il pc non scarica aggiornamenti!

di **melarossa90** » 02/01/10 18:20

è da un po' di tempo che il pc non scarica gli aggiornamenti da internet: non aggiorna msn, non mi permette di installare altri programmi come antivirus o qualsiasi altro programma che richiede un collegamento con internet (anche iTunes non si collega allo shop!). poichè sono senza antivirus non posso nemmeno sapere se ci sono virus o altri problemi...cosa posso fare?

di **fandango2031** » 03/01/10 15:36

Scarica combofix e fai una scansione con quello non necessità di installazione...

Ciao

di **melarossa90** » 04/01/10 16:05

mi dice che la pagina non è stata trovata!
e cmq un ulteriore esempio: quando provo ad installare avast mi dice che non può farlo e il log del setup è il seguente

Codice: Seleziona tutto: 04.01.2010 15:56:36 general: Started: 04.01.2010, 15:56:36 04.01.2010 15:56:36 system: Operating system: WindowsXP ver 5.1, build 2600, sp 2.0 [Service Pack 2] 04.01.2010 15:56:36 system: Memory: 55% load. Phys:462688/1046924K free, Page:2056212/2517380K free, Virt:2071252/2097024K free 04.01.2010 15:56:36 system: Computer WinName: NOME-A851A90108 04.01.2010 15:56:36 system: Windows Net User: NOME-A851A90108\HP_Administrator 04.01.2010 15:56:36 general: Old version: ffffffff (-1) 04.01.2010 15:56:36 system: Using temp: C:\DOCUME~1\HP_ADM~1.NOM\IMPOST~1\Temp\_av_inet.tm~a01800 (130004M free) 04.01.2010 15:56:36 internet: SYNCER: Type: use IE settings 04.01.2010 15:56:36 internet: SYNCER: Auth: another authentication, use WinInet 04.01.2010 15:56:36 general: Install check: Program folder does NOT exist in registry 04.01.2010 15:56:36 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 0 04.01.2010 15:56:38 general: progress thread start 04.01.2010 15:56:38 general: Destination: C:\DOCUME~1\HP_ADM~1.NOM\IMPOST~1\Temp\_av_inet.tm~a01800 04.01.2010 15:56:38 general: Starting download: http://www.avast.com/go.php?verb=get-avast-home&type=cnet&langid=ita 04.01.2010 15:56:39 general: Download finished from server www.avast.com, result: 0x20000006, server response: 404 04.01.2010 15:56:39 general: Stats www.avast.com, server response: 536870918 04.01.2010 15:56:43 general: POST result: 0x20000004, server response: 0

probabilmente però il problema sta nelle impostazioni di proxy o roba simile, di cui però sfortunatamente non mi intendo

di **CoLo90** » 05/01/10 11:51

probabilmente hai preso qualche virus che ti sballa qualche impostazione della rete, tipo DNS ecc

Potresti effettuare alcune scansioni online per cercare di rimuovere questo problema

http://housecall.trendmicro.com/

http://www.bitdefender.com/scan8/ie.html

Prova con questi... Il 2o funziona solo con IE

Fai anche una scansione con HijackThis e posta qua il log

per il download vai su http://free.antivirus.com/hijackthis/

di **melarossa90** » 06/01/10 17:30

ho notato che quando mi collego a siti di antivirus o ai link consigliati per scansioni mi apre l'homepage di google oppure si apre una pagina di google in cui mi dice la pagina non è stata trovata, sebbene io non usi google!

