|
|
#1
10. Ott 2008, 19:08
| |||
| |||
 Iexplore.exe nuovo virus! Ciao credo di avere anche il iexplore virus e hanno provato diversi programmi per sbarazzarsi di lavoro, ma nessuno! Ho visto che il tuo sito sta aiutando un sacco di ppl in modo forse anche me? Qui è la mia dirottare il log: Logfile di Trend Micro HijackThis v2.0.2 Scan salvato a 1:01:32 PM, il 11/10/2008 Piattaforma: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ Program Files \ Bonjour \ mDNSResponder.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ windows \ system \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ system32 \ taskmgr.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1 R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int Ethernet Impostazioni, ProxyOverride = *. locali O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file mancanti) O2 - BHO: Malicious Scripts Scanner - (55EA1964-F5E4-4D6A-B9B2-125B37655FCB) - C: \ Documents and Settings \ All Users \ Dati applicazioni \ Prevx \ pxbho.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ Programmi \ Google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ Programmi \ Google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP O4 - HKLM \ .. \ Run: [Bandiera Owns Live Grim] C: \ Documents and Settings \ All Users \ Dati applicazioni \ Software regola bandiera possiede \ primo obj.exe O4 - HKLM \ .. \ Run: [PrevxOne] "C: \ Program Files \ Prevx2 \ PXConsole.exe" O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKCU \ .. \ Run: [REAL MODE] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SERVIZIO LOCALE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra contesto voce di menu: & Clean Traces - C: \ Program Files \ DAP \ Privacy Package \ dapcleanerie.htm O8 - Extra contesto voce di menu: & Scarica con & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra contesto voce di menu: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra menu contestuale voce: Link a ritroso - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra contesto voce di menu: Versione cache della pagina - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra contesto voce di menu: Scaricare e tutte con DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra contesto voce di menu: Pagine simili - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra contesto voce di menu: Traduci in italiano - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra pulsante: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra pulsante: Connessione Aiuto - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Connessione Aiuto - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra pulsante: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Photo Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab Ø16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab Ø16 - DPF: (96EEC7FF-106A-47F3-90D6-B4BB754AA40E) (POLI Pay Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab O23 - Service: TP-LINK Configuration Service (ACS) - Sconosciuto proprietario - C: \ WINDOWS \ system32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc. - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C: \ Program Files \ Bonjour \ mDNSResponder.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: PREVXAgent - Prevx - C: \ Program Files \ Prevx2 \ PXAgent.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- Fine del file - 10831 bytes |
|
#2
10. Ott 2008, 23:12
| |||
| |||
| Iexplore.exe nuovo virus! Scaricare Lop S & D da Eric_71 e salvarlo sul desktop. Lop S & D viene eseguito solo su Windows XP e Windows Vista Disattiva il tuo antivirus e antimalware programmi in modo da non interferire con il funzionamento del Lop S & D. Per vedere come disabilitare i programmi di sicurezza visita questo tutorial: Come disattivare temporaneamente il tuo anti-virus, firewall e anti-malware Programmi
__________________  |
|
#3
11 ottobre 2008, 00:15
| |||
| |||
| Iexplore.exe nuovo virus! Ecco i risultati del Lop s & d ricerca: -------------------- \ \ Lop S & D 4.2.4-5 XP / Vista Microsoft Windows XP Home Edition (v5.1.2600) Service Pack 3 PC basato su X86 (uniprocessore Gratuito: AMD Sempron (tm) Processor 3200 +) BIOS: Phoenix - Award BIOS v6.00PG USER: Compaq_Owner (Amministratore) BOOT: Normale avvio Antivirus: AVG 7.5.524 7.5.524 (non attivato) Firewall: ZoneAlarm Firewall 7.0.483.000 (non attivato) C: \ (disco locale) - NTFS - Totale: 68 Vai gratuito: 10 Go D: \ (disco locale) - FAT32 - Totale: 5 Vai Libera: 1 Go E: \ (CD o DVD) F: \ (CD o DVD) G: \ (USB) H: \ (USB) I: \ (USB) J: \ (USB) "C: \ Lop SD" (MAJ: 02/10/2008 | 23:42) Opzione: [1] (sabato 11/10/2008 | 18:11) -------------------- \ \ Listing cartelle in Applic ~ 1 [11/10/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Adobe <DIR> [03/10/2007 | 01:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Apple [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Apple Computer [28/08/2007 | 04:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Autodesk [03/09/2008 | 10:46] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Avg7 [10/06/2008 | 12:37] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Avg8 [02/07/2006 | 01:52] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> DVD Shrink [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> EnterNHelp [27/03/2007 | 10:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Google [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Grisoft <DIR> [23/10/2007 | 12:15] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Impianti [12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ InstallShield <DIR> [11/10/2008 | 12:29] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> MailFrontier [18/08/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Microsoft <DIR> [10/09/2008 | 07:07] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Microsoft <DIR> Aiuto [10/09/2007 | 04:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Nero [11/10/2008 | 03:51] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> NN [21/05/2008 | 12:55] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> PC Driver HeadQuarters [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> QuickTime [24/11/2007 | 02:56] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Real [12/09/2005 | 09:04] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> SBSI [02/02/2008 | 05:17] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Seagate [09/10/2008 | 11:53] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Software <DIR> regola bandiera possiede [01/11/2006 | 01:13] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Sophos [14/09/2008 | 02:08] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Spybot - Search & Destroy [19/05/2008 | 07:41] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Symantec [11/10/2008 | 06:00] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ TEMP <DIR> [15/02/2006 | 01:11] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> UDL [15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Ultima_T15 [08/04/2006 | 02:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> Windows Genuine Advantage [22/06/2008 | 11:01] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ <DIR> WLInstaller [17/03/2008 | 09:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ Adobe <DIR> [11/10/2008 | 03:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> AdobeUM [13/09/2007 | 05:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ Ahead <DIR> [13/06/2008 | 07:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Apple Computer [02/10/2007 | 12:55] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> ArcSoft [18/06/2006 | 11:34] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Atari [21/05/2007 | 07:47] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Autodesk [11/10/2008 | 11:11] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> AVG7 [19/05/2008 | 02:40] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> AVGTOOLBAR [08/10/2008 | 01:29] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> BitTorrent [21/05/2007 | 12:09] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Command & Conquer 3 Tiberium Wars [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Datalayer [28/05/2007 | 02:25] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> dvdcss [13/08/2007 | 03:00] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> EPSON [03/05/2007 | 02:12] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Google [07/09/2006 | 02:08] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Aiuto [26/06/2008 | 12:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ HPQ <DIR> [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Identità [19/02/2006 | 05:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> InterVideo [23/04/2008 | 11:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Iwin [03/05/2008 | 03:20] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Joost [28/01/2006 | 03:15] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Leadertech [13/09/2008 | 08:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> LimeWire [14/02/2006 | 05:22] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Macromedia [24/11/2007 | 03:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Media Player Classic [19/05/2008 | 06:44] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ Microsoft <DIR> [09/04/2008 | 06:13] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ Mozilla <DIR> [15/07/2006 | 12:31] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Nikon [01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ Nokia <DIR> [01/09/2006 | 08:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Nokia Multimedia Player [01/09/2006 | 08:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> PC