Now I have downloaded vundoFix v.4.2.22 from
http://www.majorgeeks.com/VundoFix_d4954.html and then ran it .
No infected files were found was the message of
Scan for Vundo.
After this ,I executed HiJackThis again and fixed all own checked options .Then I was forced
to reboot my pc .It was amazing !
temp2.exe windows error wasn`t at startup of windows.
Then I ran Killbox as yo said ,it was funny that with each of C:\WINDOWS\system32\temp1.exe and
C:\WINDOWS\svchost.exe path paste in Killbox result was
temp1.exe in killbox window in
blue color
statement. "
PendingFileRenameOperations prompt" wasn`t in messages .Then I reboot my computer
again through killbox command .Again at startup there was no temp2.exe error .
Now HijackThis log wes this:
Logfile of HijackThis v1.99.1
Scan saved at 10:52:54 ب.ظ, on 2007/03/16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Hijackthis\HijackThis.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
But my sadly experience

: still
AutoPlay statement was constant on my right click action
on each of my hard drives (Local Disks),Please have a view on this screenshot :
http://www.savefile.com/files/557983And when I had a
double click on drive C ,
againtemp2.exe error was on my screen .
I ran HijackThis again and now log file was this:
Logfile of HijackThis v1.99.1
Scan saved at 11:16:22 ب.ظ, on 2007/03/16
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\EmEditor\EMEDITOR.EXE
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Babylon\Babylon-Pro\Babylon.exe
C:\Program Files\ACD Systems\ACDSee\ACDSee.exe
C:\WINDOWS\system32\temp1.exe
C:\Program Files\Hijackthis\HijackThis.exe
F3 - REG:win.ini: load=C:\WINDOWS\svchost.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
Can I do more?