| Autore |
 Discussione  |
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
 Inserito il - 16/12/2005 : 22:46:16
|
Allora è un pò di tempo che da casa non riesco ad aprire la posta su
Gmail e allo stesso tempo, non so se il problema potrebbe o no essere lo stesso, ho problemi anche con un account su virgilio, li riesco ad entrare, però mi visualizza la pagina a metà quindi vedo solo l'ultimo messaggio ricevuto e tutto il resto della pagina è bianco.
Cosa può essere?
Graaaaaazie in anticipo :D
|
|
|
Yves
Moderatore
Città: Buenos Aires
6097 Messaggi |
Inserito il - 17/12/2005 : 01:49:00
|
Abbastanza strano (a dir poco...)
Tenta a "pulire" il tuo navigatore (coockies, files temporanei....), e magari provare con un altro, se sei un abituèe di Internet Explorer prova ad installare il Firefox 1.5 - [www].mozilla.org -, c'è in italiano ed è molto meno "ramazza spazzatura" dell'altro.
Magari, se tutto questo lo hai già fatto, postaci un log di hijackthis - htt*://[www].majorgeeks[.com]/download3155.html - forse qualche "animaletto" si è annidato nel tuo PC.
Ciao. |
 |
|
|
n/a
deleted
1470 Messaggi |
Inserito il - 17/12/2005 : 08:15:35
|
E' molto strano.
Quello suggerito da Yves è la 1° operazione da fare,libera cookies,file tmp e installa Firefox.
Dato che ci sei disattiva ripristino di configurazione,visualizza file e cartelle di sistema e dalla provvisoria dai una pulitina con SpybootS&D aggiornato.
Se il problema persiste posta un log di HJK |
|
|
|
Er-Gladiatore
Advanced Member
Città: Roma
2540 Messaggi |
Inserito il - 17/12/2005 : 10:58:34
|
Quoto entrambi,
Fai anche qualche scansione On-line (Specialmente se come Antivirus hai Norton).
Per fare questo devi abilitare gli Active X vedi qui:
htt*://[www].notrace.it/faq-rimozione-virus.htm
e le scansioni le trovi qui:
Scansioni On-line: Trend Micro htt*://it.trendmicro-europe[.com]/consumer/housecall/housecall_launch.php & Kaspersky lab htt*://[www].kaspersky[.com]/scanforvirus |
|
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
Inserito il - 17/12/2005 : 22:20:47
|
| sto provando tutto...anche se Mozilla mi ha già risolto il problema comunque! |
|
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
Inserito il - 17/12/2005 : 22:21:21
|
| p.s. grazie come sempre |
|
|
|
Er-Gladiatore
Advanced Member
Città: Roma
2540 Messaggi |
Inserito il - 17/12/2005 : 22:51:35
|
| Che versione hai di Internet Explorer? |
|
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
Inserito il - 17/12/2005 : 23:17:53
|
| la 6.0.2800.1106 |
|
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
Inserito il - 17/12/2005 : 23:23:50
|
Ecco il logfile...io non ci capisco nulla
Logfile of HijackThis v1.99.1
Scan saved at 23.24.28, on 17/12/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\nhksrv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINNT\System32\cisvc.exe
C:\WINNT\system32\CTSvcCDA.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\slserv.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
C:\WINNT\PowerS.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\OFFICEKB.exe
C:\Programmi\Trust\Trust mouse utility\1.1\mouse32a.exe
C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\MMKEYB.EXE
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\TrayMon.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\osd.exe
C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE
C:\Programmi\Creative\ShareDLL\CtNotify.exe
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\Programmi\Creative\ShareDLL\MediaDet.Exe
C:\WINNT\system32\internat.exe
C:\WINNT\system32\wuauclt.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\Programmi\Microsoft Office\Office\1040\OLFSNT40.EXE
C:\WINNT\System32\cidaemon.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Adobe\Photoshop 7.0\Photoshop.exe
