Newsgroup: it.comp.sicurezza.windows
Titolo: controllo PC con HijackThis

Volevo farvi visualizzare il risultato dopo aver lanciato il 
programma Hijack This e indicarmi se tutto è regolare o ci sono 
voci da eliminare.
Grazie
Isa
:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
ogfile of HijackThis v1.99.1
Scan saved at 10.33.40, on 04/02/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\programmi\
mcafee.com
\agent\mcdetect.exe
c:\PROGRA~1\
mcafee.com
\vso\mcshield.exe
c:\PROGRA~1\
mcafee.com
\agent\mctskshd.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Microsoft IntelliType Pro\type32.exe
C:\Programmi\Microsoft IntelliPoint\point32.exe
C:\Programmi\Il telefono di Alice\APListener\APListener.exe
C:\Programmi\VoiceAge\Common\VaCtrl.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmi\McAfee.com\VSO\mcvsshld.exe
C:\PROGRA~1\
mcafee.com
\agent\mcagent.exe
C:\Programmi\Creative\PC-CAM Center\CAMTRAY.EXE
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
C:\Programmi\McAfee.com\VSO\oasclnt.exe
C:\Programmi\Adobe\Photoshop Album Starter Edition\3.0
\Apps\apdproxy.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\QuickTime\qttask.exe
c:\progra~1\
mcafee.com
\vso\mcvsescn.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\VoiceAge\Common\VaLangInterf.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmi\Spyware Doctor\swdoctor.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Programmi\Yahoo!\Messenger\ymsgr_tray.exe
C:\Programmi\Outlook Express\msimn.exe
C:\Programmi\Messenger\msmsgs.exe
c:\progra~1\
mcafee.com
\vso\mcvsftsn.exe
C:\Programmi\Jasc Software Inc\Paint Shop Pro 9\Paint Shop Pro 
9.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\Marisa Monesi\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://www.yahoo.it/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://it.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
C:\WINDOWS\about.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet 
Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet 
Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - _{0428FFC7-1931-45b7-95CB-
3CBB919777E1} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-
784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0
\ActiveX\AcroIEHelper.dll
O2 - BHO: AltaVista Toolbar - {4E7BD74F-2B8D-469E-92EA-
EC65A294AE31} - C:\WINDOWS\DOWNLO~1\ALTAVI~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - 
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-
D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-
D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-
CF10577473F7} - c:\programmi\google\googletoolbar3.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-
17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-
6B829A8A27CB} - (no file)
O3 - Toolbar: AltaVista Toolbar - {4E7BD74F-2B8D-469E-92EA-
EC65A294AE31} - C:\WINDOWS\DOWNLO~1\ALTAVI~1.DLL
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-
905236F6F655} - c:\progra~1\
mcafee.com
\vso\mcvsshl.dll
O3 - Toolbar: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-
11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!
\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - 
c:\programmi\google\googletoolbar3.dll
O3 - Toolbar: &Translator Internet - {8E4AA109-7239-4B85-8196-
7377A53DDEFF} - C:\PROGRA~1\Antadis\TRANSL~1\DELPHI~1.DLL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32
\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [type32] "C:\Programmi\Microsoft IntelliType 
Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programmi\Microsoft 
IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [AlicePhone] "C:\Programmi\Il telefono di 
Alice\APListener\APListener.exe"
O4 - HKLM\..\Run: [VaCtrl] 
C:\Programmi\VoiceAge\Common\VaCtrl.exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] DSLAGENT.EXE USB
O4 - HKLM\..\Run: [GsiFinal] rundll32 gspndll.dll,postInstall 
final
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] 
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1
\McAfee.com\VSO\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] 
C:\Programmi\McAfee.com\VSO\mcvsshld.exe
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1
\
mcafee.com
\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1
\
mcafee.com
\agent\McUpdate.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32
\NeroCheck.exe
O4 - HKLM\..\Run: [Creative WebCam Tray] 
C:\Programmi\Creative\PC-CAM Center\CAMTRAY.EXE
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3
\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] 
C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [OASClnt] 
C:\Programmi\McAfee.com\VSO\oasclnt.exe
O4 - HKLM\..\Run: [Adobe Photo 
Downloader] "C:\Programmi\Adobe\Photoshop Album Starter 
Edition\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: 
[iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime 
Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [trioService] "C:\PROGRA~1\Freeze.com\3D 
Falling Leaves\\trioService.exe "
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1
\bin\IncMail.exe /c
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: 
[Skype] "C:\Programmi\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programmi\Yahoo!
