Olimpo Informatico

[milenaferrante]

grazie di nuovo a tutti. sono passati mesi dai messaggi precedenti ma visto che avevo anch'io il problema "faccetta rossa" ho navigato un po' in giro, ho trovato voi e mi sembra davvero di aver risolto solo leggendo.

grazie mille!

vorrei però approfittare per chiedere un consiglio, se c'è qualcuno se no con calma più avanti.

mi hanno consigliato di formattare il mio disco fisso in quanto ci sono troppi virus. prima di procedere (dal momento che dovrei reinstallare tutti i programmi il che richiederebbe giorni e io ci lavoro col computer) volevo chiedervi un parere di conferma.

ho fatto il log con hijack e viene fuori così

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11.50.05, on 10/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\csrss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\ZoneLabs\vsmon.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
F:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
F:\WINDOWS\system32\pctspk.exe
F:\Programmi\Spyware Doctor\svcntaux.exe
F:\Programmi\Spyware Doctor\swdsvc.exe
F:\Programmi\Spyware Doctor\SDTrayApp.exe
F:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
F:\WINDOWS\System32\svchost.exe
F:\Programmi\TotalRecorder\TotRecSched.exe
F:\Programmi\File comuni\Real\Update_OB\realsched.exe
F:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
F:\WINDOWS\System32\sistray.EXE
F:\WINDOWS\System32\khooker.exe
F:\Programmi\QuickTime\qttask.exe
F:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
F:\Programmi\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
F:\PROGRA~1\Grisoft\AVG7\avgcc.exe
F:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe
F:\Programmi\Skype\Phone\Skype.exe
F:\Programmi\Messenger\msmsgs.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
F:\Programmi\Sony Corporation\Image Transfer\SonyTray.exe
F:\PROGRA~1\Grisoft\AVG7\avgw.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
F:\Programmi\Internet Explorer\iexplore.exe
F:\Programmi\eMule\emule.exe
F:\Programmi\Internet Explorer\iexplore.exe
F:\Programmi\Internet Explorer\iexplore.exe
F:\Programmi\ELIMINA VIRUS\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {671D112E-D291-E154-9D7B-A998BD13F1CC} - (no file)
O1 - Hosts: 205.238.40.2 www.winmx.com
O1 - Hosts: 205.238.40.2 err.winmx.com
O1 - Hosts: 205.238.40.2 c3310.z1301.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1301.winmx.com
O1 - Hosts: 82.43.224.20 c3312.z1301.winmx.com
O1 - Hosts: 209.67.209.50 c3313.z1301.winmx.com
O1 - Hosts: 212.227.64.159 c3314.z1301.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1301.winmx.com
O1 - Hosts: 67.18.233.36 c3316.z1301.winmx.com
O1 - Hosts: 82.43.224.20 c3317.z1301.winmx.com
O1 - Hosts: 209.67.209.50 c3318.z1301.winmx.com
O1 - Hosts: 212.227.64.159 c3319.z1301.winmx.com
O1 - Hosts: 205.238.40.2 c3310.z1302.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1302.winmx.com
O1 - Hosts: 82.43.224.20 c3312.z1302.winmx.com
O1 - Hosts: 209.67.209.50 c3313.z1302.winmx.com
O1 - Hosts: 212.227.64.159 c3314.z1302.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1302.winmx.com
O1 - Hosts: 67.18.233.36 c3316.z1302.winmx.com
O1 - Hosts: 82.43.224.20 c3317.z1302.winmx.com
O1 - Hosts: 209.67.209.50 c3318.z1302.winmx.com
O1 - Hosts: 212.227.64.159 c3319.z1302.winmx.com
O1 - Hosts: 82.43.224.20 c3310.z1303.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3312.z1303.winmx.com
O1 - Hosts: 82.43.224.20 c3313.z1303.winmx.com
O1 - Hosts: 67.18.233.36 c3314.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1303.winmx.com
O1 - Hosts: 82.43.224.20 c3316.z1303.winmx.com
O1 - Hosts: 67.18.233.36 c3317.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3318.z1303.winmx.com
O1 - Hosts: 82.43.224.20 c3319.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3310.z1304.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1304.winmx.com
O1 - Hosts: 82.43.224.20 c3312.z1304.winmx.com
O1 - Hosts: 209.67.209.50 c3313.z1304.winmx.com
O1 - Hosts: 212.227.64.159 c3314.z1304.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1304.winmx.com
O1 - Hosts: 67.18.233.36 c3316.z1304.winmx.com
O1 - Hosts: 82.43.224.20 c3317.z1304.winmx.com
O1 - Hosts: 209.67.209.50 c3318.z1304.winmx.com
O1 - Hosts: 212.227.64.159 c3319.z1304.winmx.com
O1 - Hosts: 205.238.40.2 c3310.z1305.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1305.winmx.com
O1 - Hosts: 82.43.224.20 c3312.z1305.winmx.com
O1 - Hosts: 209.67.209.50 c3313.z1305.winmx.com
O1 - Hosts: 212.227.64.159 c3314.z1305.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1305.winmx.com
O1 - Hosts: 67.18.233.36 c3316.z1305.winmx.com
O1 - Hosts: 82.43.224.20 c3317.z1305.winmx.com
O1 - Hosts: 209.67.209.50 c3318.z1305.winmx.com
