controllo log di HijackThis - Sicurezza VIRUS

Benvenuto Ospite

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » controllo log di HijackThis

controllo log di HijackThis

Opzioni

Topic Precedente · Topic Sucessivo

chiarapini

Inviato: Wednesday, November 08, 2017 2:59:59 PM

Rank: AiutAmico

Iscritto dal : 1/7/2008
Posts: 3,768

Ho windows 10
Riscontro vari problemi da un po di tempo.
All'avvio del computer parte utorrent,ho cercato in tutti modi da qualche giorno di non farlo partire ,ma parte lo stesso,uso la versione USB di utorrent.
Il computer e' lento ,non va piu veloce come prima.
Le pagine web si aprono con piu lentezza.
Ho gia provato a fare tutto quello che potevo ma i problemi rimangono.
Non vorrei rifare dacapo l'installazione del sistema.
HijackThis ho letto sul web che non e' buono per windows 10 ,visto che che non si puo' fare l'avvio da modalita' provvisoria,pero' sono sicuro che dal log si vede se c'e' qualcosa che non va'.

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 14:47:17, on 08/11/2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.16299.0015)

Boot mode: Normal

Running processes:
C:\Users\franco\Desktop\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=
O4 - HKCU\..\Run: [OneDrive] "C:\Users\franco\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVIZIO DI RETE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Sandboxie Service (SbieSvc) - Sandboxie Holdings, LLC - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service: @%systemroot%\system32\SecurityHealthAgent.dll,-1002 (SecurityHealthService) - Unknown owner - C:\WINDOWS\system32\SecurityHealthService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spectrum.exe,-101 (spectrum) - Unknown owner - C:\WINDOWS\system32\spectrum.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%systemroot%\system32\xbgmsvc.exe,-100 (xbgm) - Unknown owner - C:\WINDOWS\system32\xbgmsvc.exe (file missing)

--
End of file - 6108 bytes

Torna in alto

Sponsor

Inviato: Wednesday, November 08, 2017 2:59:59 PM

Torna in alto

giza

Inviato: Wednesday, November 08, 2017 4:07:21 PM

Rank: AiutAmico

Iscritto dal : 10/27/2006
Posts: 9,421

fixa i quattro 04 oppure con ccleaner vai in strumenti /avvio e disattivali
poi fai pulizie
http://forum.aiutamici.com/yaf_postst96025_ELIMINARE-PAGINE-PUBBLICITARIE-E-PORCHERIE-VARIE-E-PULIRE-SISTEMA.aspx
non vedo antivirus attivi.
u torrent in opzioni/ impostazioni dovrebbe esserci dove disattivare all'avvio

Torna in alto

chiarapini

Inviato: Wednesday, November 08, 2017 4:11:05 PM

Rank: AiutAmico

Iscritto dal : 1/7/2008
Posts: 3,768

giza ha scritto:

Li posso fixare quindi in modalita' normale...ok
Le pulizie (della pagina) le ho gia fatte un paio di volte.
Non so dell'antivirus ,c'e' defender di w.10
Ti ringrazio

Torna in alto

giza

Inviato: Wednesday, November 08, 2017 4:18:29 PM

Rank: AiutAmico

Iscritto dal : 10/27/2006
Posts: 9,421

u torrent in opzioni/ impostazioni dovrebbe esserci dove disattivare all'avvio.
io farei anche una pulizia disco
in angolo alto destro cerca/scrivi pulizia disco/libera spazio su disco eliminando i file non necessari

Torna in alto

chiarapini

Inviato: Wednesday, November 08, 2017 5:03:24 PM

Rank: AiutAmico

Iscritto dal : 1/7/2008
Posts: 3,768

giza ha scritto:

Comunque sembra si sia snellito ,ho rifatto tutte le scansioni,registro,temp,prefect,pulizia disco come mi hai detto.

questi sono i log,mi sembra non ci sia nulla
-------------------------------------------------------------------
# AdwCleaner 7.0.2.1 - Logfile created on Wed Nov 08 15:23:20 2017
# Updated on 2017/29/08 by Malwarebytes
# Running on Windows 10 Home (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

No malicious registry entries deleted.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0

