Szukałem tego pliku nie ma. Kaspersky tez go nie usuwał bo nie ma w logu. Także zaginął w akcji. Wszystko działa poprawnie. Dziękuję za pomoc i za zainteresowanie :). POZDRAWIAM

Masz jeszcze tu: [quote]S3 ACDYXIEQ;ACDYXIEQ;C:\DOCUME~1\Wojtek\USTAWI~1\Temp\ACDYXIEQ.exe [][/quote] cos co wygląda jak syf. Całe google nie zna tego pliku. Wytnij usługę poleceniami [quote]sc stop ACDYXIEQ sc delete ACDYXIEQ[/quote] i wywal plik C:\DOCUME~1\Wojtek\USTAWI~1\Temp\ACDYXIEQ.exe Temat zabieram do działu Bezpieczeństwo.

Zamieszczam jeszcze loga a z ComboFix. Troche zajety bylem dlatego dopiero teraz.Wszystko juz jest ok, trojana juz nie mam tak mi sie przynajmniej wydaje bo nic go nie wykrywa.Problem z otwieraniem partycji tez juz nie istnieje. Dziek wielkie WSZYSTKIM za pomoc. Pozdrawiam LIdI [color=red][b]WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !![/b][/color] . ((((((((((((((((((((((((( Files Created from 2008-01-15 to 2008-02-15 ))))))))))))))))))))))))))))))) . 2008-02-12 21:33 . 2008-02-12 21:36 94,208 --a------ C:\WINDOWS\ScUnin.exe 2008-02-12 21:33 . 2008-02-12 21:36 34,602 --a------ C:\WINDOWS\scunin.dat 2008-02-12 21:33 . 2008-02-12 21:36 967 --a------ C:\WINDOWS\ScUnin.pif 2008-02-12 21:32 . 2008-02-13 12:22 d-------- C:\Program Files\Starcraft 2008-02-12 15:16 . 2008-02-12 15:16 d-------- C:\Program Files\Hasbro 2008-02-12 11:02 . 2008-02-12 11:02 d-------- C:\Program Files\uTorrent 2008-02-12 11:01 . 2008-02-12 21:21 d-------- C:\Documents and Settings\Wojtek\Dane aplikacji\uTorrent 2008-02-12 02:55 . 2008-02-12 02:55 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-02-12 02:55 . 2008-02-12 02:55 1,409 --a------ C:\WINDOWS\QTFont.for 2008-02-11 19:09 . 2008-02-11 19:17 347 --a------ C:\WINDOWS\CoDUO.INI 2008-02-11 19:02 . 2008-02-13 22:30 d-------- C:\Program Files\Call of Duty 2008-02-11 19:01 . 2008-02-11 19:06 745 --a------ C:\WINDOWS\CoD.INI 2008-01-30 14:39 . 2008-01-30 14:39 d-------- C:\Program Files\Trend Micro 2008-01-29 23:51 . 2008-01-29 23:51 d-------- C:\Program Files\3B Software 2008-01-29 15:07 . 2008-02-15 00:20 d-------- C:\Program Files\Kaspersky Lab 2008-01-29 15:07 . 2008-02-15 00:25 7,736,096 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat 2008-01-29 15:07 . 2008-02-14 03:04 123,524 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx 2008-01-29 15:07 . 2008-02-15 00:24 77,856 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat 2008-01-29 15:07 . 2008-02-14 03:04 13,208 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx 2008-01-29 00:29 . 2008-01-29 01:26 d-a------ C:\Documents and Settings\All Users\Dane aplikacji\TEMP 2008-01-29 00:28 . 2008-01-29 00:32 d-------- C:\Program Files\Spyware Doctor 2008-01-29 00:28 . 2008-01-29 00:28 d-------- C:\Documents and Settings\Wojtek\Dane aplikacji\PC Tools 2008-01-29 00:28 . 2007-12-10 14:53 81,288 --a------ C:\WINDOWS\system32\drivers\iksyssec.sys 2008-01-29 00:28 . 2007-12-10 14:53 66,952 --a------ C:\WINDOWS\system32\drivers\iksysflt.sys 2008-01-29 00:28 . 2007-12-10 14:53 41,864 --a------ C:\WINDOWS\system32\drivers\ikfilesec.sys 2008-01-29 00:28 . 2007-12-10 14:53 29,576 --a------ C:\WINDOWS\system32\drivers\kcom.sys 2008-01-28 20:46 . 2008-01-28 20:46 d-------- C:\WINDOWS\system32\Kaspersky Lab 2008-01-28 20:46 . 2008-01-29 15:03 d-------- C:\Documents and Settings\All Users\Dane aplikacji\Kaspersky Lab 2008-01-28 18:34 . 2008-01-28 18:45 d-------- C:\Program Files\NoAdware5.0 2008-01-25 12:34 . 2004-02-23 01:05 356,431 --a------ C:\WINDOWS\system32\GDS32.DLL 2008-01-25 12:32 . 2008-01-25 14:45 d-------- C:\KS 2008-01-21 13:06 . 2008-01-21 13:06 d-------- C:\WINDOWS\CSI Kryminalne Zagadki Las Vegas - Mroczne Motywy . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-02-14 23:24 --------- d-----w C:\Documents and Settings\Wojtek\Dane aplikacji\Skype 2008-02-13 20:53 --------- d-----w C:\Program Files\Google 2008-02-12 01:44 --------- d-----w C:\Program Files\eMule 2008-02-11 18:17 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-02-08 13:10 11,270 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys 2008-01-28 20:35 --------- d-----w C:\Program Files\Norton AntiVirus 2008-01-28 20:35 --------- d-----w C:\Program Files\Common Files\Symantec Shared 2008-01-28 20:33 --------- d-----w C:\Program Files\Symantec 2008-01-28 20:33 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Symantec 2008-01-26 17:21 --------- d-----w C:\Documents and Settings\Wojtek\Dane aplikacji\BearShare 2008-01-21 12:06 --------- d-----w C:\Program Files\Ubisoft 2008-01-20 18:52 --------- d-----w