O1 - Hosts: 212.227.64.159 c3319.z1305.winmx.com
O1 - Hosts: 205.238.40.2 c3310.z1306.winmx.com
O1 - Hosts: 67.18.233.36 c3311.z1306.winmx.com
O1 - Hosts: 82.43.224.20 c3312.z1306.winmx.com
O1 - Hosts: 209.67.209.50 c3313.z1306.winmx.com
O1 - Hosts: 212.227.64.159 c3314.z1306.winmx.com
O1 - Hosts: 205.238.40.2 c3315.z1306.winmx.com
O1 - Hosts: 67.18.233.36 c3316.z1306.winmx.com
O1 - Hosts: 82.43.224.20 c3317.z1306.winmx.com
O1 - Hosts: 209.67.209.50 c3318.z1306.winmx.com
O1 - Hosts: 212.227.64.159 c3319.z1306.winmx.com
O1 - Hosts: 205.238.40.2 c3520.z1301.winmx.com
O1 - Hosts: 67.18.233.36 c3521.z1301.winmx.com
O1 - Hosts: 82.43.224.20 c3522.z1301.winmx.com
O1 - Hosts: 209.67.209.50 c3523.z1301.winmx.com
O1 - Hosts: 212.227.64.159 c3524.z1301.winmx.com
O1 - Hosts: 205.238.40.2 c3525.z1301.winmx.com
O1 - Hosts: 67.18.233.36 c3526.z1301.winmx.com
O1 - Hosts: 82.43.224.20 c3527.z1301.winmx.com
O1 - Hosts: 209.67.209.50 c3528.z1301.winmx.com
O1 - Hosts: 212.227.64.159 c3529.z1301.winmx.com
O1 - Hosts: 205.238.40.2 c3520.z1302.winmx.com
O1 - Hosts: 67.18.233.36 c3521.z1302.winmx.com
O1 - Hosts: 82.43.224.20 c3522.z1302.winmx.com
O1 - Hosts: 209.67.209.50 c3523.z1302.winmx.com
O1 - Hosts: 212.227.64.159 c3524.z1302.winmx.com
O1 - Hosts: 205.238.40.2 c3525.z1302.winmx.com
O1 - Hosts: 67.18.233.36 c3526.z1302.winmx.com
O1 - Hosts: 82.43.224.20 c3527.z1302.winmx.com
O1 - Hosts: 209.67.209.50 c3528.z1302.winmx.com
O1 - Hosts: 212.227.64.159 c3529.z1302.winmx.com
O1 - Hosts: 205.238.40.2 c3520.z1303.winmx.com
O1 - Hosts: 67.18.233.36 c3521.z1303.winmx.com
O1 - Hosts: 82.43.224.20 c3522.z1303.winmx.com
O1 - Hosts: 209.67.209.50 c3523.z1303.winmx.com
O1 - Hosts: 212.227.64.159 c3524.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3525.z1303.winmx.com
O1 - Hosts: 67.18.233.36 c3526.z1303.winmx.com
O1 - Hosts: 82.43.224.20 c3527.z1303.winmx.com
O1 - Hosts: 209.67.209.50 c3528.z1303.winmx.com
O1 - Hosts: 212.227.64.159 c3529.z1303.winmx.com
O1 - Hosts: 205.238.40.2 c3520.z1304.winmx.com
O1 - Hosts: 67.18.233.36 c3521.z1304.winmx.com
O1 - Hosts: 82.43.224.20 c3522.z1304.winmx.com
O1 - Hosts: 209.67.209.50 c3523.z1304.winmx.com
O1 - Hosts: 212.227.64.159 c3524.z1304.winmx.com
O1 - Hosts: 205.238.40.2 c3525.z1304.winmx.com
O1 - Hosts: 67.18.233.36 c3526.z1304.winmx.com
O1 - Hosts: 82.43.224.20 c3527.z1304.winmx.com
O1 - Hosts: 209.67.209.50 c3528.z1304.winmx.com
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - F:\Programmi\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} - F:\WINDOWS\system32\HDBHO.dll
O2 - BHO: (no name) - {0453A9C3-6214-43C5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0AF24C15-D0FB-CA16-D31D-A81855AAC4EF} - (no file)
O2 - BHO: (no name) - {0D834E16-D8FA-CA26-D31D-A81855AAC4EF} - (no file)
O2 - BHO: (no name) - {10B26E30-F885-C241-8E29-DC7F131F819F} - (no file)
O2 - BHO: (no name) - {11DE3D5E-E842-6BFD-D056-16550BA7796E} - (no file)
O2 - BHO: (no name) - {17B13B35-FED1-C34D-8C29-DC7F131F869B} - (no file)
O2 - BHO: (no name) - {187311AB-891B-92F9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {198B6252-B917-3CF1-D654-16550BF07F37} - (no file)
O2 - BHO: (no name) - {19DA6651-E947-6CF3-8650-16550BA92F69} - (no file)
O2 - BHO: (no name) - {1CDD3C0C-B215-3FA1-8552-16550BF0293B} - (no file)
O2 - BHO: (no name) - {1F0312A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F0313A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F0411A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F0612A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F7013A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F7213A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F7313A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F7411A8-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {1F7566AB-811A-92C9-31ED-A778D332D6BA} - (no file)
O2 - BHO: (no name) - {321D1579-D0C2-EB09-C87B-A998BD14F3C9} - (no file)
O2 - BHO: (no name) - {3410ECB4-5A24-3AF4-0230-2800B7CC8B93} - (no file)
O2 - BHO: (no name) - {3415ECB4-5A24-3AF4-0230-2800B7CC8B93} - (no file)
O2 - BHO: (no name) - {341A9B92-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341A9B97-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341B9B97-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341C93E5-5F5B-09AD-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341CE092-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341D9A97-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341DE092-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341DE792-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341E9592-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341EE092-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341EE692-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {341EE792-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {3468E092-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {34699592-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {3469E192-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {346D9B92-5E5C-38D0-7A96-7295CEA3DF9B} - (no file)
