Ciao a tutti!
Il mio problema è il seguente...
Sul desktop non mi compaiono nè le icone nè la barra dello start, la connessione ad internet non funziona, il tasto dx del mouse non risponde e posso fare le operazioni solo passando attraverso il Task Manager.

Ho installato avast e ho fatto fare la scansione prima dell'avvio del sistema operativo, successivamente in modalità provvisoria ho fatto la scansione anche con Ad-aware, Spybot-SandD e CWShredder. Poi ho riavviato e in modalità normale ho usato Hijack This, questo è il mio LOG:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23.16.05, on 15/11/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\setup\avast.setup
C:\WINDOWS\System32\taskmgr.exe
C:\Documents and Settings\Rossella\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search and Destroy\SDHelper.dll
O2 - BHO: (no name) - {5ADF3862-9E2E-4ad3-86F7-4510E6550CD0} - C:\WINDOWS\System32\bgboncgh.dll (file missing)
O2 - BHO: WebAssist - {85589B5D-D53D-4237-A677-46B82EA275F3} - C:\WINDOWS\WebAssist.dll
O2 - BHO: (no name) - {8A61098D-612B-4EF2-943D-64E920684061} - C:\WINDOWS\System32\nnnomnm.dll (file missing)
O2 - BHO: (no name) - {ADEE9FF5-7329-4243-B6F6-E0600FB226B2} - C:\WINDOWS\System32\awvvs.dll (file missing)
O2 - BHO: (no name) - {CF46BFB3-2ACC-441b-B82B-36B9562C7FF1} - C:\WINDOWS\System32\yiiaunww.dll (file missing)
O2 - BHO: (no name) - {D61D7E1A-6613-49CA-B6F9-51DB248E209D} - C:\Programmi\Image ActiveX Access\iesplg.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Spooler SubSystem App] $$
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [osxgaa.exe] $$
O4 - HKLM\..\Run: [sqlvxoak] $$
O4 - HKLM\..\Run: [spoolsvv] C:\WINDOWS\System32\spoolsvv.exe
O4 - HKLM\..\Run: [Windows Servce Agent] vliylcxh.exe
O4 - HKLM\..\Run: [System] $$
O4 - HKLM\..\Run: [vliylcxh.exe] $$
O4 - HKLM\..\Run: [,realset] $$
O4 - HKLM\..\Run: [$$] $$
O4 - HKLM\..\Run: [zzzeaa.exe] $$
O4 - HKLM\..\Run: [niafaa.exe] C:\WINDOWS\TEMP\niafaa.exe
O4 - HKLM\..\Run: [avp] C:\WINDOWS\Temp\vMcdmWQr.com
O4 - HKLM\..\Run: [smgr] mgrs.exe
O4 - HKLM\..\Run: [czhyaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\czhyaa.exe
O4 - HKLM\..\Run: [updjugcu] "c:\windows\system32\updjugcu.exe"
O4 - HKLM\..\Run: [Systam13] zfpxtfcom.exe
O4 - HKLM\..\Run: [glbkaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\glbkaa.exe
O4 - HKLM\..\Run: [pxagaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\pxagaa.exe
O4 - HKLM\..\Run: [zuzeaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\zuzeaa.exe
O4 - HKLM\..\Run: [tskrwcvl] "c:\windows\system32\tskrwcvl.exe"
O4 - HKLM\..\Run: [aisgaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\aisgaa.exe
O4 - HKLM\..\Run: [eezeaa.exe] C:\DOCUME~1\Rossella\IMPOST~1\Temp\eezeaa.exe
O4 - HKLM\..\Run: [GPLv3] rundll32.exe "C:\WINDOWS\System32\blldgnfp.dll",realset
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\Conexant\AccessRunner ADSL USB\CnxDslTb.exe" "Conexant\AccessRunner ADSL USB"
O4 - HKLM\..\Run: [KernelFaultCheck] :systemroot:\system32\dumprep 0 -k
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [Windows Servce Agent] vliylcxh.exe
O4 - HKLM\..\RunServices: [Systam13] zfpxtfcom.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Windows Servce Agent] vliylcxh.exe
O4 - HKCU\..\Run: [spoolw] C:\WINDOWS\System32\spoolw.exe
O4 - HKCU\..\Run: [igfxsvc] C:\WINDOWS\System32\igfxsvc.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKLM\..\Policies\Explorer\Run: [user32.dll] C:\Programmi\Image ActiveX Access\iesmn.exe
