Ciao,grazie per le istruzioni ho fatto tutto quello che mi hai detto,ma Linkoptimizer nella cartella program file non l'ho trovato,metto i 2 log che mi hai detto di salvare.hai veramente tanta pazienza grazie mille
Logfile of HijackThis v1.99.1
Scan saved at 21.53.30, on 25/02/07
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAMMI\ANTIVIR PERSONALEDITION CLASSIC\SCHEDM.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAMMI\ANTIVIR PERSONALEDITION CLASSIC\AVGCTRL.EXE
C:\VEXPLITE\MONLITE.EXE
C:\PROGRAMMI\MICROSOFT OFFICE\OFFICE\OSA.EXE
C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAMMI\WINZIP\WINZIP32.EXE
C:\WINDOWS\TEMP\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.libero.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAMMI\YAHOO!\COMPANION\INSTALLS\CPN\YT.DLL
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\PROGRAMMI\YAHOO!\COMPANION\INSTALLS\CPN\YT.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMI\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAMMI\YAHOO!\COMPANION\INSTALLS\CPN\YT.DLL
O4 - HKLM\..\Run: [avgctrl] "C:\Programmi\AntiVir PersonalEdition Classic\avgctrl.exe" /min
O4 - HKLM\..\Run: [VIRIT LITE MONITOR] C:\VEXPLITE\MONLITE.EXE
O4 - HKLM\..\RunServices: [schedm] "C:\Programmi\AntiVir PersonalEdition Classic\schedm.exe"
O4 - HKCU\..\Run: [BPS Spyware Remover] C:\Programmi\AdwareCrusher.com\AdwareCrusher\SpyRem.exe
O4 - Startup: Ricerca rapida.lnk = C:\Programmi\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: Avvio Office.lnk = C:\Programmi\Microsoft Office\Office\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Cerca con Google -
res://C:\PROGRAMMI\GOOGLE\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano -
res://C:\PROGRAMMI\GOOGLE\GOOGLETOOLBAR1.DLL/cmwordtrans.html
O8 - Extra context menu item: Versione cache della pagina -
res://C:\PROGRAMMI\GOOGLE\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Pagine simili -
res://C:\PROGRAMMI\GOOGLE\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Link a ritroso -
res://C:\PROGRAMMI\GOOGLE\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAMMI\YAHOO!\MESSENGER\YPAGER.EXE (file missing)
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRAMMI\YAHOO!\MESSENGER\YPAGER.EXE (file missing)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) -
http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programmi\Yahoo!\Common\yinsthelper.dll
O18 - Protocol: msell - {E90F00EC-3694-11D2-99FE-00104B2D62CC} - C:\PROGRA~1\FILECO~1\MICROS~1\REFERE~1\MSELL.DLL
VirIT eXplorer Lite Log
[SCANSIONE DELLA MEMORIA]
OK
--------------------------------------------------------
25/02/2007 - 19:42:39
[SCANSIONE DEL REGISTRO]
{1E0DE227-5CE4-4ea3-AB0C-8B03E1AA76BC} Infetto da BHO.MyWebSearch.B
* * * RIMOSSO * * *
{07B18EA9-A523-4961-B6BB-170DE4475CCA} Infetto da BHO.MyWebSearch.B
* * * RIMOSSO * * *
[A:]
BOOT SECTOR: OK
[C:]
MASTER BOOT RECORD: OK
BOOT SECTOR: OK
C:\Programmi\MyWebSearch\bar\1.bin\MWSOEMON.EXE Infetto da AdWare.MyWebSearch
* * * RIMOSSO * * *
[D:]
[E:]
Chiavi Registro infette: 2.
Files Infetti: 1.
Files Sospetti: 0.
Files Analizzati: 32399.
Files Totali: 32399.
Chiavi Registro rimosse: 2.
Virus Rimossi: 1.
[SCANSIONE DELLA MEMORIA]
OK
--------------------------------------------------------
25/02/2007 - 21:20:33
[SCANSIONE DEL REGISTRO]
OK
[A:]
BOOT SECTOR: OK
[C:]
MASTER BOOT RECORD: OK
BOOT SECTOR: OK
C:\WINDOWS\SYSTEM\lsahhgqm.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\netgjiib.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\updpmnhq.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\dskvinpn.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\srvkcbni.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\svcpcqqx.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\hlpvejuy.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\hlpyldvt.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\sysukagc.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\updfvnkj.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\sqltksku.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\lsaapmdn.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\hlpkrqpu.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\SYSTEM\netlkcre.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
C:\WINDOWS\TEMP\e€bzaa.exe Infetto da Trojan.Win32.Agent.AOV
* * * RIMOSSO * * *
Chiavi Registro infette: 0.
Files Infetti: 15.
Files Sospetti: 0.
Files Analizzati: 32384.
Files Totali: 32384.
Chiavi Registro rimosse: 0.
Virus Rimossi: 15.
Registrazione
di eli81 » 24/02/07 15:04 