Ciao a tutti,
Pottreste gentilmente farmi un controllo del log da un paio di giorni riscontro diversi problemi con il pc <img src=icon_smile_sad.gif border=0 align=middle>.
Logfile of HijackThis v1.99.1
Scan saved at 17.12.06, on 13/10/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.it/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go0ogle.net/search.php?q=poker&aff=16237&saff=2R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=explorer.exe "C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00001.exe"
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,C:\WINDOWS\SERVICES.EXE
O1 - Hosts: 127.0.0.3
www.onedayoffer.bizO1 - Hosts: 127.0.0.3 onedayoffer.biz
O1 - Hosts: 127.0.0.3 callmachine.net
O1 - Hosts: 127.0.0.3
www.callmachine.netO1 - Hosts: 127.0.0.3 reportbucks.com
O1 - Hosts: 127.0.0.3
www.reportbucks.comO1 - Hosts: 127.0.0.3 isuckall.com
O1 - Hosts: 127.0.0.3
www.isuckall.comO1 - Hosts: 127.0.0.3 wbdialer.biz
O1 - Hosts: 127.0.0.3
www.wbdialer.bizO1 - Hosts: 127.0.0.3 alphadialer.com
O1 - Hosts: 127.0.0.3
www.alphadialer.comO1 - Hosts: 127.0.0.3 it.online-more.com
O1 - Hosts: 127.0.0.3
www.it.online-more.comO1 - Hosts: 127.0.0.3 statscash.net
O1 - Hosts: 127.0.0.3
www.statscash.netO1 - Hosts: 127.0.0.3 85.255.113.242
O1 - Hosts: 127.0.0.3 takeyourbucks.com
O1 - Hosts: 127.0.0.3
www.takeyourbucks.comO1 - Hosts: 127.0.0.3 195.225.176.25
O1 - Hosts: 127.0.0.3 iframebiz.biz
O1 - Hosts: 127.0.0.3 iframeurl.biz
O1 - Hosts: 127.0.0.3 iframesite.biz
O1 - Hosts: 127.0.0.3 toolbarbiz.biz
O1 - Hosts: 127.0.0.3 toolbarsite.biz
O1 - Hosts: 127.0.0.3 toolbarurl.biz
O1 - Hosts: 127.0.0.3 toolbartraff.biz
O1 - Hosts: 127.0.0.3 buytoolbar.biz
O1 - Hosts: 127.0.0.3
www.iframebiz.bizO1 - Hosts: 127.0.0.3
www.iframeurl.bizO1 - Hosts: 127.0.0.3
www.iframesite.bizO1 - Hosts: 127.0.0.3
www.toolbarbiz.bizO1 - Hosts: 127.0.0.3
www.toolbarsite.bizO1 - Hosts: 127.0.0.3
www.toolbarurl.bizO1 - Hosts: 127.0.0.3
www.toolbartraff.bizO1 - Hosts: 127.0.0.3
www.buytoolbar.bizO1 - Hosts: 127.0.0.3 81.9.5.9
O1 - Hosts: 127.0.0.3 n-glx.s-redirect.com
O1 - Hosts: 127.0.0.3
www.sexfiles.nuO1 - Hosts: 127.0.0.3 awmdabest.com
O1 - Hosts: 127.0.0.3 sexfiles.nu
O1 - Hosts: 127.0.0.3 allforadult.com
O1 - Hosts: 127.0.0.3
www.allforadult.comO1 - Hosts: 127.0.0.3
www.iframe.bizO1 - Hosts: 127.0.0.3 iframe.biz
O1 - Hosts: 127.0.0.3 procounter.biz
O1 - Hosts: 127.0.0.3
www.procounter.bizO1 - Hosts: 127.0.0.3 advadmin.biz
O1 - Hosts: 127.0.0.3
www.advadmin.bizO1 - Hosts: 127.0.0.3 trafficbest.net
O1 - Hosts: 127.0.0.3
www.trafficbest.netO1 - Hosts: 127.0.0.3
www.newiframe.bizO1 - Hosts: 127.0.0.3 newiframe.biz
O1 - Hosts: 127.0.0.3
www.vesbiz.bizO1 - Hosts: 127.0.0.3 vesbiz.biz
O1 - Hosts: 127.0.0.3
www.pizdato.bizO1 - Hosts: 127.0.0.3 pizdato.biz
O1 - Hosts: 127.0.0.3
www.aaasexypics.comO1 - Hosts: 127.0.0.3 aaasexypics.com
O1 - Hosts: 127.0.0.3
www.virgin-tgp.netO1 - Hosts: 127.0.0.3 vparivalka.com
O1 - Hosts: 127.0.0.3
www.vparivalka.comO1 - Hosts: 127.0.0.3 iframeprofit.com
O1 - Hosts: 127.0.0.3
www.iframeprofit.comO1 - Hosts: 127.0.0.3 virgin-tgp.net
O1 - Hosts: 127.0.0.3
www.awmcash.bizO1 - Hosts: 127.0.0.3 awmcash.biz
O1 - Hosts: 127.0.0.3 buldog-stats.com
O1 - Hosts: 127.0.0.3
www.buldog-stats.comO1 - Hosts: 127.0.0.3 fregat.drocherway.com
O1 - Hosts: 127.0.0.3 slutmania.biz
O1 - Hosts: 127.0.0.3
www.slutmania.bizO1 - Hosts: 127.0.0.3 toolbarpartner.com
O1 - Hosts: 127.0.0.3
www.toolbarpartner.comO1 - Hosts: 127.0.0.3
www.megapornix.comO1 - Hosts: 127.0.0.3 megapornix.com
O1 - Hosts: 127.0.0.3
www.sp2fucked.bizO1 - Hosts: 127.0.0.3 sp2fucked.biz
O1 - Hosts: 127.0.0.3 greg-tut.com
O1 - Hosts: 127.0.0.3
www.greg-tut.comO1 - Hosts: 127.0.0.3 nylonsexy.com
O1 - Hosts: 127.0.0.3
www.nylonsexy.comO1 - Hosts: 127.0.0.3 topsearch10.com
O1 - Hosts: 127.0.0.3
www.topsearch10.comO1 - Hosts: 127.0.0.3 statscash.biz
O1 - Hosts: 127.0.0.3
www.statscash.bizO1 - Hosts: 127.0.0.3 vxiframe.biz
O1 - Hosts: 127.0.0.3
