www.MegaLab.it

da **Kesson** » mar apr 27, 2004 4:09 pm

All'accensione del pc mi da un errore di caricamento nella directory che fa da titolo al topic...ed é successo dopo aver fatto uno scan con Ad-Aware 6.0... [?]

ho trovato molti altri link sulla rete di gente con il mio stesso problema, ma non ho capito molto bene la soluzione.... eccone uno :

http://www.computing.net/security/wwwboard/forum/10249.html

non é che potreste aiutarmi?

grassie a tutti![;)]

da **crazy.cat** » mar apr 27, 2004 4:21 pm

Sembrerebbe uno spyware.
Vai su http://www.lavasoft.de e ti scarichi Adware e l'aggiornamento del programma e fai una scansione ed elimini quello che trovi e poi vediamo.
Il link che hai messo non si collega dove c'è scritta la soluzione al problema.

da **Kesson** » mar apr 27, 2004 5:09 pm

Quando ho usato Ad aware era già aggiornato, mi era capitata una cosa analoga anche tempo fà poi avevo risolto...solo che questa volta mi sembra un po' piu' complicato....ho fatto anche uno scan col norton e non mi ha trovato nulla....

a me comunque il link del sito me lo apre provo a riscrivertelo:

http://computercops.biz/postitle14722-0-0-.html

grazie ancora ;-)

da **Kesson** » mar apr 27, 2004 6:28 pm

ehm......Up!

;)

da **crazy.cat** » mar apr 27, 2004 6:41 pm

Ero in viaggio per tornarmene a casa per quello non rispondevo.
Dice che ha usato Hijackthis
http://209.133.47.200/~merijn/files/HijackThis.exe
ed ha tolto quelle chiavi segnate nel post di Unzy e poi ha funzionato.
Confrontale con quelle che trovi nel tuo pc ed elimina quelle uguali, se hai dubbi metti il tuo log qui e vediamo cosa eliminare.

Adesso spengo il pc e riprenderò domani.

da **Kesson** » mar apr 27, 2004 8:33 pm

grazie ancora adesso mi ci metto, comunque ti scrivo il Log:

