p.s.: nn vorrei sembrare fuori luogo ma non sarebbe stato meglio racchiudere tutto in un topic?
Logfile of HijackThis v1.98.0
Scan saved at 23.37.46, on 24/02/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\System32\timezone.exe
C:\Programmi\Norton AntiVirus\SAVScan.exe
C:\WINDOWS\System32\videosd32.exe
C:\WINDOWS\System32\win32usb.exe
C:\WINDOWS\System32\msdrvs32.exe
C:\WINDOWS\System32\windnsd.exe
C:\WINDOWS\System32\pksvc.exe
C:\WINDOWS\System32\MSN.exe
C:\WINDOWS\System32\svcshost.exe
C:\WINDOWS\System32\smsc.exe
C:\WINDOWS\System32\Messenger.exe
C:\WINDOWS\System32\mpsvc.exe
C:\WINDOWS\System32\moose.exe
C:\WINDOWS\System32\WINDOWS.exe
C:\WINDOWS\System32\svcmon.exe
C:\WINDOWS\System32\regrunsrv.exe
C:\WINDOWS\System32\windns.exe
C:\WINDOWS\System32\IEXPLORE.exe
C:\WINDOWS\System32\cache.exe
C:\WINDOWS\System32\WinGmt.exe
C:\WINDOWS\System32\RunDll32.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\System32\mswin32.exe
C:\WINDOWS\System32\esplorer.exe
C:\Programmi\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe
C:\Programmi\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe
C:\DOCUME~1\oreste\IMPOST~1\Temp\1122.exe
C:\Programmi\Trust\302KS\Mouse\mouse32a.exe
C:\Programmi\Trust\302KS\Keyboard\KbdAp32A.exe
C:\WINDOWS\System32\prprscj.exe
C:\WINDOWS\System32\sysmsvc.exe
C:\WINDOWS\System32\sres32.exe
C:\WINDOWS\System32\mspg32.exe
C:\WINDOWS\System32\cvshost.exe
C:\WINDOWS\System32\svch0st.exe
C:\Programmi\Roxio\Easy CD Creator 6\AudioCentral\Playlist.exe
C:\WINDOWS\System32\tmddmjb.exe
C:\WINDOWS\System32\winexz.exe
C:\WINDOWS\System32\svcnhost.exe
C:\WINDOWS\System32\bsc32.exe
C:\WINDOWS\System32\microsoft\Norton Anti Viros.exe
C:\WINDOWS\System32\RUNDLL32.exe
C:\WINDOWS\System32\svchest.exe
C:\WINDOWS\System32\MSNSRV32.exe
C:\WINDOWS\System32\m4n70s.exe
C:\WINDOWS\System32\xziuvwa.exe
C:\WINDOWS\System32\wvsvc.exe
C:\WINDOWS\System32\uuahvgf.exe
C:\Program Files\AdTools Service\AdTools.exe
C:\Program Files\Internet Optimizer\optimize.exe
C:\Programmi\ISTsvc\istsvc.exe
C:\Program Files\AdTools Service\AdToolsKeep.exe
C:\WINDOWS\pxhnfytg.exe
C:\programmi\180solutions\sais.exe
C:\WINDOWS\ulmhwx.exe
C:\Programmi\Web_Rebates\WebRebates0.exe
C:\Program Files\Preview AdService\PrevAdServ.exe
C:\WINDOWS\TEMP\SAHAGE~1.EXE
C:\Program Files\Preview AdService\PrevAdKeep.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programmi\Web_Rebates\WebRebates1.exe
C:\Programmi\C'è Posta\CPosta.exe
C:\Documents and Settings\oreste\Desktop\Fabio\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.fastweb.it
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.fastweb.it
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da FastWeb
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: BHObj Class - {00000010-6F7D-442C-93E3-4A4827C2E4C8} - C:\WINDOWS\nem220.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - C:\Programmi\SideFind\sfbho.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: YourSiteBar - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - C:\PROGRA~1\YOURSI~1\ysb.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Microsoft IT Update] mswin32.exe
