difficolta' di connessione ... virus ?

Tony Hak · 21-10-2005, 21:26

ciao ragazzi ! solo voi mi potete aiutare ! so disperato.. ora vi spiego il problema.. praticamente ho difficolta' a connettermi ad internet..c'ho una adsl a 4 mega. Praticamente mi connette ma nn riesce a verificare il nome utente e la password nonostante siano giusti ! il fatto bello è che faccio scansioni con AVG e con ADWARE .. ma nn si riscontrano virus ..ne' problemi ! con hijackthis mi esce questo :

Logfile of HijackThis v1.99.1
Scan saved at 22.25.32, on 21/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Programmi\iTunes\iTunesHelper.exe
D:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe
D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\user\Menu Avvio\Programmi\Accessori\Utilità di sistema\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\addins\avsrv.dll (file missing)
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Programmi\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programmi\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] D:\Programmi\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "d:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Programmi\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [180ClientStubInstall] "C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe"
O4 - Startup: PartMetBackup.lnk = D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Download with &DAP - D:\programmi\DAP\dapextie.htm
O8 - Extra context menu item: &eBay Search - res://D:\Programmi\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O8 - Extra context menu item: &Translate English Word - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download &all with DAP - D:\programmi\DAP\dapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmi\google\GoogleToolbar2.dll/cmtrans.html
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} (DownloaderActiveX Control) - http://c6.community.virgilio.it/down...derActiveX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6666BF-015D-4F31-A018-41D5EE7B89F1}: NameServer = 193.70.152.15 193.70.152.25
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avsrv - C:\WINDOWS\addins\avsrv.dll (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

Che devo eliminare ? ho paura di fare guai ! .grazie mille ! ciao !

ah cmq..dimenticavo ..quando dopo diversi tentativi riesco a collegarmi .. dopo 5 minuti cade la connessione .. mah ! ciao !

andorra24 · 21-10-2005, 21:43

Fixa:
C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe
O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\addins\avsrv.dll (file missing)
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL
O4 - HKCU\..\Run: [180ClientStubInstall] "C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe"
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avsrv - C:\WINDOWS\addins\avsrv.dll (file missing)

Ti ricordo che Dap contiene degli spywares e inoltre spero che tu ti sia ricordato di escludere l'adware durante l'installazione di MsgPlus. Se non l'hai fatto allora cerca di disinstallarlo. Ti consiglio anche una scansione con ewido : http://download.ewido.net/ewido-setup.exe

Stereogab · 21-10-2005, 21:43

ti ho risposto nel3d ufficiale (mia sign)

Stereogab · 21-10-2005, 21:50

Quote:

Originariamente inviato da andorra24

Fixa:
C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe
O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\addins\avsrv.dll (file missing)
O4 - HKCU\..\Run: [180ClientStubInstall] "C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe"
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: avsrv - C:\WINDOWS\addins\avsrv.dll (file missing)

battuto

andorra24 · 21-10-2005, 21:57

Quote:

Originariamente inviato da Stereogab

battuto

Ho visto solo adesso che hai postato il suo log anche nel thread in rilievo.

Stereogab · 21-10-2005, 22:03

Quote:

Originariamente inviato da andorra24

Ho visto solo adesso che hai postato il suo log anche nel thread in rilievo.

il bello è che per prudenza ho editato delle voci
che non avevo visto nella tua lista (non sia mai)
ora vedo che ce le hai aggiunte

:

andorra24 · 21-10-2005, 22:10

Quote:

Originariamente inviato da Stereogab

il bello è che per prudenza ho editato delle voci
che non avevo visto nella tua lista (non sia mai)
ora vedo che ce le hai aggiunte

:

Si, ho ricontrollato il log e ho avvistato un'altra voce da fixare e poi ho aggiunto il consiglio di una scansioncina con ewido che non guasta mai.