Logfile of HijackThis v1.97.7
Scan saved at 21.33.15, on 27/04/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32lexbces.exe
C:WINDOWSSystem32LEXPPS.EXE
C:WINDOWSsystem32spoolsv.exe
C:ProgrammiFile comuniSymantec SharedccEvtMgr.exe
D:CPUColdCooLSrv.exe
C:WINDOWSSystem32CTsvcCDA.exe
C:ProgrammiNorton AntiVirus
avapsvc.exe
C:ProgrammiNorton AntiVirusAdvToolsNPROTECT.EXE
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32usrbridg.exe
C:WINDOWSExplorer.EXE
C:ProgrammiFile comuniLogitechQCDriverLVCOMS.EXE
C:PROGRA~1LogitechMOUSEW~1SYSTEMEM_EXEC.EXE
C:WINDOWSSystem32CTHELPER.EXE
C:WINDOWSSystem32Rundll32.exe
C:ProgrammiScanSoftOmniPageSEopware32.exe
C:ProgrammiFile comuniSymantec SharedccApp.exe
C:ProgrammiFile comuniRealUpdate_OBevntsvc.exe
C:WINDOWSSystem32RunDLL32.exe
D:ProgrammiAdobeAcrobatDistillrAcroTray.exe
C:ProgrammiWinZipWZQKPICK.EXE
C:WINDOWSsystem32ctfmon.exe
C:ProgrammiInternet ExplorerIEXPLORE.EXE
D:FrxHijackThisHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.it/
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://red.clientapps.yahoo.com/customi ... earch.html
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer =
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Local Page = C:WINDOWSSYSTEMlank.htm
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = http://www.google.it/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:ProgrammiDAPDAPBHO.dll
O2 - BHO: (no name) - {0096CC0A-623C-4829-AD9C-19AF0DC9D8FE} - D:PROGRAMMIDAPDAPIEBAR.DLL
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:ProgrammiYahoo!Commonycomp5_2_3_0.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - d:programmiadobeacrobatReaderActiveXAcroIEHelper.ocx
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:programmigooglegoogletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammiNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:programmigooglegoogletoolbar2.dll
O4 - HKLM..Run: [SystemTray] SysTray.Exe
O4 - HKLM..Run: [PrinTray] C:WINDOWSSystem32spoolDRIVERSW32X863printray.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [LVCOMS] C:ProgrammiFile comuniLogitechQCDriverLVCOMS.EXE
O4 - HKLM..Run: [EM_EXEC] C:PROGRA~1LogitechMOUSEW~1SYSTEMEM_EXEC.EXE
O4 - HKLM..Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE
O4 - HKLM..Run: [Jet Detection] C:ProgrammiCreativeSBLivePROGRAMADGJDet.exe
O4 - HKLM..Run: [BIE] Rundll32 C:WINDOWSDOWNLO~1BDPlugin.dll,Rundll32
O4 - HKLM..Run: [Launcher] "C:ProgrammiMLHlauncher.exe" /P
O4 - HKLM..Run: [XXXNow_it] c:program filescomsoftdialersxxxnow_itxxxnow_it.exe /noconnect
O4 - HKLM..Run: [RunWindowsUpdate] C:WINDOWSuptodate.exe
O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [XTNDConnect PC - ErPhn2] C:PROGRA~1FILECO~1XCPCSyncTRANSL~1ErPhn2ErTray.exe
O4 - HKLM..Run: [Connector] C:WINDOWSSystem32CIWIN32.EXE -n
O4 - HKLM..Run: [QuickTime Task] "C:ProgrammiQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [Omnipage] C:ProgrammiScanSoftOmniPageSEopware32.exe
O4 - HKLM..Run: [refrnnqg] C:WINDOWSxmlcfv.exe
O4 - HKLM..Run: [CloneCDElbyCDFL] "D:ProgrammiElaborate BytesCloneCDElbyCheck.exe" /L ElbyCDFL
O4 - HKLM..Run: [ccApp] "C:ProgrammiFile comuniSymantec SharedccApp.exe"
O4 - HKLM..Run: [ccRegVfy] "C:ProgrammiFile comuniSymantec SharedccRegVfy.exe"
O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1AdvToolsADVCHK.EXE
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load
O4 - HKLM..Run: [TkBellExe] C:ProgrammiFile comuniRealUpdate_OBevntsvc.exe -osboot
O4 - HKLM..RunServices: [MOSearch] C:PROGRA~1FILECO~1SystemMOSearchBinmosearch.exe
O4 - HKCU..Run: [5-2-46-29] c:windows5-2-46-29.exe -m
O4 - HKCU..Run: [5-2-145-58] c:program filesWebdialer5-2-145-58.exe -m
O4 - HKCU..Run: [AutoUpdater] C:WINDOWSSystem32aupdate.exe
O4 - HKCU..Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - Startup: Microsoft Office.lnk = C:ProgrammiMicrosoft OfficeOffice10OSA.EXE
