Telefonino.net network
 
| HOMEPAGE | INDICE FORUM | REGOLAMENTO | ::. NEI PREFERITI .:: | RSS Forum | RSS News | NEWS web | NEWS software |
| PUBBLICITA' | | ARTICOLI | WIN XP | VISTA | WIN 7 | REGISTRI | SOFTWARE | MANUALI | RECENSIONI | LINUX | HUMOR | HARDWARE | DOWNLOAD | | CERCA nel FORUM » |

Torna indietro   WinTricks Forum > Antivirus&Sicurezza > Sicurezza&Privacy

Notices

Rispondi
 
Strumenti discussione
Vecchio 16-11-2006, 11.42.45   #1
francex
Newbie
 
Registrato: 16-11-2006
Messaggi: 12
francex promette bene
nn riesco ad eliminare dialer qualcuno mi aiuti

Logfile of HijackThis v1.99.1
Scan saved at 11.58.31, on 16/11/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\utiliti\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.extremeaccess.info/?rid=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 200.73.174.154 STORAGE.HOSTANCE.NET
O1 - Hosts: 200.73.174.154 STORAGE-TASP.COM
O2 - BHO: MouseGest - {112AB43D-32C4-3B21-53BA-13A46743BC34} - C:\WINDOWS\System32\mousegex.dll
O2 - BHO: (no name) - {14D1A72D-8705-11D8-B120-0040F46CB696} - (no file)
O2 - BHO: (no name) - {4D8603D1-E19F-4DB9-B841-CF0B3AECF967} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Finder - {872ED12E-C4C2-42BB-833A-9B237F275CB3} - C:\WINDOWS\System32\WebQuick.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programmi\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\Hewlett-Packard\HP Software Update\HPWuSchd.exe
O4 - HKLM\..\Run: [Life Personal Firewall] FirewallingV10.exe
O4 - HKLM\..\Run: [MSNS PLUS XP2] winbl8.exe
O4 - HKLM\..\Run: [Winjava xml] dirx9.exe
O4 - HKLM\..\Run: [Microsoft Codecs] dxfilx.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmi\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmi\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [kcrl1.exe] C:\WINDOWS\TEMP\kcrl1.exe
O4 - HKLM\..\Run: [Systems] C:\WINDOWS\System32\\spoolsvc.exe
O4 - HKLM\..\Run: [Soundlibs] C:\WINDOWS\soundlib.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\RunServices: [Life Personal Firewall] FirewallingV10.exe
O4 - HKLM\..\RunServices: [MSNS PLUS XP2] winbl8.exe
O4 - HKLM\..\RunServices: [logopod] C:\WINDOWS\System32\logopod.exe
O4 - HKCU\..\Run: [Life Personal Firewall] FirewallingV10.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programmi\Logitech\Video\ManifestEngine.exe boot
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...p=ZRxdm185YYIT
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O15 - Trusted Zone: *.aflashcounter.com
O15 - Trusted Zone: www.archiviosex.net
O15 - Trusted Zone: www.contentdiscount.info
O15 - Trusted Zone: *.energy-factor.com
O15 - Trusted Zone: www.extremeaccess.info
O16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/game...s/y/potg_x.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} - http://messenger.zone.msn.com/binary...r.cab31267.cab
O16 - DPF: {0F222EC8-205D-463F-90C9-D7249B333F09} - http://advnt01.biz/dialer/int_ver1.CAB
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://dawitz.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - http://messenger.zone.msn.com/binary...t.cab31267.cab
O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} - http://advnt01.com/dialer/int_ver34.CAB
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - http://messenger.zone.msn.com/binary...o.cab47946.cab
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/crusher-it.cab
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.easyaccesssite.com/11112-23.exe
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} - http://messenger.zone.msn.com/binary...n.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1BAEBAB0-88FA-479A-9027-10D8A20EF294}: NameServer = 194.243.154.62,151.99.125.8
O17 - HKLM\System\CS1\Services\Tcpip\..\{1BAEBAB0-88FA-479A-9027-10D8A20EF294}: NameServer = 194.243.154.62,151.99.125.8
O17 - HKLM\System\CS2\Services\Tcpip\..\{1BAEBAB0-88FA-479A-9027-10D8A20EF294}: NameServer = 194.243.154.62,151.99.125.8
O21 - SSODL: AVG7Uninstall - {7B852A39-86ED-B10F-0FF7-04CADFEF27C0} - (no file)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\DAVIDE~1\IMPOST~1\Temp\hpdj.exe (file missing)
O23 - Service: LogHjh - Unknown owner - \\?\C:\Programmi\File comuni\Microsoft Shared\lpt3.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SecRuh - Unknown owner - \\?\C:\Programmi\File comuni\System\nul.exe (file missing)
O23 - Service: SrvIwn - Unknown owner - \\?\C:\Programmi\File comuni\System\lpt4.exe (file missing)
O23 - Service: SrvWwe - Unknown owner - \\?\C:\Programmi\Windows NT\con.exe (file missing)
O23 - Service: SysLau - Unknown owner - \\?\C:\Programmi\File comuni\System\lpt9.exe (file missing)
O23 - Service: windows virus scanner (windows antivirus) - Unknown owner - C:\WINDOWS\nav32.exe (file missing)
O23 - Service: Microsoft Windows Update Service (Windows Update Service) - Unknown owner - C:\WINDOWS\services.exe (file missing)
francex non è collegato   Rispondi citando
Vecchio 16-11-2006, 12.31.29   #2
Giorgius
Gold Member
Top Poster
 
