ciao amico mio

perfavore gl una controllata , avrei piacere di un tuo parere

e' un netbook con xp con tastiera speciale ita eng cinese thay ,,,,,, un casino

talking-dict intel atom inside

il pc sembra andare bene

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 17.27.21, on 07/01/2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)


Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programmi\Qualcomm Atheros\ACU.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\Dati applicazioni\DatacardService\HWDeviceService.exe
C:\Programmi\Java\jre7\bin\jqs.exe
C:\Windows\KMS-HGM.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\All Users\Dati applicazioni\TrueMove H hi-speed connection\OnlineUpdate\ouc.exe
C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\ZDServ.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\CancelAutoPlay_Server.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\Wind Connection Manager\UnifiedUi.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis_Portable\HijackThisPortable\HijackThisPortable.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis_Portable\HijackThisPortable\App\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.msn.com/?pc=UP97&ocid=UP97DHP
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [ACU] "C:\Programmi\Qualcomm Atheros\ACU.exe" -nogui
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\File comuni\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Servizio di configurazione Qualcomm Atheros (ACS) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: HWDeviceService.exe - Unknown owner - C:\Documents and Settings\All Users\Dati applicazioni\DatacardService\HWDeviceService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Programmi\Java\jre7\bin\jqs.exe
O23 - Service: KMS-R@1n - hgm - C:\Windows\KMS-HGM.exe
O23 - Service: TrueMove H hi-speed connection. OUC (TrueMove H hi-speed connection. RunOuc) - Unknown owner - C:\Programmi\TrueMove H hi-speed connection\UpdateDog\ouc.exe
O23 - Service: Wifi Man Service (wifimansvc) - Unknown owner - C:\Programmi\TrueMove H hi-speed connection\eap\wifimansvc.exe
O23 - Service: ZDServ - Unknown owner - C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\ZDServ.exe

--
End of file - 5551 bytes

---

Ciao mao,
che problemi ci sono? Se dici che va bene...
C'è qualche vocina rossa e gialla, ma secondo me non pericolosa. Tu sai cos'è questo?
KMS-HGM.exe
http://processchecker.com/file/KMS-HGM.exe.html

questo lo mette rosso, CancelAutoPlay_Server.exe
ma io non credo che sia pericoloso.

Meglio se te lo dice MBAM.
See you

---

gentili amici per prima cosa ringrazio e saluto

@pidue ..... KMS .... ATTIVATORE ;o) DI OFFICE .... SONO UN CATTIVONE

@cbbusto ... ZTE fa parte della chiavetta wind

per il resto, volevo sapere quali 04 mi consigliate di eliminare come spunta in avvio


per il restto .......... un caloroso salutone ....maurizio

---

Ciao, mao non fare troppo il cattivo.

---

TANKE ..... :o)

---