*************************

C:/AdwCleaner/AdwCleaner[C0].txt - [1072 B] - [2017/4/4 3:59:19]
C:/AdwCleaner/AdwCleaner[C2].txt - [3760 B] - [2017/4/16 9:42:43]
C:/AdwCleaner/AdwCleaner[S0].txt - [1237 B] - [2017/4/4 3:59:0]
C:/AdwCleaner/AdwCleaner[S10].txt - [2104 B] - [2017/4/29 5:3:15]
C:/AdwCleaner/AdwCleaner[S11].txt - [2177 B] - [2017/5/14 15:40:38]
C:/AdwCleaner/AdwCleaner[S12].txt - [2250 B] - [2017/5/15 5:36:25]
C:/AdwCleaner/AdwCleaner[S13].txt - [2323 B] - [2017/5/26 14:43:28]
C:/AdwCleaner/AdwCleaner[S14].txt - [2396 B] - [2017/6/9 14:17:22]
C:/AdwCleaner/AdwCleaner[S15].txt - [2469 B] - [2017/6/16 2:0:34]
C:/AdwCleaner/AdwCleaner[S16].txt - [2542 B] - [2017/6/29 7:22:47]
C:/AdwCleaner/AdwCleaner[S17].txt - [2615 B] - [2017/6/30 22:31:19]
C:/AdwCleaner/AdwCleaner[S18].txt - [2688 B] - [2017/7/12 2:19:55]
C:/AdwCleaner/AdwCleaner[S19].txt - [2356 B] - [2017/7/26 22:55:24]
C:/AdwCleaner/AdwCleaner[S1].txt - [1382 B] - [2017/4/6 6:34:33]
C:/AdwCleaner/AdwCleaner[S20].txt - [2425 B] - [2017/8/4 3:23:13]
C:/AdwCleaner/AdwCleaner[S21].txt - [2492 B] - [2017/8/11 0:32:53]
C:/AdwCleaner/AdwCleaner[S22].txt - [2560 B] - [2017/8/11 1:52:58]
C:/AdwCleaner/AdwCleaner[S23].txt - [2908 B] - [2017/8/23 7:50:14]
C:/AdwCleaner/AdwCleaner[S24].txt - [2696 B] - [2017/8/25 15:25:45]
C:/AdwCleaner/AdwCleaner[S25].txt - [2765 B] - [2017/8/27 15:1:48]
C:/AdwCleaner/AdwCleaner[S26].txt - [2857 B] - [2017/9/1 3:10:4]
C:/AdwCleaner/AdwCleaner[S27].txt - [2899 B] - [2017/9/3 13:11:41]
C:/AdwCleaner/AdwCleaner[S28].txt - [2967 B] - [2017/9/5 3:39:47]
C:/AdwCleaner/AdwCleaner[S29].txt - [3034 B] - [2017/9/5 3:43:13]
C:/AdwCleaner/AdwCleaner[S2].txt - [1454 B] - [2017/4/8 17:9:40]
C:/AdwCleaner/AdwCleaner[S30].txt - [3101 B] - [2017/9/6 5:14:52]
C:/AdwCleaner/AdwCleaner[S31].txt - [3416 B] - [2017/9/11 3:58:14]
C:/AdwCleaner/AdwCleaner[S32].txt - [3236 B] - [2017/9/11 4:3:57]
C:/AdwCleaner/AdwCleaner[S33].txt - [3303 B] - [2017/9/12 3:31:21]
C:/AdwCleaner/AdwCleaner[S34].txt - [3371 B] - [2017/9/12 4:20:46]
C:/AdwCleaner/AdwCleaner[S35].txt - [3439 B] - [2017/9/17 7:57:1]
C:/AdwCleaner/AdwCleaner[S36].txt - [3506 B] - [2017/9/21 1:45:56]
C:/AdwCleaner/AdwCleaner[S37].txt - [3574 B] - [2017/9/21 1:49:57]
C:/AdwCleaner/AdwCleaner[S38].txt - [3642 B] - [2017/9/24 4:17:59]
C:/AdwCleaner/AdwCleaner[S39].txt - [3710 B] - [2017/9/27 3:18:21]
C:/AdwCleaner/AdwCleaner[S3].txt - [1526 B] - [2017/4/12 4:35:42]
C:/AdwCleaner/AdwCleaner[S40].txt - [3778 B] - [2017/11/5 14:8:51]
C:/AdwCleaner/AdwCleaner[S41].txt - [3846 B] - [2017/11/7 1:43:34]
C:/AdwCleaner/AdwCleaner[S42].txt - [3914 B] - [2017/11/7 3:15:41]
C:/AdwCleaner/AdwCleaner[S43].txt - [3982 B] - [2017/11/8 2:43:45]
C:/AdwCleaner/AdwCleaner[S44].txt - [4050 B] - [2017/11/8 15:21:12]
C:/AdwCleaner/AdwCleaner[S4].txt - [1598 B] - [2017/4/14 4:17:43]
C:/AdwCleaner/AdwCleaner[S5].txt - [1804 B] - [2017/4/16 9:42:20]
C:/AdwCleaner/AdwCleaner[S6].txt - [1814 B] - [2017/4/17 2:51:3]
C:/AdwCleaner/AdwCleaner[S7].txt - [1886 B] - [2017/4/19 4:35:0]
C:/AdwCleaner/AdwCleaner[S8].txt - [1958 B] - [2017/4/23 2:51:50]
C:/AdwCleaner/AdwCleaner[S9].txt - [2030 B] - [2017/4/25 2:21:59]

