Win32delfkil should have removed it. Please post a Hijack This log and a Panda log. Sometimes time/reboots allow the baddies to rebuild themselves if all the files are not removed, need those logs to help make sure you are clean.

0

By the way: I have a TINY problem: something didn't perfectly work in my computer and something crashed in such a way, that I can't run my PC in the normal mode. It simply reboots. However, it doesn't in safe mode. I think it could be the RAM because I already had something like that and I found out that my RAm was totally destroyed... Theory is when everyone knows everything, but nothing works. Practice is when everything works, but no one knows why. In my country they join Theory with Practice: Nothing works and noone knows why<br

0

( Just a little comment: my computer is rebooting all the time ) Theory is when everyone knows everything, but nothing works. Practice is when everything works, but no one knows why. In my country they join Theory with Practice: Nothing works and noone knows why<br

0

Try this, you may be able to put it on a cd and run it. Go to the link and download the shell open command reset tool and run it http://www.symantec.com/security_response/writeup.jsp?docid=2004-050614-0532-99

0

Logfile of HijackThis v1.99.1 Scan saved at 09:45:46, on 2006-07-15 Platform: Windows XP Dodatek SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\explorer.exe C:\WINDOWS\system32\dwwin.exe C:\Documents and Settings\Krzysztof\Pulpit\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe" F3 - REG:win.ini: run=C:\WINDOWS\inet20091\services.exe O2 - BHO: (no name) - {062492AF-392E-479D-BF52-A7A4BCA00307} - C:\WINDOWS\system32\compstuic.dll O2 - BHO: HBO Class - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - C:\WINDOWS\inet20091\3.03.00.dll (file missing) O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - blank (file missing) O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\pl-pl\msntb.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - blank (file missing) O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.exe O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [CXMon] "c:\hewlett-packard\Photo Imaging\Hpi_Monitor.exe" O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb04.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [wpkontakt] C:\komunikacja\Wirtualna Polska\wpkontakt\wpkontakt.exe -autostart O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [602PC SUITE PDF Saver] "C:\Program Files\Common Files\soft602\pdfSaver.exe" O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\pl-pl\msnappau.exe" O4 - HKLM\..\Run: [˙_zskvldfrg]etsyofb[z40inkrwksz_] c:\windows\system32\_zskwrkni04z[bfoyste]grfdlv.exe O4 - HKLM\..\Run: [˙_zskNJCE_MQO] C:\WINDOWS\system32\_zskdmwin`NQB`KN\OQM_ECJN.exe O4 - HKLM\..\Run: [SysTray] c:\Program Files\vopixp.exe O4 - HKLM\..\RunServices: [˙_zskvldfrg]etsyofb[z40inkrwksz_] c:\windows\system32\_zskwrkni04z[bfoyste]grfdlv.exe O4 - HKLM\..\RunServices: [˙_zskNJCE_MQO] C:\WINDOWS\system32\_zskdmwin`NQB`KN\OQM_ECJN.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Komunikacja\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.exe" /background O4 - HKCU\..\Run: [pdfSaver3] "c:\Program Files\PDF\pdfSaver\pdfSaver3.exe" O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q O4 - HKCU\..\Run: [Skype] "C:\Komunikacja\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe O4 - HKCU\..\Run: [˙_zskvldfrg]etsyofb[z40inkrwksz_] c:\windows\system32\_zskwrkni04z[bfoyste]grfdlv.exe O4 - HKCU\..\Run: [shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe" O4 - HKCU\..\Run: [˙_zskNJCE_MQO] C:\WINDOWS\system32\_zskdmwin`NQB`KN\OQM_ECJN.exe O4 - Startup: Rozmowa.lnk = C:\Komunikacja\System syntezy mowy\rozmowy.exe O4 - Global Startup: Corel MEDIA FOLDERS INDEXER 8.LNK = C:\Grafika\Corel\Graphics8\programs\MFIndexer.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.exe O8 - Extra context menu item: E&ksport do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra 'Tools' menuitem: Fill Forms &] - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra 'Tools' menuitem: Save Forms &[ - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra 'Tools' menuitem: RF Toolbar &2 - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {3D8700FB-86A4-4CB4-B738-6F0FC016AC7D} (MainControl Class) - http://arcaonline.arcabit.com/ArcaOnline.