Problema iexplorer.exe

[bocajr]

Salve a tutti e complimenti per questo magnifico forum.

Ho un problema con un file (iexplorer.exe) che si crea automaticamente quando mi connetto ad internet. Sicuramente si tratta di qualche dialer credo, ma il problema è che una volta cancellato manualmente, si ricrea automaticamente la volta successiva.
Lo trovo sempre nella cartella Documenti, in C:\Windows e in System32.
Penso che sia anche la causa del notevole rallentamento del pc che ho notato ultimamente.

Qualcuno può aiutarmi cortesemente, cerchiamo di risolverlo insieme.

Grazie a chi mi risponderà.

[bocajr]

Nessuno può aiutarmi ragazzi?
Ormai mi sta diventando impossibile navigare in santa pace, il pc si imballa sempre, penso proprio a causa di quel file che si crea automaticamente.

Posto il mio log, qualcuno può dirmi se c'è qualcosa di anomalo?

Logfile of HijackThis v1.99.1
Scan saved at 19.41.48, on 15/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Eset\nod32kui.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
C:\Programmi\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\Programmi\Digisoft AntiDialer\AntiDialer.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Programmi\File comuni\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Andrea\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programmi\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Google Toolbar Helper - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\googletoolbar1.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Programmi\TechSmith\SnagIt 7\SnagItIEAddin.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Digisoft AntiDialer.lnk = C:\Programmi\Digisoft AntiDialer\AntiDialer.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programmi\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{CB868677-4956-4DCF-B73F-1A7A91F1B95A}: NameServer = 85.37.17.9 85.38.28.75
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe


Vi prego aiutatemi

[Luke57]

Ciao, scarica systemscan (strumento di diagnosi),
http://www.suspectfile.com/systemscan
estrailo sul desktop, applicazioni e programmi chiusi, avvialo, metti la spunta a "recent files day old", imposta su 60 gg, premi "Scan". Al termine della scansione copia e incolla il report dello scan in un post.

[bocajr]

Ciao Luke, grazie per la risposta.

Ecco il report dello scan :

SystemScan - http://www.suspectfile.com - ver. 3.2.2

Running on: Windows XP PROFESSIONAL Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 15/11/2007
Time: 22.07.09

Output limited to:
-Recent files

===================== Recent files (60 days old)=====================

----- recent files in C:\
17/09/2007 14.25.37 244 byte 59 days old -- sqmnoopt13.sqm
17/09/2007 14.25.37 268 byte 59 days old -- sqmdata13.sqm
17/09/2007 18.31.52 244 byte 59 days old -- sqmnoopt14.sqm
17/09/2007 18.31.52 268 byte 59 days old -- sqmdata14.sqm
17/09/2007 18.34.49 172 byte 59 days old -- sqmnoopt15.sqm
17/09/2007 18.34.49 208 byte 59 days old -- sqmdata15.sqm
18/09/2007 16.58.30 268 byte 58 days old -- sqmdata16.sqm
18/09/2007 16.58.30 244 byte 58 days old -- sqmnoopt16.sqm
18/09/2007 22.21.21 172 byte 58 days old -- sqmnoopt17.sqm
18/09/2007 22.21.21 208 byte 58 days old -- sqmdata17.sqm
19/09/2007 23.32.54 244 byte 57 days old -- sqmnoopt18.sqm
19/09/2007 23.32.54 268 byte 57 days old -- sqmdata18.sqm
20/09/2007 13.39.41 268 byte 56 days old -- sqmdata19.sqm
20/09/2007 13.39.41 244 byte 56 days old -- sqmnoopt19.sqm
20/09/2007 16.59.32 244 byte 56 days old -- sqmnoopt00.sqm
20/09/2007 16.59.32 268 byte 56 days old -- sqmdata00.sqm
21/09/2007 16.01.16 268 byte 55 days old -- sqmdata01.sqm
21/09/2007 16.01.16 244 byte 55 days old -- sqmnoopt01.sqm
21/09/2007 19.12.00 244 byte 55 days old -- sqmnoopt02.sqm
21/09/2007 19.12.01 268 byte 55 days old -- sqmdata02.sqm
22/09/2007 08.43.09 268 byte 54 days old -- sqmdata03.sqm
22/09/2007 08.43.09 244 byte 54 days old -- sqmnoopt03.sqm
12/11/2007 19.19.14 (DIR) 0 byte 3 days old -- SportsKeeping
15/11/2007 19.35.02 (DIR) 0 byte 0 days old -- Programmi
15/11/2007 19.35.32 (DIR) 0 byte 0 days old -- WINDOWS
15/11/2007 20.35.19 402653184 byte 0 days old -- pagefile.sys
15/11/2007 20.35.20 (DIR)267964416 byte 0 days old -- hiberfil.sys
15/11/2007 22.07.09 (DIR) 0 byte 0 days old -- suspectfile

