problema del mio utente...

[karnak]

ho un problema strano il mio utente (solo il mio) non parte! quando lo accendo si apre, e resta li immobile x ore...con il task manager ho visto che l'utilizzo del pc è del 4 o 5 o 7 % non di piu...è strano perche con gli altri utenti (i miei fratelli) non fa nessun problema infatti da qui stoscrivendo adesso...
qualcuno ci capisce qualcosa?

tra l'altro norton mi segnala che 1 elemento influenza lo stato ma quando cerco di fare la scansione (con qualunque utente) dopo un certo numero dio files controllati il pc va in stand by...non riescoa capire il perché...

[...:: Thè Çlíêñt ::...]

2 consigli:

1) entra come admin e vedi se rirsci a risolvere
2) cambai antivirus, norton è il + scarso

[Amantide]

Potrebbe bastare anche un semplice ripristino di sistema ( se riesci a farlo e se non appartieni a quelli che lo diniegano a priori )

Puoi provare anche a fare la scansione online con Ewido o Kaspersky.

[jack.ese]

prova anche ad entrare in modalità provvisoria (F8 all'avvio) nel tuo account per fare come dice amantide :-P

[karnak]

x the client: mi sono dimenticato di dire che sono io l'admin...e norton nonmi aveva mai dato problemi prima d'ora...

x amantide: cosa intendi con la frase tra parentesi?? e x il ripristino c'è una data specifica che devo inserire? adesso provo quella scansione che mi hai detto te...

x jack: ma dalla mod provv si puo entrare in internet?

[karnak]

allora ho fatto la scansione con ewin come mi ha cosigliato Amantide ma non sono sicuro che al fare remove, li abbia davvero rimosso xk il programma si è chiuso ed è venuta fuori la segnalazione errori di microsoft... comunque questo è il report di ewin:


__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Onestat
Path: D:\Documents and Settings\Nico.rodriguez.000\Cookies\nico@stat.onestat[2].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: D:\Documents and Settings\Nico.rodriguez.000\Cookies\nico@statcounter[2].txt
Risk: Medium

Name: Adware.P2PNetworking
Path: HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer
Risk: Medium

Name: Adware.P2PNetworking
Path: HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CLSID
Risk: Medium

Name: Adware.P2PNetworking
Path: HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer\CurVer
Risk: Medium

Name: Adware.P2PNetworking
Path: HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer.1
Risk: Medium

Name: Hijacker.Small.kj
Path: C:\WINDOWS\svchost.exe
Risk: High

Name: Adware.AdvertMen
Path: C:\WINDOWS\system32\pushow87.dll
Risk: Medium

Name: Not-A-Virus.Exploit.Java.ByteVerify
Path: D:\Documents and Settings\Nico.rodriguez.000\Dati applicazioni\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-271e6c1-734358ed.zip/A.class
Risk: Low

Name: TrackingCookie.2o7
Path: D:\Documents and Settings\Todos\Cookies\todos@2o7[1].txt
Risk: Medium

Name: TrackingCookie.Yieldmanager
Path: D:\Documents and Settings\Todos\Cookies\todos@ad.yieldmanager[1].txt
Risk: Medium

Name: TrackingCookie.Euroclick
Path: D:\Documents and Settings\Todos\Cookies\todos@adopt.euroclick[2].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: D:\Documents and Settings\Todos\Cookies\todos@ads.pointroll[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: D:\Documents and Settings\Todos\Cookies\todos@as-eu.falkag[1].txt
Risk: Medium

Name: TrackingCookie.Falkag
Path: D:\Documents and Settings\Todos\Cookies\todos@as1.falkag[2].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: D:\Documents and Settings\Todos\Cookies\todos@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Bluestreak
Path: D:\Documents and Settings\Todos\Cookies\todos@bluestreak[2].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: D:\Documents and Settings\Todos\Cookies\todos@burstnet[2].txt
Risk: Medium

Name: TrackingCookie.Casalemedia
Path: D:\Documents and Settings\Todos\Cookies\todos@casalemedia[1].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@counter1.sextracker[1].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@counter13.sextracker[1].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@counter3.sextracker[2].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@counter4.sextracker[2].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@counter5.sextracker[1].txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: D:\Documents and Settings\Todos\Cookies\todos@cs.sexcounter[2].txt
Risk: Medium

