aiuto! grazie

[arsinus]

ciao ragazzi, purtroppo ho lo stesso probblema. Vi posto lo scan di HijackThis. Ringrazio in anticipo tutti.

kThis v1.99.1
Scan saved at 10.16.52, on 26/04/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\MSupdate.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\winscntrl.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\explorer.exe
C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programmi\Analog Devices\SoundMAX\Smax4.exe
C:\WINNT\Anvshell.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINNT\system32\nero.exe
C:\WINNT\system32\spoolsvc.exe
C:\WINNT\system32\internat.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\WINNT\system32\dcomcfg.exe
C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\WINNT\system32\taskmgr.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Administrator\Impostazioni locali\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.1987324.com?299
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: Shell=explorer.exe "C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00018.exe"
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programmi\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Anvshell] C:\WINNT\Anvshell.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Wxp4] C:\WINNT\system32\Norton Update.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Win2KService] C:\WINNT\system32\nero.exe
O4 - HKLM\..\Run: [Quatro] C:\WINNT\SYSTEM32\peraljam.exe
O4 - HKLM\..\Run: [Evcqve] vaecrs.exe
O4 - HKLM\..\Run: [Systems] C:\WINNT\system32\spoolsvc.exe
O4 - HKLM\..\RunServices: [Evcqve] vaecrs.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Evcqve] vaecrs.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: CAMEDIA Master.lnk = C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O15 - Trusted Zone: http://www.1987324.com
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.compani ... 3_18_0.cab
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: Serv-U FTP Server (Serv-U) - Cat Soft - C:\WINNT\system32\MSupdate.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe

[Luke57]

Ciao, fai prima una scansione on line qui:
http://www.bitdefender.com/scan8/ie.html
poi riposta un log. Mi sembra di aver visto diverse infezioni, un bell'assortimento variegato

[fabrizius]

Ciao,
che vuol dire lo stesso problema?
dovresti essere piu preciso/a nel dirci che problemi hai,...e mettere anche un titolo piu attinente al problema e meno generico....
Non si puo pretendere di mettere un log sul forum,senza nessuna spiegazione e dire ecco il mio log controllatemelo....per controllarlo puoi farlo direttamente tu su questo sito...

[arsinus]

Chiedo scusa questo post era destinato al topic che parla dell'icona e1xplorer e finestra verde archiviosex.

ancora mille sciuse.

[fabrizius]

Ciao
non era un rimprovero,era solo per farti capire che in quel modo:
1/ chi vuole aiutarti fà fatica a capire come farlo precisamente...
2/chi avrà il tuo stesso problema e farà una ricerca nel forum,il tuo post non lo troverà mai a causa del titolo troppo generico,
3/le possibilità che avrai di risolvere il problema saranno molte di meno,e i consigli che ti saranno dati sicuramente meno precisi ..

[arsinus]

ciao Luke57 ecco la scan che ho fatto con bitdefender. Grazie per l'aiuto
BitDefender Online Scanner



Scan report generated at: Wed, Apr 26, 2006 - 12:40:15





Scan path: A:\;C:\;D:\;E:\;F:\;







Statistics

Time
00:29:32

Files
168086

Folders
1789

Boot Sectors
3

Archives
1042

Packed Files
32336




Results

Identified Viruses
20

Infected Files
364

Suspect Files
12

Warnings
0

Disinfected
0

Deleted Files
675




Engines Info

Virus Definitions
372058

Engine build
AVCORE v1.0 (build 2292) (i386) (Mar 3 2005 11:57:29)

Scan plugins
13

Archive plugins
39

Unpack plugins
4

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\countrydial.exe
Infected with: GenPack:Trojan.Downloader.Tibs.CE

C:\countrydial.exe
Disinfection failed

C:\countrydial.exe
Delete failed

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Suspected of: Generic.Malware.Ysp.A555C3DE

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Disinfection failed

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Deleted

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\MicroPlugIn.lnk
Update failed

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\WinMoviePlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.2\AUTO_299_N.exe
Infected with: BehavesLike:Trojan.TrustedZone

