Login Esegui login | Non sei registrato? Iscriviti ora (è gratuito!)
Username: Password:
  • Annuncio Pubblicitario

notebook lento e internet bloccato

Un virus si è intromesso nel tuo computer? Vuoi navigare in tutta sicurezza? Sono sicure le transazione online? Come impedire a malintenzionati di intromettersi nel tuo pc? Come proteggere i tuoi dati? Qui trovi le risposte a queste ed altre domande

notebook lento e internet bloccato

Messaggioda LegioneFelix17 » mar ott 27, 2009 4:16 pm

Ciao;
da questa mattina ho il Notebook lento, ci metto un sacco di tempo per caricarsi, e ho la connessinone ad internet bloccata.
Poi vado ad attivare il firewall e mi dice: impossibile attivare windows firewall!
Che devo fare?

Questa è la scansione di hijackthis!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16.13.47, on 27/10/2009
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18828)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Program Files\Synaptics\SynTP\SynTPStart.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Users\ANTONE~1\AppData\Local\Temp\RtkBtMnt.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\7-Zip\7zFM.exe
C:\Users\ANTONE~1\AppData\Local\Temp\7zOBDB3.tmp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://it.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://it.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://it.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe
O4 - HKLM\..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [Skytel] Skytel.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [PLFSet] rundll32.exe C:\Windows\PLFSet.dll,PLFDefSetting
O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\Play Movie\PMVService.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKUS\S-1-5-18\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Acer Tour Reminder] C:\Acer\AcerTour\Reminder.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.1.lnk = C:\Program Files\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: Empowering Technology Launcher.lnk = ?
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O10 - Broken Internet access because of LSP chain gap (#1 in chain of 32 missing)
O13 - Gopher Prefix:
O23 - Service: Avira AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 6745 bytes
Avatar utente
LegioneFelix17
Aficionado
Aficionado
 
Messaggi: 70
Iscritto il: mer mag 14, 2008 2:22 pm

Re: notebook lento e internet bloccato

Messaggioda Amantide » mar ott 27, 2009 4:33 pm

Scarica ComboFix , salvandolo sul desktop con un nome di fantasia, ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto.
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo

Re: notebook lento e internet bloccato

Messaggioda LegioneFelix17 » mar ott 27, 2009 6:09 pm

Questa è la scansione di Combofix

ComboFix 09-10-26.06 - Antonella 27/10/2009 17.26.15.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.39.1040.18.3069.1955 [GMT 1:00]
Eseguito da: c:\users\Antonella\Desktop\ComboFix.exe
SP: Windows Defender *disabled* (Outdated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\gatherWirelessInfo.vbs

.
((((((((((((((((((((((((( Files Creati Da 2009-09-27 al 2009-10-27 )))))))))))))))))))))))))))))))))))
.

