Spyware save now...

[jhonny]

Ciao a tutti
ho fatto un active scan con panda online e mi ha dato questo report:
adware:adware/savenow (il report è nel link) http://www.pandasoftware.com/virus_info ... cion=27660
riporto il log di hijackthis..

Logfile of HijackThis v1.99.1
Scan saved at 18.46.05, on 16/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5700.0006)

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\WINDOWS\Explorer.EXE
E:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
E:\WINDOWS\system32\LVCOMSX.EXE
E:\Programmi\Logitech\Video\LogiTray.exe
E:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
E:\WINDOWS\system32\RUNDLL32.EXE
E:\WINDOWS\system32\ctfmon.exe
E:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Programmi\WinZip\WZQKPICK.EXE
E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
E:\WINDOWS\system32\nvsvc32.exe
E:\Programmi\Logitech\Video\FxSvr2.exe
E:\WINDOWS\system32\svchost.exe
E:\Programmi\Skype\Phone\Skype.exe
E:\Programmi\Internet Explorer\iexplore.exe
E:\Programmi\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
E:\Documents and Settings\Emanuele Venga\Desktop\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - E:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] E:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [LVCOMSX] E:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] E:\Programmi\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] E:\Programmi\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "E:\Programmi\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [kis] "E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE E:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Skype] "E:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [LDM] E:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = E:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = E:\Programmi\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - E:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Programmi\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 6902729468
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan ... asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{827CC7A3-4447-49C5-BF0A-BEB9899EFA4D}: NameServer = 85.37.17.12 85.38.28.79
O18 - Protocol: bw+0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - E:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {40BE7B3E-CBDE-44CB-977A-04D0D248BBED} - E:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: E:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - E:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - E:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - E:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - E:\Programmi\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - E:\WINDOWS\system32\nvsvc32.exe

il pc stranamente mi si riavvia spesso dandomi in qualche circostanza un messaggio d'errore su fondo blu con il messaggio... not less or equal ..

grazie in anticipo!!

[andorra24]

Il log di hijackthis e' pulito, non vedo nessun adware SaveNow. Potrebbe essere un falso positivo. Controlla tu stesso se hai le voci e le chiavi di registro indicate in questo link: http://www.pandasoftware.com/virus_info ... irus=40677
Se non le hai allora e' un falso positivo.

[jhonny]

Ok provvedo immediatamente grazie sei sempre molto gentile

[jhonny]

ho controllato i file e ho trovato solo la lunga lista dei readme.txt
di cui due relative alla licenza java... (riguardanti gli ultimi update).. per il resto nessuna voce del presunto file (whenUsave).... o meglio ho trovato soltanto un file SaveDump...
mi sembra normale.

[jhonny]

ho controllato i file e ho trovato solo la lunga lista dei readme.txt
di cui due relative alla licenza java... (riguardanti gli ultimi update).. per il resto nessuna voce del presunto file (whenUsave).... o meglio ho trovato soltanto un file SaveDump...
mi sembra normale.

([/b]i due file java erano in bleu scusa la grande matassa di messaggi

[andorra24]

Hai una cartella Save in C:\Programmi ? Se non l'hai allora stai tranquillo, il Panda ogni tanto prende sonore cantonate.

[jhonny]

No o controllato sia le cartelle C:\programmi e il percorso E:\ programmi non ho trovato alcuna carella relativa a save.. o altre applicazioni.
Panda oltre che prendere cantonate, per risolvere il mio presunto problema mi ha chiesto 14 dollari... allora la mia domanda è la seguente:
se avesse elencato un presunto spyware, che invece era un file di sistema leggittimo?? MAH!
grazie comunque per la tua sempre cordiale attenzione Siete dei grandi

[andorra24]

No o controllato sia le cartelle C:\programmi e il percorso E:\ programmi non ho trovato alcuna carella relativa a save.. o altre applicazioni.
Panda oltre che prendere cantonate, per risolvere il mio presunto problema mi ha chiesto 14 dollari... allora la mia domanda è la seguente:
se avesse elencato un presunto spyware, che invece era un file di sistema leggittimo?? MAH!
grazie comunque per la tua sempre cordiale attenzione Siete dei grandi

Saro' sincera, come scansione antivirus online preferisco quella di bitdefender e quella del kaspersky (che anche se non rimuove cio' che trova almeno e' molto affidabile). Il Panda mi sta poco simpatico e da' spesso falsi positivi.

[jhonny]

sai cio che penso su kaspersky cmq ora provo a fare uno scan con kaspersky online(visto che il mio antivirus KIS6 non mi rileva nulla d'anomalo)

[andorra24]

sai cio che penso su kaspersky cmq ora provo a fare uno scan con kaspersky online(visto che il mio antivirus KIS6 non mi rileva nulla d'anomalo)

Hai il KIS? Ma allora non hai nessun bisogno di fare la scansione online sul sito di kaspersky. Ce l'ho anche io il KIS 6.0

[jhonny]

sai cio che penso su kaspersky cmq ora provo a fare uno scan con kaspersky online(visto che il mio antivirus KIS6 non mi rileva nulla d'anomalo)

Hai il KIS? Ma allora non hai nessun bisogno di fare la scansione online sul sito di kaspersky. Ce l'ho anche io il KIS 6.0

Si però ho letto di recente, che alcuni malware possono influenzare, alcune protezioni di un determinato antivirus, per quello cercavo una conferma dallo stesso Antivirus Online. eheh

[andorra24]

Si però ho letto di recente, che alcuni malware possono influenzare, alcune protezioni di un determinato antivirus, per quello cercavo una conferma dallo stesso Antivirus Online. eheh

OK, uno scan in piu' non fa certo male.
Ciao.

[jhonny]

Certo! ora smetto di disturbarti e lascio lo spazio adeguato a tutti gli altri che necessitano di una tua consulenza
ti auguro buon lavoro.

[jhonny]

PS_ andando a scandagliare in internet, sono riuscito effettivamente a capire che questa "presunta" voce maligna altri non è come un falso positivo.. più passa il tempo e piu questa casa di antivirus mi delude (cominciai dai trial )

[SILVELLO10]

questo fastidioso WHENUSAVE l'ho avuto anch'io scaricando P2P LPHANT che assomiglia ad EMULE sarebbe anch'egli molto pratico alla pari di EMULE suo cugino ma......per usarlo sei costretto ad incontrare (whenUsave)..quando lo apri per la prima volta per installare LPHANT ho provato ad evitarlo ma non e' possibile l,unica cosa che ho potuto fare appena istallato LPHANT sono andato subito a togliermelo dai piedi andando nel registro del sistema .

[jhonny]

in effetti sono davvero p@llosi come (adware..ecc ecc) compaiono spessimo e sembrano ricrearsi.. io lo notai la prima volta in uno scan di sicurezza online con panda, mi spaventai però ritentando con altri av online, nessuno me lo faceva notare cosi ho pensato al falso positivo..