Ciao a tutti anzitutto un saluto e un ringraziamento a tutti per il servizio che offrite.. e questo è doveroso...
Veniamo al dunque.. purtroppo dopo avere lanciato un programmetto in visual basic (che non dovevo lanciare) ora mentre navigo mi si aprono in automatico delle pagine internet.. ho letto un po di thread ed agito di conseguenza..ma nulla da fare..

Sistema operativo Winxp Professional service pack1 Iexplorer 6.0
Tentata pulizia con antivirus FSecure niente..
Tentata pulizia con Spybot niente
Tentata pulizia con Cw shredder niente
tentata pulizia con Xcleaner niente
Tentata pulizia con Spysweeper nulla
Tentata pulizia con Adaware nulla
Tutti i programmi con database aggiornati

A questo punto vi posterei i log di Hijackthis e pure quello di CWShredder

LOG CWShredder

**** Run Keys ****

RUN: [LaunchAp] "C:\Programmi\Acer\Launch Manager\LaunchAp.exe"
RUN: [HotkeyApp] "C:\Programmi\Acer\Launch Manager\HotkeyApp.exe"
RUN: [KeyHook] "C:\Programmi\Acer\Launch Manager\KeyHook.exe"
RUN: [CtrlVol] "C:\Programmi\Acer\Launch Manager\CtrlVol.exe"
RUN: [SynTPLpr] C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
RUN: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
RUN: [F-Secure Manager] "C:\Programmi\F-Secure\Common\FSM32.EXE" /splash
RUN: [Wbutton] "C:\Programmi\Acer\WButton(Win2K) v1.5\Wbutton.exe"
RUN: [PRPCMonitor] PRPCUI.exe
RUN: [CloneCDElbyCDFL] "C:\Programmi\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
RUN: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
RUN: [CnxTrApp] rundll32.exe "C:\Programmi\Aethra\ADSL EB1070 USB\CnxTrApp.dll",AppEntry -REG "Aethra\ADSL EB1070 USB"
RUN: [wavdriver] "C:\WINDOWS\wavdriver.exe"
RUN: [avidup] "C:\WINDOWS\avidup.exe"
RUN: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\WCESCOMM.EXE"
RUN: [SpySweeper] "C:\Programmi\Webroot\Spy Sweeper\SpySweeper.exe" /0


**** Browser Helper Objects ****



**** IE Toolbars ****

TOOLBAR: [&Radio] C:\WINDOWS\System32\msdxm.ocx
TOOLBAR: [&Google] c:\programmi\google\googletoolbar1.dll


**** IE Extensions ****

IEExt: [Crea preferiti portatile]
IEExt: [Crea preferiti portatile]
IEExt: [ICQ Pro] C:\Programmi\ICQ\ICQ.exe
IEExt: [@C:\Programmi\Messenger\Msgslang.dll,-61144] C:\Programmi\Messenger\msmsgs.exe


