Newsgroup: it.comp.os.win.xp
Titolo: Esito di HiJackThis

 
          Ciao,
ho un PC con problemi vari, l'ultima mia speranza č HiJackThis. L'ho fatto
girare ma non sono in grado di interpretarne l'esito. Qualcuno mi puņ
aiutare?
Grazie in anticipo, Mario
Logfile of HijackThis v1.99.1
Scan saved at 9.35.19, on 17/11/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\CA\eTrust\InoculateIT\InoRpc.exe
C:\Programmi\CA\eTrust\InoculateIT\InoRT.exe
C:\Programmi\CA\eTrust\InoculateIT\InoTask.exe
C:\WINDOWS\System32\NALNTSRV.EXE
C:\Programmi\Webroot\Enterprise\Spy Sweeper\CommAgent.exe
C:\WINDOWS\System32\wm.exe
C:\NOVELL\ZENRC\wuser32.exe
C:\NOVELL\ZENRC\WUOLService.exe
C:\Programmi\Webroot\Enterprise\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\WMRUNDLL.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\System32\NWTRAY.EXE
V:\ambsvil\exe\ZWorkBar.exe
C:\Programmi\CA\eTrust\InoculateIT\realmon.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
C:\Programmi\Webroot\Enterprise\Spy Sweeper\SpySweeperUI.exe
C:\Programmi\ATnotes\ATnotes.exe
C:\WINDOWS\System32\NALDESK.EXE
C:\NOVELL\GroupWise\Notify.exe
\ORTENSIA\sys\Prodotti\Clientrust_Border\clntrust.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Novell\GroupWise\grpwise.exe
C:\Documents and Settings\fancil\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.libero.it
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,AutoConfigURL = file://c:\windows\zproxy.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = proxy_tr:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} -
C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [DrvListnr] C:\Programmi\Analog
Devices\SoundMAX\DrvListnr.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [ZENRC Tray Icon] zentray.exe
O4 - HKLM\..\Run: [NWTRAY] NWTRAY.EXE
O4 - HKLM\..\Run: [ZWorkBar] v:\ambsvil\exe\ZWorkBar.exe -STARTWIN
O4 - HKLM\..\Run: [Realtime Monitor]
C:\Programmi\CA\eTrust\InoculateIT\realmon.exe
O4 - HKLM\..\Run: [UpdateInoc6]
C:\Programmi\CA\Common\ScanEngine\inodist.exe /cfg
C:\Programmi\CA\eTrust\InoculateIT\inodist.ini
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Programmi\Java\j2re1.4.2_08\bin\jusched.exe
O4 - HKLM\..\Run: [SpySweeperEnterprise]
"C:\Programmi\Webroot\Enterprise\Spy Sweeper\SpySweeperUI.exe" /StartInTray
O4 - HKCU\..\Run: [ATnotes.exe] C:\Programmi\ATnotes\ATnotes.exe
O4 - Global Startup: Notifica di GroupWise.lnk =
C:\NOVELL\GroupWise\Notify.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} -
C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links -
{c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://software-dl.real.com/0519f6263dbc8be1a305/netzip/RdxIE601_it.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1098169798015
O16 - DPF: {88D969C0-F192-11D4-A65F-0040963251E5} (XML DOM Document 4.0) -
file://C:\WINDOWS\msxml4.cab
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNtf.DLL
O23 - Service: eTrust InoculateIT RPC Server (InoRPC) - Computer Associates
International, Inc. - C:\Programmi\CA\eTrust\InoculateIT\InoRpc.exe
O23 - Service: eTrust InoculateIT Realtime Server (InoRT) - Computer
Associates International, Inc. -
C:\Programmi\CA\eTrust\InoculateIT\InoRT.exe
O23 - Service: eTrust InoculateIT Job Server (InoTask) - Computer Associates
International, Inc. - C:\Programmi\CA\eTrust\InoculateIT\InoTask.exe
O23 - Service: Novell Application Launcher (NALNTSERVICE) - Novell, Inc. -
C:\WINDOWS\System32\NALNTSRV.EXE
O23 - Service: Remote management (Novell WUser Agent) - Novell, Inc. -
C:\NOVELL\ZENRC\wuser32.exe
O23 - Service: Webroot CommAgent Service (WebrootCommAgentService) - Webroot
Software, Inc. - C:\Programmi\Webroot\Enterprise\Spy Sweeper\CommAgent.exe
O23 - Service: WebrootSpySweeperService - Webroot Software, Inc. -
C:\Programmi\Webroot\Enterprise\Spy Sweeper\SpySweeper.exe
O23 - Service: Novell Workstation Manager (WM) - Novell, Inc. -
C:\WINDOWS\System32\wm.exe
O23 - Service: WUOLservice (WUOLService) - Novell, Inc. -
C:\NOVELL\ZENRC\WUOLService.exe
--------------------------------
Inviato via 
http://arianna.libero.it/usenet/

 Scan saved at 9.35.19, on 17/11/2005
[...]
Analizza il file di .log qui: 
http://www.ilsoftware.it/hijackthis.asp
Se hai dubbi riscrivi in microsoft.public.it.sicurezza o
it.comp.sicurezza.virus, non in questo NG ;-)
-- 
Vincenzo Di Russo
Microsoft® MVP - Most Valuable Professional
Windows - Internet Explorer 2003/2004/2005
http://support.microsoft.com/newsgroups
http://mvp.support.microsoft.com/