Newsgroup: it.comp.os.win.xp
Titolo: Lista sartup

Ciao
Secondo voi, posso togliere qualcosa dalla lista startup?  Se non erro, 
sono tutte le voci che iniziano con 04.  Certe non le conosco proprio 
:-(
Ciao e grazie
Marco
Logfile of HijackThis v1.99.1
Scan saved at 20.13.34, on 23/08/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\H3G\3G HSDPA Wireless Modem MD-@\WirelessCard.exe
C:\Program Files\MemoRex\MemoRex.exe
C:\Program Files\FreePOPs\freepopsd.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\WINDOWS\system32\cidaemon.exe
D:\Programmi PC\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://www.google.it/
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - 
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common 
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - 
{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program 
Files\AVG\AVG8\avgssie.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 
C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI 
Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKLM\..\Run: [MemoREX] "C:\Program Files\MemoRex\MemoRexStart.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] 
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common 
Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [MyWirelessCard] C:\Program Files\H3G\3G HSDPA 
Wireless Modem MD-@\WirelessCard.exe
O4 - Startup: FreePOPs.lnk = C:\Program Files\FreePOPs\freepopsd.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - 
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 
C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - 
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program 
Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - 
C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - 
%windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - 
{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network 
Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - 
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - 
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program 
Files\Messenger\msmsgs.exe
O17 - 
HKLM\System\CCS\Services\Tcpip\..\{F4BB9BD2-E917-42F8-BF21-1401221445FD}: 
NameServer = 62.13.171.4 62.13.171.5
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - 
C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - 
C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - 
C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll 
(file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - 
C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - 
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - 
C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, 
s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, 
s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision 
Corporation - C:\Program Files\Common 
Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero 
BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common 
Files\Ahead\Lib\NMIndexingService.exe

 :-(
Hai già provato a copiare il log qui e vedere cosa dice?
http://www.hijackthis.de/it
-- 
_-=SiMcarD=-_ ®
->ICQ: 59-575-403<-
"Il vizio inerente al capitalismo è la divisione ineguale dei beni; la
virtù inerente al socialismo è l'eguale condivisione della miseria."

 :-(
Come ti hanno suggerito fai il test sulla pagina  comunque ad una scorsa
veloce sembrano tutte voci regolari  (antivirus avg8 , ati , il memorex ecc)
ed altri programmi non sospetti
Imho se non ti danno problemi io starei attento a cosa togliere
--
Fosco

 
http://www.hijackthis.de/it
Ho provato a fare come mi hai suggerito.  Lascio tutto come sta?
Grazie e ciao
Marco
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
Davvero sicuro
Sicuro (4.61 / 5.00)
O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI 
Technologies\ATI.ACE\Core-Static\CLIStart.exe
Davvero sicuro
ATI Core Component
O4 - HKLM\..\Run: [MemoREX] "C:\Program Files\MemoRex\MemoRexStart.exe"
Davvero sicuro
memorex organiser
O4 - HKLM\..\Run: [ISUSPM Startup] 
C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
Non pericoloso, ma superfluo. InstallShield Update Service related; 
Automatically searches for and performs any updates to the software. Not 
required.
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common 
Files\InstallShield\UpdateService\issch.exe" -start
Davvero sicuro
Non pericoloso, ma superfluo. InstallShield Update Service Scheduler; 
automatically searches for and performs any updates to the software so 
you're always working with the most current version. Not required.
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
Sicuro
Questa voce è stata classificata dai nostri visitatori come sicura.
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 
"C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe"
Sicuro
Related to Nero Home
O4 - HKCU\..\Run: [MyWirelessCard] C:\Program Files\H3G\3G HSDPA 
Wireless Modem MD-@\WirelessCard.exe
Sicuro (4 / 5.00)
O4 - Startup: FreePOPs.lnk = C:\Program Files\FreePOPs\freepopsd.exe
Davvero sicuro
Freepops, software for accessing your webmail when your isp blocks the 
pop3 port from certain ip addresses 

 Ho provato a fare come mi hai suggerito.  Lascio tutto come sta?
Si, se non sono indicati elementi sospetti o pericolosi.
Come controprova puoi provare a scaricare e far girare runscanner
http://www.runscanner.net/
Scarichi, installi, lanci, scegli "classic mode", Start Scan e, al 
termine della scansione, selezioni per l'eliminazione tutte le righe 
evidenziate in rosso.
Fagli rifare la scansione fino a che non ce ne sono più.
-- 
   ______________
(___
____)lartibartfast