Name: TrackingCookie.Clickzs
Path: D:\Documents and Settings\Todos\Cookies\todos@cz6.clickzs[1].txt
Risk: Medium

Name: TrackingCookie.Clickzs
Path: D:\Documents and Settings\Todos\Cookies\todos@cz7.clickzs[1].txt
Risk: Medium

Name: TrackingCookie.Coremetrics
Path: D:\Documents and Settings\Todos\Cookies\todos@data.coremetrics[1].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: D:\Documents and Settings\Todos\Cookies\todos@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: D:\Documents and Settings\Todos\Cookies\todos@ehg-interlifeform.hitbox[1].txt
Risk: Medium

Name: TrackingCookie.Estat
Path: D:\Documents and Settings\Todos\Cookies\todos@estat[1].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: D:\Documents and Settings\Todos\Cookies\todos@fastclick[2].txt
Risk: Medium

Name: TrackingCookie.Wegcash
Path: D:\Documents and Settings\Todos\Cookies\todos@free.wegcash[2].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: D:\Documents and Settings\Todos\Cookies\todos@hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Masterstats
Path: D:\Documents and Settings\Todos\Cookies\todos@image.masterstats[1].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: D:\Documents and Settings\Todos\Cookies\todos@media.fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: D:\Documents and Settings\Todos\Cookies\todos@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: D:\Documents and Settings\Todos\Cookies\todos@microsoftwlmessengermkt.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: D:\Documents and Settings\Todos\Cookies\todos@msninvite.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: D:\Documents and Settings\Todos\Cookies\todos@msnportal.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: D:\Documents and Settings\Todos\Cookies\todos@overture[2].txt
Risk: Medium

Name: TrackingCookie.Paycounter
Path: D:\Documents and Settings\Todos\Cookies\todos@paycounter[1].txt
Risk: Medium

Name: TrackingCookie.Overture
Path: D:\Documents and Settings\Todos\Cookies\todos@perf.overture[1].txt
Risk: Medium

Name: TrackingCookie.Wegcash
Path: D:\Documents and Settings\Todos\Cookies\todos@programs.wegcash[2].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: D:\Documents and Settings\Todos\Cookies\todos@questionmarket[2].txt
Risk: Medium

Name: TrackingCookie.Revenue
Path: D:\Documents and Settings\Todos\Cookies\todos@revenue[2].txt
Risk: Medium

Name: TrackingCookie.Liveperson
Path: D:\Documents and Settings\Todos\Cookies\todos@server.iad.liveperson[1].txt
Risk: Medium

Name: TrackingCookie.Sexlist
Path: D:\Documents and Settings\Todos\Cookies\todos@sexlist[2].txt
Risk: Medium

Name: TrackingCookie.Sextracker
Path: D:\Documents and Settings\Todos\Cookies\todos@sextracker[1].txt
Risk: Medium

Name: TrackingCookie.Statcounter
Path: D:\Documents and Settings\Todos\Cookies\todos@statcounter[1].txt
Risk: Medium

Name: TrackingCookie.Reliablestats
Path: D:\Documents and Settings\Todos\Cookies\todos@stats1.reliablestats[2].txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: D:\Documents and Settings\Todos\Cookies\todos@tradedoubler[2].txt
Risk: Medium

Name: TrackingCookie.Tribalfusion
Path: D:\Documents and Settings\Todos\Cookies\todos@tribalfusion[1].txt
Risk: Medium

Name: TrackingCookie.Valueclick
Path: D:\Documents and Settings\Todos\Cookies\todos@valueclick[2].txt
Risk: Medium

Name: TrackingCookie.Weborama
Path: D:\Documents and Settings\Todos\Cookies\todos@weborama[1].txt
Risk: Medium

Name: TrackingCookie.Burstnet
Path: D:\Documents and Settings\Todos\Cookies\todos@www.burstnet[1].txt
Risk: Medium

Name: TrackingCookie.Etracker
Path: D:\Documents and Settings\Todos\Cookies\todos@www.etracker[1].txt
Risk: Medium

Name: TrackingCookie.Xxxcounter
Path: D:\Documents and Settings\Todos\Cookies\todos@xxxcounter[1].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: D:\Documents and Settings\Todos\Cookies\todos@zedo[2].txt
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\Config.xml
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\db
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\db\Aliases.dbs
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\db\Sites.dbs
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\dwld
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\dwld\WhiteList.xip
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\persist.dbs
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\report
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\report\ag_ShopperReports.xml
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\report\ag_ShopperReports.xml.db
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\report\send_ShopperReports.xml
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\report\send_ShopperReports.xml.db
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\cs\res1
Risk: Medium