**** Hosts File Entries ****

HOSTS: 127.0.0.1 localhost
HOSTS: 127.0.0.1 www.igetnet.com
HOSTS: 127.0.0.1 code.ignphrases.com
HOSTS: 127.0.0.1 clear-search.com
HOSTS: 127.0.0.1 r1.clrsch.com
HOSTS: 127.0.0.1 sds.clrsch.com
HOSTS: 127.0.0.1 status.clrsch.com
HOSTS: 127.0.0.1 www.clrsch.com
HOSTS: 127.0.0.1 clr-sch.com
HOSTS: 127.0.0.1 sds-qckads.com
HOSTS: 127.0.0.1 status.qckads.com
HOSTS: 127.0.0.1 www.qoolaid.com
HOSTS: 127.0.0.1 www.qoologic.com
HOSTS: 127.0.0.1 www.clkprecision.com
HOSTS: 127.0.0.1 www.urllogic.com
HOSTS: 127.0.0.1 www.clkoptimizer.com
HOSTS: 127.0.0.1 www.isearch.com
HOSTS: 127.0.0.1 isearch.com
HOSTS: 127.0.0.1 www.idownload.com
HOSTS: 127.0.0.1 idownload.com
HOSTS: 127.0.0.1 www.mytotalsearch.com
HOSTS: 127.0.0.1 mytotalsearch.com
HOSTS: 127.0.0.1 www.lop.com
HOSTS: 127.0.0.1 lop.com
HOSTS: 127.0.0.1 www.page-not-found.net
HOSTS: 127.0.0.1 page-not-found.net
HOSTS: 127.0.0.1 www.isearchhere.com
HOSTS: 127.0.0.1 isearchhere.com
HOSTS: 127.0.0.1 xads.offeroptimizer.comm
HOSTS: 127.0.0.1 search.offeroptimizer.com
HOSTS: 127.0.0.1 ximages.offeroptimizer.com
HOSTS: 127.0.0.1 xlime.offeroptimizer.com
HOSTS: 127.0.0.1 xadsj-o.offeroptimizer.com
HOSTS: 127.0.0.1 xadsj.offeroptimizer.com
HOSTS: 127.0.0.1 www.offeroptimizer.com
HOSTS: 127.0.0.1 as.adwave.com
HOSTS: 127.0.0.1 sr.adwave.com
HOSTS: 127.0.0.1 www.adwave.com
HOSTS: 127.0.0.1 adwave.com event:host:127.0.0.1
HOSTS: 127.0.0.1 adwave.com event:host:127.0.0.1
HOSTS: 127.0.0.1 ads.switchboard.com
HOSTS: 127.0.0.1 ads.enliven.com
HOSTS: 127.0.0.1 oz.valueclick.com
HOSTS: 127.0.0.1 doubleclick.net
HOSTS: 127.0.0.1 ad.atlas.cz
HOSTS: 127.0.0.1 ad.blm.net
HOSTS: 127.0.0.1 ad.dogpile.com
HOSTS: 127.0.0.1 ad.infoseek.com
HOSTS: 127.0.0.1 ad.net-service.de
HOSTS: 127.0.0.1 ad.preferences.com
HOSTS: 127.0.0.1 ad.vol.at
HOSTS: 127.0.0.1 adbot.com
HOSTS: 127.0.0.1 desktop.kazaa.com
HOSTS: 127.0.0.1 shop.kazaa.com
HOSTS: 127.0.0.1 www.bonzi.com
HOSTS: 127.0.0.1 www.b3d.com
HOSTS: 127.0.0.1 neighborhood.standard.net
HOSTS: 127.0.0.1 ads.telegraph.co.uk
HOSTS: 127.0.0.1 spinbox.techtracker.com
HOSTS: 127.0.0.1 toads.osdn.com
HOSTS: 127.0.0.1 ads.themes.org
HOSTS: 127.0.0.1 adserver.trb.com
HOSTS: 127.0.0.1 media.fastclick.net
HOSTS: 127.0.0.1 banner.easyspace.com
HOSTS: 127.0.0.1 www.banner2u.com
HOSTS: 127.0.0.1 ads.thestar.com
HOSTS: 127.0.0.1 ads.digitalmedianet.com
HOSTS: 127.0.0.1 www.fineclicks.com
HOSTS: 127.0.0.1 ads.mdchoice.com
HOSTS: 127.0.0.1 ad.horvitznewspapers.net
HOSTS: 127.0.0.1 adtegrity.thruport.com
HOSTS: 127.0.0.1 a.mktw.net
HOSTS: 127.0.0.1 ads.pennyweb.com
HOSTS: 127.0.0.1 www3.ad.tomshardware.com
