__p9hepqkbj

[dreavil]

<_< mio pc è zozzo (

Logfile of HijackThis v1.99.1

Scan saved at 20.45.23, on 27/12/2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe

C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\__p9hEPQkbj.exe

C:\WINDOWS\explorer.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\asuskbservice.exe

C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\Programmi\Norton AntiVirus\navapsvc.exe

C:\WINDOWS\system32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe

C:\WINDOWS\__p9hEPQkbj.exe

C:\WINDOWS\System32\svchost.exe

C:\Programmi\Internet Explorer\iexplore.exe

C:\PROGRA~1\DAP\DAP.EXE

C:\Documents and Settings\Favale Augusto\Desktop\dreavilheadtz@yahoo_it\programmi dreavil\Messenger\YPager.exe

C:\Programmi\Internet Explorer\IEXPLORE.EXE

C:\Programmi\Norton AntiVirus\OPSCAN.EXE

C:\WINDOWS\system32\msiexec.exe

C:\Programmi\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe

C:\Programmi\Microsoft AntiSpyware\gcasDtServ.exe

C:\Programmi\Microsoft AntiSpyware\GIANTAntiSpywareUpdater.exe

C:\Programmi\Norton AntiVirus\OPSCAN.EXE

C:\PROGRA~1\WINZIP\winzip32.exe

C:\Documents and Settings\Favale Augusto\Impostazioni locali\Temp\HijackThis.exe

F2 - REG:system.ini: Shell=explorer.exe C:\WINDOWS\__p9hEPQkbj.exe

F2 - REG:system.ini: UserInit=C:\WINDOWS\SYSTEM32\Userinit.exe,,C:\WINDOWS\__p9hEPQkbj.exe

O4 - HKLM\..\Run: [sERVICES.EXE] C:\WINDOWS\__p9hEPQkbj.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [gcasServ] "C:\Programmi\Microsoft AntiSpyware\gcasServ.exe"

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O10 - Hijacked Internet access by New.Net

O17 - HKLM\System\CCS\Services\Tcpip\..\{1AF1F764-D1C4-41A1-846B-965B77EF0634}: NameServer = 193.70.152.25 193.70.192.25

O23 - Service: ASUSKeyboardService - ASUSTeK COMPUTER INC. - C:\WINDOWS\asuskbservice.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccPwdSvc.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\ccSetMgr.exe

O23 - Service: Servizio Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Programmi\Norton AntiVirus\navapsvc.exe

O23 - Service: %NVSVC.name% (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FILECO~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\SNDSrvc.exe

O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe

[pollicina]

[ben]dreavil[/ben][

[Steve Fox]

Sei sicuro che il log sia completo?

Fai una scansione qui prima poi risposta il log con il rapporto che salverai dalla scansione online:

<center></center>

<center></center>

<center>Powered by ShotGenius</center>