nuovo pc (usato) è tutto ok? log hijackthis

[giuseppex]

ciao ho una maacchina nuova vi posto il logfile di hijackthis sperando che sia tutto ok mi potete aiutare a decifrare il log di hijack? grazie anticipatamente e sempre per il vostro lavoro Giuseppe Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:50:05, on 23/08/2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17239)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Windows\vVX3000.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Users\salotto\Desktop\firefox\firefox.exe
C:\Users\Administrator\Desktop\Documenti\Programmi\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GR469A~1.DLL
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 2632986490
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GRA32A~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\Windows\system32\Ati2evxx.exe (file missing)
O23 - Service: ATI Smart - Unknown owner - C:\Windows\System32\ati2sgag.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: UMVPFSrv - Logitech Inc. - C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
O23 - Service: ASUS Virtual MFP Service (UsbService) - Unknown owner - C:\Program Files\ASUS\Printer Utilities\UsbService.exe

--
End of file - 4931 bytes

[davide72]

il log non presenta voci sospette, che problemi stai riscontrando ?

[giuseppex]

si apre una pagina "strana" fanteziclub turca o rumena non saprei di incontri online senza che io la cerchi

[giuseppex]

e soprattutto grazie per l'immediata risposta

[COCCOBELLO]

sempre con hijackthis segui qui come rimuovere gli ADS vedi in basso
http://www.windoctor.it/sicurezza/i-mig ... ta-stream/
rimuovili tutti

[giuseppex]

