Pagina 1 di 1

Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: ven mag 08, 2009 9:27 am
da yumechan83
Salve a tutti!
Purtroppo devo nuovamente chiedere aiuto perché il mio "barattolo" di pc se n'è inventata una nuova.
Premetto che come antivirus ho Zone Alarm Security Siute 2009.

Allora il problema è iniziato circa un mese fa, di punto in bianco all'avvio del computer: sparisce dfrg.msc...e non mi fa più deframmentare normalmente. Ho dovuto rinominare il file e crearmi il collegamento nel desktop, cosi me la fa fare.
Poi il ctccw32.dll..virus levato che avevo già risolto un'altra volta grazie a voi!
Un po di pausa e ora, quasi ad ogni riavvio, mi da l'avviso che non riesce a trovare una dll in system32.........sono arrivata a quattro:

fupipivo.dll
dapatudi.dll
peliziru.dll
kuzeyogi.dll


...............i nomi sembrano delle prese in giro, vero??.........

Come se non bastasse credo di avere uno di quei generatori di pubblicità che non riesco a togliere..puntualmente mi fa uscire la pubblicità di ELLE (la rivista) e la data del file si aggiorna! Si chiama miyameru con estensione file..

Vi prego aiutatemi!!!!!!!!!
Carico il file di Hijackthis su megaupload cosi non appesantisco la pagina, grazie!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10.28.23, on 08/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\RegService.exe
C:\Programmi\Nero\Nero 7\InCD\InCDsrv.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\LightScribe\LSSrvc.exe
C:\Programmi\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
C:\Programmi\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\SPMSMON.EXE
C:\Programmi\Nero\Nero 7\InCD\NBHGui.exe
C:\Programmi\Nero\Nero 7\InCD\InCD.exe
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
C:\Programmi\lg_fwupdate\fwupdate.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE
C:\WINDOWS\system32\atwtusb.exe
C:\Programmi\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\system32\UMonit.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe
C:\Programmi\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\TBLMOUSE.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programmi\Logitech\SetPoint\SetPoint.exe
C:\Programmi\VIA\RAID\raid_tool.exe
C:\Programmi\File comuni\Logishrd\KHAL2\KHALMNPR.EXE
C:\Programmi\ATI Technologies\ATI.ACE\cli.exe
C:\Programmi\ATI Technologies\ATI.ACE\cli.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: (no name) - {02af3e22-4ebc-4470-a066-35c56f1ff39f} - C:\WINDOWS\system32\pudosuji.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programmi\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {77AB5974-55A3-4737-9FD5-B93C64307F79} - C:\WINDOWS\system32\gepesiso.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ChangeICON] C:\WINDOWS\SPMSMON.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Programmi\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Programmi\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programmi\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [LGODDFU] C:\Programmi\lg_fwupdate\fwupdate.exe blrun
O4 - HKLM\..\Run: [CloneCDTray] "C:\Programmi\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [EPSON Stylus Photo RX420 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE /P31 "EPSON Stylus Photo RX420 Series" /O6 "USB001" /M "Stylus Photo RX420"
O4 - HKLM\..\Run: [atwtusb] atwtusb.exe beta
O4 - HKLM\..\Run: [ATIPTA] C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Programmi\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [UMonit] C:\WINDOWS\system32\UMonit.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Office SturtUp] osa9.exe
O4 - HKLM\..\Run: [leriyilusa] Rundll32.exe "C:\WINDOWS\system32\towefuzu.dll",s
O4 - HKLM\..\Run: [CPM0beba295] Rundll32.exe "c:\windows\system32\poveyawi.dll",a
O4 - HKLM\..\Run: [08d89109] rundll32.exe "C:\WINDOWS\system32\lehelojo.dll",b
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: AutoCAD Startup Accelerator.lnk = C:\Programmi\File comuni\Autodesk Shared\acstart17.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programmi\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Programmi\VIA\RAID\raid_tool.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programmi\Microsoft Office\Office12\GrooveSystemServices.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\powenewe.dll C:\WINDOWS\system32\jisagade.dll c:\windows\system32\poveyawi.dll
O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\poveyawi.dll
O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\poveyawi.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Communication Modem Device Manager II - Unknown owner - C:\WINDOWS\system32\RegService.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programmi\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Programmi\File comuni\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe
O23 - Service: mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit (mi-raysat_3dsMax2009_32) - Unknown owner - C:\Programmi\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: ODBC Administration Service (odbcasvc) - Unknown owner - C:\WINDOWS\SYSTEM32\odbcasvc.EXE (file missing)
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programmi\CyberLink\Shared Files\RichVideo.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 10501 bytes

