Navigazione

    Privacy - Termini e condizioni
    © 2020 Search On Media Group S.r.l.
    • Registrati
    • Accedi
    • CATEGORIES
    • Discussioni
    • Non letti
    • Recenti
    • Hashtags
    • Popolare
    • Utenti
    • Stream
    • Interest
    • Categories
    1. Home
    2. best81
    3. Post
    B

    best81

    @best81

    • Profilo
    • Chi segue 0
    • Da chi è seguito 0
    • Discussioni 1
    • Post 2
    • Migliore 0
    • Gruppi 0
    Iscrizione Ultimo Accesso
    Età 43
    0
    Reputazione
    2
    Post
    0
    Visite al profilo
    0
    Da chi è seguito
    0
    Chi segue
    User Newbie

    Post creati da best81

    • RE: Virus micidiale

      Purtroppo avenger non mi va... 😞

      Lo apro in eseguibile, perchè credo sia stand alone,e poi si chiude subito...

      Cosa devo fare?

      Credo proprio siano i file che hai segnalato,e che vadano cancellati...davvero odiosi :dull:

      postato in Tutti i Software
      B
      best81
    • Virus micidiale

      Buongiorno a tutti,
      scrivo qui perchè non so proprio piu cosa fare,e chiedo gentilmente il vostro aiuto.

      Credo di aver preso un virus e abbastanza potente.E' già la seconda volta nel giro di due mesi,la prima ho formattato in tronco perchè avevo bisogno urgente del pc e non potevo perdere altro tempo,questa volta però sono davvero stufo,e non ho voglia di ripristinare tutto.

      Allego qui il logfile di Hijackthis,sperando qualcuno mi possa dire cosa fare.

      Vi dico velocemente alcuni sintomi.Prima di tutto non riesco piu a navigare,navigazione lentissima,se non nulla.Non uso Internet explorer e nonostante questo nel Task Manager c'è attivo IEXPLORER.EXE e capita che si aprano migliaia di pagine di IE in loop...ci sono vari file di estensione .cmp e .tmp che si aprono e chiudono a loro piacimenti,per esempio un C91.cmp solo per citarne uno...e come lui molti altri.
      La cosa sconcertante è che non mi fa piu utilizzare l'antivrus,che uso (antivirxp),ho provato a disinstallarlo,ho reinstallato e non me lo faceva piu reinstallare dicendo che c'era qualcosa di manomesso

      Non ho la minima idea di cosa fare...cosa mi suggerite????
      Vi ringrazio anticipatamente

