|
| |||||||
 |
 |
| | Thread Tools |
|
#1
26 marzo 2008, 15:42
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? CIAO - il mio computer, in quanto questi ultimi giorni è stato molto lento in esecuzione, ho eseguito spybot, hanno trovato un sacco di roba e apparentemente è sbarazzato di esso -, ma ora il mio computer è ancora lento .. Please help ... qui è il mio file di log HJT ... |
|
#2
26 marzo 2008, 15:43
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? File di log di HijackThis v1.99.1 Scan salvato a 6:47:29 PM, il 3/26/2008 Piattaforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe C: \ WINDOWS \ System32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ PRISMSVC.EXE C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ PRISMSVR.EXE C: \ WINDOWS \ ALCXMNTR.EXE C: \ WINDOWS \ LTMSG.exe C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATI9 FA.EXE C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ Program Files \ QuickTime \ QTTask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1,2 \ apdproxy.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ Program Files \ BitTorrent \ bittorrent.exe C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Dell Wireless \ PRISMCFG.exe C: \ Program Files \ LimeWire \ LimeWire.exe C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Documents and Settings \ Neven \ Desktop \ sniper.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://yahoo.sbc.com/dsl R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://yahoo.sbc.com/dsl R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ System32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / installquiet / keeploaded / nodetect O4 - HKLM \ .. \ Run: [LTMSG] LTMSG.exe 7 O4 - HKLM \ .. \ Run: [EPSON Stylus Photo R320 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATI9 FA.EXE / P30 "EPSON Stylus Photo R320 Series" / O6 "USB002" / M "Stylus Photo R320" O4 - HKLM \ .. \ Run: [ProfileWatcher] C: \ Program Files \ ProfileWatcher \ profilewatcher.exe O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1,2 \ apdproxy.exe" O4 - HKCU \ .. \ Run: [Yahoo! Pager] C: \ PROGRA ~ 1 \ Yahoo! \ MESSEN ~ 1 \ Ypager.exe-quiet O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent] "C: \ Program Files \ BitTorrent \ bittorrent.exe" - force_start_minimized O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - Startup: Il LimeWire Startup.lnk = C: \ Program Files \ LimeWire \ LimeWire.exe O4 - Startup: Stardock ObjectDock.lnk = C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: Wireless USB 2.0 WLAN Card Utility.lnk =? O8 - Extra contesto voce di menu: & Search -? P = ZK O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra pulsante: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra pulsante: PokerStars.net - (FA9B9510-9FCB-4ca0-818C-5D0987B47C4D) - C: \ Program Files \ PokerStars.NET \ PokerStarsUpdate.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø11 - Opzioni di gruppo: [INTERNATIONAL] International * Ø16 - DPF: (200B3EE9-7242-4EFD-B1E4-D97EE825BA53) (VerifyGMN Class) -- http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab Ø16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) -- Ø16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://update.microsoft.com/windowsu...?1162589752500 Ø16 - DPF: (6E32070A-766D-4EE6-879c-DC1FA91D2FC3) (MUWebControl Class) -- http://update.microsoft.com/microsof...?1162829153500 Ø16 - DPF: (AB86CE53-AC9F-449F-9399-D8ABCA09EC09) (Get_ActiveX Control) -- https: / / h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx Ø16 - DPF: (D18F962A-3722-4b59-B08D-28BB9EB2281E) (PhotosCtrl Class) -- http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab Ø16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab Ø20 - Winlogon Notify: PRISMAPI.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMAPI.DLL Ø20 - Winlogon Notify: PRISMGNA.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMGNA.DLL Ø20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Common Files \ Adobe Systems Shared \ Service \ Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - Unknown proprietario - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ service (file mancanti) O23 - Service: avast! Web Scanner - Unknown proprietario - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ service (file mancanti) O23 - Service: FlexNet Licensing Service - Macrovision Europe Ltd. - C: \ Program Files \ Common Files \ Macrovision Shared \ FlexNet Publisher \ FNPLicensingService.exe O23 - Service: hpdj - Ignoto proprietario - C: \ DOCUME ~ 1 \ Owner \ LOCALS ~ 1 \ Temp \ hpdj.exe (file mancanti) O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C: \ WINDOWS \ System32 \ nvsvc32.exe O23 - Service: PRISMSVC - Conexant Systems, Inc. - C: \ WINDOWS \ system32 \ PRISMSVC.EXE |