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: ven mag 08, 2009 9:37 am
da crazy.cat
Per i log usa questo sistema
sicurezza/importante-come-allegare-i-log-alle-discussioni-t45943.html
megaupload con quel sistema di captcha è veramente schifoso.

Fai una scansione con combofix e posta il suo log seguendo il sistema che ti ho detto.

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: ven mag 08, 2009 9:56 am
da yumechan83
Pardon non avevo notato le novità!! Grazie per aver modificato! Ora provo come mi hai detto tu! E posto!


Mi ha fatto un po paura quel programma..mi ha fatto scaricare dalla microsoft una console di ripristino di emergenza e ha lavorato per circa 12minuti. Alla fine il risultato è questo:

ComboFix 09-05-07.06 - Steri 08/05/2009 10.59.53.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.39.1040.18.1791.1233 [GMT 2:00]
Eseguito da: c:\documents and settings\Steri\Desktop\ComboFix.exe
AV: ZoneAlarm Security Suite Antivirus *On-access scanning enabled* (Updated)
FW: ZoneAlarm Security Suite Firewall *enabled*
.
ADS - WINDOWS: deleted 24 bytes in 1 streams.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))

c:\programmi\CMVideoPlugin
c:\windows\system32\aliyowot.ini
c:\windows\system32\diwuzisi.dll
c:\windows\system32\egotamaf.ini
c:\windows\system32\fihiwiku.exe
c:\windows\system32\folomato.dll
c:\windows\system32\gopikobi.dll
c:\windows\system32\ibokipog.ini
c:\windows\system32\idutapad.ini
c:\windows\system32\igoyezuk.ini
c:\windows\system32\jisagade.dll
c:\windows\system32\kivihude.dll
c:\windows\system32\lehelojo.dll
c:\windows\system32\nahibozo.dll
c:\windows\system32\ojolehel.ini
c:\windows\system32\opipimew.ini
c:\windows\system32\poveyawi.dll
c:\windows\system32\pudosuji.dll
c:\windows\system32\setelojo.dll
c:\windows\system32\towefuzu.dll
c:\windows\system32\urizilep.ini
c:\windows\system32\wegahuwe.dll
c:\windows\system32\wemipipo.dll
c:\windows\system32\wibopovo.dll

.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_ODBCASVC
-------\Service_odbcasvc


((((((((((((((((((((((((( Files Creati Da 2009-04-08 al 2009-05-08 )))))))))))))))))))))))))))))))))))
.