O2 - BHO: (no name) - {36016B7B-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {3602197A-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {36066B7B-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {3607187F-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {3673187B-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {3675657B-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {367A657F-A6BE-9D31-C5DB-D35FF2C7DECA} - (no file)
O2 - BHO: (no name) - {37726478-A7BC-DC44-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {37A7ADA4-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37A9ADA4-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AAACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AAD6A0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37ABACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37ABADA4-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37ACACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37ACD5A0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37ADACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AEACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AEADA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AEADA4-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AFA4D6-3844-47BB-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AFACA0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37AFADA4-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37D9A3A0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {37DBA3A0-3943-76CA-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {382B3E2A-ACC0-C251-98DF-838ADDA4FD99} - (no file)
O2 - BHO: (no name) - {3A30AEFB-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A37AFFA-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A40AAFA-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A43AFFA-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A43D9FB-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A45DBFB-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A46AFFA-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A47D2FF-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {3A4CD9FB-4F4E-09C6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {40006509-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40016B0D-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40016C09-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40016C0A-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40021908-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40056509-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40066B09-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {4007180D-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40071F09-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40711809-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40711D09-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40721909-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40731809-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40741809-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40756509-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40761909-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {40771909-A6BE-E430-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {41ABADD6-3943-0FCB-38A5-11837FBDFCCB} - (no file)
O2 - BHO: (no name) - {41ADACD2-3943-0FCB-38A5-11837FBDFCCB} - (no file)
O2 - BHO: (no name) - {41AFA4A4-3844-3EBA-38A5-11837FBDFCCB} - (no file)
O2 - BHO: (no name) - {41AFACD2-3943-0FCB-38A5-11837FBDFCCB} - (no file)
O2 - BHO: (no name) - {4210ECC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {421291C6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4215E2E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {4215EAC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4215ECC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4216EAC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4217EAC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {421895E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {42189AE5-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {42189BE5-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {4218E2E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {4219E2E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421A9BE0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421A9BE5-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