Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

aiutoo, mi controllate il log!!! Opzioni
niko6
Inviato: Thursday, July 20, 2006 10:46:53 AM
Rank: Member

Iscritto dal : 1/5/2005
Posts: 0
Logfile of HijackThis v1.99.1
Scan saved at 10.36.43, on 20/07/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Apps\Launch Manager\LaunchAp.exe
C:\Apps\Launch Manager\PowerKey.exe
C:\Apps\Launch Manager\HotkeyApp.exe
C:\Apps\Launch Manager\MMKey.exe
C:\Apps\Launch Manager\CtrlVol.exe
C:\Apps\Launch Manager\Wbutton.exe
C:\WINDOWS\System32\lass.exe
C:\WINDOWS\System32\cd64.exe
C:\WINDOWS\System32\McWin32.exe
C:\Programmi\digicomt\Michelangelo USB ADSL\CnxDslTb.exe
C:\WINDOWS\LTSMMSG.exe
C:\WINDOWS\System32\svchost32.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\vsnpstd.exe
C:\Programmi\ipwins\ipwins.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\File comuni\{D44E869A-063A-1040-0808-020808020027}\Update.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\WINDOWS\vmm32dll.exe
C:\Programmi\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe
C:\Programmi\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Documents and Settings\USER\Desktop\Nuova cartella\HijackThis.exe
C:\WINDOWS\System32\msnchecker.exe
C:\WINDOWS\System32\msnchecker.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.tiscali.it/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.tiscali.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.packardbell.it/center
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - (no file)
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LaunchAp] C:\Apps\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [PowerKey] "C:\Apps\Launch Manager\PowerKey.exe"
O4 - HKLM\..\Run: [HotkeyApp] C:\Apps\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [MMKey] C:\Apps\Launch Manager\MMKey.exe
O4 - HKLM\..\Run: [CtrlVol] C:\Apps\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [Wbutton] "C:\Apps\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [PC98Monitor] "C:\Programmi\TIM Turbo Manager V2.33I\N100E Monitor.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [lsass] C:\WINDOWS\System32\lass.exe
O4 - HKLM\..\Run: [cd64] C:\WINDOWS\System32\cd64.exe
O4 - HKLM\..\Run: [McWindows] C:\WINDOWS\System32\McWin32.exe
O4 - HKLM\..\Run: [ChkMail] H9Æ’
O4 - HKLM\..\Run: [Microsoft SDKb] ms32sgss.exe
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\digicomt\Michelangelo USB ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [LTSMMSG] LTSMMSG.exe
O4 - HKLM\..\Run: [Service] svchost32.exe
O4 - HKLM\..\Run: [Compaq32 Service Drivers] ms32.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [Yahoo Load] msnchecker.exe
O4 - HKLM\..\Run: [WinAntiVirusPro2006] "C:\Programmi\WinAntiVirus Pro 2006\WinAV.exe" /min
O4 - HKLM\..\Run: [IpWins] C:\Programmi\ipwins\ipwins.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\RunServices: [Microsoft SDKb] ms32sgss.exe
O4 - HKLM\..\RunServices: [Service] svchost32.exe
O4 - HKLM\..\RunServices: [Compaq32 Service Drivers] ms32.exe
O4 - HKLM\..\RunServices: [Yahoo Load] msnchecker.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Microsoft SDKb] ms32sgss.exe
O4 - HKCU\..\Run: [Service] svchost32.exe
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Yahoo Load] msnchecker.exe
O4 - HKCU\..\Run: [vmm32dll] C:\WINDOWS\vmm32dll.exe
O4 - HKCU\..\RunServices: [Yahoo Load] msnchecker.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Picture Package Menu.lnk = ?
O4 - Global Startup: Picture Package VCD Maker.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O14 - IERESET.INF: START_PAGE_URL=www.packardbell.it/center
O16 - DPF: {F5BC716E-2650-4B08-9235-C110CF95017F} (Connessione Tiscali) - http://selfcare.tiscali.it/scripts/oneclick/ConnessioneTiscali.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Firewall service (FWSvc) - Unknown owner - C:\Programmi\WinAntiVirus Pro 2006\FWSvc.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Microsoft Windows Protection (Windows Protection Service) - Unknown owner - C:\WINDOWS\winlogon.exe (file missing)

Sponsor
Inviato: Thursday, July 20, 2006 10:46:53 AM

 
steven75
Inviato: Thursday, July 20, 2006 11:17:38 AM
Rank: Member

Iscritto dal : 5/8/2006
Posts: 0
Ciao ,
sei messo molto maluccio .....
Comunque proviamoci lo stesso a ripulire il tutto. Comincia a fare queste operazioni :

1) Devi assolutamente fare il <b>Windows Update</b> e installare il <b>SP2</b>
(hai delle infezioni che infettano sistemi non aggiornati )
2) Dovresti installare anche un firewall diverso da quello di windows .
3) - Scarica questi programmi (quelli che non hai)
<b>Antispyware e Protezioni</b>
Ad-aware - SpybotS&D - Spyware Blaster - CWShredder -->http://www.aiutamici.com/software/view.asp?tipo=home&CodSw=388&SH=N

<b>Antimlware</b>
Ewido
http://www.ewido.net/en/download/
PS: é shareware ma dopo i 14 gg di prova,smetterà di funzionare solo
la protezione in tempo reale, il programma potrai continuare ad aggiornarlo per fare lo scan del tuo pc.

Adesso fai uno scan dell'intero sistema con i programmi che hai scaricato (aggiorna quelli che lo richiedono)....

Alla fine degli scan , effettua anche una scansione online BitDefender oppure Panda
http://steven.altervista.org/files/scan.html

Dopo queste operazioni , riposta il log hijackthis e vediamo il da farsi
Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.