antivir non si istalla!

[beboedt]

adesso ho dato lo script ad avenger, tra due secondi arriva hijackthis

[beboedt]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:24:24, on 31/10/2010
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16671)
Boot mode: Safe mode

Running processes:
C:\Users\Boss\AppData\Roaming\Microsoft\Windows\shell.exe
C:\Users\Boss\AppData\Local\Temp\dwm.exe
C:\Users\Boss\Downloads\SalvaPC\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.orbitdownloader.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:50370
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F3 - REG:win.ini: load=C:\Users\Boss\AppData\Local\Temp\dwm.exe
O1 - Hosts: aams-casino.awardspace.com
O1 - Hosts: account.caesarcardclub.com
O1 - Hosts: banner.cdpoker.com
O1 - Hosts: banner.eurogrand.com
O1 - Hosts: banner.expekt.com
O1 - Hosts: banner.itcasinobellini.com
O1 - Hosts: banner.mansionpoker.com
O1 - Hosts: banner.titan123poker.com
O1 - Hosts: banner.williamhillpoker.com
O1 - Hosts: betting.betfair.com
O1 - Hosts: betting.goalwin.net
O1 - Hosts: bingo.williamhill.com
O1 - Hosts: cache.betfair.com
O1 - Hosts: casino.488365.com
O1 - Hosts: casino.888italia.com
O1 - Hosts: casino.allsport365.com
O1 - Hosts: casino.bet-mart.com
O1 - Hosts: casino.bodoglife.com
O1 - Hosts: casino.casinogiocaitalia.com
O1 - Hosts: casino.casinogiocoitalia.com
O1 - Hosts: casino.giocacasinoonline.com
O1 - Hosts: casino.guadagnarealcasino.com
O1 - Hosts: casino.ladbrokes.com
O1 - Hosts: casino.redelcasinoonline.com
O1 - Hosts: casino.rhitech.com
O1 - Hosts: casino.scommetti365.com
O1 - Hosts: casino.w-121.betfair.com
O1 - Hosts: cdn2.unibet.com
O1 - Hosts: demcpb.710casino.eu
O1 - Hosts: download.betway.com
O1 - Hosts: download.casinotropez.com
O1 - Hosts: download.europacasino.com
O1 - Hosts: download.fulltiltpokeritalia.com
O1 - Hosts: download.pokervittoriosa.com
O1 - Hosts: enigma.globet.co.uk
O1 - Hosts: euro.intercasino.com
O1 - Hosts: eurobet.uk.com
O1 - Hosts: fun.sunpoker.com
O1 - Hosts: games.488365.com
O1 - Hosts: games.allsport365.com
O1 - Hosts: games.ladbrokes.com
O1 - Hosts: games.scommetti365.com
O1 - Hosts: games1.eurobet.com
O1 - Hosts: games2.eurobet.com
O1 - Hosts: gioca.710casino.eu
O1 - Hosts: it.888.com
O1 - Hosts: it.alljackpots.co.uk
O1 - Hosts: it.allslotscasino.com
O1 - Hosts: it.blackjackballroom.com
O1 - Hosts: it.captaincookscasino.com
O1 - Hosts: it.cdpoker.com
O1 - Hosts: it.cdpokeritaly.com
O1 - Hosts: it.crazyvegascasino.co.uk
O1 - Hosts: it.goalwin.net
O1 - Hosts: it.hollywoodpoker.com
O1 - Hosts: it.intercasino.com
O1 - Hosts: it.pacificpoker.com
O1 - Hosts: it.paradisepoker.com
O1 - Hosts: it.sportingbet.com
O1 - Hosts: it.williamhillcasino.com
O1 - Hosts: it.williamhillpoker.com
O1 - Hosts: it.williamhillpokeritaly.com
O1 - Hosts: it1.betclic.com
O1 - Hosts: it2.betclic.com
O1 - Hosts: it2.sportingbet.com
O1 - Hosts: it3.betclic.com
O1 - Hosts: it3.sportingbet.com
O1 - Hosts: it4.betclic.com
O1 - Hosts: it5.betclic.com
O1 - Hosts: ita.unibet.com
O1 - Hosts: italia.fulltiltpoker.com
O1 - Hosts: italia.intercasino.com
O1 - Hosts: italia.redkings.com
O1 - Hosts: italia.roxypalace.com
O1 - Hosts: italia.unibet.com
O1 - Hosts: italia1.roxypalace.com
O1 - Hosts: italia5.redkings.com
O1 - Hosts: italia7.redkings.com
O1 - Hosts: italiafulltiltpoker.com
