Salve sono montesipc,

ho trovato il forum in un momento di incertezza e spero che possiate aiutarmi... please!!!
Il mio nb ha preso un trojan linkoptimizer , che mi sta creando qualche problema!!!

Sintomi:
- ha cancellato dal menł di avvio il pannello di controllo;
- ha cancellato il task manager;
- blocca la connessione ad internet;
(rilevato e corretto da Spybot- Search & Destroy, ma tornano ad ogni riavvio)
- credo che abbia creato un altro utente (Administrator???);
- mi comunica sempre: "your pc is infected" e cerca di collegarsi continuamente ad un sito www.go.antivirus....
- mi chiede ogni 3 minuti!!! di installare (file che ho gią fixato una prima volta con HijackThis) C:\WINDOWS\System32\printer.exe


Ho seguito alcune dei vostri consigli per eliminarlo, ma vorrei un aiuto.

Vi posto il log della scansione di Hijack 2.02 per un controllo da "esperti "

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11.22.09, on 22/08/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\System32\svchost.exe
C:\VEXPLITE\viritsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\Explorer.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\HijackThis\HiJackThis2.02.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {DA39029C-D291-A968-3FF4-D0990D5CB5FC} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Policies\Explorer\Run: [asushlp] "c:\windows\asushlp.exe"
O4 - HKLM\..\Policies\Explorer\Run: [ibmjet] "c:\windows\ibmjet.exe"
O4 - HKLM\..\Policies\Explorer\Run: [lanmon] "c:\windows\lanmon.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download with GetRight - C:\Programmi\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Programmi\GetRight\GRbrowse.htm
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5ADE1E9F-F596-4CD7-A2AE-76BFF021B4A7}: NameServer = 85.255.114.109,85.255.112.153
O17 - HKLM\System\CCS\Services\Tcpip\..\{85C48D1A-CB2E-4665-911A-5F589EEEC100}: NameServer = 85.255.114.109,85.255.112.153
O17 - HKLM\System\CCS\Services\Tcpip\..\{BCB8157E-8EE1-4E92-8BF9-3A15B3C9B118}: NameServer = 85.255.114.109,85.255.112.153
O17 - HKLM\System\CCS\Services\Tcpip\..\{BD4DAA1C-31C3-4E0A-965B-32D1459B4461}: NameServer = 85.255.114.109,85.255.112.153
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: Virit eXplorer Lite (viritsvclite) - TG Soft Sas www.tgsoft.it - C:\VEXPLITE\viritsvc.exe

--
End of file - 3931 bytes


Grazie per l'aiuto