O4 - Startup: WinZip Quick Pick.lnk = C:ProgrammiWinZipWZQKPICK.EXE
O4 - Startup: Reality Fusion GameCam SE.lnk = C:ProgrammiReality FusionReality Fusion GameCam SEProgramRFTRay.exe
O4 - Startup: PowerReg SchedulerV2.exe
O4 - Startup: Adobe Gamma Loader.exe.lnk = C:ProgrammiFile comuniAdobeCalibrationAdobe Gamma Loader.exe
O4 - Startup: PowerReg Scheduler V3.exe
O4 - Global Startup: Norton AntiVirus AutoProtect.lnk = C:ProgrammiNorton AntiVirus
avapw32.exe
O4 - Global Startup: Acrobat Assistant.lnk = D:ProgrammiAdobeAcrobatDistillrAcroTray.exe
O8 - Extra context menu item: &Download with &DAP - C:PROGRA~1DAPdapextie.htm
O8 - Extra context menu item: &Google Search - res://C:ProgrammiGoogleGoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:ProgrammiGoogleGoogleToolbar2.d ... links.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:ProgrammiGoogleGoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Download &all with DAP - C:PROGRA~1DAPdapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:PROGRA~1MICROS~1OFFICE10EXCEL.EXE/3000
O8 - Extra context menu item: Si&milar Pages - res://C:ProgrammiGoogleGoogleToolbar2.d ... milar.html
O8 - Extra context menu item: Yahoo! Dictionary - file:///C:ProgrammiYahoo!Common/ycdict.htm
O8 - Extra context menu item: Yahoo! Search - file:///C:ProgrammiYahoo!Common/ycsrch.htm
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger (HKLM)
O9 - Extra button: Short Message (HKLM)
O9 - Extra button: Run DAP (HKLM)
O9 - Extra button: AllInOne (HKLM)
O9 - Extra 'Tools' menuitem: AllInOne (HKLM)
O12 - Plugin for .spop: C:ProgrammiInternet ExplorerPluginsNPDocBox.dll
O16 - DPF: ChatSpace Full Java Client 3.1.0.229 - http://surechat.com:9000/Java/cfs31229.cab
O16 - DPF: ChatSpace Java Client 2.1.0.90L - http://64.85.10.126:8139/Java/cs4msl090.cab
O16 - DPF: Yahoo! Backgammon - http://download.games.yahoo.com/games/c ... /at0_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://www.truedoc.com/activex/tdserver.cab
O16 - DPF: {02607DF4-D40B-4FFB-B054-1CAC03468E28} (DNLCertificate Control) - http://www.fmn-media.com/campaigns/winp ... ficate.ocx
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Macromedia Active Shockwave) - http://download.macromedia.com/pub/shoc ... tor/sw.cab
O16 - DPF: {1EDF25DE-DFB2-40CA-AA83-30AE7DA8C203} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/A ... ngctrl.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://download.yahoo.com/dl/installs/yinst0309.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2003 ... scan53.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... Client.cab
O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/games-it/it/games3.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 1849884259
O16 - DPF: {A17E30C4-A9BA-11D4-8673-60DB54C10000} (YahooYMailTo Class) - http://us.dl1.yimg.com/download.yahoo.c ... pi_416.dll
O16 - DPF: {AEFD32B6-4815-11D2-98E4-00C04FCEFE77} (SnCAX Class) - http://freetel.picus.it/Picus/SnC/AutoSetup/SnC.cab
O16 - DPF: {BC207F7D-3E63-4ACA-99B5-FB5F8428200C} - http://bar.baidu.com/update/dguser/IESe ... homedg.cab
O16 - DPF: {C7CF4846-0324-4B83-B810-C4BF61029E02} (Pro_Web04.ProWeb604) - http://www.sessogratis.net/ProWeb604.CAB
O16 - DPF: {CFCB7308-782F-11D4-BE27-000102598CE4} (NPX Control) - http://211.239.161.56/nprotect/npx.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
O16 - DPF: {E87A6788-1D0F-4444-8898-1D25829B6755} - http://fdl.msn.com/public/chat/msnchat4.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} (ddm_download.ddm_control) - http://download.rfwnad.com/cab/dlexe.CAB
O16 - DPF: {FEC3E5A3-50F7-4B0C-97D8-01CF69DFBFC7} (Measurement Service Client) - http://ccon.madonion.com/global/msc.cab
O16 - DPF: {FFFF0018-0001-101A-A3C9-08002B2F49FB} - http://www.mega-party.net/chat.exe

