...questo R1 nn va via! Hijackthis file log ..HELP!!

[Lacrimanera]

nn riesco a togliere questo indirizzo dalla lista di hijackthis! come faccio? vi porego aiutatemi!!
un mese fa mi avete risolto un problema simile ma sta volta anche operando come consigliatomi da voi nn riesco a togliere il primo....quell' R1 torna sempre !!

thx




R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.hqeikpyqjwpuvomyfaswk.com/QW ... /wmK7.html[/b]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wow.blizzardworld.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\programmi\google\googletoolbar2.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - F:\Programmi\MSN Apps\MSN Toolbar\01.02.3000.1001\it\msntb.dll (file missing)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - F:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Programmi\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [msnappau] "F:\Programmi\MSN Apps\Updater\01.02.3000.1001\it\msnappau.exe"
O4 - HKLM\..\Run: [TkBellExe] "F:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Easy-PrintToolBox] F:\Programmi\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [NeroFilterCheck] :F:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] :F:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] :"F:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "F:\Programmi\messenger plus!\MsgPlus.exe"
O4 - HKLM\..\Run: [WatchDog] :F:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [C-Media Speaker Configuration] \Setup.exe /SPEAKER
O4 - HKLM\..\Run: [ATIPTA] F:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] F:\Programmi\AVPersonal\AVGNT.EXE /min
O4 - HKCU\..\Run: [Uploadmail] F:\DOCUME~1\utente\DATIAP~1\THIRDB~1\default four start.exe
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = F:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Download with &DAP - F:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: &Google Search - res://f:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Backward Links - res://f:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://f:\programmi\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Collegamenti a ritroso - res://f:\programmi\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Download &all with DAP - F:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Pagine simili - res://f:\programmi\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Similar Pages - res://f:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Translate into English - res://f:\programmi\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Versione cache della pagina - res://f:\programmi\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: F:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/21e00d94076 ... 601_it.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47758298-A067-4BD4-8E67-3F78DC67682F}: NameServer = 217.141.250.206 151.99.125.1
O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - F:\Programmi\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - F:\Programmi\AVPersonal\AVWUPSRV.EXE
O23 - Service: InCD Helper - Ahead Software AG - F:\Programmi\Ahead\InCD\InCDsrv.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe

[crazy.cat]

questa sembrarebbe relativa ad una sk video asus
O4 - HKLM\..\Run: [anvshell] anvshell.exe
questa ad un nvidia
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
e qui c'è un ati
O4 - HKLM\..\Run: [ATIPTA] F:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe

Ci sono un po' troppe schede video sul tuo pc, oppure uno o due di questi files è un virus.

Cancella tutti i file temporanei di internet, fai una scansione dei virus con Scangui (articolo in home page del sito) e vedi cosa ne esce.

[Lacrimanera]

perdonami crazy! n sono riuscito a far funzionare lo scan che mi hai consigliato, riesco a creare 3floppy di boot a all avvio nn li riconosce e mi dice di liberare la periferica e riavviare. credo sia un worm sasser....mi hanno detto..io nn ne capisco nulla..so solo che di buono le prestazione della cpu salgono al 100% e si blocca il pc.

ho comprato world of warcraft e si blocca mentre cerco di installarlo (cpu al 100%)

mentre scarico da internet stessa cosa cpu al 100%

c'è qualche altro scan? o formatto e via?

aiutatemi per favore! grazie a tutti comunque!!!

[crazy.cat]

Scarica intanto questo e dai una passata dalla modalità provvisoria.
http://download.nai.com/products/mcafee ... tinger.exe

Io ti avevo suggerito Scangui che non crea i floppy di boot, sei passato subito a Cleanboot, che poi mi sembrava ne facesse 4/5 floppy e non solo tre?

Non mi hai risposto che scheda video hai sul tuo pc?

