Problema System

[master84]

Ragazzi ho da poco notato aprendo il task menager che l'utilizzo della cpu e' sempre sopra il 50% ed e' utilizzato da System...


ke vorrebbe dire cio'?

grazie

[master84]

aiutatemi heheh

[master84]

[master84]

niente nn cambia


ma secondo me quei lsass smss csrss

non sono molto normali, io nn li ho mai visti e se provo a chiuderli dice



processo di sistema critico impossibile terminarlo

[master84]

dopo una scansione completa

niente.. nn cambia

[master84]

ah c'e' da dire ke in una differente partizione ultimamente avevo installato vista..

sul task d vista le cpu erano ad uso vicino allo 0% mentre in xp sempre almeno a 50% come nel grafici...

ho deciso quindi d formattare la partizione windows vista pensando ci fosse un conflitto di sistemi operativi o di memorie virtuali (tralaltro vista nn mi riconosceva il mouse), ma nn e' cambiato nulla

[master84]

ragazzi aiutatemi!!

[Andi89]

è quasi sicuramente un virus... chiedi nella sezione Virus e sicurezza... o formatta xp... scegli tu

[master84]

Originariamente inviato da Andi89

è quasi sicuramente un virus... chiedi nella sezione Virus e sicurezza... o formatta xp... scegli tu

ragazzi non e' un virus, ho fatto scansione profonda con NOD32 e spyware adware...

non si risolve

cmq sull'altra partizione di windows vista nn c'e' il carico del file system


perke???

se fosse un virus ci sarebbe in entrambi i sistemi operativi


non puo' essere un conflitto ??
ho gia provato a formattare la partizione Vista, ma niente!

[master84]

Logfile of HijackThis v1.99.1
Scan saved at 19.46.25, on 08/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Eset\nod32kui.exe
C:\Programmi\ATI Technologies\ATI.ACE\CLI.EXE
C:\FRAPS\FRAPS.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\MSI\Core Center\CoreCenter.exe
C:\Programmi\ATI Technologies\ATI.ACE\cli.exe
C:\Programmi\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\PSIService.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Programmi\DAP\DAP.EXE
C:\Documents and Settings\Bonazzi Lorenzo\Documenti\My Completed Downloads\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~3\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O4 - HKLM\..\Run: [ATICCC] "C:\Programmi\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Fraps] C:\FRAPS\FRAPS.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Window Washer] C:\Programmi\Webroot\Washer\wwDisp.exe
O4 - Global Startup: CoreCenter.lnk = C:\Programmi\MSI\Core Center\CoreCenter.exe
O8 - Extra context menu item: &Clean Traces - C:\Programmi\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Programmi\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\Programmi\DAP\dapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~3\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~3\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~3\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~3\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0F4BB91-4C08-4E38-BE3C-DE8AC230D1D1}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~3\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~3\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~3\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Programmi\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Lite XI\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Programmi\SiSoftware\SiSoftware Sandra Lite XI\RpcSandraSrv.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe

[giannola]

Originariamente inviato da johnp1983

lsass potrebbe essere un trojan...

io ad esempio non ce l'ho attivo nel taskmanager

http://www.liutilities.com/products/...library/lsass/

Non so aiutarti sul come rimuoverlo manualmente... fai una scansione generale del sistema con antivirus e antispyware.

E prova a chiedere nella sezione sugli antivirus.

Ciao!

quando non si sanno le cose, lsass è un processo di sistema
e il bello è che posti dei link senza nemmeno andarli a leggere.
Dove lo vedi che è un virus?
Semmai sasser è un virus che sfrutta questo processo per far riavviare il pc.

[giannola]

Originariamente inviato da master84

R3 - Default URLSearchHook is missing


fixa anche tutte le voci simili (ne hai troppe per nn essere sospette) :
O18 - Protocol: bw+0 - {6CABD55E-4ADD-47F6-B9AF-CAD2D3AE83D6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

fai cmq una scansione con altri av e antispy

se nn trovi ancora niente prova con un antirootkit.

[giannola]

Originariamente inviato da master84

se fosse un virus ci sarebbe in entrambi i sistemi operativi

non è detto.

[c.m.g]

Originariamente inviato da giannola

quando non si sanno le cose, lsass è un processo di sistema
e il bello è che posti dei link senza nemmeno andarli a leggere.
Dove lo vedi che è un virus?
Semmai sasser è un virus che sfrutta questo processo per far riavviare il pc.

mamma mia come ti quoto!!!

[master84]

e come faccio a fare scansione cn altri AV, dove li cago fuori??

boh, ma cmq e' strano ke l'insorgenza del problema coincida cn l'installazione di Vista.. NO?

[giannola]

Originariamente inviato da johnp1983

Il bello è che ti contraddici nell'arco di 4 righe!

se devi flammare puoi anche chiuderla lì, al prossimo verrai segnalato.

se non conosci le cose studiale, lsass è un processo di sistema di win come si evince dal link (che nemmeno hai letto), sasser invece è un worm che attraverso una rpc sfruttando una falla nel suddetto processo costringendolo al riavvio.

[master84]

OK NON RISOLVERO' MAI IL MIO PROBLEMA

[giannola]

Originariamente inviato da master84

OK NON RISOLVERO' MAI IL MIO PROBLEMA

hai seguito le indicazioni che ti ho dato ?
risultato ?

[master84]

Originariamente inviato da giannola

hai seguito le indicazioni che ti ho dato ?
risultato ?

certo scansioni antivirus antispyware...KASPERSKY E NOD32 SCANSIONE PROFONDA

[master84]

ma possibile che nessuno sa dirmi niente in merito a questo problema??


cioe... adesso ho installato di nuovo win xp su un'altra partizione... all'inizio tutto bene.. dopo un po' che l'ho usato mi sono accorto ke il sintomo e' arrivato anke qui



il sintomo del SYSTEM 50%