Codice: Seleziona tutto: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17.27.33, on 06/01/2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\explorer.exe C:\WINDOWS\ehome\ehtray.exe C:\WINDOWS\RTHDCPL.EXE C:\Programmi\Intel\Intel Matrix Storage Manager\Iaanotif.exe C:\Programmi\HP DigitalMedia Archive\DMAScheduler.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\rundll32.exe C:\Programmi\HP\HP Software Update\HPwuSchd2.exe C:\Programmi\Winamp\winampa.exe C:\Programmi\Garzanti Linguistica\Hazon Clic\Hazon.exe C:\Programmi\Messenger\msmsgs.exe C:\Programmi\File comuni\LightScribe\LightScribeControlPanel.exe C:\Programmi\McAfee Security Scan\1.0.150\SSScheduler.exe C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe C:\Programmi\Alice ti aiuta\bin\mpbtn.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Programmi\Java\jre6\bin\jusched.exe C:\Programmi\iTunes\iTunesHelper.exe C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Programmi\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Programmi\Java\jre6\bin\jqs.exe C:\Programmi\File comuni\LightScribe\LSSrvc.exe C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Programmi\File comuni\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\system32\svchost.exe C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe C:\Programmi\iPod\bin\iPodService.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\Programmi\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\system32\cidaemon.exe C:\WINDOWS\system32\cidaemon.exe C:\Programmi\eMule\emule.exe C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\DfrgNtfs.exe C:\Programmi\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Programmi\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.virgilio.it/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O1 - Hosts: 209.85.129.99 msnfix.changelog.fr O1 - Hosts: 209.85.129.99 www.incodesolutions.com O1 - Hosts: 209.85.129.99 virusinfo.prevx.com O1 - Hosts: 209.85.129.99 download.bleepingcomputer.com O1 - Hosts: 209.85.129.99 www.dazhizhu.cn O1 - Hosts: 209.85.129.99 foro.noticias3d.com O1 - Hosts: 209.85.129.99 www.spybotupdates.com O1 - Hosts: 209.85.129.99 club.myce.com O1 - Hosts: 209.85.129.99 www.nabble.com O1 - Hosts: 209.85.129.99 lurker.clamav.net O1 - Hosts: 209.85.129.99 lexikon.ikarus.at O1 - Hosts: 209.85.129.99 research.sunbelt-software.com O1 - Hosts: 209.85.129.99 www.virusdoctor.jp O1 - Hosts: 209.85.129.99 www.elitepvpers.de O1 - Hosts: 209.85.129.99 guru.avg.com O1 - Hosts: 209.85.129.99 downloads.sophos.com O1 - Hosts: 209.85.129.99 share.skype.com O1 - Hosts: 209.85.129.99 www.superuser.co.kr O1 - Hosts: 209.85.129.99 ntfaq.co.kr O1 - Hosts: 209.85.129.99 v.dreamwiz.com O1 - Hosts: 209.85.129.99 cit.kookmin.ac.kr O1 - Hosts: 209.85.129.99 forums.whatthetech.com O1 - Hosts: 209.85.129.99 forum.hijackthis.de O1 - Hosts: 209.85.129.99 avg.vo.llnwd.net O1 - Hosts: 209.85.129.99 ftp.drweb.com O1 - Hosts: 209.85.129.99 www.zonealarm.com O1 - Hosts: 209.85.129.99 smadaver.com O1 - Hosts: 209.85.129.99 www.huaifai.go.th O1 - Hosts: 209.85.129.99 www.mostz.com O1 - Hosts: 209.85.129.99 www.krupunmai.com O1 - Hosts: 209.85.129.99 www.cddchiangmai.net O1 - Hosts: 209.85.129.99 forum.malekal.com O1 - Hosts: 209.85.129.99 tech.pantip.com O1 - Hosts: 209.85.129.99 sapcupgrades.com O1 - Hosts: 209.85.129.99 www.elguruinformatico.com O1 - Hosts: 209.85.129.99 forums.avg.com O1 - Hosts: 209.85.129.99 zastita.com O1 - Hosts: 209.85.129.99 www.247fixes.com O1 - Hosts: 209.85.129.99 forum.sysinternals.com O1 - Hosts: 209.85.129.99 forum.telecharger.01net.com O1 - Hosts: 209.85.129.99 sophos.com O1 - Hosts: 209.85.129.99 foros.softonic.com O1 - Hosts: 209.85.129.99 avast-home.uptodown.com O1 - Hosts: 209.85.129.99 dr-web-cureit.softonic.com O1 - Hosts: 209.85.129.99 heavenward.ru O1 - Hosts: 209.85.129.99 forum.smadav.net O1 - Hosts: 209.85.129.99 www.f-secure.com O1 - Hosts: 209.85.129.99 www.chkrootkit.org O1 - Hosts: 209.85.129.99 diamondcs.com.au O1 - Hosts: 209.85.129.99 www.rootkit.nl O1 - Hosts: 209.85.129.99 www.sysinternals.com O1 - Hosts: 209.85.129.99 z-oleg.com O1 - Hosts: 209.85.129.99 espanol.dir.groups.yahoo.com