rvocqvdm.gif

[tecnico24]

disabilita il ripristino configurazione di sistema ed esegui questo
quando ha finito,posta il log e riabilita il ripristino.

[dice129]

sta facendo la scansione con prevx...e quell'altro link ke si blocca

come si disattiva il ripristino di sistema

[ste_95]

così:

http://www.sicurezzainrete.com/disab...em_restore.htm

[dice129]

cmq ho fatto cn prevx ma nn ha trovato niente..se metto il log ke mi fa ad-aware va bene?

[ste_95]

si mettilo, ma comunque fai girare anche Virit...

[dice129]

dove trovo questo VIRIT?

questo è il log:

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 28-09-2007 13.22.55
BasePriority : Normal

#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.22.58
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\

BasePriority : Normal
FileSize : 106 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)

CompanyName : Microsoft Corporation
FileDescription : Applicazione Servizi e Controller
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Sistema operativo Microsoft


#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.00
BasePriority : Normal
FileSize : 13 KB

CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft


#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.02
BasePriority : Normal
FileSize : 14 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft


#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 28-09-2007 13.23.03
BasePriority : Normal
FileSize : 14 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft

#:7 [winlogon.exe]
FilePath : c:\windows\system32\
ThreadCreationTime : 28-09-2007 13.23.05
BasePriority : Normal
FileSize : 493 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)

CompanyName : Microsoft Corporation
FileDescription : Applicazione Accesso a Windows NT
InternalName : winlogon
OriginalFilename : WINLOGON.EXE


#:8 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 28-09-2007 13.23.05
BasePriority : Normal
FileSize : 1010 KB
FileVersion : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 6.00.2900.2180
CompanyName : Microsoft Corporation
FileDescription : Esplora risorse
InternalName : explorer
OriginalFilename : EXPLORER.EXE


#:9 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.05
BasePriority : Normal
FileSize : 56 KB
FileVersion : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)

CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft


#:10 [avp.exe]
FilePath : C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 6.0\
ThreadCreationTime : 28-09-2007 13.23.07
BasePriority : Normal
FileSize : 136 KB
FileVersion : 6.0.0.299
ProductVersion : 6.0.0.299
Copyright : Copyright
CompanyName : Kaspersky Lab
FileDescription : Kaspersky Anti-Virus
InternalName : AVP
OriginalFilename : AVP.EXE


#:11 [btwdins.exe]
FilePath : C:\Programmi\Roper\AirBlue Bluetooth Software\bin\
ThreadCreationTime : 28-09-2007 13.23.07
BasePriority : Normal
FileSize : 252 KB
FileVersion : 4.0.1.2900
ProductVersion : 4.0.1.2900
Copyright : Copyright 2000-2005, Broadcom Corporation.
CompanyName : Broadcom Corporation.
FileDescription : Bluetooth Support Server
InternalName : BTWDIns
OriginalFilename : BTWDIns.EXE
ProductName : Bluetooth Software 4.0.1.2900


#:12 [nvsvc32.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.07
BasePriority : Normal
FileSize : 124 KB
FileVersion : 6.14.10.7189
ProductVersion : 6.14.10.7189
Copyright : (C) NVIDIA Corporation. All rights reserved.
CompanyName : NVIDIA Corporation
FileDescription : NVIDIA Driver Helper Service, Version 71.89
InternalName : NVSVC
OriginalFilename : nvsvc32.exe
ProductName : NVIDIA Driver Helper Service, Version 71.89


#:13 [pnkbstra.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.07
BasePriority : Normal
FileSize : 65 KB
Created on : 29/03/2007 21.21.13
Last accessed : 28/09/2007 13.48.55
Last modified : 06/08/2007 12.46.01

#:14 [pastisvc.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 28-09-2007 13.23.08
BasePriority : Normal
FileSize : 52 KB
Created on : 14/06/2007 17.40.46
Last accessed : 28/09/2007 13.48.54
Last modified : 14/01/2005 7.32.38

#:15 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 28-09-2007 13.23.08
BasePriority : Normal
FileSize : 14 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft


#:16 [aluschedulersvc.exe]
FilePath : C:\Programmi\Symantec\LiveUpdate\
ThreadCreationTime : 28-09-2007 13.23.08
BasePriority : Normal
FileSize : 97 KB
FileVersion : 3.0.0.171
ProductVersion : 3.0.0.171
Copyright : Copyright
CompanyName : Symantec Corporation
FileDescription : Automatic LiveUpdate Scheduler Service
InternalName : Automatic LiveUpdate Scheduler Service
OriginalFilename : ALUSchedulerSvc.exe
ProductName : LiveUpdate


