Problema Ukash, mi date una mano please? :)

[helios1981]

Salve, sono nuovo del forum

Purtroppo ho un problema con Ukash...

Posto i due log ottenuti con OTL

OTL.Txt

e

Extras.Txt


Qualcuno mi può aiutare per favore?

[helios1981]

non c'è nessuno che mi può dare una mano?

io non ci capisco nulla...

[Luke57]

Ciao, un pò di pazienza.....
elimina il file in neretto dalla esecuzione automatica, C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\ctfmon.lnk

poi apri Otl.exe e copia/incolla le scritte in neretto nel Custom Scans/Fixes.

:OTL
O4 - HKLM..\Run: [UsrnFPcdSIpWJA.exe] C:\Documents and Settings\All Users\Dati applicazioni\UsrnFPcdSIpWJA.exe File not found
O4 - HKU\S-1-5-21-1275210071-1844237615-682003330-1003..\Run: [2W6JUGZDUF7W0VXEICIXGRWD] C:\Recycle.Bin\B6232F3AFC2.exe /q File not found
O4 - HKU\S-1-5-21-1275210071-1844237615-682003330-1003..\Run: [cacaoweb] C:\Programmi\cacaoweb\cacaoweb.exe ()
O4 - HKU\S-1-5-21-1275210071-1844237615-682003330-1003..\Run: [hs31ufv5t9] C:\Documents and Settings\Proprietario\hs31ufv5t9.exe ()
[2012/08/02 04.08.15 | 000,001,616 | ---- | M] () -- C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\ctfmon.lnk

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]


Clicca su Run Fix e dai Ok. Potrebbe essere richiesto un riavvio, accetta.
Si aprirà un report, salvalo ed allegalo.

[helios1981]

Grazie mille...

ecco il log...

All processes killed
========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UsrnFPcdSIpWJA.exe deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1275210071-1844237615-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\2W6JUGZDUF7W0VXEICIXGRWD deleted successfully.
Registry value HKEY_USERS\S-1-5-21-1275210071-1844237615-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\cacaoweb deleted successfully.
C:\Programmi\cacaoweb\cacaoweb.exe moved successfully.
Registry value HKEY_USERS\S-1-5-21-1275210071-1844237615-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run\\hs31ufv5t9 deleted successfully.
C:\Documents and Settings\Proprietario\hs31ufv5t9.exe moved successfully.
File C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\ctfmon.lnk not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 49554 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Proprietario
->Temp folder emptied: 90510630 bytes
->Temporary Internet Files folder emptied: 228927664 bytes
->Java cache emptied: 6783297 bytes
->FireFox cache emptied: 524902595 bytes
->Flash cache emptied: 2848727 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 3654918 bytes
%systemroot%\System32 .tmp files removed: 2885 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 12044313 bytes
RecycleBin emptied: 91104 bytes

Total Files Cleaned = 830,00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Default User

User: LocalService

User: NetworkService

User: Proprietario
->Flash cache emptied: 0 bytes

Total Flash Files Cleaned = 0,00 mb


OTL by OldTimer - Version 3.2.55.0 log created on 08022012_131903

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF818D.tmp not found!
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF819A.tmp not found!
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8269.tmp not found!
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8276.tmp not found!
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8389.tmp not found!
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8396.tmp not found!
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\google_it[1].txt moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\InboxLight[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\resourcespreload[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\search[2].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\siCAOKVFI7.htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\si[5].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\adloader[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\AjaxHistoryFrame[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\LocalStorage[1].htm moved successfully.
File\Folder C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\posting[1].htm not found!
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\search[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\xmlProxy[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\ads[8].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\direct;auc.8523239755895067545;ai.213962924.249379793;ac.1343770738-21243540;wi.300;hi.250;cp.0[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\flextag[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\tt[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\viewtopic[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\xmlProxy[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\default[2].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\EditMessageLight[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\flextag[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\Messenger[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\RteFrame_16.2.6148.0723[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\search[1].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\search[2].htm moved successfully.
C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\xmlProxy[1].htm moved successfully.

PendingFileRenameOperations files...
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF818D.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF819A.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8269.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8276.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8389.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temp\~DF8396.tmp not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\google_it[1].txt not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\InboxLight[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\resourcespreload[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\search[2].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\siCAOKVFI7.htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\Z20UFV5W\si[5].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\adloader[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\AjaxHistoryFrame[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\LocalStorage[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\posting[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\search[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\RPKF531I\xmlProxy[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\ads[8].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\direct;auc.8523239755895067545;ai.213962924.249379793;ac.1343770738-21243540;wi.300;hi.250;cp.0[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\flextag[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\tt[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\viewtopic[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\HBLVOT0Q\xmlProxy[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\default[2].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\EditMessageLight[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\flextag[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\Messenger[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\RteFrame_16.2.6148.0723[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\search[1].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\search[2].htm not found!
File C:\Documents and Settings\Proprietario\Impostazioni locali\Temporary Internet Files\Content.IE5\25FHD79W\xmlProxy[1].htm not found!

Registry entries deleted on Reboot...

[helios1981]

ma... adesso così è stato risolto?

[Luke57]

Se è risolto lo devi dire tu...controlla se è presente in esecuzione automatica il file in neretto; se presente, eliminalo.C:\Documents and Settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\ctfmon.lnk

[helios1981]

no... adesso il pc sembra funzionare tranquillamente... e il file non è più presente...

solo... mi chiedevo... ma quello che ho manualmente eliminato non è il "collegamento" al file infetto... invece che il file stesso?