Name: Adware.HotBar
Path: D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports\shprrprt.log
Risk: Medium

Name: Not-A-Virus.BadJoke.Win32.Finger.b
Path: D:\Documents and Settings\Todos\Documenti\cazzate goncy\puntatore bas***do.exe
Risk: Low

tanti lo so che non sono iomportanti ma è strano che siano li o no?? adesso faccio lo scan con hijackthis x vedere se c'è qualcos'altro...

[karnak]

ciao a tutti sono ancora io...questo è il log con hijackthis in mod provv e senza collegamento alla rete:

Logfile of HijackThis v1.99.1
Scan saved at 20.50.42, on 01/08/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programmi\File comuni\Ulead Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\Programmi\File comuni\Symantec Shared\ccApp.exe
C:\apps\ABoard\AOSD.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\mioengine.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\File comuni\Symantec Shared\NMain.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Programmi\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\NORTON~1\NORTON~1\navw32.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Documents and Settings\Nico.rodriguez.000\Desktop\TUTTO\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.it/spbasic.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gw.aliceadsl.it/home
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.it/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programmi\Macrogaming\SweetIMBarForIE\toolbar.dll
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,C:\WINDOWS\svchost.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\Programmi\Macrogaming\SweetIMBarForIE\toolbar.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Programmi\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Norton Internet Security 2006 - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.5000.1021\it\msntb.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Programmi\Macrogaming\SweetIMBarForIE\toolbar.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Apps\MSN Toolbar\01.02.5000.1021\it\msntb.dll
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Programmi\File comuni\Ulead Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Programmi\Pirelli\Access Gateway USB Network\CnxTrApp.dll",AppEntry -REG "Pirelli\Access Gateway USB"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - Startup: My 190.it.lnk = D:\Documents and Settings\Nico.rodriguez.000\Dati applicazioni\mioObjects\[objects]\69GWEU9386MTAR08.mio
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra button: Alice - {416A382B-933B-4CE4-8D1C-9C26B3CC4772} - http://gw.aliceadsl.it/alice (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1754A1BA-A1DF-4F10-B199-AA55AA1A120F} (InstallerBehaviorFactory Class) - https://signup.msn.com/pages/MsnInstC.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://nicols6684.spaces.msn.com//Photo ... nPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 6119752593
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftup ... 6133624906
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b32846.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter: application/x-internet-signup - {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programmi\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Programmi\Norton Internet Security\comHost.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Servizio Auto-Protect di Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Programmi\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe

vedete se ci puo essere qualcosa...io (ignorante come sono§) non capisco se cì'è qualcosa di pericoloso o meno..


grazie anticipate...

[jack.ese]

intendevo entrare in modalità provvisoria per poter entrare nel tuo account ed effetture il ripristino di configurazione a una data che non avevi problemi!

..non per fare la scansione nel web!

[Amantide]

Il problema di "tuo utente" dovrebbe essere dovuto a questa voce:

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,C:\WINDOWS\svchost.exe

Rifai la scansione con Hijackthis e fixa queste voci:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1;<local>
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,,C:\WINDOWS\svchost.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O9 - Extra button: Alice - {416A382B-933B-4CE4-8D1C-9C26B3CC4772} - http://gw.aliceadsl.it/alice (file missing) (HKCU)

Poi dalla modalità provvisoria elimini il file C:\WINDOWS\svchost.exe, se non riesci usa il programma Delete Doctor.
Poi scarica il CCleaner e fai la pulizia di tutti i cookies e file temporanei dopo di che puoi rifare la scansione con Ewido.

[Amantide]

Riguardo il log di Ewido... se non riesci a completare la scansione dovresti eliminare a mano anche questi file:

D:\Documents and Settings\Todos\Documenti\cazzate goncy\puntatore bas***do.exe
D:\Documents and Settings\Todos\Dati applicazioni\ShopperReports
C:\WINDOWS\system32\pushow87.dll

ed elimina anche queste chiavi di registro:

HKLM\SOFTWARE\Classes\WebP2PInstaller.Installer
HKLM\Software \ ShopperReports