Suite [19/05/2008 | 07:32] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Real [12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> SampleView [21/05/2007 | 12:07] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Securom [09/10/2008 | 11:54] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Sapone si trova l'amore [28/01/2006 | 03:16] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Sonic [23/04/2008 | 11:45] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> SpinTop [14/09/2008 | 06:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> SPORE [15/04/2008 | 05:04] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Spybot - Search & Destroy [14/02/2006 | 05:49] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> domenica [12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> Symantec [16/04/2008 | 06:42] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> U3 [26/05/2008 | 11:14] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> uTorrent [27/05/2006 | 09:46] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> vlc [20/05/2008 | 10:26] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ <DIR> WinBatch [12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ <DIR> Apple Computer [16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ <DIR> Identità [12/09/2005 | 09:51] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ Microsoft <DIR> [12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ <DIR> Real [12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ <DIR> SampleView [12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ Applic ~ 1 \ <DIR> Symantec [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ Applic ~ 1 \ <DIR> AVG7 [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ LOCALS ~ 1 \ Applic ~ 1 \ Microsoft <DIR> [18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ Networ ~ 1 \ Applic ~ 1 \ Microsoft <DIR> -------------------- \ \ Operazioni pianificate trova in C: \ WINDOWS \ Tasks [11/10/2008 06:00 PM] [- ah -----] C: \ WINDOWS \ compiti \ A396018B9185B27B.job [11/10/2008 06:11 PM] [- uno ------] C: \ WINDOWS \ compiti \ Symantec NetDetect.job [11/10/2008 05:00 PM] [- uno ------] C: \ WINDOWS \ compiti \ RegCure Programma Check.job [28/08/2008 04:00 AM] [- uno ------] C: \ WINDOWS \ compiti \ RegCure.job [11/10/2008 04:07 PM] [- ah -----] C: \ WINDOWS \ compiti \ SA.DAT [05/08/2004 05:00 AM] [-rah -----] C: \ WINDOWS \ compiti \ desktop.ini (A396018B9185B27B.job) = (C: \ DOCUME ~ 1 \ compaq ~ 1 \ applicabile ~ 1 \ soapli ~ 1 \ Axisgreatex tra.exe) -------------------- \ \ Listing Folders in C: \ Program Files [27/07/2008 | 05:02] C: \ Program Files \ Activision <DIR> [11/10/2008 | 04:05] C: \ Program Files \ Adobe <DIR> [15/06/2008 | 12:20] C: \ Program Files \ Ahead <DIR> [20/05/2007 | 11:20] C: \ Program Files \ Alcohol Soft <DIR> [03/06/2008 | 09:01] C: \ Program Files \ <DIR> Apple Software Update [15/07/2006 | 12:27] C: \ Program Files \ ArcSoft <DIR> [12/09/2005 | 09:13] C: \ Program Files \ ATI Technologies <DIR> [21/05/2007 | 07:36] C: \ Program Files \ <DIR> Autodesk [27/05/2008 | 04:42] C: \ Program Files \ AVG <DIR> [20/06/2008 | 04:54] C: \ Program Files \ BitTorrent <DIR> [11/10/2008 | 04:05] C: \ Program Files \ Common Files <DIR> [24/11/2004 | 01:06] C: \ Program Files \ <DIR> ComPlus Applicazioni [21/05/2008 | 12:51] C: \ Program Files \ <DIR> DAP [08/11/2006 | 02:07] C: \ Program Files \ <DIR> DivX [30/09/2008 | 09:12] C: \ Program Files \ <DIR> DominateGame [21/05/2007 | 10:35] C: \ Program Files \ <DIR> Drug Signore 2 [18/08/2008 | 03:56] C: \ Program Files \ D-Tools <DIR> [08/11/2006 | 12:56] C: \ Program Files \ <DIR> DVD Shrink [19/05/2008 | 07:12] C: \ Program Files \ <DIR> Easy Internet Signup [14/09/2008 | 06:02] C: \ Program Files \ <DIR> Electronic Arts [15/02/2006 | 01:11] C: \ Program Files \ <DIR> epson [26/05/2008 | 11:15] C: \ Program Files \ <DIR> eToro [30/09/2008 | 09:12] C: \ Program Files \ <DIR> EV Nova [13/11/2006 | 09:39] C: \ Program Files \ <DIR> FLVPlayer [26/06/2008 | 12:13] C: \ Program Files \ <DIR> GameSpy Arcade [12/09/2005 | 09:37] C: \ Program Files \ <DIR> Google [27/11/2006 | 10:19] C: \ Program Files \ <DIR> Grafico [08/11/2007 | 06:44] C: \ Program Files \ <DIR> Griffin Technology [18/08/2008 | 07:44] C: \ Program Files \ Grisoft <DIR> [27/03/2006 | 09:17] C: \ Program Files \ <DIR> GustoSoft [29/09/2008 | 04:41] C: \ Program Files \ <DIR> Hp [05/12/2007 | 01:09] C: \ Program Files \ <DIR> Infogrames Interactive [14/09/2008 | 06:03] C: \ Program Files \ InstallShield Installation Information <DIR> [17/08/2008 | 09:45] C: \ Program Files \ Internet Explorer <DIR> [12/09/2005 | 09:23] C: \ Program Files \ InterVideo <DIR> [03/06/2008 | 09:04] C: \ Program Files \ <DIR> iPod [14/02/2006 | 05:20] C: \ Program Files \ <DIR> iPrimus [03/06/2008 | 09:05] C: \ Program Files \ <DIR> iTunes [30/09/2008 | 08:51] C: \ Program Files \ Java <DIR> [14/09/2008 | 05:43] C: \ Program Files \ <DIR> John Deere American Farmer Deluxe [09/04/2008 | 06:13] C: \ Program Files \ <DIR> Joost [24/11/2007 | 02:56] C: \ Program Files \ <DIR> K-Lite Codec Pack [20/03/2008 | 05:13] C: \ Program Files \ <DIR> LimeWire [31/08/2008 | 05:28] C: \ Program Files \ <DIR> Maxis [18/08/2008 | 02:14] C: \ Program Files \ <DIR> Messenger [15/05/2007 | 11:48] C: \ Program Files \ Microsoft CAPICOM 2.1.0.2 <DIR> [12/09/2005 | 09:19] C: \ Program Files \ Microsoft Encarta <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Microsoft FrontPage <DIR> [26/06/2008 | 12:17] C: \ Program Files \ Microsoft Games <DIR> [12/09/2005 | 09:25] C: \ Program Files \ Microsoft Money 2005 <DIR> [29/06/2008 | 10:10] C: \ Program Files \ Microsoft Office <DIR> [15/02/2006 | 12:29] C: \ Program Files \ Microsoft Visual Studio <DIR> [03/06/2008 | 03:51] C: \ Program Files \ Microsoft Works <DIR> [14/02/2008 | 10:22] C: \ Program Files \ Microsoft.NET <DIR> [14/03/2008 | 09:22] C: \ Program Files \ <DIR> MindArk [18/08/2008 | 02:11] C: \ Program Files \ <DIR> Movie Maker [11/10/2008 | 11:09] C: \ Program Files \ <DIR> Mozilla Firefox [16/12/2004 | 04:23] C: \ Program Files \ <DIR> MSN [16/12/2004 | 04:23] C: \ Program Files \ <DIR> MSN Gaming Zone [18/10/2006 | 01:19] C: \ Program Files \ MSXML 4.0 <DIR> [02/02/2008 | 05:16] C: \ Program Files \ MSXML 6.0 <DIR> [10/09/2007 | 04:25] C: \ Program Files \ <DIR> Nero [18/08/2008 | 02:10] C: \ Program Files \ NetMeeting <DIR> [15/07/2006 | 12:30] C: \ Program Files \ <DIR> Nikon [11/10/2008 | 03:51] C: \ Program Files \ <DIR> NN [15/02/2006 | 12:42] C: \ Program Files \ <DIR> OfficeUpdate11 [14/09/2008 | 02:59] C: \ Program Files \ <DIR> Servizi Online [18/08/2008 | 02:10] C: \ Program Files \ <DIR> Outlook Express [26/06/2007 | 09:29] C: \ Program Files \ <DIR> PartyGaming [12/09/2005 | 09:34] C: \ Program Files \ <DIR> PC-Doctor per DOS [17/06/2007 | 08:43] C: \ Program Files \ <DIR> PokerRoom.com [31/05/2007 | 01:55] C: \ Program Files \ <DIR> Pokerstars [03/06/2008 | 09:04] C: \ Program Files \ QuickTime <DIR> [21/04/2008 | 08:30] C: \ Program Files \ <DIR> RegCure [02/02/2008 | 05:17] C: \ Program Files \ <DIR> Seagate [23/04/2008 | 01:20] C: \ Program Files \ <DIR> Sean O'Connor's Windows Games [24/07/2008 | 06:08] C: \ Program Files \ <DIR> SEGA [18/08/2008 | 03:56] C: \ Program Files \ <DIR> Sierra Entertainment [08/02/2007 | 11:24] C: \ Program Files \ <DIR> SLD Codec Pack [09/10/2008 | 11:53] C: \ Program Files \ <DIR> Sapone si trova l'amore [14/03/2008 | 06:16] C: \ Program Files \ Sophos <DIR> [15/04/2008 | 09:22] C: \ Program Files \ <DIR> Spybot - Search & Destroy [24/11/2007 | 02:59] C: \ Program Files \ <DIR> StrongDC + + [19/05/2008 | 07:41] C: \ Program Files \ <DIR> Symantec [13/09/2008 | 10:03] C: \ Program Files \ <DIR> TeaTimer (Spybot - Search & Destroy) [14/02/2006 | 05:39] C: \ Program Files \ <DIR> Telstra [19/06/2007 | 09:45] C: \ Program Files \ <DIR> TexasCalculatem [30/05/2008 | 01:43] C: \ Program Files \ <DIR> Theorica codec Divx ;-) [29/02/2008 | 06:25] C: \ Program Files \ <DIR> TP-LINK [11/10/2008 | 12:33] C: \ Program Files \ <DIR> Trend Micro [03/04/2008 | 12:17] C: \ Program Files \ <DIR> Trymedia [24/11/2004 | 01:07] C: \ Program Files \ Uninstall Information <DIR> [27/05/2006 | 08:19] C: \ Program Files \ VideoLAN <DIR> [10/09/2008 | 01:44] C: \ Program Files \ <DIR> VUGames [11/10/2008 | 05:57] C: \ Program Files \ <DIR> Warcraft III [05/06/2008 | 01:07] C: \ Program Files \ <DIR> Weatherzone Tracker [13/09/2006 | 12:25] C: \ Program Files \ <DIR> WinAVI VideoConverter [14/03/2008 | 06:35] C: \ Program Files \ Windows Live <DIR> [10/10/2007 | 11:18] C: \ Program Files \ <DIR> Windows Media Connect 2 [25/08/2008 | 06:37] C: \ Program Files \ <DIR> Windows Media Player [14/09/2008 | 02:59] C: \ Program Files \ Windows NT <DIR> [03/10/2007 | 03:00] C: \ Program Files \ <DIR> Fun Pack di Windows XP [24/11/2004 | 01:07] C: \ Program Files \ WindowsUpdate <DIR> [14/09/2008 | 05:41] C: \ Program Files \ WinRAR <DIR> [16/12/2004 | 04:24] C: \ Program Files \ <DIR> xerox [11/10/2008 | 12:29] C: \ Program Files \ <DIR> Zone Labs [11/10/2008 | 12:31] C: \ Program Files \ <DIR> ZoneAlarmSB -------------------- \ \ Listing Folders in C: \ Programmi \ File comuni [11/10/2008 | 04:05] C: \ Program Files \ Common Files \ Adobe <DIR> [11/10/2008 | 04:05] C: \ Program Files \ Common Files \ <DIR> Adobe AIR [10/09/2007 | 04:28] C: \ Program Files \ Common Files \ Ahead <DIR> [03/10/2007 | 01:28] C: \ Program Files \ Common Files \ <DIR> Apple [28/08/2007 | 04:28] C: \ Programmi \ File comuni \ Autodesk Shared <DIR> [03/06/2008 | 03:50] C: \ Program Files \ Common Files \ <DIR> DESIGNER [12/09/2005 | 09:27] C: \ Program Files \ Common Files \ InstallShield <DIR> [12/09/2005 | 09:06] C: \ Program Files \ Common Files \ <DIR> Java [19/05/2008 | 07:25] C: \ Program Files \ Common Files \ Microsoft Shared <DIR> [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> MSSoap [15/07/2006 | 12:30] C: \ Program Files \ Common Files \ <DIR> muvee Technologies [15/07/2006 | 12:31] C: \ Program Files \ Common Files \ <DIR> Nikon [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> ODBC [19/05/2008 | 07:32] C: \ Program Files \ Common Files \ Real <DIR> [20/05/2008 | 11:24] C: \ Program Files \ Common Files \ <DIR> Servizi [16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> SpeechEngines [19/05/2008 | 07:41] C: \ Program Files \ Common Files \ Symantec Shared <DIR> [18/08/2008 | 02:10] C: \ Program Files \ Common Files \ System <DIR> [11/03/2007 | 11:10] C: \ Program Files \ Common Files \ <DIR> Thraex Software [14/03/2008 | 06:34] C: \ Program Files \ Common Files \ <DIR> WindowsLiveInstaller -------------------- \ \ Processo (41 processi) IEXPLORE.EXE ~ [PID: 2612] IEXPLORE.EXE ~ [PID: 2640] iexplore.exe ~ [PID: 3160] IEXPLORE.EXE ~ [PID: 2940] -------------------- \ \ Ricerca con S_Lop C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ bis9A.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ Asse grande extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ lfbsabiw.ex e -------------------- \ \ Ricerca per Lop Files - Cartelle C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Software regola possiede bandiera C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Software regola bandiera possiede \ primo obj.exe C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ Applic ~ 1 \ Software regola bandiera possiede \ Salta proc.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 \ ATOM DASH.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 \ Asse grande extra.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 \ ilouimpk.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 \ jvuyskje.ex e C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ soapli ~ 1 \ lfbsabiw.ex e C: \ Program Files \ soapli ~ 1 C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp \ TorrentSpeeder. zip C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ adultfri endfinder [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ zione pubblicità [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ ero-pubblicità [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner@adopt.eu roclick [2]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ partypok er [1]. Txt C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies \ compaq_owner @ 888 [2]. Txt C: \ WINDOWS \ Tasks \ A396018B9185B27B.job -------------------- \ \ Ricerca all'interno del registro [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Uninstall \ Tenere wma rif] "DisplayName" = "CiD Help" "UninstallString" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ Applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe-uninstall" [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Run] "MODE REAL" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ Applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" "MODE REAL" = "C: \ \ DOCUME ~ 1 \ \ COMPAQ ~ 1 \ \ Applic ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe" [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run] "Contrassegna Owns Live Grim" = "C: \ Documents and Settings \ \ All Users \ \ Dati applicazioni \ \ Software regola possiede bandiera \ \ Prima obj.exe" -------------------- \ \ Controllare il file Hosts File Hosts CLEAN -------------------- \ \ Ricerca di file nascosti con Catchme catchme 0.3.1353 W2K/XP/Vista - rootkit / stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-10-11 18:12:47 5/1/2600 Windows Service Pack 3 NTFS scansione processi nascosti ... scansione di file nascosti ... scansione completata con successo processi nascosti: 0 i file nascosti: 0 -------------------- \ \ Ricerca di altre infezioni -------------------- \ \ Cracks & Keygens .. C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ rld-spor.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ SporeApp.exe C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Recenti \ Spore.GENERIC_KEYGEN-FFF.lnk [F: 343] [D: 29] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ Temp [F: 200] [D: 0] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Cookies [F: 18285] [D: 24] -> C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ LOCALS ~ 1 \ tempor ~ 1 \ Content.IE5 1 - "C: \ Lop SD \ LopR_1.txt" - sabato 11/10/2008 | 18:07 - Opzione: [1] 2 - "C: \ Lop SD \ LopR_2.txt" - sabato 11/10/2008 | 18:14 - Opzione: [1] -------------------- \ \ Scansione completata al 18:14:22 |
|
#4
11 ottobre 2008, 22:29
| |||
| |||
| Iexplore.exe nuovo virus! Scarica NoLop al tuo desktop. NoLop.exe
Anche eseguire una nuovo HijackThis scan e dopo il log.