Stereogab · 21-10-2005, 22:12

Quote:

Originariamente inviato da andorra24

Si, ho ricontrollato il log e ho avvistato un'altra voce da fixare e poi ho aggiunto il consiglio di una scansioncina con ewido che non guasta mai.

si era questa
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL

credevo di aver cannato

andorra24 · 21-10-2005, 22:18

Quote:

Originariamente inviato da Stereogab

si era questa
O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL

credevo di aver cannato

E' un fastidioso adware che e' meglio eliminare

Tony Hak · 21-10-2005, 22:28

sto seguendo i vostri gentili consigli ..ma la mia battaglia contro il MALIGNO la sto perdendo !

! che faccio ? uffi !

Stereogab · 21-10-2005, 22:30

Quote:

Originariamente inviato da Tony Hak

sto seguendo i vostri gentili consigli ..ma la mia battaglia contro il MALIGNO la sto perdendo !

! che faccio ? uffi !

cioè?
non riesci a fare il fix?
prova in mod provvisoria

Tony Hak · 22-10-2005, 08:02

raga..stamane la connessione mi funziona normalmente .. sembra che il virus abbia dei tempi .. perche' la mattina si collega sempre e nn ha problemi .... ne devo aprofittare per chiedervi aiuto e magari risolvere il tutto questa mattina .. ieri sera è stato un incubo e sono andato a letto sconfitto e deluso (studio informatica .. immaginate che sconforto che ho provato

) .. ho notato che ho un file chiamato sais.exe in c:documents&s ... potrebbe essere questo file la causa di tutto ? grazie della vostra cortese attenzione

dopo aver seguito i vostri suggerimenti ora su HJackthis mi compare questo

Logfile of HijackThis v1.99.1
Scan saved at 9.05.11, on 22/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\UAService7.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
D:\Programmi\iTunes\iTunesHelper.exe
D:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\user\Menu Avvio\Programmi\Accessori\Utilità di sistema\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Programmi\Google\Google Desktop Search\GoogleDesktopIE.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programmi\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iTunesHelper] D:\Programmi\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "d:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Programmi\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - Startup: PartMetBackup.lnk = D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Download with &DAP - D:\programmi\DAP\dapextie.htm
O8 - Extra context menu item: &eBay Search - res://D:\Programmi\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download &all with DAP - D:\programmi\DAP\dapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\programmi\google\GoogleToolbar2.dll/cmtrans.html
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} (DownloaderActiveX Control) - http://c6.community.virgilio.it/down...derActiveX.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6666BF-015D-4F31-A018-41D5EE7B89F1}: NameServer = 193.70.152.15 193.70.152.25
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe
O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe

devo fixare ancora qualcosa

(poi un giorno sapro' utilizzare questo comodo programma)

andorra24 · 22-10-2005, 08:04

Quote:

Originariamente inviato da Tony Hak

ho notato che ho un file chiamato sais.exe in c:documents&s ... potrebbe essere questo file la causa di tutto ? grazie della vostra cortese attenzione

Ma il fix delle voci che ti ho indicato sopra l'hai fatto?

Tony Hak · 22-10-2005, 08:06

si .. leggi su

andorra24 · 22-10-2005, 08:14

Il log e' pulito. Pero' ti ricordo che Dap contiene spyware e MessengerPlus contiene un adware.Ti sei ricordato di escludere l'adware durante l'installazione del MessengerPlus?

Tony Hak · 22-10-2005, 08:16

no .. ma io lo tengo istallato da mesi msnplus e nn mi ha mai dato problemi ... potrebbe essere questa la causa del problema ?

andorra24 · 22-10-2005, 08:20

Quote:

Originariamente inviato da Tony Hak

no .. ma io lo tengo istallato da mesi msnplus e nn mi ha mai dato problemi ... potrebbe essere questa la causa del problema ?

MessengerPlus contiene un adware che gli fa da sponsor ma durante l'installazione c'e' la possibilita' di escluderlo. Se l'hai installato con il suo adware forse ti converrebbe disinstallare MsgPlus dal pannello di controllo. Fai anche una scansione con ewido: http://download.ewido.net/ewido-setup.exe

Tony Hak · 22-10-2005, 08:22

ok .... allora mo disinstallo msnplus e faccio la scansione con il software che mi hai consigliato

.a dopo ! spero di darti buone notizie!

