|
|||||||
|
|
|
 |
|
|
Strumenti |
31-03-2006, 18:03
|
#1 |
|
Member
Iscritto dal: Mar 2006
Messaggi: 37
|
secure32.html
 saluti a tutti. è la prima volta che posto e spero di rientrare nelle regole. problema con secure32....chi può per favore dirmi cosa non và e come posso risolvere??? grazie a tutti Logfile of HijackThis v1.99.1 Scan saved at 18.08.21, on 31/03/2006 Platform: Windows ME (Win9x 4.90.3000) MSIE: Internet Explorer v5.50 (5.50.4134.0100) Running processes: C:\WINDOWSB\SYSTEM\KERNEL32.DLL C:\WINDOWSB\SYSTEM\MSGSRV32.EXE C:\WINDOWSB\SYSTEM\mmtask.tsk C:\WINDOWSB\SYSTEM\MPREXE.EXE C:\WINDOWSB\SYSTEM\STIMON.EXE C:\WINDOWSB\SYSTEM\MSTASK.EXE C:\WINDOWSB\EXPLORER.EXE C:\WINDOWSB\TASKMON.EXE C:\WINDOWSB\SYSTEM\SYSTRAY.EXE C:\WINDOWSB\SYSTEM\RMCTRL.EXE C:\WINDOWSB\SYSTEM\SPOOLSVC.EXE C:\PROGRAM FILES\JPUN.EXE C:\WINDOWSB\SYSTEM\SVCHOST.EXE C:\WINDOWSB\SYSTEM\RESTORE\STMGR.EXE C:\WINDOWSB\SYSTEM\WMIEXE.EXE C:\PROGRAMMI\MESSENGER\MSMSGS.EXE C:\ESM2\STMS.EXE C:\WINDOWSB\SYSTEM\PSTORES.EXE C:\ESM2\EBRR.EXE C:\WINDOWSB\SYSTEM\RNAAPP.EXE C:\WINDOWSB\SYSTEM\TAPISRV.EXE C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE C:\WINDOWSB\SYSTEM\DDHELP.EXE C:\DOCUMENTI\PROGRAMMI\HIJACKTHIS.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 loudcash.com O1 - Hosts: 127.0.0.5 iframestat.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 hqcash.com O1 - Hosts: 127.0.0.5 verybigcash.com O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 moviepartnership.com O1 - Hosts: 127.0.0.5 callmachine.com O1 - Hosts: 127.0.0.5 regcash.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 klikrevenue.com O1 - Hosts: 127.0.0.5 p2dll.com O1 - Hosts: 127.0.0.5 t73.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.loudcash.com O1 - Hosts: 127.0.0.5 www.iframestat.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.hqcash.com O1 - Hosts: 127.0.0.5 www.verybigcash.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.moviepartnership.com O1 - Hosts: 127.0.0.5 www.callmachine.com O1 - Hosts: 127.0.0.5 www.regcash.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.klikrevenue.com O1 - Hosts: 127.0.0.5 www.p2dll.com O1 - Hosts: 127.0.0.5 www.t73.com O3 - Toolbar: @msdxmLC.dll,-1@1040,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWSB\SYSTEM\MSDXM.OCX O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWSB\scanregw.exe /autorun O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWSB\taskmon.exe O4 - HKLM\..\Run: [SystemTray] SysTray.Exe O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [RemoteControl] C:\WINDOWSB\SYSTEM\rmctrl.exe O4 - HKLM\..\Run: [Trickler] "c:\windows\temp\gain_trickler_3202.exe" O4 - HKLM\..\Run: [BtStart] C:\Programmi\WIDCOMM\Software Bluetooth\bin\btstart.exe O4 - HKLM\..\Run: [Multimedia Key] C:\PROGRA~2\MED280NT\DriBat32.EXE DKBoot.INI O4 - HKLM\..\Run: [Systems] C:\WINDOWSB\SYSTEM\spoolsvc.exe O4 - HKLM\..\Run: [SysTray] C:\PROGRAM FILES\JPUN.EXE O4 - HKLM\..\Run: [WindowsUpdate] C:\WINDOWSB\SYSTEM\SVCHOST.EXE /s O4 - HKLM\..\Run: [PCHealth] C:\WINDOWSB\PCHealth\Support\PCHSchd.exe -s O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWSB\SYSTEM\STIMON.EXE O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWSB\System\Restore\StateMgr.exe O4 - HKCU\..\Run: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background O4 - HKCU\..\Run: [NBJ] "C:\PROGRAMMI\AHEAD\NERO BACKITUP\NBJ.EXE" O4 - HKCU\..\Run: [Shell] "C:\WINDOWSB\SYSTEM\ibm00003.exe" O4 - HKCU\..\RunServices: [MSMSGS] C:\PROGRA~1\MESSEN~1\msmsgs.exe /background O4 - HKCU\..\RunServices: [NBJ] "C:\PROGRAMMI\AHEAD\NERO BACKITUP\NBJ.EXE" O4 - HKCU\..\RunServices: [Shell] "C:\WINDOWSB\SYSTEM\ibm00003.exe" O4 - Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE O4 - Startup: EPSON Background Monitor.lnk = C:\ESM2\STMS.exe O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000 O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWSB\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWSB\web\related.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE O9 - Extra button: @btrez.dll,-4015@1040,Invia a Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017@1040,Invia a &Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm O15 - Trusted Zone: www.redfunny.com O15 - Trusted Zone: www.skymasters.biz O15 - Trusted Zone: www.archiviosex.net |
|
|
|
31-03-2006, 18:05
|
#2 |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
 andorra a te l'onore 
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
31-03-2006, 18:11
|
#3 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 18:12
|
#4 | |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
Quote:
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
31-03-2006, 18:13
|
#5 |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Fixa:
C:\WINDOWSB\SYSTEM\SPOOLSVC.EXE C:\PROGRAM FILES\JPUN.EXE R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 loudcash.com O1 - Hosts: 127.0.0.5 iframestat.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 hqcash.com O1 - Hosts: 127.0.0.5 verybigcash.com O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 moviepartnership.com O1 - Hosts: 127.0.0.5 callmachine.com O1 - Hosts: 127.0.0.5 regcash.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 klikrevenue.com O1 - Hosts: 127.0.0.5 p2dll.com O1 - Hosts: 127.0.0.5 t73.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.loudcash.com O1 - Hosts: 127.0.0.5 www.iframestat.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.hqcash.com O1 - Hosts: 127.0.0.5 www.verybigcash.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.moviepartnership.com O1 - Hosts: 127.0.0.5 www.callmachine.com O1 - Hosts: 127.0.0.5 www.regcash.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.klikrevenue.com O1 - Hosts: 127.0.0.5 www.p2dll.com O1 - Hosts: 127.0.0.5 www.t73.com O4 - HKLM\..\Run: [Trickler] "c:\windows\temp\gain_trickler_3202.exe" O4 - HKLM\..\Run: [Systems] C:\WINDOWSB\SYSTEM\spoolsvc.exe O4 - HKLM\..\Run: [SysTray] C:\PROGRAM FILES\JPUN.EXE O4 - HKCU\..\Run: [Shell] "C:\WINDOWSB\SYSTEM\ibm00003.exe" O4 - HKCU\..\RunServices: [Shell] "C:\WINDOWSB\SYSTEM\ibm00003.exe" O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWSB\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWSB\web\related.htm O15 - Trusted Zone: www.redfunny.com O15 - Trusted Zone: www.skymasters.biz O15 - Trusted Zone: www.archiviosex.net |
|
|
|
|
31-03-2006, 18:18
|
#6 |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 loudcash.com O1 - Hosts: 127.0.0.5 iframestat.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 hqcash.com O1 - Hosts: 127.0.0.5 verybigcash.com O1 - Hosts: 127.0.0.5 makethemcry.com O1 - Hosts: 127.0.0.5 moviepartnership.com O1 - Hosts: 127.0.0.5 callmachine.com O1 - Hosts: 127.0.0.5 regcash.com O1 - Hosts: 127.0.0.5 toolbarpartner.com O1 - Hosts: 127.0.0.5 klikrevenue.com O1 - Hosts: 127.0.0.5 p2dll.com O1 - Hosts: 127.0.0.5 t73.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.loudcash.com O1 - Hosts: 127.0.0.5 www.iframestat.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.hqcash.com O1 - Hosts: 127.0.0.5 www.verybigcash.com O1 - Hosts: 127.0.0.5 www.makethemcry.com O1 - Hosts: 127.0.0.5 www.moviepartnership.com O1 - Hosts: 127.0.0.5 www.callmachine.com O1 - Hosts: 127.0.0.5 www.regcash.com O1 - Hosts: 127.0.0.5 www.toolbarpartner.com O1 - Hosts: 127.0.0.5 www.klikrevenue.com O1 - Hosts: 127.0.0.5 www.p2dll.com O1 - Hosts: 127.0.0.5 www.t73.com O4 - HKLM\..\Run: [Trickler] "c:\windows\temp\gain_trickler_3202.exe" ma occhio che può non funzionarti qualche applicativo dopo (mi ricorda divxpro5)  O4 - HKLM\..\Run: [Systems] C:\WINDOWSB\SYSTEM\spoolsvc.exe O4 - HKLM\..\Run: [SysTray] C:\PROGRAM FILES\JPUN.EXE questo non lo vedo, scansionalo su www.virustotal.com O4 - HKCU\..\Run: [Shell] "C:\WINDOWSB\SYSTEM\ibm00003.exe" O15 - Trusted Zone: www.redfunny.com O15 - Trusted Zone: www.skymasters.biz O15 - Trusted Zone: www.archiviosex.net
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
31-03-2006, 18:19
|
#7 |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
vedi che era facile???
cmq farei una scansione di controllo con a-squared può essere che ci sia altro e navigherei con firefox
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
31-03-2006, 18:19
|
#8 |
|
Member
Iscritto dal: Mar 2006
Messaggi: 37
|
secure32...un vero incubo
.... forse ora mi darai la tastiera in testa... ma scusa ...come si FIXA ????
grazie |
|
|
|
|
31-03-2006, 18:21
|
#9 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 18:23
|
#10 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 18:24
|
#11 |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
jpun su google non dava niente... sicura sia virus?
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
31-03-2006, 18:29
|
#12 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 18:37
|
#13 | |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
Quote:
cmq se si facesse prima una scansione con ewido o in questo caso per via di ME con asquared non si avrebbero dubbi
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
31-03-2006, 18:40
|
#14 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 18:45
|
#15 | |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
Quote:
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
31-03-2006, 18:57
|
#16 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 19:05
|
#17 |
|
Member
Iscritto dal: Mar 2006
Messaggi: 37
|
about: "fù secur32"
cari Stev-O e Andorra24 oltre che essere stati molto gentili e disponibili siete anche MITICI.. !!!! il buon secure32 è defunto e penso definitivamente.
anche se dovessi metterci degli anni.. come posso e dove più che altro iniziare a smanettare per capirci un po di sicurezza su internet e di file di registro ?? SIETE MITICI e grazie an cora
|
|
|
|
|
31-03-2006, 19:16
|
#18 | |
|
Senior Member
Iscritto dal: May 2005
Città: Palermo
Messaggi: 6390
|
Quote:
|
|
|
|
|
|
31-03-2006, 20:06
|
#19 | |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
Quote:
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
31-03-2006, 20:09
|
#20 | |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
Quote:
       
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 13:17.