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O16 - DPF: {E7544C6C-CFD6-43EA-B4E9-360CEE20BDF7} (MainControl Class) - http://mks.com.pl/skaner/SkanerOnline.cab O18 - Protocol: bw+0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {D2487081-2BBF-426F-8599-C585FB38C11C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: wpmsg - {2E0AC5A0-3597-11D6-B3ED-0001021DC1C3} - C:\komunikacja\Wirtualna Polska\wpkontakt\url_wpmsg.dll O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\g924656.dll O20 - Winlogon Notify: dbf42reg - C:\Documents and Settings\All Users\Dokumenty\Settings\dbf42.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll O21 - SSODL: DCOM Server 2236 - {2C1CD3D7-86AC-4068-93BC-A02304BB2236} - C:\WINDOWS\system32\2236_27.dll O21 - SSODL: ERQDykG - {88B3B301-2219-19AB-B664-D8D28DEFDC52} - C:\WINDOWS\system32\zdmi.dll (file missing) O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe Incident Status Location Adware:Adware/SpySheriff Not disinfected c:\winstall.exe Adware:Adware/Miamore Not disinfected C:\WINDOWS\g924656.dll Adware:adware/wupd Not disinfected c:\windows\system32\ide21201.vxd Adware:adware/emediacodec Not disinfected c:\windows\system32\ncompat.tlb Spyware:spyware/smitfraud Not disinfected c:\windows\system32\oleext32.dll Spyware:spyware/marketscore Not disinfected c:\windows\system32\osconfig.dll Adware:adware/securityerror Not disinfected c:\windows\system32\ot.ico Adware:adware/adsmart Not disinfected c:\windows\system32\vx.tll Adware:adware/secure32 Not disinfected c:\program files\secure32.html Potentially unwanted tool:application/spyfalcon Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\microsoft\internet explorer\quick launch\SpyFalcon 2.0.lnk Adware:adware/elitebar Not disinfected c:\protas.exe Adware:adware/spysheriff Not disinfected c:\winstall.exe Adware:adware/cws.searchmeup Not disinfected c:\windows\flag.bla Potentially unwanted tool:application/winantivirus2006 Not disinfected c:\program files\common files\WinAntiVirus Pro 2006 Spyware:spyware/aveo-attune Not disinfected c:\program files\Aveo Adware:adware/cws.yexe Not disinfected c:\windows\inet20091 Adware:adware/miamore Not disinfected Windows Registry Adware:adware/alexa-toolbar Not disinfected Windows Registry Adware:adware/savenow Not disinfected Windows Registry Potentially unwanted tool:application/spyaxe Not disinfected hkey_classes_root\clsid\{A2D9D3F0-8C2A-2A1D-A376-1BECFB10AB72} Adware:adware/dyfuca Not disinfected Windows Registry Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@888[1].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@ads.clickad.com[2].txt Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@atwola[1].txt Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@atwola[2].txt Spyware:Cookie/Kazaa Networks Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@desktop.kazaa[1].txt Spyware:Cookie/Rn11 Not disinfected C:\Documents and Settings\Kopia dysku D\Documents and Settings\Mateusz\Cookies\mateusz@rn11[1].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[.doubleclick.net/] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[ad.yieldmanager.com/] Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[.tribalfusion.com/] Spyware:Cookie/WUpd Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[.revenue.net/] Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[searchportal.information.com/] Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[.atdmt.com/] Spyware:Cookie/QuestionMarket Not disinfected C:\Documents and Settings\Krzysztof\Dane aplikacji\Mozilla\Firefox\Profiles\qh4bo0kl.default\cookies.txt[.questionmarket.com/] Adware:Adware/SpySheriff Not disinfected C:\Documents and Settings\Krzysztof\Ustawienia lokalne\Temp\gmovlfvz.exe Adware:Adware/CWS.Yexe Not disinfected C:\Documents and Settings\Krzysztof\Ustawienia lokalne\Temp\linhbbnl.exe Spyware:Spyware/Smitfraud Not disinfected C:\Documents and Settings\Krzysztof\Ustawienia lokalne\Temp\SALanguage.ini Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.tribalfusion.com/] Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.doubleclick.net/] Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.perf.overture.com/] Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.advertising.com/] Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[ad.yieldmanager.com/] Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.tradedoubler.com/] Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.fastclick.net/] Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.casalemedia.com/] Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.burstnet.com/] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[server.iad.liveperson.net/hc/79635536] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[server.iad.liveperson.net/] Spyware:Cookie/Server.iad.Liveperson Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[server.iad.liveperson.net/hc/79635536] Spyware:Cookie/Atwola Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.atwola.com/] Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.realmedia.com/] Spyware:Cookie/MediaTickets Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.kinghost.com/] Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.adultfriendfinder.com/] Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.go.com/] Spyware:Cookie/Ccbill Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.ccbill.com/] Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[searchportal.information.com/] Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.adopt.hbmediapro.com/] Spyware:Cookie/Maxserving Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.maxserving.com/] Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Mateusz\Dane aplikacji\Mozilla\Firefox\Profiles\vbfnys2c.default\cookies.txt[.adserver.o2.pl/] Spyware:Spyware/Smitfraud Not disinfected C:\Documents and Settings\Mateusz\Ustawienia lokalne\Temp\SALanguage.ini Potentially unwanted tool:Application/KillApp.A Not disinfected C:\fcqe.exe Potentially unwanted tool:Application/KillApp.A Not disinfected C:\fjkt.exe Adware:Adware/SpySheriff Not disinfected C:\lecgrkdr.exe Potentially unwanted tool:Application/Processor Not disinfected C:\Pajęczyna\Antywirusy (udolne i nieudolne)\win32delfkil\Process.exe Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\compwiz.exe Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\Companion Wizard\WapCHK.dll Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\Common Files\WinAntiVirus Pro 2006\WapCHK.dll Adware:Adware/IST.ISTBar Not disinfected C:\Program Files\StripSaver\Windows.dll Adware:Adware/Secure32 Not disinfected C:\Program Files\vopixp.exe Potentially unwanted tool:Application/Winantivirus2006 Not disinfected C:\Program Files\WinAntiVirus Pro 2006\winpgi.dll Adware:Adware/SpySheriff Not disinfected C:\qqra.exe Spyware:Cookie/Apmebf Not disinfected C:\RECYCLER\NPROTECT\00311002.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311018.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311043.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311044.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311059.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311060.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311068.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311069.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311077.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311078.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311084.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311085.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311096.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311097.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311105.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311106.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311118.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311119.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311120.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311121.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311128.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311129.TXT Spyware:Cookie/Advnt Not disinfected C:\RECYCLER\NPROTECT\00311136.TXT Spyware:Cookie/Apmebf Not disinfected C:\RECYCLER\NPROTECT\00311143.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311151.TXT Spyware:Cookie/Belnk Not disinfected C:\RECYCLER\NPROTECT\00311155.TXT Virus:Trj/Jupillites.J Disinfected C:\uchtio.exe Adware:Adware/CWS Not disinfected C:\WINDOWS\cpblpbc17.log Potentially unwanted tool:Application/PsKill.J Not disinfected C:\WINDOWS\inet20091\killer.exe Adware:Adware/SpySheriff Not disinfected C:\WINDOWS\OEM.exe Adware:Adware/CWS Not disinfected C:\WINDOWS\system32\compstuic.dll Virus:Trj/Qhost.gen Renamed C:\WINDOWS\system32\drivers\etc\Hosts Adware:Adware/SpySheriff Not disinfected C:\wydy.exe Potentially unwanted tool:Application/KillApp.A Not disinfected C:\xrjfcay.exe Theory is when everyone knows everything, but nothing works. Practice is when everything works, but no one knows why. In my country they join Theory with Practice: Nothing works and noone knows why<br