#:17 [shwicon2k.exe]
FilePath : C:\Programmi\Multimedia Card Reader\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Idle
FileSize : 132 KB
FileVersion : 1, 4, 0, 8
ProductVersion : 1, 4, 0, 8
Copyright : Copyright c 2002
CompanyName : Alcor Micro, Corp.
ProductName : Multimedia Card Reader





¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Deep scanning and examining files (C

[dice129]

LA SECONDA PARTE DEL LOG

#:18 [hpwuschd2.exe]
FilePath : C:\Programmi\Hewlett-Packard\HP Software Update\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Normal
FileSize : 48 KB
FileVersion : 50.0.146.000
ProductVersion : 050.000.146.000
Copyright : Copyright (C) Hewlett-Packard Co. 1995-2004
CompanyName : Hewlett-Packard Co.
FileDescription : Hewlett-Packard Product Assistant
InternalName : hpwuSchd2
OriginalFilename : hpwuSchd2.exe
ProductName : hp digital imaging - hp all-in-one series


#:19 [hpcmpmgr.exe]
FilePath : C:\Programmi\HP\hpcoretech\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Normal
FileSize : 236 KB
FileVersion : 2.1.1.0
ProductVersion : 2.1.6.2
Copyright : Copyright (C) Hewlett-Packard. 2002-2005
CompanyName : Hewlett-Packard Company
FileDescription : HP Framework Component Manager Service
InternalName : HPComponentManagerService module
OriginalFilename : HpCmpMgr.exe
ProductName : hp coretech (COmponent REuse TECHnology)


#:20 [wscntfy.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Windows Security Center Notification App
InternalName : wscntfy.exe
OriginalFilename : wscntfy.exe
ProductName : Microsoft


#:21 [hpotdd01.exe]
FilePath : C:\Programmi\HP\Digital Imaging\bin\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Normal
FileSize : 224 KB
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
Copyright : Copyright
CompanyName : Hewlett-Packard
FileDescription : hpotdd01
InternalName : hpotdd01
OriginalFilename : hpotdd01.exe
ProductName : Hewlett-Packard hpotdd01


#:22 [opware32.exe]
FilePath : C:\Programmi\ScanSoft\OmniPageSE\
ThreadCreationTime : 28-09-2007 13.23.20
BasePriority : Normal
FileSize : 48 KB
FileVersion : 11.0
ProductVersion : 11.0
Copyright : Copyright
CompanyName : ScanSoft, Inc
FileDescription : OCR Aware (32-bit)
InternalName : Opware32.exe
OriginalFilename : Opware32.exe
ProductName : OmniPage SE


#:23 [kbd.exe]
FilePath : C:\HP\KBD\
ThreadCreationTime : 28-09-2007 13.23.21
BasePriority : High
FileSize : 60 KB
FileVersion : 1.0.2.2.20205
ProductVersion : 1.0.2.2
Copyright : Copyright
CompanyName : Hewlett-Packard Company
FileDescription : KBD EXE
InternalName : KBD EXE
OriginalFilename : Kbd.exe
ProductName : Hewlett-Packard Company KBD EXE


#:24 [avp.exe]
FilePath : C:\Programmi\Kaspersky Lab\Kaspersky Anti-Virus 6.0\
ThreadCreationTime : 28-09-2007 13.23.21
BasePriority : Normal
FileSize : 136 KB
FileVersion : 6.0.0.299
ProductVersion : 6.0.0.299
Copyright : Copyright
CompanyName : Kaspersky Lab
FileDescription : Kaspersky Anti-Virus
InternalName : AVP
OriginalFilename : AVP.EXE
ProductName : Kaspersky Anti-Virus


#:25 [qttask.exe]
FilePath : C:\Programmi\QuickTime\
ThreadCreationTime : 28-09-2007 13.23.21
BasePriority : Normal
FileSize : 276 KB
FileVersion : 7.1
ProductVersion : QuickTime 7.1
Copyright : Copyright Apple Computer, Inc. 1989-2006
CompanyName : Apple Computer, Inc.
FileDescription : QuickTime Task
InternalName : QuickTime Task
OriginalFilename : QTTask.exe
ProductName : QuickTime


