PDA

View Full Version : Errore rundll.exe


Arrow94
26-06-2013, 11:54
Salve,probabilmente dopo aver installato un programma di un gioco,mi sono usciti una serie di errori che compaiono all'avvio del computer.

http://tinypic.com/view.php?pic=6jcy6u&s=5

Devo cliccare almeno 10-15volte per levare tutti gli errori..

Io ho un portatile Lenovo.
Sistema operativo:XP

Blue_screen_of_death
26-06-2013, 12:15
Start/Esegui/"msconfig"
Scheda Avvio.

Posta uno screenshot di quelle voci.

Il gioco si è installato bene? Funziona correttamente?

Arrow94
26-06-2013, 12:25
Start/Esegui/"msconfig"
Scheda Avvio.

Posta uno screenshot di quelle voci.

Il gioco si è installato bene? Funziona correttamente?

Il gioco si si.

ecco lo screen:

http://tinypic.com/view.php?pic=5nt3co&s=5

Blue_screen_of_death
26-06-2013, 12:32
Togli la spunta dalle due voci rundll.

Arrow94
26-06-2013, 12:44
Togli la spunta dalle due voci rundll.

Fatto,ho riavviato ma il problema persiste

http://tinypic.com/view.php?pic=2uh7cwp&s=5

Blue_screen_of_death
26-06-2013, 12:46
Potrebbe essere anche un residuo di qualche infezione. L'antivirus ha rilevato minacce di recente?

Scarica HiJackThis e posta un log.

Dopo aver cliccato su OK in quella finestra, hai detto che ne compaiono altre. Ma ti dice sempre che mozglue.dll non è stato trovato? o altri errori?

Arrow94
26-06-2013, 12:50
Potrebbe essere anche un residuo di qualche infezione. L'antivirus ha rilevato minacce di recente?

Scarica HiJackThis e posta un log.

Dopo aver cliccato su OK in quella finestra, hai detto che ne compaiono altre. Ma ti dice sempre che mozglue.dll non è stato trovato? o altri errori?

Provo con HiJackThis,no altri errori sempre di quel genere.

Come posto il log? é un file txt di blocco note.. lo mett qui dai


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13.04.10, on 26/06/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Programmi\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Java\jre7\bin\jqs.exe
C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
c:\windows\explorer.exe
C:\WINDOWS\system32\MPK\mpk.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\cacaoweb\cacaoweb.exe
C:\Documents and Settings\All Users\Dati applicazioni\rvlkl\rvlkl.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\Documents and Settings\Luca\Desktop\Metin2Arrow Client\Metin2Arrow.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.fbdownloader.com/?channel=sfit202fbdgy11
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: UserInit=c:\windows\explorer.exe,c:\documents and settings\luca\desktop\liberummetin2\liberummetin2srvsrv.exe,c:\programmi\microsoft\desktoplayer.exe,C:\WINDOWS\system32\MPK\mpk.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll
O2 - BHO: smartdownloader Class - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - C:\Programmi\PutLockerDownloader\smarterdownloader.dll (file missing)
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O4 - HKLM\..\Run: [PosService] C:\Documents and Settings\All Users\Documenti\AppData\PoApp\PLauncher.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HKLM] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cacaoweb] "C:\Programmi\cacaoweb\cacaoweb.exe" -noplayer
O4 - HKCU\..\Run: [SSync] "C:\Documents and Settings\Luca\Dati applicazioni\SSync\SSync.exe"
O4 - HKCU\..\Run: [DataMgr] "C:\Documents and Settings\Luca\Dati applicazioni\DataMgr\DataMgr.exe"
O4 - HKCU\..\Run: [SCheck] "C:\Documents and Settings\Luca\Dati applicazioni\SCheck\SCheck.exe" check
O4 - HKCU\..\Run: [Intermediate] "C:\Documents and Settings\Luca\Dati applicazioni\Intermediate\Intermediate.exe"
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: rvlkl.lnk = C:\Documents and Settings\All Users\Dati applicazioni\rvlkl\rvlkl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre7\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: IBM Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre7\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\system32\shdocvw.dll
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/it/it
O17 - HKLM\System\CCS\Services\Tcpip\..\{75D84880-56D3-43D8-8736-623A41D6003D}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0095DD3-387C-4F41-A847-A7D0EF9852DC}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Unknown owner - C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Active@ Disk Monitor - LSoft Technologies Inc - C:\Programmi\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo. - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Programmi\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pos Service (PowerOffer Service) - PowerOfferService - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\PosService\Pos.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: RPC Locator (RpcLocator) - VS Revo Group - (no file)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Serv Updater (ServUpdater) - ServiceUpd - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmi\Skype\Updater\Updater.exe
O23 - Service: Software Upd (SoftwareUpd) - SoftwareUpdService - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe

--
End of file - 7926 bytes

Blue_screen_of_death
26-06-2013, 13:42
Fixa queste voci:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.fbdownloader.com/?channel=sfit202fbdgy11
O2 - BHO: smartdownloader Class - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - C:\Programmi\PutLockerDownloader\smarterdownloader.dll (file missing)
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Dopo il fix, prova a riavviare. Il problema dovrebbe sparire.
Poi, per sicurezza esegui una scansione con MalwareBytes, una con SuperAntiSpyware e una col tuo antivirus.

