Newsgroup: it.comp.sicurezza.windows
Titolo: Qualcosa non va?

Di recente ho qualche problemino con la navigazione. Ho fatto una
scansione con Hijackthis, qualcuno può darmi per favore un
suggerimento?
Logfile of HijackThis v1.99.1
Scan saved at 17.19.26, on 18/03/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\Rtvscan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
C:\Programmi\Winamp3\winampa.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
C:\Documents and Settings\FrancescoSalvagnini\Dati
applicazioni\sgrunt\IE4321.exe
C:\Programmi\Tracker Software\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe
C:\Programmi\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Programmi\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Magic Keyboard\MagicKey.exe
C:\Programmi\Microsoft Firewall Client\ISATRAY.EXE
C:\Programmi\Magic Keyboard\OSD.EXE
C:\Programmi\Outlook Express\msimn.exe
C:\Programmi\Messenger\msmsgs.exe
C:\PROGRA~1\
MOZILLA.ORG
\MOZILLA\MOZILLA.EXE
C:\Programmi\hijackthis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://GLOBAL.ACER.COM/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = 
http://IRIS2K:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName
= Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}
- C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} -
C:\Programmi\Siber Systems\AI RoboForm\RoboForm.dll
O2 - BHO: (no name) - {9C691A33-7DDA-4C2F-BE4C-C176083F35CF} - (no
file)
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} -
C:\Programmi\Siber Systems\AI RoboForm\RoboForm.dll
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [Synchronization Manager]
%SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [WinampAgent] "C:\Programmi\Winamp3\winampa.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [pdfSaver3] "C:\Programmi\Tracker
Software\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe" /install
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File
comuni\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched]
C:\Programmi\Java\j2re1.4.2_04\bin\jusched.exe
O4 - HKLM\..\Run: [hod] C:\WINDOWS\hod.exe
O4 - HKLM\..\Run: [Olympic] C:\Documents and
Settings\FrancescoSalvagnini\Dati applicazioni\sgrunt\IE4321.exe
O4 - HKCU\..\Run: [pdfSaver3] "C:\Programmi\Tracker
Software\PDF-XChange 3 Pro\pdfSaver\pdfSaver3.exe"
O4 - HKCU\..\Run: [RoboForm] "C:\Programmi\Siber Systems\AI
RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [Mozilla Quick Launch]
"C:\PROGRA~1\
MOZILLA.ORG
\MOZILLA\MOZILLA.EXE" -turbo
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Microsoft Office.lnk = C:\Programmi\Microsoft
Office\Office10\OSA.EXE
O4 - Global Startup: Magic Keyboard.lnk = C:\Programmi\Magic
Keyboard\MagicKey.exe
O4 - Global Startup: Firewall Client Connectivity Monitor.LNK =
C:\Programmi\Microsoft Firewall Client\ISATRAY.EXE
O8 - Extra context menu item: Compila Modulo &] -
file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: E&sporta in Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Personalizza - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Salva Moduli &[ -
file://C:\Programmi\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}
- C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Compila - {320AF880-6646-11D3-ABEE-C5DBF3571F46} -
file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Compila Modulo &] -
{320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Salva - {320AF880-6646-11D3-ABEE-C5DBF3571F49} -
file://C:\Programmi\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Salva Moduli &[ -
{320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} -
file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Barra strumenti &2 -
{724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=
http://GLOBAL.ACER.COM/
O15 - Trusted Zone: 
www.sgrunt.biz
O15 - Trusted Zone: 
www.yeak.net
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX
Player) - 
http://www.cult3d.com/download/cult.cab
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) -
http://software-dl.real.com/2343d055855d31d1dd15/netzip/RdxIE601_it.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)
- 
http://a840.g.akamai.net/7/840/537/2003120501/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {AE1C01E3-0283-11D3-9B3F-00C04F8EF466} (HeartbeatCtl Class)
- 
http://fdl.msn.com/zone/datafiles/heartbeat.cab
O16 - DPF: {ED5D2306-0FF4-11D2-B37C-0000C000D50D} (HighWay Imaging
Control) - 
http://www.3di.it/code/iw/iwfull.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain =
IrisAssociazione.local
O17 - HKLM\Software\..\Telephony: DomainName = IrisAssociazione.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain =
IrisAssociazione.local
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain =
IrisAssociazione.local
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
O23 - Service: DefWatch - Symantec Corporation -
C:\Programmi\Symantec_Client_Security\Symantec AntiVirus\DefWatch.exe
O23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) -
Symantec Corporation - C:\Programmi\Symantec_Client_Security\Symantec
AntiVirus\Rtvscan.exe

 suggerimento?
Copia e incolla il Log in questo sito e poi fai analizzare...
http://hijackthis.de/index.php?langselect=italian
-- 
"Quando un Guerriero impara a far tacere il dialogo interiore tutto
diventa possibile." Don Juan
Per farti sentire da me toglimi _I_TAPPI_DALLE_ORECCHIE_

 
http://hijackthis.de/index.php?langselect=italian
Grazie! Non conoscevo questa opportunità