2009-10-27 15:15 . 2009-10-27 15:15 -------- d-----w- c:\users\Antonella\AppData\Roaming\Malwarebytes
2009-10-27 15:14 . 2009-09-10 13:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-27 15:14 . 2009-10-27 15:15 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-10-27 15:14 . 2009-10-27 15:14 -------- d-----w- c:\programdata\Malwarebytes
2009-10-27 15:14 . 2009-09-10 13:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-10-27 08:33 . 2009-10-27 08:33 -------- d-----w- c:\users\Antonella\AppData\Roaming\Acer
2009-10-26 12:01 . 2009-10-26 12:01 680 ----a-w- c:\users\Antonella\AppData\Local\d3d9caps.dat
2009-10-16 09:04 . 2009-10-16 09:04 -------- d-----w- c:\users\Antonella\AppData\Local\Oberon Games
2009-10-16 08:45 . 2009-10-16 08:45 -------- d-----w- c:\programdata\Arcade Lab
2009-10-16 08:30 . 2009-10-16 08:30 -------- d-----w- c:\program files\Microsoft Works
2009-10-15 11:38 . 2009-10-15 11:55 -------- d-----w- c:\users\Antonella\AppData\Local\Microsoft Games
2009-10-15 11:27 . 2009-09-10 16:48 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-10-15 11:27 . 2009-08-04 12:34 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-10-15 11:27 . 2009-08-04 12:34 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-10-15 10:03 . 2009-09-14 09:29 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-10-15 10:03 . 2009-09-04 11:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-10-15 10:03 . 2009-05-08 12:53 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-10-13 17:18 . 2009-10-13 17:18 -------- d-----w- c:\users\Antonella\AppData\Roaming\OpenOffice.org
2009-10-13 17:17 . 2009-10-13 17:17 -------- d-----w- c:\program files\JRE
2009-10-13 17:16 . 2009-10-13 17:17 -------- d-----w- c:\program files\OpenOffice.org 3
2009-10-13 17:16 . 2009-10-13 17:16 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-13 17:16 . 2009-10-13 17:16 -------- d-----w- c:\program files\Java
2009-10-13 17:04 . 2009-10-01 08:29 195440 ------w- c:\windows\system32\MpSigStub.exe
2009-10-13 17:03 . 2009-10-13 17:03 -------- d-----w- c:\program files\CCleaner
2009-10-13 16:59 . 2009-10-13 16:59 -------- d-----w- c:\programdata\Avira
2009-10-13 16:59 . 2009-10-13 16:59 -------- d-----w- c:\program files\Avira
2009-10-13 16:59 . 2009-07-28 14:34 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-10-13 16:59 . 2009-03-30 08:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-10-13 16:19 . 2009-10-13 16:19 -------- d-----w- c:\users\Antonella\AppData\Local\Seven Zip
2009-10-13 16:18 . 2009-10-13 16:18 -------- d-----w- c:\program files\VS Revo Group
2009-10-12 18:06 . 2009-10-12 18:06 -------- d-----w- c:\users\Antonella\AppData\Local\Acer Arcade Deluxe
2009-10-12 18:06 . 2009-10-12 18:06 -------- d-----w- c:\users\Antonella\AppData\Local\PowerCinema
2009-10-07 15:57 . 2009-10-07 15:57 -------- d-----w- c:\programdata\Office Genuine Advantage
2009-10-07 15:53 . 2009-10-07 15:53 -------- d-----w- c:\users\Antonella\AppData\Local\Microsoft Help
2009-10-07 15:38 . 2009-10-07 15:38 -------- d-----w- C:\HiTRUSTDrive
2009-10-07 15:33 . 2009-10-07 15:33 -------- d-----w- c:\users\Antonella\AppData\Roaming\CyberLink
2009-10-07 15:33 . 2009-10-07 15:33 -------- d-----w- c:\users\Public\CyberLink
2009-10-05 07:25 . 2009-10-05 07:25 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2009-09-30 16:30 . 2009-10-06 08:04 -------- d-----w- c:\users\Antonella\AppData\Local\Adobe
2009-09-30 16:30 . 2009-10-21 16:52 -------- d-----w- c:\users\Antonella\AppData\Roaming\vlc
2009-09-30 16:29 . 2009-09-30 16:29 -------- d-----w- c:\program files\VideoLAN
2009-09-30 16:29 . 2009-09-30 16:29 -------- d-----w- c:\program files\7-Zip
2009-09-30 16:23 . 2009-09-30 16:23 -------- d-----w- c:\users\Antonella\AppData\Roaming\VistaCodecs
2009-09-30 16:23 . 2009-09-30 16:23 -------- d-----w- c:\program files\VistaCodecPack
2009-09-30 16:22 . 2009-09-30 16:23 -------- d-----w- c:\programdata\VistaCodecs