2009-05-07 07:36 . 2009-05-07 07:36 -------- d-----w c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files
2009-05-07 07:34 . 2009-05-07 07:35 -------- d-----w c:\documents and settings\All Users\Dati applicazioni\PrevxCSI
2009-05-04 18:46 . 2009-05-04 18:49 -------- d-----w c:\programmi\Windows Live Safety Center
2009-05-04 15:15 . 2002-07-24 02:30 32128 ----a-w c:\windows\system32\drivers\VIAAGP1.SYS
2009-05-04 10:52 . 2004-08-19 12:00 229439 -c--a-w c:\windows\system32\dllcache\multibox.dll
2009-05-04 10:51 . 2004-08-19 12:00 7168 -c--a-w c:\windows\system32\dllcache\f3ahvoas.dll
2009-05-04 10:46 . 2004-08-19 13:39 28672 ----a-w c:\windows\system32\irmon.dll
2009-05-04 10:46 . 2004-08-03 21:00 87424 ----a-w c:\windows\system32\drivers\irda.sys
2009-05-04 10:46 . 2004-08-19 13:39 153600 ----a-w c:\windows\system32\irftp.exe
2009-05-04 10:46 . 2004-08-19 13:39 8192 ----a-w c:\windows\system32\wshirda.dll
2009-05-04 10:34 . 2001-08-17 19:51 19584 ----a-w c:\windows\system32\drivers\rasirda.sys
2009-05-04 10:28 . 2004-08-19 12:00 13312 -c--a-w c:\windows\system32\dllcache\irclass.dll
2009-05-04 10:28 . 2004-08-19 12:00 13312 ----a-w c:\windows\system32\irclass.dll
2009-05-04 10:28 . 2004-08-19 12:00 24661 -c--a-w c:\windows\system32\dllcache\spxcoins.dll
2009-05-04 10:28 . 2004-08-19 12:00 24661 ----a-w c:\windows\system32\spxcoins.dll
2009-04-25 21:30 . 2009-04-25 21:30 -------- d-----w c:\programmi\Trend Micro
2009-04-25 09:34 . 2009-04-25 09:35 -------- d-----w c:\programmi\CCleaner
2009-04-24 09:17 . 2009-04-24 09:17 261 ----a-w c:\windows\msdres.bin
2009-04-22 17:56 . 2009-04-22 17:56 -------- d-----w c:\documents and settings\Steri\Impostazioni locali\Dati applicazioni\PCHealth
2009-04-21 12:22 . 2004-08-03 21:10 78464 ----a-w c:\windows\system32\drivers\usbvideo.sys
2009-04-20 15:31 . 2009-04-20 15:41 -------- d-----w c:\documents and settings\Steri\Dati applicazioni\Desktopicon
2009-04-20 15:30 . 2009-04-20 15:30 -------- d-----w c:\programmi\DsNET Corp
2009-04-19 20:26 . 2009-04-19 20:26 -------- d-----w c:\documents and settings\Steri\Dati applicazioni\Palmlex
2009-04-19 20:26 . 2009-04-19 20:28 -------- d-----w c:\programmi\Codice Fiscale
2009-04-19 20:12 . 2009-04-19 20:12 -------- d--h--w c:\documents and settings\Steri\InstallAnywhere
2009-04-17 18:33 . 2009-04-17 18:33 -------- d-----w c:\windows\YoutubeEXE
2009-04-15 15:18 . 2009-04-15 15:18 -------- d-----w c:\documents and settings\Steri\Impostazioni locali\Dati applicazioni\Ascaron Entertainment
2009-04-15 15:16 . 2009-04-15 15:16 -------- d--h--r c:\documents and settings\Steri\Dati applicazioni\SecuROM
2009-04-15 15:16 . 2009-04-15 15:16 107888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-04-15 15:09 . 2007-10-22 01:39 267272 ----a-w c:\windows\system32\xactengine2_10.dll
2009-04-15 15:09 . 2007-10-02 07:56 444776 ----a-w c:\windows\system32\d3dx10_36.dll
2009-04-15 15:09 . 2007-10-12 13:14 1374232 ----a-w c:\windows\system32\D3DCompiler_36.dll
2009-04-15 15:09 . 2007-10-12 13:14 3734536 ----a-w c:\windows\system32\d3dx9_36.dll
2009-04-15 15:09 . 2007-07-19 22:57 267112 ----a-w c:\windows\system32\xactengine2_9.dll
2009-04-15 15:09 . 2007-07-19 16:14 444776 ----a-w c:\windows\system32\d3dx10_35.dll
2009-04-15 15:09 . 2007-07-19 16:14 1358192 ----a-w c:\windows\system32\D3DCompiler_35.dll
2009-04-15 15:09 . 2007-07-19 16:14 3727720 ----a-w c:\windows\system32\d3dx9_35.dll
2009-04-15 15:09 . 2007-06-20 18:46 266088 ----a-w c:\windows\system32\xactengine2_8.dll
2009-04-15 15:09 . 2007-10-22 01:37 17928 ----a-w c:\windows\system32\X3DAudio1_2.dll
2009-04-15 15:09 . 2007-04-04 16:53 81768 ----a-w c:\windows\system32\xinput1_3.dll
2009-04-15 15:09 . 2007-04-04 16:55 261480 ----a-w c:\windows\system32\xactengine2_7.dll
2009-04-15 15:08 . 2007-03-15 14:57 443752 ----a-w c:\windows\system32\d3dx10_33.dll
2009-04-15 15:08 . 2007-03-12 14:42 1123696 ----a-w c:\windows\system32\D3DCompiler_33.dll
2009-04-15 15:08 . 2007-03-12 14:42 3495784 ----a-w c:\windows\system32\d3dx9_33.dll
2009-04-15 15:08 . 2007-01-24 13:27 255848 ----a-w c:\windows\system32\xactengine2_6.dll
2009-04-15 15:08 . 2006-12-08 10:02 251672 ----a-w c:\windows\system32\xactengine2_5.dll
2009-04-15 15:08 . 2006-09-28 14:05 237848 ----a-w c:\windows\system32\xactengine2_4.dll
2009-04-15 15:08 . 2007-03-05 10:42 15128 ----a-w c:\windows\system32\x3daudio1_1.dll
2009-04-15 14:58 . 2009-04-15 14:58 -------- d-----w c:\windows\Logs
2009-04-15 14:58 . 2009-04-15 14:58 413696 ----a-w c:\windows\system32\wrap_oal.dll
2009-04-15 14:58 . 2009-04-15 14:58 110592 ----a-w c:\windows\system32\OpenAL32.dll
2009-04-13 17:32 . 2009-04-13 17:32 -------- d-----w c:\windows\system32\AGEIA
2009-04-13 17:32 . 2009-04-13 17:32 -------- d-----w c:\programmi\AGEIA Technologies
2009-04-13 17:30 . 2009-04-13 17:31 -------- d-----w c:\programmi\File comuni\Wise Installation Wizard
2009-04-13 16:54 . 2009-04-13 16:54 -------- d-----w c:\documents and settings\All Users\Dati applicazioni\DAEMON Tools Pro
2009-04-13 16:04 . 2009-04-13 16:59 -------- d-----w c:\documents and settings\Steri\Dati applicazioni\DAEMON Tools Pro
2009-04-11 10:30 . 2009-04-11 10:30 -------- d-----w c:\documents and settings\All Users\Dati applicazioni\vsosdk
2009-04-11 08:51 . 2009-04-11 08:51 -------- d-----w c:\documents and settings\Administrator