Tony Hak · 22-10-2005, 09:10

oddio ! ewido ha trovato 152 file infetti .. questa è la scansione :

---------------------------------------------------------
ewido security suite - Rapporto Scansione
---------------------------------------------------------

+ Creato il: 10.08.30, 22/10/2005
+ Report-Checksum: 8F197846

+ Risultati scansione:

HKLM\SOFTWARE\Classes\CLSID\{4D1C4E89-A32A-416b-BCDB-33B3EF3617D3} -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\CLSID\{4D1C4E8B-A32A-416b-BCDB-33B3EF3617D3} -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\CLSID\{630D6140-04C5-4db0-B27A-020D766FF09B} -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\CLSID\{9F95F736-0F62-4214-A4B4-CAA6738D4C07} -> Spyware.SaveNow : Pulito con Backup
HKLM\SOFTWARE\Classes\CLSID\{F78B32D6-D6D8-4137-A18F-91EBE1A4AEDB}\TreatAs\\ -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{4D1C4E8A-A32A-416B-BCDB-33B3EF3617D3} -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{4D1C4E8C-A32A-416B-BCDB-33B3EF3617D3} -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423} -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{8578D35E-C6C0-4808-9A80-0F6C29A2C423}\TypeLib\\ -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{9DD19D39-2CDC-465B-BB21-1D433590BA3D} -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{9DD19D39-2CDC-465B-BB21-1D433590BA3D}\TypeLib\\ -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324} -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{BC190DA5-0187-4D99-B3AC-6C45EA1B9324}\TypeLib\\ -> Spyware.HotBar : Pulito con Backup
HKLM\SOFTWARE\Classes\Interface\{C285D18D-43A2-4AEF-83FB-BF280E660A97} -> Spyware.SaveNow : Pulito con Backup
HKLM\SOFTWARE\Classes\MSEvents.MSEvents -> Spyware.VirtuMonde : Pulito con Backup
HKLM\SOFTWARE\Classes\MSEvents.MSEvents\CLSID -> Spyware.VirtuMonde : Pulito con Backup
HKLM\SOFTWARE\Classes\MSEvents.MSEvents\CurVer -> Spyware.VirtuMonde : Pulito con Backup
HKLM\SOFTWARE\Classes\MSEvents.MSEvents.1 -> Spyware.VirtuMonde : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin\CLSID -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin\CLSID\\ -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin\CurVer -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin.1 -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.SettingsPlugin.1\CLSID\\ -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin\CLSID -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin\CLSID\\ -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin\CurVer -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin.1 -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\Need2FindBar.ToolbarPlugin.1\CLSID\\ -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Classes\RunMSC.Loader\CLSID\\ -> Spyware.SaveNow : Pulito con Backup
HKLM\SOFTWARE\Classes\RunMSC.Loader.1\CLSID\\ -> Spyware.SaveNow : Pulito con Backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Need2FindBar Uninstall -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects - Google Desktop Search Backup\{1E1B2879-88FF-11D3-8D96-D7ACAC95951A} -> Spyware.Antispykeylog : Pulito con Backup
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Need2FindBar Uninstall -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Need2Find -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Need2Find\bar -> Spyware.Need2Find : Pulito con Backup
HKLM\SOFTWARE\Need2Find\bar\Partner -> Spyware.Need2Find : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{669695BC-A811-4A9D-8CDF-BA8C795F261C} -> Spyware.PowerStrip : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{E77EDA01-3C56-4a96-8D08-02B42891C169} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{946B3E9E-E21A-49c8-9F63-900533FAFE14} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\ShellBrowser\\{B195B3B3-8A05-11D3-97A4-0004ACA6948E} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{B195B3B3-8A05-11D3-97A4-0004ACA6948E} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10E42047-DEB9-4535-A118-B3F6EC39B807} -> Spyware.SideFind : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25D8BACF-3DE2-4B48-AE22-D659B8D835B0} -> Spyware.RXToolbar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2A8A997F-BB9F-48F6-AA2B-2762D50F9289} -> Spyware.SmartShopper : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4418DD4D-7265-4C32-BC0A-3FDB3C2DA938} -> Spyware.XXXToolbar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4D1C4E81-A32A-416B-BCDB-33B3EF3617D3} -> Spyware.Need2Find : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4E7BD74F-2B8D-469E-90F0-F66AB581A933} -> Spyware.MyWebSearch : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7C559105-9ECF-42B8-B3F7-832E75EDD959} -> Spyware.ISTBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{86227D9C-0EFE-4F8A-AA55-30386A3F5686} -> Spyware.YourSiteBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{946B3E9E-E21A-49C8-9F63-900533FAFE14} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A3FDD654-A057-4971-9844-4ED8E67DBBB8} -> Spyware.ISTBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E77EDA01-3C56-4A96-8D08-02B42891C169} -> Spyware.HotBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F4E04583-354E-4076-BE7D-ED6A80FD66DA} -> Spyware.BargainBuddy : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FAA356E4-D317-42A6-AB41-A3021C6E7D52} -> Spyware.ISTBar : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Need2Find -> Spyware.Need2Find : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\Need2Find\bar -> Spyware.Need2Find : Pulito con Backup
HKU\S-1-5-21-842925246-1715567821-839522115-1003\Software\RX Toolbar -> Spyware.RXToolbar : Pulito con Backup
C:\Documents and Settings\user\Cookies\user@doubleclick[1].txt -> Spyware.Cookie.Doubleclick : Pulito con Backup
C:\Documents and Settings\user\Cookies\user@fastclick[2].txt -> Spyware.Cookie.Fastclick : Pulito con Backup
C:\Documents and Settings\user\Cookies\user@mediaplex[1].txt -> Spyware.Cookie.Mediaplex : Pulito con Backup
C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\Cache\9FDC3CB2d01 -> Heuristic.Win32.Dialer : Pulito con Backup
:mozilla.8:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Pulito con Backup
:mozilla.9:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Pulito con Backup
:mozilla.19:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Doubleclick : Pulito con Backup
:mozilla.23:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Mediaplex : Pulito con Backup
:mozilla.39:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Overture : Pulito con Backup
:mozilla.40:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Overture : Pulito con Backup
:mozilla.41:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Overture : Pulito con Backup
:mozilla.44:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Falkag : Pulito con Backup
:mozilla.65:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Casalemedia : Pulito con Backup
:mozilla.74:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Pulito con Backup
:mozilla.75:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Pulito con Backup
:mozilla.76:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Pulito con Backup
:mozilla.77:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Pulito con Backup
:mozilla.78:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Pulito con Backup
:mozilla.92:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Tribalfusion : Pulito con Backup
:mozilla.105:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.2o7 : Pulito con Backup
:mozilla.106:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.2o7 : Pulito con Backup
:mozilla.107:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.2o7 : Pulito con Backup
:mozilla.108:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.2o7 : Pulito con Backup
:mozilla.130:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Bfast : Pulito con Backup
:mozilla.147:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Adtech : Pulito con Backup
:mozilla.148:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Adtech : Pulito con Backup
:mozilla.151:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Addcontrol : Pulito con Backup
:mozilla.161:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Statcounter : Pulito con Backup
:mozilla.162:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Statcounter : Pulito con Backup
:mozilla.187:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Bluestreak : Pulito con Backup
:mozilla.201:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Valueclick : Pulito con Backup
:mozilla.205:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Targetnet : Pulito con Backup
:mozilla.206:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Com : Pulito con Backup
:mozilla.207:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Com : Pulito con Backup
:mozilla.208:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Atdmt : Pulito con Backup
