Ciao a tutti, siccome non sono esperto potete darci un'occhiata e indicarmi cosa eliminare?
Il log è completo.
Grazie ciao
Logfile of HijackThis v1.99.0
Scan saved at 17.21.35, on 22/07/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAMMI\FILE COMUNI\SYMANTEC SHARED\CCEVTMGR.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMI\FILE COMUNI\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAMMI\AVPERSONAL\AVGCTRL.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\CMMON32.EXE
C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
C:\UNZIPPED\HIJACKTHIS\HIJACKTHIS.EXE
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\rsfwk.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.libero.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\rsfwk.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\rsfwk.dll/sp.html#12047
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\rsfwk.dll/sp.html#12047
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\rsfwk.dll/sp.html#12047
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
F1 - win.ini: run=hpfsched
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMI\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O2 - BHO: GDS module - {A084A565-B09B-4e4c-A497-7CC50AEAB2A7} - C:\WINDOWS\GDS5.DLL (file missing)
O2 - BHO: Class - {8A71C47B-9917-B588-625B-79254D40A325} - C:\WINDOWS\IEHA32.DLL (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programmi\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Programmi\File comuni\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
O4 - HKLM\..\Run: [IEXPLORE.EXE] C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
O4 - HKLM\..\Run: [JAVAQO32.EXE] C:\WINDOWS\SYSTEM\JAVAQO32.EXE
O4 - HKLM\..\Run: [SDKEQ32.EXE] C:\WINDOWS\SYSTEM\SDKEQ32.EXE
O4 - HKLM\..\Run: [CRSL.EXE] C:\WINDOWS\SYSTEM\CRSL.EXE
O4 - HKLM\..\Run: [NTWF.EXE] C:\WINDOWS\NTWF.EXE
O4 - HKLM\..\Run: [NTDK32.EXE] C:\WINDOWS\SYSTEM\NTDK32.EXE
O4 - HKLM\..\Run: [MSFS32.EXE] C:\WINDOWS\SYSTEM\MSFS32.EXE
O4 - HKLM\..\Run: [NETJN32.EXE] C:\WINDOWS\SYSTEM\NETJN32.EXE
O4 - HKLM\..\Run: [MSVV.EXE] C:\WINDOWS\SYSTEM\MSVV.EXE
O4 - HKLM\..\Run: [IEMG32.EXE] C:\WINDOWS\SYSTEM\IEMG32.EXE
O4 - HKLM\..\Run: [NTYX32.EXE] C:\WINDOWS\NTYX32.EXE
O4 - HKLM\..\Run: [MSQU32.EXE] C:\WINDOWS\MSQU32.EXE
O4 - HKLM\..\Run: [MSAO32.EXE] C:\WINDOWS\SYSTEM\MSAO32.EXE
O4 - HKLM\..\Run: [ADDDQ.EXE] C:\WINDOWS\ADDDQ.EXE
O4 - HKLM\..\Run: [SDKCS.EXE] C:\WINDOWS\SDKCS.EXE
O4 - HKLM\..\Run: [ADDRX32.EXE] C:\WINDOWS\SYSTEM\ADDRX32.EXE
O4 - HKLM\..\Run: [AVGCtrl] C:\PROGRAMMI\AVPERSONAL\AVGCTRL.EXE /min
O4 - HKLM\..\Run: [AVSCHED32] C:\PROGRAMMI\AVPERSONAL\AVSCHED32.EXE /min
O4 - HKLM\..\Run: [NETCG32.EXE] C:\WINDOWS\NETCG32.EXE
O4 - HKLM\..\Run: [CRAT.EXE] C:\WINDOWS\CRAT.EXE
O4 - HKLM\..\Run: [JAVAJH.EXE] C:\WINDOWS\SYSTEM\JAVAJH.EXE
O4 - HKLM\..\Run: [SYSBG32.EXE] C:\WINDOWS\SYSTEM\SYSBG32.EXE
O4 - HKLM\..\Run: [SDKRS32.EXE] C:\WINDOWS\SYSTEM\SDKRS32.EXE
O4 - HKLM\..\Run: [NTKU32.EXE] C:\WINDOWS\SYSTEM\NTKU32.EXE
O4 - HKLM\..\Run: [WINCS.EXE] C:\WINDOWS\SYSTEM\WINCS.EXE
O4 - HKLM\..\Run: [SYSEA32.EXE] C:\WINDOWS\SYSEA32.EXE
O4 - HKLM\..\Run: [MSGK.EXE] C:\WINDOWS\SYSTEM\MSGK.EXE
O4 - HKLM\..\Run: [ADDEK32.EXE] C:\WINDOWS\ADDEK32.EXE
O4 - HKLM\..\Run: [IEGZ32.EXE] C:\WINDOWS\IEGZ32.EXE
O4 - HKLM\..\Run: [APIBU.EXE] C:\WINDOWS\SYSTEM\APIBU.EXE
O4 - HKLM\..\Run: [ADDPS32.EXE] C:\WINDOWS\ADDPS32.EXE
O4 - HKLM\..\Run: [CRBW.EXE] C:\WINDOWS\CRBW.EXE
O4 - HKLM\..\Run: [WINCG.EXE] C:\WINDOWS\SYSTEM\WINCG.EXE
O4 - HKLM\..\Run: [APINF.EXE] C:\WINDOWS\SYSTEM\APINF.EXE
O4 - HKLM\..\Run: [MSRV.EXE] C:\WINDOWS\SYSTEM\MSRV.EXE
O4 - HKLM\..\Run: [ATLFE.EXE] C:\WINDOWS\SYSTEM\ATLFE.EXE
O4 - HKLM\..\Run: [NETKS32.EXE] C:\WINDOWS\NETKS32.EXE
O4 - HKLM\..\Run: [APPWZ.EXE] C:\WINDOWS\SYSTEM\APPWZ.EXE
O4 - HKLM\..\Run: [ATLIY.EXE] C:\WINDOWS\SYSTEM\ATLIY.EXE
O4 - HKLM\..\Run: [ADDAV32.EXE] C:\WINDOWS\SYSTEM\ADDAV32.EXE
O4 - HKLM\..\Run: [IEUP.EXE] C:\WINDOWS\SYSTEM\IEUP.EXE
O4 - HKLM\..\Run: [WINWF32.EXE] C:\WINDOWS\WINWF32.EXE
O4 - HKLM\..\Run: [SDKBC.EXE] C:\WINDOWS\SYSTEM\SDKBC.EXE
O4 - HKLM\..\Run: [ATLDR.EXE] C:\WINDOWS\SYSTEM\ATLDR.EXE
O4 - HKLM\..\Run: [APPQC32.EXE] C:\WINDOWS\SYSTEM\APPQC32.EXE
O4 - HKLM\..\Run: [NTVE.EXE] C:\WINDOWS\SYSTEM\NTVE.EXE
O4 - HKLM\..\Run: [IPPU.EXE] C:\WINDOWS\SYSTEM\IPPU.EXE
O4 - HKLM\..\Run: [CRXC.EXE] C:\WINDOWS\CRXC.EXE
O4 - HKLM\..\Run: [SDKIO32.EXE] C:\WINDOWS\SDKIO32.EXE
O4 - HKLM\..\Run: [ATLGG.EXE] C:\WINDOWS\ATLGG.EXE
O4 - HKLM\..\Run: [IEAU.EXE] C:\WINDOWS\SYSTEM\IEAU.EXE
O4 - HKLM\..\Run: [JAVAPW.EXE] C:\WINDOWS\JAVAPW.EXE
O4 - HKLM\..\Run: [JAVABT32.EXE] C:\WINDOWS\SYSTEM\JAVABT32.EXE
O4 - HKLM\..\Run: [IPOL.EXE] C:\WINDOWS\IPOL.EXE
O4 - HKLM\..\Run: [CRGE.EXE] C:\WINDOWS\SYSTEM\CRGE.EXE
O4 - HKLM\..\Run: [NETTO.EXE] C:\WINDOWS\SYSTEM\NETTO.EXE
O4 - HKLM\..\Run: [SDKNL32.EXE] C:\WINDOWS\SYSTEM\SDKNL32.EXE
O4 - HKLM\..\Run: [IPNN.EXE] C:\WINDOWS\IPNN.EXE
O4 - HKLM\..\Run: [IPFZ.EXE] C:\WINDOWS\SYSTEM\IPFZ.EXE
O4 - HKLM\..\Run: [JAVAWP.EXE] C:\WINDOWS\JAVAWP.EXE
O4 - HKLM\..\Run: [APILV.EXE] C:\WINDOWS\SYSTEM\APILV.EXE
O4 - HKLM\..\Run: [JAVAYL.EXE] C:\WINDOWS\SYSTEM\JAVAYL.EXE
O4 - HKLM\..\Run: [ATLGW.EXE] C:\WINDOWS\ATLGW.EXE
O4 - HKLM\..\Run: [APIGY.EXE] C:\WINDOWS\APIGY.EXE
O4 - HKLM\..\Run: [ICSMGR] ICSMGR.EXE
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ATIGART] c:\ati\gart\atigart.exe
O4 - HKLM\..\RunServices: [Machine Debug Manager] C:\WINDOWS\SYSTEM\MDM.EXE
O4 - HKLM\..\RunServices: [PersFw] "C:\Programmi\Kerio\Personal Firewall\persfw.exe" /hide
O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Programmi\File comuni\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [D3KT32.EXE] C:\WINDOWS\SYSTEM\D3KT32.EXE /s
O4 - HKLM\..\RunServices: [IPUL.EXE] C:\WINDOWS\IPUL.EXE /s
O4 - Startup: SkyServer.lnk = C:\Programmi\Modem SAT\bin\SkyServer.exe
O4 - Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
Registrazione
