Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

mi controllate per favore il LOG di Hijack Opzioni
NICCANORE
Inviato: Thursday, May 19, 2005 10:34:16 PM
Rank: Member

Iscritto dal : 5/19/2005
Posts: 0
Ciao ragazzi. IL mio pc funziona correttamente, ma quando vado in internet (con ADSL ALICE) dopo un attimo che mi sono collegato la CPU va a 100 e non si schioda da li, anche se mi scollego da internet. Ho già fatto la scansione in modalità provvisoria con AD-AWARE, SPYBOT ,CW SHREDDER, NORTON ANTIVIRUS che mi hanno pulito da un sacco di infezioni, ma il problema rimane. Se può essere d'aiuto posso dire che all'avvio parte sempre in automatico la connessione a LIBERO, che avevo in precedenza con la line 56k, senza logicamento riuscirci. Ho notato che la maggior parte delle volte, ma non sempre, sono i file svchost.exe e nmain.exe ad impegnare la CPU, e dopo qualche minuto compare il messaggio di errore di Windows "SVCHOST.EXE ha provocato errori e verrà chiuso. Sarà necessario riavviare il programma. Creazione de regisro in corso."
Vi invio il Log in di quando era il Cvhost.exe ad impegnare la CPU, mi potreste dare un'occhiata??
GRAZIE

Logfile of HijackThis v1.99.1
Scan saved at 20.41.08, on 19/05/2005
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\Explorer.EXE
C:\Programmi\File comuni\Symantec Shared\SymTray.exe
C:\WINNT\System32\RunDll32.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINNT\System32\pibr.exe
C:\WINNT\System32\avprotect.exe
C:\WINNT\System32\PopUpBlocker611.exe
C:\WINNT\System32\msdn.exe
C:\WINNT\System32\taskmgrs.exe
C:\WINNT\System32\msnupdateit.exe
C:\WINNT\System32\crssrs.exe
C:\WINNT\System32\sscs.exe
C:\WINNT\System32\rundll32.exe
C:\WINNT\System32\drives.exe
C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINNT\System32\internat.exe
C:\WINNT\System32\msnupdateit.exe
C:\Documents and Settings\Administrator\Dati applicazioni\oaaa.exe
C:\WINNT\System32\crssrs.exe
C:\WINNT\System32\sscs.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\WINNT\System32\taskmgr.exe
C:\PROGRA~1\Alice\ALICEE~1\app\EnterNet.exe
C:\WINNT\system32\tftp.exe
C:\WINNT\system32\tftp.exe
C:\WINNT\system32\PopUpBlocker611.exe
C:\Documents and Settings\Administrator\Desktop\utility\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.libero.it/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {8BD3F351-24A7-125D-B8EB-631D11280EA8} - C:\WINNT\System32\kwg.dll
O2 - BHO: (no name) - {BBFEC320-099F-256F-95D3-5530521C23E9} - C:\WINNT\System32\kwg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O2 - BHO: (no name) - {BFFEC752-0992-2168-95DE-5730261F239F} - C:\WINNT\System32\kwg.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINNT\System32\wucrtupd.exe -startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Window Firewall] pibr.exe
O4 - HKLM\..\Run: [AV Protect] avprotect.exe
O4 - HKLM\..\Run: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKLM\..\Run: [Sygate Personal Firewall] sys.exe
O4 - HKLM\..\Run: [Microsoft Developer Network] msdn.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Programmi\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [Microsoft Internet Explorer] C:\Programmi\Internet Explorer\IEXPLORE.EXE
O4 - HKLM\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\Run: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKLM\..\Run: [Media Software UPdater] sscs.exe
O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Programmi\Pirelli\Access Gateway USB Network\CnxTrApp.dll",AppEntry -REG "Pirelli\Access Gateway USB"
O4 - HKLM\..\Run: [Windows Update Drive] drives.exe
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [VDvTaaitD] C:\WINNT\rysftvx.exe
O4 - HKLM\..\RunServices: [Window Firewall] pibr.exe
O4 - HKLM\..\RunServices: [AV Protect] avprotect.exe
O4 - HKLM\..\RunServices: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKLM\..\RunServices: [Sygate Personal Firewall] sys.exe
O4 - HKLM\..\RunServices: [Microsoft Developer Network] msdn.exe
O4 - HKLM\..\RunServices: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\RunServices: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKLM\..\RunServices: [Media Software UPdater] sscs.exe
O4 - HKLM\..\RunServices: [Windows Update Drive] drives.exe
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtrdr.exe
O4 - HKCU\..\Run: [MSMSGS] C:\Programmi\Messenger\msmsgs.exe /background
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [AV Protect] avprotect.exe
O4 - HKCU\..\Run: [Window Firewall] pibr.exe
O4 - HKCU\..\Run: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKCU\..\Run: [Sygate Personal Firewall] sys.exe
O4 - HKCU\..\Run: [Windows Compliant] zsfspd.exe
O4 - HKCU\..\Run: [Windows System Security] rtnqs.exe
O4 - HKCU\..\Run: [Microsoft Developer Network] msdn.exe
O4 - HKCU\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKCU\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKCU\..\Run: [Nawa] C:\Documents and Settings\Administrator\Dati applicazioni\oaaa.exe
O4 - HKCU\..\Run: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKCU\..\Run: [Media Software UPdater] sscs.exe
O4 - HKCU\..\Run: [Windows Update Drive] drives.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINNT\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone
O16 - DPF: {15AD6789-CDB4-47E1-A9DA-992EE8E6BAD6} - http://static.windupdates.com/cab/MediaAccessVerisign/ie/bridge-c7.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Smart Card Client (SCardClnt) - Unknown owner - C:\WINNT\system32\FILES.exe (file missing)
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE


Sponsor
Inviato: Thursday, May 19, 2005 10:34:16 PM

 
alfonso
Inviato: Friday, May 20, 2005 12:24:41 AM

Rank: AiutAmico

Iscritto dal : 10/5/2000
Posts: 19,132
Ciao ,
esegui queste operazioni

riavvia in modalità provvisoria, leggi qui come fare
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=344&SH=N

apri HIJAC THIS ed elimina come indicato in questo articolo
http://www.aiutamici.com/software/descrizione.asp?CodSw=1175
le righe che seguono, (nel caso le righe da eliminare non compaiono in modalità provvisoria, eliminale dalla modalità normale e riavvia il computer).

==================================
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
-
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
-
O2 - BHO: (no name) - {8BD3F351-24A7-125D-B8EB-631D11280EA8} - C:\WINNT\System32\kwg.dll
O2 - BHO: (no name) - {BBFEC320-099F-256F-95D3-5530521C23E9} - C:\WINNT\System32\kwg.dll
-
O2 - BHO: (no name) - {BFFEC752-0992-2168-95DE-5730261F239F} - C:\WINNT\System32\kwg.dll
-
O4 - HKLM\..\Run: [Window Firewall] pibr.exe
O4 - HKLM\..\Run: [AV Protect] avprotect.exe
O4 - HKLM\..\Run: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKLM\..\Run: [Sygate Personal Firewall] sys.exe
O4 - HKLM\..\Run: [Microsoft Developer Network] msdn.exe
-
O4 - HKLM\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\Run: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKLM\..\Run: [Media Software UPdater] sscs.exe
-
O4 - HKLM\..\Run: [Windows Update Drive] drives.exe
-
O4 - HKLM\..\Run: [VDvTaaitD] C:\WINNT\rysftvx.exe
O4 - HKLM\..\RunServices: [Window Firewall] pibr.exe
O4 - HKLM\..\RunServices: [AV Protect] avprotect.exe
O4 - HKLM\..\RunServices: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKLM\..\RunServices: [Sygate Personal Firewall] sys.exe
O4 - HKLM\..\RunServices: [Microsoft Developer Network] msdn.exe
O4 - HKLM\..\RunServices: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [Firewall Updater] msnupdateit.exe
O4 - HKLM\..\RunServices: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKLM\..\RunServices: [Media Software UPdater] sscs.exe
O4 - HKLM\..\RunServices: [Windows Update Drive] drives.exe
-
O4 - HKCU\..\Run: [Internat.exe] internat.exe
O4 - HKCU\..\Run: [AV Protect] avprotect.exe
O4 - HKCU\..\Run: [Window Firewall] pibr.exe
O4 - HKCU\..\Run: [Popup Blocker System611 Monitoring] PopUpBlocker611.exe
O4 - HKCU\..\Run: [Sygate Personal Firewall] sys.exe
O4 - HKCU\..\Run: [Windows Compliant] zsfspd.exe
O4 - HKCU\..\Run: [Windows System Security] rtnqs.exe
O4 - HKCU\..\Run: [Microsoft Developer Network] msdn.exe
O4 - HKCU\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKCU\..\Run: [Firewall Updater] msnupdateit.exe
O4 - HKCU\..\Run: [Nawa] C:\Documents and Settings\Administrator\Dati applicazioni\oaaa.exe
O4 - HKCU\..\Run: [SP2 Firewall/Internet Updater] crssrs.exe
O4 - HKCU\..\Run: [Media Software UPdater] sscs.exe
O4 - HKCU\..\Run: [Windows Update Drive] drives.exe
-
O23 - Service: Smart Card Client (SCardClnt) - Unknown owner - C:\WINNT\system32\FILES.exe (file missing)
==================================