[Lacrimanera]

ho da poco una ati radeon 9550 sapphire, devo togliere i driver di quella precedente?

sto scaricando il link che mi hai dato, appena ora lo passo e ti faccio sapere

grazie

[Lacrimanera]

questo è il risultato di scangui

McAfee VirusScan for Win32 v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Sep 23 2004

Scan engine v4.4.00 for Win32.
Virus data file v4427 created Feb 09 2005
Scanning for 115799 viruses, trojans and variants.

02/16/2005 00:10:30

Options:
"F:\" /AD /ADN /CLEAN /SUB /ALL /RPTCOR /RPTERR /REPORT F:\SCANGUI\NOTTE.TXT

Scanning F: [NEVERMIND]
Scanning F:\*.*
F:\Documents and Settings\utente\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat ... file could not be opened.
F:\Documents and Settings\utente\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG ... file could not be opened.
F:\Documents and Settings\utente\NTUSER.DAT ... file could not be opened.
F:\Documents and Settings\utente\ntuser.dat.LOG ... file could not be opened.
F:\pagefile.sys ... file could not be opened.
F:\WINDOWS\system32\config\default ... file could not be opened.
F:\WINDOWS\system32\config\default.LOG ... file could not be opened.
F:\WINDOWS\system32\config\SAM ... file could not be opened.
F:\WINDOWS\system32\config\SAM.LOG ... file could not be opened.
F:\WINDOWS\system32\config\SECURITY ... file could not be opened.
F:\WINDOWS\system32\config\SECURITY.LOG ... file could not be opened.
F:\WINDOWS\system32\config\software ... file could not be opened.
F:\WINDOWS\system32\config\software.LOG ... file could not be opened.
F:\WINDOWS\system32\config\system ... file could not be opened.
F:\WINDOWS\system32\config\system.LOG ... file could not be opened.

Summary report on F:\*.*
File(s)
Total files: ........... 76141
Clean: ................. 76126
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 1
Scanning F: [NEVERMIND]
Scanning F:\*.*
F:\Documents and Settings\utente\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat ... file could not be opened.
F:\Documents and Settings\utente\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG ... file could not be opened.
F:\Documents and Settings\utente\NTUSER.DAT ... file could not be opened.
F:\Documents and Settings\utente\ntuser.dat.LOG ... file could not be opened.
F:\pagefile.sys ... file could not be opened.
F:\WINDOWS\system32\config\default ... file could not be opened.
F:\WINDOWS\system32\config\default.LOG ... file could not be opened.
F:\WINDOWS\system32\config\SAM ... file could not be opened.
F:\WINDOWS\system32\config\SAM.LOG ... file could not be opened.
F:\WINDOWS\system32\config\SECURITY ... file could not be opened.
F:\WINDOWS\system32\config\SECURITY.LOG ... file could not be opened.
F:\WINDOWS\system32\config\software ... file could not be opened.
F:\WINDOWS\system32\config\software.LOG ... file could not be opened.
F:\WINDOWS\system32\config\system ... file could not be opened.
F:\WINDOWS\system32\config\system.LOG ... file could not be opened.

Summary report on F:\*.*
File(s)
Total files: ........... 76151
Clean: ................. 76136
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning G: [Bedduggioa...]
Scanning G:\*.*

Summary report on G:\*.*
File(s)
Total files: ........... 169
Clean: ................. 169
Possibly Infected: ..... 0
Cleaned: ............... 0
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning S: ["Guasto"]
Scanning S:\*.*
S:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Dr Watson\user.dmp ... file could not be opened.

Summary report on S:\*.*
File(s)
Total files: ........... 27775
Clean: ................. 27774
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0


Time: 03:40.12

il problema resta sempre, durante l installazione del gioco la cpu sale al 100% e si bloccaho notato che fra i processi (task manager) ho un Isass.exe cos'è?
ti rimando il file log di hijackthis nel prossimo post
ho passato anche l'antivir ma nn ha trovato nulla



questo pc nn mi fa dormire da 3notti !!!!

grazie

[crazy.cat]

Il file Lsass.exe è un file di sistema, Isass.exe come hai scritto tu potresti avere sbagliato nome.

