dialer / blocco connessione adsl

[fenderjazz]

ho un amico con un problema, in pratica ha un dialer che gli blocca la connessione internet (in pratica continua a cadere), gli ho passato adaware e spybot, ma non ha risolto, questo è il log con Hijackthis, che deve fare? Grazie in anticipo a tutti

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0.10.15, on 10/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CNAB4RPK.EXE
C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Sybase\SQL Anywhere 8\win32\dbsrv8.exe
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
c:\ma\marchost.exe
C:\Programmi\Network Associates\Common Framework\FrameworkService.exe
C:\Programmi\Network Associates\VirusScan\mcshield.exe
C:\Programmi\Network Associates\VirusScan\vstskmgr.exe
c:\ma\rstate.exe
C:\Programmi\CheckPoint\SecuRemote\bin\SR_Service. exe
C:\Programmi\CheckPoint\SecuRemote\bin\SR_WatchDog .exe
C:\PortaleOffLine\Apache Software Foundation\Tomcat 5.0\bin\tomcat5.exe
C:\Programmi\CheckPoint\SecuRemote\bin\SR_GUI.exe
C:\WINDOWS\system32\mqsvc.exe
C:\Programmi\Hewlett-Packard\Shared\hpqwmiex.exe
C:\WINDOWS\system32\mqtgsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\AccelerometerSt.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
C:\WINDOWS\SMINST\Scheduler.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Programmi\Network Associates\VirusScan\SHSTAT.EXE
C:\Programmi\Network Associates\Common Framework\UpdaterUI.exe
C:\Programmi\Trust\Trust MD3100 USB ADSL MODEM\CnxDslTb.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe
c:\programmi\analog devices\core\mswinxpnet.exe
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\ma\rstate.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\WinZip\Wzqkpick.exe
c:\ma\rsstatus.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\MSN Messenger\usnsvc.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\134112\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.family-banker.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.family-banker.it
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Programmi\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [AccelerometerSysTrayApplet] C:\WINDOWS\system32\AccelerometerSt.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Programmi\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe
O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [Scheduler] C:\WINDOWS\SMINST\Scheduler.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [WatchDog] C:\Programmi\InterVideo\DVD Check\DVDCheck.exe
O4 - HKLM\..\Run: [Live Support Host] "c:\ma\marchost.exe" -servicehelper
O4 - HKLM\..\Run: [ShStatEXE] "C:\Programmi\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Programmi\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Programmi\Trust\Trust MD3100 USB ADSL MODEM\CnxDslTb.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [EPM Agent] c:\ma\rstate.exe /LOGON
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: DVD Check.lnk = C:\Programmi\InterVideo\DVD Check\DVDCheck.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\Wzqkpick.exe
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.family-banker.it
O15 - Trusted Zone: http://*.sportellomobile.it
O15 - Trusted Zone: http://*.sportellomobile.it (HKLM)
O16 - DPF: {1C203F13-95AD-11D0-A84B-00A0247B735B} (Sheridan ActiveTreeView Control) - http://www.medcampus.it/webcampus/download/sstree.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{835126FE-50D4-4D26-8C91-5930D42E7937}: NameServer = 213.234.128.211 213.234.132.130
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Adaptive Server Anywhere - medspr (ASANYs_medspr) - Unknown owner - C:\Programmi\Sybase\SQL.exe (file missing)
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Programmi\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Live Support Host (marchost) - Mobile Automation, Inc. - c:\ma\marchost.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Programmi\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Programmi\Network Associates\VirusScan\mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Programmi\Network Associates\VirusScan\vstskmgr.exe
O23 - Service: Manage Anywhere Studio Agent (MobileAutmationAgentService) - iPass Inc. - c:\ma\rstate.exe
O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe
O23 - Service: Check Point SecuRemote Service (SR_Service) - Check Point Software Technologies - C:\Programmi\CheckPoint\SecuRemote\bin\SR_Service. exe
O23 - Service: Check Point SecuRemote WatchDog (SR_WatchDog) - Check Point Software Technologies - C:\Programmi\CheckPoint\SecuRemote\bin\SR_WatchDog .exe
O23 - Service: Apache Tomcat (Tomcat5) - Apache Software Foundation - C:\PortaleOffLine\Apache Software Foundation\Tomcat 5.0\bin\tomcat5.exe

--
End of file - 9549 bytes

[OYS]

A meno che tu non conosca la cartella C:\ma, falla controllare da un antivirus.


