per favore aiutatemi

[macariog]

allora scusatemi ancora...

ho provato a collegare il mio telefonino al pc usandolo come modem....e la connessione cmq non andava....questo vuol dire ke il problema non è fastweb...

ho disinstallato il service pack2 e ora eccomi qui ke scrivo dal mio pc...senza alcun blocco di connessione...

non so ke fare.....ora posto la nuova scansione di hijackthis

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 12.03.45, on 13/06/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\WINDOWS\system32\csrs.exe
C:\Programmi\Nokia\Nokia Software Launcher\NSLauncher.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\System32\qnjdoonp.exe
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programmi\File comuni\PCSuite\Services\ServiceLayer.exe
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\User\Desktop\HiJackThis_v2.exe
c:\it.exe
C:\WINDOWS\System32\regsvr32.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {8A61098D-612B-4EF2-943D-64E920684061} - C:\WINDOWS\System32\vtusppp.dll (file missing)
O2 - BHO: (no name) - {E12BFF69-38A7-406e-A8EF-2738107A7831} - C:\WINDOWS\System32\hiuxiwan.dll (file missing)
O2 - BHO: (no name) - {F368D4E4-79B5-4377-A270-221107E5DC8B} - C:\WINDOWS\System32\ssttu.dll (file missing)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [ConfigSafe] C:\CFGSAFE\NTFSCLUP.EXE
O4 - HKLM\..\Run: [CSScheduleCheck] C:\CFGSAFE\SCHWIZEX.EXE -CHECK
O4 - HKLM\..\Run: [Client Server Runtime Process] C:\WINDOWS\System32\csrs.exe
O4 - HKLM\..\Run: [Windows Servce Agent] qnjdoonp.exe
O4 - HKLM\..\Run: [GPLv3] rundll32.exe "C:\WINDOWS\System32\ocbnaixb.dll",realset
O4 - HKLM\..\Run: [NSLauncher] C:\Programmi\Nokia\Nokia Software Launcher\NSLauncher.exe /startup
O4 - HKLM\..\RunServices: [Windows Servce Agent] qnjdoonp.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Windows Servce Agent] qnjdoonp.exe
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: mvftgbg.exe
O4 - Startup: up.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 1591253623
O20 - AppInit_DLLs: c:\windows\system32\sstqqop.dll
O20 - Winlogon Notify: khfdbby - C:\WINDOWS\SYSTEM32\khfdbby.dll
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\File comuni\PCSuite\Services\ServiceLayer.exe

--
End of file - 3665 bytes

[Luke57]

Ciao, sei super infetto:

Avvia il file avenger.exe
Seleziona l'opzione "Input Script Manually"
Clicca sulla lente di ingrandimento

Ti si apre una finestra "View/edit script"
All'interno del box bianco,copia e incolla (ctrl+V) le scritte in neretto:

registry keys to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8A61098D-612B-4EF2-943D-64E920684061}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F368D4E4-79B5-4377-A270-221107E5DC8B}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E12BFF69-38A7-406e-A8EF-2738107A7831}
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\khfdbby


registry values to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | Windows Servce Agent
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | Client Server Runtime Process
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | GPLv3]

Files to delete:
C:\WINDOWS\system32\csrs.exe
C:\WINDOWS\System32\qnjdoonp.exe
C:\WINDOWS\System32\vtusppp.dll
C:\WINDOWS\System32\hiuxiwan.dll
C:\WINDOWS\System32\ssttu.dll
C:\WINDOWS\System32\ocbnaixb.dll
C:\WINDOWS\SYSTEM32\khfdbby.dll
c:\windows\system32\sstqqop.dll


Clicca sul pulsante Done
Clicca sull'icona del semaforo verde
Rispondi due volte Yes
Il pc dovrebbe riavviarsi da solo,se così non fosse riavvialo manualmente


Il programma rilascia un log con le operazioni eseguite.

Posta il log di Avenger (C:/avenger.txt) con l´esito dello script.

Poi apri hijackthis, premi "do a system scan only", cerca e spunta le voci seguenti:
O4 - HKCU\..\Run: [Windows Servce Agent] qnjdoonp.exe
O4 - HKLM\..\RunServices: [Windows Servce Agent] qnjdoonp.exe
O4 - Startup: mvftgbg.exe
O4 - Startup: up.exe
O20 - AppInit_DLLs: c:\windows\system32\sstqqop.dll

premi fix checked.




Posta nuovo log di hijackthis.