[Lacrimanera]

questo è l'ultimo file log di hijackthis, dopo aver passato scangui, antivir, ad-aware e spyboot


Logfile of HijackThis v1.99.0
Scan saved at 14.21.00, on 16/02/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\System32\Ati2evxx.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\Programmi\Ahead\InCD\InCDsrv.exe
F:\WINDOWS\system32\spoolsv.exe
F:\Programmi\AVPersonal\AVGUARD.EXE
F:\Programmi\AVPersonal\AVWUPSRV.EXE
F:\WINDOWS\system32\Ati2evxx.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\Mixer.exe
F:\Programmi\Java\j2re1.4.2_01\bin\jusched.exe
F:\Programmi\MSN Apps\Updater\01.02.3000.1001\it\msnappau.exe
F:\Programmi\messenger plus!\MsgPlus.exe
F:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
F:\Programmi\AVPersonal\AVGNT.EXE
F:\Programmi\ARESCOM\Modem Telindus Arescom ND220\dslmon.exe
f:\progra~1\intern~1\iexplore.exe
F:\Programmi\Internet Explorer\iexplore.exe
F:\Programmi\Mozilla Firefox\firefox.exe
F:\Programmi\MSN Messenger\msnmsgr.exe
F:\WINDOWS\System32\wuauclt.exe
F:\Documents and Settings\utente\Desktop\varie\hijack\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.burlkisckbnz.us/QWPBpFZzuLvh ... /wmK7.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://wow.blizzardworld.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - f:\programmi\google\googletoolbar2.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - F:\Programmi\MSN Apps\MSN Toolbar\01.02.3000.1001\it\msntb.dll (file missing)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - F:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - F:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - f:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Programmi\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [msnappau] "F:\Programmi\MSN Apps\Updater\01.02.3000.1001\it\msnappau.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] F:\Programmi\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [NeroFilterCheck] :F:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] :F:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [QuickTime Task] :"F:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MessengerPlus3] "F:\Programmi\messenger plus!\MsgPlus.exe"
O4 - HKLM\..\Run: [WatchDog] :F:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [C-Media Speaker Configuration] \Setup.exe /SPEAKER
O4 - HKLM\..\Run: [ATIPTA] F:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVGCtrl] F:\Programmi\AVPersonal\AVGNT.EXE /min
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Uploadmail] F:\DOCUME~1\utente\DATIAP~1\THIRDB~1\default four start.exe
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = F:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Download with &DAP - F:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: &Google Search - res://f:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Backward Links - res://f:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://f:\programmi\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Collegamenti a ritroso - res://f:\programmi\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Download &all with DAP - F:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: Pagine simili - res://f:\programmi\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Similar Pages - res://f:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://F:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Translate into English - res://f:\programmi\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Versione cache della pagina - res://f:\programmi\google\GoogleToolbar1.dll/cmcache.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: F:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/21e00d94076 ... 601_it.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/So ... b31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{47758298-A067-4BD4-8E67-3F78DC67682F}: NameServer = 217.141.250.206 151.99.125.1
O23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - F:\Programmi\AVPersonal\AVGUARD.EXE
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - F:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown - F:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - F:\Programmi\AVPersonal\AVWUPSRV.EXE
O23 - Service: InCD Helper - Ahead Software AG - F:\Programmi\Ahead\InCD\InCDsrv.exe
O23 - Service: NVIDIA Display Driver Service - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe


ancora nn riesco ad installare quel maledetto gioco

grazie per la pasienza

[crazy.cat]

Non si vede niente di pericoloso, a questo punto potrebbe essere una buona occasione per formattare ed installare con il sp2 integrato nel cd di installazione di windows.

[Lacrimanera]

..a mali estremi..

grazie dell assistenza!

ci vediamo dopo la formattazione!!!

ciao e grazie!