i miei inevitabili complimenti per il sito dal quale sto imparando un bel po' di cose e che mi sta facilitando la vita con i problemi che giornalmente scopro nel mio Pc.....ieri ho utilizzato HijackThis per fare un po' di pulizia nel PC ma non oso cancellare niente per evitare di combinare danni....qualcuno potrebbe darmi un'aiutino....qui di seguito il "Save Log"
grazie!!!
Logfile of HijackThis v1.98.2
Scan saved at 17.34.43, on 18/08/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammiFile comuniSymantec SharedccSetMgr.exe
C:ProgrammiFile comuniSymantec SharedccEvtMgr.exe
C:WINDOWSsystem32LEXBCES.EXE
C:WINDOWSsystem32LEXPPS.EXE
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1EASYPH~1Apacheapache.exe
c:PROGRA~1mcafee.comvsomcvsrte.exe
C:ProgrammiFile comuniMicrosoft SharedVS7DEBUGMDM.EXE
C:PROGRA~1EASYPH~1MySqlinmysqld.exe
C:ProgrammiNorton AntiVirus
avapsvc.exe
C:WINDOWSsystem32service.exe
C:WINDOWSSystem32
vsvc32.exe
C:PROGRA~1EASYPH~1Apacheapache.exe
C:WINDOWSSystem32 cpsvcs.exe
C:PROGRA~1NORTON~4NORTON~1SPEEDD~1NOPDB.EXE
C:WINDOWSSystem32svchost.exe
C:ProgrammiFile comuniSymantec SharedCCPD-LCsymlcsvc.exe
C:WINDOWSsystem32svchost.exe
C:ProgrammiNorton AntiVirusSAVScan.exe
C:WINDOWShtpatch.exe
C:PROGRA~1Trust280KSK~1KeyboardIkeymain.exe
C:PROGRA~1Trust280KSK~1MouseAmoumain.exe
C:ProgrammiConexantAccessRunner ADSLCnxDslTb.exe
C:WINDOWSSystem32 undll32.exe
C:WINDOWSSystem32wdgvnjch.exe
C:ProgrammiFile comuniSymantec SharedccApp.exe
C:WINDOWSdhbrwsr.exe
C:WINDOWSSystem32ctfmon.exe
c:progra~1intern~1iexplore.exe
C:ProgrammiAdobeAcrobat 6.0Distillracrotray.exe
C:ProgrammiDigisoft AntiDialerAntiDialer.exe
C:ProgrammiInternet Exploreriexplore.exe
c:progra~1intern~1iexplore.exe
C:WINDOWSdhsvr.exe
C:PROGRA~1DAPDAP.EXE
C:WINDOWSSystem32WISPTIS.EXE
C:ProgrammieMuleemule.exe
C:WINDOWSexplorer.exe
C:ProgrammiMessengermsmsgs.exe
C:Documents and SettingsAdministratorDesktopHiJackThisHijackThis.exe
C:ProgrammiInternet Exploreriexplore.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.it/
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant = http://www.lzlaufqftcbmeojevjtw.biz/525 ... b7Qxo.html
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = http://www.virgilio.it/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
O1 - Hosts file is located at: C:WINDOWS
sdbhosts
O1 - Hosts: 81.211.105.69 lender-search.com
O1 - Hosts: 81.211.105.68 hot-searches.com
O2 - BHO: (no name) - {0000607D-D204-42C7-8E46-216055BF9918} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammiAdobeAcrobat 6.0AcrobatActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHelper.dll
O2 - BHO: (no name) - {60EDBD55-BB7A-1F49-F5DF-CB93670845BA} - C:PROGRA~1COPYEN~1ANTI ONE.exe
O2 - BHO: (no name) - {7B55BB05-0B4D-44fd-81A6-B136188F5DEB} - C:WINDOWSquestmod.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:ProgrammiAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammiNorton AntiVirusNavShExt.dll
O2 - BHO: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:WINDOWSdealhlpr.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:ProgrammiAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - (no file)
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:progra~1mcafee.comvsomcvsshl.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammiNorton AntiVirusNavShExt.dll
O3 - Toolbar: Band Class - {D848A3CA-0BFB-4DE0-BA9E-A57F0CCA1C13} - C:WINDOWSdealhlpr.dll
O4 - HKLM..Run: [HTpatch] C:WINDOWShtpatch.exe
O4 - HKLM..Run: [SiSUSBRG] C:WINDOWSSiSUSBrg.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [TrustKeybd] C:PROGRA~1Trust280KSK~1KeyboardIkeymain.exe
O4 - HKLM..Run: [WheelMouse] C:PROGRA~1Trust280KSK~1MouseAmoumain.exe
O4 - HKLM..Run: [CnxDslTaskBar] C:ProgrammiConexantAccessRunner ADSLCnxDslTb.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [oftgrgfidbw] C:WINDOWSSystem32wdgvnjch.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammiFile comuniSymantec SharedccApp.exe"
O4 - HKLM..Run: [Advanced Tools Check] C:PROGRA~1NORTON~1AdvToolsADVCHK.EXE
O4 - HKLM..Run: [CloneCDElbyCDFL] "C:ProgrammiElaborate BytesCloneCDElbyCheck.exe" /L ElbyCDFL
O4 - HKLM..Run: [DealHelperUpdate] C:WINDOWSDHUpdt.exe
O4 - HKLM..Run: [DealHelperBrwsr] C:WINDOWSdhbrwsr.exe
O4 - HKLM..Run: [bait bib] C:PROGRA~1FLAGDO~1Aim road.exe
O4 - HKLM..Run: [SSC_UserPrompt] C:ProgrammiFile comuniSymantec SharedSecurity CenterUsrPrmpt.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSSystem32ctfmon.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:ProgrammiAdobeAcrobat 6.0Distillracrotray.exe
O4 - Global Startup: Digisoft AntiDialer.lnk = C:ProgrammiDigisoft AntiDialerAntiDialer.exe
O8 - Extra context menu item: &Download with &DAP - C:PROGRA~1DAPdapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:PROGRA~1DAPdapextie2.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O8 - Extra context menu item: Shorten URL - http://www.cjb.net/menuext.html
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O9 - Extra button: Organizzatore ricerche - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:ProgrammiFile comuniMicrosoft SharedEncarta ResearcherEROPROJ.DLL
O15 - Trusted Zone: http://www.zanezane.net
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O17 - HKLMSystemCCSServicesTcpip..{AB2D31C5-172F-43E5-9AFA-0F8D948E151B}: NameServer = 195.130.224.18 195.130.225.129