monsee lo controlli tu? grazie....
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13.34.31, on 29/08/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\LOADQM.EXE
C:\WINDOWS\SYSTEM\STIMON.EXE
C:\WINDOWS\SYSTEM\LVCOMS.EXE
C:\PROGRAMMI\GRISOFT\AVG7\AVGCC.EXE
C:\PROGRAMMI\GRISOFT\AVG7\AVGAMSVR.EXE
C:\PROGRAMMI\GRISOFT\AVG7\AVGEMC.EXE
C:\WINDOWS\RunDLL.exe
C:\PROGRAMMI\SITECOM\SITECOM WIRELESS NETWORK USB ADAPTER TURBO G WL-172\INSTALLER\WLANUTL.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAMMI\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE
C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.libero.it/R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {5038FED1-CEFE-11D2-9E74-00A0C945A948} - (no file)
O2 - BHO: &Virgilio Rapido - {844FC402-F06A-4A47-ACB9-45BDC9721BD1} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\VIRGILIOBANDS187.DLL
O2 - BHO: (no name) - {182FAA00-83F6-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\MSPBDE4I0.DLL
O2 - BHO: (no name) - {6316BD80-84A3-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\ENAKBLE3.DLL
O2 - BHO: (no name) - {18E4ACC0-85A4-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\DSSKBASE.DLL
O2 - BHO: (no name) - {9D541780-85AD-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\CRTDLWL.DLL
O2 - BHO: (no name) - {F2F8E860-861A-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\QODBCJT32.DLL
O2 - BHO: (no name) - {45501480-863E-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\SFCXDLL.DLL
O2 - BHO: (no name) - {734CCD40-866D-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\MSSIPN32.DLL
O2 - BHO: (no name) - {6B37D300-8700-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\NCRYPTUI.DLL
O2 - BHO: (no name) - {11373C20-8722-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\INFRAFRED.DLL
O2 - BHO: (no name) - {B40EF9A0-87AA-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\RPECNS4.DLL
O2 - BHO: (no name) - {941376C0-87BA-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\RPCBLTSPX.DLL
O2 - BHO: (no name) - {AEEA2160-88B4-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\FONTEDXT.DLL
O2 - BHO: (no name) - {91547DE0-8967-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\W95IJNF16.DLL
O2 - BHO: (no name) - {0E59F480-898D-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\SFCHANNEL.DLL
O2 - BHO: (no name) - {B24CB120-8AD4-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\SETUPKX.DLL
O2 - BHO: (no name) - {E179CB00-8AEC-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\OLEI32.DLL
O2 - BHO: (no name) - {6F1907A0-8B9C-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\UVB5IT.DLL
O2 - BHO: (no name) - {D265A760-8BD2-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\DSKABPI32.DLL
O2 - BHO: (no name) - {64146800-8D62-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\XWHLP16T.DLL
O2 - BHO: (no name) - {5D3D6840-8D82-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\BLACTKBOX.DLL
O2 - BHO: (no name) - {0A4EE9A0-8E19-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\CMFCUIA32.DLL
O2 - BHO: (no name) - {3F9D2520-8E2F-11D8-8A46-444553540000} - C:\WINDOWS\SYSTEM\MTCXDM.DLL
O2 - BHO: (no name) - {F97B6C20-8EE5-11D8-8A46-9164F6031143} - C:\WINDOWS\SYSTEM\HCOMCTL32.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMI\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_11\bin\ssv.dll
O3 - Toolbar: &Virgilio Rapido - {844FC402-F06A-4A47-ACB9-45BDC9721BD1} - C:\WINDOWS\DOWNLOADED PROGRAM FILES\VIRGILIOBANDS187.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [LVComs] C:\WINDOWS\SYSTEM\LVComS.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\GRISOFT\AVG7\AVGCC.EXE /STARTUP
O4 - HKLM\..\Run: [AVG7_AMSVR] C:\PROGRA~1\GRISOFT\AVG7\AVGAMSVR.EXE
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\GRISOFT\AVG7\AVGEMC.EXE
O4 - HKLM\..\Run: [TrustInstaller] D:\SETUP.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY
O4 - HKUS\.DEFAULT\..\Run: [Taskbar Display Controls] RunDLL deskcp16.dll,QUICKRES_RUNDLLENTRY (User 'Default user')
O4 - .DEFAULT Startup: Sitecom Wireless Utility.lnk = C:\Programmi\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.exe (User 'Default user')
O4 - Startup: Sitecom Wireless Utility.lnk = C:\Programmi\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\SYSTEM\MSJAVA.DLL
O12 - Plugin for .pdf: C:\PROGRA~1\INTERN~1\PLUGINS\nppdf32.dll
O12 - Plugin for .spop: C:\PROGRA~1\INTERN~1\Plugins\NPDocBox.dll
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/MessengerStatsClient.cabO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) -
http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -
http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -
http://go.microsoft.com/fwlink/?linkid=39204O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) -
http://security.symantec.com/sscv6/SharedContent/vc/bin9x/AvSniff.cab--
End of file - 6929 bytes