O4 - HKLM\..\Run: [Win32 USB2 Driver] smsc.exe
O4 - HKLM\..\Run: [Microsoft Update] esplorer.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RoxioEngineUtility] "C:\Programmi\File comuni\Roxio Shared\System\EngUtil.exe"
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Programmi\Roxio\Easy CD Creator 6\DragToDisc\DrgToDsc.exe"
O4 - HKLM\..\Run: [RoxioAudioCentral] "C:\Programmi\Roxio\Easy CD Creator 6\AudioCentral\RxMon.exe"
O4 - HKLM\..\Run: [Win32 Configuration] videosd32.exe
O4 - HKLM\..\Run: [Microsoft Windows Update] svcshost.exe
O4 - HKLM\..\Run: [USB Device] win32usb.exe
O4 - HKLM\..\Run: [Windows Driver Services] msdrvs32.exe
O4 - HKLM\..\Run: [Windows DNS Daemon] windnsd.exe
O4 - HKLM\..\Run: [FLMK08KB] C:\Programmi\Trust\302KS\Keyboard\MMKEYBD.EXE
O4 - HKLM\..\Run: [FLMBROWSEMOUSE] C:\Programmi\Trust\302KS\Mouse\mouse32a.exe
O4 - HKLM\..\Run: [Network Manager] prprscj.exe
O4 - HKLM\..\Run: [MsWindows SysDate] sysmsvc.exe
O4 - HKLM\..\Run: [System driver] Messenger.exe
O4 - HKLM\..\Run: [OEM32 Tools] sres32.exe
O4 - HKLM\..\Run: [PK Services] pksvc.exe
O4 - HKLM\..\Run: [MSNer] MSN.exe
O4 - HKLM\..\Run: [MsWindows Syspg] mspg32.exe
O4 - HKLM\..\Run: [Microsoft Official Update] cvshost.exe
O4 - HKLM\..\Run: [Svshost Service] svch0st.exe
O4 - HKLM\..\Run: [MP Services] mpsvc.exe
O4 - HKLM\..\Run: [MSN ang] system32.exe
O4 - HKLM\..\Run: [Microsoft Update Machine] tmddmjb.exe
O4 - HKLM\..\Run: [msdata] moose.exe
O4 - HKLM\..\Run: [Microsoft Security Management] winexz.exe
O4 - HKLM\..\Run: [svcnhost] svcnhost.exe
O4 - HKLM\..\Run: [SYSTRAY] C:\UNMT.EXE
O4 - HKLM\..\Run: [Microsoft Services] C:\WINDOWS\System32\bsc32.exe
O4 - HKLM\..\Run: [systemin] C:\WINDOWS\System32\microsoft\Norton Anti Viros.exe
O4 - HKLM\..\Run: [WildTangent CDA] RUNDLL32.exe "C:\Programmi\WildTangent\Apps\CDA\cdaEngine0400.dll",cdaEngineMain
O4 - HKLM\..\Run: [USB Driver] WINDOWS.exe
O4 - HKLM\..\Run: [window2] svcmon.exe
O4 - HKLM\..\Run: [Microsoft Firewall] svchest.exe
O4 - HKLM\..\Run: [MS Time] timezone.exe
O4 - HKLM\..\Run: [Sygate Personal Firewall] MSNSRV32.exe
O4 - HKLM\..\Run: [Windows boom update] regrunsrv.exe
O4 - HKLM\..\Run: [m4n70s Personal Firewall] m4n70s.exe
O4 - HKLM\..\Run: [Windows Domain Name Drivers] windns.exe
O4 - HKLM\..\Run: [msmsgs] IEXPLORE.exe
O4 - HKLM\..\Run: [Windows Update] xziuvwa.exe
O4 - HKLM\..\Run: [Microsoft Intrenet Explorer] update.exe
O4 - HKLM\..\Run: [Internet Cache] cache.exe
O4 - HKLM\..\Run: [Windows Network Controller] WinGmt.exe
O4 - HKLM\..\Run: [Media X Services] MSNGRx.exe
O4 - HKLM\..\Run: [Starting up] wvsvc.exe
O4 - HKLM\..\Run: [winupdts] uuahvgf.exe
O4 - HKLM\..\Run: [AdTools Service] C:\Program Files\AdTools Service\AdTools.exe
O4 - HKLM\..\Run: [Internet Optimizer] "C:\Program Files\Internet Optimizer\optimize.exe"
O4 - HKLM\..\Run: [IST Service] C:\Programmi\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [FByvYcB] C:\WINDOWS\pxhnfytg.exe
O4 - HKLM\..\Run: [sais] c:\programmi\180solutions\sais.exe
O4 - HKLM\..\Run: [ulmhwx] C:\WINDOWS\ulmhwx.exe
O4 - HKLM\..\Run: [WebRebates0] "C:\Programmi\Web_Rebates\WebRebates0.exe"
