Visualizzazione dei risultati da 1 a 5 su 5
  1. #1
    Utente di HTML.it
    Registrato dal
    Jul 2002
    Messaggi
    251

    Pc lentissimo dopo un Keygen

    1 ora fa ho eseguito un keygen e da quel momento il pc è diventato lentissimo. In teoria non meriterei risposta. Posso ancora rimediare?
    Cosa posso fare?

  2. #2
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    ciao cubalibre prova a fare questa scansione

    scarica combofix sul desktop

    alla richiesta se vuoi installare la recovery console clicca su NO

    esegui ComboFix.exe

    segui le instruzioni

    finita la scansione portati in C:\ e allega nella tua prossima risposta, il contenuto del file di testo Combofix.txt

    come usare correttamente combofix
    i log delle scansioni caricali = > QUI

    oppure = > QUI

  3. #3
    Utente di HTML.it
    Registrato dal
    Jul 2002
    Messaggi
    251
    ComboFix 14-02-16.01 - Administrator 17/02/2014 21.15.17.1.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.511.241 [GMT 1:00]
    Eseguito da: C:\Documents and Settings\Administrator\Desktop\ComboFix.exe
    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
    ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!

    ((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))) )

    C:\Programmi\WinRAR\Leggimi.Txt
    C:\Programmi\WinRAR\Leggimi_1a.Txt
    C:\Programmi\WinRAR\Licenza.Txt
    C:\Programmi\WinRAR\Ordin.htm
    C:\Programmi\WinRAR\Ordina.htm

    ((((((((((((((((((((((((( Files Creati Da 2014-01-17 al 2014-02-17 )))))))))))))))))))))))))))))))))))

    2014-02-17 13:17:20 . 2014-02-17 13:18:48 -------- d-----w- C:\Access97
    2014-02-17 08:17:36 . 2014-02-17 15:04:20 -------- d-----w- C:\Download
    2014-02-17 07:59:36 . 2014-02-17 15:28:32 -------- d-----w- C:\Aclewin
    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )
    2014-02-05 23:20:05 . 2013-07-20 20:02:06 920064 ----a-w- C:\WINDOWS\system32\wininet.dll
    2014-02-05 23:19:30 . 2013-07-20 20:01:57 43520 ----a-w- C:\WINDOWS\system32\licmgr10.dll
    2014-02-05 23:19:29 . 2013-07-20 20:01:54 1469440 ----a-w- C:\WINDOWS\system32\inetcpl.cpl
    2014-02-05 23:18:44 . 2013-07-20 20:01:51 18944 ----a-w- C:\WINDOWS\system32\corpol.dll
    2014-02-05 22:25:56 . 2013-07-20 20:01:52 385024 ----a-w- C:\WINDOWS\system32\html.iec
    2014-01-04 03:12:52 . 2013-07-20 20:02:05 420864 ----a-w- C:\WINDOWS\system32\vbscript.dll
    2013-12-05 11:26:03 . 2013-07-20 20:01:00 1172992 ----a-w- C:\WINDOWS\system32\msxml3.dll
    2013-11-27 20:21:06 . 2013-07-20 20:01:01 40960 ----a-w- C:\WINDOWS\system32\drivers\ndproxy.sys

    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    [-] 2013-07-20 20:02:59 . CBEEBEB899E31EF52B962CB31FC8CA5C . 361600 . . [5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)] . . C:\WINDOWS\system32\drivers\tcpip.sys
    ((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))