421B9BE5-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421C9397-5F5B-70AC-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421C9BE0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421CE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421CE7E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421D94E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421D9AE5-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421DE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421DE7E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421E95E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421EE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421EE6E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421EE7E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {421FE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {4263EFC6-5A24-43F5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4268E0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426995E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {4269E1E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426AE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426AE1E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426D9BE0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426DE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426FE0E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {426FE7E0-5E5C-41D1-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {45169BC2-2124-43C5-0246-2800B4CD8BE2} - (no file)
O2 - BHO: (no name) - {4530D9FF-3438-09F6-3C55-3931C7CAFFBC} - (no file)
O2 - BHO: (no name) - {456991E5-255C-41E9-7AE0-7295CDA2DFEA} - (no file)
O2 - BHO: (no name) - {47066E0D-DDBE-E400-C5AD-D35FF1C6DEBB} - (no file)
O2 - BHO: (no name) - {481134D8-755B-F80D-1977-D807C1B2764C} - (no file)
O2 - BHO: (no name) - {49DAA6A4-3135-76FE-38D3-11837CBCFCBA} - (no file)
O2 - BHO: (no name) - {4A8C615B-E947-3BFD-D103-16550BF2726C} - (no file)
O2 - BHO: (no name) - {4C40AA88-4F4E-70C7-3C23-3931C4CBFFCD} - (no file)
O2 - BHO: (no name) - {4C47D28D-4F4E-70C7-3C23-3931C4CBFFCD} - (no file)
O2 - BHO: (no name) - {4C4CD38D-4F4E-70C7-3C23-3931C4CBFFCD} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - F:\PROGRA~1\ELIMIN~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PHP Designer Toolbar Helper - {588869E0-6C28-400a-8A1A-2A099E41CE9B} - F:\Programmi\PHP DESIGNER Toolbar\v2.0.0.5\PHP_Designer_Toolbar.dll
O2 - BHO: (no name) - {5EB9E85E-7ABE-3E0C-986B-5FA71F48C3B3} - (no file)
O2 - BHO: (no name) - {671D112E-D291-E154-9D7B-A998BD13F1CC} - (no file)
O2 - BHO: (no name) - {697213DA-811A-EBC8-319B-A778D033D6CB} - (no file)
O2 - BHO: (no name) - {697566D9-811A-EBC8-319B-A778D033D6CB} - (no file)
O2 - BHO: (no name) - {719F94A5-0173-76FE-38D3-11837CBCFCBA} - (no file)
O2 - BHO: CleanMyPCPopupBlocker Class - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - F:\Programmi\CleanMyPC Popup Blocker\CleanBHO.dll
O2 - BHO: (no name) - {87C26EF5-F31C-C4D9-4D86-865A61394697} - (no file)
O2 - BHO: (no name) - {88CC9044-5DFF-4B4C-DF3F-7FC5397810B0} - (no file)
O2 - BHO: (no name) - {8B254E13-8BFD-CB4B-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C213D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C213E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C214513-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C214917-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C214A17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C223D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C224513-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C233D13-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C233E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C234513-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C503916-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C503E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C504C61-82FB-FA0E-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C513916-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C523A16-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C523D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C523E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C543D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C543E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C553D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C554A17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C563D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C564917-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C573D13-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C573D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C574917-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C583E17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C593916-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C593D17-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {8C594513-83FC-CB7F-D54C-FD1D854040B0} - (no file)