Fixa questa:

O16 - DPF: {1C203F13-95AD-11D0-A84B-00A0247B735B} (Sheridan ActiveTreeView Control) - http://www.medcampus.it/webcampus/download/sstree.cab



Poi fagli fare una scansione con AWF, e posta il risultato della scansione.

[fenderjazz]

ok... gli ho fatto fixare con Hijackthis questa:

O16 - DPF: {1C203F13-95AD-11D0-A84B-00A0247B735B} (Sheridan ActiveTreeView Control) - http://www.medcampus.it/webcampus/download/sstree.cab



e questo è la scansione di AWF

è lunghissima.... la posto divisa:



Find AWF report by noahdfear ©2006
Version 1.40



bak folders found
~~~~~~~~~~~

Il volume nell'unit… C non ha etichetta.
Numero di serie del volume: E415-BB71

Directory di C:\SYSTEM.SAV\UTIL\TLBXBAK

0 File 0 byte
28 Directory 55.332.655.104 byte disponibili


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

544 13 Mar 2006 "C:\System.sav\util\tlbxbak\CLEANUP\SFT1.bto"
318 4 Nov 2005 "C:\System.sav\util\tlbxbak\CLEANUP\TI_TWEAK.b to"
1078 16 Sep 2003 "C:\System.sav\util\tlbxbak\Cleanup.EUE\dmiuia.bto "
573 7 Oct 2003 "C:\System.sav\util\tlbxbak\Cleanup.EUE\ExtendRTR. bto"
599 17 Jan 2003 "C:\System.sav\util\tlbxbak\Preos.eue\ExtendSTR.bt o"
2000 5 Oct 2004 "C:\System.sav\util\tlbxbak\Cleanup.EUE\INTELRES.B TO"
850 30 Apr 2004 "C:\System.sav\util\tlbxbak\Cleanup.EUE\INTELTV.BT O"
23287 2 Feb 2006 "C:\System.sav\util\tlbxbak\Cleanup.EUE\MobClean.b to"
721 20 Apr 2005 "C:\System.sav\util\tlbxbak\Cleanup.EUE\OCA.bt o"
1326 6 Dec 2005 "C:\System.sav\util\tlbxbak\Cleanup.EUE\SFT2.b to"
6423 9 Jan 2006 "C:\System.sav\util\tlbxbak\Cleanup.EUE\SFT3_MLP.B TO"
962 7 Dec 2005 "C:\System.sav\util\tlbxbak\Cleanup.EUE\SFT4_MLS.B TO"
415 30 Jan 2006 "C:\System.sav\util\tlbxbak\Cleanup.EUE\SFT_PL.BTO "
1230 3 Oct 2005 "C:\System.sav\util\tlbxbak\Cleanup.EUE\VIDTWEAK.B TO"
670 10 Jan 2006 "C:\System.sav\util\tlbxbak\Preos.Pi\VIDTWEAK. BTO"
1368 11 Sep 2003 "C:\System.sav\util\tlbxbak\Cleanup.EUE\wipeIcon.B TO"
515 20 Nov 2003 "C:\System.sav\util\tlbxbak\Preos.eue\wipeicon.bto "
3864 17 Feb 2006 "C:\System.sav\util\tlbxbak\Cleanup.EUE\ZZEnable.b to"
1378 26 Aug 2004 "C:\System.sav\util\tlbxbak\POSTMOBP\ZZEnable. bto"
122880 17 Jul 2003 "C:\System.sav\util\cpqci.dll"
122880 17 Jul 2003 "C:\System.sav\util\tlbxbak\dmiuia\CpqCI.dll"
133 3 Sep 2003 "C:\System.sav\util\tlbxbak\dmiuia\dmiuia.cmd"
320 18 Jul 2003 "C:\System.sav\util\tlbxbak\dmiuia\dmiuia.reg"
57344 17 Jul 2003 "C:\System.sav\util\tlbxbak\dmiuia\UIAUTIL.EXE "
2883 21 May 2002 "C:\System.sav\util\tlbxbak\FixUps\CHECKDLT.DO N"
360 19 May 2003 "C:\System.sav\scripts\TAG.BTO"