L'avatar di Giorgius
 
Registrato: 26-08-2000
Loc.: tokyo city
Messaggi: 8.374
Giorgius promette bene
Non postare in più Thread lo stesso argomento.

Ultima modifica di Giorgius : 16-11-2006 alle ore 13.10.19
Giorgius non è collegato   Rispondi citando
Vecchio 16-11-2006, 13.00.38   #3
Lionsquid
Gold Member
Top Poster
 
L'avatar di Lionsquid
 
Registrato: 03-05-2001
Loc.: Trapani
Messaggi: 11.639
Lionsquid promette bene
Quota:
Inviato da francex
Platform: Windows XP SP1 (WinNT 5.01.2600) (????? mi auguro che sia provvisto di patch contro i vari sasser&co.)
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.extremeaccess.info/?rid=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O1 - Hosts: 200.73.174.154 STORAGE.HOSTANCE.NET
O1 - Hosts: 200.73.174.154 STORAGE-TASP.COM
O2 - BHO: MouseGest - {112AB43D-32C4-3B21-53BA-13A46743BC34} - C:\WINDOWS\System32\mousegex.dll
O2 - BHO: (no name) - {14D1A72D-8705-11D8-B120-0040F46CB696} - (no file)
O2 - BHO: (no name) - {4D8603D1-E19F-4DB9-B841-CF0B3AECF967} - (no file)

O2 - BHO: Finder - {872ED12E-C4C2-42BB-833A-9B237F275CB3} - C:\WINDOWS\System32\WebQuick.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx

O4 - HKLM\..\Run: [Life Personal Firewall] FirewallingV10.exe >> VIRUS
O4 - HKLM\..\Run: [MSNS PLUS XP2] winbl8.exe >> VIRUS
O4 - HKLM\..\Run: [Winjava xml] dirx9.exe >> VIRUS
O4 - HKLM\..\Run: [Microsoft Codecs] dxfilx.exe >> SOSPETTO
O4 - HKLM\..\Run: [kcrl1.exe] C:\WINDOWS\TEMP\kcrl1.exe >> VIRUS
O4 - HKLM\..\Run: [Systems] C:\WINDOWS\System32\\spoolsvc.exe >> VIRUS
O4 - HKLM\..\RunServices: [Life Personal Firewall] FirewallingV10.exe
O4 - HKLM\..\RunServices: [MSNS PLUS XP2] winbl8.exe
O4 - HKLM\..\RunServices: [logopod] C:\WINDOWS\System32\logopod.exe
O4 - HKCU\..\Run: [Life Personal Firewall] FirewallingV10.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbar...p=ZRxdm185YYIT
O15 - Trusted Zone: *.aflashcounter.com
O15 - Trusted Zone: www.archiviosex.net
O15 - Trusted Zone: www.contentdiscount.info
O15 - Trusted Zone: *.energy-factor.com
O15 - Trusted Zone: www.extremeaccess.info
O16 - DPF: {0F222EC8-205D-463F-90C9-D7249B333F09} - http://advnt01.biz/dialer/int_ver1.CAB
O16 - DPF: {A1426AC5-8CE5-4A00-B71E-011D35709AC6} - http://advnt01.com/dialer/int_ver34.CAB
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://ak.imgag.com/imgag/cp/install/crusher-it.cab
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.easyaccesssite.com/11112-23.exe
O23 - Service: hpdj - Unknown owner - C:\DOCUME~1\DAVIDE~1\IMPOST~1\Temp\hpdj.exe (file missing)