Arrow94
26-06-2013, 13:57
Fixa queste voci:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.fbdownloader.com/?channel=sfit202fbdgy11
O2 - BHO: smartdownloader Class - {F1AF26F8-1828-4279-ABCE-074EF3235BD7} - C:\Programmi\PutLockerDownloader\smarterdownloader.dll (file missing)
O3 - Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - (no file)
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

Dopo il fix, prova a riavviare. Il problema dovrebbe sparire.
Poi, per sicurezza esegui una scansione con MalwareBytes, una con SuperAntiSpyware e una col tuo antivirus.

Ok grazie provo!

Arrow94
26-06-2013, 19:04
Al riavvio ho notato che l'errore persiste...posto un altro log.

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19.03.47, on 26/06/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Programmi\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Java\jre7\bin\jqs.exe
C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\WINDOWS\system32\wscntfy.exe
c:\windows\explorer.exe
C:\WINDOWS\system32\MPK\mpk.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\cacaoweb\cacaoweb.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: UserInit=c:\windows\explorer.exe,c:\documents and settings\luca\desktop\liberummetin2\liberummetin2srvsrv.exe,c:\programmi\microsoft\desktoplayer.exe,C:\WINDOWS\system32\MPK\mpk.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [PosService] C:\Documents and Settings\All Users\Documenti\AppData\PoApp\PLauncher.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [HKLM] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [cacaoweb] "C:\Programmi\cacaoweb\cacaoweb.exe" -noplayer
O4 - HKCU\..\Run: [SSync] "C:\Documents and Settings\Luca\Dati applicazioni\SSync\SSync.exe"
O4 - HKCU\..\Run: [DataMgr] "C:\Documents and Settings\Luca\Dati applicazioni\DataMgr\DataMgr.exe"
O4 - HKCU\..\Run: [SCheck] "C:\Documents and Settings\Luca\Dati applicazioni\SCheck\SCheck.exe" check
O4 - HKCU\..\Run: [Intermediate] "C:\Documents and Settings\Luca\Dati applicazioni\Intermediate\Intermediate.exe"
O4 - HKCU\..\Run: [HKCU] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKLM\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - HKCU\..\Policies\Explorer\Run: [Policies] C:\WINDOWS\system32\rundll\rundll.exe
O4 - Global Startup: rvlkl.lnk = C:\Documents and Settings\All Users\Dati applicazioni\rvlkl\rvlkl.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre7\bin\jp2iexp.dll
O9 - Extra 'Tools' menuitem: IBM Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre7\bin\jp2iexp.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\system32\shdocvw.dll
O11 - Options group: [JAVA_IBM] Java (IBM)
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/it/it
O17 - HKLM\System\CCS\Services\Tcpip\..\{75D84880-56D3-43D8-8736-623A41D6003D}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0095DD3-387C-4F41-A847-A7D0EF9852DC}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Unknown owner - C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Active@ Disk Monitor - LSoft Technologies Inc - C:\Programmi\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo. - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Programmi\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pos Service (PowerOffer Service) - PowerOfferService - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\PosService\Pos.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: RPC Locator (RpcLocator) - VS Revo Group - (no file)
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Serv Updater (ServUpdater) - ServiceUpd - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmi\Skype\Updater\Updater.exe
O23 - Service: Software Upd (SoftwareUpd) - SoftwareUpdService - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe

--
End of file - 7098 bytes

Blue_screen_of_death
26-06-2013, 19:29
Devi fixare tutte le voci che finiscono con rundll.exe.
Poi faii controlli che ti ho detto.

Arrow94
26-06-2013, 19:40
Devi fixare tutte le voci che finiscono con rundll.exe.
Poi faii controlli che ti ho detto.

Ho fixato ma ogni volta che faccio scan con il programma me ne trova sempre almeno 3 o 4...è senza fine...non mi pare normale.

Blue_screen_of_death
26-06-2013, 19:45
Allora hai un'infezione ancora in corso. Pulisci il PC con i programmi che ti ho menzionato.

Arrow94
26-06-2013, 20:53
Allora hai un'infezione ancora in corso. Pulisci il PC con i programmi che ti ho menzionato.

Risolto con malware,grazie del supporto.

Ciao