O1 - Hosts: 209.85.129.99 ftp01net.telechargement.fr O1 - Hosts: 209.85.129.99 modelayu.com O1 - Hosts: 209.85.129.99 www.castlecrops.com O1 - Hosts: 209.85.129.99 www.misec.net O1 - Hosts: 209.85.129.99 safecomputing.umn.edu O1 - Hosts: 209.85.129.99 www.antirootkit.com O1 - Hosts: 209.85.129.99 www.greatis.com O1 - Hosts: 209.85.129.99 ar.answers.yahoo.com O1 - Hosts: 209.85.129.99 www.elhacker.org O1 - Hosts: 209.85.129.99 research.pandasecurity.com O1 - Hosts: 209.85.129.99 www.tpu.ro O1 - Hosts: 209.85.129.99 www.rootkit.com O1 - Hosts: 209.85.129.99 www.pctools.com O1 - Hosts: 209.85.129.99 www.pcsupportadvisor.com O1 - Hosts: 209.85.129.99 www.resplendence.com O1 - Hosts: 209.85.129.99 www.personal.psu.edu O1 - Hosts: 209.85.129.99 foro.ethek.com O1 - Hosts: 209.85.129.99 foro.elhacker.net O1 - Hosts: 209.85.129.99 download.zonealarm.com O1 - Hosts: 209.85.129.99 spywarehammer.com O1 - Hosts: 209.85.129.99 vil.nail.com O1 - Hosts: 209.85.129.99 search.mcafee.com O1 - Hosts: 209.85.129.99 wwww.mcafee.com O1 - Hosts: 209.85.129.99 download.nai.com O1 - Hosts: 209.85.129.99 wwww.experts-exchange.com O1 - Hosts: 209.85.129.99 www.bakunos.com O1 - Hosts: 209.85.129.99 www.darkclockers.com O1 - Hosts: 209.85.129.99 www2.gmer.net O1 - Hosts: 209.85.129.99 ariefew.com O1 - Hosts: 209.85.129.99 www.emsisoft.com O1 - Hosts: 209.85.129.99 www.Merijn.org O1 - Hosts: 209.85.129.99 www.spywareinfo.com O1 - Hosts: 209.85.129.99 www.spybot.info O1 - Hosts: 209.85.129.99 www.viruslist.com O1 - Hosts: 209.85.129.99 www.hijackthis.de O1 - Hosts: 209.85.129.99 ftp.f-secure.com O1 - Hosts: 209.85.129.99 forum.kaspersky.com O1 - Hosts: 209.85.129.99 es.trendmicro-europe.com O1 - Hosts: 209.85.129.99 www.hvaonline.net O1 - Hosts: 209.85.129.99 majorgeeks.com O1 - Hosts: 209.85.129.99 www.avp.com O1 - Hosts: 209.85.129.99 www.virustotal.com O1 - Hosts: 209.85.129.99 www.sophos.com O1 - Hosts: 209.85.129.99 linhadefensiva.uol.com.br O1 - Hosts: 209.85.129.99 cmmings.cn O1 - Hosts: 209.85.129.99 www.sergiwa.com O1 - Hosts: 209.85.129.99 www.el-hacker.com O1 - Hosts: 209.85.129.99 dl2.agnitum.com O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [IAAnotif] C:\Programmi\Intel\Intel Matrix Storage Manager\Iaanotif.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [DMAScheduler] "c:\Programmi\HP DigitalMedia Archive\DMAScheduler.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Programmi\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe O4 - HKLM\..\Run: [HAZON CLIC] C:\Programmi\Garzanti Linguistica\Hazon Clic\Hazon.exe -I O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Programmi\File comuni\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u O4 - HKLM\..\Run: [ctfmon.exe] ctfmon.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe" O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Programmi\File comuni\LightScribe\LightScribeControlPanel.exe -hidden O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe O4 - Global Startup: McAfee Security Scan.lnk = ? O4 - Global Startup: Service Manager.lnk = C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Guida alla connessione - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Guida alla connessione - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1252174177427 O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3B2D9E1A-4A01-4357-A019-BFB2C1939B83}: NameServer = 85.37.17.49 85.38.28.91 O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe (file missing) O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe (file missing) O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate1ca8bc539c7393a) (gupdate1ca8bc539c7393a) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing) O23 - Service: NBService - Unknown owner - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Programmi\File comuni\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Norton Protection Center Service (NSCService) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe (file missing) O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Unknown owner - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) -- End of file - 16479 bytes