|
#3
26 marzo 2008, 16:35
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? Hai qualche malware mostrando nel registro. Si prega di andare QUI e di fare la CCleaner, SUPERAntiSpyware e MBAM scansioni. Pubblica il log completo, quando insieme con un nuovo log HijackThis. Essere sicuri di non correre HijackThis dopo l'altro fino a quando la scansione è completa e che il computer è stato riavviato. Nota Si suggerisce di andare ad aggiungere / rimuovere i programmi e disinstallare ProfileWatcher. Citazione:
__________________  |
|
#4
2. Aprile 2008, 15:10
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? questo è il log malwarebytes |
|
#5
2. Aprile 2008, 15:11
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? questo è il log HijackThis File di log di HijackThis v1.99.1 Scan salvato a 6:16:51 PM, il 4/2/2008 Piattaforma: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16608) Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe C: \ Program Files \ Common Files \ Microsoft Shared \ VS7DEBUG \ Mdm.exe C: \ WINDOWS \ System32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ PRISMSVC.EXE C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ Explorer.EXE C: \ WINDOWS \ system32 \ PRISMSVR.EXE C: \ WINDOWS \ ALCXMNTR.EXE C: \ WINDOWS \ LTMSG.exe C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATI9 FA.EXE C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ Program Files \ QuickTime \ QTTask.exe C: \ Program Files \ iTunes \ iTunesHelper.exe C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1,2 \ apdproxy.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ WINDOWS \ system32 \ rundll32.exe C: \ Program Files \ Dell Wireless \ PRISMCFG.exe C: \ Program Files \ LimeWire \ LimeWire.exe C: \ Program Files \ iPod \ bin \ iPodService.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Documents and Settings \ Neven \ Desktop \ sniper.exe R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://yahoo.sbc.com/dsl R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://red.clientapps.yahoo.com/cust...search/ie.html R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://red.clientapps.yahoo.com/cust.../www.yahoo.com R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://yahoo.sbc.com/dsl R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R3 - URLSearchHook: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4EFB-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ System32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / installquiet / keeploaded / nodetect O4 - HKLM \ .. \ Run: [LTMSG] LTMSG.exe 7 O4 - HKLM \ .. \ Run: [EPSON Stylus Photo R320 Series] C: \ WINDOWS \ System32 \ spool \ DRIVERS \ W32X86 \ 3 \ E_FATI9 FA.EXE / P30 "EPSON Stylus Photo R320 Series" / O6 "USB002" / M "Stylus Photo R320" O4 - HKLM \ .. \ Run: [ProfileWatcher] C: \ Program Files \ ProfileWatcher \ profilewatcher.exe O4 - HKLM \ .. \ Run: [avast!] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe" O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_02 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [Adobe Photo Downloader] "C: \ Program Files \ Adobe \ Adobe Photoshop Lightroom 1,2 \ apdproxy.exe" O4 - HKCU \ .. \ Run: [Yahoo! Pager] C: \ PROGRA ~ 1 \ Yahoo! \ MESSEN ~ 1 \ Ypager.exe-quiet O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKCU \ .. \ Run: [BitTorrent] "C: \ Program Files \ BitTorrent \ bittorrent.exe" - force_start_minimized O4 - HKCU \ .. \ Run: [SpybotSD TeaTimer] C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - Startup: Il LimeWire Startup.lnk = C: \ Program Files \ LimeWire \ LimeWire.exe O4 - Startup: Stardock ObjectDock.lnk = C: \ Program Files \ Stardock \ ObjectDock \ ObjectDock.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O4 - Global Startup: Wireless USB 2.0 WLAN Card Utility.lnk =? O8 - Extra contesto voce di menu: & Search -? P = ZK O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 2 \ Office11 \ REFIEBAR.DLL O9 - Extra pulsante: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra pulsante: PokerStars.net - (FA9B9510-9FCB-4ca0-818C-5D0987B47C4D) - C: \ Program Files \ PokerStars.NET \ PokerStarsUpdate.