C:\Documents and Settings\Administrator\Documenti\Applicazioni Internet\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = htt*://foggqcngwun[.com]/w14EVpSMTH7mGqdb14P7owsDKhleQ0OUH8QcNJTYTuT1xAwnQ7AHa8aMBdmAO40L.cgi
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = htt*://[www].forumcommunity.net/?c=941
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: UserInit=C:\WINNT\system32\Userinit.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: Five hide - {6DB8E841-3994-1E2D-9443-30EBE46F9C18} - blank (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: sectglue - {4C7EBD48-AB5D-956C-885A-19AD2CEC267C} - blank (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\System32\NeroCheck.exe
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKLM\..\Run: [StillImageMonitor] C:\W
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [PowerS] C:\WINNT\PowerS.exe
O4 - HKLM\..\Run: [FLMOFFICEKEYBOARD] C:\Programmi\Trust\Trust keyboard utility\1.1\OFFICEKB.exe
O4 - HKLM\..\Run: [FLMTRUSTMOUSE] C:\Programmi\Trust\Trust mouse utility\1.1\mouse32a.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Programmi\File comuni\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programmi\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [CTRegRun] C:\WINNT\CTRegRun.EXE
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Rilevatore di dischi] C:\Programmi\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Programmi\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [webscan] "C:\Programmi\Acceleration Software\Anti-Virus\stopsignav.exe" -k
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ICQ Lite] C:\Programmi\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [*******! Pager] C:\PROGRA~1\*******!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programmi\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Porta Symantec Fax Starter Edition.lnk = C:\Programmi\Microsoft Office\Office\1040\OLFSNT40.EXE
O8 - Extra context menu item: &Cerca con Google - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Point&&Go - C:\Programmi\File comuni\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: &Traduci parola in italiano - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Link a ritroso - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Garzanti Linguistica - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmi\File comuni\Garzanti\Dizionari Garzanti 2005\IEExtension.dll
O9 - Extra 'Tools' menuitem: Garzanti Linguistica - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmi\File comuni\Garzanti\Dizionari Garzanti 2005\IEExtension.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programmi\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programmi\ICQLite\ICQLite.exe
O9 - Extra button: *******! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\*******!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: *******! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\*******!\MESSEN~1\YPager.exe
O16 - DPF: *******! Spades - htt*://download.games.*******[.com]/games/clients/y/st2_x .cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - htt*://housecall-beta.trendmicro[.com]/housecall/xscan60 .cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - htt*://messenger.zone.msn[.com]/binary/MessengerStatsPAClient .cab30149 .cab
O16 - DPF: {1EDF25DE-DFB2-40CA-AA83-30AE7DA8C203} (FileSharingCtrl Class) - htt*://appdirectory.messenger.msn[.com]/AppDirectory/P4Apps/FileSharing/it/filesharingctrl .cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - htt*://messenger.zone.msn[.com]/binary/MineSweeper .cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - htt*://security.symantec[.com]/sscv6/SharedContent/vc/bin/AvSniff .cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - htt*://[www].cult3d[.com]/download/cult .cab
