Salve a tutti spero che qualcuno mi possa aiutare, un paio di settimane fa avevo l'e1xplorer e, seguendo le istruzioni sul forum lo avevo tolto, cosi almeno credevo sino ad un paio di giorni fa, quando che è tornato. Ovviamente, ho evitato "siti strani" ma credo di non aver fatto un buon lavoro la prima volta. Mi potete aiutare? eccovi il mio log:
Process list saved on 12.23.43, on 21/08/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
[pid] [full path to filename] [file version] [company name]
152 C:\WINNT\System32\smss.exe 5.0.2195.6601 Microsoft Corporation
196 C:\WINNT\system32\winlogon.exe 5.0.2195.6714 Microsoft Corporation
228 C:\WINNT\system32\services.exe 5.0.2195.6700 Microsoft Corporation
240 C:\WINNT\system32\lsass.exe 5.0.2195.6695 Microsoft Corporation
380 C:\Programmi\Sygate\SPF\smc.exe 5.6.0.2808 Sygate Technologies, Inc.
452 C:\WINNT\system32\svchost.exe 5.0.2134.1 Microsoft Corporation
552 C:\WINNT\system32\spoolsv.exe 5.0.2195.6659 Microsoft Corporation
648 C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
660 C:\Programmi\Alwil Software\Avast4\ashServ.exe 4.7.844.0
700 C:\WINNT\System32\svchost.exe 5.0.2134.1 Microsoft Corporation
736 C:\Programmi\Network Associates\Common Framework\FrameworkService.exe 3.1.1.184 Network Associates, Inc.
892 C:\WINNT\system32\regsvc.exe 5.0.2195.6701 Microsoft Corporation
924 C:\WINNT\system32\MSTask.exe 4.71.2195.6704 Microsoft Corporation
984 C:\WINNT\System32\snmp.exe 5.0.2195.6605 Microsoft Corporation
1104 C:\WINNT\System32\WBEM\WinMgmt.exe 1.50.1085.100 Microsoft Corporation
1132 C:\WINNT\system32\svchost.exe 5.0.2134.1 Microsoft Corporation
1200 C:\WINNT\system32\svchost.exe 5.0.2134.1 Microsoft Corporation
1272 C:\WINNT\Explorer.EXE 5.0.3700.6690 Microsoft Corporation
1336 C:\Programmi\Alwil Software\Avast4\ashWebSv.exe 4.7.844.0 ALWIL Software
1044 C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe 4.7.869.0 ALWIL Software
1484 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 5.0.0.0
1584 C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe 9.8.1.0 BillP Studios
1620 C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe 1.4.0.2 Safer Networking Limited
1608 C:\WINNT\System32\svchost.exe 5.0.2134.1 Microsoft Corporation
1808 C:\Programmi\Mozilla Firefox\firefox.exe 1.8.20060.7278 Mozilla Corporation
352 C:\Programmi\Microsoft Office\Office10\WINWORD.EXE 10.0.2627.0 Microsoft Corporation
1056 C:\ANTIVIRUS E ANTISPY ECC\Hijack This\HijackThis.exe
Logfile of HijackThis v1.99.1
Scan saved at 12.24.40, on 21/08/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Programmi\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Network Associates\Common Framework\FrameworkService.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\snmp.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Microsoft Office\Office10\WINWORD.EXE
C:\ANTIVIRUS E ANTISPY ECC\Hijack This\HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = prometeo:80
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,,C:\WINNT\SERVICES.EXE
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O15 - Trusted Zone: http://www.1987324.com
O20 - Winlogon Notify: nwprovau - C:\WINNT\SYSTEM32\nwprovau.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Servizio di framework di McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Programmi\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programmi\Sygate\SPF\smc.exe
Aspetto notizie e ringrazio anticipatamente
Registrazione
