SpySubtract session started ---------------------------------
Machine=USER-R8YM4R2ORJ
Time=Mon Dec 13 23:12:32 2004
Product Version=1, 0, 1, 49
OS Version=Microsoft Windows XP Professional (Build 2600)

--------------------------------- SpySubtract session ended ---------------------------------

--------------------------------- SpySubtract session started ---------------------------------
Machine=USER-R8YM4R2ORJ
Time=Mon Dec 13 23:14:53 2004
Product Version=1, 0, 1, 49
OS Version=Microsoft Windows XP Professional (Build 2600)

Started Scanning
Programs in Memory
Finished Scanning
Started Cleaning
Internet Explorer/MSN/AOL Cache
Windows Temp Files
Cookies
Finished Cleaning
--------------------------------- SpySubtract session started ---------------------------------
Machine=USER-R8YM4R2ORJ
Time=Mon Dec 13 23:21:06 2004
Product Version=1, 0, 1, 49
OS Version=Microsoft Windows XP Professional (Build 2600)

Started Scanning
Internet Cookies
Found 'bravenet.com' in 'Internet Explorer Cache'
Programs in Memory
Windows Registry
Found '' in 'SOFTWARE\Classes\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}\LocalServer32'
Found '' in 'Software\livesvc'
Found '' in 'SOFTWARE\Classes\CLSID\{50AD557E-3426-41FD-AFDD-2AF39BB1C387}\InprocServer32'
Found '' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\searchsquire.com'
Found '*' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blazefind.com'
Found '*' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\slotch.com'
Found '*' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\xxxtoolbar.com'
Found '' in 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range1'
Internet URL Shortcuts
Files and Directories
Found 'toolbar.ini' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'desk.ini' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'dating.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'kliksrch.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'pharmaci.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'privacy1.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'travel1.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'gambling.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'home.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'finance.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'hot.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'pharmacy.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'search.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'sport.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'switch.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'dating1.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'realest.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'spyware.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'mortgages.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'poker.ico' in 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft'
Found 'EXPLOIT[1].EXE.001' in 'C:\Nuova cartella'
Found 'EXPLOIT[1].EXE.002' in 'C:\Nuova cartella'
Found 'EXPLOIT[1].EXE.VIR' in 'C:\Nuova cartella'
Found 'WMPLAYER.EXE.001' in 'C:\Nuova cartella'
Found 'WMPLAYER.EXE.002' in 'C:\Nuova cartella'
Found 'WMPLAYER.EXE.VIR' in 'C:\Nuova cartella'
Finished Scanning
Started Backup
Finished Backup
Started Cleaning
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\toolbar.ini' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\toolbar.ini' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\toolbar.ini'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\desk.ini' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\desk.ini' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\desk.ini'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\kliksrch.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\kliksrch.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\kliksrch.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmaci.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmaci.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmaci.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\privacy1.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\privacy1.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\privacy1.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\travel1.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\travel1.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\travel1.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\gambling.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\gambling.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\gambling.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\home.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\home.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\home.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\finance.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\finance.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\finance.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\hot.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\hot.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\hot.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmacy.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmacy.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\pharmacy.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\search.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\search.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\search.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\sport.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\sport.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\sport.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\switch.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\switch.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\switch.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating1.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating1.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\dating1.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\realest.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\realest.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\realest.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\spyware.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\spyware.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\spyware.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\mortgages.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\mortgages.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\mortgages.ico'
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\poker.ico' in shortcut areas.
Checking for 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\poker.ico' in startup areas.
Cleaning 'C:\Documents and Settings\Utente\Dati applicazioni\SBSoft\poker.ico'
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.001' in shortcut areas.
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.001' in startup areas.
Cleaning 'C:\Nuova cartella\EXPLOIT[1].EXE.001'
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.002' in shortcut areas.
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.002' in startup areas.
Cleaning 'C:\Nuova cartella\EXPLOIT[1].EXE.002'
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.VIR' in shortcut areas.
Checking for 'C:\Nuova cartella\EXPLOIT[1].EXE.VIR' in startup areas.
Cleaning 'C:\Nuova cartella\EXPLOIT[1].EXE.VIR'
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.001' in shortcut areas.
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.001' in startup areas.
Cleaning 'C:\Nuova cartella\WMPLAYER.EXE.001'
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.002' in shortcut areas.
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.002' in startup areas.
Cleaning 'C:\Nuova cartella\WMPLAYER.EXE.002'
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.VIR' in shortcut areas.
Checking for 'C:\Nuova cartella\WMPLAYER.EXE.VIR' in startup areas.
Cleaning 'C:\Nuova cartella\WMPLAYER.EXE.VIR'
Finished Cleaning
ecco cosa mi ha trovato mi sembra ottimo volevo solo un parere grazie!!!

Non vedo file pericolosi nella lista, se hai problemi utilizza Ad-aware e Spybot o mandami il log di Hijack.

---

alfonso_aiutamici@hotmail.it