Ho Presso Un Virus

puma512

Ciao ragazzi

Mi son presso un maledetto virus. Il PC si accende e dopo qualche secondo si spegne e cosi via in continuazione.

Sono riuscito ad avviarlo solo col UBCD4windows Ultimate Boot CD for Windows *se a qualcuno puo servire, lo trovate qui http://www.ubcd4win.com/ ed e gratuito basta scaricarlo, masterizarlo in CD e se il pc non va piu lo inserisci e lui fa da solo.

E cosi facendo sono riuscito a far partire il hijack e il risultato e questo>

Logfile of Trend Micro HijackThis v2.0.0 (BETA)

Scan saved at 17.34.45, on 21/11/08

Platform: Windows XP SP2 (WinNT 5.01.2600)

Boot mode: Normal

Running processes:

X:\I386\system32\csrss.exe

X:\I386\system32\services.exe

X:\I386\system32\lsass.exe

X:\I386\system32\svchost.exe

X:\Programs\Nu2Menu\nu2menu.exe

X:\programs\geoshell\GEOSHELL.EXE

X:\I386\system32\svchost.exe

X:\I386\system32\svchost.exe

X:\PROGRAMS\Firefox\firefox.exe

X:\PROGRAMS\xplorer2\xplorer2.exe

B:\UBCD4Win User Settings\Administrator\My Documents\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

F2 - REG:system.ini: Shell=preshell.exe

O13 - DefaultPrefix:

O13 - WWW Prefix:

O13 - Home Prefix:

O13 - Mosaic Prefix:

O13 - FTP Prefix:

O13 - Gopher Prefix:

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)

O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - X:\I386\System32\browseui.dll

O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - X:\I386\System32\browseui.dll

O23 - Service: AntiVir Personal Scheduler (AntiVirScheduler) - Unknown owner - B:\AntiVir\sched.exe (file missing)

O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - X:\I386\System32\msdtc.exe (file missing)

O23 - Service: Virtual Disk Service (vds) - Unknown owner - X:\I386\System32\vds.exe (file missing)

--

End of file - 1916 bytes

In attesa di gia ringrazio a chi si offre ad aiutarmi.

Marcello

alexcrist

Please open a new topic and post in English.

Thank you.

Cris.

==CLOSED==