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 11.05.22, on 26/04/2009
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
      C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Programmi\Sony\VAIO Event Service\VESMgr.exe
      C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
      C:\Programmi\File comuni\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
      C:\WINDOWS\Explorer.EXE
      C:\Programmi\Apoint\Apoint.exe
      C:\WINDOWS\RTHDCPL.EXE
      C:\WINDOWS\system32\ICO.EXE
      C:\Programmi\Sony\ISB Utility\ISBMgr.exe
      C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe
      C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe
      C:\Programmi\Apoint\Apntex.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9SE.EXE
      C:\WINDOWS\system32\rundll32.exe
      C:\WINDOWS\System32\reader_s.exe
      C:\Programmi\Skype\Phone\Skype.exe
      C:\Programmi\Windows Live\Messenger\msnmsgr.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Documents and Settings\MarcoB\Dati applicazioni\pidle\pidle.exe
      C:\Programmi\FreePOPs\freepopsd.exe
      C:\Programmi\Outlook Express\msimn.exe
      C:\Programmi\Windows Live\Contacts\wlcomm.exe
      C:\Programmi\Skype\Plugin Manager\skypePM.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\igfxsrvc.exe
      C:\Programmi\Mozilla Firefox\firefox.exe
      C:\WINDOWS\system32\taskmgr.exe
      C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
      O1 - Hosts: 82.98.231.89 url.adtrgt.com
      O1 - Hosts: 82.98.231.89 googleads2.gdoubleclick.net
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: (no name) - {9d1740fa-d32f-4936-a062-703e7cd3fbc4} - C:\WINDOWS\system32\jirerina.dll
      O3 - Toolbar: &SearchBar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - C:\Programmi\MyWay\myBar\1.bin\MYBAR.DLL
      O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:\Programmi\Veoh Networks\VeohWebPlayer\VeohIEToolbar.dll
      O4 - HKLM..\Run: [Apoint] C:\Programmi\Apoint\Apoint.exe
      O4 - HKLM..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM..\Run: [Alcmtr] ALCMTR.EXE
      O4 - HKLM..\Run: [AzMixerSel] C:\Programmi\Realtek\InstallShield\AzMixerSel.exe
      O4 - HKLM..\Run: [Mouse Suite 98 Daemon] ICO.EXE
      O4 - HKLM..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM..\Run: [ISBMgr.exe] C:\Programmi\Sony\ISB Utility\ISBMgr.exe
      O4 - HKLM..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM..\Run: [Acrobat Assistant 7.0] "C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"
      O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\ssmmgr.exe /autorun
      O4 - HKLM..\Run: [Office SturtUp] osa9.exe
      O4 - HKLM..\Run: [gfxtray] rundll32 ctccw32.dll,findwnd
      O4 - HKLM..\Run: [ISUSPM Startup] "C:\Programmi\File comuni\InstallShield\UpdateService\isuspm.exe" -startup
      O4 - HKLM..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
      O4 - HKLM..\Run: [EPSON Stylus Photo R2400] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9SE.EXE /P24 "EPSON Stylus Photo R2400" /O6 "USB002" /M "Stylus Photo R2400"
      O4 - HKLM..\Run: [sodokimipu] Rundll32.exe "C:\WINDOWS\system32\bikufefe.dll",s
      O4 - HKLM..\Run: [prnet] "C:\WINDOWS\system32\prnet.tmp"
      O4 - HKLM..\Run: [54a58e5f] rundll32.exe "C:\WINDOWS\system32\gabuginu.dll",b
      O4 - HKLM..\Run: [CPM5796bdc3] Rundll32.exe "c:\windows\system32\hehipova.dll",a
      O4 - HKLM..\Run: [reader_s] C:\WINDOWS\System32\reader_s.exe
      O4 - HKLM..\RunOnce: [NSSInstallation] C:\WINDOWS\system32\Adobe\Shockwave 11\nssstub.exe /RunOnce
      O4 - HKCU..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU..\Run: [msnmsgr] "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU..\Run: [VeohPlugin] "C:\Programmi\Veoh Networks\VeohWebPlayer\veohwebplayer.exe"
      O4 - HKCU..\Run: [prnet] "C:\WINDOWS\system32\prnet.tmp"
      O4 - HKCU..\Run: [pidle] "C:\Documents and Settings\MarcoB\Dati applicazioni\pidle\pidle.exe" 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
      O4 - HKCU..\Run: [reader_s] C:\Documents and Settings\MarcoB\reader_s.exe
      O4 - HKUS\S-1-5-19..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
      O4 - HKUS\S-1-5-20..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
      O4 - HKUS\S-1-5-18..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS.DEFAULT..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Adobe Gamma.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Startup: Collegamento a freepopsd.lnk = C:\Programmi\FreePOPs\freepopsd.exe
      O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: Sothink SWF Catcher - C:\Programmi\File comuni\SourceTec\SWF Catcher\InternetExplorer.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_03\bin\npjpi150_03.dll
      O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_03\bin\npjpi150_03.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
      O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmi\File comuni\SourceTec\SWF Catcher\InternetExplorer.htm
      O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Programmi\File comuni\SourceTec\SWF Catcher\InternetExplorer.htm
      O14 - IERESET.INF: START_PAGE_URL=
      O15 - Trusted Zone: *.sony-europe.com
      O15 - Trusted Zone: *.sonystyle-europe.com
      O15 - Trusted Zone: *.vaio-link.com
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
      O20 - AppInit_DLLs: C:\WINDOWS\system32\faferiwo.dll c:\windows\system32\hehipova.dll
      O21 - SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\hehipova.dll
      O22 - SharedTaskScheduler: STS - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\hehipova.dll
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: EvtEng - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
      O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Programmi\Sony\Image Converter 2\IcVzMon.exe
      O23 - Service: MSCSPTISRV - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\MSCSPTISRV.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: PACSPTISVR - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: PACSPTISVR - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe
      O23 - Service: RegSrvc - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
      O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
      O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SPTISRV.exe
      O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SSScsiSV.exe
      O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
      O23 - Service: VAIO Entertainment Task Scheduler - Sony Corporation - C:\Programmi\Sony\VAIO Entertainment\VzTaskScheduler.exe
      O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
      O23 - Service: VAIO Event Service - Sony Corporation - C:\Programmi\Sony\VAIO Event Service\VESMgr.exe
      O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\VMISrv.exe
      O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
      O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
      O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Programmi\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
      O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
      O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
      O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe

      postato in Tutti i Software
      B
      best81