di **CoLo90** » 06/01/10 21:55

Ciao, ho notato che sei infetto da un virus..

elimina queste voci con Hijack..

- C:\WINDOWS\system32\dllhost.exe
- tutte le voci che iniziano per HKCU
- O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
- O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
- O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
- O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
- O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
- O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
- O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
- O17 - HKLM\System\CCS\Services\Tcpip\..\{3B2D9E1A-4A01-4357-A019-BFB2C1939B83}: NameServer = 85.37.17.49 85.38.28.91

Spuntate le voci scritte sopra, clicca su Fix checked e riavvia il pc

Fatto questo scarica AVG 9.0 da qua:
http://free.avg.com/us-en/download?prd= ... z0brqm2s2V

e MBAM da qua:

http://download.cnet.com/Malwarebytes-A ... tag=button

Aggiornali e fai una scansione, se esce qualche malware rimuovi tutto...

Se riesci ad installare AVG e MBAM e fare le scansione, poi incolla ancora un log di Hijack...

Se in caso non riesci neanche ad installare AVG e MBAM fai sempre un log con hijack e postalo qua...

di **melarossa90** » 07/01/10 09:40

c'è un problema: hijack this riesce a fare la scansione e poi si chiude e non riesco a "fix" niente

di **melarossa90** » 07/01/10 10:05

sono riuscita ad eliminare quasi tutti i processi tranne

- C:\WINDOWS\system32\dllhost.exe
- O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
- O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')

il primo perchè nella schermata non mi compare e gli altri due perchè hijack si chiude prima che io riesca a cliccare su "fix"

ho comunque riavviato il pc e installato malware bites (per avg era impossibile connettersi al server), ma come per hijack this, dopo 10 secondi il programma si chiude....
mi chiedo se posso eliminare il file dllhost entrando nella cartella, anche perchè durante la deframmentazione lo riconosceva come un file di grandi dimensioni molto frammentato....