C:\Program Files\TVAnts 2008-01-20 18:07 --------- d-----w C:\Program Files\SopCast 2008-01-13 13:12 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\SimCity Societies 2008-01-13 13:00 --------- d-----w C:\Program Files\Electronic Arts 2008-01-10 00:23 52,338 ----a-w C:\WINDOWS\system32\RadLightOggUninstall.exe 2008-01-04 14:33 97,280 ----a-w C:\WINDOWS\system32\ff_realaac.dll 2008-01-04 14:33 81,408 ----a-w C:\WINDOWS\system32\ff_tremor.dll 2008-01-04 14:33 662,016 ----a-w C:\WINDOWS\system32\xvidcore.dll 2008-01-04 14:33 528,896 ----a-w C:\WINDOWS\system32\ff_x264.dll 2008-01-04 14:33 406,016 ----a-w C:\WINDOWS\system32\libmplayer.dll 2008-01-04 14:33 40,960 ----a-w C:\WINDOWS\system32\ff_liba52.dll 2008-01-04 14:33 38,400 ----a-w C:\WINDOWS\system32\ff_unrar.dll 2008-01-04 14:33 3,109,888 ----a-w C:\WINDOWS\system32\libavcodec.dll 2008-01-04 14:33 26,624 ----a-w C:\WINDOWS\system32\ff_wmv9.dll 2008-01-04 14:33 245,760 ----a-w C:\WINDOWS\system32\ff_libfaad2.dll 2008-01-04 14:33 155,648 ----a-w C:\WINDOWS\system32\ff_libdts.dll 2008-01-04 14:33 143,360 ----a-w C:\WINDOWS\system32\ff_theora.dll 2008-01-04 14:33 122,880 ----a-w C:\WINDOWS\system32\ff_samplerate.dll 2008-01-04 14:33 118,784 ----a-w C:\WINDOWS\system32\ff_libmad.dll 2008-01-04 14:33 114,688 ----a-w C:\WINDOWS\system32\libmpeg2_ff.dll 2008-01-04 14:32 7,680 ----a-w C:\WINDOWS\system32\ff_vfw.dll 2007-12-19 13:12 --------- d-----w C:\Documents and Settings\All Users\Dane aplikacji\Ubisoft 2007-12-18 09:51 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys 2007-12-18 00:17 --------- d-----w C:\Program Files\TweakNow RegCleaner Pro 2007-12-17 18:26 --------- d-----w C:\Program Files\Techland 2007-12-17 11:36 --------- d-----w C:\Program Files\RegVac 2007-12-17 11:32 --------- d-----w C:\Program Files\RegCleaner 2007-12-17 11:12 --------- d-----w C:\Documents and Settings\Wojtek\Dane aplikacji\RegClean 2007-12-09 14:54 26,600 ----a-w C:\Documents and Settings\Wojtek\Dane aplikacji\GDIPFONTCACHEV1.DAT 2007-12-07 01:08 662,016 ----a-w C:\WINDOWS\system32\wininet.dll 2007-12-04 18:42 550,912 ----a-w C:\WINDOWS\system32\oleaut32.dll 2007-11-26 14:22 103,736 ----a-w C:\WINDOWS\system32\PnkBstrB.exe 2007-11-19 20:33 66,872 ----a-w C:\WINDOWS\system32\PnkBstrA.exe . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" [2007-03-12 12:49 153136] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2006-12-11 20:41 25343016] "PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-04-11 16:52 1409024] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-12-09 18:34 2111176] "DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [2007-08-16 12:24 167368] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 18:42 32768] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-12-10 02:06 7311360] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-12-10 03:06 86016] "PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.exe" [2006-04-26 07:29 237568] "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-02-16 09:54 282624] "NeroFilterCheck"="C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-09 17:53 153136] "Symantec PIF AlertEng"="C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2007-03-12 10:22 517768] "Pilot"="C:\KS\KS-EWD\PILOT.EXE" [2008-02-01 14:03 5554688] "WheelMouse"="C:\Program Files\A4Tech\Mouse\Amoumain.exe" [2006-02-17 10:14 163840] "AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" [2006-11-08 18:28 155751] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-04 08:44 15360] C:\Documents and Settings\All Users\Menu Start\Programy\AutostartMicrosoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 10:01:04 83360] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2007-02-16 09:54 282624 C:\Program Files\QuickTime\qttask.exe R0 sfdrv01a;StarForce Protection Environment Driver (version 1.x.a);C:\WINDOWS\system32\drivers\sfdrv01a.sys [2006-07-05 13:46] R1 sdpiosys;sdpiosys;C:\WINDOWS\system32\drivers\sdpiosys.sys [2004-11-30 12:10] R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe [2004-02-23 01:05] R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe [2004-02-23 01:05] S3 ACDYXIEQ;ACDYXIEQ;C:\DOCUME~1\Wojtek\USTAWI~1\Temp\ACDYXIEQ.exe [] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{9ce5b6be-83ab-11dc-8cdd-0080481cf36d}] \Shell\open\Command - C:\WINDOWS\explorer.exe . ************************************************************************** catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-02-15 00:25:02 Windows 5.1.2600 Dodatek Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0

