Hardware Upgrade Forum - View Single Post

jammizz · 16-06-2007, 01:12

ho fixato questi file ed eliminati con killbox
C:\WINDOWS\avg.exe
C:\WINDOWS\regent.exe
C:\WINDOWS\SubSys.exe

F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\avg.exe
O23 - Service: AVG - Unknown owner - C:\WINDOWS\avg.exe
O23 - Service: Register Manager - Unknown owner - C:\WINDOWS\regent.exe
O23 - Service: Windows Sub System - Unknown owner - C:\WINDOWS\SubSys.exe

sembra tutto sparito, pero' all avvio mi richiama una voce che non ho cancellato....avg.exe che poi ho scovato nel regedite solo che prima mi impediva l accesso ad internet ora sembra tutto ok ma dopo qualche minuto non riesco ad aprire piu' nessun programma, e nemmeno si riavvia da start......vi allego il nuovo log in mod. normale

Logfile of HijackThis v1.99.1
Scan saved at 19.56.19, on 15/06/2007
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\Explorer.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\wuauclt.exe
C:\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.scarpissime.it/
F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\avg.exe
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: AVG - Unknown owner - C:\WINDOWS\avg.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: Copyright (C) 2001-2005 S3 Graphics, Inc. (S3 Graphics, Inc.) - Unknown owner - C:\WINDOWS\VTTimer.exe (file missing)

16-06-2007, 01:12	#9
jammizz Junior Member Iscritto dal: Jun 2007 Messaggi: 17	ho fixato questi file ed eliminati con killbox C:\WINDOWS\avg.exe C:\WINDOWS\regent.exe C:\WINDOWS\SubSys.exe F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\avg.exe O23 - Service: AVG - Unknown owner - C:\WINDOWS\avg.exe O23 - Service: Register Manager - Unknown owner - C:\WINDOWS\regent.exe O23 - Service: Windows Sub System - Unknown owner - C:\WINDOWS\SubSys.exe sembra tutto sparito, pero' all avvio mi richiama una voce che non ho cancellato....avg.exe che poi ho scovato nel regedite solo che prima mi impediva l accesso ad internet ora sembra tutto ok ma dopo qualche minuto non riesco ad aprire piu' nessun programma, e nemmeno si riavvia da start......vi allego il nuovo log in mod. normale Logfile of HijackThis v1.99.1 Scan saved at 19.56.19, on 15/06/2007 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\LEXPPS.EXE C:\WINDOWS\system32\spoolsv.exe C:\Programmi\Messenger\msmsgs.exe C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe C:\Programmi\Eset\nod32krn.exe C:\WINDOWS\System32\svchost.exe C:\Programmi\Internet Explorer\iexplore.exe C:\WINDOWS\System32\wuauclt.exe C:\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.scarpissime.it/ F2 - REG:system.ini: Shell=Explorer.exe %WINDIR%\avg.exe O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english...an_unicode.cab O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: AVG - Unknown owner - C:\WINDOWS\avg.exe (file missing) O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe O23 - Service: Copyright (C) 2001-2005 S3 Graphics, Inc. (S3 Graphics, Inc.) - Unknown owner - C:\WINDOWS\VTTimer.exe (file missing)