O2 - BHO: (no name) - {903AAE0D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {9047D508-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904AA90D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904BA80D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904CA90D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904DA80D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904DA90D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904DAA0D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904DAE0D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904EA90D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904EAF0D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904ED50D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {904FAF0D-40B1-0138-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {973ADE08-3BB1-0100-9ED2-34819CC55FB4} - (no file)
O2 - BHO: (no name) - {9AB8FBD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9AB98DD4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ABC89D4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ABC8BD4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9AC4FED7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9AC989D4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACAFCD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACBFAD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACCFCD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACDF8A6-3163-19C6-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACDFCD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACE89D4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACE8DD4-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACEF8D7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9ACEFCD7-3064-28B3-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {9DB8FAD4-3864-2883-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {A08024B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08025B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08026B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08126B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08826B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08926B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08926C1-ED00-98A5-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08955B6-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08A26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08A27B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08B26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08B27B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08C26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08C27B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08D24B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08D26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08D53B6-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08E26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08F26B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A08F53B6-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A0F825B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A0FB24B7-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A0FC55B3-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A0FF50B6-EC07-A9D8-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {A174B513-29F0-3917-D593-00A2DFF467E0} - (no file)
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {B2307C69-E7D5-804E-872D-C93EC72274C7} - (no file)
O2 - BHO: (no name) - {C6892314-E8F2-D867-A0DF-96CB299B08C1} - (no file)
O2 - BHO: (no name) - {CD8C2C48-EBA0-8C60-F7DF-96CB289D0D97} - (no file)
O2 - BHO: (no name) - {D68826C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68926C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D6892FC1-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68A26C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68A27C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68C26C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68D26C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68F26C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D68F53C4-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D6FB24C5-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D6FC55C1-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D6FF50C4-EC07-D0D9-2225-9C5B52296193} - (no file)
O2 - BHO: (no name) - {D7882EC6-ED05-91A4-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {DEFC24B3-E071-A9E0-2253-9C5B512861E2} - (no file)
