Ho cercato nel registro,ma non trovo nulla di quei file.
Ho fatto la scansione con bazooka.
Ha individuato 2 elementi.Per il momento non li ho disinstallati.
Ecco il log della scansione:
****************************************
Bazooka Scanner v1.13.02
http://www.kephyr.com/spywarescanner/
http://www.kephyr.com/spywarescanner/library/
support@kephyr.com
Log created 10:28:21.
OS: Windows NT 5.1
Database version: 2.300000
Database format version: 1.020000
Database date: 20040817
Current date: 2004-08-23 10:28
****************************************
Result when scanning:
KeenValue.Updater 643.000.001 %ProgramsDir%Common Filesupdater
C:ProgrammiCommon Filesupdater
http://www.kephyr.com/spywarescanner/li ... ndex.phtml
MS Media Player GUID 404.888.000
HKEY_CURRENT_USERSoftwareMicrosoftMediaPlayerPlayerSettingsClient ID
http://www.kephyr.com/spywarescanner/li ... ndex.phtml
****************************************
Auto start entries:
C:Documents and SettingsAll UsersMenu AvvioProgrammiEsecuzione automaticadesktop.ini
C:Documents and SettingsAll UsersMenu AvvioProgrammiEsecuzione automaticadesktop.ini
C:Documents and SettingsAdministratorMenu AvvioProgrammiEsecuzione automaticadesktop.ini
C:Documents and SettingsAdministratorMenu AvvioProgrammiEsecuzione automaticadesktop.ini
Go here to analyse the startup entries and the associated files:
http://www.kephyr.com/filedb/index.php
****************************************
Run entries:
NeroCheck C:WINDOWSSystem32NeroCheck.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunNeroCheck
NvCplDaemon RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunNvCplDaemon
nwiz nwiz.exe /install
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRun
wiz
CARPService carpserv.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunCARPService
ccApp "C:ProgrammiFile comuniSymantec SharedccApp.exe"
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunccApp
zBrowser Launcher C:ProgrammiLogitechiTouchiTouch.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunzBrowser Launcher
EM_EXEC C:PROGRA~1LogitechMOUSEW~1SYSTEMEM_EXEC.EXE
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunEM_EXEC
MMTray C:ProgrammiMUSICMATCHMUSICMATCH Jukeboxmm_tray.exe
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunMMTray
MSConfig C:WINDOWSPCHealthHelpCtrBinariesMSConfig.exe /auto
HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionRunMSConfig
CTFMON.EXE C:WINDOWSSystem32CTFMON.EXE
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRunCTFMON.EXE
Go here to analyse the run entries and the associated files:
http://www.kephyr.com/filedb/index.php
****************************************
Browser helper objects:
SOFTWARE not set Error when opening a registry key, the key doesn't exist. Key: HKEY_CLASSES_ROOTCLSIDSOFTWAREInprocServer32
System error message: Impossibile trovare il file specificato.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper ObjectsSOFTWARE
{53707962-6F74-2D53-2644-206D7942484F} not set C:PROGRA~1SPYBOT~1SDHelper.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{53707962-6F74-2D53-2644-206D7942484F}
****************************************
Toolbars:
{8E718888-423F-11D2-876E-00A0C9082467} C:WINDOWSSystem32msdxm.ocx
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar{8E718888-423F-11D2-876E-00A0C9082467}
{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} C:ProgrammiNorton AntiVirusNavShExt.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerToolbar{42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6}
{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:WINDOWSSystem32rowseui.dll
HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerToolbarShellBrowser{01E04581-4EEE-11D0-BFE9-00AA005B4383}
{01E04581-4EEE-11D0-BFE9-00AA005B4383} C:WINDOWSSystem32rowseui.dll
HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerToolbarWebBrowser{01E04581-4EEE-11D0-BFE9-00AA005B4383}
{0E5CBF21-D15F-11D0-8301-00AA005B4383} C:WINDOWSsystem32SHELL32.dll
HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerToolbarWebBrowser{0E5CBF21-D15F-11D0-8301-00AA005B4383}
{4D5C8C25-D075-11d0-B416-00C04FB90376} C:WINDOWSSystem32shdocvw.dll
HKEY_LOCAL_MACHINESOFTWAREMicrosoftInternet ExplorerExplorer Bars{4D5C8C25-D075-11d0-B416-00C04FB90376}
{32683183-48a0-441b-a342-7c2a440a9478} C:WINDOWSSystem32rowseui.dll
HKEY_CURRENT_USERSOFTWAREMicrosoftInternet ExplorerExplorer Bars{32683183-48a0-441b-a342-7c2a440a9478}
****************************************
All processes:
[System Process]
System
smss.exe
csrss.exe
winlogon.exe
services.exe
lsass.exe
svchost.exe
svchost.exe
explorer.exe
spywarescanner.exe
Go here to analyse the running processes:
http://www.kephyr.com/filedb/index.php
****************************************
Internet Explorer Settings:
Default_Page_URL
http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainDefault_Page_URL
Default_Search_URL
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainDefault_Search_URL
Local Page C:WINDOWSsystem32lank.htm
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainLocal Page
Search Page
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainSearch Page
Start Page
http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerMainStart Page
SearchAssistant
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearchSearchAssistant
CustomizeSearch
http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm
HKEY_LOCAL_MACHINESoftwareMicrosoftInternet ExplorerSearchCustomizeSearch
http://
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionURLDefaultPrefix
www http://
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionURLPrefixeswww
****************************************