----- recent files in C:\WINDOWS\
09/10/2007 19.55.07 (DIR) 0 byte 37 days old -- Installer
10/11/2007 13.46.06 116 byte 5 days old -- NeroDigital.ini
12/11/2007 21.33.36 30 byte 3 days old -- BERLITZ.INI
13/11/2007 20.48.27 (DIR) 0 byte 2 days old -- Debug
15/11/2007 19.37.29 (DIR) 0 byte 0 days old -- system32
15/11/2007 20.34.37 32554 byte 0 days old -- SchedLgU.Txt
15/11/2007 20.34.39 1434096 byte 0 days old -- WindowsUpdate.log
15/11/2007 20.35.22 2048 byte 0 days old -- bootstat.dat
15/11/2007 20.35.44 0 byte 0 days old -- 0.log
15/11/2007 22.05.51 (DIR) 0 byte 0 days old -- Temp
15/11/2007 22.07.09 (DIR) 0 byte 0 days old -- Prefetch

----- recent files in C:\WINDOWS\Downloaded Program Files\

----- recent files in C:\WINDOWS\system\

----- recent files in C:\WINDOWS\system32\
19/10/2007 22.14.36 48 byte 27 days old -- imon1.dat
28/10/2007 11.29.38 751592 byte 18 days old -- PerfStringBackup.INI
28/10/2007 11.29.39 345382 byte 18 days old -- perfh010.dat
28/10/2007 11.29.39 311740 byte 18 days old -- perfh009.dat
28/10/2007 11.29.39 40128 byte 18 days old -- perfc009.dat
28/10/2007 11.29.39 47814 byte 18 days old -- perfc010.dat
15/11/2007 18.21.16 2206 byte 0 days old -- wpa.dbl

----- recent files in C:\WINDOWS\system32\drivers\

----- recent files in C:\WINDOWS\temp\
11/11/2007 01.40.49 110080 byte 4 days old -- NOD237.tmp
11/11/2007 01.41.05 4076 byte 4 days old -- NOD239.tmp
12/11/2007 18.56.06 110080 byte 3 days old -- NOD32D.tmp
12/11/2007 18.56.20 4526 byte 3 days old -- NOD32E.tmp
12/11/2007 19.17.32 0 byte 3 days old -- exp441.tmp
13/11/2007 20.03.25 0 byte 2 days old -- exp66B.tmp
14/11/2007 20.04.12 0 byte 1 days old -- exp721.tmp
15/11/2007 20.23.06 0 byte 0 days old -- exp332.tmp

----- recent files in C:\Programmi\
18/09/2007 18.32.37 (DIR) 0 byte 58 days old -- File comuni
18/09/2007 18.32.59 (DIR) 0 byte 58 days old -- Skype
29/09/2007 12.32.32 (DIR) 0 byte 47 days old -- Digisoft AntiDialer
29/09/2007 17.54.35 (DIR) 0 byte 47 days old -- eMule
13/11/2007 20.35.26 (DIR) 0 byte 2 days old -- CCleaner
15/11/2007 21.16.38 (DIR) 0 byte 0 days old -- Google

----- recent files in C:\Programmi\File comuni\
18/09/2007 18.32.40 (DIR) 0 byte 58 days old -- Skype

----- recent files in C:\Documents and Settings\Andrea\Dati applicazioni\
27/10/2007 14.02.13 (DIR) 0 byte 19 days old -- Microsoft
01/11/2007 13.45.01 (DIR) 0 byte 14 days old -- Skype