da **Kesson** » mar apr 27, 2004 8:36 pm

incredibile la cacca che entra nel pc senza rendersene conto.... [:(!]

e io che credevo che Ad-Aware levasse tutto... [:0]

da **crazy.cat** » mer apr 28, 2004 6:47 am

Perdendo tutte le diventa difficile leggere ma almeno questi si possono eliminare tranquillamente.

O4 - HKLM..Run: [UpdReg] C:WINDOWSUpdReg.EXE Application that reminds users to register for their Creative Labs products (inutile)
O4 - HKLM..Run: [BIE] Rundll32 C:WINDOWSDOWNLO~1BDPlugin.dll,Rundll32 (non lo sò cosa sia ma non mi piace)
O4 - HKLM..Run: [Launcher] "C:ProgrammiMLHlauncher.exe" /P (spyware??)
O4 - HKLM..Run: [XXXNow_it] c:program filescomsoftdialersxxxnow_itxxxnow_it.exe /noconnect (dialer??)
O4 - HKLM..Run: [XTNDConnect PC - ErPhn2] C:PROGRA~1FILECO~1XCPCSyncTRANSL~1ErPhn2ErTray.exe (dialer??)
O4 - HKLM..Run: [Connector] C:WINDOWSSystem32CIWIN32.EXE -n (dialer??)
O4 - HKLM..Run: [QuickTime Task] "C:ProgrammiQuickTimeqttask.exe" -atboottime (inutile)
O4 - HKLM..Run: [refrnnqg] C:WINDOWSxmlcfv.exe (sospetto virus??)
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load (l'errore ti viene da questo)
O4 - HKLM..RunServices: [MOSearch] C:PROGRA~1FILECO~1SystemMOSearchBinmosearch.exe (parte di Office inutile ricerca rapida)
O4 - HKCU..Run: [5-2-46-29] c:windows5-2-46-29.exe -m (dialer)
O4 - HKCU..Run: [5-2-145-58] c:program filesWebdialer5-2-145-58.exe -m (dialer)
O4 - HKCU..Run: [AutoUpdater] C:WINDOWSSystem32aupdate.exe (Spyware)

da **Kesson** » mer apr 28, 2004 10:09 am

Grazie mille, risolto, ora non mi da piu' l'errore....

sei stato davvero gentilissimo. [applauso]

ancora grazie [^]

da **admin** » ven mag 14, 2004 1:10 am

Grazie per il benvenuto a tutti voi!!
Vi ringrazio fortemente del vostro aiuto, ho risolto il problema cancellando il programma che conteneva (file Bridge.dll, il quale era danneggiato),l'errore.
Grazie comunque a tutti voi di tutto cuore per la vostra collaborazzione, un in bocca al lupo per il vostro sito, ciao e a risentirci!![^](comunque non ho capito bene in che modo usare HIJCKTHIS).

da **Mushanga75** » ven mag 14, 2004 10:13 am

Ciao a tutti,
sono mushanga75, un vostro nuovo utente... scusate se non mi perdo in convenevoli ma credo di avere anche io lo stesso problema di bridge.dll... ho seguito il forum e ho fatto girare hijackthis... vi scrivo di seguito il mio log... non è che gentilmente mi potreste dare una dritta in merito alla "cacca" del mio computer??? vi ringrazio ancora tanto :)

Logfile of HijackThis v1.97.7
Scan saved at 11.12.49, on 14/05/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammiFile comuniSymantec SharedccSetMgr.exe
C:ProgrammiFile comuniSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32Ati2evxx.exe
C:ProgrammiNorton AntiVirus
avapsvc.exe
C:ProgrammiNorton AntiVirusSAVScan.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:ProgrammiSynapticsSynTPSynTPLpr.exe
C:ProgrammiSynapticsSynTPSynTPEnh.exe
C:WINDOWSAGRSMMSG.exe
C:ProgrammiLaunch ManagerLaunchAp.exe
C:ProgrammiLaunch ManagerPowerKey.exe
C:ProgrammiLaunch ManagerHotkeyApp.exe
C:ProgrammiLaunch ManagerCtrlVol.exe
C:ProgrammiLaunch ManagerWbutton.exe
C:ProgrammiFile comuniSymantec SharedccApp.exe
C:ProgrammiFile comuniRealUpdate_OB ealsched.exe
D:softwares scaricatiquick time4.1qttask.exe
C:WINDOWSSystem32ctfmon.exe
C:ProgrammiCarlettoCarletto.exe
C:ProgrammiFile comuniMicrosoft SharedWorks Sharedwkcalrem.exe
C:ProgrammiInternet Exploreriexplore.exe
C:ProgrammiRealRealPlayerRealPlay.exe
C:ProgrammiInternet Exploreriexplore.exe
C:Documents and SettingsGIORGIODocumentiSoftwaresHijackThis.exe