il log ora è questo

Codice: Seleziona tutto: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9.59.12, on 07/01/2010 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\explorer.exe C:\WINDOWS\ehome\ehtray.exe C:\Programmi\Intel\Intel Matrix Storage Manager\Iaanotif.exe C:\Programmi\HP DigitalMedia Archive\DMAScheduler.exe C:\Programmi\HP\HP Software Update\HPwuSchd2.exe C:\Programmi\Winamp\winampa.exe C:\Programmi\Garzanti Linguistica\Hazon Clic\Hazon.exe C:\WINDOWS\system32\rundll32.exe C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe C:\Programmi\Alice ti aiuta\bin\mpbtn.exe C:\HP\KBD\KBD.EXE c:\windows\system\hpsysdrv.exe C:\Programmi\Java\jre6\bin\jusched.exe C:\Programmi\iTunes\iTunesHelper.exe C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Programmi\Bonjour\mDNSResponder.exe C:\WINDOWS\system32\cisvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe C:\WINDOWS\system32\inetsrv\inetinfo.exe C:\Programmi\Java\jre6\bin\jqs.exe C:\Programmi\File comuni\LightScribe\LSSrvc.exe C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Programmi\File comuni\Nero\Nero BackItUp 4\NBService.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\snmp.exe C:\WINDOWS\system32\svchost.exe C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe C:\Programmi\iPod\bin\iPodService.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\eHome\ehmsas.exe C:\Programmi\Lavasoft\Ad-Aware\AAWTray.exe C:\Programmi\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\cidaemon.exe C:\WINDOWS\system32\cidaemon.exe C:\Programmi\Trend Micro\HijackThis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=IT_IT&c=64&bd=PAVILION&pf=desktop R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=IT_IT&c=64&bd=PAVILION&pf=desktop F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe O1 - Hosts: 209.85.129.99 msnfix.changelog.fr O1 - Hosts: 209.85.129.99 www.incodesolutions.com O1 - Hosts: 209.85.129.99 virusinfo.prevx.com O1 - Hosts: 209.85.129.99 download.bleepingcomputer.com O1 - Hosts: 209.85.129.99 www.dazhizhu.cn O1 - Hosts: 209.85.129.99 foro.noticias3d.com O1 - Hosts: 209.85.129.99 www.spybotupdates.com O1 - Hosts: 209.85.129.99 club.myce.com O1 - Hosts: 209.85.129.99 www.nabble.com O1 - Hosts: 209.85.129.99 lurker.clamav.net O1 - Hosts: 209.85.129.99 lexikon.ikarus.at O1 - Hosts: 209.85.129.99 research.sunbelt-software.com O1 - Hosts: 209.85.129.99 www.virusdoctor.jp O1 - Hosts: 209.85.129.99 www.elitepvpers.de O1 - Hosts: 209.85.129.99 guru.avg.com O1 - Hosts: 209.85.129.99 downloads.sophos.com O1 - Hosts: 209.85.129.99 share.skype.com O1 - Hosts: 209.85.129.99 www.superuser.co.kr O1 - Hosts: 209.85.129.99 ntfaq.co.kr O1 - Hosts: 209.85.129.99 v.dreamwiz.com O1 - Hosts: 209.85.129.99 cit.kookmin.ac.kr O1 - Hosts: 209.85.129.99 forums.whatthetech.com O1 - Hosts: 209.85.129.99 forum.hijackthis.de O1 - Hosts: 209.85.129.99 avg.vo.llnwd.net O1 - Hosts: 209.85.129.99 ftp.drweb.com O1 - Hosts: 209.85.129.99 www.zonealarm.com O1 - Hosts: 209.85.129.99 smadaver.com O1 - Hosts: 209.85.129.99 www.huaifai.go.th O1 - Hosts: 209.85.129.99 www.mostz.com O1 - Hosts: 209.85.129.99 www.krupunmai.com O1 - Hosts: 209.85.129.99 www.cddchiangmai.net O1 - Hosts: 209.85.129.99 forum.malekal.com O1 - Hosts: 209.85.129.99 tech.pantip.com O1 - Hosts: 209.85.129.99 sapcupgrades.com O1 - Hosts: 209.85.129.99 www.elguruinformatico.com O1 - Hosts: 209.85.129.99 forums.avg.com O1 - Hosts: 209.85.129.99 zastita.com O1 - Hosts: 209.85.129.99 www.247fixes.com O1 - Hosts: 209.85.129.99 forum.sysinternals.com O1 - Hosts: 209.85.129.99 forum.telecharger.01net.com O1 - Hosts: 209.85.129.99 sophos.com O1 - Hosts: 209.85.129.99 foros.softonic.com O1 - Hosts: 209.85.129.99 avast-home.uptodown.com O1 - Hosts: 209.85.129.99 dr-web-cureit.softonic.com O1 - Hosts: 209.85.129.99 heavenward.ru O1 - Hosts: 209.85.129.99 forum.smadav.net O1 - Hosts: 209.85.129.99 www.f-secure.com O1 - Hosts: 209.85.129.99 www.chkrootkit.org O1 - Hosts: 209.85.129.99 diamondcs.com.au O1 - Hosts: 209.85.129.99 www.rootkit.nl O1 - Hosts: 209.85.129.99 www.sysinternals.com O1 - Hosts: 209.85.129.99 z-oleg.com O1 - Hosts: 209.85.129.99 espanol.dir.groups.yahoo.com O1 - Hosts: 209.85.129.99 ftp01net.telechargement.fr O1 - Hosts: 209.85.129.99 modelayu.com O1 - Hosts: 209.85.129.99 www.castlecrops.com O1 - Hosts: 209.85.129.99 www.misec.net O1 - Hosts: 209.85.129.99 safecomputing.umn.edu O1 - Hosts: 209.85.129.99 www.antirootkit.com O1 - Hosts: 209.85.129.99 www.greatis.com O1 - Hosts: 209.85.129.99 