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\WinMoviePlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.2\AUTO_299_N.exe
Disinfection failed

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\WinMoviePlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.2\AUTO_299_N.exe
Deleted

C:\Documents and Settings\Administrator\Dati applicazioni\Microsoft\Internet Explorer\Quick Launch\WinMoviePlugIn.lnk
Update failed

C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
Infected with: Trojan.Dialer.HC

C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
Disinfection failed

C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
Delete failed

C:\Documents and Settings\Administrator\Desktop\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Suspected of: Generic.Malware.Ysp.A555C3DE

C:\Documents and Settings\Administrator\Desktop\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Disinfection failed

C:\Documents and Settings\Administrator\Desktop\MicroPlugIn.lnk=>C:\WINNT\Downloaded Program Files\CONFLICT.6\adulto.exe
Deleted

C:\Documents and Settings\Administrator\Desktop\MicroPlugIn.lnk
Updated

C:\Documents and Settings\Administrator\Desktop\Passe-partout.lnk=>C:\WINNT\Passe-partout.exe
Infected with: Trojan.Dialer.AR

C:\Documents and Settings\Administrator\Desktop\Passe-partout.lnk=>C:\WINNT\Passe-partout.exe
Disinfection failed

C:\Documents and Settings\Administrator\Desktop\Passe-partout.lnk=>C:\WINNT\Passe-partout.exe
Deleted

C:\Documents and Settings\Administrator\Desktop\Passe-partout.lnk
Update failed

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\4AEY0IC2\sgru[1].htm
Infected with: Exploit.Html.Codebase.Exec.Gen

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\4AEY0IC2\sgru[1].htm
Disinfection failed

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\4AEY0IC2\sgru[1].htm
Deleted

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\IXZ4J67V\sgru[1].exe
Infected with: Trojan.Dialer.HC

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\IXZ4J67V\sgru[1].exe
Disinfection failed

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\IXZ4J67V\sgru[1].exe
Deleted

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\Q0XM0ZGY\adulto[1].exe
Suspected of: Generic.Malware.Ysp.A555C3DE

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\Q0XM0ZGY\adulto[1].exe
Disinfection failed

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\Q0XM0ZGY\adulto[1].exe
Deleted

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\TJ4SQTBC\files[1].htm
Infected with: Exploit.Html.Codebase.Exec.Gen

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\TJ4SQTBC\files[1].htm
Disinfection failed

C:\Documents and Settings\Administrator\Impostazioni locali\Temporary Internet Files\Content.IE5\TJ4SQTBC\files[1].htm
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80000.VBN=>(Quarantine-PE)
Infected with: Trojan.Proxy.Ranky.EI

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03E80002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03EC0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03EC0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03EC0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03EC0001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03EC0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F00001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40000.VBN=>(Quarantine-PE)
Infected with: Backdoor.SDBot.DEDAF446

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F40003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F80000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F80000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F80000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F80001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03F80001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03FC0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03FC0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03FC0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03FC0001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03FC0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04040001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080000.VBN=>(Quarantine-PE)
Infected with: MemScan:Trojan.IpcScan.1.50

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04080004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\040C0002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04100003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140006.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04180003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\041C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\041C0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\041C0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\041C0001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\041C0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200004.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200004.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200006.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200006.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04200006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240000.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240006.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240007.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240007.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240007.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240008.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04240008.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280000.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280002.VBN=>(Quarantine-PE)
Infected with: Trojan.PWS.Sinowal.J

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04280005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0005.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0005.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0006.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0006.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0007.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0007.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\042C0007.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04300004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340004.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340004.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340006.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340007.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340007.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340007.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340008.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340008.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340008.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340009.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340009.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04340009.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0434000A.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0434000A.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380005.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380005.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380006.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380006.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380007.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380007.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380008.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04380008.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\043C0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04400002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04440000.VBN=>(Quarantine-PE)
Infected with: Trojan.PWS.Sinowal.J