O1 - Hosts: italy.fulltiltpoker.com
O1 - Hosts: italy.goalwin.net
O1 - Hosts: magicpalace.ultimatebet.com
O1 - Hosts: mercury6.betonmarkets.com
O1 - Hosts: play.cspoker.com
O1 - Hosts: play.sunpoker.com
O1 - Hosts: poker.488365.com
O1 - Hosts: poker.770.com
O1 - Hosts: poker.888italia.com
O1 - Hosts: poker.allsport365.com
O1 - Hosts: poker.bet365.com
O1 - Hosts: poker.betfair.com
O1 - Hosts: poker.betoto.com
O1 - Hosts: poker.bodoglife.co.uk
O1 - Hosts: poker.bwin.com
O1 - Hosts: poker.casino.net
O1 - Hosts: poker.casinogiocaitalia.com
O1 - Hosts: poker.casinogiocoitalia.com
O1 - Hosts: poker.casinoitalianogogle.com
O1 - Hosts: poker.clubofpoker.com
O1 - Hosts: poker.dollarobet.com
O1 - Hosts: poker.giocacasinoonline.com
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [QFan Help] "C:\Program Files (x86)\ASUS\AI Suite\QFan3\QFanHelp.exe"
O4 - HKLM\..\Run: [Cpu Level Up help] "C:\Program Files (x86)\ASUS\AI Suite\CpuLevelUpHelp.exe"
O4 - HKLM\..\Run: [Norton Ghost 15.0] "C:\Program Files (x86)\Norton Ghost\Agent\VProTray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\RunOnce: [Cleanup] C:\cleanup.exe
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKCU\..\Run: [Google Update] "C:\Users\Boss\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Aggiungi a PDF esistente - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Converti destinazione link in Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Converti destinazione link in file PDF esistente - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Converti i link selezionati in Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Converti i link selezionati in file PDF esistente - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Converti in Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Converti selezione in Adobe PDF - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Converti selezione in file PDF esistente - res://C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Scarica con IDM - C:\Program Files (x86)\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Scarica con IDM contenuti video FLV - C:\Program Files (x86)\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Scarica con Mipony - file://C:\Program Files (x86)\MiPony\Browser\IEContext.htm
O8 - Extra context menu item: Scarica tutti i link con IDM - C:\Program Files (x86)\Internet Download Manager\IEGetAll.htm
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files (x86)\Bonjour\ExplorerPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: ASUS System Control Service (AsSysCtrlService) - Unknown owner - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: AVM FRITZ!web Routing Service (de_serv) - Unknown owner - C:\Program Files (x86)\Common Files\AVM\de_serv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GenericMount Helper Service - Symantec - C:\Program Files (x86)\Norton Ghost\Shared\Drivers\GenericMountHelper.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~2\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files (x86)\Norton Ghost\Agent\VProSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
O23 - Service: SymSnapService - Symantec - C:\Program Files (x86)\Norton Ghost\Shared\Drivers\SymSnapServicex64.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14613 bytes

