Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Si aprono finestre pop-up...vi posto il log di hijackthis... Graize

Si aprono finestre pop-up...vi posto il log di hijackthis... Graize Opzioni
Topic Precedente · Topic Sucessivo
peace_and_love
Inviato: Thursday, April 16, 2009 6:18:44 PM
Rank: Member

Iscritto dal : 10/21/2004
Posts: 13
Salve, da un 4-5 giorniredo di ave beccato un virus, cmq non ho problemi se non per il fatto che nonostante abbia il blocco pop-up Alto mi si aprino lo stesso quando navigo su internet, indirizzandomi su altri siti. ho fatto una bella pulizia con diversi antispyware ma niente, vi postoil log...Grazie!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18.06.00, on 16/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Programmi\Avast4\aswUpdSv.exe
C:\Programmi\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\File comuni\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Avast4\ashMaiSv.exe
C:\Programmi\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programmi\ZoneAlarm\zlclient.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\Java\jre6\bin\jusched.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\GRUPPO~2\WINSTA~1\UPS.EXE
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\documents and settings\luigi andrea\impostazioni locali\dati applicazioni\skmeaey.exe
C:\Programmi\FreePOPs\freepopsd.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\ZoneAlarm\MailFrontier\mantispm.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programmi\Windows Live\Mail\wlmail.exe
C:\Programmi\Windows Live\Mail\wlmail.exe
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
C:\Programmi\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Programmi\HijackThis\HijackThis.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programmi\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programmi\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programmi\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AsusStartupHelp] C:\Programmi\ASUS\AASP\1.00.15\AsRunHelp.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programmi\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TritUPSAutoRun] C:\PROGRA~1\GRUPPO~2\WINSTA~1\UPS.EXE
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [skmeaey] "c:\documents and settings\luigi andrea\impostazioni locali\dati applicazioni\skmeaey.exe" skmeaey
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: FreePOPs.lnk = C:\Programmi\FreePOPs\freepopsd.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1220903062140
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: offline-8876480 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodata Limited License Service - Autodata Limited - C:\Programmi\File comuni\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 22970 bytes
Torna in alto
 
Sponsor
Inviato: Thursday, April 16, 2009 6:18:44 PM

 
Torna in alto
 
shapiro
Inviato: Thursday, April 16, 2009 6:35:12 PM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164
Scarica http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe e installalo.
Riavvia il computer in modalità provvisoria: all'avvio del pc, prima che inizi a caricare Windows, premi ripetutamente F8. Uscirà la finestra del menu Opzioni avanzate di Windows
=> scegli modalità provvisoria (usa il tasto freccia ^).

esegui Navilog1 e scegli l'opzione 4, inserisci il nome skmeaey e confermalo ridigitandolo quando richiesto.

(ATTENZIONE , entrambe le volte che lo digiti non devi sbagliare a scrivere il nome altrimenti dovrai ripetere tutta la procedura perchè non verrà eliminato alcun file..).
A questo punto, ripulirà il pc dai file infetti.
Quando finisce, riavvia il pc in modalità normale

Posta il log che trovi in C:\

Da modalità normale, svuota C:\WINDOWS\Prefetch


Avvia hijackthis, con tutte le applicazioni chiuse, premi su Do a system scan only , spunta ed elimina (fix checked) le seguenti righe:

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O4 - HKCU\..\Run: [skmeaey] "c:\documents and settings\luigi andrea\impostazioni locali\dati applicazioni\skmeaey.exe" skmeaey
Torna in alto
 
peace_and_love
Inviato: Friday, April 17, 2009 7:48:52 PM
Rank: Member

Iscritto dal : 10/21/2004
Posts: 13
Ciao Sapphiro, innanzitutto grazie per avermi dedicato del tempo.
Ho fatto alla perfezione cio che mi hai detto, ora ti posto il log del software che mi hai fatti installare e di hijackthis (Ora provero a navigare vedendo se si riaprono altre finestre)
Ps deduco che skmeaey sia un exe da virus giusto?
Cmq ancora grazie!


Clean Navipromo version 3.7.6 commencé le 17/04/2009 à 19.13.44,29

Outil exécuté depuis C:\Programmi\navilog1
Session actuelle : "Administrator"

Mise à jour le 14.03.2009 à 18h00 par IL-MAFIOSO

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : AMD Athlon(tm) 64 X2 Dual Core Processor 3800+ )
BIOS : BIOS Date: 04/30/07 16:21:12 Ver: 08.00.12
USER : Administrator ( Administrator )
BOOT : Fail-safe boot

Antivirus : avast! antivirus 4.8.1335 [VPS 090416-0] 4.8.1335 (Activated)
Firewall : ZoneAlarm Security Suite Firewall 7.0.362.000 (Activated)

A:\ (USB)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:39 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
G:\ (CD or DVD)



Mode suppression par méthode manuelle

Nom du fichier saisi : skmeaey

Nettoyage executé en mode sans échec

*** Recherche, création sauvegardes et suppression ***

* Suppression dans "C:\WINDOWS\system32" *


* Suppression dans "C:\Documents and Settings\Administrator\impost~1\datiap~1" *


* Suppression dans "C:\DOCUME~1\LUIGIA~1\impost~1\datiap~1" *


skmeaey.exe trouvé !
Copie skmeaey.exe réalisée avec succès !
skmeaey.exe supprimé !

skmeaey.dat trouvé !
Copie skmeaey.dat réalisée avec succès !
skmeaey.dat supprimé !

skmeaey_nav.dat trouvé !
Copie skmeaey_nav.dat réalisée avec succès !
skmeaey_nav.dat supprimé !

skmeaey_navps.dat trouvé !
Copie skmeaey_navps.dat réalisée avec succès !
skmeaey_navps.dat supprimé !