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe Ø11 - Opzioni di gruppo: [INTERNATIONAL] International * Ø16 - DPF: (200B3EE9-7242-4EFD-B1E4-D97EE825BA53) (VerifyGMN Class) -- http://h20270.www2.hp.com/ediags/gmn...taller_gmn.cab Ø16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll Ø16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://update.microsoft.com/windowsu...?1162589752500 Ø16 - DPF: (6E32070A-766D-4EE6-879c-DC1FA91D2FC3) (MUWebControl Class) -- http://update.microsoft.com/microsof...?1162829153500 Ø16 - DPF: (AB86CE53-AC9F-449F-9399-D8ABCA09EC09) (Get_ActiveX Control) -- https: / / h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx Ø16 - DPF: (D18F962A-3722-4b59-B08D-28BB9EB2281E) (PhotosCtrl Class) -- http://photos.yahoo.com/ocx/us/yexplorer1_9us.cab Ø16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll Ø20 - Winlogon Notify: PRISMAPI.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMAPI.DLL Ø20 - Winlogon Notify: PRISMGNA.DLL - C: \ WINDOWS \ SYSTEM32 \ PRISMGNA.DLL Ø20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Common Files \ Adobe Systems Shared \ Service \ Adobelmsvc.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - Unknown proprietario - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ service (file mancanti) O23 - Service: avast! Web Scanner - Unknown proprietario - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ service (file mancanti) O23 - Service: FlexNet Licensing Service - Macrovision Europe Ltd. - C: \ Program Files \ Common Files \ Macrovision Shared \ FlexNet Publisher \ FNPLicensingService.exe O23 - Service: hpdj - Ignoto proprietario - C: \ DOCUME ~ 1 \ Owner \ LOCALS ~ 1 \ Temp \ hpdj.exe (file mancanti) O23 - Service: iPod Service - Apple Inc. - C: \ Program Files \ iPod \ bin \ iPodService.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C: \ WINDOWS \ System32 \ nvsvc32.exe O23 - Service: PRISMSVC - Conexant Systems, Inc. - C: \ WINDOWS \ system32 \ PRISMSVC.EXE |
|
#6
2. Aprile 2008, 15:13
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? e questo è il log SUPERAntiSpyware --- so si sente molto questo - ma siete veramente un salvagente ringrazio molto ---- SUPERAntiSpyware Scan Entra http://www.superantispyware.com Generata 03/28/2008 alle 08:37 PM Versione applicazione: 4.0.1154 Core Regole Database Version: 3426 Trace Regole Database Version: 1418 Tipo di scansione: Scansione completa Totale Scan Time: 00:42:44 Memoria oggetti scanditi: 515 Memoria minacce rilevate: 0 Registro di oggetti scanditi: 5073 Registro di minacce rilevate: 0 File oggetti scanditi: 15903 File minacce rilevate: 0 il mio computer è ancora lento - nessuna richiesta di modifica in quanto le scansioni ... |
|
#7
2. Aprile 2008, 15:20
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? Abbiamo bisogno di eseguire una scansione più potente. Essa non richiede molto tempo. Si prega di scaricare da SUBS Combofix da uno dei link qui sotto. (Prova a tutti e tre, se necessario)Importante! Combofix.exe VA essere salvati e corse dalla Desktop.
__________________ |
|
#8
2. Aprile 2008, 15:38
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? qui è il log combofix |
|
#9
2. Aprile 2008, 15:57
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? Apri HijackThis e selezionare un sistema di scansione Non solo quindi un segno di spunta accanto a queste enteies. R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.finderg.com O8 - Extra contesto voce di menu: & Search -? P = ZK Chiudere tutte le finestre eccetto HijackThis per controllare e fare clic su Fix. ---------- Si prega di eseguire il F-Secure Online Scanner Nota: Questo scanner funziona solo con Internet Explorer!
La scansione può prendere un po 'di tempo, vi preghiamo di essere pazienti
__________________ |
|
#10
2. Aprile 2008, 17:41
| |||
| |||
| Please help-computer è in esecuzione veramente lento, virus? Relazione di scansione Mercoledì, aprile 02, 2008 19:19:08 - 20:30:00 Nome computer: Neven-MS8XDAEE4 Tipo di scansione: scansione del sistema per il malware, i rootkit Target: C: \ Risultato: 1 malware trovato Tracking Cookie (spyware)
Digitalizzate:
Motori di scansione:
|