[beboedt]

fatto tutto in provvisoria....buona lettura.
grazie mille.

[comodoforever]

Prego

[beboedt]

e così grave la situazione?

[CRYPAX]

madò
elimina le voci Hosts
C:\Users\Boss\AppData\Local\Temp\dwm.exe sembra sospetto

[hashcat]

Ci sono un bel po' di cose da aggiustare:

O1 - Hosts: aams-casino.awardspace.com


Da eliminare!

O1 - Hosts: account.caesarcardclub.com


Da eliminare!

O1 - Hosts: banner.cdpoker.com


Da eliminare!

O1 - Hosts: banner.eurogrand.com


Da eliminare!

O1 - Hosts: banner.expekt.com


Da eliminare!

O1 - Hosts: banner.itcasinobellini.com


Da eliminare!

O1 - Hosts: banner.mansionpoker.com


Da eliminare!

O1 - Hosts: banner.titan123poker.com


Da eliminare!

O1 - Hosts: banner.williamhillpoker.com


Da eliminare!

O1 - Hosts: betting.betfair.com


Da eliminare!

O1 - Hosts: betting.goalwin.net


O1 - Hosts: bingo.williamhill.com


Da eliminare!

O1 - Hosts: cache.betfair.com


Da eliminare!

O1 - Hosts: casino.488365.com


Da eliminare!

O1 - Hosts: casino.888italia.com


Da eliminare!

O1 - Hosts: casino.allsport365.com


Da eliminare!

O1 - Hosts: casino.bet-mart.com


Da eliminare!

O1 - Hosts: casino.bodoglife.com


Da eliminare!

O1 - Hosts: casino.casinogiocaitalia.com


Da eliminare!

O1 - Hosts: casino.casinogiocoitalia.com


Da eliminare!

O1 - Hosts: casino.giocacasinoonline.com


Da eliminare!

O1 - Hosts: casino.guadagnarealcasino.com


Da eliminare!

O1 - Hosts: casino.ladbrokes.com


Da eliminare!

O1 - Hosts: casino.redelcasinoonline.com


Da eliminare!

O1 - Hosts: casino.rhitech.com


Da eliminare!

O1 - Hosts: casino.scommetti365.com


Da eliminare!

O1 - Hosts: casino.w-121.betfair.com


Da eliminare!

O1 - Hosts: cdn2.unibet.com


Da eliminare!

O1 - Hosts: demcpb.710casino.eu


O1 - Hosts: download.betway.com


Da eliminare!

O1 - Hosts: download.casinotropez.com


Da eliminare!

O1 - Hosts: download.europacasino.com


Da eliminare!

O1 - Hosts: download.fulltiltpokeritalia.com


Da eliminare!

O1 - Hosts: download.pokervittoriosa.com


Da eliminare!

O1 - Hosts: enigma.globet.co.uk


O1 - Hosts: euro.intercasino.com


Da eliminare!

O1 - Hosts: eurobet.uk.com


Da eliminare!

O1 - Hosts: fun.sunpoker.com


Da eliminare!

O1 - Hosts: games.488365.com


Da eliminare!

O1 - Hosts: games.allsport365.com


Da eliminare!

O1 - Hosts: games.ladbrokes.com


Da eliminare!

O1 - Hosts: games.scommetti365.com


Da eliminare!

O1 - Hosts: games1.eurobet.com


Da eliminare!

O1 - Hosts: games2.eurobet.com


Da eliminare!

O1 - Hosts: gioca.710casino.eu


O1 - Hosts: it.888.com


Da eliminare!

O1 - Hosts: it.alljackpots.co.uk


O1 - Hosts: it.allslotscasino.com


Da eliminare!

O1 - Hosts: it.blackjackballroom.com


Da eliminare!

O1 - Hosts: it.captaincookscasino.com


Da eliminare!

O1 - Hosts: it.cdpoker.com


Da eliminare!

O1 - Hosts: it.cdpokeritaly.com


Da eliminare!

O1 - Hosts: it.crazyvegascasino.co.uk


O1 - Hosts: it.goalwin.net


O1 - Hosts: it.hollywoodpoker.com


Da eliminare!

O1 - Hosts: it.intercasino.com


Da eliminare!

O1 - Hosts: it.pacificpoker.com


Da eliminare!

O1 - Hosts: it.paradisepoker.com


Da eliminare!

O1 - Hosts: it.sportingbet.com


Da eliminare!

O1 - Hosts: it.williamhillcasino.com


Da eliminare!

O1 - Hosts: it.williamhillpoker.com


Da eliminare!

O1 - Hosts: it.williamhillpokeritaly.com


Da eliminare!

O1 - Hosts: it1.betclic.com


Da eliminare!

O1 - Hosts: it2.betclic.com


Da eliminare!

O1 - Hosts: it2.sportingbet.com


Da eliminare!

O1 - Hosts: it3.betclic.com


Da eliminare!

O1 - Hosts: it3.sportingbet.com


Da eliminare!

O1 - Hosts: it4.betclic.com


Da eliminare!

O1 - Hosts: it5.betclic.com


Da eliminare!

O1 - Hosts: ita.unibet.com


Da eliminare!

O1 - Hosts: italia.fulltiltpoker.com


Da eliminare!