    *Nota* i valori vuoti & legittimi/default non sono visualizzati.
    REGEDIT4
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "VMware User Process"="C:\Programmi\VMware\VMware Tools\vmtoolsd.exe" [2013-10-17 18:10:34 63056]
    "EaseUS EPM tray"="C:\Programmi\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe" [2013-03-29 16:07:22 2081792]
    "MSC"="c:\Programmi\Microsoft Security Client\msseces.exe" [2013-10-23 13:55:28 948440]
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 12:00:00 15360]
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce]
    "ShowDeskFix"="shell32" [X]
    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
    "NoSimpleNetIDList"= 1 (0x1)
    [HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
    "NoSimpleNetIDList"= 1 (0x1)
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\TPSvc]
    2013-10-17 17:25:14 628048 ----a-w- C:\WINDOWS\system32\TPSvc.dll
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VMUpgradeAtShutd own]
    2013-10-17 18:10:34 104528 ----a-w- C:\WINDOWS\system32\VMUpgradeAtShutdownWXP.dll
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    R0 mv61xxmm;mv61xxmm;C:\WINDOWS\system32\drivers\mv61 xxmm.sys [20/07/2013 20.24.17 14184]
    R0 mv64xxmm;mv64xxmm;C:\WINDOWS\system32\drivers\mv64 xxmm.sys [20/07/2013 20.24.18 5632]
    R0 mvxxmm;mvxxmm;C:\WINDOWS\system32\drivers\mvxxmm.s ys [20/07/2013 20.24.18 14184]
    R0 vmci;VMware VMCI Bus Driver;C:\WINDOWS\system32\drivers\vmci.sys [08/10/2013 18.20.50 71888]
    R0 VMSCSI;VMware Storage Controller Driver;C:\WINDOWS\system32\drivers\vmscsi.sys [15/02/2014 21.56.50 14232]
    R0 vsock;vSockets Driver;C:\WINDOWS\system32\drivers\vsock.sys [15/02/2014 21.32.39 63824]
    R1 MpKslec28cbe8;MpKslec28cbe8;C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{258DCE2B-4013-4362-BD72-A26C1257BD58}\MpKslec28cbe8.sys [17/02/2014 20.57.26 40392]
    R1 vmhgfs;VMware Host Guest Client Redirector;C:\WINDOWS\system32\drivers\vmhgfs.sys [15/02/2014 21.32.42 156752]
    R2 MBAMScheduler;MBAMScheduler;C:\Programmi\Malwareby tes' Anti-Malware\mbamscheduler.exe [17/02/2014 16.05.27 418376]
    R2 MBAMService;MBAMService;C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe [17/02/2014 16.05.27 701512]
    R2 VMMEMCTL;Driver controllo memoria;C:\Programmi\File comuni\VMware\Drivers\memctl\vmmemctl.sys [17/10/2013 19.07.42 17872]
    R2 VMTools;VMware Tools;C:\Programmi\VMware\VMware Tools\vmtoolsd.exe [17/10/2013 19.10.34 63056]
    R2 VMware Physical Disk Helper Service;VMware Physical Disk Helper Service;C:\Programmi\VMware\VMware Tools\vmacthlp.exe [17/10/2013 19.05.38 429648]
    R3 MBAMProtector;MBAMProtector;C:\WINDOWS\system32\dr ivers\mbam.sys [17/02/2014 16.05.10 22856]
    R3 TPAutoConnSvc;TP AutoConnect Service;C:\Programmi\VMware\VMware Tools\TPAutoConnSvc.exe [17/10/2013 18.25.14 378192]
    R3 vmmouse;VMware Pointing Device;C:\WINDOWS\system32\drivers\vmmouse.sys [17/10/2013 19.08.00 11800]
    R3 vmusbmouse;VMware USB Pointing Device;C:\WINDOWS\system32\drivers\vmusbmouse.sys [17/10/2013 19.08.20 11928]
    R3 vmx_svga;vmx_svga;C:\WINDOWS\system32\drivers\vmx_ svga.sys [17/10/2013 19.14.46 62160]
    R3 vmxnet;VMware Ethernet Adapter Driver;C:\WINDOWS\system32\drivers\vmxnet.sys [17/10/2013 19.12.20 30064]
    S3 epmntdrv;epmntdrv;C:\WINDOWS\system32\epmntdrv.sys [17/02/2014 11.40.12 13896]
    S3 EuGdiDrv;EuGdiDrv;C:\WINDOWS\system32\EuGdiDrv.sys [17/02/2014 11.40.12 9160]
    S3 TPVCGateway;TP VC Gateway Service;C:\Programmi\VMware\VMware Tools\TPVCGateway.exe [17/10/2013 18.25.12 406864]
    --- Altri Servizi/Drivers In Memoria ---
    *NewlyCreated* - MPKSLEC28CBE8
    Contenuto della cartella 'Scheduled Tasks'
    2014-02-17 C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
    - c:\Programmi\Microsoft Security Client\MpCmdRun.exe [2013-10-23 14:01:10 . 2013-10-23 14:01:10]
    2014-02-17 C:\WINDOWS\Tasks\MpIdleTask.job
    - c:\Programmi\Microsoft Security Client\MpCmdRun.exe [2013-10-23 14:01:10 . 2013-10-23 14:01:10]

    ------- Scansione supplementare -------
    uStart Page = https://www.google.it/
    LSP: %windir%\system32\vsocklib.dll
    TCP: DhcpNameServer = 192.168.1.1

  4. #4
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    il log e' incompleto, controlla meglio, lo trovi in C: come combofix.txt

    per caso hai problemi di connessione?

