Explorer da i numeri

[SENZA DSL DA UN MESE]

Non riesco con explorer ad avere la pagina predefinita perchè me la reimposta su www.wicrosoft.it e i cookie mi vengono cancellati ogni minuto.
Scansioni con antivirus e adaware spybot ecc ecc non sono servite oltre a cancellare il ripristino e a rifare le scansioni in attività provvisoria.
Con firefox invece va tutto bene ma vorrei avere anche explorer, idee?

[nispo]

Non riesco con explorer ad avere la pagina predefinita perchè me la reimposta su www.wicrosoft.it e i cookie mi vengono cancellati ogni minuto.
Scansioni con antivirus e adaware spybot ecc ecc non sono servite oltre a cancellare il ripristino e a rifare le scansioni in attività provvisoria.
Con firefox invece va tutto bene ma vorrei avere anche explorer, idee?

che versione è?? la 6 o la 7??

[Mirko1986]

che versione è?? la 6 o la 7??
E poi serve un log di hijackthis :)

[SENZA DSL DA UN MESE]

La 7 che poi ho disinstallato e poi reinstallato e nuovamente disinstallato.
Anche la visione dei caratteri mi è cambiata:(

[Bugs Bunny]

E poi serve un log di hijackthis :)

sottolineo

[SENZA DSL DA UN MESE]

sottolineo

Logfile of HijackThis v1.99.1
Scan saved at 20.02.26, on 14/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O1 - Hosts: 108.112.42.206 ad.doubleclick.net
O1 - Hosts: 184.169.44.29 upgrade.bitdefender.com
O1 - Hosts: 106.62.59.13 report.bitdefender.com
O1 - Hosts: 178.95.95.213 ad.fastclick.net
O1 - Hosts: 107.116.117.138 ads.fastclick.net
O1 - Hosts: 115.27.183.221 atdmt.com
O1 - Hosts: 108.15.197.227 awaps.net
O1 - Hosts: 180.66.164.240 banner.fastclick.net
O1 - Hosts: 112.56.109.230 banners.fastclick.net
O1 - Hosts: 180.140.140.115 click.atdmt.com
O1 - Hosts: 104.148.31.185 clicks.atdmt.com
O1 - Hosts: 111.57.62.146 engine.awaps.net
O1 - Hosts: 100.178.73.135 fastclick.net
O1 - Hosts: 182.38.71.88 ftp.avp.ch
O1 - Hosts: 106.65.181.226 ftp.kasperskylab.ru
O1 - Hosts: 115.99.75.57 updates5.kaspersky-labs.com
O1 - Hosts: 179.223.125.67 www.viruslist.ru
O1 - Hosts: 108.51.94.92 awaps.net
O1 - Hosts: 102.35.134.158 fastclick.net
O1 - Hosts: 113.214.19.103 kaspersky.ru
O1 - Hosts: 102.158.3.18 akamai.net
O1 - Hosts: 179.147.199.183 www.antivir.de
O1 - Hosts: 105.108.119.104 antivir.de
O1 - Hosts: 181.87.27.164 drweb.com
O1 - Hosts: 110.60.112.152 www.drweb.com
O1 - Hosts: 173.72.89.247 drweb.ru
O1 - Hosts: 111.44.59.160 www.ravantivirus.com
O1 - Hosts: 177.51.6.174 ravantivirus.com
O1 - Hosts: 105.20.84.201 bitdefender.com
O1 - Hosts: 184.57.115.18 www.bitdefender.com
O1 - Hosts: 111.9.106.84 www.clamav.net
O1 - Hosts: 179.134.219.18 clamav.net
O1 - Hosts: 104.26.34.150 ftpav.ca.com
O1 - Hosts: 178.40.61.175 upgrade.bitdefender.com
O1 - Hosts: 104.145.107.4 www.bitdefender.ru
O1 - Hosts: 186.223.18.161 bitdefender.ru
O1 - Hosts: 100.125.216.116 open.by
O1 - Hosts: 175.210.118.4 vba32.de
O1 - Hosts: 106.43.202.48 www.open.by
O1 - Hosts: 187.158.9.42 lavasoft.com
O1 - Hosts: 176.168.161.132 rs01.avast.com
O1 - Hosts: 113.196.23.53 sm01.avast.com
O1 - Hosts: 173.85.201.82 rs02.avast.com
O1 - Hosts: 100.83.75.234 sm02.avast.com
O1 - Hosts: 178.94.124.98 rs03.avast.com
O1 - Hosts: 115.115.189.31 sm03.avast.com
O1 - Hosts: 179.82.30.213 rs04.avast.com
O1 - Hosts: 108.6.5.208 sm04.avast.com
O1 - Hosts: 184.166.75.163 rs05.avast.com
O1 - Hosts: 109.98.190.168 sm05.avast.com
O1 - Hosts: 185.166.221.212 rs06.avast.com
O1 - Hosts: 101.71.169.118 sm06.avast.com
O1 - Hosts: 183.68.192.179 rs07.avast.com
O1 - Hosts: 113.156.186.65 sm07.avast.com
O1 - Hosts: 173.216.20.157 rs08.avast.com
O1 - Hosts: 115.25.97.195 sm08.avast.com
O1 - Hosts: 185.172.91.117 rs09.avast.com
O1 - Hosts: 103.56.26.4 sm09.avast.com
O1 - Hosts: 187.21.191.24 rs10.avast.com
O1 - Hosts: 106.135.126.37 sm10.avast.com
O1 - Hosts: 186.92.191.182 rs11.avast.com
O1 - Hosts: 101.151.218.40 sm11.avast.com
O1 - Hosts: 182.12.173.157 rs12.avast.com
O1 - Hosts: 102.44.86.6 sm12.avast.com
O1 - Hosts: 187.177.109.41 rs13.avast.com
O1 - Hosts: 100.135.39.7 sm13.avast.com
O1 - Hosts: 183.4.26.28 rs14.avast.com
O1 - Hosts: 109.152.56.132 sm14.avast.com
O1 - Hosts: 174.22.52.47 rs15.avast.com
O1 - Hosts: 112.44.76.101 sm15.avast.com
O1 - Hosts: 176.24.2.108 rs16.avast.com
O1 - Hosts: 104.88.100.68 sm16.avast.com
O1 - Hosts: 175.209.96.55 rs17.avast.com
O1 - Hosts: 108.136.54.58 sm17.avast.com
O1 - Hosts: 182.81.75.62 rs18.avast.com
O1 - Hosts: 100.132.172.31 sm18.avast.com
O1 - Hosts: 183.224.68.115 rs19.avast.com
O1 - Hosts: 103.144.191.113 sm19.avast.com
O1 - Hosts: 184.193.195.14 rs20.avast.com
O1 - Hosts: 103.69.72.110 sm20.avast.com
O1 - Hosts: 176.169.145.194 rs21.avast.com
O1 - Hosts: 105.200.223.248 sm21.avast.com
O1 - Hosts: 176.72.49.72 rs22.avast.com
O1 - Hosts: 105.200.136.24 sm22.avast.com
O1 - Hosts: 184.106.33.253 rs23.avast.com
O1 - Hosts: 112.106.95.4 sm23.avast.com
O1 - Hosts: 176.15.175.146 rs24.avast.com
O1 - Hosts: 115.172.124.52 sm24.avast.com
O1 - Hosts: 174.173.108.253 rs25.avast.com
O1 - Hosts: 111.199.132.183 sm25.avast.com
O1 - Hosts: 181.141.199.236 rs26.avast.com
O1 - Hosts: 108.110.4.67 sm26.avast.com
O1 - Hosts: 187.38.57.188 rs27.avast.com
O1 - Hosts: 110.153.170.218 sm27.avast.com
O1 - Hosts: 184.120.97.180 rs28.avast.com
O1 - Hosts: 104.221.204.97 sm28.avast.com
O1 - Hosts: 184.87.84.126 rs29.avast.com
O1 - Hosts: 113.158.156.12 sm29.avast.com
O1 - Hosts: 175.137.116.58 rs30.avast.com
O1 - Hosts: 106.89.171.42 sm30.avast.com
O1 - Hosts: 181.63.155.14 downloadhosting.core.ignum.cz
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Service] "C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\Winupdate\Servicerun.exe" C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\Winupdate\Service.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1154861171078
O17 - HKLM\System\CCS\Services\Tcpip\..\{2AA08A46-60B9-48D4-B8E8-63107A6EBDCF}: NameServer = 212.216.172.162,195.130.225.129
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Programmi\Ares\chatServer.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Programmi\Norton Internet Security\comHost.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: GoogleDesktopManager - Google - C:\Programmi\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Ms-java - Unknown owner - C:\WINDOWS\system32\dllcache\ms-java.exe
O23 - Service: msupport - Unknown owner - C:\WINDOWS\system32\drivers\i386\services.exe
O23 - Service: Servizio Auto-Protect di Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Pro Home 2007.SP1\Win32\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Pro Home 2007.SP1\RpcSandraSrv.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Programmi\RealVNC\VNC4\WinVNC4.exe" -service (file missing)

