Corsi di Laurea

[sharkman]

salve..cm avevo gia accennato in un altro post mi si riavvia il pc quando mi collego ad internet ma non riesco a definire un tempo preciso col quale qst fenomeno mi capita....forse il riavvio si aggira intorno alle 3 ore ma non ne sono certo!....
....leggendo su altri forum ho scoperto ke ci sono 2 possibili motivi:
1) virus
2) difficoltà nel raffreddamento di dispositivi HW, o anke poca RAM...nn so!..

...ah ho scoperto anke ke ho un utente con una strana combinazione di caratteri al quale sono associati alcuni (mi sembra solo 2!) processi...se vi serve qlk stampa a video di alcuni stati del mio sistema sarò lieto di allegarveli...

fatemi sapere se avete qlk consiglio da darmi a riguardo

[da`]

capitava anke a me....posta qualche screen shot e forse t posso dire qualcosa di più!

[Narciso_Anasui]

carica una distrolive di linux (o win xpe) e controlla nei diski rigidi se ci son "cose strane", se non riesci a notar nulla, cambiamo metodo:
windows -> hijackthis -> posta qui il log;
se hai una sk madre asus usa asus probe per controllare la temperatura;
se anche questo non va, torna con la cara distrolive, sistema la connessione apri quel che apri di solito lascialo cazzeggiare per ore, se non si riavvia..
mi sa ke ti resta solo da formattare.

cmq posta gli screen son sempre utili, e il log di hijackthis

[sharkman]

ecco l'esito di HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 13.34.20, on 02/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\RocketDock\RocketDock.exe
C:\Programmi\CursorXP\CursorXP.exe
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\windows\System32\DRIVERS\CDANTSRV.EXE
C:\Programmi\File comuni\Nokia\Services\ServiceLayer.exe
C:\WINDOWS\System32\cisvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\windows\System32\ras\csrss.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Soglia Pasquale\Desktop\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gw.aliceadsl.it/home
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,"c:\windows\seagatechecker.exe",
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {44085BF3-1115-7F24-785B-A3BAA4273CC1} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe
O4 - HKCU\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Programmi\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [CursorXP] C:\Programmi\CursorXP\CursorXP.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Cerca con Google - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://C:\Programmi\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Link a ritroso - res://C:\Programmi\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://C:\Programmi\Google\GoogleToolbar1.dll/cmcache.html
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://blogpasogl.sp... ... nPUpld.cab
O18 - Protocol: bw+0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\windows\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\Programmi\MATLAB7\webserver\bin\win32\matlabserver.exe (file missing)
O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe


fatemi sapere io nn ci capisco nulla in qst cose....

PS: ho notato ke il pc mi si riavvia + spesso quando aggiorno l'intivirus o l'antyspiware di AVG...ora li ho disinstallati!!!....boh

[da`]

Incolla i log qui: http://www.hijackthis.de/ vedi che ti dice...
e postaci qualche screen....

[Narciso_Anasui]

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
O2 - BHO: (no name) - {44085BF3-1115-7F24-785B-A3BAA4273CC1} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)

elimina..

O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe
O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)
O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe

elimina urgentemente!!! probabilmente sono 3 virus!! (devi fare fix checked e poi cancellarli manualmente dall'hd)

O18 - Protocol: bw+0 - {061360AB-6440-41A9-B6DF-8D9C1ABAF375} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

non so xkè si ripeta tante volte.. forse c'è un problema con la webcam, cancellali tutti e reinstalla i driver << (io consiglio solo i driver senza desktop manager)

[sharkman]

C:\WINDOWS\about.htm
O2 - BHO: (no name) - {44085BF3-1115-7F24-785B-A3BAA4273CC1} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)

C:\WINDOWS\system32\ntsystem.exe
C:\windows\System32\Mac\lsass.exe (file missing)
C:\windows\System32\ras\csrss.exe

allora fammi capire devo cancellare questi file ???

devo fare prima fix checked e poi cancellarli manualmente dall'hd???e quando faccio fix xhexked devo selezionare qlcs?????