ar.answers.yahoo.com O1 - Hosts: 209.85.129.99 www.elhacker.org O1 - Hosts: 209.85.129.99 research.pandasecurity.com O1 - Hosts: 209.85.129.99 www.tpu.ro O1 - Hosts: 209.85.129.99 www.rootkit.com O1 - Hosts: 209.85.129.99 www.pctools.com O1 - Hosts: 209.85.129.99 www.pcsupportadvisor.com O1 - Hosts: 209.85.129.99 www.resplendence.com O1 - Hosts: 209.85.129.99 www.personal.psu.edu O1 - Hosts: 209.85.129.99 foro.ethek.com O1 - Hosts: 209.85.129.99 foro.elhacker.net O1 - Hosts: 209.85.129.99 download.zonealarm.com O1 - Hosts: 209.85.129.99 spywarehammer.com O1 - Hosts: 209.85.129.99 vil.nail.com O1 - Hosts: 209.85.129.99 search.mcafee.com O1 - Hosts: 209.85.129.99 wwww.mcafee.com O1 - Hosts: 209.85.129.99 download.nai.com O1 - Hosts: 209.85.129.99 wwww.experts-exchange.com O1 - Hosts: 209.85.129.99 www.bakunos.com O1 - Hosts: 209.85.129.99 www.darkclockers.com O1 - Hosts: 209.85.129.99 www2.gmer.net O1 - Hosts: 209.85.129.99 ariefew.com O1 - Hosts: 209.85.129.99 www.emsisoft.com O1 - Hosts: 209.85.129.99 www.Merijn.org O1 - Hosts: 209.85.129.99 www.spywareinfo.com O1 - Hosts: 209.85.129.99 www.spybot.info O1 - Hosts: 209.85.129.99 www.viruslist.com O1 - Hosts: 209.85.129.99 www.hijackthis.de O1 - Hosts: 209.85.129.99 ftp.f-secure.com O1 - Hosts: 209.85.129.99 forum.kaspersky.com O1 - Hosts: 209.85.129.99 es.trendmicro-europe.com O1 - Hosts: 209.85.129.99 www.hvaonline.net O1 - Hosts: 209.85.129.99 majorgeeks.com O1 - Hosts: 209.85.129.99 www.avp.com O1 - Hosts: 209.85.129.99 www.virustotal.com O1 - Hosts: 209.85.129.99 www.sophos.com O1 - Hosts: 209.85.129.99 linhadefensiva.uol.com.br O1 - Hosts: 209.85.129.99 cmmings.cn O1 - Hosts: 209.85.129.99 www.sergiwa.com O1 - Hosts: 209.85.129.99 www.el-hacker.com O1 - Hosts: 209.85.129.99 dl2.agnitum.com O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe O4 - HKLM\..\Run: [IAAnotif] C:\Programmi\Intel\Intel Matrix Storage Manager\Iaanotif.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect O4 - HKLM\..\Run: [DMAScheduler] "c:\Programmi\HP DigitalMedia Archive\DMAScheduler.exe" O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE O4 - HKLM\..\Run: [HPBootOp] "C:\Programmi\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPwuSchd2.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe O4 - HKLM\..\Run: [HAZON CLIC] C:\Programmi\Garzanti Linguistica\Hazon Clic\Hazon.exe -I O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Programmi\File comuni\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ctfmon.exe] ctfmon.exe O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user') O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe O4 - Global Startup: Service Manager.lnk = C:\Programmi\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exe O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Guida alla connessione - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra 'Tools' menuitem: Guida alla connessione - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O16 - DPF: {0972B098-DEE9-4279-AC7E-4BAAA029102D} (PhotoboxPhotowaysUploader5 Control) - http://assets.photobox.com/assets/aurigma/ImageUploader5.cab?20090806143003 O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1252174177427 O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{3B2D9E1A-4A01-4357-A019-BFB2C1939B83}: NameServer = 85.37.17.49 85.38.28.91 O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe (file missing) O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe (file missing) O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:\Programmi\Intel\IntelDH\Intel(R) Quick Resume Technology Drivers\Elservice.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate1ca8bc539c7393a) (gupdate1ca8bc539c7393a) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\Iaantmon.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing) O23 - Service: NBService - Unknown owner - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe (file missing) O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Programmi\File comuni\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Norton Protection Center Service (NSCService) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\Security Console\NSCSRVCE.EXE (file missing) O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Unknown owner - c:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe (file missing) O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Unknown owner - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) -- End of file - 14490 bytes