__________________ |
|
#5
11 ottobre 2008, 22:46
| |||
| |||
| Iexplore.exe nuovo virus! Ok qui sono i log: Nolop NoLop! Entra da Skate_Punk_21 Fix in esecuzione di: C: \ Documents and Settings \ Compaq_Owner \ Desktop [12/10/2008] [4:33:52 PM] --- Infezione File Found/Removed--- C: \ WINDOWS \ compiti \ A396018B9185B27B.job Inizio di rimozione ... Riavvio ... Rimozione del Lop rimasto file / cartelle ... Modifica del Registro di ... ** Fix completo! ** --- Inserzione AppData sottodirectory --- C: \ Documents and Settings \ All Users \ Dati applicazioni \ Adobe C: \ Documents and Settings \ All Users \ Dati applicazioni \ Apple C: \ Documents and Settings \ All Users \ Dati applicazioni \ Apple Computer C: \ Documents and Settings \ All Users \ Dati applicazioni \ Autodesk C: \ Documents and Settings \ All Users \ Dati applicazioni \ Avg7 C: \ Documents and Settings \ All Users \ Dati applicazioni \ Avg8 - directory vuota C: \ Documents and Settings \ All Users \ Dati applicazioni \ DVD Shrink C: \ Documents and Settings \ All Users \ Dati applicazioni \ Enternhelp C: \ Documents and Settings \ All Users \ Dati applicazioni \ Google C: \ Documents and Settings \ All Users \ Dati applicazioni \ Grisoft C: \ Documents and Settings \ All Users \ Dati applicazioni \ Installations C: \ Documents and Settings \ All Users \ Dati applicazioni \ InstallShield C: \ Documents and Settings \ All Users \ Dati applicazioni \ Mailfrontier - directory vuota C: \ Documents and Settings \ All Users \ Dati applicazioni \ Microsoft C: \ Documents and Settings \ All Users \ Dati applicazioni \ Microsoft Help C: \ Documents and Settings \ All Users \ Dati applicazioni \ Nero C: \ Documents and Settings \ All Users \ Dati applicazioni \ nn C: \ Documents and Settings \ All Users \ Dati applicazioni \ Pc Driver Sede C: \ Documents and Settings \ All Users \ Dati applicazioni \ Quicktime C: \ Documents and Settings \ All Users \ Dati applicazioni \ Real - directory vuota C: \ Documents and Settings \ All Users \ Dati applicazioni \ Sbsi C: \ Documents and Settings \ All Users \ Dati applicazioni \ Seagate C: \ Documents and Settings \ All Users \ Dati applicazioni \ Software articolo Segnala Owns C: \ Documents and Settings \ All Users \ Application Data \ Sophos C: \ Documents and Settings \ All Users \ Dati applicazioni \ Spybot - Search & Destroy C: \ Documents and Settings \ All Users \ Dati applicazioni \ Symantec C: \ Documents and Settings \ All Users \ Dati applicazioni \ Temp - directory vuota C: \ Documents and Settings \ All Users \ Dati applicazioni \ UDL C: \ Documents and Settings \ All Users \ Dati applicazioni \ Ultima_t15 C: \ Documents and Settings \ All Users \ Dati applicazioni \ Windows Genuine Advantage C: \ Documents and Settings \ All Users \ Dati applicazioni \ Wlinstaller C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Adobe C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Adobeum C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Ahead C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Apple Computer C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Arcsoft C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Atari C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Autodesk C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Avg7 C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Avgtoolbar C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Bittorrent C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Command & Conquer 3 Tiberium Wars C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Datalayer C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Dvdcss C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Epson C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Google C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Aiuto - directory vuota C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ HPQ C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Identities C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Intervideo C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Iwin C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Joost C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Leadertech C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ LimeWire C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Macromedia C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Media Player Classic C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Microsoft C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Mozilla C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Nikon C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Nokia C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Nokia Multimedia Player C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ PC Suite C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Real C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Sampleview - directory vuota C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Securom