cocktail di Adware Funweb.E e Adware.Mysearchweb.G/A/AB ecc!

[AleAndMarilyn]

Logfile of HijackThis v1.99.1
Scan saved at 16.01.01, on 20/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Norton Ghost\Agent\VProSvc.exe
C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\Programmi\Sony\VAIO Event Service\VESMgr.exe
C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
C:\Programmi\File comuni\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Apoint\Apoint.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ICO.EXE
C:\Programmi\Sony\VAIO Power Management\SPMgr.exe
C:\Programmi\Sony\ISB Utility\ISBMgr.exe
C:\Programmi\Sony\Wireless Switch Setting Utility\Switcher.exe
C:\Programmi\Sony\VAIO Update 2\VAIOUpdt.exe
C:\Programmi\Apoint\Apntex.exe
C:\Programmi\Utimaco\SafeGuard PrivateDisk\pdservice.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
C:\Programmi\Norton Ghost\Agent\GhostTray.exe
C:\Programmi\Softwin\BitDefender9\bdoesrv.exe
C:\programmi\softwin\bitdefender9\bdnagent.exe
C:\programmi\softwin\bitdefender9\bdswitch.exe
C:\Program Files\Hamlet\Adsl\dslstat.exe
C:\Program Files\Hamlet\Adsl\dslagent.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Programmi\Logitech\Video\LogiTray.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\a-squared Anti-Malware\a2guard.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Programmi\Logitech\SetPoint\SetPoint.exe
C:\Programmi\Logitech\Video\FxSvr2.exe
C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\System32\alg.exe
C:\Programmi\File comuni\Logitech\KHAL\KHALMNPR.EXE
C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\eMule\emule.exe
C:\Programmi\File comuni\Softwin\BitDefender Update Service\livesrv.exe
C:\Programmi\File comuni\Softwin\BitDefender Scan Server\bdss.exe
C:\Programmi\Softwin\BitDefender9\vsserv.exe
c:\programmi\softwin\bitdefender9\bdmcon.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\DOCUME~1\Paolo\IMPOST~1\Temp\Rar$EX00.969\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.club-vaio.com/en/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://vcl.vaio.sony.co.jp/eu/PforVAIO.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Apoint] C:\Programmi\Apoint\Apoint.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Programmi\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Programmi\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Programmi\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [Switcher.exe] C:\Programmi\Sony\Wireless Switch Setting Utility\Switcher.exe
O4 - HKLM\..\Run: [VAIO Update 2] "C:\Programmi\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
O4 - HKLM\..\Run: [PDService.exe] C:\Programmi\Utimaco\SafeGuard PrivateDisk\pdservice.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [Norton Ghost 10.0] "C:\Programmi\Norton Ghost\Agent\GhostTray.exe"
O4 - HKLM\..\Run: [BDMCon] "C:\Programmi\Softwin\BitDefender9\bdmcon.exe"
O4 - HKLM\..\Run: [BDOESRV] "C:\Programmi\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "c:\programmi\softwin\bitdefender9\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\programmi\softwin\bitdefender9\bdswitch.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\Hamlet\Adsl\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\Hamlet\Adsl\dslagent.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmi\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmi\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [a-squared] "C:\Programmi\a-squared Anti-Malware\a2guard.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [updateMgr] "C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_8 -reboot 1
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programmi\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Cerca con Google - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://c:\programmi\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Link a ritroso - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.club-vaio.com/en/
O15 - Trusted Zone: *.sony-europe.com
O15 - Trusted Zone: *.sonystyle-europe.com
O15 - Trusted Zone: *.vaio-link.com
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://aleandmarilynmanson4ever.spaces. ... nPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 2732593843
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {A1F2F2CE-06AF-483C-9F12-D3BAA72477D6} (BatchDownloader Class) - http://appdirectory.messenger.msn.com/A ... gWXMSN.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b47946.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{70EC9DF4-2C88-4B72-BBD4-BBA2414EA0A0}: NameServer = 85.37.17.13 85.38.28.81
O17 - HKLM\System\CCS\Services\Tcpip\..\{EA59187B-DCFC-4C12-BFA3-52343F613480}: NameServer = 213.156.56.80,151.99.125.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{70EC9DF4-2C88-4B72-BBD4-BBA2414EA0A0}: NameServer = 85.37.17.13 85.38.28.81
O18 - Protocol: bw+0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {3F439128-A1AB-4ED0-AF99-08B94F9B3004} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: VESWinlogon - C:\WINDOWS\SYSTEM32\VESWinlogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe Active File Monitor V4 (AdobeActiveFileMonitor4.0) - Unknown owner - C:\Programmi\Adobe\Photoshop Elements 4.0\PhotoshopElementsFileAgent.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Programmi\File comuni\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: EvtEng - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Programmi\Sony\Image Converter 2\IcVzMon.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Programmi\File comuni\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: Norton Ghost - Symantec Corporation - C:\Programmi\Norton Ghost\Agent\VProSvc.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: RegSrvc - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\Avlib\SSScsiSV.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Programmi\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - SOFTWIN S.R.L. - C:\Programmi\Softwin\BitDefender9\vsserv.exe
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Programmi\File comuni\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

