Newsgroup: it.comp.sicurezza.windows
Titolo: problema con pagina iniziale di IE

salve a tutti
č da un po di giorni che invece di aprirsi la pagina inizile che ho
impostato si avvia una pagina ad un motore di ricerca "search for" ma
nella barra indirizzi c'e' scritto solo about blank. Facendo la
scanzione con ad-aware 6.0 aggiornato mi trova n.9 voci di registro
riferite a dei malware. Anche se ad-aware me le elimina dopo un po
ritornano, e la pagina iniziale rimane sempre la stessa.
Come dwvo fare??
grazie per eventuali consigli:)
 riporto sotto il log di ad-aware riferito alle  nove chiavi di
registro.
Lavasoft Ad-aware Personal Build 162
Logfile creato :giovedě 20 maggio 2004 21.12.08
Created with Ad-aware Personal, free for private use.
Reference file in uso:0R150 05.07.2003
______________________________________________________
Ad-aware Settings
=========================
Set : Attiva controllo approfondito
Set : Modo sicuro (richiedere sempre conferma)
Set : Controlla i processi attivi
Set : Controlla il registro
Set : Controllo dettagliato del registro
Lista processi attivi
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ThreadCreationTime : 20-05-2004 15.21.25
    BasePriority       : Normal
#:2 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.36
    BasePriority       : High
#:3 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.37
    BasePriority       : Normal
    FileSize           : 99 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : Applicazione Servizi e Controller
    InternalName       : services.exe
    OriginalFilename   : services.exe
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.08
    Last modified      : 31/08/2001 11.00.00
#:4 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.37
    BasePriority       : Normal
    FileSize           : 11 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    OriginalFilename   : lsass.exe
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.08
    Last modified      : 31/08/2001 11.00.00
#:5 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.39
    BasePriority       : Normal
    FileSize           : 12 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    OriginalFilename   : svchost.exe
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 31/08/2001 11.00.00
#:6 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.39
    BasePriority       : Normal
    FileSize           : 12 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    OriginalFilename   : svchost.exe
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 31/08/2001 11.00.00
#:7 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ThreadCreationTime : 20-05-2004 15.21.41
    BasePriority       : Normal
    FileSize           : 980 KB
    FileVersion        : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion     : 6.00.2600.0000
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : Esplora risorse
    InternalName       : explorer
    OriginalFilename   : EXPLORER.EXE
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 18.59.04
    Last modified      : 31/08/2001 11.00.00
#:8 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.41
    BasePriority       : Normal
    FileSize           : 50 KB
    FileVersion        : 5.1.2600.0 (XPClient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    OriginalFilename   : spoolsv.exe
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 31/08/2001 11.00.00
#:9 [navapw32.exe]
    FilePath           : E:\PROGRA~1\NORTON~1\
    ThreadCreationTime : 20-05-2004 15.21.44
    BasePriority       : Normal
    FileSize           : 73 KB
    FileVersion        : 8.07.17
    ProductVersion     : 8.07.17
    Copyright          : Copyright (c) 2000-2002 Symantec Corporation.
All rights reserved.
    CompanyName        : Symantec Corporation
    FileDescription    : Norton AntiVirus Agent
    InternalName       : NAVAPW32
    OriginalFilename   : NAVAPW32.EXE
    ProductName        : Norton AntiVirus
    Created on         : 22/12/2003 16.45.34
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 14/03/2002 12.11.36
#:10 [em_exec.exe]
    FilePath           : E:\Programmi\Logitech\MouseWare\system\
    ThreadCreationTime : 20-05-2004 15.21.44
    BasePriority       : Normal
    FileSize           : 37 KB
    FileVersion        : 9.76.046
    ProductVersion     : 9.76.046
    Copyright          : (C) 1987-2003 Logitech. All rights reserved.
    CompanyName        : Logitech Inc.
