Rank: AiutAmico
Iscritto dal : 12/12/2008 Posts: 1,277
|
Noto delle voci-file che non comprendo,pregasi voler darmi qualche suggerimento,grazie:
Logfile of HiJackThis Fork by Alex Dragokas v.2.9.0.26
Platform: x64 Windows 10 (Home), 10.0.18363.1016 (ReleaseId: 1909), Service Pack: 0 Time: 09.09.2020 - 17:33 (UTC+02:00) Language: OS: Italian (0x410). Display: Italian (0x410). Non-Unicode: Italian (0x410) Elevated: Yes Ran by: monte (group: Administrator) on KENSFOLLETT, FirstRun: yes
Chrome: 85.0.4183.83 Edge: 11.0.18362.1016 Internet Explorer: 11.1016.18362.0 Default: "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" -- "%1" (Microsoft Edge)
Boot mode: Normal
Running processes: Number | Path 1 C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe 1 C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe 1 C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe 1 C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe 1 C:\Program Files\AMD\CNext\CNext\amdow.exe 1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe 1 C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe 1 C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 1 C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe 1 C:\Program Files\Synaptics\SynTP\SynTPHelper.exe 1 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20081.117.0_x64__8wekyb3d8bbwe\YourPhone.exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2008.9-0\MsMpEng.exe 1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2008.9-0\NisSrv.exe 1 C:\Users\Gjack Salerno\Downloads\Gjack\HijackThis\HiJackThis.exe 1 C:\Windows\ImmersiveControlPanel\SystemSettings.exe 1 C:\Windows\RtkBtManServ.exe 1 C:\Windows\SysWOW64\SASrv.exe 1 C:\Windows\SysWOW64\UIUSrv.exe 1 C:\Windows\System32\ApplicationFrameHost.exe 1 C:\Windows\System32\CredentialEnrollmentManager.exe 1 C:\Windows\System32\CxAudMsg64.exe 1 C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe 1 C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe 6 C:\Windows\System32\RuntimeBroker.exe 1 C:\Windows\System32\SearchFilterHost.exe 1 C:\Windows\System32\SearchIndexer.exe 1 C:\Windows\System32\SearchProtocolHost.exe 1 C:\Windows\System32\SecurityHealthService.exe 1 C:\Windows\System32\SgrmBroker.exe 1 C:\Windows\System32\audiodg.exe 2 C:\Windows\System32\csrss.exe 1 C:\Windows\System32\ctfmon.exe 1 C:\Windows\System32\dasHost.exe 1 C:\Windows\System32\dllhost.exe 1 C:\Windows\System32\dwm.exe 2 C:\Windows\System32\fontdrvhost.exe 1 C:\Windows\System32\lsass.exe 1 C:\Windows\System32\services.exe 1 C:\Windows\System32\sihost.exe 1 C:\Windows\System32\smartscreen.exe 1 C:\Windows\System32\smss.exe 1 C:\Windows\System32\spoolsv.exe 83 C:\Windows\System32\svchost.exe 1 C:\Windows\System32\taskhostw.exe 1 C:\Windows\System32\usocoreworker.exe 1 C:\Windows\System32\wininit.exe 1 C:\Windows\System32\winlogon.exe 1 C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe 1 C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe 1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe 1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe 1 C:\Windows\explorer.exe
O1 - Hosts: is empty O2 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.44\BHO\ie_to_edge_bho_64.dll O2-32 - HKLM\..\BHO: IEToEdge BHO - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.44\BHO\ie_to_edge_bho.dll O4 - HKCU\..\Run: [Skype for Desktop] = C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe O15 - HKCU\..\ProtocolDefaults: - [@ivt] protocol is in Unknown Zone, should be Intranet Zone O15 - HKCU\..\ProtocolDefaults: - [file] protocol is in Unknown Zone, should be Internet Zone O15 - HKCU\..\ProtocolDefaults: - [ftp] protocol is in Unknown Zone, should be Internet Zone O15 - HKCU\..\ProtocolDefaults: - [http] protocol is in Unknown Zone, should be Internet Zone O15 - HKCU\..