O2 - BHO: (no name) - {E64AA97F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64BA87F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64CA97F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64DA87F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64DAE7F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64EA97F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {E64FAF7F-40B1-7839-9EA4-34819FC45FC5} - (no file)
O2 - BHO: (no name) - {ECC989A6-3064-51B2-4411-1A5342F25697} - (no file)
O2 - BHO: (no name) - {ECCBFAA5-3064-51B2-4411-1A5342F25697} - (no file)
O2 - BHO: (no name) - {ECCEF8A5-3064-51B2-4411-1A5342F25697} - (no file)
O2 - BHO: (no name) - {EDCCF0A1-3166-10C7-4467-1A5341F356E6} - (no file)
O2 - BHO: (no name) - {FA213D65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA214561-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA233D61-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA234561-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA504C13-82FB-830F-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA523D65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA523E65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA543D65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA543E65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA553D65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA573D65-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FA574965-83FC-B27E-D53A-FD1D864140C1} - (no file)
O2 - BHO: (no name) - {FB514466-82FE-F30F-D54C-FD1D854040B0} - (no file)
O3 - Toolbar: (no name) - {0A2C467A-9FD8-B524-1644-DE4F38E9E913} - (no file)
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - F:\Programmi\CleanMyPC Popup Blocker\CleanBar.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Programmi\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: PHP Designer Toolbar - {1DA183EF-8E1B-4a18-B927-CAB06B60FA46} - F:\Programmi\PHP DESIGNER Toolbar\v2.0.0.5\PHP_Designer_Toolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [zlobbw] F:\WINDOWS\System32\wpcgsf.exe
O4 - HKLM\..\Run: [TotalRecorderScheduler] F:\Programmi\TotalRecorder\TotRecSched.exe
O4 - HKLM\..\Run: [TkBellExe] "F:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\sisUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] F:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] F:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [SDTray] "F:\Programmi\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "F:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "F:\Programmi\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ZoneAlarm Client] "F:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [TotalAnnihilatorPro] "F:\Programmi\Solidlabs Technology\Total Annihilator Pro\Total Annihilator Pro.exe"
O4 - HKCU\..\Run: [Spyware Assassin v.4.0] "F:\Programmi\Spyware Assassin 4.0\Spyware Assassin.exe"
O4 - HKCU\..\Run: [Skype] "F:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [NBJ] "F:\Programmi\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Mzwlcwhf] F:\WINDOWS\system32\HKNTFS~1.EXE
O4 - HKCU\..\Run: [MSMSGS] "F:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "F:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] F:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = F:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = F:\Programmi\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Image Transfer.lnk = ?
O8 - Extra context menu item: Append to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\WINDOWS\System32\msjava.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: HiDownload - {F4FBA929-A891-492C-A0F6-5C79CC4F1742} - F:\PROGRA~1\HIDOWN~1\hidownload.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://F:\Programmi\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/21d7a2b0fa212c62d218/netzip/RdxIE601_it.cab
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
O20 - AppInit_DLLs: mad.dll
O23 - Service: Adobe LM Service - Unknown owner - F:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - F:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - F:\WINDOWS\system32\pctspk.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - F:\Programmi\WinPcap\rpcapd.exe
O23 - Service: sasrfc Service (sasrfcService) - Unknown owner - F:\Programmi\SAS Institute\SAS\V8\access\sasexe\sasrfc.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - F:\Programmi\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - F:\Programmi\Spyware Doctor\swdsvc.exe
O23 - Service: SentinelProtectionServer - SafeNet, Inc - F:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - F:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 36360 bytes

