ciao grazie per l'aiuto dovrebbe essere a posto l'unico problema che mi ritrovo adesso e ad ogni avvio mi dice aggiornamento in corso tipo quando installi un nuovo software e devi riavviare lo stesso procedimento pero me lo fa sempre anche senza installare niente questo e il nuovo log
Logfile of HijackThis v1.99.0
Scan saved at 11.56.26, on 26/01/2005
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v5.50 (5.50.4134.0100)

Running processes:
C:\WINDOWS.000\SYSTEM\KERNEL32.DLL
C:\WINDOWS.000\SYSTEM\mmtask.tsk
C:\WINDOWS.000\SYSTEM\MPREXE.EXE
C:\WINDOWS.000\SYSTEM\MSTASK.EXE
C:\WINDOWS.000\SYSTEM\STIMON.EXE
C:\WINDOWS.000\EXPLORER.EXE
C:\WINDOWS.000\RUNDLL32.EXE
C:\PROGRAMMI\AHEAD\INCD\INCD.EXE
C:\PROGRAMMI\LEXMARKX84-X85\ACMONITOR_X84-X85.EXE
C:\PROGRAMMI\LEXMARKX84-X85\ACBTNMGR_X84-X85.EXE
C:\WINDOWS.000\SYSTEM\PRINTRAY.EXE
C:\PROGRAM FILES\PERFECT KEYLOGGER LITE\BPK.EXE
C:\WINDOWS.000\SYSTEM\SPOOL32.EXE
C:\PROGRAMMI\STOPDIALERS\STOPDIALERS.EXE
C:\PROGRAMMI\LG PC SUITE\LG PC SYNC\LGSYNCMANAGER.EXE
C:\PROGRAMMI\PUMATECH\INTELLISYNC LITE FOR NEC 616\INTELLISYNC FOR NEC.EXE
C:\WINDOWS.000\SYSTEM\RNAAPP.EXE
C:\WINDOWS.000\SYSTEM\TAPISRV.EXE
C:\WINDOWS.000\SYSTEM\DDHELP.EXE
C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAMMI\WINZIP\WINZIP32.EXE
C:\WINDOWS.000\TEMP\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rulla.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\PROGRAMMI\SURFSIDEKICK 2\SSKBHO.DLL (file missing)
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [VoodooBanshee] rundll32.exe 3DfxVBps.dll,BansheeLoadSettings
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [Lexmark X84-X85 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X84-X85.exe
O4 - HKLM\..\Run: [Lexmark X84-X85 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X84-X85.exe
O4 - HKLM\..\Run: [LexStart] Lexstart.exe
O4 - HKLM\..\Run: [LexmarkPrinTray] PrinTray.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS.000\SYSTEM\STIMON.EXE
O4 - HKCU\..\Run: [SysTime] C:\WINDOWS.000\SYSTEM\systime.exe
O4 - HKCU\..\Run: [SurfSideKick 2] C:\PROGRAMMI\SURFSIDEKICK 2\Ssk.exe
O4 - HKCU\..\Run: [BPK] C:\PROGRAM FILES\PERFECT KEYLOGGER LITE\BPK.EXE
O4 - Startup: Stop Dialers.lnk = C:\Programmi\StopDialers\StopDialers.exe
O4 - Startup: LG Sync Manager.lnk = C:\Programmi\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Startup: LG SyncManager.lnk = C:\Programmi\LG PC Suite\LG PC Sync\LGSyncManager.exe
O4 - Startup: Intellisync Lite for NEC 616.lnk = C:\Programmi\Pumatech\Intellisync Lite for NEC 616\Intellisync For NEC.exe
O8 - Extra context menu item: Download with GetRight - C:\Programmi\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Programmi\GetRight\GRbrowse.htm
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O15 - Trusted IP range: 213.159.117.202
O15 - Trusted IP range: 213.159.117.202 (HKLM)

Ciao ,
esegui queste operazioni

1) Disattiva il ripristino di configurazione, leggi qui come fare
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=298&SH=N

2) riavvia in modalità provvisoria, leggi qui come fare
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=344&SH=N

apri HIJAC THIS ed elimina come indicato in questo articolo
http://www.aiutamici.com/software/descrizione.asp?CodSw=1175
le righe che seguono, (nel caso le righe da eliminare non compaiono in modalità provvisoria, eliminale dalla modalità normale e riavvia il computer).

==================================
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://213.159.117.134/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.rulla.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://213.159.117.134/index.php
R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - C:\PROGRAMMI\SURFSIDEKICK 2\SSKBHO.DLL (file missing)
O1 - Hosts: 69.20.16.183 ieautosearch
O1 - Hosts: 69.20.16.183 auto.search.msn.com
O1 - Hosts: 69.20.16.183 search.netscape.com
-
O4 - HKCU\..\Run: [SurfSideKick 2] C:\PROGRAMMI\SURFSIDEKICK 2\Ssk.exe
O4 - HKCU\..\Run: [BPK] C:\PROGRAM FILES\PERFECT KEYLOGGER LITE\BPK.EXE
-
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O10 - Unknown file in Winsock LSP: c:\windows.000\system\aklsp.dll
O15 - Trusted IP range: 213.159.117.202
O15 - Trusted IP range: 213.159.117.202 (HKLM)
==================================

Con la funzione TROVA di Windows, cerca ed elimina questi file,

==================================
SSKBHO.DLL
Ssk.exe
BPK.EXE
aklsp.dll
==================================

al termine utilizza i programma AD-AWARE e SPYBOT indicati in questo articolo
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=388&SH=N

sempre in modalità provvisoria fai una scansione Antivirus

quindi riavvia il computer e controlla se il problema e risolto, se e tutto OK riattiva il ripristino configurazione disattivato all'inizio di questa procedura.

---

Collaboratore Aiutamici