----- recent files in C:\DOCUME~1\Andrea\IMPOST~1\Temp\
18/09/2007 19.45.10 (DIR) 0 byte 58 days old -- VBE
15/10/2007 17.59.02 512 byte 31 days old -- IH8C3.tmp
15/10/2007 17.59.17 512 byte 31 days old -- IH8C4.tmp
15/10/2007 18.23.18 774 byte 31 days old -- IHBB5.tmp
15/10/2007 18.23.18 774 byte 31 days old -- IHBB4.tmp
19/10/2007 16.45.19 16384 byte 27 days old -- ~DF6F4E.tmp
19/10/2007 18.14.20 709 byte 27 days old -- IHB10.tmp
22/10/2007 13.19.54 16896 byte 24 days old -- Classifica Lega Calcio Pass a Pall.xls
22/10/2007 13.22.08 34304 byte 24 days old -- Lega Calcio Pass a Pall_Risultati8.xls
22/10/2007 18.04.20 16384 byte 24 days old -- ~DF880C.tmp
23/10/2007 20.59.18 9634 byte 23 days old -- IHAD4.tmp
26/10/2007 16.57.17 16384 byte 20 days old -- ~DFC143.tmp
26/10/2007 19.40.45 16384 byte 20 days old -- ~DF5E05.tmp
28/10/2007 23.37.43 9677 byte 18 days old -- IH234.tmp
29/10/2007 19.20.03 16384 byte 17 days old -- ~DFB24F.tmp
29/10/2007 22.33.22 34304 byte 17 days old -- Lega Calcio Pass a Pall_Risultati9.xls
30/10/2007 20.43.16 16384 byte 16 days old -- ~DF47D1.tmp
04/11/2007 19.45.02 16384 byte 11 days old -- ~DFE14B.tmp
05/11/2007 19.41.11 9750 byte 10 days old -- IH6A9.tmp
05/11/2007 19.41.52 512 byte 10 days old -- IH736.tmp
05/11/2007 19.44.25 512 byte 10 days old -- IH803.tmp
05/11/2007 19.44.43 512 byte 10 days old -- IH818.tmp
05/11/2007 19.50.04 12818 byte 10 days old -- control.xml
06/11/2007 20.25.56 16384 byte 9 days old -- ~DFBE3A.tmp
10/11/2007 17.34.17 16384 byte 5 days old -- ~DF73B.tmp
11/11/2007 01.38.53 711 byte 4 days old -- IH224.tmp
11/11/2007 01.40.17 769 byte 4 days old -- IH230.tmp
12/11/2007 18.55.19 3627 byte 3 days old -- IH326.tmp
12/11/2007 20.55.54 16384 byte 3 days old -- ~DF3DC7.tmp
13/11/2007 21.29.44 9750 byte 2 days old -- IH402.tmp
13/11/2007 21.29.44 9750 byte 2 days old -- IH3EF.tmp
13/11/2007 21.42.39 49152 byte 2 days old -- IH76F.tmp
13/11/2007 21.45.29 9750 byte 2 days old -- IH7E6.tmp
13/11/2007 22.17.37 9739 byte 2 days old -- IHEBA.tmp
13/11/2007 22.17.37 9739 byte 2 days old -- IHEA6.tmp
13/11/2007 22.27.11 9763 byte 2 days old -- IHF5C.tmp
13/11/2007 22.27.11 9763 byte 2 days old -- IHF5D.tmp
14/11/2007 22.54.57 16384 byte 1 days old -- ~DFDB0.tmp
14/11/2007 22.55.11 3806 byte 1 days old -- VGX1CE6.tmp
14/11/2007 22.55.12 67253 byte 1 days old -- VGX1CEA.tmp
14/11/2007 22.57.54 67253 byte 1 days old -- VGX1D05.tmp
14/11/2007 22.57.54 3806 byte 1 days old -- VGX1D04.tmp
14/11/2007 22.59.28 67253 byte 1 days old -- VGX1D18.tmp
14/11/2007 22.59.28 3806 byte 1 days old -- VGX1D17.tmp
14/11/2007 23.00.30 67253 byte 1 days old -- VGX1D1B.tmp
14/11/2007 23.00.30 3806 byte 1 days old -- VGX1D1A.tmp
14/11/2007 23.01.01 67253 byte 1 days old -- VGX1D1E.tmp
14/11/2007 23.01.01 3806 byte 1 days old -- VGX1D1D.tmp
14/11/2007 23.01.39 3806 byte 1 days old -- VGX1D31.tmp
14/11/2007 23.01.39 67253 byte 1 days old -- VGX1D30.tmp
14/11/2007 23.02.08 67253 byte 1 days old -- VGX1D33.tmp
14/11/2007 23.02.08 3806 byte 1 days old -- VGX1D34.tmp
14/11/2007 23.03.03 3806 byte 1 days old -- VGX1D37.tmp
14/11/2007 23.03.03 67253 byte 1 days old -- VGX1D36.tmp
15/11/2007 19.29.49 (DIR) 0 byte 0 days old -- __SkypeIEToolbar_Cache
15/11/2007 19.33.55 2217 byte 0 days old -- IH2ED.tmp
15/11/2007 22.07.00 16384 byte 0 days old -- ~DF72A1.tmp
15/11/2007 22.07.04 (DIR) 0 byte 0 days old -- nsa946.tmp

==========================================
Scan completed in 0 minutes
End of report

[Luke57]

Ciao, non c'è traccia dei file sospetti, utilizza ccleaner per la pulizia dei file temporanei.
Priva a fare una scansione on line così:
vai su:
http://www.kaspersky.com/service?chapter=161739400
1.Clicca su Kaspersky Online Scanner
2.Scarica un componente ActiveX da Kaspersky, Clicca su "Yes."
3.Attendi la fine del download
4.Clicca su "Next"
5.Clicca su "Scan Settings"
6.Assicurati che siano spuntate le seguenti voci
Scan using the following Anti-Virus database:
Extended
spunta le voci di "Scan options"
Scan Archives
Scan Mail Bases
7.Clicca su "OK"
8.Scegli "My computer"
Attendi la fine della scansione, se viene rilevato qualcosa salva il rapporto cliccando su "Save as Text"

Allega il rapporto in un post.

[bocajr]

Ciao, purtroppo non mi apre il link che mi hai postato.