www.MegaLab.it

da **zerofolle_72** » sab nov 27, 2010 10:31 pm

spero di aver fatto bene
francesca

da **hashcat** » dom nov 28, 2010 10:23 am

zerofolle_72 ha scritto:
<Log computer="1041919603176" scan="Normal" version="3.5.7.117" date="2010-11-27T22:12:03" timeSpentInSecs="480" filesProcessed="32305">
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@247realmedia[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@2o7[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@ad.adc-serv[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@ad.yieldmanager[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@ad.zanox[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@adbrite[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@adinterax[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@adtech[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@apmebf[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@atdmt[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@bs.serving-sys[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@content.yieldmanager[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@content.yieldmanager[3].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@doubleclick[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@fr.sitestat[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@fr.sitestat[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@invitemedia[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@livejasmin[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@media6degrees[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@mediaplex[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@oase00821.247realmedia[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@revsci[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@ru4[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@serving-sys[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@smartadserver[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@stats.paste2[1].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@statse.webtrendslive[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@tradedoubler[2].txt" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Cookies\frama@xiti[1].txt" />
</Item>
- <Item type="Malware" malwareName="Rootkit" score="111.0" status="Deleted">
- <Scanners>
<Scanner id="Prevx" name="High Risk Cloaked Malware" />
<Scanner id="Ikarus" name="Trojan.Win32.SuspectCRC!IK" />
</Scanners>
<File path="C:\Documents and Settings\frama\Dati applicazioni\7910.org\Ticker\desktop_ticker_39736[1].exe" hash="D58124EE2198620E11CE0E18CBC83305A7608D51815B08EAABCBC36AC60990E5" />
</Item>
- <Item type="Malware" malwareName="Rootkit" score="111.0" status="Deleted">
- <Scanners>
<Scanner id="Prevx" name="High Risk Cloaked Malware" />
<Scanner id="Ikarus" name="Trojan.Win32.SuspectCRC!IK" />
</Scanners>
<File path="C:\Documents and Settings\frama\Dati applicazioni\7910.org\Ticker\desktop_ticker_62283[1].exe" hash="F0C1521EC790DCCCADAB1C507F1A2C4D7FF4304764E3AB52DA94BA80B21E9383" />
</Item>
- <Item type="Malware" malwareName="Rootkit" score="111.0" status="Deleted">
- <Scanners>
<Scanner id="Prevx" name="High Risk Cloaked Malware" />
<Scanner id="Ikarus" name="Trojan.Win32.SuspectCRC!IK" />
</Scanners>
<File path="C:\Documents and Settings\frama\Dati applicazioni\7910.org\Ticker\desktop_ticker_72635[1].exe" hash="473AC03D6A49579D696EC7D5DAE0C5FCF8F450FE9A5FD59EEADC8443E8C6EE5A" />
</Item>
- <Item type="Malware" malwareName="Rootkit" score="111.0" status="Deleted">
- <Scanners>
<Scanner id="Prevx" name="High Risk Cloaked Malware" />
<Scanner id="Ikarus" name="Trojan.Win32.SuspectCRC!IK" />
</Scanners>
<File path="C:\Documents and Settings\frama\Dati applicazioni\7910.org\Ticker\desktop_ticker_99027[1].exe" hash="40D9FD0070F574C32898AC94AEC80B32155230BB853886916B0467D4BB31E13F" />
</Item>
- <Item type="Malware" malwareName="Malware" score="116.0" status="Deleted">
- <Scanners>
<Scanner id="Prevx" name="Medium Risk Malware" />
<Scanner id="Ikarus" name="Trojan.Generic!IK" />
</Scanners>
<File path="C:\Documents and Settings\frama\Documenti\file completati\programmi\PCStitch 7.0.13 + Keygen(programma per punto croce)\keygen.exe" hash="02BDB48DB33787B360F6AE5CFC56542EB781EB8E03B0FF19FB8D5A0DCFA0FC68" />
</Item>
- <Item type="Malware" malwareName="Malware" score="117.0" status="Quarantiend">
- <Scanners>
<Scanner id="G Data" name="Win32:Agent-AMLR [Trj] (Engine-B)" />
</Scanners>
<File path="C:\Documents and Settings\frama\Documenti\file completati\programmi\pippo.exe" hash="0F1C3E48064352DCE69DC2B94171C17AA69F04B310D933BCD427E47056F454B4" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:247realmedia.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ad.adc-serv.net" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ad.yieldmanager.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ad.youporn.videobox.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ad.zanox.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:adbrite.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:adinterax.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ads.ad4game.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ads.admaxasia.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ads.traffikings.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:ads.youporn.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:adtech.de" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:adultfriendfinder.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:atdmt.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:bs.serving-sys.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:content.yieldmanager.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:doubleclick.net" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:fl01.ct2.comclick.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:fr.sitestat.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:media6degrees.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:revsci.net" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:serving-sys.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:statcounter.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:statse.webtrendslive.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:tradedoubler.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:xiti.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:youporn.com" />
</Item>
- <Item type="Repair" score="0.0" status="Deleted">
<File path="C:\Documents and Settings\frama\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Cookies:youporn.videobox.com" />
</Item>
</Log>