*** Suppression dossiers dans "C:\WINDOWS" ***


*** Suppression dossiers dans "C:\Programmi" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menuav~1\progra~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\All Users\menuav~1" ***


*** Suppression dossiers dans "c:\docume~1\alluse~1\datiap~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Administrator\datiap~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUIGIA~1\datiap~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Administrator\impost~1\datiap~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUIGIA~1\impost~1\datiap~1" ***


*** Suppression dossiers dans "C:\Documents and Settings\Administrator\menuav~1\progra~1" ***


*** Suppression dossiers dans "C:\DOCUME~1\LUIGIA~1\menuav~1\progra~1" ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Administrator\impost~1\Temp effectué !

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

2)Recherche, création sauvegardes et suppression Heuristique :


* Dans "C:\WINDOWS\system32" *


* Dans "C:\Documents and Settings\Administrator\impost~1\datiap~1" *


* Dans "C:\DOCUME~1\LUIGIA~1\impost~1\datiap~1" *


*** Sauvegarde du Registre vers dossier Safebackup ***

sauvegarde du Registre réalisée avec succès !

*** Nettoyage Registre ***

Nettoyage Registre Ok


*** Certificats ***

Certificat Egroup absent !
Certificat Electronic-Group absent !
Certificat Montorgueil absent !
Certificat OOO-Favorit absent !
Certificat Sunny-Day-Design-Ltdt absent !

*** Recherche autres dossiers et fichiers connus ***



*** Nettoyage terminé le 17/04/2009 à 19.16.28,60 ***






Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19.42.46, on 17/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Avast4\aswUpdSv.exe
C:\Programmi\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\File comuni\Autodata Limited Shared\Service\ADCDLicSvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Avast4\ashMaiSv.exe
C:\Programmi\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\ZoneAlarm\zlclient.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\Java\jre6\bin\jusched.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\GRUPPO~2\WINSTA~1\UPS.EXE
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\Programmi\FreePOPs\freepopsd.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programmi\ZoneAlarm\MailFrontier\mantispm.exe
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
C:\Programmi\Windows Live\Contacts\wlcomm.exe
C:\Programmi\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programmi\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programmi\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programmi\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AsusStartupHelp] C:\Programmi\ASUS\AASP\1.00.15\AsRunHelp.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programmi\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TritUPSAutoRun] C:\PROGRA~1\GRUPPO~2\WINSTA~1\UPS.EXE
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Global Startup: FreePOPs.lnk = C:\Programmi\FreePOPs\freepopsd.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1220903062140
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: offline-8876480 - {87E500B2-ACFC-4085-84D1-C564B75CD2A9} - C:\Programmi\Logitech Mouse e Tastiera\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodata Limited License Service - Autodata Limited - C:\Programmi\File comuni\Autodata Limited Shared\Service\ADCDLicSvc.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Avast4\ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 22434 bytes
Torna in alto
 
shapiro
Inviato: Friday, April 17, 2009 8:13:42 PM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164
Navilog ha fatto una bella pulizia

falla anche tu con Ccleaner

http://www.filehippo.com/download_ccleaner/

1) per il download dell'ultima versione clicca a destra in alto sotto la freccia verde
2) installalo
3) clicca su "avvia pulizia", ripeti il procedimento 2 volte

poi

scarica Atfcleaner

http://www.atribune.org/ccount/click.php?id=1

Avvia ATFCleaner.exe con un doppio click

1) seleziona la casella Select All
2) clicca sul pulsante Empty selected
3) aspetta l'avviso Done Cleaning.


Si skmeaey e' il nome del virus navipromo che insieme ad altri 3 files con estensione diversa dall' exe si sono insediati nel tuo pc creandoti il problema delle fastidiose pagine.

Spero che tu abbia risolto. Se hai ancora problemi sono qui
Torna in alto
 
peace_and_love
Inviato: Friday, April 17, 2009 8:31:40 PM
Rank: Member

Iscritto dal : 10/21/2004
Posts: 13
Grazie per la tua competenza ma sopratutto per la tua disponibilità!
Mi hai risolto un problema molto fastidioso.
Se sono iscritto dal '04 ci sarà un motivo... Grazie infinite a te e a tutto lo staff (o agli amici per l' appunto)
Torna in alto
 
Utenti presenti in questo topic
Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Si aprono finestre pop-up...vi posto il log di hijackthis... Graize


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.