HOSTS: 127.0.0.1 www4.ad.tomshardware.com
HOSTS: 127.0.0.1 www6.ad.tomshardware.com
HOSTS: 127.0.0.1 www8.ad.tomshardware.com
HOSTS: 127.0.0.1 www15.ad.tomshardware.com
HOSTS: 127.0.0.1 ads.forbes.com
HOSTS: 127.0.0.1 ads.desmoinesregister.com
HOSTS: 127.0.0.1 adserver.tribuneinteractive.com
HOSTS: 127.0.0.1 bannerads.anytimenews.com
HOSTS: 127.0.0.1 ads1.condenet.com
HOSTS: 127.0.0.1 adserver.anm.co.uk
HOSTS: 127.0.0.1 zrap.zdnet.com.com
HOSTS: 127.0.0.1 bidclix.net
HOSTS: 127.0.0.1 media.popuptraffic.com
HOSTS: 127.0.0.1 coreg.flashtrack.net
HOSTS: 127.0.0.1 rmads.msn.com
HOSTS: 127.0.0.1 ads.icq.com
HOSTS: 127.0.0.1 cb.icq.com
HOSTS: 127.0.0.1 cf.icq.com
HOSTS: 127.0.0.1 www2.newtopsites.com
HOSTS: 127.0.0.1 adserv.internetfuel.com
HOSTS: 127.0.0.1 images.fastclick.net
HOSTS: 127.0.0.1 adserver.securityfocus.com
HOSTS: 127.0.0.1 www.avsads.com
HOSTS: 127.0.0.1 banners.moviegoods.com
HOSTS: 127.0.0.1 ads.bitsonthewire.com
HOSTS: 127.0.0.1 ads.iambic.com
HOSTS: 127.0.0.1 sfads.osdn.com
HOSTS: 127.0.0.1 fl01.ct2.comclick.com
HOSTS: 127.0.0.1 adserver.phillyburbs.com
HOSTS: 127.0.0.1 marketing.nyi.net
HOSTS: 127.0.0.1 www.netflip.com
HOSTS: 127.0.0.1 image.imgfarm.com
HOSTS: 127.0.0.1 ads.viaarena.com
HOSTS: 127.0.0.1 phpads2.cnpapers.com
HOSTS: 127.0.0.1 ads.astalavista.us
HOSTS: 127.0.0.1 banner.coza.com
HOSTS: 127.0.0.1 adcreative.tribuneinteractive.com
HOSTS: 127.0.0.1 ads.democratandchronicle.com
HOSTS: 127.0.0.1 adlog.com.com
HOSTS: 127.0.0.1 adimg.com.com
HOSTS: 127.0.0.1 adimage.bankrate.com
HOSTS: 127.0.0.1 ads.mediadevil.com
HOSTS: 127.0.0.1 imageserv.adtech.de
HOSTS: 127.0.0.1 ad.se.doubleclick.net
HOSTS: 127.0.0.1 ads.cashsurfers.com
HOSTS: 127.0.0.1 ads.specificpop.com
HOSTS: 127.0.0.1 z1.adserver.com
HOSTS: 127.0.0.1 images.bizrate.com
HOSTS: 127.0.0.1 q.pni.com
HOSTS: 127.0.0.1 ad01.mediacorpsingapore.com
HOSTS: 127.0.0.1 adimage.asia1.com.sg
HOSTS: 127.0.0.1 images.newsx.cc
HOSTS: 127.0.0.1 www.adireland.com
HOSTS: 127.0.0.1 ads.iafrica.com
HOSTS: 127.0.0.1 ads.nyi.net
HOSTS: 127.0.0.1 geoads.osdn.com
HOSTS: 127.0.0.1 www.crisscross.com
HOSTS: 127.0.0.1 netcomm.spinbox.net
HOSTS: 127.0.0.1 i.i.com.com
HOSTS: 127.0.0.1 ads.videoaxs.com
HOSTS: 127.0.0.1 mediamgr.ugo.com
HOSTS: 127.0.0.1 adserver.pollstar.com
HOSTS: 127.0.0.1 information.gopher.com
HOSTS: 127.0.0.1 ads.adviva.net
HOSTS: 127.0.0.1 adsrv.bankrate.com
HOSTS: 127.0.0.1 a207.p.f.qz3.net
HOSTS: 127.0.0.1 ehg-bestbuy.hitbox.com
HOSTS: 127.0.0.1 ehg-intel.hitbox.com
HOSTS: 127.0.0.1 ehg-espn.hitbox.com
HOSTS: 127.0.0.1 ehg-macromedia.hitbox.com
HOSTS: 127.0.0.1 ehg-dig.hitbox.com
HOSTS: 127.0.0.1 websearch.com
HOSTS: 127.0.0.1 websearch.com