360 19 May 2003 "C:\System.sav\util\tlbxbak\FixUps\TAG.BTO"
28 15 May 2003 "C:\System.sav\scripts\TAG.DON"
28 15 May 2003 "C:\System.sav\util\tlbxbak\FixUps\TAG.DON"
97 4 Oct 2005 "C:\System.sav\util\tlbxbak\GGLTB\PreinGGL.CMD "
86016 4 Oct 2005 "C:\System.sav\util\tlbxbak\GGLTB\PreinGGL.exe "
513 7 Mar 2006 "C:\System.sav\util\tlbxbak\GGLTB\PreinGGL.INI "
7596 23 Feb 2006 "C:\System.sav\util\tlbxbak\Install\Adobe.bto"
1103 1 Feb 2006 "C:\System.sav\util\tlbxbak\Install\APINS.BTO"
355 4 Aug 2004 "C:\System.sav\util\tlbxbak\Install\BrandIT.bt o"
832 27 Sep 2004 "C:\System.sav\util\tlbxbak\Install\Btooth.BTO "
3236 14 Feb 2006 "C:\System.sav\util\tlbxbak\Install\FPReader.B TO"
10789 7 Mar 2006 "C:\System.sav\util\tlbxbak\Install\Google.bto "
572 2 Nov 2005 "C:\System.sav\util\tlbxbak\Install\Hptools.bt o"
420 15 Nov 2005 "C:\System.sav\util\tlbxbak\Install\HpUpd.bto"
692 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install\HSC.bto"
28 22 Jun 2005 "C:\System.sav\util\tlbxbak\Install\HSCComp.in i"
830 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install\MPrint.bto "
1124 21 Oct 2005 "C:\System.sav\util\tlbxbak\Install\OEMLink.bt o"
350 4 Mar 2003 "C:\System.sav\util\tlbxbak\Install\OOBEXP.bto "
319 4 Mar 2003 "C:\System.sav\util\tlbxbak\POSTMOBP\OOBEXP.bt o"
389 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install\Prodtour.b to"
581 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install\SDMPL.bto"
477 23 Mar 2004 "C:\System.sav\util\tlbxbak\Install\Touchpad.B TO"
371 19 Aug 2005 "C:\System.sav\util\tlbxbak\Install\video945.B TO"
981 10 Jan 2006 "C:\System.sav\util\tlbxbak\Install\VideoCombo.bto "
862 9 Nov 2005 "C:\System.sav\util\tlbxbak\Install\WMP10.bto"
400 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install.eue\BiosCfg.bt o"
1915 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install.eue\Windvd.bto "
764 6 Mar 2006 "C:\System.sav\util\tlbxbak\Install.eue\zIE_Upd.bt o"
481 8 Mar 2006 "C:\System.sav\util\tlbxbak\install.pi\ATIM52T.BTO "
1021 26 Jan 2006 "C:\System.sav\util\tlbxbak\install2\Assistwl. BTO"
531 16 Nov 2005 "C:\System.sav\util\tlbxbak\install2\DNetCln.b to"
331 1 Nov 2005 "C:\System.sav\util\tlbxbak\install2\HPGuide.b to"
542 13 Dec 2005 "C:\System.sav\util\tlbxbak\install2\HpPhone.b to"
4417 11 Nov 2005 "C:\System.sav\util\tlbxbak\install2\InetSec.b to"
507 3 Nov 2005 "C:\System.sav\util\tlbxbak\install2\LSHSI.bto "
617 24 Aug 2004 "C:\System.sav\util\tlbxbak\install2\MultWl.BT O"
637 21 Dec 2005 "C:\System.sav\util\tlbxbak\Install2.eue\CredMan.b to"
1225 9 Feb 2006 "C:\System.sav\util\tlbxbak\Install2.eue\ESPtools. bto"
