hijackthis control

[popmart68]

salve ragazzi,potete dare una controllata al log,e se vi è qualcosa da fare...grazie

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9.10.51, on 13/03/2017
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\WINDOWS\system32\oodag.exe
C:\Programmi\Panda Security\Panda Devices Agent\AgentSvc.exe
C:\Programmi\Panda Security\Panda Cloud Antivirus\PSUAService.exe
C:\WINDOWS\system32\slserv.exe
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\ZDServ.exe
C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\CancelAutoPlay_Server.exe
C:\Programmi\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
C:\Programmi\Panda Security URL Filtering\Panda_URL_Filtering.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\SIGONA GIUSEPPE\Impostazioni locali\Dati applicazioni\Facebook\Update\FacebookUpdate.exe
C:\Documents and Settings\SIGONA GIUSEPPE\Desktop\HijackThisPortable\HijackThisPortable.exe
C:\Documents and Settings\SIGONA GIUSEPPE\Desktop\HijackThisPortable\App\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nl.ask.com/?l=dis&o=14672
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Programmi\pandasecuritytb\pandasecurityDx.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Programmi\pandasecuritytb\pandasecurityDx.dll
O3 - Toolbar: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Programmi\pandasecuritytb\pandasecurityDx.dll
O4 - HKLM\..\Run: [CancelAutoPlay_Server] "C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\CancelAutoPlay_Server.exe" run
O4 - HKLM\..\Run: [H3G_Starter] "C:\Programmi\Chiavetta Internet 21.6\H3G_Starter.exe"
O4 - HKLM\..\Run: [PSUAMain] "C:\Programmi\Panda Security\Panda Cloud Antivirus\PSUAMain.exe" /LaunchSysTray
O4 - HKLM\..\Run: [Panda Security URL Filtering] "C:\Programmi\Panda Security URL Filtering\Panda_URL_Filtering.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\SIGONA GIUSEPPE\Impostazioni locali\Dati applicazioni\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [panda4_1dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_1dn" /f (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [panda] reg.exe delete "HKCU\Software\AppDataLow\Software\panda" /f (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [panda_XP] reg.exe delete "HKCU\Software\panda" /f (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [panda4_1dn] reg.exe delete "HKCU\Software\AppDataLow\Software\panda4_1dn" /f (User 'Default user')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Organizzatore ricerche - {9455301C-CF6B-11D3-A266-00C04F689C50} - C:\Programmi\File comuni\Microsoft Shared\Encarta Researcher\EROPROJ.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {C1B7E532-3ECB-4E9E-BB3A-2951FFE67C61} - http://c6.community.alice.it/download/D ... ctiveX.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: FsUsbExService - Teruten - C:\WINDOWS\system32\FsUsbExService.Exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Panda Protection Service (NanoServiceMain) - Panda Security, S.L. - C:\Programmi\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: Panda Devices Agent (PandaAgent) - Panda Security, S.L. - C:\Programmi\Panda Security\Panda Devices Agent\AgentSvc.exe
O23 - Service: Panda Product Service (PSUAService) - Panda Security, S.L. - C:\Programmi\Panda Security\Panda Cloud Antivirus\PSUAService.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmi\Skype\Updater\Updater.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: ZDServ - Unknown owner - C:\Documents and Settings\All Users\Dati applicazioni\ZDSupport\ZDServ\ZDServ.exe

--
End of file - 6338 bytes

[CUB3]

salve ragazzi,potete dare una controllata al log,e se vi è qualcosa da fare...grazie

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9.10.51, on 13/03/2017
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
...
--
End of file - 6338 bytes

Sì, c'è qualcosa da fare...

[popmart68]

sarebbe????

[crazy.cat]

sarebbe????

Oltre al fatto di avere xp, hai ancora il service pack 2 invece del 3.

[popmart68]

si ok il computer non è mio,quindi il consiglio e di installare il SP3''??

[crazy.cat]

si ok il computer non è mio,quindi il consiglio e di installare il SP3''??

Come minimo, oltre a Internet explorer 8 anche se non lo utilizza.
Per il resto non si vede nulla di particolare.

[popmart68]

bene,quindi prima di sp3 devo istallare questo??WindowsInstaller-KB893803-v2-x86 - 3.1 poi sp3 e IE8??

[crazy.cat]

bene,quindi prima di sp3 devo istallare questo??WindowsInstaller-KB893803-v2-x86 - 3.1 poi sp3 e IE8??

Si, procedi così.

[popmart68]

bene grazie..alla prox...

[popmart68]

ho eseguito il daffarsi....ma ora appena avvio la connessione parte IE8 insieme a firefox no capisco come mai?
il broswer predefinito in uso e firefox,ma parte prima IE8 e mi dice non in linea come posso risolvere?? grazie

[popmart68]

ecco il mio problema...come faccio a togliere??
upload immagini