Condividi:        

HELP: PC LENTO :(

Come rimuovere virus e spyware? Le carte di credito sono davvero sicure in rete? È possibile navigare anonimi? Con quali programmi tutelare la propria privacy? Come proteggere i file importanti? Se volete una risposta a queste e altre domande questo è il luogo giusto!

Moderatori: m.paolo, kadosh, Luke57

HELP: PC LENTO :(

Postdi KRAST77 » 03/03/09 20:58

Salve a tutti
Il mio pc è lentissimo sia online e sia offline
è un core duo 2400, ram 3giga, winxp, hd360giga
ho nod32, outpost firewall, ad-aware
Il mio problema è che oltre ad essere lentissimo, non mi fa aggiornare l'antirus e lo spyware.. non mi fa scaricare gli antivirus/spyware ecc dai propri siti. risultano tutti offline.
questo è la scansione con hijackthis se può essere utile:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20.27.38, on 03/03/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Programmi\M-Audio\M-Audio Series II MIDI\MA_CMIDI_Inst.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\DeltTray.exe
C:\WINDOWS\system32\GSICON.EXE
C:\WINDOWS\system32\dslagent.exe
C:\Programmi\Winamp\winampa.exe
C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\Programmi\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
C:\Programmi\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\DOCUME~1\Nando\IMPOST~1\Temp\Rar$EX00.109\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

http://tifosidelnapoli.forumfree.net/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer =

210.0.202.30:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Supporto di collegamento per Adobe PDF Reader -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File

comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} -

C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -

C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} -

C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} -

C:\PROGRA~1\FlashGet\fgiebar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE

C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [DeltTray] DeltTray.exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe"

-osboot
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader

8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File

comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe"

-onlytray
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO

LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI

RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Scarica con FlashGet - C:\Programmi\FlashGet\jc_link.htm
O8 - Extra context menu item: Scarica tutto con FlashGet - C:\Programmi\FlashGet\jc_all.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -

C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -

C:\PROGRA~1\FlashGet\flashget.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://www.update.microsoft.com/windows ... te.cab?118

5049707375
O17 - HKLM\System\CCS\Services\Tcpip\..\{36B6A0E3-079A-4311-A89D-169D809EBA10}: NameServer =

193.70.152.15 193.70.152.25
O17 - HKLM\System\CS3\Services\Tcpip\..\{36B6A0E3-079A-4311-A89D-169D809EBA10}: NameServer =

193.70.152.15 193.70.152.25
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft -

C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. -

C:\WINDOWS\ATKKBService.exe
O23 - Service: M-Audio Series II MIDI Installer (MA_CMIDI_InstallerService) - Unknown owner

- C:\Programmi\M-Audio\M-Audio Series II MIDI\MA_CMIDI_Inst.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity

Solution\ServiceLayer.exe

--
End of file - 6065 bytes
KRAST77
Newbie
 
Post: 5
Iscritto il: 03/03/09 20:44

Sponsor
 

Re: HELP: PC LENTO :(

Postdi Luke57 » 03/03/09 21:31

Ciao, disattiva l'antivirus
scarica combofix sul desktop
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
devi rinominare il file prima di salvarlo sul desktop in abc.exe
(per rinominare il file, quando lo scarichi ti chiede dove salvarlo e ti compare la casella "nome file" ,basta che cambi il nome che ti appare in abc.exe)
Disconnettiti da internet
Fatto questo, clicca su start>esegui, nel box bianco copia e incolla questo comando, virgolette comprese:

"%userprofile%\desktop\abc.exe" /killall

Premi OK, se tutto va bene parte il programma che potrebbe impiegare molto (non fare altre manovre durante la scansione),una volta terminata, se tutto è andato bene, in C:\ dovresti trovare il file combofix.txt , posta il contenuto del file o allegalo.
Luke57
Moderatore
 
Post: 6413
Iscritto il: 11/08/05 19:10

Re: HELP: PC LENTO :(

Postdi KRAST77 » 03/03/09 21:55

Connessione fallita

Firefox non può stabilire una connessione con il server download.bleepingcomputer.com.

* Il sito potrebbe non essere disponibile o sovraccarico. Riprovare fra qualche momento.

* Se non è possibile caricare alcuna pagina, controllare la connessione di rete del computer.

* Se il computer o la rete sono protetti da un firewall o un proxy, assicurarsi che Firefox abbia i permessi per accedere al web.