R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://red.clientapps.yahoo.com/customi ... earch.html
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.it/
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar = http://red.clientapps.yahoo.com/customi ... earch.html
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://global.acer.com
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Collegamenti
R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,Shellnext = http://www.fastweb.it/welcome
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammiAdobeAcrobat 5.0ReaderActiveXAcroIEHelper.ocx
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammiNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammiNorton AntiVirusNavShExt.dll
O4 - HKLM..Run: [LaunchApp] LaunApp
O4 - HKLM..Run: [HTpatch] C:WINDOWShtpatch.exe
O4 - HKLM..Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM..Run: [SynTPLpr] C:ProgrammiSynapticsSynTPSynTPLpr.exe
O4 - HKLM..Run: [SynTPEnh] C:ProgrammiSynapticsSynTPSynTPEnh.exe
O4 - HKLM..Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM..Run: [LaunchAp] C:ProgrammiLaunch ManagerLaunchAp.exe
O4 - HKLM..Run: [PowerKey] "C:ProgrammiLaunch ManagerPowerKey.exe"
O4 - HKLM..Run: [HotkeyApp] C:ProgrammiLaunch ManagerHotkeyApp.exe
O4 - HKLM..Run: [CtrlVol] C:ProgrammiLaunch ManagerCtrlVol.exe
O4 - HKLM..Run: [Wbutton] "C:ProgrammiLaunch ManagerWbutton.exe"
O4 - HKLM..Run: [WorksFUD] c:ProgrammiMicrosoft Workswkfud.exe
O4 - HKLM..Run: [Microsoft Works Portfolio] c:ProgrammiMicrosoft WorksWksSb.exe /AllUsers
O4 - HKLM..Run: [Microsoft Works Update Detection] c:ProgrammiMicrosoft WorksWkDetect.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammiFile comuniSymantec SharedccApp.exe"
O4 - HKLM..Run: [TkBellExe] "C:ProgrammiFile comuniRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [QuickTime Task] "D:softwares scaricatiquick time4.1qttask.exe" -atboottime
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [ChkMail] ˜<‹
O4 - HKCU..Run: [Carletto] C:ProgrammiCarlettoCarletto.exe
O4 - Global Startup: Promemoria del Calendario di Microsoft Works.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:ProgrammiMicrosoft OfficeOfficeOSA9.EXE
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: {A8658086-E6AC-4957-BC8E-7D54A7E8A78E} (SassCln Object) - http://www.microsoft.com/security/controls/SassCln.CAB
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab

da **crazy.cat** » ven mag 14, 2004 10:43 am

Che errore ti da il pc, perché non vedo le stesse voci che avevano gli altri con questo problema del bridge.
Hai alcune cose strane nei run che non conosco
O4 - HKLM..Run: [LaunchApp] LaunApp
O4 - HKCU..Run: [ChkMail] ˜<‹
O4 - HKCU..Run: [Carletto] C:ProgrammiCarlettoCarletto.exe

questi sono abbastanza inutili e di solito io li elimino
O4 - HKLM..Run: [TkBellExe] "C:ProgrammiFile comuniRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [QuickTime Task] "D:softwares scaricatiquick time4.1qttask.exe" -atboottime
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [NeroCheck] C:WINDOWSsystem32NeroCheck.exe

da **Mushanga75** » ven mag 14, 2004 11:12 am

lo stesso errore che dava a kesson.... ps.. carletto.exe è semplicemente un programmino che visualizza il camaleonte dei sofficini findus....lol

da **Kesson** » ven mag 14, 2004 11:26 am

<blockquote id="quote">citazione:<hr height="1" noshade id="quote">O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load
<hr height="1" noshade id="quote"></blockquote id="quote">

questo é il file che una volta eliminato mi aveva risolto il problema comunque..