2009-09-30 16:22 . 2009-10-24 16:44 -------- d-----w- c:\users\Antonella\Tracing
2009-09-30 16:21 . 2009-09-30 16:21 -------- d-----w- c:\program files\Microsoft
2009-09-30 16:21 . 2009-09-30 16:21 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-09-30 16:20 . 2009-09-30 16:21 -------- d-----w- c:\program files\Windows Live
2009-09-30 16:18 . 2009-09-30 16:18 -------- d-----w- c:\program files\Common Files\Windows Live
2009-09-30 16:07 . 2009-09-30 16:07 -------- d-----w- c:\windows\system32\ca-ES
2009-09-30 16:07 . 2009-09-30 16:07 -------- d-----w- c:\windows\system32\eu-ES
2009-09-30 16:07 . 2009-09-30 16:07 -------- d-----w- c:\windows\system32\vi-VN
2009-09-30 15:54 . 2009-09-30 15:54 -------- d-----w- c:\windows\system32\EventProviders
2009-09-30 15:51 . 2009-04-11 06:28 223744 ----a-w- c:\windows\system32\wscntfy.dll
2009-09-30 15:50 . 2009-04-11 06:28 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-09-30 15:27 . 2008-05-27 04:59 18904 ----a-w- c:\windows\system32\StructuredQuerySchemaTrivial.bin
2009-09-30 15:10 . 2009-09-30 15:10 -------- d-----w- C:\PerfLogs
2009-09-30 14:49 . 2008-01-19 07:29 705536 ----a-w- c:\windows\system32\imagesp1.dll
2009-09-30 14:49 . 2008-01-19 07:36 116736 ----a-w- c:\windows\system32\sstpsvc.dll
2009-09-30 14:49 . 2008-01-19 07:36 175104 ----a-w- c:\windows\system32\winrscmd.dll
2009-09-30 14:49 . 2008-01-19 07:37 1675264 ----a-w- c:\windows\system32\xpssvcs.dll
2009-09-30 14:47 . 2008-01-19 07:41 35384 ----a-w- c:\windows\system32\drivers\kbdclass.sys
2009-09-30 14:46 . 2008-01-19 07:34 102400 ----a-w- c:\windows\system32\wbem\mofinstall.dll
2009-09-30 14:46 . 2008-01-19 07:36 357888 ----a-w- c:\windows\system32\wbemcomn.dll
2009-09-30 14:46 . 2008-01-19 07:36 129536 ----a-w- c:\windows\system32\sqmapi.dll
2009-09-30 14:46 . 2008-01-19 07:36 139264 ----a-w- c:\windows\system32\SmiInstaller.dll
2009-09-30 14:44 . 2008-01-19 07:35 35328 ----a-w- c:\windows\system32\mspatcha.dll
2009-09-30 14:44 . 2008-01-19 07:34 305152 ----a-w- c:\windows\system32\msdelta.dll
2009-09-30 14:44 . 2008-01-19 07:34 258560 ----a-w- c:\windows\system32\dpx.dll
2009-09-30 14:43 . 2006-11-02 09:39 6656 ----a-w- c:\windows\system32\kbd106.dll
2009-09-30 13:18 . 2009-09-30 13:18 37888 ----a-w- c:\windows\system32\printcom.dll
2009-09-30 13:18 . 2009-09-30 13:18 14848 ----a-w- c:\windows\system32\wshrm.dll
2009-09-30 13:17 . 2009-09-30 13:17 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-09-30 13:17 . 2009-09-30 13:17 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-09-30 13:17 . 2009-09-30 13:17 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-09-30 13:17 . 2009-09-30 13:17 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-09-30 11:30 . 2009-09-30 11:30 2048 ----a-w- c:\windows\system32\tzres.dll
2009-09-30 11:29 . 2009-09-30 11:29 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-09-30 11:29 . 2009-09-30 11:29 272896 ----a-w- c:\windows\system32\polstore.dll
2009-09-30 11:27 . 2009-09-30 11:27 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-09-30 11:27 . 2009-09-30 11:27 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-09-30 11:27 . 2009-09-30 11:27 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-09-30 11:27 . 2009-09-30 11:27 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-09-30 11:27 . 2009-09-30 11:27 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-09-30 11:27 . 2009-09-30 11:27 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-09-30 11:27 . 2009-09-30 11:27 17920 ----a-w- c:\windows\system32\netevent.dll
2009-09-30 11:27 . 2009-09-30 11:27 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-09-30 11:27 . 2009-09-30 11:27 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-09-30 11:27 . 2009-09-30 11:27 10240 ----a-w- c:\windows\system32\finger.exe
