instant access- che devo fare.

[freedom06]

ciao ragazzi mi è comparso sul desktop l'icona instant access e non so come eliminarlo.
ho fatto diverse scansioni ma non riesco ad eliminarlo, e da qualche giorno il mio computer si blocca in continuazione.
ecco il mio log file:
Logfile of HijackThis v1.99.1
Scan saved at 16.12.28, on 25/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Maggioli Editore\Banchedati\prg\bdsrvc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Programmi\EPSON\ESM2\eEBSVC.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmi\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe
C:\WINDOWS\System32\svchost.exe
C:\VEXPLITE\viritsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Programmi\ABBYY FineReader 5.0 Pro\CAgent.exe
C:\Programmi\Logitech\MediaLife\MediaLifeService.exe
C:\Programmi\Canon\GAROStatusMonitor\cnwida.exe
C:\VEXPLITE\MONLITE.EXE
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmi\SHARP\Button Manager G\btnman.exe
C:\Programmi\Telecom Italia Media\Fast 800-840 Tin.it\dslmon.exe
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
C:\Programmi\Logitech\SetPoint\SetPoint.exe
C:\Programmi\File comuni\Logitech\KHAL\KHALMNPR.EXE
C:\Programmi\AntiVir PersonalEdition Classic\sched.exe
C:\Programmi\AntiVir PersonalEdition Classic\avguard.exe
C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programmi\AntiVir PersonalEdition Classic\update.exe
C:\Programmi\ewido anti-malware\ewidoguard.exe
C:\Programmi\ewido anti-malware\ewidoctrl.exe
C:\Documents and Settings\Administrator\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da ClubNet by Tin.it - Maggioli Ed.
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [Easy-PrintToolBox] "C:\Programmi\Canon\Easy-PrintToolBox\BJPSMAIN.EXE" /logon
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -onlytray
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [ABBYY Community Agent] C:\Programmi\ABBYY FineReader 5.0 Pro\CAgent.exe
O4 - HKLM\..\Run: [PCMService] "C:\Programmi\Logitech\MediaLife\MediaLifeService.exe"
O4 - HKLM\..\Run: [CnwiDeviceAgent] C:\Programmi\Canon\GAROStatusMonitor\cnwida.exe
O4 - HKLM\..\Run: [VIRIT LITE MONITOR] C:\VEXPLITE\MONLITE.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [PcSync] "C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [AROReminder] C:\Programmi\Advanced Registry Optimizer\aro.exe -rem
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Button Manager G.lnk = C:\Programmi\SHARP\Button Manager G\btnman.exe
O4 - Global Startup: Controllo in background EPSON.lnk = C:\Programmi\EPSON\ESM2\Stms.exe
O4 - Global Startup: DSLMON.lnk = C:\Programmi\Telecom Italia Media\Fast 800-840 Tin.it\dslmon.exe
O4 - Global Startup: GARO Status Monitor.lnk = C:\Programmi\Canon\GAROStatusMonitor\cnwism.exe
O4 - Global Startup: Gestione servizi.lnk = C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programmi\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O15 - Trusted Zone: www.playitalia.com
O15 - Trusted Zone: *.whataboutadog.com
O15 - Trusted Zone: *.whataboutarabit.com
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/share ... insctl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 0128743211
O16 - DPF: {8EC18CE2-D7B4-11D2-88C8-006008A717FD} (NCSView Class) - http://ww3.atlanteitaliano.it/ecwplugins/ncs.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/share ... cgdmgr.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwa ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{4F8376E7-F7AB-4985-8974-D6E8D49451BA}: NameServer = 151.99.125.2
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programmi\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bd Http Server (BdHttpServer) - Unknown owner - C:\Programmi\Maggioli Editore\Banchedati\prg\bdsrvc.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Programmi\EPSON\ESM2\eEBSVC.exe
O23 - Service: ewido security suite control - ewido networks - C:\Programmi\ewido anti-malware\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Programmi\ewido anti-malware\ewidoguard.exe
O23 - Service: GMAYZ - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\GMAYZ.exe (file missing)
O23 - Service: HWQYHU - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\HWQYHU.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Roxio Inc. - C:\WINDOWS\System32\ImapiRox.exe
O23 - Service: IRH - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\IRH.exe (file missing)
O23 - Service: JACK - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\JACK.exe (file missing)
O23 - Service: KPJFHE - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\KPJFHE.exe (file missing)
O23 - Service: LZTTPM - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\LZTTPM.exe (file missing)
O23 - Service: UEVJID - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\UEVJID.exe (file missing)
O23 - Service: Virit eXplorer Lite (viritsvclite) - TG Soft Sas www.tgsoft.it - C:\VEXPLITE\viritsvc.exe

[BeGa]

Hai provato a cancellarla tenendo premuto i due shift e premendo canc???

[BeGa]

Molto strano sto processo

O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)

[freedom06]

certo ma senza risultati

[BeGa]

Vediamo cosa dicono quelli che sanno più di me

[kap]

forse il log di hijackthis più lungo che abbia mai visto... dunque, se non hai inserito tra i preferiti di internet explorer le tre voci che ti elenco, eliminale pure

O15 - Trusted Zone: www.playitalia.com

O15 - Trusted Zone: *.whataboutadog.com

O15 - Trusted Zone: *.whataboutarabit.com

Non capisco tutte quelle voci che dicono più o meno

Codice: Seleziona tutto

O18 - Protocol: bw40 - {F2EF0355-7D9A-4CE2-9E67-E70B357288F5} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

poi cancella le voci relative ai file mancanti e nello specifico queste:

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

O23 - Service: GMAYZ - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\GMAYZ.exe (file missing)

O23 - Service: HWQYHU - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\HWQYHU.exe (file missing)

O23 - Service: IRH - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\IRH.exe (file missing)

O23 - Service: JACK - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\JACK.exe (file missing)

O23 - Service: KPJFHE - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\KPJFHE.exe (file missing)

O23 - Service: LZTTPM - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\LZTTPM.exe (file missing)

O23 - Service: UEVJID - Unknown owner - C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\UEVJID.exe (file missing)

per il file che non riesci a cancellare segui questa guida http://www.MegaLab.it/2427


ciau e per la mazzata finale aspetta un mod che ti debelli la spazzatura dal pc..gh

[crazy.cat]

che li scriviamo a fare gli articoli se poi non li cercate....

Serve il log di findaw
http://www.MegaLab.it/2684

[kap]

troppi articoli, troppi...bisognerebbe mandare down il server per un po'....ihih