A myślicie że Combofix od czego jest on usuwa pliki autorun i wiele innych plików związanych z tą infekcją przenoszoną przez pendrivy usuwa również [quote]Bardzo przydatne narzędzie do usuwania multiinfekcji takiej jak Look2Me, SurfSideKick, Qoologic, Vundo, DollarRevenue, Alcan, E-Give, PurityScan oraz również Rootkita pe386[/quote]

Pobierz [b]Combofix [/b][url=http://www.searchengines.pl/index.php?showtopic=86306&st=0&p=395642&#entry395642]instalka z opisem[/url] przeskanuj nim system [b]daj log na forum[/b]

Stronka pomogła dzieki!!!! Kaspersky twierdzi ze wywalil mi trojana Trojan-PSW.Win32.OnLineGames.pqm. Był na każdej partycji i niby zrobił to juz wczesniej ale jak zaczalem usuwac autorun.inf znowu go wykrył. Szukałem jakiejs szczepionki czy programu ktory go wywala i niby znalalem (spyDoctor) ale nie wiem czy go wywalil do konca. zamieszczam loga z hijackthis. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 14:39:56, on 2008-01-30 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\KS\KS-EWD\PILOT.EXE C:\Program Files\A4Tech\Mouse\Amoumain.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\DAEMON Tools\daemon.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Skype\Plugin Manager\SkypePM.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com.pl R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = \blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 CE\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll" O4 - HKLM\..\Run: [Pilot] C:\KS\KS-EWD\PILOT.EXE O4 - HKLM\..\Run: [WheelMouse] C:\Program Files\A4Tech\Mouse\Amoumain.exe O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA LOKALNA') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'USŁUGA SIECIOWA') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Startup: Scheduler.lnk = C:\Program Files\3B Software\Common\Scheduler\wcomschd.exe O4 - Startup: Skrót do utorrent.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O14 - IERESET.INF: START_PAGE_URL=www.google.com.pl O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.pl/resources/virusscanner/kavwebscan_unicode.cab O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab O16 - DPF: {92ECE6FA-AC2E-4042-BFAE-0C8608E52A43} (SignActivX Control) - https://www.bph.pl/pi/components/SignActivX.cab O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://i.grab.com/media/9bf31c/games/files/928/popcaploader_v6.cab O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: ACDYXIEQ - Sysinternals - www.sysinternals.com - C:\DOCUME~1\Wojtek\USTAWI~1\Temp\ACDYXIEQ.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - The Firebird Project - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe -- End of file - 8357 bytes jak ktoś będzie miał czas to bede wdzieczny za rzucenie okiem

Zerknij: http://www.troublefixers.com/not-able-to-open-drives-on-hard-disk-by-double-click/ Streszczenie: skasować autorun.inf Poza tym poszukałabym na dysku wirusów i innego świństwa. Może HijackThis i inne narzędzia, które znajdziesz w dziale bezpieczeństwo w prawie każdym wątku mogą być pomocne. Podrzucisz logi, a ktoś na pewno pomoże.