vista lentissimo

[m@r10]

salve a tutti,
un mio amico mi ha prestato questo portatile un celeron m520 con 1024 mb di memoria ram su cui è installato vista home basic ho installato avg e spybot s&d. Con avg ad ogni scansione mi trova nuovi virus, lo stesso con spybot ma il fatto è che va mlentissimo spybot solo per aprirsi ci mette 10 minuti e la scansione dure più di 10 ore.

vi posto il log di hijackthis:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18.22.59, on 11/10/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16711)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\AVG\AVG8\avgtray.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\OpenOffice.org 2.2\program\soffice.exe
C:\Program Files\OpenOffice.org 2.2\program\soffice.BIN
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\AVG\AVG8\avgui.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Windows\System32\mobsync.exe
C:\Users\antonio\Desktop\HiJackThis\HijackThis.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O3 - Toolbar: olnmraew - {6366459B-45A6-489C-9726-429617BB05C2} - C:\Windows\olnmraew.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SMSERIAL] C:\Program Files\Motorola\SMSERIAL\sm56hlpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [\YURE708.exe] C:\Windows\system32\YURE708.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [\YURE708.exe] C:\Windows\system32\YURE708.exe
O4 - HKCU\..\Run: [\YURF0A8.exe] C:\Windows\system32\YURF0A8.exe
O4 - HKCU\..\Run: [\YUR4456.exe] C:\Windows\system32\YUR4456.exe
O4 - HKCU\..\Run: [\YUR16B0.exe] C:\Windows\system32\YUR16B0.exe
O4 - HKCU\..\Run: [\YUR9A4E.exe] C:\Windows\system32\YUR9A4E.exe
O4 - HKCU\..\Run: [\YUR1B0E.exe] C:\Windows\system32\YUR1B0E.exe
O4 - HKCU\..\Run: [\YUR9F86.exe] C:\Windows\system32\YUR9F86.exe
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\antonio\AppData\Local\Temp\mlJBULcy.dll,c
O4 - HKCU\..\Run: [e0b0cc46] rundll32.exe "C:\Users\antonio\AppData\Local\Temp\upucrkrd.dll",b
O4 - HKCU\..\Run: [\YURE26A.exe] C:\Windows\system32\YURE26A.exe
O4 - HKCU\..\Run: [\YUR5761.exe] C:\Windows\system32\YUR5761.exe
O4 - .DEFAULT User Startup: CCC.lnk = ? (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O21 - SSODL: qmafxprs - {AFCE248B-16DD-4D09-86F5-81A6435BC2B9} - C:\Windows\qmafxprs.dll
O21 - SSODL: lfstbwvd - {1A0896D9-2250-447C-B7EF-728B449D79E1} - C:\Windows\lfstbwvd.dll
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe

--
End of file - 6806 bytes

[Jeppe]

ciao a tutti siete molto bravi complimenti.Come si sa vista e un divoratore di risorse,con la poca ram che hai sul portatile si usa molto il file di pagin quindi vista e obbligato a lavorare molto sul disco rigido,puoi fare una prova con una chiavetta usb da un GB,e provi ad attivare il readi bost usando la chiavetta come ram.La chiavetta deve essere compatibile con il redi bost,se non lo e vista te lo dice ciao.

[m@r10]

non ho mai detto di essere bravo e non ho una chiave usb

[Jeppe]

Ciao ogniuno di noi e bravo in qualcosa.dunque non hai una usb.Nemmeno una memoria tipo macchina fotografica o simili con un lettore di schede?Naturalmente qualcosa di inutilizzato dimenticato in qualche cassetto ciao.

[m@r10]

io speravo di risolvere prima il problema dei virus

[MIKI68]

Ciao sei infetto fixia queste voci:
O3 - Toolbar: olnmraew - {6366459B-45A6-489C-9726-429617BB05C2} - C:\Windows\olnmraew.dll ( infezione)
O4 - HKLM\..\Run: [\YURE708.exe] C:\Windows\system32\YURE708.exe
O4 - HKCU\..\Run: [\YUR4456.exe] C:\Windows\system32\YUR4456.exe
O4 - HKCU\..\Run: [\YUR9A4E.exe] C:\Windows\system32\YUR9A4E.exe
O4 - HKCU\..\Run: [\YUR1B0E.exe] C:\Windows\system32\YUR1B0E.exe
O4 - HKCU\..\Run: [\YUR9F86.exe] C:\Windows\system32\YUR9F86.exe
O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\antonio\AppData\Local\Temp\mlJBULcy.dll,c
O4 - HKCU\..\Run: [e0b0cc46] rundll32.exe "C:\Users\antonio\AppData\Local\Temp\upucrkrd.dll",b
O4 - HKCU\..\Run: [\YURE26A.exe] C:\Windows\system32\YURE26A.exe
O4 - HKCU\..\Run: [\YUR5761.exe] C:\Windows\system32\YUR5761.exe
O4 - .DEFAULT User Startup: CCC.lnk = ? (User 'Default user')
tutto questo in modalità provvisoria poi fai una scansione con spybot e avg e poi dopo pulisci tutto con cclaner

[m@r10]

ho deciso di formattare
anche se ho problemi a installare xp