O4 - HKLM\..\Policies\Explorer\Run: [rare] C:\Programmi\Image ActiveX Access\imsmain.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [$$] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Windows update loader] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Service Pack 1] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Brave-Sentry] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [WinPop] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [vliylcxh.exe] $$ (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [spoolw] C:\WINDOWS\System32\spoolw.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [igfxsvc] C:\WINDOWS\System32\igfxsvc.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] $$ (User 'Default user')
O4 - S-1-5-19 Startup: cffll.exe (User 'SERVIZIO LOCALE')
O4 - S-1-5-19 Startup: dkksg.exe (User 'SERVIZIO LOCALE')
O4 - S-1-5-19 Startup: up.exe (User 'SERVIZIO LOCALE')
O4 - S-1-5-18 Startup: cffll.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: dkksg.exe (User 'SYSTEM')
O4 - S-1-5-18 Startup: up.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: cffll.exe (User 'Default user')
O4 - .DEFAULT Startup: dkksg.exe (User 'Default user')
O4 - .DEFAULT Startup: up.exe (User 'Default user')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{83C589B4-53D0-48EA-B2A7-62CA131FF31F}: NameServer = 192.168.2.1
O20 - Winlogon Notify: A3dxq - C:\WINDOWS\System32\a3dx8.dll
O20 - Winlogon Notify: awvvs - C:\WINDOWS\System32\awvvs.dll (file missing)
O20 - Winlogon Notify: botreg - C:\Documents and Settings\All Users\Documenti\Settings\bot.dll (file missing)
O20 - Winlogon Notify: nnnomnm - nnnomnm.dll (file missing)
O20 - Winlogon Notify: winzdn32 - winzdn32.dll (file missing)
O21 - SSODL: cyxfYCvvSeJhqY - {88304826-229A-E28C-346F-7B2C8DAE26E5} - C:\WINDOWS\system32\kggt.dll (file missing)
O22 - SharedTaskScheduler: adirondack - {547aaa89-7e6b-42b4-b112-a64955f86a2a} - (no file)
O23 - Service: Advance Service Process - Unknown owner - C:\Programmi\File comuni\System\MSASP32.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: DomainService - Unknown owner - C:\WINDOWS\System32\qwerty12.exe (file missing)
O23 - Service: Integrated Windows Authentication - Unknown owner - C:\Programmi\File comuni\System\MSIWA32.exe (file missing)
O23 - Service: MSN RAV - Unknown owner - C:\WINDOWS\system\msnrav.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Remote Break Manager - Unknown owner - C:\WINDOWS\system32\svshost.exe (file missing)
O23 - Service: Spooler di stampa (Spooler) - Unknown owner - C:\WINDOWS\system32\spoolsv.exe (file missing)
O23 - Service: Windows Version Services - Unknown owner - C:\WINDOWS\system32\svshost.exe (file missing)

--
End of file - 7541 bytes



Aiutatemi please!

Nessuno riesce ad aiutarmi? <img src=icon_smile_sad.gif border=0 align=middle>

Aspetta qualcuno che se intende. Cmq se formatti ti consiglio vivamente di mettere il SP2, il SP1 è pieno di falle. Ciao

http://www.microsoft.com/downloads/details.aspx?FamilyID=049c9dbe-3b8e-4f30-8245-9e368d3cdb5a&displaylang=it

Edited by - stellina148 on 11/16/2007 12:37:05

Accidenti,raramente ho visto un macello del genere!Prendi in seria considerazione la formattazione,e istalla il Service Pack2.
auguri.

Confermo, era per quello che non ero intervenuto. Hai il pc semplicemente devastato da ogni genere di malware. Segui i consigli degli amici che mi hanno preceduto, formatta e installa il Sp2. Il tuo computer te ne sarà grato.

---