Condividi:        

modem o virus?

Se il modem non funziona, hai problemi con la scheda video o non sai che processore scegliere entra qui!!

Moderatori: m.paolo, Caffey

modem o virus?

Postdi billyray65 » 30/09/06 15:17

Ciao a tutti. A dire la verità non so qual'era il forum più adatto per questo mio problema.
Quando avvio la connessione tramite il modem esterno adsl, sento (e vedo in visualizza risorse di rete) che il modem interno quello a 56k tenta di effettuare la connessione. Farà circa una decina di tentativi rapidissimi senza dare la possibilità di essere fermato. A scanso di brutte sorprese sulla bolletta telefonica, ho scollegato il cavo che lo collega alla linea. Solo al termine dei tentativi, è possibile riavviare la connessione adsl che poi funziona regolarmente.
Ecco il log di Hijack this. Spero possa essere di aiuto.

Logfile of HijackThis v1.99.1
Scan saved at 16.02.34, on 30/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Trust\305KS\Keyboard\MMKEYBD.EXE
C:\Programmi\Picasa2\PicasaMediaDetector.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\Temp\yxoh2.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\unzipped\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.yahoo.com/
R3 - Default URLSearchHook is missing
O1 - Hosts: 3466709097 com.org
O1 - Hosts: 3466690378 view.atdmt.com
O1 - Hosts: 3466690378 click.atdmt.com
O1 - Hosts: 3466690378 leader.linkexchange.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Class - {8F70F007-3CBC-E33A-5DD9-A5210C94ECFD} - C:\WINDOWS\hgidh1.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O4 - HKLM\..\Run: [FLMK08KB] C:\Programmi\Trust\305KS\Keyboard\MMKEYBD.EXE
O4 - HKLM\..\Run: [SlipStream] "C:\Programmi\SlipStream Web Accelerator\slipcore.exe"
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Programmi\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [CnxTrApp] rundll32.exe "C:\Programmi\Aethra\ADSL EB1070 USB\CnxTrApp.dll",AppEntry -REG "Aethra\ADSL EB1070 USB"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [yxoh2.exe] C:\WINDOWS\Temp\yxoh2.exe
O4 - Global Startup: EPSON Status Monitor 3 Environment Check 2.lnk = C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV02.EXE
O4 - Global Startup: SlipStream Web Accelerator.lnk = C:\Programmi\SlipStream Web Accelerator\slipgui.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Google Search - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Programmi\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Programmi\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Programmi\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Programmi\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {239FE8DF-BCC3-4B07-AB21-C2DA7E26A208} - http://mufxggfi.com/07d3c927/50400/1/xp/RealTeens.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v ... 3106435198
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/gamdr-it/itd/games3.cab
O16 - DPF: {BB1B5064-1496-4E40-A80D-EFF7C5A953A6} - http://207.234.185.217/italy_vdem.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{6718830D-1BE6-4568-8634-7AB2D132783D}: NameServer = 85.37.17.52 85.38.28.92
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: LogXcl - Unknown owner - \\?\C:\Programmi\File comuni\System\com5.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
billyray65
Newbie
 
Post: 9
Iscritto il: 03/09/06 14:29

Sponsor
 

Postdi iarwain » 30/09/06 16:59

potrebbe essere un dialer che tenta di connettersi, ho controllato il tuo log di hijackthis e qualcosa che non va c'è
cancella:


C:\WINDOWS\Temp\yxoh2.exe
R3 - Default URLSearchHook is missing -
O1 - Hosts: 3466709097 com.org -
O1 - Hosts: 3466690378 view.atdmt.com -
O1 - Hosts: 3466690378 click.atdmt.com -
O1 - Hosts: 3466690378 leader.linkexchange.com -
O2 - BHO: Class - {8F70F007-3CBC-E33A-5DD9-A5210C94ECFD} - C:\WINDOWS\hgidh1.dll -

O4 - HKLM\..\Run: [yxoh2.exe] C:\WINDOWS\Temp\yxoh2.exe -


O16 - DPF: {239FE8DF-BCC3-4B07-AB21-C2DA7E26A208} - http://mufxggfi.com/07d3c927/50400/1/xp/RealTeens.cab -

O16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/gamdr-it/itd/games3.cab -
O16 - DPF: {BB1B5064-1496-4E40-A80D-EFF7C5A953A6} - http://207.234.185.217/italy_vdem.CAB -
O17
O23 - Service: LogXcl - Unknown owner - \\?\C:\Programmi\File comuni\System\com5.exe (file missing) -

ciao
iarwain
Utente Junior
 
Post: 37
Iscritto il: 30/09/06 13:28
Località: roma

Postdi iarwain » 30/09/06 16:59

lo 017 no..
iarwain
Utente Junior
 
Post: 37
Iscritto il: 30/09/06 13:28
Località: roma


Torna a Assistenza Hardware


Topic correlati a "modem o virus?":

Modem senza fili
Autore: merymery
Forum: Reti, ADSL e wireless
Risposte: 1

Chi c’è in linea

Visitano il forum: Nessuno e 40 ospiti