########## EOF - C:\AdwCleaner\AdwCleaner[C2].txt ##########
------------------------------------------------------------------------------------
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by franco (Administrator) on 08/11/2017 at 16:37:33,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08/11/2017 at 16:38:22,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Home x64
Ran by franco (Administrator) on 08/11/2017 at 16:37:33,61
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

File System: 0

Registry: 0

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08/11/2017 at 16:38:22,71
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-----------------------------------------------------------------------------------------------
Rkill 2.9.1 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2017 BleepingComputer.com
More Information about Rkill can be found at this link:
http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 11/08/2017 04:38:45 PM in x64 mode.
Windows Version: Windows 10 Home

Checking for Windows services to stop:

* No malware services found to stop.

Checking for processes to terminate:

* No malware processes found to kill.

Checking Registry for malware related settings:

* No issues found in the Registry.

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

* No issues found.

Searching for Missing Digital Signatures:

* No issues found.

Checking HOSTS File:

* No issues found.

Program finished at: 11/08/2017 04:39:14 PM
Execution time: 0 hours(s), 0 minute(s), and 29 seconds(s)

Torna in alto

cbbusto

Inviato: Thursday, November 09, 2017 12:19:45 AM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964

Si è tutto a posto, come antivirus tieni Defender, ottimo, Utorrent non si apre più in avvio ?

Torna in alto

chiarapini

Inviato: Friday, November 10, 2017 11:01:54 AM

Rank: AiutAmico

Iscritto dal : 1/7/2008
Posts: 3,768

cbbusto ha scritto:

Si è tutto a posto, come antivirus tieni Defender, ottimo, Utorrent non si apre più in avvio ?

No, si apriva nonostante non l'avessi predisposto all'avvio, adesso e' a posto.Grazie

Torna in alto

chiarapini

Inviato: Saturday, November 11, 2017 11:56:38 AM

Rank: AiutAmico

Iscritto dal : 1/7/2008
Posts: 3,768

chiarapini ha scritto:

cbbusto ha scritto:

Si è tutto a posto, come antivirus tieni Defender, ottimo, Utorrent non si apre più in avvio ?

No, si apriva nonostante non l'avessi predisposto all'avvio, adesso e' a posto.Grazie

Non e' a posto ,manco per niente!
Parlo di uTorrent, ho la versione usb e si avvia con l'avvio del computer, ho windows 10.
Ho tolto la spunta da utorrent -avvia con windows-
Controllato nell'avvio di -msconfig-
Ma si avvia lo stesso.
L'unico modo di non farlo avviare e' cliccare su tutti i file e stopparli nel menu a tendina di uTorrent prima di uscire dal programma.

Torna in alto

Utenti presenti in questo topic

Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » controllo log di HijackThis

Salta al Forum

Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Invia topic via Email

RSS Feed

Watch this topic

Stampa topic

Normale

Threaded