0

Do you have a anti-virus progam installed? If not your never going to keep your computer clean unless you stay off the internet. I'm no expert in these logs but I can see you have alot of problems. To start you should go to kaspersky and dowload a trial version and scan your computer. Brian

0

Does look as though you are running Panda as your antivirus, if this is not correct let me know. Did the link in response #10 fix the reboot problem, or how did you fix it. Do you know what this is: C:\komunikacja\Wirtualna Polska Download killbox to your desktop from this link Killbox We will need it later in safe mode Please download "LQfix from the following link http://www.downloads.subratam.org/LQfix.zip and unzip it to your desktop. Reboot into safe mode, once in Safe Mode, please run LQfix.bat. When finished, reboot the computer. Reboot in to safe mode again. Run Hijack This and remove these items: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe" F3 - REG:win.ini: run=C:\WINDOWS\inet20091\services.exe O2 - BHO: (no name) - {062492AF-392E-479D-BF52-A7A4BCA00307} - C:\WINDOWS\system32\compstuic.dll O2 - BHO: HBO Class - {5321E378-FFAD-4999-8C62-03CA8155F0B3} - C:\WINDOWS\inet20091\3.03.00.dll (file missing) O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - blank (file missing) O4 - HKLM\..\Run: [wpkontakt] C:\komunikacja\Wirtualna Polska\wpkontakt\wpkontakt.exe -autostart O4 - HKCU\..\Run: [?_zskvldfrg]etsyofb[z40inkrwksz_] c:\windows\system32\_zskwrkni04z[bfoyste]grfdlv.exe O4 - HKCU\..\Run: [shell] "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe" O4 - HKCU\..\Run: [?_zskNJCE_MQO] C:\WINDOWS\system32\_zskdmwin`NQB`KN\OQM_ECJN.exe O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe O20 - Winlogon Notify: cfgmngr32 - C:\WINDOWS\g924656.dll O20 - Winlogon Notify: dbf42reg - C:\Documents and Settings\All Users\Dokumenty\Settings\dbf42.dll O21 - SSODL: DCOM Server 2236 - {2C1CD3D7-86AC-4068-93BC-A02304BB2236} - C:\WINDOWS\system32\2236_27.dll O21 - SSODL: ERQDykG - {88B3B301-2219-19AB-B664-D8D28DEFDC52} - C:\WINDOWS\system32\zdmi.dll (file missing) Exit Hijack This but remain in safe mode Run Killbox. Start Killbox place a tick next to [x]Delete on reboot "Press the All Files button" Copy this whole list into the windows clipboard, all the bolded file paths below. Copy the following list of files to clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy): c:\secure32.html C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00001.exe C:\WINDOWS\inet20091\services.exe C:\WINDOWS\system32\compstuic.dll C:\WINDOWS\inet20091\3.03.00.dll C:\komunikacja\Wirtualna Polska\wpkontakt\wpkontakt.exe c:\windows\system32\_zskwrkni04z[bfoyste]grfdlv.exe C:\WINDOWS\system32\_zskdmwin`NQB`KN\OQM_ECJN.exe C:\WINDOWS\g924656.dll C:\Documents and Settings\All Users\Dokumenty\Settings\dbf42.dll C:\WINDOWS\system32\2236_27.dll C:\WINDOWS\system32\zdmi.dll c:\winstall.exe c:\windows\system32\ide21201.vxd c:\windows\system32\ncompat.tlb c:\windows\system32\oleext32.dll c:\windows\system32\osconfig.dll c:\windows\system32\ot.ico c:\windows\system32\vx.tll c:\protas.exe c:\windows\flag.bla C:\fcqe.exe C:\wydy.exe C:\WINDOWS\cpblpbc17.log C:\uchtio.exe Next in Killbox go to File > Paste from clipboard "Click on the All Files button." Next click on the button that has the red circle with the white X in the middle. It will ask for confimation to delete the files on next reboot and ask you if you want to reboot now. Click Yes and let the computer reboot. If the computer does not reboot automatically just reboot it manually. Reboot into safe mode again, navigate to and delte these folders if found: C:\WINDOWS\inet20091 C:\komunikacja\Wirtualna Polska\wpkontakt Run Ewido from safe mode and let it delete all that it finds. Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. Post a new Hijack This log.

0