Questo è un problema che si presenta spesso.
Ho disinstallato anche il firewall
KRAST77
Newbie
 
Post: 5
Iscritto il: 03/03/09 20:44

Re: HELP: PC LENTO :(

Postdi Luke57 » 03/03/09 22:09

Ciao, scaricalo da qui (è già rinominato)
http://www.easy-share.com/1903875704/abc.exe
Luke57
Moderatore
 
Post: 6413
Iscritto il: 11/08/05 19:10

Re: HELP: PC LENTO :(

Postdi KRAST77 » 03/03/09 22:10

OK dopo vari tentativi sono riuscito a scaricarlo:

"Nando" - 2009-03-03 21.59.16 Service Pack 2
ComboFix 07-05.27.BV - Running from: "C:\Documents and Settings\Nando\Desktop\"
Command switches used :: "/killall"


((((((((((((((((((((((((((((((( Files Created from 2009-02-03 to 2009-03-03 ))))))))))))))))))))))))))))))))))


No new files created in this timespan


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2009-03-03 19:39:09 -------- d-----w C:\Programmi\eMule
2009-01-25 10:48:11 -------- d-----w C:\Programmi\File comuni\Agnitum Shared
2009-01-25 10:39:33 270,336 ----a-w C:\WINDOWS\system32\imon.dll
2009-01-25 10:39:32 502,208 ----a-w C:\WINDOWS\system32\drivers\amon.sys
2009-01-25 09:49:49 -------- d-----w C:\Programmi\Lavasoft Ad-Aware
2009-01-16 19:05:56 47,814 ----a-w C:\WINDOWS\system32\perfc010.dat
2009-01-16 19:05:56 345,382 ----a-w C:\WINDOWS\system32\perfh010.dat
2009-01-16 19:05:52 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\PC Suite
2009-01-16 19:05:39 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\Nokia
2009-01-16 19:04:58 -------- d-----w C:\Programmi\File comuni\PCSuite
2009-01-16 19:04:57 -------- d-----w C:\Programmi\Nokia
2009-01-16 19:04:57 -------- d-----w C:\Programmi\File comuni\Nokia
2009-01-16 19:04:40 -------- d-----w C:\Programmi\DIFX
2009-01-16 19:03:40 -------- d-----w C:\Programmi\PC Connectivity Solution
2009-01-11 13:12:56 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\Ableton
2009-01-11 13:12:36 -------- d-----w C:\Programmi\Ableton
2009-01-11 09:43:41 -------- d-----w C:\Programmi\FlashGet


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}=C:\PROGRA~1\FlashGet\jccatch.dll [2006-05-16 15:19]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 04:25]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 10:30]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2005-12-14 07:51 C:\WINDOWS\system32\nwiz.exe]
"DeltTray"="DeltTray.exe" [2004-08-26 21:43 C:\WINDOWS\system32\delttray.exe]
"GSICONEXE"="GSICON.EXE" [2001-07-20 03:22 C:\WINDOWS\system32\gsicon.exe]
"DSLAGENTEXE"="dslagent.exe" [2001-06-14 08:52 C:\WINDOWS\system32\DSLAGENT.EXE]
"WinampAgent"="C:\Programmi\Winamp\winampa.exe" [2007-05-14 23:22]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25]
"QuickTime Task"="C:\Programmi\QuickTime\QTTask.exe" [2007-06-29 05:24]
"TkBellExe"="C:\Programmi\File comuni\Real\Update_OB\realsched.exe" [2007-09-27 18:43]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16]
"nod32kui"="C:\Programmi\Eset\nod32kui.exe" [2009-01-25 11:39]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 14:39]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe" [2005-09-25 18:11]
"PC Suite Tray"="C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 12:47]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ClearRecentDocsOnExit"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
"C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*


Contents of the 'Scheduled Tasks' folder
2007-08-15 13:01:50 C:\WINDOWS\tasks\AppleSoftwareUpdate.job

********************************************************************

catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-03 22:02:44
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

disk error: C:\WINDOWS\

please note that you need administrator rights to perform deep scan

********************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\TDSSserv.sys]
"imagepath"="\systemroot\system32\drivers\TDSSpaxt.sys"

Completion time: 2009-03-03 22.03.27

--- E O F ---
KRAST77
Newbie
 
Post: 5
Iscritto il: 03/03/09 20:44

Re: HELP: PC LENTO :(

Postdi KRAST77 » 04/03/09 16:16

Niente ragà? :(((((
KRAST77
Newbie
 
Post: 5
Iscritto il: 03/03/09 20:44

Re: HELP: PC LENTO :(

Postdi Luke57 » 05/03/09 08:06

Ciao,apri un file di testo dal blocco note di windows, incollaci il seguente codice:


Codice: Seleziona tutto
Driver::
TDSSserv

File::
C:\Windows\system32\drivers\TDSSpaxt.sys


salvalo nlla stessa directory di combofix chiamandolo obbligatoriamente CFScript.txttrascinalo con il puntatore del mouse sull'icona di combofix, il programma eseguirà una nuova scansione. Al termine di essa riavvia il computer e posta il nuvo report C:\combofix.txt.