www.vxiframe.bizO1 - Hosts: 127.0.0.3 crazy-toolbar.com
O1 - Hosts: 127.0.0.3
www.crazy-toolbar.comO1 - Hosts: 127.0.0.3 topcash.biz
O1 - Hosts: 127.0.0.3
www.topcash.bizO1 - Hosts: 127.0.0.3 loadcash.biz
O1 - Hosts: 127.0.0.3
www.loadcash.bizO1 - Hosts: 127.0.0.3 txiframe.biz
O1 - Hosts: 127.0.0.3
www.txiframe.bizO1 - Hosts: 127.0.0.3 besthvac.com
O1 - Hosts: 127.0.0.3
www.besthvac.comO1 - Hosts: 127.0.0.3 traff4.com
O1 - Hosts: 127.0.0.3
www.traff4.comO1 - Hosts: 127.0.0.3 porn-host.org
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O2 - BHO: Class - {BFC01A0D-CAE3-3F7F-7EC0-50DF0E90910F} - C:\WINDOWS\dtfhh1.dll (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [HPpromo psc 2175] "C:\Programmi\Hewlett-Packard\Digital Imaging\Bin\hpqWRG.exe" /N "psc 2175" -r
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [MS taaskbaar] taaskbaars.exe
O4 - HKLM\..\Run: [WinFix service] hzwdgjnz.exe
O4 - HKLM\..\Run: [EPSON Stylus D68 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAAE.EXE /P23 "EPSON Stylus D68 Series" /O6 "USB002" /M "Stylus D68"
O4 - HKLM\..\Run: [Update WinFix] yxirshfsuzyn.exe
O4 - HKLM\..\Run: [msennger] C:\WINDOWS\System32\kasber.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Programmi\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [kpx] C:\WINDOWS\System32\rundll32.exe C:\WINDOWS\System32\fastRX.dll DllInitApp
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RouterI66] C:\WINDOWS\Fonts\runner.exe
O4 - HKLM\..\Run: [WindowsServicesStartup] C:\DOCUME~1\Ahmed89\IMPOST~1\Temp\svchost.exe 1
O4 - HKLM\..\Run: [ATICCC] "C:\Programmi\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [SoundMan] C:\WINDOWS\sndman.exe -i
O4 - HKLM\..\Run: [ImMsn] C:\WINDOWS\msncomm.exe /i
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\RunServices: [Laordewin service] ydbpbfunc.exe
O4 - HKLM\..\RunServices: [MS taaskbaar] taaskbaars.exe
O4 - HKLM\..\RunServices: [WinFix service] hzwdgjnz.exe
O4 - HKLM\..\RunServices: [Update WinFix] yxirshfsuzyn.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MS taaskbaar] taaskbaars.exe
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [shell] "C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\RunServices: [System Update] mssetupconf.exe
O4 - Startup: Adobe Gamma Loader.exe
O4 - Startup: Adobe Gamma.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: ruqcw.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: hp psc 2000 Series.lnk = C:\Programmi\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_08\bin\npjpi150_08.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -
http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) -
http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cabO16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://by106w.bay106.mail.live.com/mail/resources/MsnPUpld.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} -
http://software-dl.real.com/131c53d4d60cd8d21206/netzip/RdxIE601_it.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1151265967421O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) -
http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO16 - DPF: {FFFF0001-0001-101A-A3C9-08002B2F49FC} -
http://download.energy-factor.com/dialer/it/activex_5014_it.exeO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: IpManager (IPtable) - Unknown owner - C:\WINDOWS\ipconfg32.exe (file missing)
O23 - Service: License Management Service ESD - element5 - C:\Programmi\File comuni\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe
O23 - Service: Maya 7.0 Documentation Server (maya70docserver) - Unknown owner - C:\Programmi\Alias\Maya7.0\docs\wrapper.exe
O23 - Service: Word Process (msproc) - Unknown owner - C:\WINDOWS\winpad.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: sdktemp - Unknown owner - C:\WINDOWS\axdcfasb.exe (file missing)
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programmi\Sygate\SPF\smc.exe
Grazie in anticipo <img src=icon_smile_big.gif border=0 align=middle>