2009-09-30 11:27 . 2009-09-30 11:27 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-09-30 11:26 . 2009-09-30 11:26 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-09-30 11:26 . 2009-09-30 11:26 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-09-30 11:26 . 2009-09-30 11:26 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-09-30 11:26 . 2009-09-30 11:26 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-09-30 11:26 . 2009-09-30 11:26 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-09-30 11:26 . 2009-09-30 11:26 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-09-30 11:25 . 2009-09-30 11:25 2034688 ----a-w- c:\windows\system32\win32k.sys
2009-09-30 11:25 . 2009-09-30 11:25 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-09-30 11:25 . 2009-09-30 11:25 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-09-30 11:25 . 2009-09-30 11:25 23552 ----a-w- c:\windows\system32\lpk.dll
2009-09-30 11:25 . 2009-09-30 11:25 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-09-30 11:25 . 2009-09-30 11:25 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-09-30 11:25 . 2009-09-30 11:25 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-09-30 11:24 . 2009-09-30 11:24 98816 ----a-w- c:\windows\system32\mfps.dll
2009-09-30 11:24 . 2009-09-30 11:24 2868224 ----a-w- c:\windows\system32\mf.dll
2009-09-30 11:24 . 2009-09-30 11:24 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-09-30 11:24 . 2009-09-30 11:24 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-09-30 11:24 . 2009-09-30 11:24 2048 ----a-w- c:\windows\system32\mferror.dll
2009-09-30 11:23 . 2009-09-30 11:23 71680 ----a-w- c:\windows\system32\atl.dll
2009-09-30 11:19 . 2009-09-30 11:19 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-09-30 11:18 . 2009-09-30 11:18 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-09-30 11:18 . 2009-09-30 11:18 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-09-30 11:18 . 2009-09-30 11:18 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-09-30 11:17 . 2009-09-30 11:17 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-09-30 11:16 . 2009-09-30 11:16 623616 ----a-w- c:\windows\system32\localspl.dll
2009-09-30 11:15 . 2009-09-30 11:15 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-09-30 11:15 . 2009-09-30 11:15 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-09-30 11:15 . 2009-09-30 11:15 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-09-30 11:15 . 2009-09-30 11:15 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-09-30 11:15 . 2009-09-30 11:15 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-09-30 11:15 . 2009-09-30 11:15 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-09-30 11:13 . 2009-09-30 11:13 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-09-30 11:13 . 2009-09-30 11:13 9728 ----a-w- c:\windows\system32\lsass.exe
2009-09-30 11:13 . 2009-09-30 11:13 72704 ----a-w- c:\windows\system32\secur32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-27 15:17 . 2006-11-06 01:52 662846 ----a-w- c:\windows\system32\perfh010.dat
2009-10-27 15:17 . 2006-11-06 01:52 120326 ----a-w- c:\windows\system32\perfc010.dat
2009-10-27 14:40 . 2007-12-20 23:49 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-10-27 14:38 . 2007-12-21 00:50 -------- d-----w- c:\program files\Acer GameZone
2009-10-22 11:30 . 2009-10-08 14:34 28219 ----a-w- c:\users\Antonella\AppData\Roaming\nvModes.dat
2009-10-16 08:34 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-10-13 17:30 . 2009-09-11 11:21 73448 ----a-w- c:\users\Antonella\AppData\Local\GDIPFONTCACHEV1.DAT
2009-10-13 16:55 . 2007-12-21 01:30 -------- d-----w- c:\programdata\Symantec
2009-10-13 16:45 . 2007-12-21 01:30 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-10-13 16:31 . 2007-12-21 01:21 -------- d-----w- c:\programdata\Microsoft Help
2009-10-07 15:33 . 2007-12-21 01:05 -------- d-----w- c:\programdata\CyberLink
2009-09-30 17:14 . 2009-09-11 11:19 -------- d-----w- c:\program files\Yahoo!