    FileDescription    : Logitech Events Handler Application
    InternalName       : Em_Exec
    OriginalFilename   : Em_Exec.exe
    ProductName        : MouseWare
    Created on         : 22/12/2003 15.43.57
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 19/03/2003 8.50.00
#:11 [winampa.exe]
    FilePath           : E:\Programmi\Winamp3\
    ThreadCreationTime : 20-05-2004 15.21.45
    BasePriority       : Normal
    FileSize           : 12 KB
    Created on         : 23/07/2002 16.58.06
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 23/07/2002 16.58.06
#:12 [jusched.exe]
    FilePath           : C:\Programmi\Java\j2re1.4.2_03\bin\
    ThreadCreationTime : 20-05-2004 15.21.46
    BasePriority       : Normal
    FileSize           : 32 KB
    Created on         : 19/11/2003 16.48.18
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 19/11/2003 16.48.14
#:13 [opware32.exe]
    FilePath           : E:\Programmi\Caere\OmniPagePro90\
    ThreadCreationTime : 20-05-2004 15.21.47
    BasePriority       : Normal
    FileSize           : 43 KB
    FileVersion        : 9.0
    ProductVersion     : 9.0
    Copyright          : Copyright   1995-1998 Caere Corporation
    CompanyName        : Caere Corporation
    FileDescription    : OCR Aware (32-bit)
    InternalName       : Opware32.exe
    OriginalFilename   : Opware32.exe
    ProductName        : OmniPage Pro
    Created on         : 09/01/2004 13.37.44
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 19/11/1998 10.20.48
#:14 [gsicon.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.47
    BasePriority       : Normal
    FileSize           : 88 KB
    FileVersion        : 3.1.3
    ProductVersion     : 3.1.3
    Copyright          : Copyright   2001 GlobespanVirata, Inc.
    CompanyName        : GlobespanVirata, Inc.
    FileDescription    : DSL Modem Monitor
    InternalName       : GSICON.EXE
    OriginalFilename   : GSICON.EXE
    ProductName        : DSL Modem
    Created on         : 24/02/2004 10.10.36
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 08/01/2003 3.36.00
#:15 [dslagent.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.47
    BasePriority       : Normal
    FileSize           : 16 KB
    Created on         : 24/02/2004 10.10.35
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 13/02/2003 4.09.22
#:16 [qttask.exe]
    FilePath           : C:\Programmi\QuickTime\
    ThreadCreationTime : 20-05-2004 15.21.47
    BasePriority       : Normal
    FileSize           : 76 KB
    FileVersion        : 6.4
    ProductVersion     : QuickTime 6.4
    Copyright          :   Apple Computer, Inc. 2001-2003
    CompanyName        : Apple Computer, Inc.
    InternalName       : QuickTime Task
    OriginalFilename   : QTTask.exe
    ProductName        : QuickTime
    Created on         : 04/03/2004 9.27.24
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 04/03/2004 9.27.24
#:17 [ntvdm.exe]
    FilePath           : C:\WINDOWS\system32\
    ThreadCreationTime : 20-05-2004 15.21.48
    BasePriority       : Normal
    FileSize           : 387 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : NTVDM.EXE
    InternalName       : NTVDM.EXE
    OriginalFilename   : NTVDM.EXE
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.01.08
    Last modified      : 31/08/2001 11.00.00
#:18 [dhbrwsr.exe]
    FilePath           : C:\WINDOWS\
    ThreadCreationTime : 20-05-2004 15.21.49
    BasePriority       : Normal
    FileSize           : 92 KB
    FileVersion        : 1, 0, 0, 6
    ProductVersion     : 1, 0, 0, 6
    Copyright          : Copyright 2004
    FileDescription    : dhbrwsr Module
    InternalName       : dhbrwsr
    OriginalFilename   : dhbrwsr.EXE
    ProductName        : dhbrwsr Module
    Created on         : 17/05/2004 6.26.28
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 17/05/2004 6.26.30
#:19 [cdac11ba.exe]
    FilePath           : C:\WINDOWS\System32\drivers\
    ThreadCreationTime : 20-05-2004 15.21.49
    BasePriority       : Normal
    FileSize           : 53 KB
    FileVersion        : 4.20.020
    ProductVersion     : 4.20.020 Windows NT 2002/12/10
    Copyright          : Copyright (c) 1998-2002 Macrovision Corp.