:mozilla.212:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.213:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.214:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.215:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.216:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.217:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Webtrendslive : Pulito con Backup
:mozilla.221:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Burstnet : Pulito con Backup
:mozilla.222:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Burstnet : Pulito con Backup
:mozilla.223:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Adserver : Pulito con Backup
:mozilla.224:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Adserver : Pulito con Backup
:mozilla.234:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Advertising : Pulito con Backup
:mozilla.235:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Advertising : Pulito con Backup
:mozilla.239:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Fastclick : Pulito con Backup
:mozilla.246:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Pointroll : Pulito con Backup
:mozilla.247:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Pointroll : Pulito con Backup
:mozilla.248:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Pointroll : Pulito con Backup
:mozilla.249:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Pointroll : Pulito con Backup
:mozilla.260:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Hitslink : Pulito con Backup
:mozilla.261:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Hitslink : Pulito con Backup
:mozilla.262:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Hitslink : Pulito con Backup
:mozilla.263:C:\Documents and Settings\user\Dati applicazioni\Mozilla\Firefox\Profiles\pw02npu2.default\cookies.txt -> Spyware.Cookie.Hitslink : Pulito con Backup
C:\Documents and Settings\user\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-1462ab49-6940f803.class -> Trojan.ClassLoader.Dummy.d : Pulito con Backup
C:\Documents and Settings\user\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\file\Dummy.class-7b6e8b4e-6e0e4fc6.class -> Trojan.ClassLoader.Dummy.d : Pulito con Backup
C:\Documents and Settings\user\Impostazioni locali\Dati applicazioni\Wildtangent\Cdacache\00\00\0D.dat/files\wtvh.dll -> Spyware.WildTangent : Pulito con Backup
C:\Documents and Settings\user\Impostazioni locali\Temp\p2psetup.exe -> Spyware.P2PNetworking : Pulito con Backup
C:\Documents and Settings\user\Impostazioni locali\Temp\VVSNInst.exe -> Adware.SaveNow : Pulito con Backup
C:\Documents and Settings\user\Menu Avvio\Programmi\Accessori\Utilità di sistema\backups\backup-20051021-232647-559.dll -> Spyware.MySearch : Pulito con Backup
C:\Programmi\Need2Find -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\N2FFXTBR.JAR -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\N2NTSTBR.JAR -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\N2PLUGIN.DLL -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\NPND2FN.DLL -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\1.bin\PARTNER.DAT -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\Cache -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\Cache\00021534 -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\Cache\files.ini -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\History -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\History\search -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\Settings -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\Need2Find\bar\Settings\prevcfg.htm -> Spyware.Need2Find : Pulito con Backup
C:\Programmi\RXToolBar -> Spyware.RXToolbar : Pulito con Backup
C:\Programmi\RXToolBar\sfcont.bin -> Spyware.RXToolbar : Pulito con Backup
C:\Programmi\ShopperReports -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\Bin -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\Bin\1.0.4.0 -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\Bin\1.0.4.0\ShprRprt.dll_tobedeleted -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\cs -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\cs\persist.dbs -> Spyware.HotBar : Pulito con Backup
C:\Programmi\ShopperReports\uninst.exe -> Spyware.HotBar : Pulito con Backup
C:\RECYCLER\S-1-5-21-842925246-1715567821-839522115-1003\Dc29.exe -> TrojanDownloader.Small.asf : Pulito con Backup
C:\WINDOWS\NDNuninstall6_38.exe -> Spyware.NewDotNet : Pulito con Backup
C:\WINDOWS\system32\rk.bin -> Spyware.RK : Pulito con Backup
C:\WINDOWS\system32\rlls.dll -> Spyware.RK : Pulito con Backup
C:\WINDOWS\system32\rlvknlg.exe -> Spyware.RK : Pulito con Backup
D:\programmi\Nuova cartella\plugins\NPNd2fn.dll -> Spyware.MyWebSearch : Pulito con Backup