di **CoLo90** » 07/01/10 10:58

è proprio dllhost.exe che crea il problema...

Guarda qua :

http://www.hwupgrade.it/forum/archive/i ... 26141.html

ora sono in ufficio... ti faccio sapere pome...Ciaoo

di **CoLo90** » 07/01/10 15:03

Ciao, Avvia windows in modalità provvisoria e prova ad eliminare le chiavi mancanti con hijack this...
Per entrare in modalità provvisoria basta che premi F8 prima della comparsa del logo di windows...

Fatto questo fai una scansione con MBAM sempre in modalità provvisoria.. elimina tutti i malware.. fatto questo riavvia in windows " normalmente " e poi

Installa AVG, aggiornalo e fai la scansione, stessa cosa con MBAM

di **melarossa90** » 07/01/10 17:29

il PC non si riavvia in modalità provvisoria, provo "modalità provvisoria in rete" o "modalità provvisoria con prompt di comandi"?

di **CoLo90** » 07/01/10 19:40

va benissimo con la rete....

di **melarossa90** » 08/01/10 16:03

il PC non si riavvià nè in modalità provvisoria
nè in modalità provvisoria con rete
nè in modalità provvisoria con prompt comandi!
:-?

di **CoLo90** » 08/01/10 20:01

che problemi ti da??... Cosa ti dice?

Dammi qualche informazione in più...

di **melarossa90** » 09/01/10 21:19

non ci sono ulteriori informazioni perchè nel momento in cui io metto invio su uno dei tre comandi il pc si riavvia!

di **CoLo90** » 10/01/10 15:24

prova con un ripristino... magari risolvi...

Altrimenti mi sa il format... :eeh:

il pc non scarica aggiornamenti!

il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Re: il pc non scarica aggiornamenti!

Topic correlati a "il pc non scarica aggiornamenti!":

Chi c’è in linea