83 26 Feb 2004 "C:\System.sav\util\tlbxbak\Install2.eue\NAVUpd.BT O"
565 1 Nov 2005 "C:\System.sav\util\tlbxbak\Install2.eue\SmartC.bt o"
445 6 Dec 2005 "C:\System.sav\util\tlbxbak\Install2.eue\XQuickLB. bto"
71680 2 Oct 1998 "C:\nuovo_antiriciclaggio\Setup.exe"
23040 19 Aug 2004 "C:\WINDOWS\system32\setup.exe"
9736192 10 Dec 2004 "C:\download\driver\14359\setup.exe"
32576 15 Aug 2007 "C:\KAV\KAV70\Italian\setup.exe"
56320 5 Sep 2001 "C:\Programmi\InstallShield Installation Information\{05B613D1-7BD6-4DFA-B54F-1758CD7D71ED}\setup.exe"
121064 6 Apr 2005 "C:\Programmi\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe"
117200 16 Jul 2004 "C:\Programmi\InstallShield Installation Information\{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}\setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{3FE31026-246F-4BAF-A313-8838962BCB95}\setup.exe"
139264 10 Jan 2000 "C:\Programmi\InstallShield Installation Information\{53928224-924B-11D4-9583-00D05CFFFFFC}\Setup.exe"
35840 3 Nov 1999 "C:\Programmi\InstallShield Installation Information\{5D97A4A7-C274-4B63-86D9-07A33435F505}\Setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{75ECB75A-522C-4312-8DE7-597CDA9D96A3}\setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{81BB112E-C4DF-4CDF-ADB4-21D26219F112}\setup.exe"
127488 3 Nov 1999 "C:\Programmi\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\Setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{9E11661F-C75F-4566-A91F-85BD90D09C70}\setup.exe"
46080 8 Jan 2000 "C:\Programmi\InstallShield Installation Information\{9FCF2FC0-8268-11D4-A313-0006290D766E}\Setup.exe"
188928 26 Aug 2004 "C:\Programmi\InstallShield Installation Information\{DDC5AF8D-A320-4A8C-805D-9063C6352127}\Setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{E0DBC47C-ED3F-4A1B-A929-9A26DAAA14B3}\setup.exe"
118736 22 Oct 2004 "C:\Programmi\InstallShield Installation Information\{E7485CE5-C004-44D6-AA3E-7EE4DFE2B70E}\setup.exe"
116688 19 Apr 2004 "C:\Programmi\InstallShield Installation Information\{F0A37341-D692-11D4-A984-009027EC0A9C}\setup.exe"
107512 2 Dec 2002 "C:\Programmi\InstallShield Installation Information\{FC6E442D-ACBF-4EE3-BB0F-E9EFD6A43D07}\setup.exe"
565248 11 Oct 2004 "C:\Programmi\Pirelli\Access Gateway USB Network\Setup.exe"
352768 12 Aug 1999 "C:\Programmi\PowerPoint Viewer\setup\SETUP.EXE"
8941568 28 Mar 2006 "C:\Programmi\Vodafone\Vodafone Mobile Connect\Setup.exe"
332288 1 Apr 1997 "C:\Programmi\WordView\setup\SETUP.EXE"
352768 18 Jun 1997 "C:\Programmi\XLView\setup\SETUP.EXE"
