È soltanto un Pokémon con le armi o è un qualcosa di più? Vieni a parlarne su Award & Oscar!

AESSENET.ORG - Forum Forum di aessenet

Pc lento e processi attivi

  • Messaggi
  • OFFLINE
    lupusblu
    Post: 431
    Utente Senior
    00 06/09/2009 18:45
    Nel Task Manager ho processi attivi e se do una occhiata in Utilizzo Memoria tra i più voluminosi ho:
    iexplore.exe 20.854 Kb
    VProSvc.exe 25.452 KB
    svchost.exe 31.912 KB
    explore.exe 32.928 KB
    spiderml.exe 42.328 KB
    system 89.800 KB
    c'è qualcosa di strano? vi posto òa scansione fatta con hijachtis

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18.29.45, on 06/09/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16876)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\Programmi\AVG\AVG8\avgrsx.exe
    C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    C:\Programmi\File comuni\Doctor Web\Scanning Engine\dwengine.exe
    C:\WINDOWS\system32\imapi.exe
    C:\Programmi\File comuni\LightScribe\LSSrvc.exe
    C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
    C:\WINDOWS\Explorer.EXE
    C:\PROGRA~1\AVG\AVG8\avgrsx.exe
    C:\Programmi\Telecom Italia\WanMiniport1st\srvany.exe
    C:\Programmi\Telecom Italia\WanMiniport1st\WanMiniport1st_srv.exe
    C:\PROGRA~1\AVG\AVG8\avgnsx.exe
    C:\Programmi\Norton Ghost\Agent\VProSvc.exe
    C:\WINDOWS\system32\oodag.exe
    C:\Programmi\File comuni\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
    C:\PROGRA~1\DrWeb\spidernt.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\PROGRA~1\AVG\AVG8\avgtray.exe
    C:\Programmi\DrWeb\SpIDerAgent.exe
    C:\Programmi\DrWeb\spiderml.exe
    C:\Programmi\DrWeb\spidergate.exe
    C:\PROGRA~1\DrWeb\spiderui.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\WINDOWS\system32\oodtray.exe
    C:\PROGRA~1\AVG\AVG8\avgemc.exe
    C:\Programmi\AVG\AVG8\avgcsrvx.exe
    C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Programmi\PeerGuardian2\pg2.exe
    C:\WINDOWS\system32\dllhost.exe
    C:\Programmi\Norton Ghost\Shared\Drivers\SymSnapService.exe
    C:\Programmi\Lavasoft\Ad-Aware\AAWTray.exe
    C:\Programmi\File comuni\Nero\Lib\NMIndexingService.exe
    C:\WINDOWS\system32\taskmgr.exe
    C:\Programmi\Internet Explorer\iexplore.exe
    C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.it/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
    R3 - URLSearchHook: (no name) - *{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)
    R3 - URLSearchHook: (no name) - *{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    R3 - URLSearchHook: (no name) - *{EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Programmi\AVG\AVG8\Toolbar\IEToolbar.dll
    R3 - URLSearchHook: (no name) - *{48405d3d-2674-4cd8-b1ef-9a719443bd3f} - (no file)
    O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Programmi\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL
    O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG8\avgssie.dll
    O2 - BHO: Search USA Toolbar - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Programmi\Search_USA\tbSea1.dll
    O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Programmi\AVG\AVG8\Toolbar\IEToolbar.dll
    O3 - Toolbar: Yahoo! Toolbar con blocco Pop-Up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Programmi\AVG\AVG8\Toolbar\IEToolbar.dll
    O3 - Toolbar: Search USA Toolbar - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Programmi\Search_USA\tbSea1.dll
    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
    O4 - HKLM\..\Run: [SpIDerAgent] "C:\Programmi\DrWeb\SpIDerAgent.exe"
    O4 - HKLM\..\Run: [SpIDerMail] "C:\Programmi\DrWeb\spiderml.exe"
    O4 - HKLM\..\Run: [SpIDerGate] "C:\Programmi\DrWeb\spidergate.exe" -autorun
    O4 - HKLM\..\Run: [SpIDerNT] C:\PROGRA~1\DrWeb\spiderui.exe /agent
    O4 - HKLM\..\Run: [OODefragTray] C:\WINDOWS\system32\oodtray.exe
    O4 - HKCU\..\Run: [QUAD Windows service] C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h
    O4 - HKCU\..\Run: [QUAD Scheduler] C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [PeerGuardian] C:\Programmi\PeerGuardian2\pg2.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programmi\Yahoo!\Common\yinsthelper.dll
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6DA7BA9A-E985-4922-ACE0-1CCF75D8059D}: NameServer = 85.37.17.16 85.38.28.68
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi\AVG\AVG8\avgpp.dll
    O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
    O23 - Service: Dr.Web Scanning Engine (DrWebEngine) (DrWebEngine) - Doctor Web, Ltd. - C:\Programmi\File comuni\Doctor Web\Scanning Engine\dwengine.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
    O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programmi\Lavasoft\Ad-Aware\AAWService.exe
    O23 - Service: License Management Service ESD - element5 - C:\Programmi\File comuni\element5 Shared\Service\Licence Manager ESD.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
    O23 - Service: Network WanMiniport First Position - Unknown owner - C:\Programmi\Telecom Italia\WanMiniport1st\srvany.exe
    O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Nero\Lib\NMIndexingService.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Programmi\Norton Ghost\Agent\VProSvc.exe
    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
    O23 - Service: PLFlash DeviceIoControl Service - Unknown owner - (no file)
    O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Programmi\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - (no file)
    O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Programmi\Roxio\Digital Home 10\RoxioUpnpService10.exe
    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - (no file)
    O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe
    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - (no file)
    O23 - Service: RoxMediaDB10 - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
    O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C:\Programmi\File comuni\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe
    O23 - Service: SpIDer Guard for Windows (SPIDERNT) - Doctor Web, Ltd. - C:\PROGRA~1\DrWeb\spidernt.exe
    O23 - Service: SymSnapService - Symantec - C:\Programmi\Norton Ghost\Shared\Drivers\SymSnapService.exe

