Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » mi controllate il log di hijack

2 pages: 1 [2]
mi controllate il log di hijack Opzioni
Topic Precedente · Topic Sucessivo
fdaccc
Inviato: Sunday, January 10, 2010 5:24:53 PM

Rank: AiutAmico

Iscritto dal : 12/12/2009
Posts: 2,114
Un piccolo consiglio:
dopo che r16 ti avrà aiutato a risolvere i tuoi problemi, installa il Service Pack 3:
http://www.microsoft.com/downloads/details.aspx?FamilyID=5B33B5A8-5E76-401F-BE08-1E1555D4F3D4&displaylang=it
Torna in alto
 
alsos
Inviato: Sunday, January 10, 2010 6:15:24 PM

Rank: AiutAmico

Iscritto dal : 3/1/2009
Posts: 325
fdaccc va da sauron e lascia questa sezione.
Torna in alto
 
cbbusto
Inviato: Sunday, January 10, 2010 6:21:29 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
alsos ha scritto:
fdaccc va da sauron e lascia questa sezione.


ma dove hai preso quell'immagine?????
Torna in alto
 
fdaccc
Inviato: Sunday, January 10, 2010 6:25:35 PM

Rank: AiutAmico

Iscritto dal : 12/12/2009
Posts: 2,114
non insultare per favore
Torna in alto
 
alsos
Inviato: Sunday, January 10, 2010 6:28:07 PM

Rank: AiutAmico

Iscritto dal : 3/1/2009
Posts: 325
cbbusto è la foto della mia carta d'identità
Torna in alto
 
fdaccc
Inviato: Sunday, January 10, 2010 6:30:18 PM

Rank: AiutAmico

Iscritto dal : 12/12/2009
Posts: 2,114
allora sei messo male amico
Torna in alto
 
cbbusto
Inviato: Sunday, January 10, 2010 6:42:00 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
alsos ha scritto:
cbbusto è la foto della mia carta d'identità

Attento, perchè se vai in aeroporto...ti bloccano..EHEHEH!!!

Ti riferisci a questo: Sauron è un Maia, uno spirito "angelico" della mitologia creata da Tolkien ?
Torna in alto
 
alsos
Inviato: Sunday, January 10, 2010 6:56:49 PM

Rank: AiutAmico

Iscritto dal : 3/1/2009
Posts: 325
sì
cambio avatar?

"/>
Torna in alto
 
cbbusto
Inviato: Sunday, January 10, 2010 6:59:55 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
alsos ha scritto:
sì
cambio avatar?

"/>


Beh..decisamente meglio Drool Drool Applause
Torna in alto
 
r16
Inviato: Sunday, January 10, 2010 10:26:35 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
@sgu85

Dovrai mettere le mani sull'Editor del Registro.
Start
> Esegui
> nella casella di dialogo digita regedit per accedere al Registro di Sistema, e segui questo percorso cliccando sul + di ogni voce:

> HKEY_LOCAL_MACHINE
> SOFTWARE
> Microsoft
> Windows NT
> CurrentVersion
> Winlogon

clicca sopra la cartellina winlogon una sola volta e, nella finestra di destra, individua questa chiave: (la trovi, quasi a fondo pagina)

UserInit=C:\WINDOWS\system32\userinit.exe,E:\msw0vks.exe,

clicca 2 volte su UserInit e, nella finestra di dialogo che si aprirà, cancella, manualmente solo questa parte di chiave:

E:\msw0vks.exe,

Il risultato finale, deve essere questo:

Userinit

Dati valore:
C:\WINDOWS\system32\userinit.exe, (virgola finale compresa.)

conferma la modifica con OK

Poi:
Sempre nella stessa pagina, (poche voci sopra Userinit) trovi la voce :Shell=explorer.exe C:\WINDOWS\system32\mswinvks.exe

Devi fare la stessa cosa: eliminare SOLO la voce in rosso:
C:\WINDOWS\system32\mswinvks.exe
Il risultato finale deve essere:
Nome Valore:
Shell
Dati valore:
explorer.exe