Con la funzione TROVA di Windows, cerca ed elimina questi file,

==================================
kwg.dll
pibr.exe
avprotect.exe
PopUpBlocker611.exe
sys.exe
msdn.exe
taskmgrs.exe
msnupdateit.exe
crssrs.exe
sscs.exe
drives.exe
rysftvx.exe
internat.exe
zsfspd.exe
rtnqs.exe
oaaa.exe
FILES.exe
==================================


Vai a PANNELLO DI CONTROLLO e clicca su OPZIONI INTERNET
nella finestra che si apre clicca i tre pulsanti
ELIMINA COOKIES - ELIMINA FILE - CANCELLA CRONOOLOGIA


al termine utilizza i programmi AD-AWARE e SPYBOT indicati in questo articolo
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=388&SH=N

sempre in modalità provvisoria fai una scansione Antivirus.

Devi aggiornare il Windows e installare un programma Firewall.

Collaboratore Aiutamici
NICCANORE
Inviato: Friday, May 20, 2005 12:43:05 AM
Rank: Member

Iscritto dal : 5/19/2005
Posts: 0
GRAZIE MILLE, PROVO E TI FACCIO SAPERE COME VA
NICCANORE
Inviato: Friday, May 20, 2005 11:40:20 PM
Rank: Member

Iscritto dal : 5/19/2005
Posts: 0
Ciao Alfonso. Ho provato ad eseguire le operazioni che mi hai suggerito ed effettivamente x 10 mn il PC è andato che era una meraviglia. Poi xò durante l'aggiornamento di Norton mi si è inchiodato nuovamente sempre a causa del file SVCHOST. Anche dopo averlo riacceso appena entrato in internet si è bloccato immediatamente sempre a causa dello stesso file. Ma a che funzioni serve questo file?? può dipendere dal fatto che sul PC (win 2000) ci sono caricati un sacco di giochi??
Grazie
alfonso
Inviato: Saturday, May 21, 2005 12:24:24 PM

Rank: AiutAmico

Iscritto dal : 10/5/2000
Posts: 19,132
svchost.exe e un processo legittimo di windows, quindi i messaggi di errore non sono causati da lui ma da qualche virus che intralcia la sua esecuzione.

Inserisci nuovamente il log, ma se il sistema e infetto e l'antivirus non vede il sirus neanche in modalità provvisoria non rimane che formattare.

Prova a fare un controllo antivirus on line, se funziona, da questo indirizzo
http://security.symantec.com/default.asp?productid=symhome&langid=it&venid=sym

Collaboratore Aiutamici
NICCANORE
Inviato: Monday, May 23, 2005 9:14:16 PM
Rank: Member

Iscritto dal : 5/19/2005
Posts: 0
Grazie x la risposta. Ho installato NortonFirewall ed mentre provavo ad aggiornare il sistema operativo (WIN 2000) ho notato continui tentativi di accesso da parte di sygate.exe , taskmgrs.exe Sysupdate.exe, é normale?? inoltre dopo aver riacceso il Pc, senza neanche fossi collegato alla rete, è partito in automatico il windowsupdate assieme a sygate.exe , taskmgrs.exe Sysupdate.exe. Ti mando il log che ho salvato quando ero in connessione, se ci capisci qualcosa..
Grazie

