| 
 | |||||||
| 
 | 
|  | 
|  | 
|  | Strumenti | 
|  30-06-2007, 13:22 | #1 | 
| Junior Member Iscritto dal: Jun 2007 
					Messaggi: 3
				 | 
				
				Potete consigliarmi?
			 
		Ciao a tutti gli utenti di questo bel forum, è la prima volta che scrivo su questo forum anche se no ho a lungo sentito parlare dagli amici. Mi sono appena iscritto quindi come mio primo post voglio chiedervi un paio di consigli. Vorrei chiedervi se potreste dare un'occhiata al log della scansione che ho fatto con l'Hijackthis tanto per sapere se c'è qualcosa che posso togliere. Il secondo consiglio riguarda la pertinenza della sezione, mi spiego meglio  : ho l'scritto nel posto giusto questo post o dovevo scriverlo da qualche altra parte? Ringraziandovi anticipatamente vi saluto e vi posto il log. CIAO a tutti Logfile of HijackThis v1.97.7 Scan saved at 13.21.54, on 30/06/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programmi\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\System32\nvsvc32.exe C:\Programmi\Megatec\UPSilon 2000\RupsMon.exe C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe C:\Programmi\QuickTime\qttask.exe C:\WINDOWS\system32\rundll32.exe C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Programmi\MSN Messenger\usnsvc.exe C:\Programmi\AntiVir PersonalEdition Classic\avguard.exe C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe C:\Programmi\MSN Messenger\msnmsgr.exe C:\Documents and Settings\Dave\Desktop\zDCPlusPlus0.668z3Ita\zDC++0.668z3Ita\zDCPlusPlus.exe C:\Programmi\Mozilla Firefox\firefox.exe C:\Documents and Settings\Dave\Desktop\TUTTO QUI'\macelleria\HijackThis.exe C:\Programmi\Internet Explorer\iexplore.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.it/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_bak = http://www.tiscali.it/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank R3 - URLSearchHook: (no name) - {20EC3D2D-33C1-4C9D-BC37-C2D500688DA2} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar3.dll O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar3.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [FASTTRACKPassepartout] C:\WINDOWS\Passepartout.exe -A *fXBtFwtaYtaWyfW5fD51Dg1dE5dGwOGlMTk8jQgLU3YX4NWxLD5oTcjdIyaHzNGRLXUwmwgOV4bi4Om8ZT9vXIudxzI3QMGdYDN3XMvLNzbmzMnYZXNzXwlNBtYjhf3AcCVun10dR8a3vLXNdXZ8XwpURtf38fHxMDRGjJyfV8ZE8MS5aXB8HwjLRtZX0fWxcC5OD10fo8ZCvLX1LXN83wpLBtbXhfWwcHkt3FgfN1YClaW1cWw8G5gNFkcDya2FdWV8GNjM9pbS1I2wdG5xCVkL51bD0cyEcmBsm8wMFgZSmcXwZGIymVgflydCjIW1YH48WVgLRudX2IGwYHVtWRtf5lcHjbGBZX8lSBgc5vYGuI2FZG9jXNtaRvcy8bG5MXxlTBleAscGyZ3VNXN8TNpUhzd38amwMX8zjZgONvZD8IGYMGkxnRgfwpbEtI35fHR8CN0I1lbg8ay=LSB= O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [{D8D62ED3-077C-1040-0213-030119040027}] "C:\Programmi\File comuni\{D8D62ED3-077C-1040-0213-030119040027}\Update.exe" te-110-12-0000073 O4 - HKLM\..\Run: [{D8D62ED3-077D-1040-0213-030119040027}] "C:\Programmi\File comuni\{D8D62ED3-077D-1040-0213-030119040027}\Update.exe" te-110-12-0000073 O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar O4 - HKLM\..\Run: [avgnt] "C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\RunOnce: [SWHelper] "C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe" 1014020 O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM) O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab30149.cab O16 - DPF: {3334504D-9980-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...4D/mp43dmo.CAB O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/downlo...22/wmv9VCM.CAB O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107fd.bay107.hotmail.msn.co...s/MsnPUpld.cab O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/2/en...TelecomInt.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/IT-IT/.../GAME_UNO1.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1094288488656 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab30149.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary...o.cab47946.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: {CE69F98F-2AF3-4306-BAC6-A79070EDA1B4} (Zylom Loader Object) - http://eu.download.games.yahoo.com/z...ylomloader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab O16 - DPF: {E0CE16CB-741C-4B24-8D04-A817856E07F4} - http://cabs.media-motor.net/cabs/alien.cab O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary...n.cab31267.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{D70624A9-A793-4997-A215-43D184D7A749}: NameServer = 193.70.152.15 193.70.152.25 | 
|   |   | 
|  30-06-2007, 22:32 | #2 | 
| Senior Member Iscritto dal: May 2003 Città: venezia 
					Messaggi: 18685
				 | 
		intanto questi li puoi anche disabilitare da l' avvio di windows : C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe C:\Programmi\QuickTime\qttask.exe C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Programmi\MSN Messenger\usnsvc.exe C:\Programmi\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\NeroCheck.exe Per il messanger decidi tu se lo usi spesso oppure no . tutti gli altri elencati li puoi disabilitare , che occupano solo memoria . | 
|   |   | 
|  01-07-2007, 03:10 | #3 | 
| Junior Member Iscritto dal: Jun 2007 
					Messaggi: 3
				 | 
		Grandissimo Ale ti ringrazio per la pronta risposta, sei stato veramente gentile. Un saluto a tutti coloro che legogno questo post. Ciauuu       | 
|   |   | 
|  01-07-2007, 10:58 | #4 | 
| Senior Member Iscritto dal: Jan 2006 
					Messaggi: 1978
				 | 
		Quì puoi postare ogni log e ti viene detto quello che potrebbe essere grave o no.. http://www.hijackthis.de/ | 
|   |   | 
|   | 
| Strumenti | |
| 
 | 
 | 
Tutti gli orari sono GMT +1. Ora sono le: 09:08.









 
		 
		 
		 
		





 
  
 



 
                        
                        