2009-04-10 18:38 . 2009-04-13 16:46 721904 ----a-w c:\windows\system32\drivers\sptd.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-08 09:07 . 2009-01-18 14:37 174789920 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-05-08 09:06 . 2009-01-03 10:22 -------- d-----w c:\programmi\lg_fwupdate
2009-05-08 09:04 . 2009-01-18 14:37 2341628 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-05-05 20:10 . 2009-01-03 17:43 -------- d-----w c:\programmi\ALCATEL PC Suite
2009-05-05 19:56 . 2009-02-05 19:56 79872 --sha-w c:\windows\system32\gepesiso.dll
2009-05-05 07:56 . 2009-02-05 07:56 79872 --sha-w c:\windows\system32\famatoge.dll
2009-05-04 11:01 . 2004-08-19 12:00 84330 ----a-w c:\windows\system32\perfc010.dat
2009-05-04 11:01 . 2004-08-19 12:00 489598 ----a-w c:\windows\system32\perfh010.dat
2009-05-04 10:49 . 2004-08-19 12:00 67 --sha-w c:\windows\Fonts\desktop.ini
2009-05-04 10:48 . 2009-01-02 16:43 23604 -c--a-w c:\windows\system32\emptyregdb.dat
2009-04-27 11:26 . 2009-04-27 11:26 1450496 ----a-w c:\windows\Internet Logs\xDB68.tmp
2009-04-27 11:25 . 2009-04-27 11:25 117613 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_04_27_12_31_31_small.dmp.zip
2009-04-23 08:05 . 2009-01-02 17:28 123976 ----a-w c:\documents and settings\Steri\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-04-21 12:37 . 2009-03-07 11:56 123976 ----a-w c:\documents and settings\Pino\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-04-19 14:49 . 2009-04-19 20:03 2702336 ----a-w c:\windows\Internet Logs\xDB6.tmp
2009-04-19 14:49 . 2009-04-19 20:03 2020864 ----a-w c:\windows\Internet Logs\xDB7.tmp
2009-04-16 18:17 . 2009-04-03 07:57 4203303 ----a-w c:\windows\Internet Logs\tvDebug.Zip
2009-04-13 16:14 . 2009-03-28 20:33 -------- d-----w c:\programmi\JoWood
2009-04-11 15:03 . 2009-04-11 15:05 1942528 ----a-w c:\windows\Internet Logs\xDB5.tmp
2009-04-07 08:00 . 2009-04-07 08:01 1455104 ----a-w c:\windows\Internet Logs\xDB4.tmp
2009-04-06 16:48 . 2009-03-07 11:12 -------- d-----w c:\programmi\Diablo II
2009-04-05 18:55 . 2009-04-05 20:08 3737088 ----a-w c:\windows\Internet Logs\xDB3.tmp
2009-04-02 20:14 . 2009-01-03 20:41 -------- d-----w c:\programmi\Microsoft
2009-04-02 15:30 . 2009-04-02 15:18 -------- d-----w c:\programmi\Orbitdownloader
2009-03-30 15:51 . 2009-03-30 15:51 174897 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_30_17_51_35_small.dmp.zip
2009-03-27 08:56 . 2009-01-02 17:13 -------- d-----w c:\programmi\Java
2009-03-26 16:00 . 2009-03-26 16:01 3139584 ----a-w c:\windows\Internet Logs\xDB2.tmp
2009-03-26 08:38 . 2009-03-26 08:39 1823232 ----a-w c:\windows\Internet Logs\xDB1.tmp
2009-03-11 09:00 . 2009-03-11 08:59 -------- d-----w c:\programmi\Turbo Squid Tentacles
2009-03-11 08:59 . 2009-03-11 08:59 -------- d-----w c:\programmi\Microsoft WSE
2009-03-11 08:56 . 2009-01-04 09:09 -------- d-----w c:\programmi\Autodesk
2009-03-11 08:56 . 2009-01-04 09:09 -------- d-----w c:\programmi\File comuni\Autodesk Shared
2009-03-09 04:19 . 2009-01-02 17:13 410984 ----a-w c:\windows\system32\deploytk.dll
2009-03-07 21:50 . 2009-03-07 11:27 21840 ----atw c:\windows\system32\SIntfNT.dll
2009-03-07 21:50 . 2009-03-07 11:27 17212 ----atw c:\windows\system32\SIntf32.dll
2009-03-07 21:50 . 2009-03-07 11:27 12067 ----atw c:\windows\system32\SIntf16.dll
2009-03-07 11:56 . 2009-03-07 11:56 133 ----a-w c:\documents and settings\Pino\Impostazioni locali\Dati applicazioni\fusioncache.dat
2009-03-07 11:25 . 2009-03-07 11:16 32131 ----a-w c:\windows\DIIUnin.dat
2009-03-07 11:16 . 2009-03-07 11:16 2829 ----a-w c:\windows\DIIUnin.pif
2009-03-07 11:16 . 2009-03-07 11:16 102400 ----a-w c:\windows\DIIUnin.exe
2009-02-11 13:45 . 2009-02-11 13:45 1729024 -c--a-w c:\windows\Internet Logs\xDB272.tmp
2009-02-11 13:40 . 2009-02-11 13:41 2640896 -c--a-w c:\windows\Internet Logs\xDB268.tmp
2009-02-03 10:52 . 2009-02-03 10:52 49152 --sha-w c:\windows\system32\fupipivo.dll.tmp
2009-02-03 10:52 . 2009-02-03 10:52 49152 --sha-w c:\windows\system32\powenewe.dll.tmp
2009-02-03 10:52 . 2009-02-03 10:52 49152 --sha-w c:\windows\system32\sunimuju.dll.tmp
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{77AB5974-55A3-4737-9FD5-B93C64307F79}]
2009-05-05 19:56 79872 --sha-w c:\windows\system32\gepesiso.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ChangeICON"="c:\windows\SPMSMON.EXE" [2003-02-14 61440]
"NeroFilterCheck"="c:\programmi\File comuni\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"SecurDisc"="c:\programmi\Nero\Nero 7\InCD\NBHGui.exe" [2007-05-15 1628208]
"InCD"="c:\programmi\Nero\Nero 7\InCD\InCD.exe" [2007-05-15 1057328]
"RemoteControl"="c:\programmi\CyberLink\PowerDVD\PDVDServ.exe" [2006-11-23 56928]
"LanguageShortcut"="c:\programmi\CyberLink\PowerDVD\Language\Language.exe" [2006-12-05 54832]
"LGODDFU"="c:\programmi\lg_fwupdate\fwupdate.exe" [2009-01-03 548864]
"CloneCDTray"="c:\programmi\SlySoft\CloneCD\CloneCDTray.exe" [2005-05-19 57344]
"EPSON Stylus Photo RX420 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATI9CE.EXE" [2004-04-09 98304]
"ATIPTA"="c:\programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-25 339968]
"ATICCC"="c:\programmi\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"UMonit"="c:\windows\system32\UMonit.exe" [2003-03-24 45056]
"GrooveMonitor"="c:\programmi\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"ZoneAlarm Client"="c:\programmi\Zone Labs\ZoneAlarm\zlclient.exe" [2008-08-21 981904]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"atwtusb"="atwtusb.exe" - c:\windows\system32\ATWTUSB.EXE [2005-09-21 290816]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]