Logfile of HijackThis v1.99.1
Scan saved at 19.43.06, on 23/05/2005
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\WINNT\Explorer.EXE
C:\Programmi\File comuni\Symantec Shared\SymTray.exe
C:\WINNT\System32\RunDll32.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINNT\System32\rundll32.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\WINNT\System32\hostserv.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINNT\System32\Sysupdate.exe
C:\WINNT\System32\sygate.exe
C:\WINNT\System32\taskmgrs.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Documents and Settings\Administrator\Desktop\utility\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CriticalUpdate] C:\WINNT\System32\wucrtupd.exe -startup
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Programmi\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Programmi\Pirelli\Access Gateway USB Network\CnxTrApp.dll",AppEntry -REG "Pirelli\Access Gateway USB"
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [AcctMgr] C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [hostserv] hostserv.exe
O4 - HKLM\..\Run: [Microsoft System Updater] Sysupdate.exe
O4 - HKLM\..\Run: [Windows_Protect] sygate.exe
O4 - HKLM\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [Microsoft System Updater] Sysupdate.exe
O4 - HKLM\..\RunServices: [Windows services] FILES.exe
O4 - HKLM\..\RunServices: [Windows_Protect] sygate.exe
O4 - HKLM\..\RunServices: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [hostserv] hostserv.exe
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtrdr.exe
O4 - HKCU\..\Run: [MSMSGS] C:\Programmi\Messenger\msmsgs.exe /background
O4 - HKCU\..\Run: [Microsoft System Updater] Sysupdate.exe
O4 - HKCU\..\Run: [Windows_Protect] sygate.exe
O4 - HKCU\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKCU\..\Run: [hostserv] hostserv.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINNT\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Smart Card Client (SCardClnt) - Unknown owner - C:\WINNT\system32\FILES.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE

monsee
Inviato: Monday, May 23, 2005 9:43:18 PM
Rank: AiutAmico

Iscritto dal : 4/5/2005
Posts: 22,971
<BLOCKQUOTE id=quote><font size=1 face="Sans Serif, Arial, Helvetica" id=quote>quote:<hr height=1 noshade id=quote>Ho installato NortonFirewall...
ho notato continui tentativi di accesso da parte di sygate.exe...
inoltre dopo aver riacceso il Pc, senza neanche fossi collegato alla rete, è partito in automatico il windowsupdate assieme a sygate.exe...
C:\WINNT\System32\sygate.exe...
O4 - HKLM\..\Run: [Windows_Protect] sygate.exe...
O4 - HKLM\..\RunServices: [Windows_Protect] sygate.exe...
O4 - HKCU\..\Run: [Windows_Protect] sygate.exe<hr height=1 noshade id=quote></BLOCKQUOTE id=quote></font id=quote><font face="Sans Serif, Arial, Helvetica" size=2 id=quote>
Dunque, io non sono certo un "fulmine di guerra", ma credo di capire che il tuo Windows Update si attivi (anche se non sei ancora collegato in Rete) per farti sapere che nel tuo Sistema manca qualche cosa che può esser scaricata (tramite Windows Update, appunto) ed installata. In altri termini, il tuo Sistema "ricorda" dal tuo precedente "viaggio in Rete" e TI RICORDA che non hai ancora "scaricato" tutto quanto e devi riconnetterti per terminare quelle operazioni... In quanto al resto: se hai installato il firewall di Norton (bene, mi complimento!) devi non solamente DISATTIVARE il firewall "originario" di Windows XP, ma anche DISINSTALLARE il firewall "Sygate", altrimenti "sygate.exe" (l'operativo del firewall Sygate) si butterà incessantemente a fare a pugni col tuo Norton... Per tutto il resto, non saprei proprio che dire: aspetta Alfonso, che se ne intende e ci capisce meglio.

Edited by - monsee on 05/23/2005 21:44:42

Edited by - monsee on 05/23/2005 21:46:06
a.roselli
Inviato: Monday, May 23, 2005 9:58:16 PM

Rank: Admin

Iscritto dal : 10/4/2000
Posts: 19,039
Ciao ,
esegui queste operazioni

riavvia in modalità provvisoria, leggi qui come fare
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=344&SH=N

apri HIJAC THIS ed elimina come indicato in questo articolo
http://www.aiutamici.com/software/descrizione.asp?CodSw=1175
le righe che seguono, (nel caso le righe da eliminare non compaiono in modalità provvisoria, eliminale dalla modalità normale e riavvia il computer).

