Ciao ragazzi! Uso spyware terminator, ma è già 2 volte che la protezione in tempo reale si disabilita. Riavviando il pc, tutto torna alla normalità. Forse qualche applicazione da problemi. Credo forse la voce trusted zone.. ma cos'è?Mi dareste una controllatina al log? Ciao.
Logfile of HijackThis v1.99.1
Scan saved at 18.49.41, on 11/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Firewall\Agnitum\OUTPOS~1.0\outpost.exe
G:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ANTISP~1\SPYWAR~1\sp_rsser.exe
G:\WINDOWS\system32\rundll32.exe
G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
G:\Programmi\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ANTISP~1\SPYWAR~1\SpywareTerminatorShield.exe
G:\WINDOWS\system32\ctfmon.exe
G:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
G:\WINDOWS\system32\svchost.exe
C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avguard.exe
C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\sched.exe
C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avcenter.exe
C:\Programmi\Scanjet2300\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avscan.exe
c:\Programmi\Indispensabili\WinRAR\WinRAR.exe
G:\DOCUME~1\Manuel\IMPOST~1\Temp\Rar$EX00.752\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Indispensabili\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Outpost Firewall] "c:\Programmi\Firewall\Agnitum\Outpost Firewall 1.0\outpost.exe" /waitservice
O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] G:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Programmi\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\PROGRA~1\ANTISP~1\SPYWAR~1\SpywareTerminatorShield.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] G:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "G:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Programmi\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Programmi\Messenger\msmsgs.exe
O15 - Trusted Zone: *.realsearch.cc
O17 - HKLM\System\CCS\Services\Tcpip\..\{60781879-E0EC-4C50-8C29-4606D478C6C0}: NameServer = 85.37.17.51 85.38.28.97
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "G:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: !SASWinLogon - C:\Programmi\Antispyware\SuperAntispyware\SASWINLO.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Programmi\Antivirus\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Firewall\Agnitum\OUTPOS~1.0\outpost.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\PROGRA~1\ANTISP~1\SPYWAR~1\sp_rsser.exe
Registrazione