c:\documents and settings\Steri\Menu Avvio\Programmi\Esecuzione automatica\
Ritaglio schermata e avvio di OneNote 2007.lnk - c:\programmi\Microsoft Office\Office12\ONENOTEM.EXE [2007-8-24 101784]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
AutoCAD Startup Accelerator.lnk - c:\programmi\File comuni\Autodesk Shared\acstart17.exe [2006-3-5 11000]
Avvio veloce di Adobe Reader.lnk - c:\programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Logitech Desktop Messenger.lnk - c:\programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-1-2 67128]
Logitech SetPoint.lnk - c:\programmi\Logitech\SetPoint\SetPoint.exe [2009-1-2 805392]
VIA RAID TOOL.lnk - c:\programmi\VIA\RAID\raid_tool.exe [2009-1-2 565248]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2008-05-02 01:42 72208 ----a-w c:\programmi\file comuni\logitech\bluetooth\LBTWLgn.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\jisagade.dll c:\windows\system32\poveyawi.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"c:\\Programmi\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programmi\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Programmi\\Autodesk\\Backburner\\manager.exe"=
"c:\\Programmi\\Autodesk\\Backburner\\server.exe"=
"c:\\Programmi\\Autodesk\\3ds Max 2009\\3dsmax.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\ATWTUSB.EXE"=
"c:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\E_FATI9CE.EXE"=