C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Soap Lies Love C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Sonic C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Spintop C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Spora C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Spybot - Search & Destroy C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ domenica C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Symantec - directory vuota C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ U3 C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ utorrent C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ vlc C: \ Documents and Settings \ Compaq_owner \ Dati applicazioni \ Winbatch C: \ Documents and Settings \ Default User \ Dati applicazioni \ Apple Computer C: \ Documents and Settings \ Default User \ Dati applicazioni \ Identities C: \ Documents and Settings \ Default User \ Dati applicazioni \ Microsoft C: \ Documents and Settings \ Default User \ Dati applicazioni \ Real C: \ Documents and Settings \ Default User \ Dati applicazioni \ Sampleview - directory vuota C: \ Documents and Settings \ Default User \ Dati applicazioni \ Symantec - directory vuota C: \ Documents and Settings \ LocalService \ Dati applicazioni \ Avg7 - directory vuota C: \ Documents and Settings \ LocalService \ Dati applicazioni \ Microsoft C: \ Documents and Settings \ NetworkService \ Dati applicazioni \ Microsoft HijackThis: Logfile di Trend Micro HijackThis v2.0.2 Scan salvato a 4:44:14 PM, il 12/10/2008 Piattaforma: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ WINDOWS \ system32 \ Ati2evxx.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ acs.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ system32 \ Wuauclt.exe C: \ windows \ system \ hpsysdrv.exe C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe C: \ WINDOWS \ ALCXMNTR.EXE C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe C: \ HP \ KBD \ KBD.EXE C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1 O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file mancanti) O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file) O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ Programmi \ Google \ googletoolbar1.dll O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ Programmi \ Google \ googletoolbar1.dll O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / Spoil / RemAdvDef / Migration32 O4 - HKLM \ .. \ Run: [MSPY2002] C: \ WINDOWS \ system32 \ IME \ PINTLGNT \ ImScInst.exe / SYNC O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / SYNC O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ system32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE O4 - HKLM \ .. \ Run: [EPSON Stylus CX3700 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ TEMP \ E_SC4.tmp" / EF "HKLM" O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / STARTUP O4 - HKLM \ .. \ Run: [Bandiera Owns Live Grim] C: \ Documents and Settings \ All Users \ Dati applicazioni \ Software regola bandiera possiede \ primo obj.exe O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe" O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ Reader_sl.exe" O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime O4 - HKCU \ .. \ Run: [REAL MODE] C: \ DOCUME ~ 1 \ COMPAQ ~ 1 \ Applic ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [updateMgr] "C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ AdobeUpdateManager.exe" AcRdB7_1_0-reboot 1 O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SERVIZIO LOCALE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user') O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe O8 - Extra contesto voce di menu: & Clean Traces - C: \ Program Files \ DAP \ Privacy Package \ dapcleanerie.htm O8 - Extra contesto voce di menu: & Scarica con & DAP - C: \ Program Files \ DAP \ dapextie.htm O8 - Extra contesto voce di menu: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html O8 - Extra menu contestuale voce: Link a ritroso - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html O8 - Extra contesto voce di menu: Versione cache della pagina - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html O8 - Extra contesto voce di menu: Scaricare e tutte con DAP - C: \ Program Files \ DAP \ dapextie2.htm O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 3 \ Office12 \ EXCEL.EXE/3000 O8 - Extra contesto voce di menu: Pagine simili - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html O8 - Extra contesto voce di menu: Traduci in italiano - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 3 \ Office12 \ REFIEBAR.DLL O9 - Extra pulsante: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL O9 - Extra pulsante: Connessione Aiuto - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra 'Tools' menuitem: Connessione Aiuto - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHealth \ HELPCTR \ Vendors \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm O9 - Extra pulsante: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Photo Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab Ø16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab Ø16 - DPF: (96EEC7FF-106A-47F3-90D6-B4BB754AA40E) (POLI Pay Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab Ø16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom Class) -- http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab O23 - Service: TP-LINK Configuration Service (ACS) - Sconosciuto proprietario - C: \ WINDOWS \ system32 \ acs.