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-30 16:07 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-09-30 16:05 . 2009-09-30 16:05 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-09-30 15:21 . 2007-12-20 23:41 -------- d-----w- c:\programdata\NVIDIA
2009-09-30 14:57 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2009-09-30 14:57 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2009-09-30 11:10 . 2009-09-30 11:10 3104768 ----a-w- c:\windows\system32\NlsData004a.dll
2009-09-11 21:07 . 2009-09-11 21:07 3 ----a-w- c:\windows\AFirst.cmd
2009-09-11 12:11 . 2009-09-11 12:11 319456 ----a-w- c:\windows\DIFxAPI.dll
2009-09-11 12:11 . 2009-09-11 12:11 -------- d-----w- c:\program files\Realtek
2009-09-11 12:11 . 2009-09-11 12:11 315392 ----a-w- c:\windows\HideWin.exe
2009-09-11 11:53 . 2009-09-11 11:53 -------- d-----w- c:\users\Antonella\AppData\Roaming\Intel
2009-09-11 11:53 . 2009-09-11 11:53 -------- d-----w- c:\programdata\Roaming
2009-09-11 11:52 . 2009-09-11 11:52 -------- d-----w- c:\program files\Cisco
2009-09-11 11:52 . 2009-09-11 11:52 -------- d-----w- c:\program files\Common Files\Intel
2009-09-11 11:52 . 2009-09-11 11:52 -------- d-----w- c:\programdata\Intel
2009-09-11 11:52 . 2009-09-11 11:18 -------- d-----w- c:\program files\Intel
2009-09-11 11:37 . 2009-09-11 11:19 -------- d-----w- c:\program files\Acer Inc
2009-09-11 11:36 . 2009-09-11 11:36 -------- d-----w- c:\users\Antonella\AppData\Roaming\InstallShield
2009-09-11 11:32 . 2009-09-11 11:32 -------- d-----w- c:\program files\SUYIN
2009-09-11 11:32 . 2009-09-11 11:32 -------- d-----w- c:\program files\ACER CrystalEye webcam
2009-09-11 11:30 . 2009-09-11 11:30 -------- d-----w- c:\program files\Common Files\snp2uvc
2009-09-11 11:24 . 2007-12-21 01:04 -------- d-----w- c:\program files\Acer Arcade Deluxe
2009-09-11 11:23 . 2009-09-11 11:23 -------- d-----w- c:\program files\Launch Manager
2009-09-11 11:18 . 2009-09-11 21:07 1345 ----a-w- c:\windows\CLEANUP.CMD
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\programdata\Preferiti
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\programdata\Modelli
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\programdata\Menu Avvio
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\programdata\Documenti
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\programdata\Dati applicazioni
2009-09-11 11:15 . 2009-09-11 11:15 -------- d-sh--we c:\program files\File comuni
2009-08-27 05:22 . 2009-10-15 10:07 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17 . 2009-10-15 10:07 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17 . 2009-10-15 10:07 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42 . 2009-10-15 10:07 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-08-03 13:07 . 2009-08-03 13:07 403816 ----a-w- c:\windows\system32\OGACheckControl.dll
2009-08-03 13:07 . 2009-08-03 13:07 322928 ----a-w- c:\windows\system32\OGAAddin.dll
2009-08-03 13:07 . 2009-08-03 13:07 230768 ----a-w- c:\windows\system32\OGAEXEC.exe
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-12-14 102400]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-13 149280]
"PLFSet"="c:\windows\PLFSet.dll" [2007-04-25 45056]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-12-05 200704]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-12-14 86016]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-12-14 81920]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-12-14 8501792]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2008-01-02 707080]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-12-14 174616]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-03-08 40048]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-08-01 151552]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-12-14 1826816]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-12-14 4702208]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-08-01 151552]