Riavvia il pc.
Riaccedi all'Editor del registro, e controlla se la modifica, è avvenuta con successo.
Se commetti qualche errore, potresti NON poter più, accedere a Windows.
Se NON te la senti dimmelo, ma se segui ALLA LETTERA, e con attenzione le indicazioni, non puoi sbagliare.
Piuttosto, se hai dubbi, chiedi.
Torna in alto
 
sgu85
Inviato: Monday, January 11, 2010 1:34:55 PM
Rank: Member

Iscritto dal : 1/10/2010
Posts: 17
Ho eseguito alla lettera le tue indicazioni, il computer si è riacceso e le modifiche sono avvenute con successo! La scritta mswinvks.exe non compare più, però windows media player continua a "non rispondere" cosiccome internet explorer (sto usando mozilla come broweser, anche se la cosa non mi dispiace affatto!!).
Mi consigli qualcosa da installare oltre al mio antivirus?
Torna in alto
 
r16
Inviato: Monday, January 11, 2010 1:41:10 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Posta un log di hijackthis.
Per Internet Explore prova così:
Apri IE.
Strumenti.
Opzioni Internet.
Avanzate.
Clicca su : Reimposta.
E ancora su Reimposta.

Per windows media player , prova una reistallazione.
Torna in alto
 
sgu85
Inviato: Monday, January 11, 2010 2:36:58 PM
Rank: Member

Iscritto dal : 1/10/2010
Posts: 17
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14.37.14, on 11/01/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\programmi\file comuni\logitech\lvmvfm\LVPrcSrv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\bgsvcgen.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\TOSHIBA\ConfigFree\CFSvcs.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\Programmi\Eset\nod32krn.exe
C:\Programmi\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\stunnel\stunnel.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Programmi\Apoint2K\Apoint.exe
C:\Programmi\TOSHIBA\E-KEY\CeEKey.exe
C:\Programmi\TOSHIBA\TouchPad\TPTray.exe
C:\WINDOWS\system32\ZoomingHook.exe
C:\WINDOWS\system32\TCtrlIOHook.exe
C:\Programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Programmi\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Programmi\TOSHIBA\Touch and Launch\PadExe.exe
C:\Programmi\TOSHIBA\Tvs\TvsTray.exe
C:\Programmi\TOSHIBA\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Programmi\TOSHIBA\ConfigFree\CFSServ.exe
C:\Programmi\Eset\nod32kui.exe
C:\Programmi\QuickTime\QTTask.exe
C:\Programmi\File comuni\Logitech\LComMgr\Communications_Helper.exe
C:\Programmi\Logitech\QuickCam10\QuickCam10.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
C:\Programmi\Java\jre6\bin\jusched.exe
C:\Programmi\File comuni\Logitech\LComMgr\LVComSX.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Programmi\Apoint2K\Apntex.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe
C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
C:\Programmi\Creative\Shared Files\CamTray.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programmi\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\PROGRA~1\FILECO~1\Logitech\LComMgr\LVComSX.exe
C:\Programmi\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\dwwin.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\dwwin.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.mirarsearch.com/?useie5=1&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Programmi\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Programmi\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Mirar - {C5B4EC08-CC17-4F51-B01A-7FB16C2F1107} - C:\WINDOWS\system32\win4a78.dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Apoint] C:\Programmi\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEKEY] C:\Programmi\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Programmi\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [HWSetup] C:\Programmi\TOSHIBA\TOSHIBA Applet\HWSetup.exe hwSetUP
O4 - HKLM\..\Run: [SVPWUTIL] C:\Programmi\Toshiba\Windows Utilities\SVPWUTIL.exe SVPwUTIL
O4 - HKLM\..\Run: [Zooming] ZoomingHook.exe
O4 - HKLM\..\Run: [TCtryIOHook] TCtrlIOHook.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [SmoothView] C:\Programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [PadTouch] C:\Programmi\TOSHIBA\Touch and Launch\PadExe.exe
O4 - HKLM\..\Run: [Tvs] C:\Programmi\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Programmi\File comuni\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Programmi\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe /autorun
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Bar] C:\Documents and Settings\user\Impostazioni locali\Temporary Internet Files\Content.IE5\VFL3FPKW\SETUP[1].exe
O4 - HKLM\..\Run: [LVCOMSX] "C:\Programmi\File comuni\Logitech\LComMgr\LVComSX.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Programmi\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Programmi\Creative\Shared Files\CamTray.exe"
O4 - HKCU\..\Run: [swg] "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [LDM] C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Programmi\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Microsoft Office OneNote 2003 Quick Launch.lnk = C:\Programmi\Microsoft Office\OFFICE11\ONENOTEM.EXE
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Apri in nuova scheda in primo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?d3266f7400654631802c42bc33ebd803
O8 - Extra context menu item: Apri in nuova scheda in secondo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?d3266f7400654631802c42bc33ebd803
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
O16 - DPF: {406B5949-7190-4245-91A9-30A17DE16AD0} (Snapfish Activia) - http://www3.snapfish.it/SnapfishActivia.cab
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O18 - Protocol: bw+0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {770EF6DB-EA4A-43CA-9FE2-F45E3C63F5B6} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: B's Recorder GOLD Library General Service (bgsvcgen) - B.H.A Corporation - C:\WINDOWS\system32\bgsvcgen.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Programmi\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Servizio di Google Update (gupdate1c9b2cf851c4d6e) (gupdate1c9b2cf851c4d6e) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\programmi\file comuni\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Programmi\File comuni\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: stunnel - Unknown owner - C:\Programmi\stunnel\stunnel.exe