\ProtocolDefaults: - [https] protocol is in Unknown Zone, should be Internet Zone O15 - HKCU\..\ProtocolDefaults: - [knownfolder] protocol is in Unknown Zone, should be My Computer Zone O15 - HKCU\..\ProtocolDefaults: - [shell] protocol is in Unknown Zone, should be My Computer Zone O17 - DHCP DNS 1: 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{18387e1a-de49-4823-87ba-8e198fe094e0}: [NameServer] = 8.8.4.4 (Well-known DNS: Google) O17 - HKLM\System\CCS\Services\Tcpip\..\{18387e1a-de49-4823-87ba-8e198fe094e0}: [NameServer] = 8.8.8.8 (Well-known DNS: Google) O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Microsoft) O22 - Task: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Microsoft) O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-1332497676-4034326449-572391256-1001 - C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe O22 - Task: (disabled) \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask - {D2CBF5F7-5702-440B-8D8F-8203034A6B82},$(Arg0) - (no file) O22 - Task: (disabled) \S-1-5-21-1332497676-4034326449-572391256-1001\DataSenseLiveTileTask - C:\WINDOWS\System32\DataUsageLiveTileTask.exe O22 - Task: (update) \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\WINDOWS\system32\MusNotification.exe (Microsoft) O22 - Task: AMD ThankingURL - C:\Program Files\AMD\CIM\Bin64\Setup.exe -LAUNCHTHQURL O22 - Task: AMDLinkUpdate - C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe -AMDLinkUpdate O22 - Task: Adobe Flash Player NPAPI Notifier - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_414_Plugin.exe -check plugin O22 - Task: Adobe Flash Player Updater - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O22 - Task: GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c O22 - Task: GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler O22 - Task: ModifyLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe -UpdateCurrentUser O22 - Task: StartCN - C:\Program Files\AMD\CNext\CNext\cncmd.exe startwithdelay O22 - Task: StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe O23 - Service R2: "Realtek Bluetooth Device Manager Service" ;RtkServ - (RtkBtManServ) - C:\WINDOWS\RtkBtManServ.exe O23 - Service R2: AMD External Events Utility - C:\WINDOWS\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe O23 - Service R2: Conexant Audio Message Service - (CxAudMsg) - C:\WINDOWS\system32\CxAudMsg64.exe O23 - Service R2: Conexant SmartAudio service - (SAService) - C:\WINDOWS\system32\SAsrv.exe (file missing) O23 - Service R2: Conexant UIU Service - (UIUService) - C:\WINDOWS\system32\UIUSrv.exe (file missing) O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe O23 - Service R2: SynTPEnh Caller Service - (SynTPEnhService) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe O23 - Service R2: unchecky - C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe O23 - Service S2: Servizio Google Update (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc O23 - Service S3: Adobe Flash Player Update Service - (AdobeFlashPlayerUpdateSvc) - C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe O23 - Service S3: Google Chrome Elevation Service - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.83\elevation_service.exe O23 - Service S3: Servizio Google Update (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
-- End of file - Time spent: 25 sec. - 16440 bytes, CRC32: FFFFFFFF. Sign: 嶸萅
|
Rank: AiutAmico
Iscritto dal : 11/8/2008 Posts: 13,964
|
E' tutto a posto il log non presenta problemi. Le voci che vedi sono i programmi installati, le voci che si trovano in Windows System, la 01 è una un file vuoto. Tutto il resto sono voci che dovresti conoscere. La 04 è un programma in avvio automatico, le Ø22 - lavoro condiviso in Utilità di pianificazione. Le ultime 023 sono tutti i servizi attivi. Ciao
|
Rank: AiutAmico
Iscritto dal : 12/12/2008 Posts: 1,277
|
Grazie ancora e buona notte.
|