O4 - HKLM\..\Run: [Preview AdService] C:\Program Files\Preview AdService\PrevAdServ.exe
O4 - HKLM\..\Run: [SAHBundle] C:\DOCUME~1\oreste\IMPOST~1\Temp\SAHAGE~1.EXE run
O4 - HKLM\..\RunServices: [Microsoft IT Update] mswin32.exe
O4 - HKLM\..\RunServices: [Win32 USB2 Driver] smsc.exe
O4 - HKLM\..\RunServices: [Microsoft Update] esplorer.exe
O4 - HKLM\..\RunServices: [Win32 Configuration] videosd32.exe
O4 - HKLM\..\RunServices: [Microsoft Windows Update] svcshost.exe
O4 - HKLM\..\RunServices: [USB Device] win32usb.exe
O4 - HKLM\..\RunServices: [Windows Driver Services] msdrvs32.exe
O4 - HKLM\..\RunServices: [Windows DNS Daemon] windnsd.exe
O4 - HKLM\..\RunServices: [Network Manager] prprscj.exe
O4 - HKLM\..\RunServices: [MsWindows SysDate] sysmsvc.exe
O4 - HKLM\..\RunServices: [System driver] Messenger.exe
O4 - HKLM\..\RunServices: [OEM32 Tools] sres32.exe
O4 - HKLM\..\RunServices: [PK Services] pksvc.exe
O4 - HKLM\..\RunServices: [MSNer] MSN.exe
O4 - HKLM\..\RunServices: [MsWindows Syspg] mspg32.exe
O4 - HKLM\..\RunServices: [Microsoft Official Update] cvshost.exe
O4 - HKLM\..\RunServices: [Svshost Service] svch0st.exe
O4 - HKLM\..\RunServices: [MP Services] mpsvc.exe
O4 - HKLM\..\RunServices: [MSN ang] system32.exe
O4 - HKLM\..\RunServices: [Microsoft Update Machine] tmddmjb.exe
O4 - HKLM\..\RunServices: [msdata] moose.exe
O4 - HKLM\..\RunServices: [Microsoft Security Management] winexz.exe
O4 - HKLM\..\RunServices: [svcnhost] svcnhost.exe
O4 - HKLM\..\RunServices: [Microsoft Services] C:\WINDOWS\System32\bsc32.exe
O4 - HKLM\..\RunServices: [USB Driver] WINDOWS.exe
O4 - HKLM\..\RunServices: [window2] svcmon.exe
O4 - HKLM\..\RunServices: [Microsoft Firewall] svchest.exe
O4 - HKLM\..\RunServices: [MS Time] timezone.exe
O4 - HKLM\..\RunServices: [Sygate Personal Firewall] MSNSRV32.exe
O4 - HKLM\..\RunServices: [Windows boom update] regrunsrv.exe
O4 - HKLM\..\RunServices: [m4n70s Personal Firewall] m4n70s.exe
O4 - HKLM\..\RunServices: [Windows Domain Name Drivers] windns.exe
O4 - HKLM\..\RunServices: [msmsgs] IEXPLORE.exe
O4 - HKLM\..\RunServices: [Windows Update] xziuvwa.exe
O4 - HKLM\..\RunServices: [Microsoft Intrenet Explorer] update.exe
O4 - HKLM\..\RunServices: [Internet Cache] cache.exe
O4 - HKLM\..\RunServices: [Windows Network Controller] WinGmt.exe
O4 - HKLM\..\RunServices: [Media X Services] MSNGRx.exe
O4 - HKLM\..\RunServices: [Starting up] wvsvc.exe
O4 - HKLM\..\RunServices: [winupdts] uuahvgf.exe
O4 - HKLM\..\RunOnce: [Win32 Configuration] videosd32.exe
O4 - HKLM\..\RunOnce: [USB Device] win32usb.exe
O4 - HKLM\..\RunOnce: [Windows Driver Services] msdrvs32.exe
O4 - HKLM\..\RunOnce: [Windows DNS Daemon] windnsd.exe
O4 - HKLM\..\RunOnce: [PK Services] pksvc.exe
O4 - HKLM\..\RunOnce: [MSNer] MSN.exe
O4 - HKLM\..\RunOnce: [Microsoft Windows Update] svcshost.exe
O4 - HKLM\..\RunOnce: [Win32 USB2 Driver] smsc.exe
O4 - HKLM\..\RunOnce: [System driver] Messenger.exe
O4 - HKLM\..\RunOnce: [MP Services] mpsvc.exe
O4 - HKLM\..\RunOnce: [MSN ang] system32.exe
O4 - HKLM\..\RunOnce: [msdata] moose.exe
O4 - HKLM\..\RunOnce: [USB Driver] WINDOWS.exe
O4 - HKLM\..\RunOnce: [window2] svcmon.exe