::Fine Rapporto

e ora ?

andorra24 · 22-10-2005, 09:14

Avevi parecchie schifezze nel pc ma ewido ti ha dato una bella ripulita. Il pc adesso come va?

21-10-2005, 21:26	#1
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	difficolta' di connessione ... virus ? ciao ragazzi ! solo voi mi potete aiutare ! so disperato.. ora vi spiego il problema.. praticamente ho difficolta' a connettermi ad internet..c'ho una adsl a 4 mega. Praticamente mi connette ma nn riesce a verificare il nome utente e la password nonostante siano giusti ! il fatto bello è che faccio scansioni con AVG e con ADWARE .. ma nn si riscontrano virus ..ne' problemi ! con hijackthis mi esce questo : Logfile of HijackThis v1.99.1 Scan saved at 22.25.32, on 21/10/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\nvsvc32.exe C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe D:\Programmi\iTunes\iTunesHelper.exe D:\Programmi\MessengerPlus! 3\MsgPlus.exe C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe C:\Programmi\File comuni\Real\Update_OB\realsched.exe D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe C:\Programmi\iPod\bin\iPodService.exe C:\WINDOWS\system32\ctfmon.exe C:\Programmi\Messenger\msmsgs.exe C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe C:\Programmi\Internet Explorer\iexplore.exe C:\Programmi\MSN Messenger\msnmsgr.exe C:\Documents and Settings\user\Menu Avvio\Programmi\Accessori\Utilità di sistema\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.repubblica.it/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\addins\avsrv.dll (file missing) O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Programmi\Google\Google Desktop Search\GoogleDesktopIE.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programmi\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] D:\Programmi\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [MessengerPlus3] "d:\Programmi\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [IncrediMail] C:\Programmi\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [180ClientStubInstall] "C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe" O4 - Startup: PartMetBackup.lnk = D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm O8 - Extra context menu item: &Download with &DAP - D:\programmi\DAP\dapextie.htm O8 - Extra context menu item: &eBay Search - res://D:\Programmi\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN O8 - Extra context menu item: &Translate English Word - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download &all with DAP - D:\programmi\DAP\dapextie2.htm O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\programmi\google\GoogleToolbar2.dll/cmtrans.html O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} (DownloaderActiveX Control) - http://c6.community.virgilio.it/down...derActiveX.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6666BF-015D-4F31-A018-41D5EE7B89F1}: NameServer = 193.70.152.15 193.70.152.25 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: avsrv - C:\WINDOWS\addins\avsrv.dll (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe Che devo eliminare ? ho paura di fare guai ! .grazie mille ! ciao ! ah cmq..dimenticavo ..quando dopo diversi tentativi riesco a collegarmi .. dopo 5 minuti cade la connessione .. mah ! ciao ! __________________ Ultima modifica di Tony Hak : 21-10-2005 alle 21:35.

21-10-2005, 21:43	#2
andorra24 Senior Member Iscritto dal: May 2005 Città: Palermo Messaggi: 6390	Fixa: C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe O2 - BHO: MSEvents Object - {44240BB5-BD7D-4D49-A1AA-8AB0F3D3CB44} - C:\WINDOWS\addins\avsrv.dll (file missing) O2 - BHO: Need2Find Bar BHO - {4D1C4E81-A32A-416b-BCDB-33B3EF3617D3} - C:\Programmi\Need2Find\bar\1.bin\ND2FNBAR.DLL O4 - HKCU\..\Run: [180ClientStubInstall] "C:\DOCUME~1\user\IMPOST~1\Temp\sais.exe" O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: avsrv - C:\WINDOWS\addins\avsrv.dll (file missing) Ti ricordo che Dap contiene degli spywares e inoltre spero che tu ti sia ricordato di escludere l'adware durante l'installazione di MsgPlus. Se non l'hai fatto allora cerca di disinstallarlo. Ti consiglio anche una scansione con ewido : http://download.ewido.net/ewido-setup.exe Ultima modifica di andorra24 : 21-10-2005 alle 21:56.

