rikpse Posted January 21, 2013 Share Posted January 21, 2013 Salve da 3 settimane circa ho un fastidiosissimo problema alla barra applicazioni. 1 applicazione compare e scompare velocissimamente e oltre a comparire riduce automaticamente a icona qualsiasi programma-pagina internet- videogame che è in funzione rendendo la navigazione impossibile. ho provato avira combofix avgtuneup programmi spyware ma nulla.Avrei hickthis ma non essendo esperto ho preferito non toccare nulla...cosa posso fare? Quote Link to comment Share on other sites More sharing options...
principe andry Posted January 21, 2013 Share Posted January 21, 2013 Quindi è un'applicazione extra che non riesci a individuare? Posta il log di hijackthis (basta che fai solo la scansione, salvi il log e ci posti tutto il contenuto del file txt). Che sistema operativo hai? Apri il task manager e postaci l'elenco dei processi attivi. ciao Quote Link to comment Share on other sites More sharing options...
rikpse Posted January 21, 2013 Author Share Posted January 21, 2013 esatto questa applicazione non riesco ad individuarla. ecco la scansione hijack : Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 22:19:48, on 21/01/2013 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v9.00 (9.00.8112.16457) Boot mode: Normal Running processes: C:ProgramDataDatacardServiceDCSHelper.exe C:Program Files (x86)TOSHIBAConfigFreeNDSTray.exe C:Program Files (x86)DAEMON Tools LiteDTLite.exe C:Program Files (x86)TOSHIBAConfigFreeCFSwMgr.exe C:Program Files (x86)ANIANIWZCS2 ServiceWZCSLDR2.exe C:Program Files (x86)D-LinkDWL-G122_DWA-110AirGCFG.exe C:Program Files (x86)AviraAntiVir Desktopavgnt.exe C:Program Files (x86)Hotspot Shieldinopenvpntray.exe C:Program Files (x86)Mozilla Firefoxfirefox.exe C:Program Files (x86)Mozilla Firefoxplugin-container.exe C:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_5_502_146.exe C:WindowsSysWOW64MacromedFlashFlashPlayerPlugin_11_5_502_146.exe C:Program Files (x86)Trend MicroHiJackThisHiJackThis.exe R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = MSN Italia: Hotmail, Messenger, Skype, Windows Live R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = Bing R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = Bing R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Local Page = R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local O2 - BHO: Ant.com browser helper (video detector) - {346FDE31-DFF9-418A-90C8-BA31DC9FF2EF} - C:Program Files (x86)Ant.comIE add-ondownload.dll O2 - BHO: Java? Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre6inssv.dll O2 - BHO: Guida per l'accesso a Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files (x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll O2 - BHO: Vuze Remote - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll O2 - BHO: Java? Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre6injp2ssv.dll O2 - BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:Program Files (x86)TOSHIBATOSHIBA Media Controller Plug-inTOSHIBAMediaControllerIE.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:Program Files (x86)Hotspot ShieldHssIEHssIE.dll O3 - Toolbar: Vuze Remote Toolbar - {ba14329e-9550-4989-b3f2-9732e92d17cc} - C:Program Files (x86)Vuze_RemoteprxtbVuze.dll O3 - Toolbar: Ant.com Video Downloader toolbar - {2E924F4F-67F0-4BD8-9560-49F468E843D2} - C:Program Files (x86)Ant.comIE add-onanttoolbar.dll O4 - HKLM..Run: [TSleepSrv] %ProgramFiles(x86)%TOSHIBATOSHIBA Sleep UtilityTSleepSrv.exe O4 - HKLM..Run: [sVPWUTIL] C:Program Files (x86)TOSHIBAUtilitiesSVPWUTIL.exe SVPwUTIL O4 - HKLM..Run: [HWSetup] C:Program FilesTOSHIBAUtilitiesHWSetup.exe hwSetUP O4 - HKLM..Run: [KeNotify] C:Program Files (x86)TOSHIBAUtilitiesKeNotify.exe O4 - HKLM..Run: [ANIWZCS2Service] C:Program Files (x86)ANIANIWZCS2 ServiceWZCSLDR2.exe O4 - HKLM..Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] C:Program Files (x86)D-LinkDWL-G122_DWA-110AirGCFG.exe O4 - HKLM..Run: [avgnt] "C:Program Files (x86)AviraAntiVir Desktopavgnt.exe" /min O4 - HKLM..Run: [sunJavaUpdateSched] "C:Program Files (x86)Common FilesJavaJava Updatejusched.exe" O4 - HKCU..Run: [HW_OPENEYE_OUC_Chiavetta Internet] "C:Program Files (x86)Chiavetta InternetUpdateDogouc.exe" O4 - HKCU..Run: [DAEMON Tools Lite] "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun O4 - HKUSS-1-5-18..Run: [TOSHIBA Online Product Information] C:Program Files (x86)TOSHIBATOSHIBA Online Product Information opi.exe (User 'SYSTEM') O4 - HKUS.DEFAULT..Run: [TOSHIBA Online Product Information] C:Program Files (x86)TOSHIBATOSHIBA Online Product Information opi.exe (User 'Default user') O4 - .DEFAULT User Startup: TRDCReminder.lnk = C:Program Files (x86)TOSHIBATRDCReminderTRDCReminder.exe (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program Files (x86)Javajre6inssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program Files (x86)Javajre6inssv.dll O9 - Extra button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:Program Files (x86)Ant.comIE add-ondownload.dll O9 - Extra button: PokerStars.it - {C4046502-6524-4d87-896C-878F57D1FF07} - C:Program Files (x86)PokerStars.ITPokerStarsUpdate.exe O10 - Unknown file in Winsock LSP: c:program files (x86)common filesmicrosoft sharedwindows livewlidnsp.dll O10 - Unknown file in Winsock LSP: c:program files (x86)common filesmicrosoft sharedwindows livewlidnsp.dll O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/MessengerGamesContent/GameContent/it/uno1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:Program FilesSUPERAntiSpywareSASCORE64.EXE O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe O23 - Service: @%SystemRoot%system32Alg.exe,-112 (ALG) - Unknown owner - C:WindowsSystem32alg.exe (file missing) O23 - Service: ANIWConn Service (ANIWConnService) - Unknown owner - C:Windowssystem32ANIWConnService.exe O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:Program Files (x86)AviraAntiVir Desktopsched.exe O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:Program Files (x86)AviraAntiVir Desktopavguard.exe O23 - Service: Ant Toolbar updater service (AntUpdaterService) - Ant.com - C:Program Files (x86)Ant.comIE add-onAntUpdaterService.exe O23 - Service: ConfigFree WiMAX Service (cfWiMAXService) - TOSHIBA CORPORATION - C:Program Files (x86)TOSHIBAConfigFreeCFIWmxSvcs64.exe O23 - Service: Chiavetta Internet. OUC (Chiavetta Internet. RunOuc) - Unknown owner - C:Program Files (x86)Chiavetta InternetUpdateDogouc.exe O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:Program Files (x86)TOSHIBAConfigFreeCFSvcs.exe O23 - Service: @%SystemRoot%system32efssvc.dll,-100 (EFS) - Unknown owner - C:WindowsSystem32lsass.exe (file missing) O23 - Service: Hotspot Shield Service (hshld) - AnchorFree Inc. - C:Program Files (x86)Hotspot Shieldinopenvpnas.exe O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:Program Files (x86)Hotspot ShieldHssWPRhsssrv.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:Program Files (x86)Hotspot ShieldinHssTrayService.EXE O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:Program Files (x86)Hotspot Shieldinhsswd.exe O23 - Service: HWDeviceService64.exe - Unknown owner - C:ProgramDataDatacardServiceHWDeviceService64.