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: Ati Hotkey Poller - ATI Technologies Inc. - C: \ WINDOWS \ system32 \ Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ PROGRA ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe O23 - Service: getPlus (R) Helper - NOS Microsystems Ltd. - C: \ Program Files \ NOS \ bin \ getPlus_HelperSvc.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe -- Fine del file - 10505 bytes |
|
#6
11 ottobre 2008, 22:53
| |||
| |||
| Iexplore.exe nuovo virus! Apri HijackThis e selezionare Non solo un sistema di scansione. Mettere un segno di spunta accanto alle seguenti voci: (se esiste)
Uscita HijackThis. ---------- Nota: le istruzioni qui di seguito sono stati creati appositamente per questo utente. Se non siete l'utente, NON seguire queste istruzioni in quanto potrebbero danneggiare il funzionamento del sistema Vai a Start> Esegui e il tipo notepad.exe quindi fare clic su OK Copia e incolla il sottostante nel Blocco note e salvarlo come fixme.reg a Vostra Desktop Codice: REGEDIT4 [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] "AlcxMonitor" =- "Contrassegna Owns Live Grim" =- [HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] "MODE REAL" =- Assicurarsi che mi dite se si riceve un messaggio su come aggiungere a quanto sopra il Registro di sistema. Se non si riceve un messaggio, non ha funzionato. Eliminare il fixme.reg dal desktop. Riavviare il computer ---------- Scaricare CCleaner Slim e salvarlo sul desktop. Quando il file è stato salvato, vai sul desktop e fare doppio clic sul ccsetupxxx_slim.exe Seguire le istruzioni per installare il programma. Completare l'installazione allora:
---------- Scaricare Malwarebytes' Anti-Malware (MBAM)
Ulteriori Note: Se MBAM incontra un file che è difficile da rimuovere, verrà presentato con 1 di 2 istruzioni, fare clic su OK per lasciare che sia MBAM e procedere con il processo di disinfezione, se richiesto di riavviare il computer, si prega di farlo immediatamente.
__________________ |
|
#7
11 ottobre 2008, 23:26
| |||
| |||
| Iexplore.exe nuovo virus! Ho ricevuto il messaggio dal fixme.reg file e qui è il MBAM log: Malwarebytes' Anti-Malware 1,28 Database versione: 1259 5/1/2600 Windows Service Pack 3 12/10/2008 5:24:27 PM mbam-log-2008-10-12 (17-24-27). txt Tipo di scansione: Quick Scan Oggetti scandita: 45849 Tempo trascorso: 2 minuti (s), 43 secondi (s) Processi di memoria infetti: 0 Moduli di memoria infetti: 0 Chiavi di registro infette: 0 Valori del registro infetti: 0 I dati del Registro di oggetti infetti: 0 Cartelle infette: 0 File infetti: 0 Processi di memoria infetti: (N. oggetti dannosi individuati) Moduli di memoria infetti: (N. oggetti dannosi individuati) Chiavi di registro infette: (N. oggetti dannosi individuati) Valori del registro infetti: (N. oggetti dannosi individuati) I dati del Registro di oggetti infetti: (N. oggetti dannosi individuati) Cartelle infette: (N. oggetti dannosi individuati) I file infetti: (N. oggetti dannosi individuati) |
|
#8
11 ottobre 2008, 23:29
| |||
| |||
| Iexplore.exe nuovo virus! Come tutto ciò che è adesso?
__________________ |
|
#9
11 ottobre 2008, 23:33
| |||
| |||
| Iexplore.exe nuovo virus! Esecuzione più veloce, ma in Task Manager in processi iexplore.exe è ancora lì e ogni volta che i fine si ritorna. Per circa 5 minuti si utilizza quasi il 99% della cpu poi dopo un po 'si scende verso il basso a 0 ma l'utilizzo mem soggiorni fino circa 100.000 K. |
|
#10
12 ottobre 2008, 11:41
| |||
| |||
| Iexplore.exe nuovo virus! Scarica ComboFix da success da uno dei link qui sotto. Assicurarsi superiore a salvare la Desktop. Link # 1 Link # 2 ** Nota: E 'importante che si è salvato direttamente sul tuo desktop Chiudere tutti i browser Web aperto. (Firefox, Internet Explorer, etc) prima di iniziare ComboFix. Temporaneamente disattivare tuo antivirus, E qualsiasi antispyware protezione in tempo reale prima eseguire una scansione. Fare clic sul pulsante questo link per visualizzare un elenco di programmi di sicurezza che dovrebbero essere disattivati e come disattivarli. Fare doppio clic su combofix.exe e segui le istruzioni. Una volta terminato ComboFix produrrà un log per voi. Posta la ComboFix log e un nuovo Log HijackThis nella prossima risposta. Importante: Non clic ComboFix della finestra, mentre è in esecuzione. Che potrebbero indurlo a stalla. Ricorda di riattivare l'antivirus e antispyware quando ComboFix protezione è completa.
__________________ |