--
End of file - 24087 bytes
Torna in alto
 
sgu85
Inviato: Monday, January 11, 2010 2:38:36 PM
Rank: Member

Iscritto dal : 1/10/2010
Posts: 17
il problema è che internet explorer non mi si apre proprio!
Torna in alto
 
cbbusto
Inviato: Monday, January 11, 2010 4:54:35 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
A parte il log di HJT, sul quale non mi pronuncio, ti consiglierei di installare il Service Pack 3, molto utile
e potrebbe risolvere anche il problema di I.E. 8, non so se r16 concorda.
Ciao
Torna in alto
 
r16
Inviato: Monday, January 11, 2010 4:59:18 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
cbbusto ha scritto:
A parte il log di HJT, sul quale non mi pronuncio, ti consiglierei di installare il Service Pack 3, molto utile
e potrebbe risolvere anche il problema di I.E. 8, non so se r16 concorda.
Ciao

Altrochè se concordo....Applause

Installa il service pack3 di Windows XP :

http://www.microsoft.com/downloads/details.aspx?FamilyID=5b33b5a8-5e76-401f-be08-1e1555d4f3d4&DisplayLang=it
Torna in alto
 
terremare
Inviato: Monday, January 11, 2010 5:03:02 PM

Rank: AiutAmico

Iscritto dal : 1/12/2009
Posts: 187
cusate l'intromissione .......... Boo hoo! Ben tornato [b] [/ b] R16 Boo hoo!
Torna in alto
 
sgu85
Inviato: Monday, January 11, 2010 6:46:55 PM
Rank: Member

Iscritto dal : 1/10/2010
Posts: 17
scusate la mia infinita ignoranza, ma il service pack 3 che mi avete consigliato di scaricare, è per più computer in una rete. Se si vuole aggiornare un solo computer bisogna seguire un'altra procedura. Scarico comunque quello del link da voi consigliato? Siete degli angeli custodi!!
Torna in alto
 
r16
Inviato: Monday, January 11, 2010 10:59:54 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Tranquillo, scarica quello, che và bene.
Torna in alto
 
sgu85
Inviato: Friday, January 15, 2010 1:02:48 PM
Rank: Member

Iscritto dal : 1/10/2010
Posts: 17
r16 volevo dirti un sentitissimo GRAZIE perchè ora il mio pc è guarito!!!!
Torna in alto
 
Utenti presenti in questo topic
Guest

2 pages: 1 [2]

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » mi controllate il log di hijack


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.