spero di aver fatto bene
francesca

Si, tutto bene. A questo punto appena riscontri anomalie di qualsiasi tipo segnalale.

da **zerofolle_72** » dom nov 28, 2010 11:51 am

devo dire che tutto ieri neanche una schermata blu e neanche stamattina!!!

Grazie a tutti

da **FDAC** » dom nov 28, 2010 11:55 am

Di nulla, amico.
P.S. Posta un log di Hijackthis

da **zerofolle_72** » ven dic 03, 2010 9:09 pm

oggi ho avuto una nuova schermata blu....

Uploaded with ImageShack.us

grazie a tutti se vorrete visionarla...grz

PS appena posso riposto anche il log di hijack

da **zerofolle_72** » ven dic 03, 2010 9:12 pm

ecco il log..pensavo ci volesse più tempo...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21.13.04, on 03/12/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Alwil Software\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\frama\Documenti\file completati\programmi\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://it.rd.yahoo.com/customize/ie/def ... .yahoo.com
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = iexplore
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programmi\ConduitEngine\ConduitEngine.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programmi\ConduitEngine\ConduitEngine.dll
O4 - HKLM\..\Run: [avast5] "C:\Programmi\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Barra di ricerca di Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O15 - ESC Trusted Zone: http://*.update.microsoft.com
O20 - Winlogon Notify: !SASWinLogon - C:\Programmi\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: GameConsoleService - WildTangent, Inc. - C:\Programmi\WildGames\Game Console - WildGames\GameConsoleService.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: lxcg_device - - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\Nokia\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6736 bytes

ciao ciao

da **FDAC** » sab dic 04, 2010 12:21 pm

Rilancia Hijackthis:
● Do a System Scan Only
● spunta la casellina fianco di ogni singola voce che ti indicherò sotto
● una volta spuntate le voci:
● chiudi tutte le applicazioni aperte
● chiudi tutte le pagine del browser aperte
● in Hijackthis fixa le voci cliccando su Fix checked

Queste le voci da fixare:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>;*.local
R3 - URLSearchHook: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programmi\ConduitEngine\ConduitEngine.dll
O2 - BHO: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O3 - Toolbar: Softonic-IT Toolbar - {e3393495-8103-46a0-8181-270273eddd60} - C:\Programmi\Softonic-IT\tbSoft.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programmi\ConduitEngine\ConduitEngine.dll
O15 - ESC Trusted Zone: http://*.update.microsoft.com

Hai installato tu questo programma: ?
c:\APPS\HIDSERVICE\HIDSERVICE.exe

Disinstalla tutte le Toolbar presenti nel tuo SO.

Scarica ed installa Malwarebytes' Anti-Malware Free Version: http://www.malwarebytes.org
● alla richiesta di aggiornamento delle definizioni consenti l'aggiornamento
● clicca sul tasto scansiona ed esegui una scansione completa
● se vengono rilevate infezioni, eliminale
● al termine della scansione verrà rilasciato un log: salvalo sul Desktop perché lo dovrai allegare tramite il tag MEMO

da **lextor** » ven dic 10, 2010 6:52 am

Controlla la memoria secondo me é quella se hai 2 banchi prova a levarne 1 e prova e viceversa [8D]

www.MegaLab.it

ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Re: ripetute schermate blu

Chi c’è in linea