Non scarico piu la posta con outlook... credo virus...

[kead]

Ho uno strano problema...
Uso Outlook express 6 per gestire tutta la mia posta. Ho 11 caselle di posta e non ho mai avuto problemi.
Da qualche giorno da i numeri...
Non riesce a scaricare la posta... si connette al server e poi rimane in attesa. Dopo vari tentativi da il seguente errore, su tutti i server di posta:

Impossibile connettersi al server. Account: 'paolo tiscali', Server: 'pop.tiscalinet.it', Protocollo: POP3, Porta: 110, Protezione (SSL): No, Errore socket: 10061, Numero di errore: 0x800CCC0E

Sembra quasi che la porta sia occupata... ma da cosa? un trojan? Ho chiuso con taskmanager tutte le applicazioni, ma non risolve nulla.
La cosa ancra piu strana è che questo succede a volte... riavviando il pc 1 o 2 volte poi riesce a scaricare...

Che ne pensate?? Non me toccherà reinstallare tutto??

Aspetto fiducioso un consiglio...

ciao

[Wolfsbane]

Boh è molto strano, mi fa pensare ad 1 spyware con l'inserimento di un hacker!!!
Prova a scaricarti AD-AWARE è 1 anti-spyware!

[kead]

avevi ragione..
ora va tutto... beccatevi il report di Ad ware...
54 cosi ha trovato zio cristo...
incredibile....

Started registry scan
======================
Other key:HKEY_CLASSES_ROOT\.b3d\
BrilliantDigital key:HKEY_CLASSES_ROOT\.b3dini\
BrilliantDigital key:HKEY_CLASSES_ROOT\.b3ds\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3dini_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3ds_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3d_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdeplayer.bdeplayerctrl\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdeplayer.bdeplayerctrl.1\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdesmartinstaller25.bdesmartinstaller25\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdesmartinstaller25.bdesmartinstaller25.1\
Gator key:HKEY_CLASSES_ROOT\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\
Other key:HKEY_CLASSES_ROOT\clsid\{3eec42b5-fb94-40d3-a588-bb54b383a7cb}\
BrilliantDigital key:HKEY_CLASSES_ROOT\clsid\{51958169-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\clsid\{67925165-c4b6-11d2-b9c6-0000e84f59a6}\
WebHancer key:HKEY_CLASSES_ROOT\clsid\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{51958167-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{51958168-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{67925164-c4b6-11d2-b9c6-0000e84f59a6}\
WebHancer key:HKEY_CLASSES_ROOT\interface\{c89435b0-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_CLASSES_ROOT\s3d_auto_file\
Other key:HKEY_CURRENT_USER\software\acceleration software international corporation\
Other key:HKEY_LOCAL_MACHINE\software\acceleration software international corporation\
BrilliantDigital key:HKEY_CURRENT_USER\software\brilliant digital entertainment\
BrilliantDigital key:HKEY_LOCAL_MACHINE\software\brilliant digital entertainment\
Cydoor key:HKEY_CURRENT_USER\software\cydoor\
Cydoor key:HKEY_LOCAL_MACHINE\software\cydoor\
Cydoor key:HKEY_CURRENT_USER\software\cydoor services\
Gator key:HKEY_LOCAL_MACHINE\software\gator.com\
Alexa key:HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bdeplayer\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\webhancer agent\
WebHancer key:HKEY_LOCAL_MACHINE\software\webhancer\
BrilliantDigital key:HKEY_CLASSES_ROOT\typelib\{51958166-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\typelib\{82fc7881-aacc-11d2-b9c6-0000e842e40a}\
WebHancer key:HKEY_CLASSES_ROOT\typelib\{c8cb3870-cdfe-11d3-976a-00e02913a9e0}\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1\
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cmesys
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\webhancer agent
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll


Started extended registry scan
===============================
Gator value:Software\Microsoft\Windows\CurrentVersion\Run:CMESys
WebHancer value:Software\Microsoft\Windows\CurrentVersion\Run:webHancer Agent
WebHancer value:Software\Microsoft\Windows\CurrentVersion\Run:webHancer Agent


Registry scan result:
Suspicious keys found :53


:mad:

[MartiniG.]

Originariamente inviato da kead
[B]avevi ragione..
ora va tutto... beccatevi il report di Ad ware...
54 cosi ha trovato zio cristo...
incredibile....

