Pazi ovako evo kako ce mo da nadjemo gresku ako je do malware ili te neki program baguje...
Hijack this
Skini ovaj programcic,ako je zipovan,unzip ga na desku u posebnom folderu,folder nazovi kako hoces,ako nije unzip samo ga iskopiraj u folder na desku...

Udji u program i klikni na ono prvo odozgore pise ti Do a system scan and geta a logfile....
Brzo ce ti izbaciti notepad u kome je ispisan log,to sot je ispisano izbaci ovde na forumu da analiziramo....

Adobe Reader 9 lite
ESET Smart Security
K-lite Mega Codec Pack 4.2.5
KMPlayer
.NET Framework 3.5 SP1
Firefox 3.5.1
Nero 9 Lite
PowerDVD 8
Quick time
Office Profesional 2003
Winamp 5.54
Windows Media Player 11
Win RAR

Nista specijalno...standardni programi...

Citao sam na Google, da postoje neki programi koji sami iskljucuju AutoRun, ali ja nemam nista od njih...osim ovih standardnih...

ESET Smart Security

Removable Media Security — Threats can enter your PC from removable media such as USB thumb drives. For self-running media, ESET Smart Security scans autorun.inf and associated files on mount, in addition to scanning any file on any removable device when it is accessed, or during a full-scan of the media. Power users can adjust ESET Smart Security to perform additional levels of scanning on removable media.

System Tools — ESET SysInspector and ESET SysRescue simplify diagnosis and cleaning of infected systems by allowing deep scans of system processes to find hidden threats, and creating bootable rescue CD/DVD or USB drives to help you repair an infected computer.

Eto programa koji ti mozda zadaje problem,ipak odradi ovo sa hijack i ti i ovaj sto se pre tebe zalio....
uostalom ovo je jedan od NOD32 platformi,a nod zna da zada glavobolje....

Evo...ovo je ispalo:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:38:00 PM, on 8/12/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=76340&PartnerID=103&LegitCheckError=13
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AutoExNT - Unknown owner - C:\WINDOWS\system32\AutoExNT.Exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe

--
End of file - 3712 bytes


--------------------------------------------------------
Najmanji je problem zameniti antivirus...

probao sam i ovo ali oped nista...

Dok neko iskusniji ne pregleda HJT log, skini ovo iz attachmenta i uradi sve što ovdje piše.

EDIT: I ti dragom123 postavi listu svih programa koje imaš instalirane.

Ja sam ovo davno odradio...
Naravno, nije bilo nikakvog efekta...

cini se da u logu nema malwarea...kad smo tu...'ajmo na dodatnu analizu da proverimo jos nesto...

Skini DDS sa ovog linka:
http://download.bleepingcomputer.com/sUBs/dds.scr

Pokreni ga i sacekaj par minuta da program zavrsi skeniranje. Kad zavrsi napravice dva loga.
Oba loga ( Attach.txt i DDS.txt ) prikaci uz poruku.

ACDSee Pro 2
Adobe Flash Player 10 activex
Adobe Flash Player 10 plugin
Adobe Reader 8
Autoplay Repair
Avira antivir personal
Bsplayer
Canon camera access library
Canon g.726 wmp –decoder
Explorer xp
Google earth
k-lite codec pack 4.3.1
Logitech desktop messenger
Logitech quickcam
Mapinfo professional 9.5
Media key uninstaller
Micro dvd player
Mozilla firefox 3.5.2
Nero 7 ultra edition
Nokia connectivity cable driver
Office professional edition 2003
Nokia pc suite
Office keyboard driver
Power dvd
Quick time
Real alternative 1.51
Realtek high definition audio driver
Skype 4.0
Tuneup utilities 2007
Winamp
Windows media player 11
Your uninstaller

odradite ovo sa DDS programom..em ce pokazati listu svih instaliranih programa ili fixeva na racunaru,
em ce pokazati listu drajvera i novokreiranih fajlova (sve sto HJT nevidi) ...
probaj..nista te nekosta...a mozda nam ukaze na nesto nesto