[Amantide]

Guarda, il log è pulito e non si vede nulla di strano. Faresti bene però a mettere un buon firewall, Comodo Firewall o Zone Alarm, e scarica anche CCleaner per ripulire il pc dai file temporanei e potenzialmente dannosi.

[AleAndMarilyn]

Ho usato CCleaner e ha eliminato mille cose..ora rifacendo la scansione con bit defender xò...sempre uguale..anzi forse 2 in meno..ecco il log..



Percorso di scansione : C:\
Cartelle : 7298
File : 714123
Archivi : 13599
File impaccati : 93200
Virus identificati : 17
File infetti : 27
Segnalazioni : 0
File sospetti : 0
File ripuliti : 0
File cancellati : 0
File copiati : 0
File spostati : 0
File rinominati : 0
Errori di accesso : 62
Tempo di scansione : 02:08:10
Velocità di scansione (file/sec) :92

Definizioni dei virus : 420991
Scansione dei plugin : 16
Archiviazione dei plugin : 41
Plugin disimpaccati : 6
Plugin di mail : 6
Plugin di sistema : 5

Risultati:

C:\Documents and Settings\Paolo\Impostazioni locali\Temporary Internet Files\Content.IE5\XLKYFNPH\ZwinkyInitialSetup1.0.0.15[1].exe Rilevato: Adware.Funweb.E
C:\Programmi\a-squared Anti-Malware\Quarantine\1af682b04c5bb0c7a5a4f0858eeb1b5a.a2q=>Programmi/mywebsearch/bar/1.bin/f3scrctr.dll=>(Quarantine-PE) Rilevato: Adware.Mywebsearch.AN
C:\Programmi\a-squared Anti-Malware\Quarantine\1ca11e86b30ddcc92e0fe2c45fc553d9.a2q=>Programmi/mywebsearch/bar/1.bin/m3skplay.exe=>(Quarantine-PE) Rilevato: Adware.Mywebsea.A
C:\Programmi\a-squared Anti-Malware\Quarantine\38ed4a15afc3ad14514cc821ff3b129c.a2q=>Programmi/mywebsearch/bar/1.bin/f3shllvw.dll=>(Quarantine-PE) Rilevato: Adware.Mywebsearch.G
C:\Programmi\a-squared Anti-Malware\Quarantine\6043ed825432651691c18e202c73ac9a.a2q=>Programmi/mywebsearch/bar/1.bin/f3httpct.dll=>(Quarantine-PE) Rilevato: Adware.Mywebsearch.AF
C:\Programmi\a-squared Anti-Malware\Quarantine\75cc52b22e4531c844e591d742d8e922.a2q=>Programmi/mywebsearch/bar/1.bin/f3wphook.dll=>(Quarantine-PE) Rilevato: Adware.Msearch.A
C:\Programmi\a-squared Anti-Malware\Quarantine\8df791ead368ddf6d9dc79dc1684bfb7.a2q=>Programmi/mywebsearch/bar/1.bin/f3cjpeg.dll=>(Quarantine-PE) Rilevato: Application.MWS
C:\Programmi\a-squared Anti-Malware\Quarantine\94c48f2aa2e4e6bab31574007ace8bd4.a2q=>Programmi/mywebsearch/bar/1.bin/m3html.dll=>(Quarantine-PE) Rilevato: Application.AdTool.MyWebSearch.AT
C:\Programmi\a-squared Anti-Malware\Quarantine\950d959da92e50180627d713a6870e4f.a2q=>Programmi/mywebsearch/bar/1.bin/mwsoemon.exe=>(Quarantine-PE) Rilevato: Adware.Mywebsearch.I
C:\Programmi\a-squared Anti-Malware\Quarantine\96e839c1298a89b0e8baf93c0244331c.a2q=>Programmi/mywebsearch/bar/1.bin/f3imstub.dll=>(Quarantine-PE) Rilevato: Adware.MyWebSearch.M
C:\Programmi\a-squared Anti-Malware\Quarantine\ca3cffe8ed9b5a79870eef4f4147bb68.a2q=>Programmi/mywebsearch/bar/1.bin/f3histsw.dll=>(Quarantine-PE) Rilevato: Adware.Msearch.C
C:\Programmi\MyWebSearch\bar\1.bin\F3CJPEG.DLL Rilevato: Application.MWS
C:\Programmi\MyWebSearch\bar\1.bin\F3HISTSW.DLL Rilevato: Adware.Msearch.C
C:\Programmi\MyWebSearch\bar\1.bin\F3HTTPCT.DLL Rilevato: Adware.Mywebsearch.AF
C:\Programmi\MyWebSearch\bar\1.bin\F3IMSTUB.DLL Rilevato: Adware.MyWebSearch.M
C:\Programmi\MyWebSearch\bar\1.bin\F3PSSAVR.SCR Rilevato: Adware.Msearch.O
C:\Programmi\MyWebSearch\bar\1.bin\F3SCHMON.EXE Rilevato: Adware.Msearch.P
C:\Programmi\MyWebSearch\bar\1.bin\F3SCRCTR.DLL Rilevato: Adware.Mywebsearch.AN
C:\Programmi\MyWebSearch\bar\1.bin\F3SHLLVW.DLL Rilevato: Adware.Mywebsearch.G
C:\Programmi\MyWebSearch\bar\1.bin\F3WPHOOK.DLL Rilevato: Adware.Msearch.A
C:\Programmi\MyWebSearch\bar\1.bin\M3HTML.DLL Rilevato: Application.AdTool.MyWebSearch.AT
C:\Programmi\MyWebSearch\bar\1.bin\M3IDLE.DLL Rilevato: Adware.Iwon.A
C:\Programmi\MyWebSearch\bar\1.bin\M3PLUGIN.DLL Rilevato: Adware.Mywebsearch.AS
C:\Programmi\MyWebSearch\bar\1.bin\M3SKPLAY.EXE Rilevato: Adware.Mywebsea.A
C:\Programmi\MyWebSearch\bar\1.bin\M3SLSRCH.EXE Rilevato: Application.AdTool.MyWebSearch.AU
C:\Programmi\MyWebSearch\bar\1.bin\MWSOEMON.EXE Rilevato: Adware.Mywebsearch.I
C:\Programmi\MyWebSearch\bar\1.bin\NPMYWEBS.DLL Rilevato: Adware.Toolbar.MyWebSearch.AC