;)

da **Mushanga75** » ven mag 14, 2004 12:59 pm

questo file non lo trovo si vede che lo ha già eliminato... grazie comunque ancora

da **Smile** » gio mag 20, 2004 10:35 pm

<blockquote id="quote">citazione:<hr height="1" noshade id="quote">Messaggio inserito da admin
 [applauso]Grazie per il benvenuto a tutti voi!!
Vi ringrazio fortemente del vostro aiuto, ho risolto il problema cancellando il programma che conteneva (file Bridge.dll, il quale era danneggiato),l'errore.
Grazie comunque a tutti voi di tutto cuore per la vostra collaborazzione, un in bocca al lupo per il vostro sito, ciao e a risentirci!![^](comunque non ho capito bene in che modo usare HIJCKTHIS).
<hr height="1" noshade id="quote"></blockquote id="quote">[}:)]Sono Smile nuovo iscritto al forum.
Ti scrivo perché sto avendo lo stesso problema di bridge.dll che hai avuto te. Mi potresti spiegare quale file devo eliminare per risolvere il problema?
Ti invio la scansione che ho fatto con il noto programmino cosi me lo puoi indicare più facilmente:

Logfile of HijackThis v1.97.7
Scan saved at 22:12:31, on 20.05.2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCommon FilesSymantec SharedccEvtMgr.exe
C:WINDOWSExplorer.EXE
C:WINDOWSMixer.exe
C:Program FilesCommon FilesSymantec SharedccApp.exe
C:Program FilesLogitechiTouchiTouch.exe
C:WINDOWSSystem32 askswitch.exe
C:WINDOWSSystem32spooldriversw32x863hpztsb04.exe
C:Program FilesCommon FilesRealUpdate_OB ealsched.exe
C:Program FilesWinampwinampa.exe
C:WINDOWSSystem32ctfmon.exe
C:Program FilesSEATPagineBiancheDesktopSeatPBAgent.exe
C:WINDOWSSystem32RUNDLL32.EXE
C:Program FilesWinZipWZQKPICK.EXE
C:WINDOWSSystem32MSCC32.exe
C:Program FilesCommon FilesMicrosoft SharedVS7DEBUGMDM.EXE
C:Program FilesNorton AntiVirus
avapsvc.exe
C:WINDOWSSystem32
vsvc32.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32Fast.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesInternet Exploreriexplore.exe
C:Documents and SettingsMauro BaldoDesktopHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.corocarillon.com/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch =
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = http://www.corocarillon.com/
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:Program FilesAdobeAcrobat 6.0ReaderActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:Program FilesNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:Program FilesNorton AntiVirusNavShExt.dll
O3 - Toolbar: (no name) - {D3403F20-7D39-435F-A8CB-45016C29E48E} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O4 - HKLM..Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM..Run: [ccApp] "C:Program FilesCommon FilesSymantec SharedccApp.exe"
O4 - HKLM..Run: [ccRegVfy] "C:Program FilesCommon FilesSymantec SharedccRegVfy.exe"
O4 - HKLM..Run: [zBrowser Launcher] C:Program FilesLogitechiTouchiTouch.exe
O4 - HKLM..Run: [BackgroundSwitcher] C:WINDOWSSystem32gswitch.exe
O4 - HKLM..Run: [CoolSwitch] C:WINDOWSSystem32 askswitch.exe
O4 - HKLM..Run: [FastUser] C:WINDOWSSystem32fast.exe
O4 - HKLM..Run: [HPDJ Taskbar Utility] C:WINDOWSSystem32spooldriversw32x863hpztsb04.exe
O4 - HKLM..Run: [Synchronization Manager] %SystemRoot%system32mobsync.exe /logon
O4 - HKLM..Run: [BearShare] "C:Program FilesBearShareBearShare.exe" /pause
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [TkBellExe] "C:Program FilesCommon FilesRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [WinampAgent] C:Program FilesWinampwinampa.exe
