|
|||||||
|
|
|
 |
|
|
Strumenti |
03-06-2007, 09:16
|
#1 |
|
Junior Member
Iscritto dal: Jun 2007
Messaggi: 5
|
Problema Virus/Dialer
Ciao a tutti, da qualche giorno mi si apre in automatico le pagine di explorer con il seguente link http://www.12345678901234567891.com/...n=A306B039C001
Chi mi può aiutare a cancellare sta roba? Grazie a chiunque mi aiuti Logfile of HijackThis v1.99.1 Scan saved at 1.47.34, on 03/06/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\ctfmon.exe C:\Programmi\MSN Messenger\MsnMsgr.Exe C:\VEXPLITE\viritsvc.exe C:\Programmi\Internet Explorer\iexplore.exe C:\Documents and Settings\Ivano.IVANO-D15D171DB\Desktop\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O1 - Hosts: 89.186.66.247 L2authd.lineage2.com O1 - Hosts: 89.186.66.247 L2testauthd.lineage2.com O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {564F69EA-71AF-432D-83A0-63651DE36503} - C:\WINDOWS\system32\ssqrr.dll (file missing) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B2030C9A-DE59-457D-A042-D827AD69C8F3} - C:\WINDOWS\system32\cbxwwwx.dll O2 - BHO: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} - C:\WINDOWS\DLP.dll O2 - BHO: (no name) - {CB85ED50-6CF2-4B95-B210-9423199FC599} - C:\WINDOWS\system32\sstqr.dll O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmi\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [VIRIT LITE MONITOR] C:\VEXPLITE\MONLITE.EXE O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [BitTorrent] "C:\Programmi\BitTorrent\bittorrent.exe" --force_start_minimized O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\reader_sl.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O15 - Trusted Zone: *.whataboutarabit.com O17 - HKLM\System\CCS\Services\Tcpip\..\{B45664CC-D032-45EF-BBF1-86BDC8B6C99B}: NameServer = 85.37.17.4 85.38.28.70 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - AppInit_DLLs: O20 - Winlogon Notify: cbxwwwx - C:\WINDOWS\SYSTEM32\cbxwwwx.dll O20 - Winlogon Notify: ssqrr - C:\WINDOWS\system32\ssqrr.dll (file missing) O20 - Winlogon Notify: sstqr - C:\WINDOWS\system32\sstqr.dll O20 - Winlogon Notify: winbug32 - C:\WINDOWS\SYSTEM32\winbug32.dll O23 - Service: Virit eXplorer Lite (viritsvclite) - TG Soft Sas www.tgsoft.it - C:\VEXPLITE\viritsvc.exe |
|
|
|
03-06-2007, 09:22
|
#2 | |
|
Senior Member
Iscritto dal: Feb 2006
Città: Perugia
Messaggi: 1340
|
Quote:
O2 - BHO: (no name) - {564F69EA-71AF-432D-83A0-63651DE36503} - C:\WINDOWS\system32\ssqrr.dll (file missing) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: (no name) - {B2030C9A-DE59-457D-A042-D827AD69C8F3} - C:\WINDOWS\system32\cbxwwwx.dll O2 - BHO: CDLPObj Object - {BE2ED590-CA49-46B5-8CCE-244FB2E0D1AA} - C:\WINDOWS\DLP.dll O2 - BHO: (no name) - {CB85ED50-6CF2-4B95-B210-9423199FC599} - C:\WINDOWS\system32\sstqr.dll O15 - Trusted Zone: *.whataboutarabit.com O20 - AppInit_DLLs: O20 - Winlogon Notify: cbxwwwx - C:\WINDOWS\SYSTEM32\cbxwwwx.dll O20 - Winlogon Notify: ssqrr - C:\WINDOWS\system32\ssqrr.dll (file missing) O20 - Winlogon Notify: sstqr - C:\WINDOWS\system32\sstqr.dll O20 - Winlogon Notify: winbug32 - C:\WINDOWS\SYSTEM32\winbug32.dll Se alcuni nn riesci ad eliminarli usa the avenger. Poi scusa una cosa, ma tu sei senza antivirus?????????????????????????? |
|
|
|
|
|
03-06-2007, 09:30
|
#3 |
|
Junior Member
Iscritto dal: Jun 2007
Messaggi: 5
|
Ho formattato da poco ed ancora stavo decidendo che antivirus mettere ..
Questo e' il log che ho fatto dopo che ho fixato quello che mi hai detto: Logfile of HijackThis v1.99.1 Scan saved at 10.29.04, on 03/06/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\ctfmon.exe C:\Programmi\MSN Messenger\MsnMsgr.Exe C:\Programmi\Mozilla Firefox\firefox.exe C:\Programmi\Internet Explorer\iexplore.exe C:\Documents and Settings\Ivano.IVANO-D15D171DB\Desktop\hijackthis_199\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O1 - Hosts: 89.186.66.247 L2authd.lineage2.com O1 - Hosts: 89.186.66.247 L2testauthd.lineage2.com O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe" O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmi\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [BitTorrent] "C:\Programmi\BitTorrent\bittorrent.exe" --force_start_minimized O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\reader_sl.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{B45664CC-D032-45EF-BBF1-86BDC8B6C99B}: NameServer = 85.37.17.4 85.38.28.70 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL |
|
|
|
|
03-06-2007, 10:26
|
#4 | |
|
Senior Member
Iscritto dal: Feb 2006
Città: Perugia
Messaggi: 1340
|
Quote:
|
|
|
|
|
|
03-06-2007, 10:54
|
#5 |
|
Senior Member
Iscritto dal: Feb 2007
Città: Spira, Zanarkand
Messaggi: 394
|
Concordo con nispo, comunque, non dovresti avere più problemi.
|
|
|
|
|
03-06-2007, 11:00
|
#6 |
|
Junior Member
Iscritto dal: Jun 2007
Messaggi: 5
|
Il problema persiste ... ora sto scaricando antivir .. farò una scansione vediamo che trova
|
|
|
|
|
08-06-2007, 19:05
|
#7 |
|
Senior Member
Iscritto dal: Jun 2007
Messaggi: 1315
|
Anche se può sembrare stupido, se fossi in te non userei internet Explorer, io uso Opera e mi trovo bene...trovo meno cookie con spyware terminator ed è leggermente più veloce...
Un'altra opzione buona oltre ad Opera può essere Mozilla... 
|
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 01:32.