che faccio?

grazie mille in anticipo a tutti,

milena


edit: corretto il log da bdoriano

[bdoriano]

Ciao milenaferrante,

prima di darti delle indicazioni, dovresti dire se usi WinMX.

PS1: se vuoi, puoi presentarti qui

PS2: con che programma hai salvato il log? Se hai usato il blocco note, disattiva l' a capo automatico.

[milenaferrante]

[bdoriano]

Disabilita il ripristino di sistema e avvia il pc in modalità provvisoria
esegui hijackthis
clicca su do a system scan only
metti il segno di spunta a queste voci:
(non mettere il segno di spunta alle voci in rosso, se le conosci)

[milenaferrante]

ecco il nuovo log.
domanda pre-consulenza: ma come si fa a diventare bravi come voi??

grazie!

milena


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23.50.42, on 11/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\csrss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\system32\ZoneLabs\vsmon.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
F:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
F:\WINDOWS\system32\pctspk.exe
F:\Programmi\Spyware Doctor\svcntaux.exe
F:\Programmi\Spyware Doctor\swdsvc.exe
F:\Programmi\Spyware Doctor\SDTrayApp.exe
F:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
F:\WINDOWS\System32\svchost.exe
F:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe
F:\Programmi\TotalRecorder\TotRecSched.exe
F:\Programmi\File comuni\Real\Update_OB\realsched.exe
F:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
F:\WINDOWS\System32\sistray.EXE
F:\WINDOWS\System32\khooker.exe
F:\Programmi\QuickTime\qttask.exe
F:\PROGRA~1\Grisoft\AVG7\avgcc.exe
F:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
F:\Programmi\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
F:\Programmi\Skype\Phone\Skype.exe
F:\Programmi\Messenger\msmsgs.exe
F:\WINDOWS\system32\ctfmon.exe
F:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
F:\Programmi\Sony Corporation\Image Transfer\SonyTray.exe
F:\PROGRA~1\MOZILL~1\FIREFOX.EXE
F:\Programmi\ELIMINA VIRUS\HiJackThis.exe
F:\WINDOWS\System32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - F:\Programmi\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: PHP Designer Toolbar Helper - {588869E0-6C28-400a-8A1A-2A099E41CE9B} - F:\Programmi\PHP DESIGNER Toolbar\v2.0.0.5\PHP_Designer_Toolbar.dll
O2 - BHO: CleanMyPCPopupBlocker Class - {7A9BC6B1-7F27-47c6-A66D-13582E81E537} - F:\Programmi\CleanMyPC Popup Blocker\CleanBHO.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: CleanMyPC Toolbar - {04164EC4-1E48-4279-818E-3721931E7636} - F:\Programmi\CleanMyPC Popup Blocker\CleanBar.dll
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - F:\Programmi\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: PHP Designer Toolbar - {1DA183EF-8E1B-4a18-B927-CAB06B60FA46} - F:\Programmi\PHP DESIGNER Toolbar\v2.0.0.5\PHP_Designer_Toolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [ZoneAlarm Client] "F:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [TotalRecorderScheduler] F:\Programmi\TotalRecorder\TotRecSched.exe
O4 - HKLM\..\Run: [TkBellExe] "F:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] F:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [SiSUSBRG] F:\WINDOWS\sisUSBrg.exe
O4 - HKLM\..\Run: [SiS Tray] F:\WINDOWS\System32\sistray.EXE
O4 - HKLM\..\Run: [SiS KHooker] F:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [SDTray] "F:\Programmi\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [QuickTime Task] "F:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [AVG7_CC] F:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Adobe Photo Downloader] "F:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "F:\Programmi\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [Skype] "F:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [NBJ] "F:\Programmi\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [Mzwlcwhf] F:\WINDOWS\system32\HKNTFS~1.EXE
O4 - HKCU\..\Run: [MSMSGS] "F:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "F:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] F:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Acrobat Speed Launcher.lnk = ?
O4 - Global Startup: Adobe Acrobat Synchronizer.lnk = F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = F:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = F:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Google Updater.lnk = F:\Programmi\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Image Transfer.lnk = ?
O8 - Extra context menu item: Append to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://F:\Programmi\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://207.188.7.150/21d7a2b0fa212c62d218/netzip/RdxIE601_it.cab
O16 - DPF: {814EA0DA-E0D9-4AA4-833C-A1A6D38E79E9} (DASWebDownload Class) - http://das.microsoft.com/activate/cab/x86/i486/NTANSI/retail/DASAct.cab
O23 - Service: Adobe LM Service - Unknown owner - F:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - F:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - F:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - F:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Macromedia Licensing Service - Macromedia - F:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - F:\WINDOWS\system32\pctspk.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - NetGroup - Politecnico di Torino - F:\Programmi\WinPcap\rpcapd.exe
O23 - Service: sasrfc Service (sasrfcService) - Unknown owner - F:\Programmi\SAS Institute\SAS\V8\access\sasexe\sasrfc.exe
O23 - Service: Spyware Doctor Auxiliary Service (sdAuxService) - PC Tools - F:\Programmi\Spyware Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service (sdCoreService) - PC Tools - F:\Programmi\Spyware Doctor\swdsvc.exe
O23 - Service: SentinelProtectionServer - SafeNet, Inc - F:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - F:\WINDOWS\system32\ZoneLabs\vsmon.exe

--
End of file - 9734 bytes

[bdoriano]

Gli abbiamo dato una bella sfoltita.
Ci sono ancora un paio di voci strane.

Fai anche questi passaggi:
Scansione con FindAWF
Scansione con GMER

[Smjert]