21-10-2005, 22:28	#10
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	sto seguendo i vostri gentili consigli ..ma la mia battaglia contro il MALIGNO la sto perdendo ! ! che faccio ? uffi ! __________________

22-10-2005, 08:02	#12
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	rieccomi raga..stamane la connessione mi funziona normalmente .. sembra che il virus abbia dei tempi .. perche' la mattina si collega sempre e nn ha problemi .... ne devo aprofittare per chiedervi aiuto e magari risolvere il tutto questa mattina .. ieri sera è stato un incubo e sono andato a letto sconfitto e deluso (studio informatica .. immaginate che sconforto che ho provato ) .. ho notato che ho un file chiamato sais.exe in c:documents&s ... potrebbe essere questo file la causa di tutto ? grazie della vostra cortese attenzione dopo aver seguito i vostri suggerimenti ora su HJackthis mi compare questo Logfile of HijackThis v1.99.1 Scan saved at 9.05.11, on 22/10/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\system32\nvsvc32.exe C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\UAService7.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe D:\Programmi\iTunes\iTunesHelper.exe D:\Programmi\MessengerPlus! 3\MsgPlus.exe C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe C:\Programmi\File comuni\Real\Update_OB\realsched.exe D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Programmi\Messenger\msmsgs.exe D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe C:\Programmi\iPod\bin\iPodService.exe C:\Programmi\Internet Explorer\iexplore.exe C:\Documents and Settings\user\Menu Avvio\Programmi\Accessori\Utilità di sistema\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: IeCaptureBho Object - {7c1ce531-09e9-4fc5-9803-1c2956615786} - C:\Programmi\Google\Google Desktop Search\GoogleDesktopIE.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programmi\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.4000.1001\it\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [iTunesHelper] D:\Programmi\iTunes\iTunesHelper.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [MessengerPlus3] "d:\Programmi\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\I-Storm USB ADSL Modem\CnxDslTb.exe" O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] D:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [IncrediMail] C:\Programmi\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background O4 - Startup: PartMetBackup.lnk = D:\programmi\Java\j2re1.4.2_04\bin\javaw.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm O8 - Extra context menu item: &Download with &DAP - D:\programmi\DAP\dapextie.htm O8 - Extra context menu item: &eBay Search - res://D:\Programmi\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html O8 - Extra context menu item: Download &all with DAP - D:\programmi\DAP\dapextie2.htm O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Similar Pages - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\programmi\google\GoogleToolbar2.dll/cmtrans.html O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: {C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} (DownloaderActiveX Control) - http://c6.community.virgilio.it/down...derActiveX.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{8C6666BF-015D-4F31-A018-41D5EE7B89F1}: NameServer = 193.70.152.15 193.70.152.25 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcDataSrv.exe O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - d:\Programmi\SiSoftware\SiSoftware Sandra Lite 2005.SR2a\RpcSandraSrv.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe devo fixare ancora qualcosa (poi un giorno sapro' utilizzare questo comodo programma) __________________ Ultima modifica di Tony Hak : 22-10-2005 alle 08:06.

22-10-2005, 08:06	#14
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	si .. leggi su __________________

21-10-2005, 21:43	#3
Stereogab Senior Member Iscritto dal: Aug 2005 Città: quella di Dante Messaggi: 841	ti ho risposto nel3d ufficiale (mia sign)

22-10-2005, 08:14	#15
andorra24 Senior Member Iscritto dal: May 2005 Città: Palermo Messaggi: 6390	Il log e' pulito. Pero' ti ricordo che Dap contiene spyware e MessengerPlus contiene un adware.Ti sei ricordato di escludere l'adware durante l'installazione del MessengerPlus?

22-10-2005, 08:16	#16
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	no .. ma io lo tengo istallato da mesi msnplus e nn mi ha mai dato problemi ... potrebbe essere questa la causa del problema ? __________________

22-10-2005, 08:22	#18
Tony Hak Senior Member Iscritto dal: Jun 2005 Città: Napoli Messaggi: 1661	ok .... allora mo disinstallo msnplus e faccio la scansione con il software che mi hai consigliato .a dopo ! spero di darti buone notizie! __________________

22-10-2005, 09:14	#20
andorra24 Senior Member Iscritto dal: May 2005 Città: Palermo Messaggi: 6390	Avevi parecchie schifezze nel pc ma ewido ti ha dato una bella ripulita. Il pc adesso come va?

Strumenti
Mostra una versione stampabile Invia questa pagina per email