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

per quanto riguarda qst'ultimo ke faccio???

se puoi spiegarmi passo passo ke fare xkè ti ripeto non ho mai risolto i miei "problemini" agendo direttamente sui file....aspetto tue notizie e grazie...

[Narciso_Anasui]

quando avvii hicjackthis fai una scansione senza log (do a system scan only) ti escono in pratica le stesse cose ma con una casella [] per la spunta,
spunti le cose ke ti ho segnato e fai in basso fix checked.

fai fix cheched di questi:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\about.htm
O2 - BHO: (no name) - {44085BF3-1115-7F24-785B-A3BAA4273CC1} - (no file)
O3 - Toolbar: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe
O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)
O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe

e cancelli dall'HD questi file:

C:\WINDOWS\system32\ntsystem.exe
C:\windows\System32\Mac\lsass.exe (file missing)
C:\windows\System32\ras\csrss.exe

per quanto riguarda le dll della logitech, non sono un vero e proprio problema ma sono TANTE e probabilmente appesantiscono i processi, se vuoi puoi fare fixchecked anche su di loro..

dopo che hai fatto, riavvia fai un altra scansione e copia qui il risultato.

[sharkman]

ok ..ora faccio tutto ...

[sharkman]

allora ho fatto tutto (ho selezionato anke tutti o riferimenti a quell'errore della webcam ke tu mi dicevi ke potevano "ciucciare" troppo!!!)....xò...


C:\windows\System32\Mac\lsass.exe (file missing)
...nella stessa cartella c'è solo Isass.conf

C:\windows\System32\ras\csrss.exe
... non posso cancellarlo

ti allego lo screenshot dell'errore...

File allegato

•  Immagine.JPG   11,79K   150 Download

[sharkman]

eccoti il risultato di HijackThis nello stato in cui mi trovo ora...

Logfile of HijackThis v1.99.1
Scan saved at 12.59.25, on 03/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\RocketDock\RocketDock.exe
C:\Programmi\CursorXP\CursorXP.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\File comuni\Nokia\Services\ServiceLayer.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\windows\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\cisvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\windows\System32\ras\csrss.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\WINDOWS\system32\ntvdm.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\Soglia Pasquale\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gw.aliceadsl.it/home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,"c:\windows\seagatechecker.exe",
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe
O4 - HKCU\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Programmi\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [CursorXP] C:\Programmi\CursorXP\CursorXP.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Cerca con Google - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://C:\Programmi\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Link a ritroso - res://C:\Programmi\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://C:\Programmi\Google\GoogleToolbar1.dll/cmcache.html
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://blogpasogl.sp... ... nPUpld.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5AF8B03A-F69D-408E-92C3-C2061AD08E06}: NameServer = 85.37.17.11 151.99.125.1
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\windows\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\Programmi\MATLAB7\webserver\bin\win32\matlabserver.exe (file missing)
O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe

ASPETTO TUE NOTIZIE...

[Narciso_Anasui]

ripeto di eliminare:O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe
usa killbox o riavvia in modalità provvisoria, una distrolive un esorcismo, quel che vuoi basta ke lo elimini

anche questa:
O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe

fix e elimina.

per questa: O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)

basta invece che fai solo fix dato che il file non c'è (probabilmente è un preocesso fantasma creato dagli altri 2 file)

istruzioni per killbox:
Si scarica qui,
non si installa, una volta avviato selezioni il file e metti su "delete on reboot" clicca sulla (X) che sta alla destra del path, puoi farlo per entrambi i file e poi riavvii.

alla fine, hijackthis e copia log.

[sharkman]

ho cancellato o file con killbox ...ma è normale ke si riavviava come finiva il conto alla rovescia???....

....cmq ho fatto la cancellazione dei tre file ke mi hai detto ma se ho visto bene il file di log ntsystem.exe è rimasto....controlla tu ...