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04440000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04440000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04440001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04440001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B00003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40000.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80004.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80004.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80006.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80006.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80007.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80007.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80008.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80008.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B80008.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0001.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0001.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0006.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04BC0006.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00000.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00000.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00000.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00001.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00001.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00002.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00002.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00002.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00003.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00003.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00004.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00004.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00004.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00005.VBN=>(Quarantine-PE)
Infected with: Trojan.StartPage.II

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00005.VBN=>(Quarantine-PE)
Disinfection failed

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00005.VBN=>(Quarantine-PE)
Deleted

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04C00006.VBN=>(Quarantine-PE)
Infected with: Trojan.Clicker.Small.KR

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine

[Luke57]

Ciao, riposta un log di hijackthis

[arsinus]

ciao, ecco il log di HijacThis

Logfile of HijackThis v1.99.1
Scan saved at 13.36.24, on 26/04/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\MSupdate.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\explorer.exe
C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programmi\Analog Devices\SoundMAX\Smax4.exe
C:\WINNT\Anvshell.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINNT\system32\nero.exe
C:\WINNT\system32\spoolsvc.exe
C:\WINNT\system32\internat.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
c:\countrydial.exe
C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
C:\PROGRA~1\Alice\ALICEE~1\app\EnterNet.exe
C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Administrator\Impostazioni locali\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: Shell=explorer.exe "C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00021.exe"
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programmi\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Anvshell] C:\WINNT\Anvshell.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Wxp4] C:\WINNT\system32\Norton Update.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Win2KService] C:\WINNT\system32\nero.exe
O4 - HKLM\..\Run: [Quatro] C:\WINNT\SYSTEM32\peraljam.exe
O4 - HKLM\..\Run: [Evcqve] vaecrs.exe
O4 - HKLM\..\Run: [Systems] C:\WINNT\system32\spoolsvc.exe
O4 - HKLM\..\Run: [Olympic] C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
O4 - HKLM\..\RunServices: [Evcqve] vaecrs.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Evcqve] vaecrs.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: CAMEDIA Master.lnk = C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O15 - Trusted Zone: http://www.1987324.com
O15 - Trusted Zone: http://www.sgrunt.biz
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.compani ... 3_18_0.cab
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: Serv-U FTP Server (Serv-U) - Cat Soft - C:\WINNT\system32\MSupdate.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing)

[Luke57]