O16 - DPF: {40289096-9F72-4A04-BCB3-E434ECDCEE33} (AppDLCtrl Class) - htt*://download.howudodat[.com]/chatterbox/download/beta/appdl .cab
O16 - DPF: {53D602E4-66ED-4B03-A5B8-19E4F4F6F18F} (Tiphone Control) - htt*://netphone.tiscali.it/netphone/ocx/tiphone .cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - htt*://security.symantec[.com]/sscv6/SharedContent/common/bin/cabsa .cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - htt*://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro[.com]/housecall/xscan53 .cab
O16 - DPF: {7F8B2500-3B5D-474C-B828-C766ECE3AB3C} (ATLmosquito1 Class) - htt*://netphone.tiscali.it/netphone/ocx/mosquito .cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - htt*://[www].notrace.it/scan/Msie/bitdefender .cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - htt*://messenger.zone.msn[.com]/binary/MessengerStatsClient .cab
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - htt*://ww3.atlanteitaliano.it/ecwplugins/ncs .cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - htt*://static.zangocash[.com]/cab/Zango/ie/bridge-c18 .cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - htt*://acs.pandasoftware[.com]/activescan/as5free/asinst .cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - htt*://messenger.msn[.com]/download/msnmessengersetupdownloader .cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - htt*://messenger.zone.msn[.com]/binary/ZIntro .cab30149 .cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - htt*://messenger.zone.msn[.com]/binary/Bankshot .cab30149 .cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - htt*://ax.phobos.apple[.com].edgesuite.net/detection/ITDetector .cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - htt*://messenger.zone.msn[.com]/binary/Chess .cab31267 .cab
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\system32\CTSvcCDA.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\Programmi\Trust\Trust keyboard utility\1.1\nhksrv.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) - - C:\WINNT\SYSTEM32\slserv.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINNT\system32\ZoneLabs\vsmon.exe
|
|
|
|
n/a
deleted
1470 Messaggi |
Inserito il - 19/12/2005 : 11:44:48
|
Avvia normalmente e vai in Start - esegui e digita msconfig vai nella linguetta AVVIO e togli la spunta a queste voci
(controlla prima in task manager(CTRL+ALT+CANC) se trovi questo processo internat.exe, se c'è selezionalo col mouse e clicca su termina processo.)
----Voci da togliere in msconfig--------
C:\Programmi\Trust\Trust keyboard utility\1.1\nhksrv.exe --> Screenserver
C:\WINNT\system32\CTSvcCDA.exe --> SounBlaster
C:\WINNT\system32\slserv.exe --> Modem
C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE --> Scanner
C:\WINNT\PowerS.exe --> Analizzatore grafico
C:\Programmi\Trust\Trust keyboard utility\1.1\OFFICEKB.exe --> sconosciuto se non conosci la provenienza toglilo
C:\Programmi\Trust\Trust mouse utility\1.1\mouse32a.exe --> Mouse
C:\Programmi\Trust\Trust keyboard utility\1.1\MMKEYB.EXE --> Tastiera
C:\Programmi\File comuni\Real\Update_OB\realsched.exe --> Real player
C:\Programmi\Creative\ShareDLL\MediaDet.Exe --> Sound Blaster
C:\Programmi\Trust\Trust keyboard utility\1.1\TrayMon.exe
C:\Programmi\Trust\Trust keyboard utility\1.1\osd.exe
C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE --> sconosciuto se non conosci la provenienza toglilo
C:\WINNT\system32\internat.exe --> Trojan
C:\Programmi\Skype\Phone\Skype.exe
C:\WINNT\system32\wuauclt.exe
C:\Programmi\Creative\ShareDLL\MediaDet.Exe
C:\Programmi\Microsoft Office\Office\1040\OLFSNT40.EXE
C:\Programmi\Adobe\Photoshop 7.0\Photoshop.exe
Queste voci sono superflue,non servono in avvio del sistema,nessuno dei programmi abbinati verrà deinstallato.