  5. #5
    Utente di HTML.it
    Registrato dal
    Jul 2002
    Messaggi
    251
    Eccomi di nuovo scusami ho avuto proprio problemi con la ADSL

    ComboFix 14-02-16.01 - Administrator 26/02/2014 16.21.55.2.1 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.547.276 [GMT 1:00]
    Eseguito da: c:\documents and settings\Administrator\Desktop\ComboFix.exe
    AV: Microsoft Security Essentials *Disabled/Updated* {EDB4FA23-53B8-4AFA-8C5D-99752CCA7095}
    .
    ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
    .
    .
    ((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))) )
    .
    .
    c:\windows\IsUn0410.exe
    .
    ---- Esecuzione precedente -------
    .
    c:\programmi\WinRAR\Leggimi.Txt
    c:\programmi\WinRAR\Leggimi_1a.Txt
    c:\programmi\WinRAR\Licenza.Txt
    c:\programmi\WinRAR\Ordin.htm
    c:\programmi\WinRAR\Ordina.htm
    .
    .
    ((((((((((((((((((((((((( Files Creati Da 2014-01-26 al 2014-02-26 )))))))))))))))))))))))))))))))))))
    .
    .
    2014-02-18 16:20 . 2014-02-18 16:26 -------- d-----w- C:\Office2010
    2014-02-18 16:13 . 2014-02-18 16:13 -------- d-----r- C:\MSOCache
    2014-02-17 13:17 . 2014-02-17 13:18 -------- d-----w- C:\Access97
    2014-02-17 08:17 . 2014-02-17 22:02 -------- d-----w- C:\Download
    2014-02-17 07:59 . 2014-02-18 22:24 -------- d-----w- C:\Aclewin
    .
    .
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )
    .
    2014-02-05 23:20 . 2013-07-20 20:02 920064 ----a-w- c:\windows\system32\wininet.dll
    2014-02-05 23:19 . 2013-07-20 20:01 43520 ----a-w- c:\windows\system32\licmgr10.dll
    2014-02-05 23:19 . 2013-07-20 20:01 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
    2014-02-05 23:18 . 2013-07-20 20:01 18944 ----a-w- c:\windows\system32\corpol.dll
    2014-02-05 22:25 . 2013-07-20 20:01 385024 ----a-w- c:\windows\system32\html.iec
    2014-01-04 03:12 . 2013-07-20 20:02 420864 ----a-w- c:\windows\system32\vbscript.dll
    2013-12-05 11:26 . 2013-07-20 20:01 1172992 ----a-w- c:\windows\system32\msxml3.dll
    .
    .
    ------- Sigcheck -------
    Note: Unsigned files aren't necessarily malware.
    .
    [-] 2013-07-20 . CBEEBEB899E31EF52B962CB31FC8CA5C . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
    .
    ((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Nota* i valori vuoti & legittimi/default non sono visualizzati.
    REGEDIT4
    .
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
    "VMware User Process"="c:\programmi\VMware\VMware Tools\vmtoolsd.exe" [2013-10-17 63056]
    "EaseUS EPM tray"="c:\programmi\EaseUS\EaseUS Partition Master 9.3.0\bin\EpmNews.exe" [2013-03-29 2081792]
    "MSC"="c:\programmi\Microsoft Security Client\msseces.exe" [2013-10-23 948440]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
    .
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce]
    "ShowDeskFix"="shell32" [X]
    .
    [HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
    "NoSimpleNetIDList"= 1 (0x1)
    .
    [HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
    "NoSimpleNetIDList"= 1 (0x1)
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\TPSvc]
    2013-10-17 17:25 628048 ----a-w- c:\windows\system32\TPSvc.dll
    .
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VMUpgradeAtShutd own]
    2013-10-17 18:10 104528 ----a-w- c:\windows\system32\VMUpgradeAtShutdownWXP.dll
    .
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SafeBoot\Minimal\MsMpSvc]
    @="Service"
    .
    [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
    "%windir%\\Network Diagnostic\\xpnetdiag.exe"=
    "%windir%\\system32\\sessmgr.exe"=
    .
    R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61 xxmm.sys [20/07/2013 20.24.17 14184]
    R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64 xxmm.sys [20/07/2013 20.24.18 5632]
    R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.s ys [20/07/2013 20.24.18 14184]
    R0 vmci;VMware VMCI Bus Driver;c:\windows\system32\drivers\vmci.sys [08/10/2013 18.20.50 71888]
    R0 VMSCSI;VMware Storage Controller Driver;c:\windows\system32\drivers\vmscsi.sys [15/02/2014 21.56.50 14232]
    R0 vsock;vSockets Driver;c:\windows\system32\drivers\vsock.sys [15/02/2014 21.32.39 63824]
    R1 vmhgfs;VMware Host Guest Client Redirector;c:\windows\system32\drivers\vmhgfs.sys [15/02/2014 21.32.42 156752]
    R2 MBAMScheduler;MBAMScheduler;c:\programmi\Malwareby tes' Anti-Malware\mbamscheduler.exe [17/02/2014 16.05.27 418376]
    R2 MBAMService;MBAMService;c:\programmi\Malwarebytes' Anti-Malware\mbamservice.exe [17/02/2014 16.05.27 701512]
    R2 VMMEMCTL;Driver controllo memoria;c:\programmi\File comuni\VMware\Drivers\memctl\vmmemctl.sys [17/10/2013 19.07.42 17872]
    R2 VMTools;VMware Tools;c:\programmi\VMware\VMware Tools\vmtoolsd.exe [17/10/2013 19.10.34 63056]
    R2 VMware Physical Disk Helper Service;VMware Physical Disk Helper Service;c:\programmi\VMware\VMware Tools\vmacthlp.exe [17/10/2013 19.05.38 429648]
    R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [17/02/2014 11.40.12 13896]
    R3 MBAMProtector;MBAMProtector;c:\windows\system32\dr ivers\mbam.sys [17/02/2014 16.05.10 22856]
    R3 TPAutoConnSvc;TP AutoConnect Service;c:\programmi\VMware\VMware Tools\TPAutoConnSvc.exe [17/10/2013 18.25.14 378192]
    R3 vmmouse;VMware Pointing Device;c:\windows\system32\drivers\vmmouse.sys [17/10/2013 19.08.00 11800]
    R3 vmusbmouse;VMware USB Pointing Device;c:\windows\system32\drivers\vmusbmouse.sys [17/10/2013 19.08.20 11928]
    R3 vmx_svga;vmx_svga;c:\windows\system32\drivers\vmx_ svga.sys [17/10/2013 19.14.46 62160]
    R3 vmxnet;VMware Ethernet Adapter Driver;c:\windows\system32\drivers\vmxnet.sys [17/10/2013 19.12.20 30064]
    S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [17/02/2014 11.40.12 9160]
    S3 TPVCGateway;TP VC Gateway Service;c:\programmi\VMware\VMware Tools\TPVCGateway.exe [17/10/2013 18.25.12 406864]
    .
    --- Altri Servizi/Drivers In Memoria ---
    .
    *NewlyCreated* - DMADMIN
    .
    Contenuto della cartella 'Scheduled Tasks'
    .
    2014-02-26 c:\windows\Tasks\Microsoft Antimalware Scheduled Scan.job
    - c:\programmi\Microsoft Security Client\MpCmdRun.exe [2013-10-23 14:01]
    .
    .
    ------- Scansione supplementare -------
    .
    uStart Page = https://www.google.it/
    LSP: %windir%\system32\vsocklib.dll
    TCP: DhcpNameServer = 192.168.1.1
    .
    - - - - CHIAVI ORFANE RIMOSSE - - - -
    .
    AddRemove-Adobe Acrobat 5.0 - c:\windows\ISUN0410.EXE
    .
    .
    .
    ************************************************** ************************
    .
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2014-02-26 16:39
    Windows 5.1.2600 Service Pack 3 NTFS
    .
    scansione processi nascosti ...
    .
    scansione entrate autostart nascoste ...
    .
    Scansione files nascosti ...
    .
    Scansione completata con successo
    Files nascosti: 0
    .
    ************************************************** ************************
    .
    --------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
    .
    [HKEY_USERS\S-1-5-21-2052111302-1450960922-1177238915-500\Software\Microsoft\Internet Explorer\User Preferences]
    @Denied: (2) (Administrator)
    "88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:0 1,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,45,d3 ,aa,fd,cd,da,4b,9a,83,70,\
    "2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:0 1,00,00,00,d0,8c,9d,df,01,15,
    d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,45,45,d3 ,aa,fd,cd,da,4b,9a,83,70,\
    .
    Ora fine scansione: 2014-02-26 16:45:05
    ComboFix-quarantined-files.txt 2014-02-26 15:44
    .
    Pre-Run: 2.313.949.184 byte disponibili
    Post-Run: 2.326.425.600 byte disponibili
    .
    - - End Of File - - 5A74C9F847A38E1117E59ACEE6CBE0CD
    828E02D5C4A4FBE53441EE9DBEE51F43

Permessi di invio

  • Non puoi inserire discussioni
  • Non puoi inserire repliche
  • Non puoi inserire allegati
  • Non puoi modificare i tuoi messaggi
  •  
Powered by vBulletin® Version 4.2.1
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved.