Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

problemi con virus rootkit Opzioni
lor89
Inviato: Friday, August 30, 2013 12:34:37 PM
Rank: Newbie

Iscritto dal : 8/30/2013
Posts: 5
mi potete aiutare con questo log, non me lo fa salvare sono costretto a scriverlo io.
ho aggiunto i dati del pc di un log del 11-10-2012

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\AVG Secure Search\vprot.exe
C:\Program Files\AVG\AVG2013\avgui.exe
C:\VEXPLite\MONLITE.EXE
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Users\Public\Documents\AppData\PoApp\PService.exe
C:\VEXPLite\MONLITE.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
C:\Users\utente\Documents\Nuova cartella\hijack this.exe


R1-HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R0-HKCU\Software\Microsoft\Internet Explorer\Main, Start Page = about:Tabs
R1-HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1-HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1-HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
R0-HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0-HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0-HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0-HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1-HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0-HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2-BHO:&Yahoo! Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2-BHO:(no name)-{0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - (no file)
O2-BHO:Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll
O2-BHO:Discover USA - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Program Files\Search_USA\prxtbSea2.dll
O2-BHO:Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D794248F} - C:\PROGRA(qui c'è un simbolo a forma di onda) 1\SPYBOT(di nuovo quel simbolo a onda)1\SDHelper.dll
O2-BHO:Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2-BHO:(no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2-BHO:Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2-BHO:VMN Toolbar Astro Gemini - {A057A204-BACC-4D26-8287-79A187E26987} - C:\PROGRA(simbolo a forma di onda)1\VMNTOO(di nuovo quel simbolo a onda)1\VMNTOO(di nuovo simbolo a onda)1.DLL
O2-BHO:Vuze Remote - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:\Program Files\Vuze_Remote\prxtbVuz2.dll
O2-BHO:Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92}- (no file)
O2-BHO:Updater For Simppull Toolbar - {C4B8BAB4-1667-11DF-A242-BA9455D89593} - (no file)
O2-BHO:Bing Bar BHO - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN Toolbar\Platform\6.3.2322.0\npwinext.dll
O2-BHO:Search-Results Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
O2-BHO:Java(tm)Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2-BHO:(no name)- {ecdc465a-cf20-4b82-9a26-47c9dc52fa32} - (no file)
O2-BHO:SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O9-Extra button:@C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9-Extra button:(no name)-{53F6FCCD-9E22-4d71-86EA-6E43136192AB} - (no file)
O9-Extra button:(no name)-{925DAB62-F9AC-4221-806A-057BFB1014AA} - (no file)
O9-Extra button: (no name)- {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA(simbolo a forma di onda)1\SPYBOT(simbolo a onda di nuovo)1\SDHelper.dll



Sponsor
Inviato: Friday, August 30, 2013 12:34:37 PM

 
wolfestein
Inviato: Friday, August 30, 2013 10:17:48 PM

Rank: AiutAmico

Iscritto dal : 2/15/2009
Posts: 15,955
Metti il log nella sezione Sicurezza virus.
Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.