\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Programmi\Spyware 
Doctor\swdoctor.exe" /Q
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File 
comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = 
C:\Programmi\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Add animation to IncrediMail 
Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Cerca con Google - 
res://c:\programmi\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - 
res://c:\programmi\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - 
res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Link a ritroso - 
res://c:\programmi\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - 
res://c:\programmi\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Ricerca AltaVista - 
file://C:\Programmi\ALTAVISTA 
Toolbar\Cache\SelectedContextSearch.htm
O8 - Extra context menu item: Traduci - 
file://C:\Programmi\ALTAVISTA 
Toolbar\Cache\SelectedContextTranslation.htm
O8 - Extra context menu item: Versione cache della pagina - 
res://c:\programmi\google\GoogleToolbar3.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-
11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06
\bin\ssv.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-
4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-
00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-
11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!
\Common\yhexbmesit.dll
O9 - Extra button: Translate - {87680762-4A83-11B4-885B-
0000E8ECA40F} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: LingoWare Translator... - {87680762-
4A83-11B4-885B-0000E8ECA40F} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-
3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-
11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative 
Software AutoUpdate) - 
http://www.creative.com/su/ocx/15012/CTSUEng.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} 
(MessengerStatsClient Class) - 
http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31
267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter 
Class) - C:\Programmi\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D 
ActiveX Player) - 
http://www.cult3d.com/download/cult.cab
O16 - DPF: {4E7BD74F-2B8D-469E-92EA-EC65A294AE31} (AltaVista 
Toolbar) - 
http://toolbar.altavista.com/static/toolbar/altavista.cab
?
r=1081536499
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo 
Upload Tool) - 
http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {77E32299-629F-43C6-AB77-6A1E6D7663F6} (Groove 
Control) - 
http://download.shockwave.com/pub/otoy/OTOYAX.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} 
(MessengerStatsClient Class) - 
http://messenger.zone.msn.com/binary/MessengerStatsClient.cab3014
9.cab
O16 - DPF: {99D8AF4F-307A-461C-A404-BFA33D502B31} (APStartX 
Control) - 
http://217.169.119.216/resources/APStart.ocx
O16 - DPF: {9CCE3B43-4DE0-4236-A84E-108CA848EE6A} (WebCam 
Control) - 
http://www.webcamnow.com/broadcast/ActiveXWebCam.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} 
(MsnMessengerSetupDownloadControl Class) - 
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro 
Class) - 
http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader 
Object) - 
http://www.shockwave.com/content/zuma/popcaploader_v5.cab
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader 
Class) - 
http://www2.incredimail.com/contents/setup/downloader/imloader.ca
b
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative 
Software AutoUpdate Support Package) - 
http://www.creative.com/su/ocx/15012/CTPID.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire 
Showdown Class) - 
http://messenger.zone.msn.com/binary/SolitaireShowdown.cab30149.c
ab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} -
 "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: FreezeScreenSaver - Unknown owner - 
C:\WINDOWS\system32\FreezeScreenSaver.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - 
Macrovision Corporation - C:\Programmi\File 
comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - 
C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Macromedia - 
C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia 
Licensing.exe
O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, 
Inc - c:\programmi\
mcafee.com
\agent\mcdetect.exe
O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - 
c:\PROGRA~1\
mcafee.com
\vso\mcshield.exe
O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, 
Inc - c:\PROGRA~1\
mcafee.com
\agent\mctskshd.exe
O23 - Service: McAfee SecurityCenter Update Manager 
(mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1
\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA 
Corporation - C:\WINDOWS\System32\nvsvc32.exe
--  
Postato da Virgilio Newsgroup: scopri i nuovi gruppi 
Eros, foto e video a 
http://newsgroup.eros.virgilio.it

 di Virgilio Newsgroup.


 Cosa devo fare?
[...]
Qui: 
http://www.ilsoftware.it/hijackthis.asp
Copia ed incolla il log, quindi clic per analizzarlo.
-- 
Vincenzo Di Russo
Microsoft® MVP - Most Valuable Professional
Windows - Internet Explorer since 2003
http://support.microsoft.com/newsgroups
http://mvp.support.microsoft.com/