AHHH non so + che pesci pigliare..scusate se sono noiosa ma nn so che farci..:((

[Amantide]

Allora, la prima voce si riferisce ai file temporanei, sono eliminabili con aiuto di CCleaner.
Le prossime indicano i file infetti nella cartella di quarantena di A-squared, oramai sono innocui.
Le ultime invece... prova a vedere se prima riesci a disinstallare MyWebSearch dal pannello di controllo e poi rifai la scansione con A-squared.
Prima però installa un firewall, perché ho il sospetto che MyWebSearch si è reinstallato un altra volta dopo che hai già fatto la scansione con A-squared.

[AleAndMarilyn]

Ok allora userò dinuovo CCleaner..su MySearchToolbar il problema è che non risulta tra i programmi installati :(( csì dal pannello d controllo non lo posso eliminare..e quando vado a stanarlo dalla sua cartella (contenuta a sua volta nella cartella dei Programmi) non me lo fa eliminare perché dice sia impossibile trovare il file o il disco di origine...tra l'altro dev'essere proprio quella cartella la fonte d ogni male perché non appena l'ho aperta per tentare di cancellarne i componenti individualmente Bit defender mi ha bombardata di segnali della serie : Rilevato adware eccc..se riuscissi ad eliminare quella forse finirebbe tutto..

[AleAndMarilyn]

Ah dimenticavo,quanto a firewall ho già qllo d Bit Defender oltre a qllo d windows,ne devo mettere comunque 1 altro ancora?

[Amantide]

Per prima cosa installa il firewall per pararti ...ops...
Osservando più attentamenteil log, ti posso assicurare che MyWebSearch è stato reinstallato almeno 2 volte, è stato questo eseguibile, che ti sei beccata navigando in internet, a reinstallarlo senza che non te ne sei nemmeno accorta:
C:\Documents and Settings\Paolo\Impostazioni locali\Temporary Internet Files\Content.IE5\XLKYFNPH\ZwinkyInitialSetup1.0.0.15[1].exe
Installa il firewall e rifai la scansione con A-squared, dovrebbe bastare per risolvere.