O1 - Hosts: italia.intercasino.com


Da eliminare!

O1 - Hosts: italia.redkings.com


Da eliminare!

O1 - Hosts: italia.roxypalace.com


Da eliminare!

O1 - Hosts: italia.unibet.com


Da eliminare!

O1 - Hosts: italia1.roxypalace.com


Da eliminare!

O1 - Hosts: italia5.redkings.com


Da eliminare!

O1 - Hosts: italia7.redkings.com


Da eliminare!

O1 - Hosts: italiafulltiltpoker.com


Da eliminare!

O1 - Hosts: italy.fulltiltpoker.com


Da eliminare!

O1 - Hosts: italy.goalwin.net


O1 - Hosts: magicpalace.ultimatebet.com


Da eliminare!

O1 - Hosts: mercury6.betonmarkets.com


Da eliminare!

O1 - Hosts: play.cspoker.com


Da eliminare!

O1 - Hosts: play.sunpoker.com


Da eliminare!

O1 - Hosts: poker.488365.com


Da eliminare!

O1 - Hosts: poker.770.com


Da eliminare!

O1 - Hosts: poker.888italia.com


Da eliminare!

O1 - Hosts: poker.allsport365.com


Da eliminare!

O1 - Hosts: poker.bet365.com


Da eliminare!

O1 - Hosts: poker.betfair.com


Da eliminare!

O1 - Hosts: poker.betoto.com


Da eliminare!

O1 - Hosts: poker.bodoglife.co.uk


Da eliminare!

O1 - Hosts: poker.bwin.com


Da eliminare!

O1 - Hosts: poker.casino.net


O1 - Hosts: poker.casinogiocaitalia.com


Da eliminare!

O1 - Hosts: poker.casinogiocoitalia.com


Da eliminare!

O1 - Hosts: poker.casinoitalianogogle.com


Da eliminare!

O1 - Hosts: poker.clubofpoker.com


Da eliminare!

O1 - Hosts: poker.dollarobet.com


Da eliminare!

O1 - Hosts: poker.giocacasinoonline.com

Da eliminare (Trojan-Spy:W32/Banbra.RM):

O4 - HKLM\..\RunOnce: [Cleanup] C:\cleanup.exe

Elimina anche questi due:

C:\Users\Boss\AppData\Local\Temp\dwm.exe

C:\Users\Boss\AppData\Roaming\Microsoft\Windows\shell.exe

[CRYPAX]

mi trovi d'accordo con hashcat

[beboedt]

fatto tutto.
ora riavvio

[beboedt]

non ho connessioni internet

[beboedt]

aiuto....

[Uomo_Senza_Sonno]

non ho connessioni internet

Guarda qua post299143.html#p299143

Ad ogni modo, esegui un controllo con un rescue disk, come quello di kaspersky. Lo masterizzi, esegui il boot da cd e dopo averlo aggiornato esegui una scansione completa del disco.

[beboedt]

non lo so, forse formatto.
Mi sa che il problema è più grosso di me....

[CRYPAX]

Combofix non ha eliminato nulla ??

[Uomo_Senza_Sonno]

Allora... procediamo per gradi.
Prima ripristina la rete con Lspfix e Winsockfix, poi procedi con il controllo con il rescue disk. Successivamente prova con combofix (se il rescue disk non risolve definitivamente) e vedi che elimina (meglio se posti il log utilizzando però, il tag MEMO).

Se proprio non va, ti armi di pazienza e formatti.

[hashcat]

Sistemare problemi di connettività alla rete
------------------------------------------------------------------------------------------------

• Lspfix Ripara alcuni problemi che bloccano l'accesso alla rete internet
• WinsockFix Sistema problemi alla rete locale
• Tcp/Ip repair Sistema problemi alla rete locale

Prova a fare quanto detto da crazy.cat e non ti arrendere abbiamo risolto la parte maggiore del problema

[beboedt]

ok scaricati ora li installo

[beboedt]

winsock non ha trovato problemi

[beboedt]

l'altro mi ha chiesto il riavvio.

[beboedt]

nessuna novità.
niente internet.
vi ringrazio a tutti per la disponibilità, ma dopo 4 ore di pc ho gli occhi in fiamme. Per ora chiudo e ci risentiamo domani se lo vorrete.