O4 - HKLM\..\RunOnce: [Windows boom update] regrunsrv.exe
O4 - HKLM\..\RunOnce: [Windows Domain Name Drivers] windns.exe
O4 - HKLM\..\RunOnce: [msmsgs] IEXPLORE.exe
O4 - HKLM\..\RunOnce: [Internet Cache] cache.exe
O4 - HKLM\..\RunOnce: [Windows Network Controller] WinGmt.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] IEXPLORE.exe
O4 - HKCU\..\Run: [Microsoft IT Update] mswin32.exe
O4 - HKCU\..\Run: [Win32 USB2 Driver] smsc.exe
O4 - HKCU\..\Run: [Microsoft Update] esplorer.exe
O4 - HKCU\..\Run: [Win32 Configuration] videosd32.exe
O4 - HKCU\..\Run: [Microsoft Windows Update] svcshost.exe
O4 - HKCU\..\Run: [USB Device] win32usb.exe
O4 - HKCU\..\Run: [Windows Driver Services] msdrvs32.exe
O4 - HKCU\..\Run: [Windows DNS Daemon] windnsd.exe
O4 - HKCU\..\Run: [Network Manager] prprscj.exe
O4 - HKCU\..\Run: [System driver] Messenger.exe
O4 - HKCU\..\Run: [OEM32 Tools] sres32.exe
O4 - HKCU\..\Run: [PK Services] pksvc.exe
O4 - HKCU\..\Run: [MSNer] MSN.exe
O4 - HKCU\..\Run: [Microsoft Official Update] cvshost.exe
O4 - HKCU\..\Run: [Svshost Service] svch0st.exe
O4 - HKCU\..\Run: [MP Services] mpsvc.exe
O4 - HKCU\..\Run: [MSN ang] system32.exe
O4 - HKCU\..\Run: [Microsoft Update Machine] tmddmjb.exe
O4 - HKCU\..\Run: [msdata] moose.exe
O4 - HKCU\..\Run: [USB Driver] WINDOWS.exe
O4 - HKCU\..\Run: [window2] svcmon.exe
O4 - HKCU\..\Run: [Sygate Personal Firewall] MSNSRV32.exe
O4 - HKCU\..\Run: [Windows boom update] regrunsrv.exe
O4 - HKCU\..\Run: [m4n70s Personal Firewall] m4n70s.exe
O4 - HKCU\..\Run: [Windows Domain Name Drivers] windns.exe
O4 - HKCU\..\Run: [Internet Cache] cache.exe
O4 - HKCU\..\Run: [Windows Network Controller] WinGmt.exe
O4 - HKCU\..\Run: [Starting up] wvsvc.exe
O4 - HKCU\..\Run: [winupdts] uuahvgf.exe
O4 - HKCU\..\RunOnce: [Windows Domain Name Drivers] windns.exe
O4 - HKCU\..\RunOnce: [MSNer] MSN.exe
O4 - HKCU\..\RunOnce: [Internet Cache] cache.exe
O4 - HKCU\..\RunOnce: [Windows Network Controller] WinGmt.exe
O4 - HKCU\..\RunOnce: [Microsoft Windows Update] svcshost.exe
O4 - HKCU\..\RunOnce: [window2] svcmon.exe
O4 - HKCU\..\RunOnce: [msmsgs] IEXPLORE.exe
O4 - HKCU\..\RunOnce: [Windows boom update] regrunsrv.exe
O4 - HKCU\..\RunOnce: [msdata] moose.exe
O4 - HKCU\..\RunOnce: [System driver] Messenger.exe
O4 - HKCU\..\RunOnce: [PK Services] pksvc.exe
O4 - HKCU\..\RunOnce: [Windows DNS Daemon] windnsd.exe
O4 - HKCU\..\RunOnce: [MP Services] mpsvc.exe
O4 - HKCU\..\RunOnce: [Win32 Configuration] videosd32.exe
O4 - HKCU\..\RunOnce: [MSN ang] system32.exe
O4 - HKCU\..\RunOnce: [USB Driver] WINDOWS.exe
O4 - HKCU\..\RunOnce: [Windows Driver Services] msdrvs32.exe
O4 - HKCU\..\RunOnce: [USB Device] win32usb.exe
O4 - Startup: C'è Posta.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: Web Rebates - file://C:\Programmi\Web_Rebates\Sy1150\Tp1150\scri1150a.htm
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - C:\Programmi\SideFind\sidefind.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O14 - IERESET.INF: START_PAGE_URL=http://www.fastweb.it
O16 - DPF: {00000000-0000-0000-0000-000020030000} - http://www.accessoveloce.com/webline/x/wvhmp3x.exe