[Amantide]

Ah dimenticavo,quanto a firewall ho già qllo d Bit Defender oltre a qllo d windows,ne devo mettere comunque 1 altro ancora?

Visto come vanno le cose, direi proprio di si.
Disabilita però quello di Bitdefender e quello di Windows.

[aris73]

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
questa é da fixare
ma non é realativa al problema

[AleAndMarilyn]

Raga è una cosa assurda..cioè veramente c scappo di testa..allora ho fatto tutto..ripulito x la 3a vlta con CCleaner..Installato ZoneAlarm correttamente..scansionato con A-squared..maaaa non appena elimino tutti i files infetti rilevati da A-squared faccio un'ulteriore scansione di verifica..e i files infetti sono ancora lì!!Allora li rielimino..Rifaccio scan...e ci sono dinuovo..! *_* che dite oramai ci sarà solo da formattare?

[crazy.cat]

I file infetti che ritrovi sono nella cartella C:\Programmi\MyWebSearch\ oppure nella quarantena di A2 squared?

Fai la scansione e la pulizia scollegato da internet?

Prima di fare la scansione apri il task manager e termina questi processi, dovresti trovare solo l'ultimo, ma in caso chiudi anche gli altri
F3SCHMON.EXE - M3SKPLAY.EXE - M3SLSRCH.EXE - MWSOEMON.EXE

Non è che hai installato qualche programma che contiene anche questo adware e così appena ti colleghi ad internet te lo riscarica.
Escludendo programmi come Office o Nero, puoi farci un elenco dei programmi che hai installato sul pc?

[AleAndMarilyn]

Dunque ieri ho provato una decina d volte con A-squared a fare la scansione,eliminare e rifare la scansione e c'erano sempre dinuovo..ero off-line,così ho provato altre 3 volte a fare la scansione mettere in quarantena e rifare la scansione e c'erano sempre..ovviamente prima di ogni scansione controllavo che non ci fossero quei processi che mi avete indicato..ma non li ho visti..comunque è come se i virus risultassero sia nella quarante na sia in libertà..per quanto riguarda i programmi installati oltre quelli 100% sicuri ho:
-Apple Software update
-AV Mode button utility
-DVgate plus
-Instant mode
-MSXML 4.0 SP2(KB925672)
-MSXML 4.0 sp2(KB927978)
-OpenMG limited Patch 4.3-05-10-05-01
-OPenMG Secure MOdule 4.3.00

Gli altri li conosco bene e so che son sicuri ma questi sinceramente non so a che servano..Comunque sì avevo cercato di scaricare 1 programma che invece appunto è risultato essere 1 virus.. :( ed è come se fosse incancellabile..anche senza connettersi ad internet i file si rigenerano o forse semplicemente non si sono mai mossi..boh..

[AleAndMarilyn]

Mi resta solo da formattare?

[crazy.cat]

Mi resta solo da formattare?

A questo punto forse si, a2 squared era in grado di eliminare quell'adware.
Ma se rispunta fuori ogni volta non saprei dirti da dove te lo riprendi.

A volte è difficile fare assistenza a distanza.....

[bReAkDOwN]

Mi resta solo da formattare?

A questo punto forse si, a2 squared era in grado di eliminare quell'adware.
Ma se rispunta fuori ogni volta non saprei dirti da dove te lo riprendi.

A volte è difficile fare assistenza a distanza.....

Non arrendetevi.. c'è ancora qualcosa da provare..
Ad esempio potrebbe essere utile conoscere esattamente cosa asquared rileva, e dove, e poi magari un paio di log di gmer per controllare quello che hjthis non rileva.
Scusatemi se mi sono intromesso così al volo, ma stavo seguendo la discussione e mi spiace sempre doversi arrendere a formattare.
Anche se in alcuni casi, concordo, è inevitabile.

[Amantide]

Concordo anche io

Molla per un po' A-squared e prova a fare le scansioni con AVG Anti-Spyware e SuperAntispyware.

[crazy.cat]

Ciao e benvenuto

Fai la scansione completa con SuperAntispyware o con A-squared, oppure con entrambi.

Guarda che superantispyware è già stato usato.
Bisognerebbe capire perché l'adware risbuca sempre fuori, ma bisognerebbe anche avere il pc sotto mano.

[AleAndMarilyn]

Super Antispyware purtroppo non va bene x il mio pc..perché quando mi kiede d riavviare x rendere effettive le eliminazioni il pc non riesce + ad avviarsi..rimane lo skermo nero così mi tocca spegnere con il pulsante (è 1 portatile vaio) e andare in modalità provisoria e riportare il sistema al momento prima della scansione..comunque provo gli altri..grazie ^_^