Ciao, il lavoro è lungo, speriamo di non aver saltato qualcosa:
Con hijackthis, clicca “open the misc tools section”, “open process manager”, cerca ed evidenzia questi processi:
C:\WINNT\system32\MSupdate.exe
C:\WINNT\system32\spoolsvc.exe
c:\countrydial.exe
C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
Premi kill process
Torni al menu principale con back, premi scan, cerchi e spunti:
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://search.yahoo.com/search?p=%s
F2 - REG:system.ini: Shell=explorer.exe "C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00021.exe
O4 - HKLM\..\Run: [Quatro] C:\WINNT\SYSTEM32\peraljam.exe
O4 - HKLM\..\Run: [Evcqve] vaecrs.exe
O4 - HKLM\..\Run: [Systems] C:\WINNT\system32\spoolsvc.exe
O4 - HKLM\..\Run: [Olympic] C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe
O4 - HKLM\..\RunServices: [Evcqve] vaecrs.exe
O4 - HKCU\..\Run: [Evcqve] vaecrs.exe
Le voci 015
O23 - Service: Serv-U FTP Server (Serv-U) - Cat Soft - C:\WINNT\system32\MSupdate.exe
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing)
Premi fix checked
Vai su:
start>esegui>sc stop Serv-U (lo scrivi nello spazio)>OK
start>esegui>sc delete Serv-U (lo scrivi nello spazio)>OK
start>esegui>sc stop wins (lo scrivi nello spazio)>OK
start>esegui>sc delete wins (lo scrivi nello spazio)>OK
Riavvia in modalità provvisoria
( Avviare il computer.Subito dopo il calcolo della RAM e prima che inizi a caricarsi Windows, iniziare a premere ripetutamente il tasto F8 sulla tastiera. Continuare a farlo fino a visualizzare il menu Opzioni avanzate di Windows. Usando i tasti freccia sulla tastiera, scorrere le opzioni e selezionare il menu Modalità Provvisoria, quindi premere Invio)
Rendi visibili file e cartelle nascosti (vai in start>impostazioni>pannello di controllo>opzioni cartella, e clicca su "visualizzazione". Seleziona "visualizza file e cartelle nascosti", "visualizza il contenuto delle cartelle di sistema" e deseleziona "nascondi file protetti e di sistema". Clicca su OK., cerchi ed elimini i seguenti file ( alcuni potrebbero non esserci):
C:\WINNT\system32\MSupdate.exe
C:\WINNT\system32\spoolsvc.exe
c:\countrydial.exe
C:\Documents and Settings\Administrator\Dati applicazioni\sgrunt\IE4321.exe--- >tutta la cartella
C:\WINNT\SYSTEM32\peraljam.exe
vaecrs.exe (da cercare)
C:\WINNT\system32\MSupdate.exe
C:\WINNT\system32\winscntrl.exe
"C:\Programmi\File comuni\Microsoft Shared\Web Folders\ibm00021.exe
Poi elimina tutti i file temporanei di windows (temp e tmp, fai così start>cerca>tutti i file e cartelle, nello spazio bianco “nome del file o parte del nome” copi : *.temp; *.tmp ed elimini tutti quelli trovati), da opzioni internet cancelli tutti i file temporanei di IE ( anche quelli non in linea), cronologia, cookies.
Svuoti il cestino.
Da pannello di controllo, installazioni\applicazioni, cerchi ed elimini tutti i programmi che non hai installato tu
Posta nuovo log per controllo

[arsinus]

Ciao ecco la nuova scansione, per ora sembra tutto ok. Grazie mille.

Logfile of HijackThis v1.99.1
Scan saved at 16.01.39, on 26/04/2006
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINNT\System32\nvsvc32.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINNT\system32\MSTask.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\Explorer.EXE
C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Programmi\Analog Devices\SoundMAX\Smax4.exe
C:\WINNT\Anvshell.exe
C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe
C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINNT\system32\internat.exe
C:\WINNT\system32\RUNDLL32.EXE
C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Administrator\Impostazioni locali\Temp\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.yahoo.com/search/ie.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\WINNT\Downloaded Program Files\ycomp5_3_18_0.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programmi\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [Anvshell] C:\WINNT\Anvshell.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [CreateCD50] "C:\Programmi\File comuni\Adaptec Shared\CreateCD\CreateCD50.exe" -r
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Programmi\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [Wxp4] C:\WINNT\system32\Norton Update.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Win2KService] C:\WINNT\system32\nero.exe
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: CAMEDIA Master.lnk = C:\Programmi\OLYMPUS\CAMEDIA Master 4.2\CM_camera.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.compani ... 3_18_0.cab
O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: Serv-U FTP Server (Serv-U) - Unknown owner - C:\WINNT\system32\MSupdate.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing)

[Luke57]

Ciao, mi era sfuggito questo:
O4 - HKLM\..\Run: [Wxp4] C:\WINNT\system32\Norton Update.exe
fissalo con hijackthis e poi elimina, dalla provvisoria, il file
associato C:\WINNT\system32\Norton Update.exe
Per eliminare i seguenti servizi, prova a fare:
start>esegui>services.msc (lo scrivi nello spazio)>OK
cerchi
Serv-U FTP Server o (Serv-U)
wins(WINS) o (wins)
se sono avviati, li arresti cliccandoci sopra con il dx e poi da proprietà scegli disabilitato. Fissi poi le seguenti voci con hijackthis :
O23 - Service: Serv-U FTP Server (Serv-U) - Unknown owner - C:\WINNT\system32\MSupdate.exe (file missing
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINNT\system32\winscntrl.exe (file missing