Started registry scan
======================
Other key:HKEY_CLASSES_ROOT\.b3d\
BrilliantDigital key:HKEY_CLASSES_ROOT\.b3dini\
BrilliantDigital key:HKEY_CLASSES_ROOT\.b3ds\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3dini_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3ds_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\b3d_auto_file\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdeplayer.bdeplayerctrl\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdeplayer.bdeplayerctrl.1\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdesmartinstaller25.bdesmartinstaller25\
BrilliantDigital key:HKEY_CLASSES_ROOT\bdesmartinstaller25.bdesmartinstaller25.1\
Gator key:HKEY_CLASSES_ROOT\clsid\{21ffb6c0-0da1-11d5-a9d5-00500413153c}\
Other key:HKEY_CLASSES_ROOT\clsid\{3eec42b5-fb94-40d3-a588-bb54b383a7cb}\
BrilliantDigital key:HKEY_CLASSES_ROOT\clsid\{51958169-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\clsid\{67925165-c4b6-11d2-b9c6-0000e84f59a6}\
WebHancer key:HKEY_CLASSES_ROOT\clsid\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{51958167-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{51958168-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\interface\{67925164-c4b6-11d2-b9c6-0000e84f59a6}\
WebHancer key:HKEY_CLASSES_ROOT\interface\{c89435b0-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_CLASSES_ROOT\s3d_auto_file\
Other key:HKEY_CURRENT_USER\software\acceleration software international corporation\
Other key:HKEY_LOCAL_MACHINE\software\acceleration software international corporation\
BrilliantDigital key:HKEY_CURRENT_USER\software\brilliant digital entertainment\
BrilliantDigital key:HKEY_LOCAL_MACHINE\software\brilliant digital entertainment\
Cydoor key:HKEY_CURRENT_USER\software\cydoor\
Cydoor key:HKEY_LOCAL_MACHINE\software\cydoor\
Cydoor key:HKEY_CURRENT_USER\software\cydoor services\
Gator key:HKEY_LOCAL_MACHINE\software\gator.com\
Alexa key:HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{c900b400-cdfe-11d3-976a-00e02913a9e0}\
BrilliantDigital key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\bdeplayer\
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\webhancer agent\
WebHancer key:HKEY_LOCAL_MACHINE\software\webhancer\
BrilliantDigital key:HKEY_CLASSES_ROOT\typelib\{51958166-d5e3-11d1-aa42-0000e842e40a}\
BrilliantDigital key:HKEY_CLASSES_ROOT\typelib\{82fc7881-aacc-11d2-b9c6-0000e842e40a}\
WebHancer key:HKEY_CLASSES_ROOT\typelib\{c8cb3870-cdfe-11d3-976a-00e02913a9e0}\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj\
WebHancer key:HKEY_CLASSES_ROOT\whiehelperobj.whiehelperobj.1\
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgef
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
Web3000 key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\stashedgmg
Gator key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\cmesys
WebHancer key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\webhancer agent
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll
WebHancer value:System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries:PackedCatalogItem=e:\windows\webhdll.dll


Started extended registry scan
===============================
Gator value:Software\Microsoft\Windows\CurrentVersion\Run:CMESys
WebHancer value:Software\Microsoft\Windows\CurrentVersion\Run:webHancer Agent
WebHancer value:Software\Microsoft\Windows\CurrentVersion\Run:webHancer Agent


Registry scan result:
Suspicious keys found :53


:mad:


Li hai cancellati tutti?

[kead]

si, tutti.. ma certi all'avvio ricompaiono...
gator non riesco a disinstallarlo, ma quello è il piu innoquo..
che ne pensi??

[MartiniG.]

Originariamente inviato da kead
[B]si, tutti.. ma certi all'avvio ricompaiono...
gator non riesco a disinstallarlo, ma quello è il piu innoquo..
che ne pensi??

Ti consiglio di fare una ricerca con "trova file o cartelle" su GATOR e CYDOOR, elimina tutto quello che ha quei nomi, anche se come hai detto tu sono innoqui, per il resto anch'io ho eliminato ALEXA e non so a cosa serva, gli altri non li conosco, cerca cmq di capire che programmi sono, ad esempio BrilliantDigital o WebHancer che a me non sembrano dannosi
ciao