    CompanyName        : Macrovision
    FileDescription    : Macrovision RTS Service
    InternalName       : CDANTSRV
    OriginalFilename   : CDANTSRV.EXE
    ProductName        : SafeCast Windows NT
    Created on         : 12/02/2004 12.45.33
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 12/02/2004 12.45.33
#:20 [dcfssvc.exe]
    FilePath           : C:\WINDOWS\system32\drivers\
    ThreadCreationTime : 20-05-2004 15.21.50
    BasePriority       : Normal
    FileSize           : 184 KB
    FileVersion        : 1.1.4400.0
    ProductVersion     : 3.2.0400.0
    Copyright          : Copyright (C) Eastman Kodak Co. 2000-2002
    CompanyName        : Eastman Kodak Company
    FileDescription    : Kodak DC Ring 3 Conduit (Win32)
    InternalName       : DcFsSvc.exe
    OriginalFilename   : DcFsSvc.exe
    ProductName        : Kodak DC File System Driver (Win32)
    Created on         : 28/02/2002 12.35.06
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 28/02/2002 12.35.06
#:21 [navapsvc.exe]
    FilePath           : E:\Programmi\Norton AntiVirus\
    ThreadCreationTime : 20-05-2004 15.21.50
    BasePriority       : Normal
    FileSize           : 113 KB
    FileVersion        : 8.07.17
    ProductVersion     : 8.07.17
    Copyright          : Copyright (c) 2000-2002 Symantec Corporation.
All rights reserved.
    CompanyName        : Symantec Corporation
    FileDescription    : Norton AntiVirus Auto-Protect Service
    InternalName       : NAVAPSVC
    OriginalFilename   : NAVAPSVC.EXE
    ProductName        : Norton AntiVirus
    Created on         : 22/12/2003 16.45.34
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 14/03/2002 12.12.12
#:22 [nvsvc32.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.51
    BasePriority       : Normal
    FileSize           : 68 KB
    FileVersion        : 6.14.10.4403
    ProductVersion     : 6.14.10.4403
    Copyright          : (C) NVIDIA Corporation. All rights reserved.
    CompanyName        : NVIDIA Corporation
    FileDescription    : NVIDIA Driver Helper Service, Version 44.03
    InternalName       : NVSVC
    OriginalFilename   : nvsvc32.exe
    ProductName        : NVIDIA Driver Helper Service, Version 44.03
    Created on         : 02/05/2003 13.19.00
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 02/05/2003 13.19.00
#:23 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.54
    BasePriority       : Normal
    FileSize           : 12 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    OriginalFilename   : svchost.exe
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.09
    Last modified      : 31/08/2001 11.00.00
#:24 [ctfmon.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.56
    BasePriority       : Normal
    FileSize           : 13 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. All rights reserved.
    CompanyName        : Microsoft Corporation
    FileDescription    : CTF Loader
    InternalName       : CTFMON
    OriginalFilename   : CTFMON.EXE
    ProductName        : Microsoft  Windows  Operating System
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 19.12.10
    Last modified      : 31/08/2001 11.00.00
#:25 [msmsgs.exe]
    FilePath           : C:\Programmi\Messenger\
    ThreadCreationTime : 20-05-2004 15.21.56
    BasePriority       : Normal
    FileSize           : 1052 KB
    FileVersion        : 4.0.0155
    ProductVersion     : Version 4.0
    Copyright          : Copyright (c) Microsoft Corporation 1997-2001
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger Client
    InternalName       : msmsgs
    OriginalFilename   : msmsgs.exe
    ProductName        : Messenger
    Created on         : 22/12/2003 11.37.27
    Last accessed      : 20/05/2004 18.49.33
    Last modified      : 02/08/2001 6.14.34
#:26 [rundll32.exe]
    FilePath           : C:\WINDOWS\System32\
    ThreadCreationTime : 20-05-2004 15.21.56
    BasePriority       : Normal
    FileSize           : 31 KB
    FileVersion        : 5.1.2600.0 (xpclient.010817-1148)
    ProductVersion     : 5.1.2600.0