c:\users\Antonella\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OpenOffice.org 3.1.lnk - c:\program files\OpenOffice.org 3\program\quickstart.exe [2009-8-18 384000]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):76,ab,88,05,e9,41,ca,01

R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [11/09/2009 12.24.25 41456]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [21/12/2007 8.18.06 43008]
S3 A310;AVerMedia A310 DVB-T;c:\windows\System32\drivers\AVerA310USB.sys [21/12/2007 8.18.01 26368]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [21/12/2007 8.18.07 179712]
S3 BDASwCap;AVerMedia A310 BDA DVBT Capture Device;c:\windows\System32\drivers\AVerA310Cap.sys [21/12/2007 8.18.01 42240]
S3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [28/05/2009 21.41.28 4233728]

--- Altri Servizi/Drivers In Memoria ---

*NewlyCreated* - MBR
*Deregistered* - mbr
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://it.intl.acer.yahoo.com
uSearchURL,(Default) = hxxp://it.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

HKCU-Run-Acer Tour Reminder - (no file)
HKLM-Run-Acer Tour - (no file)
HKLM-Run-eRecoveryService - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-27 17:31
Windows 6.0.6002 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Ora fine scansione: 2009-10-27 17.32.19
ComboFix-quarantined-files.txt 2009-10-27 16:32

Pre-Run: 70.755.811.328 byte disponibili
Post-Run: 70.692.442.112 byte disponibili

- - End Of File - - 9E30A7D93DA4337A41902B29682A8C01


perché la connessione ad internt non si attiva??
Avatar utente
LegioneFelix17
Aficionado
Aficionado
 
Messaggi: 70
Iscritto il: mer mag 14, 2008 2:22 pm


Re: notebook lento e internet bloccato

Messaggioda Amantide » mar ott 27, 2009 6:45 pm

Nel log non si vede nulla di anomalo [uhm] Forse si tratta di qualche aggiornamento windows non andato a buon fine [boh]
Se ieri il notebook funzionava alla perfezione, potresti provare ad effettuare il ripristino di sistema.
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo

Re: notebook lento e internet bloccato

Messaggioda LegioneFelix17 » mar ott 27, 2009 6:51 pm

come si fa il ripristino?

io ho anche i cd di ripristino
Avatar utente
LegioneFelix17
Aficionado
Aficionado
 
Messaggi: 70
Iscritto il: mer mag 14, 2008 2:22 pm

Re: notebook lento e internet bloccato

Messaggioda Amantide » mar ott 27, 2009 7:11 pm

LegioneFelix17 ha scritto:come si fa il ripristino?

io ho anche i cd di ripristino

Fermo! Non intendevo il ripristino così drastico [acc2]

Vai su Start>> Tutti i programmi>> Accessori>> Utilità di sistema>> Ripristino configurazione di sistema e scegli un punto di ripristino con la data antecedente al problema, magari quella di ieri.
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo


Torna a Sicurezza

Chi c’è in linea

Visitano il forum: Nessuno e 0 ospiti

Powered by phpBB © 2002, 2005, 2007, 2008 phpBB Group
Traduzione Italiana phpBB.it

megalab.it: testata telematica quotidiana registrata al Tribunale di Cosenza n. 22/09 del 13.08.2009, editore Master New Media S.r.l.; © Copyright 2008 Master New Media S.r.l. a socio unico - P.I. 02947530784. GRUPPO EDIZIONI MASTER Spa Tutti i diritti sono riservati. Per la pubblicità: Master Advertising