Nessuno che sappia consigliarmi qualcosa?
Io "pubblico" il log di Hijack This per chi volesse dargli un'occhiata...
Grazie
Comparison of your HijackThis log file items to others
The table below compares the items HijackThis found on your computer with those on other people's computers. The column "% of PCs with item" indicates what percent of other people's HijackThis log files contain the item in that row of the table. Additional information will be provided as more HijackThis log files are added to the AnalyzeThis database.
Each entry is coded to indicate the type of item it is on your computer. An explanation of these codes may be found at the bottom of this page.
Index % of PCs with item Code Data
1 11.8% O23 NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
2 0.5% O23 avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
3 0.5% O23 avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
4 0.2% O23 avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
5 0.2% O23 avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
6 0.0% O23 Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe
7 12.3% O4 [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
8 6.5% O4 [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
9 5.0% O4 [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
10 1.9% O4 [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
11 1.9% O4 [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
12 0.5% O4 [msnmsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
13 0.2% O4 Adobe Reader Synchronizer.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
14 0.1% O4 [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
15 0.0% O4 Adobe Reader Speed Launch.lnk = C:\Programmi\Adobe\Reader 8.0\Reader\reader_sl.exe
16 0.0% O4 [AGEIA PhysX SysTray] C:\Programmi\AGEIA Technologies\TrayIcon.exe
17 0.0% O4 Registration Ghost Recon Advanced Warfighter.LNK = C:\Programmi\Ubisoft\Ghost Recon Advanced Warfighter\Support\Register\RegistrationReminder.exe
18 0.0% O4 [PC_CLEAN] C:\Programmi\PC Cleaner Trial\trayicon.exe
19 1.5% O9 Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
20 1.5% O9 Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
21 48.0% P01 C:\WINDOWS\system32\svchost.exe
22 48.0% P01 C:\WINDOWS\system32\lsass.exe
23 48.0% P01 C:\WINDOWS\system32\winlogon.exe
24 47.9% P01 C:\WINDOWS\system32\services.exe
25 47.9% P01 C:\WINDOWS\System32\smss.exe
26 46.1% P01 C:\WINDOWS\system32\spoolsv.exe
27 13.4% P01 C:\WINDOWS\system32\nvsvc32.exe
28 12.5% P01 C:\WINDOWS\system32\rundll32.exe
29 5.0% P01 C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
30 3.0% P01 C:\WINDOWS\system32\taskmgr.exe
31 0.6% P01 C:\Programmi\MSN Messenger\MsnMsgr.Exe
32 0.5% P01 C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
33 0.5% P01 C:\Programmi\Alwil Software\Avast4\ashServ.exe
34 0.5% P01 C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
35 0.4% P01 C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
36 0.4% P01 C:\Programmi\MSN Messenger\usnsvc.exe
37 0.1% P01 C:\Programmi\Analog Devices\Core\smax4pnp.exe
38 0.0% P01 C:\Programmi\AGEIA Technologies\TrayIcon.exe
39 0.0% P01 C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe
40 0.0% P01 C:\Programmi\Trend Micro\HijackThis\HijackThis.exe
41 0.0% P01 C:\Programmi\PC Cleaner Trial\trayicon.exe
42 2.2% R0 HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
Explanation of the codes
R - Registry, StartPage/SearchPage changes
* R0 - Changed registry value
* R1 - Created registry value
* R2 - Created registry key
* R3 - Created extra registry value where only one should be
F - IniFiles, autoloading entries
* F0 - Changed inifile value
* F1 - Created inifile value
* F2 - Changed inifile value, mapped to Registry
* F3 - Created inifile value, mapped to Registry
N - Netscape/Mozilla StartPage/SearchPage changes
* N1 - Change in prefs.js of Netscape 4.x
* N2 - Change in prefs.js of Netscape 6
* N3 - Change in prefs.js of Netscape 7
* N4 - Change in prefs.js of Mozilla
O - Other, several sections which represent:
* O1 - Hijack of auto.search.msn.com with Hosts file
* O2 - Enumeration of existing MSIE BHO's
* O3 - Enumeration of existing MSIE toolbars
* O4 - Enumeration of suspicious autoloading Registry entries
* O5 - Blocking of loading Internet Options in Control Panel
* O6 - Disabling of 'Internet Options' Main tab with Policies
* O7 - Disabling of Regedit with Policies
* O8 - Extra MSIE context menu items
* O9 - Extra 'Tools' menuitems and buttons
* O10 - Breaking of Internet access by New.Net or WebHancer
* O11 - Extra options in MSIE 'Advanced' settings tab
* O12 - MSIE plugins for file extensions or MIME types
* O13 - Hijack of default URL prefixes
* O14 - Changing of IERESET.INF
* O15 - Trusted Zone Autoadd
* O16 - Download Program Files item
* O17 - Domain hijack
* O18 - Enumeration of existing protocols and filters
* O19 - User stylesheet hijack
* O20 - AppInit_DLLs autorun Registry value, Winlogon Notify Registry keys
* O21 - ShellServiceObjectDelayLoad (SSODL) autorun Registry key
* O22 - SharedTaskScheduler autorun Registry key
* O23 - Enumeration of NT Services
* O24 - Enumeration of ActiveX Desktop Components