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:Windowssystem32lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:WindowsSystem32msdtc.exe (file missing) O23 - Service: @%SystemRoot%System32 etlogon.dll,-102 (Netlogon) - Unknown owner - C:Windowssystem32lsass.exe (file missing) O23 - Service: NIHardwareService - Native Instruments GmbH - C:Program FilesCommon FilesNative InstrumentsHardwareNIHardwareService.exe O23 - Service: @%systemroot%system32psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:Windowssystem32lsass.exe (file missing) O23 - Service: @%systemroot%system32Locator.exe,-2 (RpcLocator) - Unknown owner - C:Windowssystem32locator.exe (file missing) O23 - Service: @%SystemRoot%system32samsrv.dll,-1 (SamSs) - Unknown owner - C:Windowssystem32lsass.exe (file missing) O23 - Service: @%SystemRoot%system32snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:WindowsSystem32snmptrap.exe (file missing) O23 - Service: @%systemroot%system32spoolsv.exe,-1 (Spooler) - Unknown owner - C:WindowsSystem32spoolsv.exe (file missing) O23 - Service: @%SystemRoot%system32sppsvc.exe,-101 (sppsvc) - Unknown owner - C:Windowssystem32sppsvc.exe (file missing) O23 - Service: Notebook Performance Tuning Service (TEMPRO) (TemproMonitoringService) - Toshiba Europe GmbH - C:Program Files (x86)Toshiba TEMPROTemproSvc.exe O23 - Service: TOSHIBA HDD Protection (Thpsrv) - Unknown owner - C:Windowssystem32ThpSrv.exe (file missing) O23 - Service: TMachInfo - TOSHIBA Corporation - C:Program Files (x86)TOSHIBATOSHIBA Service StationTMachInfo.exe O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - Unknown owner - C:Windowssystem32TODDSrv.exe (file missing) O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:Program FilesTOSHIBAPower SaverTosCoSrv.exe O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:Program Files (x86)ToshibaBluetooth Toshiba StackTosBtSrv.exe O23 - Service: TOSHIBA eco Utility Service - TOSHIBA Corporation - C:Program FilesTOSHIBATECOTecoService.exe O23 - Service: TOSHIBA HDD SSD Alert Service - TOSHIBA Corporation - C:Program FilesTOSHIBATOSHIBA HDD SSD AlertTosSmartSrv.exe O23 - Service: TPCH Service (TPCHSrv) - TOSHIBA Corporation - C:Program FilesTOSHIBATPHMTPCHSrv.exe O23 - Service: @%SystemRoot%system32ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:Windowssystem32UI0Detect.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe O23 - Service: @%SystemRoot%system32vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:Windowssystem32lsass.exe (file missing) O23 - Service: @%SystemRoot%system32vds.exe,-100 (vds) - Unknown owner - C:WindowsSystem32vds.exe (file missing) O23 - Service: @%systemroot%system32vssvc.exe,-102 (VSS) - Unknown owner - C:Windowssystem32vssvc.exe (file missing) O23 - Service: @%SystemRoot%system32WatWatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:Windowssystem32WatWatAdminSvc.exe (file missing) O23 - Service: @%systemroot%system32wbengine.exe,-104 (wbengine) - Unknown owner - C:Windowssystem32wbengine.exe (file missing) O23 - Service: Broadcom Wireless LAN Tray Service (wltrysvc) - Broadcom Corporation - C:Program FilesBroadcomBroadcom 802.11 Network AdapterWLTRYSVC.EXE O23 - Service: @%Systemroot%system32wbemwmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:Windowssystem32wbemWmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%Windows Media Playerwmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:Program Files (x86)Windows Media Playerwmpnetwk.exe (file missing) -- End of file - 11819 bytes i processi attivi :[ATTACH=CONFIG]3072[/ATTACH] Quote Link to comment Share on other sites More sharing options...