Dopo riavvia in provvisoria ,disabilita il ripristino di sistema,visualizza file e cartelle di sistema per le istruzioni vai quì htt*://[www].notrace.it/faq-rimozione-virus.htm
Lancia HJK e fixa queste voci
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll (file missing)
O2 - BHO: Five hide - {6DB8E841-3994-1E2D-9443-30EBE46F9C18} - blank (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: sectglue - {4C7EBD48-AB5D-956C-885A-19AD2CEC267C} - blank (file missing)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
O4 - HKLM\..\Run: [StillImageMonitor] C:\W
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [PowerS] C:\WINNT\PowerS.exe
O4 - HKLM\..\Run: [FLMOFFICEKEYBOARD] C:\Programmi\Trust\Trust keyboard utility\1.1\OFFICEKB.exe
O4 - HKLM\..\Run: [FLMTRUSTMOUSE] C:\Programmi\Trust\Trust mouse utility\1.1\mouse32a.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Creative WebCam Tray] C:\Programmi\Creative\Shared Files\CAMTRAY.EXE
O4 - HKLM\..\Run: [CTRegRun] C:\WINNT\CTRegRun.EXE
O4 - HKLM\..\Run: [EPSON Stylus C66 Series] C:\WINNT\system32\spool\DRIVERS\W32X86\3\E_S4I0S2.EXE /P23 "EPSON Stylus C66 Series" /O6 "USB001" /M "Stylus C66"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Rilevatore di dischi] C:\Programmi\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [Disc Detector] C:\Programmi\Creative\ShareDLL\CtNotify.exe
O4 - HKLM\..\Run: [webscan] "C:\Programmi\Acceleration Software\Anti-Virus\stopsignav.exe" -k
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [ICQ Lite] C:\Programmi\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [*******! Pager] C:\PROGRA~1\*******!\MESSEN~1\ypager.exe -quiet
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programmi\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Porta Symantec Fax Starter Edition.lnk = C:\Programmi\Microsoft Office\Office\1040\OLFSNT40.EXE
O8 - Extra context menu item: &Cerca con Google - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Point&&Go - C:\Programmi\File comuni\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: &Traduci parola in italiano - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Link a ritroso - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Garzanti Linguistica - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmi\File comuni\Garzanti\Dizionari Garzanti 2005\IEExtension.dll
O9 - Extra 'Tools' menuitem: Garzanti Linguistica - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programmi\File comuni\Garzanti\Dizionari Garzanti 2005\IEExtension.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programmi\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programmi\ICQLite\ICQLite.exe
O9 - Extra button: *******! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\*******!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: *******! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\*******!\MESSEN~1\YPager.exe
O16 - DPF: *******! Spades - htt*://download.games.*******[.com]/games/clients/y/st2_x .cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - htt*://housecall-beta.trendmicro[.com]/housecall/xscan60 .cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - htt*://messenger.zone.msn[.com]/binary/MessengerStatsPAClient .cab30149 .cab
O16 - DPF: {1EDF25DE-DFB2-40CA-AA83-30AE7DA8C203} (FileSharingCtrl Class) - htt*://appdirectory.messenger.msn[.com]/AppDirectory/P4Apps/FileSharing/it/filesharingctrl .cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - htt*://messenger.zone.msn[.com]/binary/MineSweeper .cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - htt*://security.symantec[.com]/sscv6/SharedContent/vc/bin/AvSniff .cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - htt*://[www].cult3d[.com]/download/cult .cab
O16 - DPF: {40289096-9F72-4A04-BCB3-E434ECDCEE33} (AppDLCtrl Class) - htt*://download.howudodat[.com]/chatterbox/download/beta/appdl .cab
O16 - DPF: {53D602E4-66ED-4B03-A5B8-19E4F4F6F18F} (Tiphone Control) - htt*://netphone.tiscali.it/netphone/ocx/tiphone .cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - htt*://security.symantec[.com]/sscv6/SharedContent/common/bin/cabsa .cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - htt*://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro[.com]/housecall/xscan53 .cab
O16 - DPF: {7F8B2500-3B5D-474C-B828-C766ECE3AB3C} (ATLmosquito1 Class) - htt*://netphone.tiscali.it/netphone/ocx/mosquito .cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - htt*://[www].notrace.it/scan/Msie/bitdefender .cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - htt*://messenger.zone.msn[.com]/binary/MessengerStatsClient .cab
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - htt*://ww3.atlanteitaliano.it/ecwplugins/ncs .cab
O16 - DPF: {8FCDF9D9-A28B-480F-8C3D-581F119A8AB8} (MediaGatewayX) - htt*://static.zangocash[.com]/cab/Zango/ie/bridge-c18 .cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - htt*://acs.pandasoftware[.com]/activescan/as5free/asinst .cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - htt*://messenger.msn[.com]/download/msnmessengersetupdownloader .cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - htt*://messenger.zone.msn[.com]/binary/ZIntro .cab30149 .cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - htt*://messenger.zone.msn[.com]/binary/Bankshot .cab30149 .cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - htt*://ax.phobos.apple[.com].edgesuite.net/detection/ITDetector .cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - htt*://messenger.zone.msn[.com]/binary/Chess .cab31267 .cab
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\system32\CTSvcCDA.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Netropa NHK Server (Nhksrv) - Unknown owner - C:\Programmi\Trust\Trust keyboard utility\1.1\nhksrv.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
Dopo lancia una scansione con Spyboot ,svuota il cestino,i file temp e i cookies (pannello di controllo-impostazioni internet)
oppure in firefox in strumenti - opzioni.
