Newsgroup: it.comp.sicurezza.windows
Titolo: Scansione hijackthis

Ciao a tutti, ho fatto una scansione del sistema 
cone "hijackthis" ed è venuto fuori il risultato che metto a 
disposizione. Qualcuno sa spiegarmi cosa posso cancellare?
Grazie di tutto
Maurizo
Logfile of HijackThis v1.97.7
Scan saved at 15.36.01, on 27/11/2004
Platform: Windows XP  (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\SYSTEM32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\System32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\PROGRA~1\NORTON~1\NORTON~1\NPROTECT.EXE
E:\PROGRA~1\TRENDM~1\INTERN~1\PcCtlCom.exe
E:\PROGRA~1\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
E:\PROGRA~1\TRENDM~1\INTERN~1\Tmntsrv.exe
E:\PROGRA~1\TRENDM~1\INTERN~1\tmproxy.exe
E:\WINDOWS\SYSTEM32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\Programmi\Java\j2re1.4.2_01\bin\jusched.exe
E:\Programmi\Trend Micro\Internet Security 12\pccguide.exe
E:\Programmi\MSN Messenger\MsnMsgr.Exe
E:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe
E:\Programmi\StopDialers\NuovoStopDialer.exe
E:\PROGRA~1\INCRED~1\bin\IMApp.exe
E:\Programmi\Internet Explorer\IEXPLORE.EXE
E:\WINDOWS\System32\wuauclt.exe
E:\WINDOWS\System32\wuauclt.exe
H:\Downloads\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 
http://www.excite.it/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title 
= Microsoft Internet Explorer - Tele2Internet
R0 - HKCU\Software\Microsoft\Internet 
Explorer\Toolbar,LinksFolderName = 
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - 
E:\Programmi\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - 
E:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - 
e:\programmi\google\googletoolbar2.dll
O2 - BHO: (no name) - {AE7CD045-E861-484f-8273-0445EE161910} - 
E:\Programmi\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - 
e:\programmi\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {62999427-33FC-4baf-9C9C-
BCE6BD127F08} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - 
E:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-
0819E2EAAC93} - E:\Programmi\Adobe\Acrobat 6.0
\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {0E1230F8-EA50-42A9-983C-
D22ABC2EED3B} - (no file)
O4 - HKLM\..\Run: [SunJavaUpdateSched] 
E:\Programmi\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] E:\WINDOWS\system32
\NeroCheck.exe
O4 - HKLM\..\Run: [pccguide.exe] "E:\Programmi\Trend 
Micro\Internet Security 12\pccguide.exe"
O4 - HKLM\..\Run: [IncrediMail] E:\PROGRA~1\INCRED~1
\bin\IncMail.exe /c
O4 - HKCU\..\Run: [MsnMsgr] "E:\Programmi\MSN 
Messenger\MsnMsgr.Exe" /background
O4 - Startup: Nuovo Stop Dialers.lnk = 
E:\Programmi\StopDialers\NuovoStopDialer.exe
O4 - Global Startup: Acrobat Assistant.lnk = 
E:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = 
E:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = 
E:\Programmi\Microsoft Office\Office\OSA9.EXE
O8 - Extra context menu item: &Add animation to IncrediMail 
Style Box - E:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Google Search - 
res://e:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Collegamenti a ritroso - 
res://e:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Enqueue in Star Downloader - 
E:\Programmi\Star Downloader\sdieenq.htm
O8 - Extra context menu item: Pagine simili - 
res://e:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Salva tutti gli oggetti con Star 
Downloader - E:\Programmi\Star Downloader\leechie.htm
O8 - Extra context menu item: Scarica con Star Downloader - 
E:\Programmi\Star Downloader\sdie.htm
O8 - Extra context menu item: Versione cache della pagina - 
res://e:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Organizzatore ricerche (HKLM)
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll 
Class) - 
https://www.mps.it/CertEnroll/CertControl/ita/xenroll.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave 
Flash Object) - 
http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.c
ab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5DB7749B-EF04-41F1-A9E5-
08A0C6A77A6D}: NameServer = 193.70.152.15 193.70.152.25
-- 
Inviato da Virgilio 
http://newsgroup.virgilio.it
..un servizio di news via web con in piu' l'antispam

Maurizio wrote:

Se non utilizzi IncrediMail puoi cancellare la riga in cui appare il
suddetto programma. Lo stesso dicasi per Star Downloader. Il resto è meglio
che lo lasci inalterato.

B@st4rd² ha scritto:

Ti ringrazio della risposta, mi sa che lascerò tutto com'è.
Un saluto.