174080 7 Feb 2006 "C:\Programmi\Synaptics\SynTP\Media\Setup.exe"
11030152 8 Mar 2006 "C:\System.sav\util\tlbxbak\NAVUpd\setup.exe"
565248 11 Oct 2004 "C:\Programmi\Telecom Italia\AdslWizzy\Driver\AliceGateUSB\Setup.exe"
73728 12 Jan 1999 "C:\Programmi\Telecom Italia\AdslWizzy\Driver\EnterNet300\Setup.exe"
107512 2 Dec 2002 "C:\System.sav\util\tlbxbak\OOBEXP\Disk1\setup.exe "
20992 17 Aug 2001 "D:\MiniNT\system32\setup.exe"
3130 8 Mar 2006 "C:\System.sav\util\tlbxbak\NAVUpd\SNAVD_C6.200603 08.cva"
244 21 Oct 2005 "C:\System.sav\util\OEMLINK.INI"
244 21 Oct 2005 "C:\System.sav\util\tlbxbak\OEMLink\OEMLINK.IN I"
288 26 Aug 2004 "C:\System.sav\util\tlbxbak\OsUpdate\1QFE883667.bt o"
368 15 Dec 2005 "C:\System.sav\util\tlbxbak\OsUpdate\ADIHD.BTO "
391 17 Jan 2006 "C:\System.sav\util\tlbxbak\OsUpdate\AdobeCL.b to"
550 13 Jan 2006 "C:\System.sav\util\tlbxbak\preos\AdobeCl.bto"
389 11 Nov 2005 "C:\System.sav\util\tlbxbak\OsUpdate\Assistw1. BTO"
392 31 Oct 2005 "C:\System.sav\util\tlbxbak\OsUpdate\DataP.bto "
879 11 Nov 2005 "C:\System.sav\util\tlbxbak\OsUpdate\DNSP1.BTO "
773 4 Apr 2006 "C:\System.sav\util\tlbxbak\OsUpdate\FingerP.b to"
1160 14 May 2004 "C:\System.sav\util\tlbxbak\OsUpdate\MSCU.bto"
899 5 Dec 2005 "C:\System.sav\util\tlbxbak\OsUpdate\SUNJAVA.b to"
934 7 Nov 2005 "C:\System.sav\util\tlbxbak\OsUpdate\TIbus.bto "
863 15 Dec 2005 "C:\System.sav\util\tlbxbak\OSUPDATE.PI\1ESUXP.bto "
1462 19 May 2005 "C:\System.sav\util\tlbxbak\OSUPDATE.PI\MOBOSUPD.b to"
526 11 Jan 2006 "C:\System.sav\util\tlbxbak\OSUPDATE.PI\MSUAA. bto"
350 4 Mar 2003 "C:\System.sav\util\tlbxbak\Install\OOBEXP.bto "
319 4 Mar 2003 "C:\System.sav\util\tlbxbak\POSTMOBP\OOBEXP.bt o"
898 21 Jun 2004 "C:\System.sav\util\tlbxbak\POSTMOBP\RMDEV.bto "
3864 17 Feb 2006 "C:\System.sav\util\tlbxbak\Cleanup.EUE\ZZEnable.b to"
1378 26 Aug 2004 "C:\System.sav\util\tlbxbak\POSTMOBP\ZZEnable. bto"
498 10 Feb 2004 "C:\System.sav\util\tlbxbak\PRECLEAN.UP\CHKDISK.bt o"
391 17 Jan 2006 "C:\System.sav\util\tlbxbak\OsUpdate\AdobeCL.b to"
550 13 Jan 2006 "C:\System.sav\util\tlbxbak\preos\AdobeCl.bto"
616 10 Jan 2006 "C:\System.sav\util\tlbxbak\preos\ESUClean.bto "
619 29 Nov 2005 "C:\System.sav\util\tlbxbak\preos\MSCUClean.bt o"
1023 27 Jan 2006 "C:\System.sav\util\tlbxbak\preos\NISClean.bto "
540 12 Jul 2005 "C:\System.sav\util\tlbxbak\preos\Wlandrv.BTO"
573 7 Oct 2003 "C:\System.sav\util\tlbxbak\Cleanup.EUE\ExtendRTR. bto"
599 17 Jan 2003 "C:\System.sav\util\tlbxbak\Preos.eue\ExtendSTR.bt o"
1078 2 Dec 2004 "C:\System.sav\util\tlbxbak\Preos.eue\FBIBRAND.BTO "
466 7 Dec 2005 "C:\System.sav\util\tlbxbak\Preos.eue\MobPreos.BTO "