Elimina tutti i file temporanei con un programma come CCleaner (lo trovi anche nel forum)
Luke57
Moderatore
 
Post: 6413
Iscritto il: 11/08/05 19:10

Re: HELP: PC LENTO :(

Postdi KRAST77 » 06/03/09 00:26

Fatto tutto

"Nando" - 2009-03-06 0.19.21 Service Pack 2
ComboFix 07-05.27.BV - Running from: "C:\Documents and Settings\Nando\"
Command switches used :: ""C:\Documents and Settings\Nando\Desktop\CFScript.txt""


((((((((((((((((((((((((((((((( Files Created from 2009-02-05 to 2009-03-05 ))))))))))))))))))))))))))))))))))


2009-03-03 22:03 49,152 --a------ C:\WINDOWS\nircmd.exe


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2009-03-04 06:24:54 47,814 ----a-w C:\WINDOWS\system32\perfc010.dat
2009-03-04 06:24:54 345,382 ----a-w C:\WINDOWS\system32\perfh010.dat
2009-03-03 19:39:09 -------- d-----w C:\Programmi\eMule
2009-01-25 10:48:11 -------- d-----w C:\Programmi\File comuni\Agnitum Shared
2009-01-25 10:39:33 270,336 ----a-w C:\WINDOWS\system32\imon.dll
2009-01-25 10:39:32 502,208 ----a-w C:\WINDOWS\system32\drivers\amon.sys
2009-01-25 09:49:49 -------- d-----w C:\Programmi\Lavasoft Ad-Aware
2009-01-16 19:05:52 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\PC Suite
2009-01-16 19:05:39 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\Nokia
2009-01-16 19:04:58 -------- d-----w C:\Programmi\File comuni\PCSuite
2009-01-16 19:04:57 -------- d-----w C:\Programmi\Nokia
2009-01-16 19:04:57 -------- d-----w C:\Programmi\File comuni\Nokia
2009-01-16 19:04:40 -------- d-----w C:\Programmi\DIFX
2009-01-16 19:03:40 -------- d-----w C:\Programmi\PC Connectivity Solution
2009-01-11 13:12:56 -------- d-----w C:\DOCUME~1\Nando\DATIAP~1\Ableton
2009-01-11 13:12:36 -------- d-----w C:\Programmi\Ableton
2009-01-11 09:43:41 -------- d-----w C:\Programmi\FlashGet
2004-08-19 13:39:16 162,586 --sha-r C:\WINDOWS\system32\jdyzdf.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
{2F364306-AA45-47B5-9F9D-39A8B94E7EF7}=C:\PROGRA~1\FlashGet\jccatch.dll [2006-05-16 15:19]
{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}=C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll [2008-02-22 04:25]
{9030D464-4C02-4ABF-8ECC-5164760863C6}=C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 10:30]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"nwiz"="nwiz.exe" [2005-12-14 07:51 C:\WINDOWS\system32\nwiz.exe]
"DeltTray"="DeltTray.exe" [2004-08-26 21:43 C:\WINDOWS\system32\delttray.exe]
"GSICONEXE"="GSICON.EXE" [2001-07-20 03:22 C:\WINDOWS\system32\gsicon.exe]
"DSLAGENTEXE"="dslagent.exe" [2001-06-14 08:52 C:\WINDOWS\system32\DSLAGENT.EXE]
"WinampAgent"="C:\Programmi\Winamp\winampa.exe" [2007-05-14 23:22]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25]
"QuickTime Task"="C:\Programmi\QuickTime\QTTask.exe" [2007-06-29 05:24]
"TkBellExe"="C:\Programmi\File comuni\Real\Update_OB\realsched.exe" [2007-09-27 18:43]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16]
"nod32kui"="C:\Programmi\Eset\nod32kui.exe" [2009-01-25 11:39]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 14:39]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe" [2005-09-25 18:11]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"ClearRecentDocsOnExit"=1 (0x1)

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\aawservice]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\safeboot\minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
"C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost *netsvcs*

*Newly Created Service* - LMQEWDR

Contents of the 'Scheduled Tasks' folder
2007-08-15 13:01:50 C:\WINDOWS\tasks\AppleSoftwareUpdate.job

********************************************************************

catchme 0.3.692 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-06 00:23:00
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

disk error: C:\WINDOWS\

please note that you need administrator rights to perform deep scan

********************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\TDSSserv.sys]
"imagepath"="\systemroot\system32\drivers\TDSSpaxt.sys"

Completion time: 2009-03-06 0.23.43
C:\ComboFix2.txt ... 2009-03-03 22:03

--- E O F ---
KRAST77
Newbie
 
Post: 5
Iscritto il: 03/03/09 20:44

Re: HELP: PC LENTO :(

Postdi Luke57 » 06/03/09 08:54

Ciao, quel servizio pare sempre lì, scarica sul desktop
http://www.suspectfile.com/systemscan
aprilo ed assicurati che tutte le opzioni siano spuntate, clicca su "Scan Now" al termine della scansione verranno rilasciati (sempre sul desktop all'interno della cartella suspectfile) due file. Allega il file con estensione .zip nella tua prossima risposta.

Ricordati d'effettuare la scansione senza connessione attiva e con l'antivirus disabilitato salvo poi riattivarlo a scansione terminata.

NB
la durata della scansione può risultare lunga, potrebbe addirittura sembrare che il programma non stia lavorando, non preoccuparti non è così
Luke57
Moderatore
 
Post: 6413
Iscritto il: 11/08/05 19:10


Torna a Sicurezza e Privacy


Topic correlati a "HELP: PC LENTO :(":

pc lento
Autore: HammerLil
Forum: Sistemi Operativi Windows
Risposte: 5

Chi c’è in linea

Visitano il forum: Nessuno e 81 ospiti