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [SEAT PBAgent] C:Program FilesSEATPagineBiancheDesktopSeatPBAgent.exe
O4 - HKCU..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSystem32NVMCTRAY.DLL,NvTaskbarInit
O4 - Startup: radio@netscape.lnk = C:Program FilesRadio@Netscape PlusProgram adio@netscape.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:Program FilesWinZipWZQKPICK.EXE
O8 - Extra context menu item: &Google Search - res://C:Program FilesGoogleGoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: Backward &Links - res://C:Program FilesGoogleGoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cac&hed Snapshot of Page - res://C:Program FilesGoogleGoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:PROGRA~2MICROS~2OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
O8 - Extra context menu item: Si&milar Pages - res://C:Program FilesGoogleGoogleToolbar1.dll/cmsimilar.html
O9 - Extra button: Net2Phone (HKLM)
O9 - Extra 'Tools' menuitem: Net2Phone (HKLM)
O9 - Extra button: Ricerche (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/ ... 1/chat.cab
O16 - DPF: {00000000-0000-0000-0000-000020030000} - http://66.240.140.63/cart/x/deskcartx3.exe
O16 - DPF: {10F76067-C352-473B-94C9-5EE691429C48} (VBRunTimeInstaller.Bait) - http://agentsetup.paginebianche.virgili ... taller.CAB
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} (Shockwave ActiveX Control) - http://download.macromedia.com/pub/shoc ... /swdir.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://us.chat1.yimg.com/us.yimg.com/i/ ... acscom.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... mv9VCM.CAB
O16 - DPF: {3E68E405-C6DE-49FF-83AE-41EE9F4C36CE} (Office Update Installation Engine) - http://office.microsoft.com/officeupdat ... t/opuc.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/053abcdb9de ... 601_it.cab
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) - http://agentsetup.paginebianche.virgili ... msxml4.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 2336226852
O16 - DPF: {AD7FAFB0-16D6-40C3-AF27-585D6E6453FD} - http://dload.ipbill.com/del/loader.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.hostance.net/dialer/507189.exe

da **crazy.cat** » ven mag 21, 2004 7:20 am

Cancella questa chiave utilizzando hijackthis
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load

da **Smile** » ven mag 21, 2004 8:11 am

<blockquote id="quote">citazione:<hr height="1" noshade id="quote">Messaggio inserito da admin
 [applauso]Grazie per il benvenuto a tutti voi!!
Vi ringrazio fortemente del vostro aiuto, ho risolto il problema cancellando il programma che conteneva (file Bridge.dll, il quale era danneggiato),l'errore.
Grazie comunque a tutti voi di tutto cuore per la vostra collaborazzione, un in bocca al lupo per il vostro sito, ciao e a risentirci!![^](comunque non ho capito bene in che modo usare HIJCKTHIS).
<hr height="1" noshade id="quote"></blockquote id="quote">[;)]Ho risolto il problema facendo prima uno scan con HijackThis v1.97.7 poi facendo un visto nella casella di:
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load.
A questo punto facendo un backup con lo stesso programma me la salvato sul desktop e da qui lo potuto eliminare tranquillamente buttandolo nel cestino e svuotando lo stesso.
Comunque ho potuto risolvere grazie anche a te.
Saluti.

www.MegaLab.it

C:WINDOWSDownloaded Program Filesridge.dll

C:WINDOWSDownloaded Program Filesridge.dll

Chi c’è in linea

C:WINDOWSDownloaded Program Filesridge.dll

C:WINDOWSDownloaded Program Filesridge.dll