Messaggio Da System A Alert

[Helmut1978]

Spessissimo si apre una finestra con scritto:
" MESSAGGIO DI SYSTEM A ALERT. STOP!
WINDOWS REQUIRES IMMEDIATE ATTENTION.
WINDOWS HAS FOUND CRITICAL ERRORS.
RUN REGISTRY REPAIR FROM: http://FIX64.COM
FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!",

A me nn sembra un messaggio del sistema operativo, ma piuttosto una sorta di spam di qualche programma che un amico mi ha inserito, perchè invita sempre ad andare su un sito diverso ( cleaner qualcosa ed altri ) e fare delle operazioni.

Che mi consigliate? Come posso individuare il programma in questione x disinstallarlo?

[H@cK€r84]

dovrebbe bastare andare a disabilitare il servizio messenger di win start/esegui/services.msc e disabilita il servio messenger
poi per sicurezza posta un log di hjackthis

[H@cK€r84]

dovrebbe bastare andare a disabilitare il servizio messenger di win start/esegui/services.msc e disabilita il servio messenger
poi per sicurezza posta un log di HJ

[tecnico24]

scarica Smitfraudfix http://siri.urz.free.fr/Fix/SmitfraudFix.zip
e decomprimilo in una cartella.
Apri la cartella con SmitfraudFix ed avvia Smitfraudfix.cmd.
Premi 2 e dai invio; riceverai questo messaggio: "Registry cleaning - Do you want to clean the registry?".
Conferma ("Y" e invio); conferma eventuali altre domande.

Riavvia.
Posta il contenuto del file C:\\rapport.txt

[Helmut1978]

Dovrebbe essere questo:

-----------------------------------------------------

SmitFraudFix v2.238

Scan done at 14.15.56,51, 06/10/2007
Run from C:\Documents and Settings\david\Desktop\programmi\SmitfraudFix
OS: Microsoft Windows XP [Versione 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in normal mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1 localhost

»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files


»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: WAN (PPP/SLIP) Interface
DNS Server Search Order: 193.70.152.15
DNS Server Search Order: 193.70.152.25

HKLM\SYSTEM\CCS\Services\Tcpip\..\{FEC52139-A1B7-4E7B-BCD2-E75987A76E40}: NameServer=193.70.152.15 193.70.152.25
HKLM\SYSTEM\CS1\Services\Tcpip\..\{FEC52139-A1B7-4E7B-BCD2-E75987A76E40}: NameServer=193.70.152.15 193.70.152.25


»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

[tecnico24]

come va?

[Helmut1978]

Il problema persiste, esattamente come prima....

[ste_95]

scarica hijackthis, link nella mia firma, fai al scansione e poi posta il log che viene fuori...

[tecnico24]

scaricati Superantispywarefree
avvialo,aggiornalo(check for updates),fai una scansione completa ed elimina le traccie che trova.

[Helmut1978]

Devo fare entrambe le cose o solo la seconda?