Logfile of HijackThis v1.99.1
Scan saved at 19.57.10, on 03/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32\ntsystem.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\RocketDock\RocketDock.exe
C:\Programmi\CursorXP\CursorXP.exe
C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\File comuni\Nokia\Services\ServiceLayer.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\windows\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\cisvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Soglia Pasquale\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://gw.aliceadsl.it/home
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fornito da Alice
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe,"c:\windows\seagatechecker.exe",
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Nokia Tray Application] C:\Programmi\File comuni\Nokia\NCLTools\NclTray.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [gwiz] C:\WINDOWS\system32\ntsystem.exe
O4 - HKCU\..\Run: [SweetIM] C:\Programmi\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Programmi\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [CursorXP] C:\Programmi\CursorXP\CursorXP.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Cerca con Google - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Traduci parola in italiano - res://C:\Programmi\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Link a ritroso - res://C:\Programmi\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Pagine simili - res://C:\Programmi\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://C:\Programmi\Google\GoogleToolbar1.dll/cmcache.html
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://blogpasogl.sp... ... nPUpld.cab
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\windows\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: DLL Enhancer Drive (Mac) - Unknown owner - C:\windows\System32\Mac\lsass.exe (file missing)
O23 - Service: MATLAB Server (matlabserver) - Unknown owner - C:\Programmi\MATLAB7\webserver\bin\win32\matlabserver.exe (file missing)
O23 - Service: CSRSS (ras) - Unknown owner - C:\windows\System32\ras\csrss.exe (file missing)

[Narciso_Anasui]

si il problema è quel file non so che dirti, del perchè non lo elimini..controlla nelle chiavi del registro cosa hai in esecuzione automatica non mi vien in mente altro..

[sharkman]

vabbè...vedrò di trovare qlk soluzione su internet... grazie di tutto ciao!

[sharkman]

ho fatto tutto quello ke mi avete detto e se prima il pc mi durava anke qlk ora dopo il primo avvio, stamattina,il pc continuava a crashare dopo soli 2 minuti circa!!!!
a qst punto ho cercato di risolvere nei + svariati modi ma solo quando ho inserito il cd di WindowsXP SP1 il pc nn mi ha abbandonato!!!..e pure non ho fatto ne installazioni ne ripristini...boh!....cmq fatto sta ke tutt'ora funziona e nel frattempo mi sono fatto qlk ricerca sulla grande rete e ho trovato un buon sito di scansioni online del quale esito vi ho postato un'immagine...purtroppo i file infetti non posso pulirli ma solo eliminarli e non so se farlo o meno..datemi un consiglio!

ah quasi dimenticavo, sono andato in Visualizzatore Eventi e ho notato ke c'erano un "paio" di errori....vi posto tutti gli screenshot...fatemi sapere ke cavolo devo fare anke xkè nn so se spegnendo il pc stasera...ci potremo risentire!!!!!!

File allegato

•  Immagine8.JPG   33,25K   113 Download
•  Immagine9.JPG   34,48K   113 Download
•  Immagine10.JPG   33,58K   113 Download
•  Immagine11.JPG   38,05K   113 Download
•  file infetti - virus.JPG   70,86K   113 Download

[sharkman]

ecco il resto....

File allegato

•  Immagine3.JPG   33,96K   112 Download
•  Immagine4.JPG   35,69K   112 Download
•  Immagine5.JPG   35,77K   112 Download
•  Immagine6.JPG   32,83K   112 Download
•  Immagine7.JPG   32,88K   112 Download

[sharkman]

...e ancora....FATEMI SAPERE!!!!!!!!!!!!!

File allegato

•  Visualizzatore eventi.JPG   183,9K   111 Download
•  Immagine1.JPG   34,69K   111 Download
•  Immagine2.JPG   34,42K   111 Download

[sharkman]

VI COMUNICO KE IL PC S'è AVVIATO SENXZA PROBLEMI E MANTIENE!!!
SPERIAMO CONTINUI....

Ora avrei bisogno di un buon antovirus xkè il mio AVG Professional crackato forse nn funge +..nn si aggiornava....l'AVST! nn so xkè ma si inceppava un pokino....

...poi avevo pensato di mettere "finalmente" un firewall...avevo pensato ad ZoneAllarm ke ne dite???

fatemi sapere quali sistemi di sicurezza pensate siano meglio....con tutte le informazioni ke ho appreso su Internet ora sono un po confuso!!

[zxzxasas]

Io consiglierei di eliminare tutto windows e metterci linux...