ROOTKIT!!!
O23 - Service: LogHjh - Unknown owner - \\?\C:\Programmi\File comuni\Microsoft Shared\lpt3.exe (file missing)
O23 - Service: SecRuh - Unknown owner - \\?\C:\Programmi\File comuni\System\nul.exe (file missing)
O23 - Service: SrvIwn - Unknown owner - \\?\C:\Programmi\File comuni\System\lpt4.exe (file missing)
O23 - Service: SrvWwe - Unknown owner - \\?\C:\Programmi\Windows NT\con.exe (file missing)
O23 - Service: SysLau - Unknown owner - \\?\C:\Programmi\File comuni\System\lpt9.exe (file missing)
O23 - Service: windows virus scanner (windows antivirus) - Unknown owner - C:\WINDOWS\nav32.exe (file missing)
O23 - Service: Microsoft Windows Update Service (Windows Update Service) - Unknown owner - C:\WINDOWS\services.exe (file missing)
in pratica hai più virus che servizi leciti...
non procedere con i fix di hijackthis, non concluderesti NULLA
segui le procedure per rimuovere i rootkit gromozon e co.
procurati:
gmer.exe >> http://www.gmer.net/index.php
prevxfixgrom.exe ( www.prevx.com ) > http://www.prevx.com/gromozon.asp
virit lite >> http://www.tgsoft.it/italy/download.htm
cerca qui nel forum le discussioni relative a gromozon e segui i suggerimenti
___________________________________

... questi politicanti, ex fascisti, ex leghisti, piduisti a tempo pieno usano la crisi per rafforzare il loro potere ed eliminare gli altri, dalla magistratura, al Parlamento, alla Corte dei conti, alla presidenza della Repubblica....
Beppe Grillo

Ultima modifica di Lionsquid : 16-11-2006 alle ore 13.06.45
Lionsquid non è collegato   Rispondi citando
Vecchio 16-11-2006, 13.02.46   #4
Lionsquid
Gold Member
Top Poster
 
L'avatar di Lionsquid
 
Registrato: 03-05-2001
Loc.: Trapani
Messaggi: 11.639
Lionsquid promette bene
ah.. dimenticavo...

in rosso i virus e le voci da rimuovere, in verde sono pure da rimuovere ma hijackthis non è in grado di farlo...
___________________________________

... questi politicanti, ex fascisti, ex leghisti, piduisti a tempo pieno usano la crisi per rafforzare il loro potere ed eliminare gli altri, dalla magistratura, al Parlamento, alla Corte dei conti, alla presidenza della Repubblica....
Beppe Grillo
Lionsquid non è collegato   Rispondi citando
Rispondi


Utenti attualmente attivi che stanno leggendo questa discussione: 1 (0 utenti e 1 ospiti)
 
Strumenti discussione

Regole di scrittura
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is ON
Gli smilies sono ON
[IMG] è ON
Il codice HTML è OFF

Vai al forum

Discussioni simili
Discussione Autore discussione Forum Risposte Ultimo messaggio
eliminare i dialer xmatrix83 Sicurezza&Privacy 1 31-10-2005 18.09.03
Devo eliminare una partizione logica ma non ci riesco willy.z Windows 9x/Me/NT4/2000 20 08-11-2004 11.06.23
non riesco ad eliminare un utente su win2k web Windows 9x/Me/NT4/2000 9 24-05-2004 12.59.13
non riesco a eliminare kabex ivix Sicurezza&Privacy 1 26-11-2003 23.24.03
Lista Dialer ... \GURU/ Sicurezza&Privacy 5 31-08-2003 00.31.13

Orario GMT +2. Ora sono le: 17.12.23.


E' vietata la riproduzione, anche solo in parte, di contenuti e grafica.
Copyright © 1999-2017 Edizioni Master S.p.A. p.iva: 02105820787 • Tutti i diritti sono riservati
L'editore NON si assume nessuna responsabilità dei contenuti pubblicati sul forum in quanto redatti direttamente dagli utenti.
Questi ultimi sono responsabili dei contenuti da loro riportati nelle discussioni del forum
Powered by vBulletin - 2010 Copyright © Jelsoft Enterprises Limited.