R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [31/07/2008 21.45.42 20616]
R1 aiptektp;HyperPen;c:\windows\system32\drivers\aiptektp.sys [03/01/2009 20.00.56 22272]
R2 Communication Modem Device Manager II;Communication Modem Device Manager II;c:\windows\system32\RegService.exe [08/03/2009 11.55.22 135168]
R2 mi-raysat_3dsMax2009_32;mental ray 3.6 Satellite for Autodesk 3ds Max 2009 32-bit 32-bit;c:\programmi\Autodesk\3ds Max 2009\mentalray\satellite\raysat_3dsMax2009_32server.exe [10/03/2008 1.04.52 65536]
R3 PAC207;Trust WB-1200p Mini Webcam;c:\windows\system32\drivers\PFC027.sys [24/02/2005 13.29.14 162176]
S2 Ca533av;Icatch(IV) Video Camera Device;c:\windows\system32\drivers\Ca533av.sys [04/01/2009 22.04.35 515803]
S3 cmusbser;Mobile Connector USB Device for Legacy Serial Communication LCT2051;c:\windows\system32\drivers\cmusbser.sys [08/03/2009 11.55.23 103552]
S3 fixustor;fixustor;c:\windows\system32\drivers\fixustor.sys [19/01/2009 12.44.14 6016]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [02/07/2008 15.58.48 26248]
S3 USBCamera;Icatch(IV) Still Camera Device;c:\windows\system32\drivers\Bulk533.sys [04/01/2009 22.04.35 10986]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{24bacb34-0bc7-11de-9116-00e1a7767681}]
\Shell\AutoRun\command - e:\.\ShowModem.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\programmi\File comuni\LightScribe\LSRunOnce.exe"
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