Riavvia in normale,lancia una scansione con AV aggiornato (AVG è un pò pochino,ZA lo stesso) finita la scansione pulisci il sistema con regSeeker.
Visti i programmi che usi ti consiglio una protezione più elevata. Bitdefender in abbinata ad Antivir PE come antivirus(non vanno in conflitto) e configura Internet rifiutando gli ActiveX e gli script Java.
Fai un log di HJK e postalo |
|
|
|
n/a
deleted
Città: eh eh ti piacerebbe saperlo
2419 Messaggi |
Inserito il - 19/12/2005 : 11:51:53
|
ascolta i consigli di alex..e poi io ti candido come prima classificata per il log più simpatico del 2005.....
a parte gli scherzi.....stai attenta all'uso di icq..messenger..skipe e compagnia bella....e cambia antivirus....
ciaoooooooooo
|
|
|
|
n/a
deleted
1470 Messaggi |
Inserito il - 19/12/2005 : 12:06:10
|
Mi è scappata questa
C:\Documents and Settings\Administrator\Documenti\Applicazioni Internet\HijackThis.exe
navighi da Admin. crea un altro utente e non navigare mai da admin,è un pò ostica la faccenda con W2k ma è indispensabile non navigare come admin. |
|
|
|
Er-Gladiatore
Advanced Member
Città: Roma
2540 Messaggi |
Inserito il - 19/12/2005 : 16:00:47
|
Quoto.....
e aggiungo di fare qualche scansione con questi:
Download Elite Toolbar Remover htt*://[www].simplytech.it/ETRemover/ETRemover_v212.zip (Non và installato [AntiMalware])
Download Ad-aware SE htt*://[www].pianetapc.it/downloads.php?id=15 (AntiSpy) |
|
|
|
Pearl
Junior Member
Città: nuoro
50 Messaggi |
Inserito il - 20/12/2005 : 23:25:52
|
ok...non ho molta, ma moltissima strada da fare...non prendetemi troppo in giro :(
:D a parte tutto...se digito msconfig da esegui mi da errore..[.com]inciamo bene.
Per il resto pensavo che avg fosse un buon antivirus. E faccio spessissimo la scansione con adaware e spybot e pure panda. Inoltre ho installato anche za come firewall. La scansione fatta qui seguendo quelle istruzioni non mi ha rivelato virus..boooh sono un caso disperato!!!! |
Modificato da - Pearl in data 20/12/2005 23:26:35 |
|
|
|
n/a
deleted
1470 Messaggi |
Inserito il - 21/12/2005 : 09:56:38
|
Citazione:
Messaggio inserito da Pearl
ok... a parte tutto...se digito msconfig da esegui mi da errore..[.com]inciamo bene.
Ci credo che ti dà errore in W2000 msconfig non c'è. puoi scaricarlo da quì htt*://[www]2.whidbey[.com]/djdenham/Msconfig.htm
PS. mi ero dimenticata che avevi W2000,scarica msconfig e esegui le istruzioni postate
------Modificato x Download non funzionante |
Modificato da - n/a in data 21/12/2005 11:24:11 |
|
|
| |
Discussione |
|
posta elettronica
Forum Bloccato
