Uno sguardo al mio log

[kiraly78]

Il problema maggiore oltre al fatto che mi lancia i banner pubblicitari ed i link verso siti strani non appena mi arrivano le email di spam ....

dicevo ... il problema principale è il blocco della barra delle applicazioni all'avvio! Dura circa 10 min dopo si sblocca e sembra funzionare tutto correttamente. Nel taskmanager c'è solo la CPU che va in 99% di carico tramite il Ciclo idle di sistema, il resto lo leggete qui sotto.
Grazie in anticipo
Aspetto una vostra notizia prima di iniziare il formattone riparatore.

Altra cosa ... quando mi arrivano le email come faccio ad impedire i pop up che si aprono in auto nel browser?

Logfile of HijackThis v1.97.7
Scan saved at 8.32.46, on 09/03/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\Mixer.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programmi\Messenger\MSMSGS.EXE
C:\Programmi\D-Link AirPlus\AirPlus.exe
C:\Programmi\3M\PSNotes2\Psn2.exe
C:\Programmi\LiberoPOPs\liberopopsd.exe
C:\PROGRA~1\ICQ\ICQ.exe
C:\PROGRA~1\3M\PSNotes2\PSNGive.exe
C:\PROGRA~1\3M\PSNotes2\PsnMSIME.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\taskmgr.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Lavasoft\Ad-aware 6\Ad-aware.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\XpHome\Documenti\Flavio\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = www.searchant.com/sp
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = www.searchant.com/sp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.zestyfind.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.searchant.com/sp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = www.searchant.com/sp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.searchant.com/sp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = www.searchant.com/sp
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = www.searchant.com/r=6&s=%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: XTSearchHook Class - {6E6DD93E-1FC3-4F43-8AFB-1B7B90C9D3EB} - C:\Programmi\Sqwire\s.dll
O1 - Hosts: 207.36.196.189 auto.search.msn.com
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Search Toolbar - {57E69D5A-6539-4d7d-9637-775DE8A385B4} - C:\Programmi\Sqwire\t.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [saSyncMgr] rundll32.exe sasync.dll,SyncWait app=SearchAnt wait=10
O4 - HKLM\..\Run: [Mirabilis ICQ] C:\PROGRA~1\ICQ\ICQNet.exe
O4 - HKLM\..\Run: [SQUpdatesChecker] C:\Programmi\Sqwire\uc.exe
O4 - HKLM\..\Run: [SQConfigChecker] C:\Programmi\Sqwire\cc.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\MSMSGS.EXE" /background
O4 - Startup: LiberoPOPs -v.lnk = C:\Programmi\LiberoPOPs\liberopopsd.exe
O4 - Global Startup: D-Link AirPlus.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes.lnk = C:\Programmi\3M\PSNotes2\Psn2.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Windows Messenger (HKLM)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/s...irector/sw.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (Damage Cleanup Server Control) - http://213.158.72.33/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.co...830.2499421296
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/s...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{96AE6E34-F97C-4A0F-B7B8-A79E952A6094}: NameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{C73211AC-24E6-48D9-8F5C-9DB9AB24DCE5}: NameServer = 212.212.112.112,212.216.172.62

[MrOZ]

Fai prima una scansione con adaware6 e cwshredder aggiornati e poi riposta il log.

Ciao.