BHO-{02af3e22-4ebc-4470-a066-35c56f1ff39f} - c:\windows\system32\pudosuji.dll
HKLM-Run-Cmaudio - cmicnfg.cpl
HKLM-Run-Office SturtUp - osa9.exe
Notify-dimsntfy - (no file)


.
------- Scansione supplementare -------
.
uInternet Settings,ProxyOverride = *.local
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - c:\programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
FF - ProfilePath - c:\documents and settings\Steri\Dati applicazioni\Mozilla\Firefox\Profiles\hzlnqtkk.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - http://www.yahoo.it
FF - prefs.js: keyword.URL - hxxp://search.live.com/results.aspx?FORM=IEFM1&q=
FF - plugin: c:\programmi\Microsoft\Office Live\npOLW.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-05-08 11:07
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
UMonit = c:\windows\system32\UMonit.exe?KLMNOPQRSTUVW?@??h???8????????@??8????@??????x???8??????????????????????????????????w?@????????????@?????????????????<$?|?????$?|??????@?????????????????????????@??????????????????????????????|X$?|?????$?|Q$?|????????????u?@

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-220523388-1801674531-1417001333-1004\Software\SecuROM\License information*]
"datasecu"=hex:ab,61,13,17,5d,5b,24,6d,43,f1,28,71,9d,38,b0,87,14,08,20,2a,9d,
6d,52,8b,58,42,9f,cc,a8,fb,d5,75,95,a8,7d,d3,94,a3,19,15,a7,1b,00,c3,9b,c3,\
"rkeysecu"=hex:e7,63,3c,76,69,e0,f6,f1,3a,df,e6,9f,f7,96,34,98
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(832)
c:\windows\system32\Ati2evxx.dll
c:\programmi\file comuni\logitech\bluetooth\LBTWlgn.dll
c:\programmi\file comuni\logitech\bluetooth\LBTServ.dll

- - - - - - - > 'explorer.exe'(1216)
c:\programmi\Logitech\SetPoint\lgscroll.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
c:\programmi\Bonjour\mDNSResponder.exe
c:\windows\system32\drivers\CDANTSRV.EXE
c:\programmi\Nero\Nero 7\InCD\InCDsrv.exe
c:\programmi\Java\jre6\bin\jqs.exe
c:\programmi\File comuni\LightScribe\LSSrvc.exe
c:\programmi\CyberLink\Shared Files\RichVideo.exe
c:\windows\system32\PAStiSvc.exe
c:\windows\system32\rundll32.exe
c:\windows\system32\TBLMOUSE.EXE
c:\programmi\File comuni\Logishrd\KHAL2\KHALMNPR.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Ora fine scansione: 2009-05-08 11.12.44 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2009-05-08 09:12

Pre-Run: 75.760.451.584 byte disponibili
Post-Run: 75.661.615.104 byte disponibili

WindowsXP-KB310994-SP2-Home-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect

299 --- E O F --- 2009-04-30 11:14



Non so se sia un caso ma il pc è raddoppiato in prestazioni.......!! Ha eliminato una ventina di file...!

L'analisi con questo Combo fix lo si può fare ogni tanto? Tipo da fare ogni paio di mesi per ottimizzare? O è da usare con cura nei casi di emergenza?...prossimo passo?

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: ven mag 08, 2009 11:12 am
da Amantide
yumechan83 ha scritto:L'analisi con questo Combo fix lo si può fare ogni tanto? Tipo da fare ogni paio di mesi per ottimizzare? O è da usare con cura nei casi di emergenza?


è da usare con cura nei casi di emergenza [;)], o perlomeno dopo la scansione devi far analizzare il log ad un esperto per evitare che per errore elimina qualche file "buono".

Scarica The Avenger, estrailo in una cartella ed avvia il file avenger.exe.
Incolla il seguente spript nello spazio bianco sotto alla voce Input script here, togli la spunta alla voce Scan for rootkits e clicca su Execute.

Codice: Seleziona tutto
Registry values to replace with dummy:
HKLM\Software\Microsoft\Windows NT\ CurrentVersion\Windows | AppInit_DLLs

Files to delete:
c:\windows\system32\gepesiso.dll
c:\windows\system32\famatoge.dll
c:\windows\system32\fupipivo.dll.tmp
c:\windows\system32\powenewe.dll.tmp
c:\windows\system32\sunimuju.dll.tmp

Registry keys to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77AB5974-55A3-4737-9FD5-B93C64307F79}


Il pc dovrebbe riavviarsi, se così non fosse, riavvialo manualmente.
Al riavvio dovrebbe apparire il log avenger.txt, posta qui il suo contenuto.