#:26 [hpztsb09.exe]
FilePath : C:\WINDOWS\system32\spool\drivers\w32x86\3\
ThreadCreationTime : 28-09-2007 13.23.21
BasePriority : Normal
FileSize : 172 KB
FileVersion : 2.236.4.0
ProductVersion : 2.236.4.0
Copyright : Copyright (c) Hewlett-Packard Company 1999-2003
CompanyName : HP
ProductName : HP DeskJet


#:27 [ctfmon.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 28-09-2007 13.23.41
BasePriority : Normal
FileSize : 15 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
OriginalFilename : CTFMON.EXE
ProductName : Microsoft


#:28 [bttray.exe]
FilePath : C:\Programmi\Roper\AirBlue Bluetooth Software\
ThreadCreationTime : 28-09-2007 13.23.41
BasePriority : Normal
FileSize : 568 KB
FileVersion : 4.0.1.2900
ProductVersion : 4.0.1.2900
Copyright : Copyright 2000-2005, Broadcom Corporation.
CompanyName : Broadcom Corporation.
FileDescription : Bluetooth Tray Application
InternalName : BTTray
OriginalFilename : BTTray.exe
ProductName : Bluetooth Software 4.0.1.2900


#:29 [dslmon.exe]
FilePath : C:\Programmi\SAGEM\SAGEM F@st 800-840\
ThreadCreationTime : 28-09-2007 13.23.41
BasePriority : Normal
FileSize : 940 KB
FileVersion : 1, 0, 0, 1
ProductVersion : 1, 0, 0, 1
Copyright : Copyright (C) 2000
FileDescription : ADIMON MFC Application
InternalName : DSLMON
OriginalFilename : ADIMON.EXE
ProductName : DSLMON Application


#:30 [msnmsgr.exe]
FilePath : C:\Programmi\MSN Messenger\
ThreadCreationTime : 28-09-2007 13.24.08
BasePriority : Normal
FileSize : 5541 KB
FileVersion : 8.1.0178.00
ProductVersion : 8.1.0178
Copyright : Copyright (c) Microsoft Corporation. All rights reserved.
CompanyName : Microsoft Corporation
FileDescription : Messenger
InternalName : msnmsgr.exe
OriginalFilename : msnmsgr.exe
ProductName : Messenger


#:31 [iexplore.exe]
FilePath : C:\Programmi\Internet Explorer\
ThreadCreationTime : 28-09-2007 13.24.14
BasePriority : Normal
FileSize : 607 KB
FileVersion : 7.00.5730.11 (winmain(wmbla).061017-1135)
ProductVersion : 7.00.5730.11
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Windows


#:32 [usnsvc.exe]
FilePath : C:\Programmi\MSN Messenger\
ThreadCreationTime : 28-09-2007 13.25.12
BasePriority : Normal
FileSize : 94 KB
FileVersion : 8.1.0178.00
ProductVersion : 8.1.0178
Copyright : Copyright (c) Microsoft Corporation. All rights reserved.
CompanyName : Microsoft Corporation
FileDescription : Messenger Sharing USN Journal Reader Service
InternalName : usnsvc.exe
OriginalFilename : usnsvc.exe
ProductName : Messenger


#:33 [regedit.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 28-09-2007 13.45.12
BasePriority : Normal
FileSize : 148 KB
FileVersion : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
ProductVersion : 5.1.2600.2180
CompanyName : Microsoft Corporation
FileDescription : Editor del Registro di sistema
InternalName : REGEDIT
OriginalFilename : REGEDIT.EXE
ProductName : Sistema operativo Microsoft
#:34 [hptskmgr.exe]
FilePath : C:\Programmi\HP\hpcoretech\comp\
ThreadCreationTime : 28-09-2007 13.54.26
BasePriority : Normal
FileSize : 132 KB
FileVersion : 2.1.6.2
ProductVersion : 2.1.6.2
Copyright : Copyright (C) Hewlett-Packard. 2002-2005
CompanyName : Hewlett-Packard Company
FileDescription : HP Task Management Component
InternalName : HP Task Management Component
OriginalFilename : HPTskMgr.exe
ProductName : hp coretech (COmponent REuse TECHnology)
#:35 [ad-aware.exe]
FilePath : C:\Programmi\Lavasoft\Ad-aware 6\
ThreadCreationTime : 28-09-2007 13.54.39
BasePriority : Normal
FileSize : 724 KB
FileVersion : 6.0.1.183
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus

[tecnico24]

virit lo trovi qua:
www.tgsoft.it/italy/index_ita.html