|
|
|
![]() |
|
Strumenti |
![]() |
#1 |
Member
Iscritto dal: Oct 2004
Messaggi: 256
|
Explorer da i numeri
Non riesco con explorer ad avere la pagina predefinita perchè me la reimposta su www.wicrosoft.it e i cookie mi vengono cancellati ogni minuto.
Scansioni con antivirus e adaware spybot ecc ecc non sono servite oltre a cancellare il ripristino e a rifare le scansioni in attività provvisoria. Con firefox invece va tutto bene ma vorrei avere anche explorer, idee? |
![]() |
![]() |
![]() |
#2 | |
Senior Member
Iscritto dal: Feb 2006
Città: Perugia
Messaggi: 1340
|
Quote:
|
|
![]() |
![]() |
![]() |
#3 |
Member
Iscritto dal: Dec 2005
Città: Verona
Messaggi: 266
|
E poi serve un log di hijackthis
![]()
__________________
"La teoria è quando si sa tutto ma non funziona niente. La pratica è quando funziona tutto ma non si sa il perché. In ogni caso si finisce sempre con il coniugare la teoria con la pratica: non funziona niente e non si sa il perché". Albert Einstein |
![]() |
![]() |
![]() |
#4 |
Member
Iscritto dal: Oct 2004
Messaggi: 256
|
La 7 che poi ho disinstallato e poi reinstallato e nuovamente disinstallato.
Anche la visione dei caratteri mi è cambiata ![]() |
![]() |
![]() |
![]() |
#5 |
Senior Member
Iscritto dal: Aug 2005
Città: Genova
Messaggi: 3391
|
__________________
Rimozione Worm/Rootkit Bagle - Rimozione Trojan Vundo - Rimozione virus MSN Messenger -Rimozione virus su chiavetta o errori di file mancante all'apertura del disco fisso - NT AUTHORITY SYSTEM spegne il pc ad ogni avvio. Cosa fare?(worm sasser/blaster/rustock) - Thread Ufficiale firewall software |
![]() |
![]() |
![]() |
#6 |
Member
Iscritto dal: Oct 2004
Messaggi: 256
|
eccovelo e aggiungo che non mi fa più neanche gli aggiornamenti
Logfile of HijackThis v1.99.1
Scan saved at 20.02.26, on 14/05/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir...r=6&ar=msnhome R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir...ie&ar=iesearch R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.com/search?q=%s R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O1 - Hosts: 108.112.42.206 ad.doubleclick.net O1 - Hosts: 184.169.44.29 upgrade.bitdefender.com O1 - Hosts: 106.62.59.13 report.bitdefender.com O1 - Hosts: 178.95.95.213 ad.fastclick.net O1 - Hosts: 107.116.117.138 ads.fastclick.net O1 - Hosts: 115.27.183.221 atdmt.com O1 - Hosts: 108.15.197.227 awaps.net O1 - Hosts: 180.66.164.240 banner.fastclick.net O1 - Hosts: 112.56.109.230 banners.fastclick.net O1 - Hosts: 180.140.140.115 click.atdmt.com O1 - Hosts: 104.148.31.185 clicks.atdmt.com O1 - Hosts: 111.57.62.146 engine.awaps.net O1 - Hosts: 100.178.73.135 fastclick.net O1 - Hosts: 182.38.71.88 ftp.avp.ch O1 - Hosts: 106.65.181.226 ftp.kasperskylab.ru O1 - Hosts: 115.99.75.57 updates5.kaspersky-labs.com O1 - Hosts: 179.223.125.67 www.viruslist.ru O1 - Hosts: 108.51.94.92 awaps.net O1 - Hosts: 102.35.134.158 fastclick.net O1 - Hosts: 113.214.19.103 kaspersky.ru O1 - Hosts: 102.158.3.18 akamai.net O1 - Hosts: 179.147.199.183 www.antivir.de O1 - Hosts: 105.108.119.104 antivir.de O1 - Hosts: 181.87.27.164 drweb.com O1 - Hosts: 110.60.112.152 www.drweb.com O1 - Hosts: 173.72.89.247 drweb.ru O1 - Hosts: 111.44.59.160 www.ravantivirus.com O1 - Hosts: 177.51.6.174 ravantivirus.com O1 - Hosts: 105.20.84.201 bitdefender.com O1 - Hosts: 184.57.115.18 www.bitdefender.com O1 - Hosts: 111.9.106.84 www.clamav.net O1 - Hosts: 179.134.219.18 clamav.net O1 - Hosts: 104.26.34.150 ftpav.ca.com O1 - Hosts: 178.40.61.175 upgrade.bitdefender.com O1 - Hosts: 104.145.107.4 www.bitdefender.ru O1 - Hosts: 186.223.18.161 bitdefender.ru O1 - Hosts: 100.125.216.116 open.by O1 - Hosts: 175.210.118.4 vba32.de O1 - Hosts: 106.43.202.48 www.open.by O1 - Hosts: 187.158.9.42 lavasoft.com O1 - Hosts: 176.168.161.132 rs01.avast.com O1 - Hosts: 113.196.23.53 sm01.avast.com O1 - Hosts: 173.85.201.82 rs02.avast.com O1 - Hosts: 100.83.75.234 sm02.avast.com O1 - Hosts: 178.94.124.98 rs03.avast.com O1 - Hosts: 115.115.189.31 sm03.avast.com O1 - Hosts: 179.82.30.213 rs04.avast.com O1 - Hosts: 108.6.5.208 sm04.avast.com O1 - Hosts: 184.166.75.163 rs05.avast.com O1 - Hosts: 109.98.190.168 sm05.avast.com O1 - Hosts: 185.166.221.212 rs06.avast.com O1 - Hosts: 101.71.169.118 sm06.avast.com O1 - Hosts: 183.68.192.179 rs07.avast.com O1 - Hosts: 113.156.186.65 sm07.avast.com O1 - Hosts: 173.216.20.157 rs08.avast.com O1 - Hosts: 115.25.97.195 sm08.avast.com O1 - Hosts: 185.172.91.117 rs09.avast.com O1 - Hosts: 103.56.26.4 sm09.avast.com O1 - Hosts: 187.21.191.24 rs10.avast.com O1 - Hosts: 106.135.126.37 sm10.avast.com O1 - Hosts: 186.92.191.182 rs11.avast.com O1 - Hosts: 101.151.218.40 sm11.avast.com O1 - Hosts: 182.12.173.157 rs12.avast.com O1 - Hosts: 102.44.86.6 sm12.avast.com O1 - Hosts: 187.177.109.41 rs13.avast.com O1 - Hosts: 100.135.39.7 sm13.avast.com O1 - Hosts: 183.4.26.28 rs14.avast.com O1 - Hosts: 109.152.56.132 sm14.avast.com O1 - Hosts: 174.22.52.47 rs15.avast.com O1 - Hosts: 112.44.76.101 sm15.avast.com O1 - Hosts: 176.24.2.108 rs16.avast.com O1 - Hosts: 104.88.100.68 sm16.avast.com O1 - Hosts: 175.209.96.55 rs17.avast.com O1 - Hosts: 108.136.54.58 sm17.avast.com O1 - Hosts: 182.81.75.62 rs18.avast.com O1 - Hosts: 100.132.172.31 sm18.avast.com O1 - Hosts: 183.224.68.115 rs19.avast.com O1 - Hosts: 103.144.191.113 sm19.avast.com O1 - Hosts: 184.193.195.14 rs20.avast.com O1 - Hosts: 103.69.72.110 sm20.avast.com O1 - Hosts: 176.169.145.194 rs21.avast.com O1 - Hosts: 105.200.223.248 sm21.avast.com O1 - Hosts: 176.72.49.72 rs22.avast.com O1 - Hosts: 105.200.136.24 sm22.avast.com O1 - Hosts: 184.106.33.253 rs23.avast.com O1 - Hosts: 112.106.95.4 sm23.avast.com O1 - Hosts: 176.15.175.146 rs24.avast.com O1 - Hosts: 115.172.124.52 sm24.avast.com O1 - Hosts: 174.173.108.253 rs25.avast.com O1 - Hosts: 111.199.132.183 sm25.avast.com O1 - Hosts: 181.141.199.236 rs26.avast.com O1 - Hosts: 108.110.4.67 sm26.avast.com O1 - Hosts: 187.38.57.188 rs27.avast.com O1 - Hosts: 110.153.170.218 sm27.avast.com O1 - Hosts: 184.120.97.180 rs28.avast.com O1 - Hosts: 104.221.204.97 sm28.avast.com O1 - Hosts: 184.87.84.126 rs29.avast.com O1 - Hosts: 113.158.156.12 sm29.avast.com O1 - Hosts: 175.137.116.58 rs30.avast.com O1 - Hosts: 106.89.171.42 sm30.avast.com O1 - Hosts: 181.63.155.14 downloadhosting.core.ignum.cz O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: CNisExtBho Class - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll O2 - BHO: CNavExtBho Class - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [Service] "C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\Winupdate\Servicerun.exe" C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\Winupdate\Service.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1154861171078 O17 - HKLM\System\CCS\Services\Tcpip\..\{2AA08A46-60B9-48D4-B8E8-63107A6EBDCF}: NameServer = 212.216.172.162,195.130.225.129 O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GO333C~1\GOEC62~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Programmi\Ares\chatServer.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\ccPwdSvc.exe O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccProxy.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Programmi\Norton Internet Security\comHost.exe O23 - Service: Diskeeper - Diskeeper Corporation - C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe O23 - Service: GoogleDesktopManager - Google - C:\Programmi\Google\Google Desktop Search\GoogleDesktopManager.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Ms-java - Unknown owner - C:\WINDOWS\system32\dllcache\ms-java.exe O23 - Service: msupport - Unknown owner - C:\WINDOWS\system32\drivers\i386\services.exe O23 - Service: Servizio Auto-Protect di Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Pro Home 2007.SP1\Win32\RpcDataSrv.exe O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Pro Home 2007.SP1\RpcSandraSrv.exe O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\SAVScan.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: VNC Server Version 4 (WinVNC4) - Unknown owner - C:\Programmi\RealVNC\VNC4\WinVNC4.exe" -service (file missing) |
![]() |
![]() |
![]() |
#7 |
Senior Member
Iscritto dal: Apr 2006
Messaggi: 22462
|
hai più collegamenti te a host antivirus che 10 persone messe insieme
comuqnue fixa O23 - Service: msupport - Unknown owner - C:\WINDOWS\system32\drivers\i386\services.exe O23 - Service: Ms-java - Unknown owner - C:\WINDOWS\system32\dllcache\ms-java.exe
__________________
amd a64x2 4400+ sk939;asus a8n-sli; 2x1gb ddr400; x850 crossfire; 2 x western digital abys 320gb|| asus g1
Se striscia fulmina, se svolazza l'ammazza |
![]() |
![]() |
![]() |
#8 |
Member
Iscritto dal: Oct 2004
Messaggi: 256
|
Ora addirittura me ne mette due di pagine iniziali perchè mi aggiunge alla http://it.msn.com/ quella che scelgo e se apro internet mi appaiono tutte e due nella stessa finestra ( ho reinstallato explorer 7 )
Alla fine so che formatterò ma mi piacerebbe scoprire cosa diavolo gli è successo ![]() Comunque ho eliminato quelle voci ma niente E poi io avast non l'ho mai avuto e non capisco perchè ci sia |
![]() |
![]() |
![]() |
#9 |
Senior Member
Iscritto dal: Aug 2005
Città: Genova
Messaggi: 3391
|
processi no?
__________________
Rimozione Worm/Rootkit Bagle - Rimozione Trojan Vundo - Rimozione virus MSN Messenger -Rimozione virus su chiavetta o errori di file mancante all'apertura del disco fisso - NT AUTHORITY SYSTEM spegne il pc ad ogni avvio. Cosa fare?(worm sasser/blaster/rustock) - Thread Ufficiale firewall software |
![]() |
![]() |
![]() |
#10 |
Member
Iscritto dal: Oct 2004
Messaggi: 256
|
Se apro quattro schede me le memorizza tutte insieme come pag iniziale.
Chiudo e riapro explorer e me le ridà tutte e quattro. Ho chiuso tutti i processi possibili ma continua a rompere ![]() Boh |
![]() |
![]() |
![]() |
#11 |
Senior Member
Iscritto dal: Feb 2007
Città: Spira, Zanarkand
Messaggi: 394
|
Ma se non sbaglio quelle voci nel file Hosts IMPEDISCONO l'accesso a quei siti... quindi magari ha un virus che gli impedisce l'accesso ai server dei più famosi antivirus.... cioè io quando aggiungo una voce nel file hosts, la metto per impedire la connessione a quel sito, giusto? ecco, in questo caso lui ha l'accesso negato a tutti quei siti...
|
![]() |
![]() |
![]() |
Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 23:42.