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: ven mag 08, 2009 1:44 pm
da yumechan83
Dunque, fatto anche con Avenger, riavviato ed ecco il log

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File "c:\windows\system32\gepesiso.dll" deleted successfully.
File "c:\windows\system32\famatoge.dll" deleted successfully.
File "c:\windows\system32\fupipivo.dll.tmp" deleted successfully.
File "c:\windows\system32\powenewe.dll.tmp" deleted successfully.
File "c:\windows\system32\sunimuju.dll.tmp" deleted successfully.

Warning: HKLM\Software did not load within MAX_WAIT_ITERATIONS


Error: parent registry key for value "HKLM\Software\Microsoft\Windows NT\ CurrentVersion\Windows|AppInit_DLLs" not found!
Replacement with dummy of registry value "HKLM\Software\Microsoft\Windows NT\ CurrentVersion\Windows|AppInit_DLLs" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: registry key "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77AB5974-55A3-4737-9FD5-B93C64307F79}" not found!
Deletion of registry key "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{77AB5974-55A3-4737-9FD5-B93C64307F79}" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.


I file sono stati cancellati!

Dite che ora è a posto? Il fatto che il file dfrg.msc non sia ancora funzionante dipende dai virus che abbiamo tolto o è un problema a parte?

(ho corretto l'ultima frase che era un po sconnessa....)

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: sab mag 09, 2009 2:58 pm
da Amantide
yumechan83 ha scritto:Il fatto che il file dfrg.msc non sia piu funzionante dipende da quello che abbiamo tolto o è un problema a parte?


Prova ad inserire il cd di XP nel pc ed eseguire da Start>> Esegui il comando scf /scannow

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: sab mag 09, 2009 5:43 pm
da yumechan83
Già fatto!...niente, ho provato anche a farmi passare l file originale dal mio ragazzo e niente....riprovo comunque ora che è un po piu pulito!

Altri consigli?

[rotolo]

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: lun mag 11, 2009 8:58 am
da yumechan83
...come non detto...........il mio sistema è andato in crash totale..

L'antivirus (qualunque abbia provato a mettere, Zone Alarm2009, Kaspersky2009, avg 2008..) identifica tutto come polip o virus vari...ma tutto, intendo blocco note, vlc, programmi della stampante, explorer stesso...

MI preparo a masterizzare tutto prima che mi blocchi anche nero...e formatto 10volte!!!...........



Ho formattato 2 volte e reinstallato il sisitema..apena metto l'antivirus(uno qualsiasi,anche trial scaricato ufficialmente) quest'ultimo mi rileva i programmi (della scheda grafica,della stampante,internet explorer,persino il ripristino del sistema...),mi sta facendo sparire nuovamente tutto..!!!
Possibile che i file siano veramente infetti??

Che sia l'hard disk completamente andato??

Ho da poco messo una nuova scheda video...puo centrare qualcosa? [cry]

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: mar mag 12, 2009 12:59 pm
da Amantide
Quante partizioni ci sono sul hard disk? Si tratta del hard disk unico?
Per caso al pc ci sono collegati anche hard disk esterni o le chiavette USB?

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: mar mag 12, 2009 1:24 pm
da yumechan83
Ho formattato altre due volte e sto pian piano mettendo i programmi..sto usando una prova gratuita di Live one care come antivirus e non mi ha ancora rilevato nulla. [V]

L'hard disk ha una partizione unica e non ho null'altro di collegato!...spero solo sia la volta buona...altrimenti avevo intenzione di cancellare la ripartizione che ho e ricrearla, magari dividendola in 2.........che dici?

Re: Errore di sistema ad ogni avvio:scompaiono dll da system32..

MessaggioInviato: mer mag 13, 2009 6:28 pm
da yumechan83
Infine, su consiglio, ho sacricato Live one care come antivirus e ha trovato che alcun dei programmi che avevo nel computer erano stati infettati e davano tutti quegli errori.....programmi inizialmente sani che chissà come sono stati corrotti. Tolti quelli tutto è tornato a posto!