    --
    End of file - 9078 bytes
  • OFFLINE
    boyuniversity
    Post: 12.940
    Maestro
    00 07/09/2009 18:35
    togli manualmente

    C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe

    togli tramite hijackthis

    R3 - URLSearchHook: (no name) - *{0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - (no file)


    R3 - URLSearchHook: (no name) - *{48405d3d-2674-4cd8-b1ef-9a719443bd3f} - (no file)

    O4 - HKCU\..\Run: [QUAD Windows service] C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h

    O4 - HKCU\..\Run: [QUAD Scheduler] C:\Programmi\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe

    O23 - Service: PLFlash DeviceIoControl Service - Unknown owner - (no file)


    O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - (no file)


    O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - (no file)


    O23 - Service: LiveShare P2P Server 9 (RoxLiveShare9) - Sonic Solutions - (no file)




  • OFFLINE
    lupusblu
    Post: 431
    Utente Senior
    00 08/09/2009 10:21
    Re:


    grazie boyuniversity, puntuale e chiaro come sempre. Ma toglimi una curiosità "QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe"
    è un programma che ho installato io per una pulizia del pc, per quale motivo va tolto? solo pura curiosità, grazie ancora.






    [Modificato da lupusblu 08/09/2009 10:25]
  • OFFLINE
    boyuniversity
    Post: 12.941
    Maestro
    00 08/09/2009 11:06
    ti copio ciò che ho trovato su quel programma da altri utenti

    > QUAD? UN DISASTRO. Mi ha distrutto il Sistema Operativo.

    > disinstallalo, purtroppo il programma si e' dimostrato un falso pulitore del registro: ti dice di aver trovato un sacco di errori, finti, promettendo di ripulirti il pc dopo averlo acquistato. dopo averlo disinstallato pulisci tutto con CCleaner , clicca su download latest version, e finisci facendo una scansione con malwarebytes

    in +

    qua
    o qua