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : Modulo di esecuzione DLL come applicazioni
    InternalName       : rundll
    OriginalFilename   : RUNDLL.EXE
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 31/08/2001 11.00.00
    Last accessed      : 20/05/2004 18.48.46
    Last modified      : 31/08/2001 11.00.00
#:27 [iexplore.exe]
    FilePath           : C:\Programmi\Internet Explorer\
    ThreadCreationTime : 20-05-2004 15.21.58
    BasePriority       : Normal
    FileSize           : 89 KB
    FileVersion        : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion     : 6.00.2600.0000
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : Internet Explorer
    InternalName       : iexplore
    OriginalFilename   : IEXPLORE.EXE
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 22/12/2003 11.38.36
    Last accessed      : 20/05/2004 19.10.18
    Last modified      : 31/08/2001 11.00.00
#:28 [easyshare.exe]
    FilePath           : C:\Programmi\KODAK\Kodak EasyShare
software\bin\
    ThreadCreationTime : 20-05-2004 15.22.01
    BasePriority       : Normal
    FileSize           : 292 KB
    FileVersion        : 2, 0, 4, 57
    ProductVersion     : 2, 1, 0, 55
    Copyright          : Copyright    Eastman Kodak Company  2002 
    CompanyName        : Eastman Kodak Company
    FileDescription    : Kodak EasyShare software
    InternalName       : EasyShare
    OriginalFilename   : EasyShare.exe
    ProductName        : Kodak EasyShare software
    Created on         : 16/09/2002 14.42.06
    Last accessed      : 20/05/2004 18.48.53
    Last modified      : 16/09/2002 14.42.06
#:29 [wsup.exe]
    FilePath           : C:\Programmi\Common files\WinTools\
    ThreadCreationTime : 20-05-2004 15.22.09
    BasePriority       : Normal
    FileSize           : 446 KB
    Created on         : 20/05/2004 11.55.42
    Last accessed      : 20/05/2004 19.12.11
    Last modified      : 19/05/2004 4.14.22
#:30 [dhsvr.exe]
    FilePath           : C:\WINDOWS\
    ThreadCreationTime : 20-05-2004 15.22.14
    BasePriority       : Normal
    FileSize           : 176 KB
    FileVersion        : 1, 0, 0, 15
    ProductVersion     : 1, 0, 0, 15
    Copyright          : Copyright 2004
    FileDescription    : dhsvr Module
    InternalName       : dhsvr
    OriginalFilename   : dhsvr.EXE
    ProductName        : dhsvr Module
    Created on         : 17/05/2004 6.26.33
    Last accessed      : 20/05/2004 18.15.27
    Last modified      : 17/05/2004 6.26.38
#:31 [wtoolsa.exe]
    FilePath           : C:\Programmi\Common files\WinTools\
    ThreadCreationTime : 20-05-2004 15.24.08
    BasePriority       : Normal
    FileSize           : 446 KB
    Created on         : 20/05/2004 11.55.39
    Last accessed      : 20/05/2004 19.12.11
    Last modified      : 19/05/2004 4.14.22
#:32 [wtoolss.exe]
    FilePath           : C:\Programmi\Common files\WinTools\
    ThreadCreationTime : 20-05-2004 15.24.11
    BasePriority       : Normal
    FileSize           : 76 KB
    Created on         : 20/05/2004 12.16.57
    Last accessed      : 20/05/2004 19.12.11
    Last modified      : 19/05/2004 4.14.24
#:33 [mirc.exe]
    FilePath           : E:\mIRC\
    ThreadCreationTime : 20-05-2004 18.20.24
    BasePriority       : Normal
    FileSize           : 1824 KB
    FileVersion        : 6.12
    ProductVersion     : 6.12
    Copyright          : Copyright   1995-2003 mIRC Co. Ltd.
    CompanyName        : mIRC Co. Ltd.
    FileDescription    : mIRC
    InternalName       : mIRC
    OriginalFilename   : mirc.exe
    ProductName        : mIRC
    Created on         : 22/12/2003 13.14.21
    Last accessed      : 20/05/2004 19.09.36
    Last modified      : 22/12/2003 13.14.22
#:34 [iexplore.exe]
    FilePath           : C:\Programmi\Internet Explorer\
    ThreadCreationTime : 20-05-2004 18.37.18
    BasePriority       : Normal
    FileSize           : 89 KB
    FileVersion        : 6.00.2600.0000 (xpclient.010817-1148)
    ProductVersion     : 6.00.2600.0000
    Copyright          :   Microsoft Corporation. Tutti i diritti
riservati.