[wizard1993]

hai più collegamenti te a host antivirus che 10 persone messe insieme

comuqnue fixa
O23 - Service: msupport - Unknown owner - C:\WINDOWS\system32\drivers\i386\services.exe
O23 - Service: Ms-java - Unknown owner - C:\WINDOWS\system32\dllcache\ms-java.exe

[SENZA DSL DA UN MESE]

Ora addirittura me ne mette due di pagine iniziali perchè mi aggiunge alla http://it.msn.com/ quella che scelgo e se apro internet mi appaiono tutte e due nella stessa finestra ( ho reinstallato explorer 7 )

Alla fine so che formatterò ma mi piacerebbe scoprire cosa diavolo gli è successo :(

Comunque ho eliminato quelle voci ma niente
E poi io avast non l'ho mai avuto e non capisco perchè ci sia

[Bugs Bunny]

processi no?

[SENZA DSL DA UN MESE]

Se apro quattro schede me le memorizza tutte insieme come pag iniziale.
Chiudo e riapro explorer e me le ridà tutte e quattro.

Ho chiuso tutti i processi possibili ma continua a rompere :mad:
Boh

[Tidus Strife]

Ma se non sbaglio quelle voci nel file Hosts IMPEDISCONO l'accesso a quei siti... quindi magari ha un virus che gli impedisce l'accesso ai server dei più famosi antivirus.... cioè io quando aggiungo una voce nel file hosts, la metto per impedire la connessione a quel sito, giusto? ecco, in questo caso lui ha l'accesso negato a tutti quei siti...