==================================
O4 - HKLM\..\Run: [hostserv] hostserv.exe
O4 - HKLM\..\Run: [Microsoft System Updater] Sysupdate.exe
O4 - HKLM\..\Run: [Windows_Protect] sygate.exe
O4 - HKLM\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [Microsoft System Updater] Sysupdate.exe
O4 - HKLM\..\RunServices: [Windows services] FILES.exe
O4 - HKLM\..\RunServices: [Windows_Protect] sygate.exe
O4 - HKLM\..\RunServices: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKLM\..\RunServices: [hostserv] hostserv.exe
-
O4 - HKCU\..\Run: [Microsoft System Updater] Sysupdate.exe
O4 - HKCU\..\Run: [Windows_Protect] sygate.exe
O4 - HKCU\..\Run: [NTSF MICROSOFT SYSTEM] taskmgrs.exe
O4 - HKCU\..\Run: [hostserv] hostserv.exe
-
O23 - Service: Smart Card Client (SCardClnt) - Unknown owner - C:\WINNT\system32\FILES.exe (file missing)
==================================

Con la funzione TROVA di Windows, cerca ed elimina questi file,

==================================
hostserv.exe
Sysupdate.exe
sygate.exe
taskmgrs.exe
FILES.exe
==================================


Vai a PANNELLO DI CONTROLLO e clicca su OPZIONI INTERNET
nella finestra che si apre clicca i tre pulsanti
ELIMINA COOKIES - ELIMINA FILE - CANCELLA CRONOOLOGIA
poi clicca il pulsante PAGINA PREDEFINITA e su OK

al termine utilizza i programmi AD-AWARE e SPYBOT indicati in questo articolo
http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=388&SH=N

sempre in modalità provvisoria fai una scansione Antivirus.

Collegati al Windows Update e scarica gli aggiornamenti importanti.

alfonso_aiutamici@hotmail.it

NICCANORE
Inviato: Wednesday, May 25, 2005 12:49:38 AM
Rank: Member

Iscritto dal : 5/19/2005
Posts: 0
YUUUU UU, adesso il pc va che è una meraviglia. Grazie mille dinop. Ci sono ancora piccoli problemini. Appena mi collego alla rete il Firewall mi segnale che tentano di collegarsi i programmi smc.exe-msdn.exe-autoexe.exe. Sono file normali di Windows o li devo eliminare?? Altro problemino, un pò più serio. Norton mi rileva il virus Trojan.Killav e mi dice che non riesce ad eliminarlo, tanto meno mi permette di metterlo in quarantena. Hai qualche idea di come posso fare???
Ti mando nuovamente il log, se vuoi dargli un'occhiata

GRAZIEEEE

Logfile of HijackThis v1.99.1
Scan saved at 0.41.26, on 25/05/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\regsvc.exe
C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
C:\WINNT\system32\MSTask.exe
C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
C:\WINNT\Explorer.EXE
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\System32\mspmspsv.exe
C:\Programmi\File comuni\Symantec Shared\SymTray.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\RunDll32.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\WINNT\system32\rundll32.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\WINNT\system32\autoexe.exe
C:\WINNT\system32\msdn.exe
C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\PROGRA~1\Alice\ALICEE~1\app\EnterNet.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\File comuni\Symantec Shared\NMain.exe
C:\utility\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.libero.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Web assistant - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O3 - Toolbar: Web assistant - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton SystemWorks\Norton Antivirus\NavShExt.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Programmi\Trojan Remover\Trjscan.exe
O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Programmi\Pirelli\Access Gateway USB Network\CnxTrApp.dll",AppEntry -REG "Pirelli\Access Gateway USB"
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [regedit] autoexe.exe
O4 - HKLM\..\Run: [Microsoft Developer Network] msdn.exe
O4 - HKLM\..\Run: [AdwareAlert] C:\Programmi\AdwareAlert\AdwareAlert.Exe -boot
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programmi\File comuni\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtray.exe SetReg
O4 - HKLM\..\Run: [AcctMgr] C:\Programmi\Norton SystemWorks\Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\RunServices: [regedit] autoexe.exe
O4 - HKLM\..\RunServices: [Microsoft Developer Network] msdn.exe
O4 - HKLM\..\RunOnce: [SymTray - Norton SystemWorks] C:\Programmi\File comuni\Symantec Shared\Symtrdr.exe
O4 - HKCU\..\Run: [MSMSGS] C:\Programmi\Messenger\msmsgs.exe /background
O4 - HKCU\..\Run: [regedit] autoexe.exe
O4 - HKCU\..\Run: [Microsoft Developer Network] msdn.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINNT\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\NPROTECT.EXE
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Programmi\Norton SystemWorks\Norton Antivirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Smart Card Client (SCardClnt) - Unknown owner - C:\WINNT\system32\FILES.exe (file missing)
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\SPEEDD~1\NOPDB.EXE
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe



Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.