Labview Posted January 21, 2013 Share Posted January 21, 2013 Hai provato con ccleaner: CCleaner - Download Quote Link to comment Share on other sites More sharing options...
rikpse Posted January 21, 2013 Author Share Posted January 21, 2013 si ho provato...ma niente Quote Link to comment Share on other sites More sharing options...
principe andry Posted January 21, 2013 Share Posted January 21, 2013 Domani a mente fresca ricontrollo, ma ti servono le toolbar che hai? Io le toglierei molto tranquillamente, soprattutto quella Ant. Dopo l'eliminazione, controlla se il log di hijackthis te la riporta ancora la voce: O9 - Extra button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:Program Files (x86)Ant.comIE add-ondownload.dll Nei processi d'avvio cos'hai? (scrivi msconfig dopo aver cliccato su start e nella finestra che ti appare vai al tab avvio) ciao Quote Link to comment Share on other sites More sharing options...
Labview Posted January 21, 2013 Share Posted January 21, 2013 Questo: Spybot - Search & Destroy from Safer-Networking Ltd. Quasi sicuramente è un file "schifezza" che si è infiltrato nel tuo pc.. Se non riesci a beccarlo puoi sempre tentare la via del ripristino. Quote Link to comment Share on other sites More sharing options...
rikpse Posted January 21, 2013 Author Share Posted January 21, 2013 Domani a mente fresca ricontrollo, ma ti servono le toolbar che hai? Io le toglierei molto tranquillamente, soprattutto quella Ant.Dopo l'eliminazione, controlla se il log di hijackthis te la riporta ancora la voce: O9 - Extra button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:Program Files (x86)Ant.comIE add-ondownload.dll Nei processi d'avvio cos'hai? (scrivi msconfig dopo aver cliccato su start e nella finestra che ti appare vai al tab avvio) ciao ho solo 1 tooblar che è ant che serve per scaricare da putlocker ma il problema è sorto dopo ma volendo la tolgo su msconfig al opzione avvio mi da tutta roba toshiba (mio pc) chiavetta internet e programmi gia conosciuti volendo potrei rimuovere tutte le tooblar che ho su hijack quali sarebbero? Quote Link to comment Share on other sites More sharing options...
rikpse Posted January 21, 2013 Author Share Posted January 21, 2013 Questo: Spybot - Search & Destroy from Safer-Networking Ltd. Quasi sicuramente è un file "schifezza" che si è infiltrato nel tuo pc.. Se non riesci a beccarlo puoi sempre tentare la via del ripristino. ok scarico e provo! Quote Link to comment Share on other sites More sharing options...
rikpse Posted January 21, 2013 Author Share Posted January 21, 2013 Domani a mente fresca ricontrollo, ma ti servono le toolbar che hai? Io le toglierei molto tranquillamente, soprattutto quella Ant.Dopo l'eliminazione, controlla se il log di hijackthis te la riporta ancora la voce: O9 - Extra button: Download videos by Ant.com - {70AF6C9F-0818-4cf7-924A-BBDBB24211D3} - C:Program Files (x86)Ant.comIE add-ondownload.dll Nei processi d'avvio cos'hai? (scrivi msconfig dopo aver cliccato su start e nella finestra che ti appare vai al tab avvio) ciao SPYBOT non mi ha trovato nulla. mentre la voce che dici tu e tutte le voci riguardanti ANT al riavvio ricompaiono. Quote Link to comment Share on other sites More sharing options...
tom1 Posted January 22, 2013 Share Posted January 22, 2013 puoi sempre usare malwarebytes per toglierti dei dubbi sulla presenza di qualche malware. Rimane a mio avviso il migliore. Quote Link to comment Share on other sites More sharing options...
principe andry Posted January 22, 2013 Share Posted January 22, 2013 Malwarebyte's è un bel programmino, ma mi sembra strano che tutti quelli provati non abbiano rilevato nulla. Era più normale che non riuscissero a rimuoverlo. PS; erano aggiornati i software? Se le toolbar l'hai rimosse e i processi sono ancora attivi, puoi fixarli proprio con Hijackthis. Sto vedendo la lista dei processi che hai postato e c'è NDSTray.exe. È di toshiba, ma sembra legato proprio alla barra delle applicazioni. Comincerei a togliere il processo e a bloccarlo all'avvio. Sicuramente ce lo hai da molto prima che il problema sorgesse, ma forse andrà in conflitto con qualcosa che hai installato. ciao Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.