**** IE Settings ****

IEBypass: 127.0.0.1
Default Page: http://www.libero.it
Default Search: http://www.microsoft.com/isapi/redir...ie&ar=iesearch
Local Page: C:\WINDOWS\System32\blank.htm
Search Bar: http://arianna.libero.it
Search Page: http://www.microsoft.com/isapi/redir...ie&ar=iesearch


**** IE Context Menu (Right click) ****



**** Layered Service Providers ****

LSP: MSAFD Irda [IrDA]
LSP: MSAFD Tcpip [TCP/IP]
LSP: MSAFD Tcpip [UDP/IP]
LSP: RSVP UDP Service Provider
LSP: RSVP TCP Service Provider
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3963C041-9195-40EE-8A1B-536A4CF0A3D8}] SEQPACKET 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3963C041-9195-40EE-8A1B-536A4CF0A3D8}] DATAGRAM 8
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{931DC803-FB5B-4F73-B4F3-2A9CCDCB72E1}] SEQPACKET 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{931DC803-FB5B-4F73-B4F3-2A9CCDCB72E1}] DATAGRAM 7
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4BA01A99-0B75-4AAC-8805-1ECF1F2EE63C}] SEQPACKET 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{4BA01A99-0B75-4AAC-8805-1ECF1F2EE63C}] DATAGRAM 6
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BA15F2A-9ABE-41E0-94F1-0709EC1B015E}] SEQPACKET 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{0BA15F2A-9ABE-41E0-94F1-0709EC1B015E}] DATAGRAM 0
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{42E82DA9-43C2-4B21-8187-5815A54606C2}] SEQPACKET 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{42E82DA9-43C2-4B21-8187-5815A54606C2}] DATAGRAM 1
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C447AD9-D77A-4C25-8CC1-A3F44B46225D}] SEQPACKET 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C447AD9-D77A-4C25-8CC1-A3F44B46225D}] DATAGRAM 2
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{315B3172-A8DD-4001-A147-626A7D6F0DE2}] SEQPACKET 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{315B3172-A8DD-4001-A147-626A7D6F0DE2}] DATAGRAM 3
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{71BC9EB9-027C-45B5-98E4-EF035BCA721B}] SEQPACKET 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{71BC9EB9-027C-45B5-98E4-EF035BCA721B}] DATAGRAM 4
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{00758246-AF72-46C5-B5A4-471FD16765F1}] SEQPACKET 5
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{00758246-AF72-46C5-B5A4-471FD16765F1}] DATAGRAM 5


**** Blocked Control Panel Items ****

BLOCKED: [ncpa.cpl] No
BLOCKED: [odbccp32.cpl] No


**** Downloaded Program Files ****

HushEncryptionEngine [https://mailserver5.hushmail.com/sha...tionEngine.cab]
Microsoft XML Parser for Java [file://C:\WINDOWS\Java\classes\xmldso.cab]
{4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} [http://sib1.od2.com/common/Member/Cl.../OCI/setup.exe] C:\WINDOWS\Downloaded Program Files\setup.exe
{74D05D43-3236-11D4-BDCD-00C04F9A3B61} [http://a840.g.akamai.net/7/840/537/2...ll/xscan53.cab] C:\WINDOWS\System32\mfc42.dll C:\WINDOWS\Tsc.exe C:\WINDOWS\Tsc.ini C:\WINDOWS\TmUpdate.dll C:\WINDOWS\loadhttp.dll C:\WINDOWS\tmupdate.ini C:\WINDOWS\patchw32.dll C:\WINDOWS\Downloaded Program Files\xscan53.ocx
{9F1C11AA-197B-4942-BA54-47A8489BB47F} [http://v4.windowsupdate.microsoft.co...383.5021412037]
{ADC3EA10-8A28-41A9-96B4-534ADFC3CA0A} [http://www.buy@fiat.com/components/o...ratoreauto.cab]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} [http://messenger.msn.com/download/ms...downloader.cab]
{C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} [http://c6.community.virgilio.it/down...derActiveX.cab]
{D27CDB6E-AE6D-11CF-9600-000000000000} [http://download.macromedia.com/pub/s...sh/swflash.cab]
{D27CDB6E-AE6D-11CF-96B8-444553540000} [http://download.macromedia.com/pub/s...sh/swflash.cab]


**** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm
SEARCH: [CustomizeSearch] http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm