|
|||||||
|
|
|
 |
|
|
Strumenti |
17-05-2006, 16:17
|
#1 |
|
Senior Member
Iscritto dal: Mar 2005
Città: Genova
Messaggi: 463
|
Eliminare la piaga XXX Adult Key
Ragazzi,
questo dialer continua a tormentarmi, e vi posto il log di hijackThis così potete darmi una mano, se no non so dove sbattere la testa: Logfile of HijackThis v1.99.1 Scan saved at 17.15.53, on 17/05/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\algsys.exe C:\WINDOWS\asn_workshop C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe C:\Programmi\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\Explorer.exe C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\winsock\csrss.exe C:\Programmi\Alwil Software\Avast4\ashWebSv.exe C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe C:\WINDOWS\System32\svchost32.exe C:\WINDOWS\System32\spoolsvc.exe C:\Program Files\spkw.exe C:\WINDOWS\System32\dcomcfg.exe C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe C:\Programmi\MSN Messenger\msnmsgr.exe C:\Programmi\eMule\downloads.exe C:\DOCUME~1\SERENA~1\DATIAP~1\FNTS~1\services.exe C:\Documents and Settings\Serena Dorio\Documenti\?ecurity\m?config.exe C:\WINDOWS\System32\wuauclt.exe C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe C:\Programmi\Mozilla Firefox\firefox.exe c:\xprtbb.exe c:\Program Files\spkw.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Documents and Settings\Serena Dorio\Desktop\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.presario.net/scripts/r...search&ap=b204 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.presario.net/scripts/r...search&ap=b204 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.usefulware.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://gw.virgilio.it/vie/55/200010smau.benvenuto R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti R3 - URLSearchHook: (no name) - {2F4A1189-A93A-83E2-1DD2-F3CA9D22EECA} - C:\WINDOWS\System32\mixt.dll R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\winsock\csrss.exe F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\winsock\csrss.exe O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\mlljj.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Toolbar\01.01.2607.0\it\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [Service] svchost32.exe O4 - HKLM\..\Run: [Systems] C:\WINDOWS\System32\spoolsvc.exe O4 - HKLM\..\Run: [SysTray] c:\Program Files\spkw.exe O4 - HKLM\..\Run: [Microsoft (R) Windows TCP/IP Socket Driver] C:\WINDOWS\winsock\csrss.exe O4 - HKLM\..\RunServices: [Service] svchost32.exe O4 - HKCU\..\Run: [logrun32] C:\WINDOWS\System32\cryptdata.exe O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe" /WinStart O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [Service] svchost32.exe O4 - HKCU\..\Run: [Crdp] "C:\DOCUME~1\SERENA~1\DATIAP~1\FNTS~1\services.exe" -vt yazr O4 - HKCU\..\Run: [Udlb] C:\Documents and Settings\Serena Dorio\Documenti\?ecurity\m?config.exe O4 - Startup: C6 Client.LNK = C:\TinMessenger\TinMessenger.exe O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: DSLMON.lnk = C:\Programmi\SAGEM\SAGEM F@st 800-840\dslmon.exe O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &Translate English Word - res://c:\programmi\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Backward Links - res://c:\programmi\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\programmi\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\programmi\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate Page into English - res://c:\programmi\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE (file missing) O9 - Extra button: Alice - {B19FE739-F95A-466B-9A1B-BDF0EA0BF764} - http://gw.aliceadsl.it/alice (file missing) (HKCU) O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home O15 - Trusted Zone: www.1987324.com O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.co...?1093061662186 O17 - HKLM\System\CCS\Services\Tcpip\..\{9043F602-FC0C-435D-B716-44C24C5DD347}: NameServer = 85.37.17.13 85.38.28.81 O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: mlljj - C:\WINDOWS\SYSTEM32\mlljj.dll O20 - Winlogon Notify: ShellServiceObjectDelayLoad - C:\WINDOWS\system32\mv4ml9h11.dll O23 - Service: asn_workshop - Unknown owner - C:\WINDOWS\asn_workshop O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\U2VyZW5hIERvcmlv\command.exe (file missing) O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe O23 - Service: Network Monitor - Unknown owner - C:\Programmi\Network Monitor\netmon.exe (file missing) O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Remote Procedure Call (RPC) Service (RpcSssvc) - Unknown owner - C:\WINDOWS\System32\RpcSs.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe O23 - Service: Windows TCP/IP Socket Driver (winsck) - Unknown owner - C:\WINDOWS\winsock\csrss.exe Aspetto vostre notizie  BYe 
|
|
|
|
17-05-2006, 16:21
|
#2 | |
|
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 29028
|
Quote:
|
|
|
|
|
|
17-05-2006, 16:32
|
#3 |
|
Senior Member
Iscritto dal: Jun 2005
Città: in lombardia
Messaggi: 8414
|
|
|
|
|
|
17-05-2006, 22:39
|
#4 | |
|
Senior Member
Iscritto dal: Mar 2005
Città: Genova
Messaggi: 463
|
Quote:
|
|
|
|
|
|
17-05-2006, 22:41
|
#5 |
|
Member
Iscritto dal: Nov 2001
Messaggi: 226
|
ehm...juninho85 voleva dire fixa quelle cose che ha segnalato.
|
|
|
|
|
18-05-2006, 08:15
|
#6 | |
|
Senior Member
Iscritto dal: Mar 2005
Città: Genova
Messaggi: 463
|
Quote:
Allora grazie a tutti! Bye |
|
|
|
|
|
18-05-2006, 08:17
|
#7 | |
|
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 29028
|
Quote:
O23 - Service: Windows TCP/IP Socket Driver (winsck) - Unknown owner - C:\WINDOWS\winsock\csrss.exe C:\WINDOWS\winsock\csrss.exe F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\winsock\csrss.exe F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\winsock\csrss.exe O4 - HKLM\..\Run: [Microsoft (R) Windows TCP/IP Socket Driver] C:\WINDOWS\winsock\csrss.exe per caso questo pc è collegato in una LAN?comunque fai il backup prima di procedere |
|
|
|
|
|
21-05-2006, 11:47
|
#8 | |
|
Senior Member
Iscritto dal: Sep 2003
Città: Provincia di Milano
Messaggi: 1903
|
Quote:
 Ciao
__________________
Corsair HX850 - Thermaltake Kandalf LCS - Asus Rampage III Extreme - eVga GTS 450 1GB - 6gb DDR3 Corsair Dominator CL8 + Airflow - Core I7 950 - Auzentech X-Fi Prelude Speakers Focal Chorus 836V & CC800V & 714V - Ampli Onkyo NR3007 - Sub Velodyne CHT-8R - Telecomando Logitech harmony 885 - Philips 42PFL7404H Trattato con: Turf, nvidiageforce, flatterix, SteSantu, Verdeosso, teddyvs, Marci, GrantMills, nem5380, GerryGlee, gj81, astarte... |
|
|
|
|
|
21-05-2006, 20:35
|
#9 |
|
Senior Member
Iscritto dal: Sep 2005
Città: Opinions are like assholes: anybody has one...
Messaggi: 34290
|
__________________
Ну давай !! . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Cina, bugiardo - stolen conto: non paghi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . NON CERCO PIU' UN ALIMENTATORE DECENTE ----------------> LINK |
|
|
|
|
|
| Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 11:52.
