Esegui 
ho utilizzato HijackThis per fare un po' di pulizia ma non oso cancellare niente per evitare di combinare danni....qualcuno potrebbe darmi un'aiutino....qui di seguito il "Save Log"
grazie!!!
Logfile of HijackThis v1.98.2
Scan saved at 11.27.55, on 22/08/2004
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:ProgrammiFile comuniSymantec SharedccSetMgr.exe
C:ProgrammiFile comuniSymantec SharedccEvtMgr.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSSystem32mgabg.exe
C:ProgrammiNorton AntiVirus
avapsvc.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32GSICON.EXE
C:WINDOWSSystem32dslagent.exe
C:WINDOWSMixer.exe
C:ProgrammiJavaj2re1.4.2_03injusched.exe
C:ProgrammiFile comuniRealUpdate_OB ealsched.exe
C:ProgrammiHewlett-PackardHP Share-to-Webhpgs2wnd.exe
C:ProgrammiFile comuniSymantec SharedccApp.exe
C:WINDOWSSystem32PDeskPDesk.exe
C:WINDOWSSystem32 fadqy.exe
C:WINDOWS ealtime.exe
C:ProgrammiMessengermsmsgs.exe
C:ProgrammiAdobeAcrobat 6.0Distillracrotray.exe
C:ProgrammiHewlett-PackardHP Share-to-Webhpgs2wnf.exe
C:ProgrammiNorton AntiVirusSAVScan.exe
C:ProgrammieMuleemule.exe
C:ProgrammiInternet ExplorerIEXPLORE.EXE
C:Documents and SettingsGiandomenicoDocumentiVarieDriversSpywareHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.virgilio.it/home/index.html
R1 - HKLMSoftwareMicrosoftInternet ExplorerSearch,Default_Search_URL = http://www.ramgo.com/search.html
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearchURL,(Default) = http://red.clientapps.yahoo.com/customi ... .yahoo.com
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = http://www.virgilio.it/home/index.html
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
R3 - URLSearchHook: (no name) - _{8952A998-1E7E-4716-B23D-3DBE03910972} - (no file)
O1 - Hosts: 64.159.91.200 auto.search.msn.com
O1 - Hosts: 64.159.91.200 auto.search.msn.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:ProgrammiAdobeAcrobat 6.0AcrobatActiveXAcroIEHelper.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - C:WINDOWSmslagent4b_1,0,1,1_mslagent.dll (file missing)
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:ProgrammiAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:ProgrammiNorton AntiVirusNavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSsystem32MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:ProgrammiNorton AntiVirusNavShExt.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:ProgrammiAdobeAcrobat 6.0AcrobatAcroIEFavClient.dll
O4 - HKLM..Run: [GSICONEXE] GSICON.EXE
O4 - HKLM..Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM..Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM..Run: [SunJavaUpdateSched] C:ProgrammiJavaj2re1.4.2_03injusched.exe
O4 - HKLM..Run: [TkBellExe] "C:ProgrammiFile comuniRealUpdate_OB ealsched.exe" -osboot
O4 - HKLM..Run: [Share-to-Web Namespace Daemon] C:ProgrammiHewlett-PackardHP Share-to-Webhpgs2wnd.exe
O4 - HKLM..Run: [ccApp] "C:ProgrammiFile comuniSymantec SharedccApp.exe"
O4 - HKLM..Run: [NAV CfgWiz] C:ProgrammiFile comuniSymantec SharedCfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM..Run: [Matrox Powerdesk] C:WINDOWSSystem32PDeskPDesk.exe /Autolaunch
O4 - HKLM..Run: [RunDLL] rundll32.exe "C:WINDOWSDownloaded Program Filesridge.dll",Load
O4 - HKLM..Run: [gwmaubjfkmijt] C:WINDOWSSystem32 fadqy.exe
O4 - HKLM..Run: [NeroFilterCheck] C:WINDOWSsystem32NeroCheck.exe
O4 - HKLM..Run: [PCDRealtime] C:WINDOWS ealtime.exe
O4 - HKCU..Run: [MSMSGS] "C:ProgrammiMessengermsmsgs.exe" /background
O4 - HKCU..Run: [ares] "C:ProgrammiAresAres.exe" -h
O4 - HKCU..Run: [mslagent] C:WINDOWSmslagentmslagent.exe
O4 - Startup: Update Grokster.lnk = ?
O4 - Global Startup: Acrobat Assistant.lnk = C:ProgrammiAdobeAcrobat 6.0Distillracrotray.exe
O4 - Global User Startup: Acrobat Assistant.lnk = C:ProgrammiAdobeAcrobat 6.0Distillracrotray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:WINDOWSSystem32msjava.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammiMessengerMSMSGS.EXE
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammiMessengerMSMSGS.EXE
O16 - DPF: {50AD557E-3426-41FD-AFDD-2AF39BB1C387} - http://akamai.downloadv3.com/binaries/L ... _EN_XP.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/23b2b94751f ... 601_it.cab
O16 - DPF: {997DB395-70FD-4BC6-8FA4-3045E2672C76} (Controllo dello Studio fotografico) - http://it.samsungmobile.com/play/photo/album_ita.cab
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://host102.ipowerweb.com/~folliewe/site/suoni.exe
O17 - HKLMSystemCCSServicesTcpip..{B505B303-6446-44AD-9120-15B9141C7C6A}: NameServer = 62.211.69.150 212.48.4.15
