ciao a tutti, ho un problemino fastidioso sia con firefox 2.0 che con explorer.
all apertura della prima pagina con entrambi i browser, mi si apre un finestra popup che normalmente rimanda ad una di ebay (non l ebay "originale"....)
ho provato a far pulizia sia con adaware che con spybot, ma il problema nn l ho risolto. che potrei fare?
Trader professionista indipendente
http://www.j-b.cloud
Postare in sicurezza informatica e virusOriginariamente inviato da solid-snake
che potrei fare?
Ti sposto
I can see much clearer now, I'm blind.
Io fui già quel che voi siete, Quel ch'io son voi anco sarete.
Remember that death is not the end, but only a transition
All that we learn this time is carried beyond this life.
posta un log di Hijackthis http://www.merijn.org/files/hijackthis.zip
metti il programma in un cartella dedicata in c:\programmi\Hijackthis
lancia e clicca il tasto"do a system scan and save a log file.
otterrai un file di testo che dovrai postare
ecco cio che mi esce....
codice:Logfile of HijackThis v1.99.1 Scan saved at 8.33.32, on 22/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe C:\Programmi\Symantec AntiVirus\DefWatch.exe C:\WINDOWS\system32\svchost.exe C:\Programmi\Symantec AntiVirus\Rtvscan.exe C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\Programmi\File comuni\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~2\VPTray.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Programmi\Internet Explorer\iexplore.exe C:\Programmi\Logitech\Video\LogiTray.exe C:\WINDOWS\system32\ctfmon.exe c:\progra~1\intern~1\iexplore.exe C:\Programmi\Skype\Phone\Skype.exe C:\Programmi\Logitech\Video\FxSvr2.exe C:\WINDOWS\system32\wuauclt.exe C:\Programmi\Mozilla Thunderbird\thunderbird.exe C:\Programmi\Skype\Plugin Manager\SkypePM.exe C:\PROGRA~1\MOZILL~1\FIREFOX.EXE C:\Programmi\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.it/ R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file) O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - (no file) O2 - BHO: NetXfer - {83B80A9C-D91A-4F22-8DCF-EA7204039F79} - C:\Programmi\Xi\NetXfer\NXIEHelper.dll O3 - Toolbar: NetXfer - {C16CBAAC-A75C-4DB5-A0DD-CDF5CAFCDD3A} - C:\Programmi\Xi\NetXfer\NXToolBar.dll O4 - HKLM\..\Run: [SetRefresh] C:\Programmi\Compaq\SetRefresh\SetRefresh.exe O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE O4 - HKLM\..\Run: [ccApp] "C:\Programmi\File comuni\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~2\VPTray.exe O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [MetaFragCloseAdmin] C:\Documents and Settings\All Users\Dati applicazioni\BOOB STORE META FRAG\Realfast.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Programmi\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Programmi\Logitech\Video\LogiTray.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Storepure] C:\DOCUME~1\W4\DATIAP~1\TICKJU~1\extragrey.exe O4 - HKCU\..\Run: [LogitechSoftwareUpdate] C:\Programmi\Logitech\Video\ManifestEngine.exe boot O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Global Startup: EasyDailyNote.lnk = C:\Programmi\EasyDailyNote\EasyDailyNote.exe O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\Conceptronic\Software Bluetooth\btsendto_ie_ctx.htm O8 - Extra context menu item: Salva oggetto con NetXfer - C:\Programmi\Xi\NetXfer\NXAddLink.html O8 - Extra context menu item: Salva tutti gli oggetti con NetXfer - C:\Programmi\Xi\NetXfer\NXAddList.html O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\Conceptronic\Software Bluetooth\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\Conceptronic\Software Bluetooth\btsendto_ie.htm O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe O15 - Trusted Zone: http://safety.live.com O15 - Trusted Zone: http://*.update.microsoft.com O15 - Trusted Zone: http://*.windowsupdate.microsoft.com O15 - Trusted Zone: http://download.windowsupdate.com O15 - Trusted Zone: http://*.windowsupdate.com O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} - http://security.symantec.com/sscv6/S...in/AvSniff.cab O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.safety.live.com/reso...lscbase969.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} - http://security.symantec.com/sscv6/S.../bin/cabsa.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = SELDA.locale O17 - HKLM\Software\..\Telephony: DomainName = SELDA.locale O17 - HKLM\System\CCS\Services\Tcpip\..\{25278547-EC2B-46F7-B7BD-04301B404FF4}: NameServer = 192.168.0.220,194.20.8.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = SELDA.locale O17 - HKLM\System\CS1\Services\Tcpip\..\{25278547-EC2B-46F7-B7BD-04301B404FF4}: NameServer = 192.168.0.220,194.20.8.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = SELDA.locale O17 - HKLM\System\CS2\Services\Tcpip\..\{25278547-EC2B-46F7-B7BD-04301B404FF4}: NameServer = 192.168.0.220,194.20.8.1 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: igfxcui - igfxsrvc.dll (file missing) O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Programmi\Symantec AntiVirus\DefWatch.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: Servizio Discovery di Symantec System Center (NSCTOP) - Symantec Corporation - C:\PROGRA~1\Symantec\SYMANT~1\NSCTOP.EXE O23 - Service: SAVRoam (SavRoam) - symantec - C:\Programmi\Symantec AntiVirus\SavRoam.exe O23 - Service: ServiceLayer - Nokia. - C:\Programmi\File comuni\PCSuite\Services\ServiceLayer.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Programmi\Symantec AntiVirus\Rtvscan.exe
Trader professionista indipendente
http://www.j-b.cloud
se non ti dicono niente fixa
O4 - HKLM\..\Run: [MetaFragCloseAdmin] C:\Documents and Settings\All Users\Dati applicazioni\BOOB STORE META FRAG\Realfast.exe
O4 - HKCU\..\Run: [Storepure] C:\DOCUME~1\W4\DATIAP~1\TICKJU~1\extragrey.exe
O4 - Global Startup: EasyDailyNote.lnk = C:\Programmi\EasyDailyNote\EasyDailyNote.exe
O8 - Extra context menu item: Salva oggetto con NetXfer - C:\Programmi\Xi\NetXfer\NXAddLink.html
O8 - Extra context menu item: Salva tutti gli oggetti con NetXfer - C:\Programmi\Xi\NetXfer\NXAddList.html
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = SELDA.locale
O17 - HKLM\Software\..\Telephony: DomainName = SELDA.locale
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = SELDA.locale
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = SELDA.locale
dopodiché se ti funge tutto risali ai file ed eliminali
ciau
Permessi di invio
Rispondi quotando