4840 1 Feb 2006 "C:\System.sav\util\tlbxbak\Preos.Pi\MobPreos. BTO"
462 14 Sep 2005 "C:\System.sav\util\tlbxbak\PREOS.RTR\MobPreos.BTO "
178 29 Jan 2002 "C:\System.sav\util\tlbxbak\Preos.eue\SetSRPDR.BTO "
178 29 Jan 2002 "C:\System.sav\util\tlbxbak\Preos.Pi\SetSRPDR. BTO"
213 7 Dec 2005 "C:\System.sav\util\tlbxbak\Preos.eue\STRegion.bto "
217 22 Apr 2003 "C:\System.sav\util\tlbxbak\Preos.Pi\STRegion. bto"
1368 11 Sep 2003 "C:\System.sav\util\tlbxbak\Cleanup.EUE\wipeIcon.B TO"

[fenderjazz]

è troppo lungo vi posto il link... forse è meglio


http://rapidshare.com/files/61536003/awf.txt.html



qualcuno sa dirmi come deve fare... la connessione gli dura un minuto scarso

[OYS]

La buona notizia è che il problema è risolvibile.
La brutta è che ora nn ho tempo fra due orette ti dirò cosa fare.

[fenderjazz]

grazie... attendo con ansia

[OYS]

scarica avenger
clicca su input script manually e poi sulla lente di ingrandimento.
nello spazio bianco inserisci con copia incolla queste righe:



folders to delete:
C:\SYSTEM.SAV\UTIL\TLBXBAK

folders to move:
C:\SYSTEM.SAV\UTIL\bak\TLBXBAK | C:\SYSTEM.SAV\UTIL\TLBXBAK



clicca su done.
poi sul semaforo con luce verde
due volte si,il pc si riavviera' e al ritorno posta il log di avenger(C:/avenger.txt)
poi dovresti essere a posto.

[fenderjazz]

ecco il log di avenger:


Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Service s\pmhlkqxo

*******************

Script file located at: \??\C:\mt^pxcjv.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Folder C:\SYSTEM.SAV\UTIL\TLBXBAK deleted successfully.


Folder folders to move: not found!
Deletion of folder folders to move: failed!

Could not process line:
folders to move:
Status: 0xc0000034



Could not open folder C:\SYSTEM.SAV\UTIL\bak\TLBXBAK | C:\SYSTEM.SAV\UTIL\TLBXBAK for deletion
Deletion of folder C:\SYSTEM.SAV\UTIL\bak\TLBXBAK | C:\SYSTEM.SAV\UTIL\TLBXBAK failed!

Could not process line:
C:\SYSTEM.SAV\UTIL\bak\TLBXBAK | C:\SYSTEM.SAV\UTIL\TLBXBAK
Status: 0xc0000033


Completed script processing.

*******************

Finished! Terminate.


ma continua a disconnettersi... e comunque quando ha aperto avenger gli dava un messaggio di errore in cui diceva che lo script è errato!!!

[OYS]

Lo script ti da errore quando clicchi sul semaforo di avenger o dopo?

[fenderjazz]

quando clicca sul semaforo
...
ha cliccato 2 o 3 volte
poi ha accettato
ha riavviato il computer
ma il dialer c'è ancora

quando compare questo dialer il nome è mswinxp
è possibile?
ha provato tutti gli antivirus e gli spyware possibili e immaginabili