grazie ancora non vorrei fare danno ti posto il logfile di adsspy nn vorrei eliminare file di sistema che magari mi bloccano il pc secondo voi posso eliminarli tutti? C:\ProgramData\TEMP : 0B4227B4 (124 bytes)
C:\ProgramData\TEMP : 0B4227B4 (124 bytes)
C:\Users\Administrator\Desktop\covert affairs 5x08.flv : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\covert affairs 5x09.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\Documenti\Programmi\HiJackThis.exe : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\Documenti\Programmi\uTorrent.exe : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x07.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x08.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x09.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x10.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x11.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x12.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x13.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\prisoner of war 2x14.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\the bridge 2x07.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Desktop\video.mp4 : Zone.Identifier (26 bytes)
C:\Users\Administrator\Downloads\ccsetup416.exe : Zone.Identifier (26 bytes)
C:\Users\Administrator\Downloads\mbam-setup-2.0.2.1012.exe : Zone.Identifier (26 bytes)
C:\Users\Administrator\Favorites\Links\Siti suggeriti.url : favicon (1150 bytes)
C:\Users\All Users\TEMP : 0B4227B4 (124 bytes)
C:\Users\All Users\TEMP : 0B4227B4 (124 bytes)
C:\Users\Public\Pictures\Sample Pictures\Thumbs.db : encryptable (0 bytes)
C:\Users\salotto\AppData\Local\Microsoft\eHome\ehthumbs_vista.db : encryptable (0 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\127.Ore.2010.iTALiAN.MD.BDRip.XviD-FREE [IDN_CREW].avi.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Asteroids Galaxy Tour (2011) The Golden Age.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Bruno Mars - The Lazy Song (2).mp3.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Bruno Mars - The Lazy Song.mp3.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Bruno Mars- Earth To Mars- (320 Kbps)- [2011]- Mp3ViLLe.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\EASEUS Partition Master 9.0.0 Professional Edition Retail + Boot CD.rar.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Faster.2010.iTALiAN.AC3.5.1.BRRip.XviD-IDN_CREW.avi.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\La.Solitudine.Dei.Numeri.Primi.2009.iTALiAN.DVDRip.XviD-Reserved[gogt].avi.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Nero Media Home 4 Essentials [2011] + InBuilt Serial Key - {RedDragon}.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Nessuno Mi Puo Giudicare 2011 iTALiAN DVDRip XviD TRL.avi.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Paranormal.Activity.2.Extended.Cut.2010.iTALiAN.BDRip.XviD-TRL[gogt].torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Photomatix Pro v4.0.2 Software + Serial Key.1.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Photomatix Pro v4.0.2 Software + Serial Key.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Red Hot Chili Peppers - I'm With You [mp3-320-2011].torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Red.2011.iTALiAN.MD.BDRip.XviD-TNZ.BlackFritz.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\The.Next.Three.Days.2010.iTALiAN.MD.BDRip.XviD-FREE [IDN_CREW].torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Unknown.Senza.Identita.2011.iTALiAN.AC3.BRRip.XviD-T4P3.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\Virtual DJ Pro 7 & Serieal.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\AppData\Roaming\BitTorrent\[TrTd_CREW]Il Rito 2011 ITA DVDRip MP3.avi.torrent : Zone.Identifier (26 bytes)
C:\Users\salotto\Desktop\bron broen 1x10.flv : Zone.Identifier (26 bytes)
C:\Users\salotto\Desktop\covert affairs 5x06.flv : Zone.Identifier (26 bytes)
C:\Users\salotto\Desktop\gang related 1x05.flv : Zone.Identifier (26 bytes)
C:\Users\salotto\Desktop\the bridge 2x04.flv : Zone.Identifier (26 bytes)
C:\Users\salotto\Desktop\under the dome 2x06.flv : Zone.Identifier (26 bytes)
C:\Users\salotto\Downloads\AudioPlaybackDiagnostic.diagcab : Zone.Identifier (26 bytes)
C:\Users\salotto\Downloads\avira_it_av___ws.exe : Zone.Identifier (26 bytes)
C:\Users\salotto\Downloads\Firefox Setup Stub 31.0.exe : Zone.Identifier (26 bytes)
C:\Users\salotto\Favorites\Links\Siti suggeriti.url : favicon (1150 bytes)
C:\Windows\Cursors\arrow_n.cur : NEDTA.DAT (6144 bytes)
C:\Windows\inf\oem27.inf : Zone.Identifier (26 bytes)
C:\Windows\System32\catroot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem27.CAT : Zone.Identifier (26 bytes)
C:\Windows\System32\drivers\RTL8187B.sys : Zone.Identifier (26 bytes)
C:\Windows\System32\DriverStore\FileRepository\net8187b.inf_x86_neutral_465186e6c7a66feb\net8187b.cat : Zone.Identifier (26 bytes)
C:\Windows\System32\DriverStore\FileRepository\net8187b.inf_x86_neutral_465186e6c7a66feb\net8187b.inf : Zone.Identifier (26 bytes)
C:\Windows\System32\DriverStore\FileRepository\net8187b.inf_x86_neutral_465186e6c7a66feb\RTL8187B.sys : Zone.Identifier (26 bytes)

[COCCOBELLO]

elimina tutto non fai nessun danno,non sono file di sistema

il danno lo hai fatto alla tua privacy mostrando con il report quello che hai sul pc e le operazioni svolte
e i danni li fai con le crack che installi

[giuseppex]

bene grazie ancora beh adesso sapete alccune delle serie che seguo e i film che ha scariato il vecchio proprietario :-)))

[COCCOBELLO]

già

bhè fai sapere se il problema lo hai risolto..

[giuseppex]

beh il problema sussiste se provo a vedere la commedia sexy shop (una commedia brillante mica un film a luci rose) mi apre automaticamente il solito fanteziclub mi sa che c'è qualche filtro anti pagine xx che pero' non riesco a trovare oppure c'è qualche intruso? ditemi cosa posso fare per eliminarlo. Grazie anticipate

[davide72]

è un problema del sito mica del tuo pc, cmq i filtri al contrario di quanto pensi , servono per non far aprire le pubblicità

[COCCOBELLO]

quoto davide
soprattutto per i siti streaming..ricorda nulla è gratis a questo mondo
solo noi sui forum siamo gratis

prova con adblock
che browser usi?

adblock per firefox
https://addons.mozilla.org/it/firefox/a ... lock-plus/

adblock per chrome
https://chrome.google.com/webstore/deta ... idom?hl=it

adblock per opera
https://addons.opera.com/it/extensions/ ... display=it