    CompanyName        : Microsoft Corporation
    FileDescription    : Internet Explorer
    InternalName       : iexplore
    OriginalFilename   : IEXPLORE.EXE
    ProductName        : Sistema operativo Microsoft  Windows 
    Created on         : 22/12/2003 11.38.36
    Last accessed      : 20/05/2004 19.10.18
    Last modified      : 31/08/2001 11.00.00
#:35 [ad-aware.exe]
    FilePath           : E:\Programmi\Lavasoft\Ad-aware 6\
    ThreadCreationTime : 20-05-2004 19.11.58
    BasePriority       : Normal
    FileSize           : 645 KB
    FileVersion        : 6.0.1.165
    ProductVersion     : 6.0.0.0
    Copyright          : Copyright   Lavasoft Sweden
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-aware 6 core application
    InternalName       : Ad-aware.exe
    OriginalFilename   : Ad-aware.exe
    ProductName        : Lavasoft Ad-aware Plus
    Created on         : 19/03/2004 23.11.15
    Last accessed      : 20/05/2004 19.10.12
    Last modified      : 08/02/2003 20.50.52
Risultato del controllo della memoria:
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Nuovi oggetti: 0
Oggetti identificati: 0
Analisi registro avviata
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_CLASSES_ROOT
    Oggetto            : CLSID\{00A0A40C-F432-4C59-BA11-B25D142C7AB7}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_CLASSES_ROOT
    Oggetto            : CLSID\{25F7FA20-3FC3-11D7-B487-00D05990014C}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_CLASSES_ROOT
    Oggetto            : CLSID\{CC916B4B-BE44-4026-A19D-8C74BBD23361}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_CLASSES_ROOT
    Oggetto            : CLSID\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_CURRENT_USER
    Oggetto            : Software\iPend
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Oggetto            :
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\{00A0A40C-F432-4C59-BA11-B25D142C7AB7}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Oggetto            :
Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper
Objects\{25F7FA20-3FC3-11D7-B487-00D05990014C}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Oggetto            :
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects\{CC916B4B-BE44-4026-A19D-8C74BBD23361}
 ClientMan Oggetto riconosciuto!
    Tipo               : Chiave di registro
    Dato               : 
    Rootkey            : HKEY_LOCAL_MACHINE
    Oggetto            :
Software\Microsoft\Windows\CurrentVersion\explorer\Browser Helper
Objects\{FCADDC14-BD46-408A-9842-CDBE1C6D37EB}
Risultato del controllo del registro:
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Nuovi oggetti: 9
Oggetti identificati: 9
Controllo ed esame approfondito files (C:\WINDOWS)
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Risultato del controllo del disco  C:\WINDOWS
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Nuovi oggetti: 0
Oggetti identificati: 9
21.20.13 Controllo interrotto da Utente.
Sommario di questo controllo
ŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻŻ
Tempo totale di controllo:00.08.04.837
Elementi controllati:10880
Elementi identificati:9
Elementi ignorati:0
Nuovi oggetti:9
-- 
Posted via Mailgate.ORG Server - 
http://www.Mailgate.ORG

 ...
http://www.romanelmondo.com/sugg/startpage.htm
-- 
Andy
~ : ~ : ~ : ~ : ~ : ~ : ~ : ~ : ~
 
http://www.inzona.com
~ : ~ : ~ : ~ : ~ : ~ : ~ : ~ : ~
Yahoo ID andrea26272

 riferite a dei malware.
[Megacut]
Copio/incollo parzialmente da un mio post di qualche minuto fa:
- Usa SpyBot S&D:
http://www.safer-networking.org/index.php?lang=it&page=home
*Aggiornalo* prima di lanciarlo.
- Usa anche Hijackthis: 
http://tomcoyote.com/hjt/
Funziona così: 
http://home.datacomm.ch/winzozz/hijackthis.htm
Soprattutto: CWShredder:
http://www.spywareinfo.com/~merijn/cwschronicles.html
Leggi anche qui: 
http://aumha.org/forum/viewtopic.php?p=29012
e 
http://www.spywareinfo.com/~merijn/cwschronicles.html#aboutblank
E' consigliabile far 'girare' SpyBot S&D e HJT con Windows eseguito in
Modalità provvisoria.
Dopo la prima scansione con tutti i software riavvia la macchina e lancia di
nuovo la verifica.
--
Vincenzo Di Russo
Microsoft® MVP - Windows - Internet Explorer/OE
news:microsoft.public.it.internet_explorer
http://support.microsoft.com/newsgroups
http://mvp.support.microsoft.com