll, xerces.dll,
aswEngin.dll, SHELL32.dll, SHLWAPI.dll,
aswScan.dll, ashTask.dll, comctl32.dll,
mswsock.dll, DNSAPI.dll, winrnr.dll,
WLDAP32.dll, rasadhlp.dll, Base.dll,
PSAPI.dll, wshtcpip.dll, security.dll,
SECUR32.dll, ashWsFtr.dll, OLEACC.dll,
MSVCP60.dll, WINSPOOL.DRV, AhResWs.dll,
WININET.dll, CRYPT32.dll, MSASN1.dll
ashMaiSv.exe 1288 ntdll.dll, kernel32.dll, WSOCK32.dll,
WS2_32.dll, msvcrt.dll, WS2HELP.dll,
ADVAPI32.dll, RPCRT4.dll, ashUInt.dll,
ashBase.dll, VERSION.dll, USER32.dll,
GDI32.dll, ole32.dll, OLEAUT32.dll,
MSVCP71.dll, MSVCR71.dll, aswCmnOS.dll,
aswCmnB.dll, aswCmnS.dll, COMCTL32.dll,
XT1922.dll, MFC71.DLL, SHLWAPI.dll,
SHELL32.dll, Aavm4h.dll, AavmRpch.dll,
aswAux.dll, xerces.dll, aswEngin.dll,
aswScan.dll, ashTask.dll, AhResMai.dll,
comctl32.dll, appHelp.dll, CLBCATQ.DLL,
COMRes.dll, SETUPAPI.dll, Base.dll,
mswsock.dll, DNSAPI.dll, winrnr.dll,
WLDAP32.dll, rasadhlp.dll, RICHED20.DLL,
Lang.dll, langmai.dll, PSAPI.dll,
wshtcpip.dll
ar500enu.exe 3196 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
COMCTL32.dll, SHELL32.dll, msvcrt.dll,
SHLWAPI.dll, LZ32.dll, comctl32.dll,
RICHED32.DLL, RICHED20.dll, Apphelp.dll,
VERSION.dll
Setup.exe 3320 ntdll.dll, kernel32.dll, VERSION.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
WINMM.dll, ole32.dll, MSACM32.dll,
msvcrt.dll, SHELL32.dll, SHLWAPI.dll,
USERENV.dll, UxTheme.dll, SYNCOR11.DLL,
comctl32.dll, comctl32.dll
ar500enu.exe 3868 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
COMCTL32.dll, SHELL32.dll, msvcrt.dll,
SHLWAPI.dll, LZ32.dll, comctl32.dll,
RICHED32.DLL, RICHED20.dll, Apphelp.dll,
VERSION.dll
Setup.exe 3904 ntdll.dll, kernel32.dll, VERSION.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
WINMM.dll, ole32.dll, MSACM32.dll,
msvcrt.dll, SHELL32.dll, SHLWAPI.dll,
USERENV.dll, UxTheme.dll, SYNCOR11.DLL,
comctl32.dll, comctl32.dll
ar500enu.exe 2696 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
COMCTL32.dll, SHELL32.dll, msvcrt.dll,
SHLWAPI.dll, LZ32.dll, comctl32.dll,
RICHED32.DLL, RICHED20.dll, Apphelp.dll,
VERSION.dll
Setup.exe 2572 ntdll.dll, kernel32.dll, VERSION.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
WINMM.dll, ole32.dll, MSACM32.dll,
msvcrt.dll, SHELL32.dll, SHLWAPI.dll,
USERENV.dll, UxTheme.dll, SYNCOR11.DLL,
comctl32.dll, comctl32.dll
ar500enu.exe 2184 ntdll.dll, kernel32.dll, USER32.dll,
GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
COMCTL32.dll, SHELL32.dll, msvcrt.dll,
SHLWAPI.dll, LZ32.dll, comctl32.dll,
RICHED32.DLL, RICHED20.dll, Apphelp.dll,
VERSION.dll
Setup.exe 2884 ntdll.dll, kernel32.dll, VERSION.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
WINMM.dll, ole32.dll, MSACM32.dll,
msvcrt.dll, SHELL32.dll, SHLWAPI.dll,
USERENV.dll, UxTheme.dll, SYNCOR11.DLL,
comctl32.dll, comctl32.dll
Setup.exe 2096 ntdll.dll, kernel32.dll, VERSION.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll, ShimEng.dll, AcGenral.DLL,
WINMM.dll, ole32.dll, MSACM32.dll,
msvcrt.dll, SHELL32.dll, SHLWAPI.dll,
USERENV.dll, UxTheme.dll, SYNCOR11.DLL,
comctl32.dll, comctl32.dll
wmiprvse.exe 2256 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, FastProx.dll, wbemcomn.dll,
OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
CLBCATQ.DLL, COMRes.dll, VERSION.dll,
wbemprox.dll, wbemsvc.dll, wmiutils.dll,
cimwin32.dll, framedyn.dll, Secur32.dll,
SETUPAPI.dll, WTSAPI32.dll, WINSTA.dll,
CFGMGR32.DLL, WMI.DLL, NETAPI32.DLL
cmd.exe 3252 ntdll.dll, kernel32.dll, msvcrt.dll,
USER32.dll, GDI32.dll, ADVAPI32.dll,
RPCRT4.dll
tasklist.exe 3232 ntdll.dll, kernel32.dll, msvcrt.dll,
ADVAPI32.dll, RPCRT4.dll, USER32.dll,
GDI32.dll, MPR.dll, ole32.dll, OLEAUT32.dll,
Secur32.dll, WS2_32.dll, WS2HELP.dll,
framedyn.dll, NETAPI32.dll, DBGHELP.dll,
VERSION.dll, CLBCATQ.DLL, COMRes.dll,
wbemprox.dll, wbemcomn.dll, Winsta.dll,
wbemsvc.dll, fastprox.dll

––––––––––––––––––––––––––––––––––––––––––––––––

Zrobiłem jak mówiłeś, i co dalej???Mam podmienić jakiś plik??? Zauwaźyłem, źe mam problem z AcrobatReader 5.0,nie otwierają mi się pliki z rozszerzeniem ".pdf".A winde dalej pomagam zamykac ręcznie...

---

Takie coś wtawiaj pomiędzy znaczniki code
SLAY3R

Wyglada na to ze jakas biblioteczka nie chce sie uwalnic z pamieci i powoduje zatrzymywanie rundll32 podczas zamykania systemu
Podczas tego zamykania wpisz sobie w uruchom

cmd /c tasklist /m > Pulpit\rundll32.txt

Pozniej na pulpicie bedziesz mial plik tekstowy rundll32 i jego tresc pokaz na forum
Poza tym załacz moze log z Hijack This bo troche syfu tez powoduje takie oto objawy
Mozna tez sprobowac podmiec plik w konsoli

expand X:\i386\rundll32.ex_ c:\windows\rundll32.exe