Trattandosi di un PC nuovo (con installato seven nuovo è un eufemismo; meglio dire mai usato) non è che avesse preinstallato anche un Antivirus come spesso avviene e che Avast abbia creato un conflitto?
Prova a disinstallare Avast e vedi cosa succede.

La disinstallazione di Avast va fatta col suo disinstallatore in modalità provvisoria.

https://www.avast.com/it-it/uninstall-utility

Scegli l'ultima versione di avastclear exe che sicuramente va bene anche per la tua versione.
Dopo la disinstallazione pulisci con CCleaner compreso il registro.

scusate ragazzi, ma sono riuscito a recuperare i file di log di MalwareByres

<?xml version="1.0" encoding="UTF-16"?>

-<mbam-log>


-<header>

<date>2015/04/21 19:47:58 +0200</date>

<logfile>mbam-log-2015-04-21 (19-47-52).xml</logfile>

<isadmin>yes</isadmin>

</header>


-<engine>

<version>2.01.4.1018</version>

<malware-database>v2015.04.21.05</malware-database>

<rootkit-database>v2015.04.20.01</rootkit-database>

<license>free</license>

<file-protection>disabled</file-protection>

<web-protection>disabled</web-protection>

<self-protection>disabled</self-protection>

</engine>


-<system>

<osversion>Windows 7 Service Pack 1</osversion>

<arch>x64</arch>

<username>Administrator</username>

<filesys>NTFS</filesys>

</system>


-<summary>

<type>threat</type>

<result>completed</result>

<objects>409552</objects>

<time>1527</time>

<processes>0</processes>

<modules>0</modules>

<keys>3</keys>

<values>2</values>

<datas>0</datas>

<folders>13</folders>

<files>43</files>

<sectors>0</sectors>

</summary>


-<options>

<memory>enabled</memory>

<startup>enabled</startup>

<filesystem>enabled</filesystem>

<archives>enabled</archives>

<rootkits>enabled</rootkits>

<deeprootkit>disabled</deeprootkit>

<heuristics>enabled</heuristics>

<pup>enabled</pup>

<pum>enabled</pum>

</options>


-<items>


-<key>

<path>HKLM\SOFTWARE\CLIENTS\STARTMENUINTERNET\Unico Browser.A5KT47MUO74BPHYYBI2CJH37UQ</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>b782ff70206a4ceaf3bb289b16ed6799</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\CLIENTS\STARTMENUINTERNET\Unico Browser.A5KT47MUO74BPHYYBI2CJH37UQ</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>a297bcb3701a66d0dcd24380dc270cf4</hash>

</key>


-<key>

<path>HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\MEDIAPLAYER\SHIMINCLUSIONLIST\unicobrowser.exe</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>9e9b046b9af083b3c0ef675ce320629e</hash>

</key>


-<value>

<path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path>

<valuename>quick_searchff@gmail.com</valuename>

<vendor>PUP.Optional.QuickSearch.A</vendor>

<action>success</action>

<valuedata>C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\v5yjk77f.default\extensions\quick_searchff@gmail.com</valuedata>

<hash>b5841b54305aac8a3fb2b010b74c58a8</hash>

</value>


-<value>

<path>HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS</path>

<valuename>sweetsearch@gmail.com</valuename>

<vendor>PUP.Optional.SweetSearch.A</vendor>

<action>success</action>

<valuedata>C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\v5yjk77f.default\extensions\sweetsearch@gmail.com</valuedata>

<hash>3efb07686e1cc86e4da5596759aad52b</hash>

</value>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13\Locales</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Cache</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Rules</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension State</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<folder>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Storage</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</folder>


-<file>

<path>C:\claraInstaller.txt</path>

<vendor>PUP.Optional.Clara.A</vendor>

<action>success</action>

<hash>c277b0bf7713ea4cded7368df013ba46</hash>

</file>


-<file>

<path>C:\Windows\System32\Tasks\Selection Tools Update</path>

<vendor>PUP.Optional.SelectionTools.A</vendor>

<action>success</action>

<hash>2b0e432c88029b9b1841c40eb053b749</hash>

</file>


-<file>

<path>C:\Windows\System32\Tasks\WindApp Update</path>

<vendor>PUP.Optional.Nosibay.A</vendor>

<action>success</action>

<hash>a2971659a9e15cda1522885ef31036ca</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13\chrome_100_percent.pak</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13\icudtl.dat</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13\resources.pak</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\Application\39.0.2132.13\Locales\it.pak</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\lockfile</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Cookies</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Cookies-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Cookies</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Cookies-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Favicons</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Favicons-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\History</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\History-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Origin Bound Certs</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Origin Bound Certs-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Shortcuts</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Shortcuts-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Top Sites</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Top Sites-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Visited Links</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Web Data</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Web Data-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Rules\000003.log</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Rules\LOCK</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Rules\LOG</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension Rules\MANIFEST-000002</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension State\000003.log</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension State\LOCK</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension State\LOG</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Extension State\MANIFEST-000002</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\000003.log</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\LOCK</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\LOG</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\gfmdmibgfbecppaeocifplgmepgcpcbi\MANIFEST-000002</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000003.log</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOCK</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000002</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>


-<file>

<path>C:\Users\Administrator\AppData\Local\UnicoBrowser\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal</path>

<vendor>PUP.Optional.UnicoBrowser.A</vendor>

<action>success</action>

<hash>0534026dc8c22c0a7ff93985cf34f30d</hash>

</file>

</items>

</mbam-log>


------------------------------------- secondo log


<?xml version="1.0" encoding="UTF-8"?>

-<logs>

<record toVersion="2015.4.6.2" name="Remediation Database" last_modified_tag="3218061f-dd7b-4960-aa2d-c7844460274c" fromVersion="2015.3.9.1" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T18:32:19.699530+02:00" LoggingEventType="1" severity="debug"/>

<record toVersion="2015.4.20.1" name="Rootkit Database" last_modified_tag="c548b430-b213-4c95-bfad-f8375f57b44c" fromVersion="2015.2.25.1" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T18:32:22.691536+02:00" LoggingEventType="1" severity="debug"/>

<record toVersion="2015.4.21.5" name="Malware Database" last_modified_tag="f5fc4cf5-8541-430f-90fe-e854e83f4a04" fromVersion="2015.3.9.5" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T18:32:41.049567+02:00" LoggingEventType="1" severity="debug"/>

<record last_modified_tag="897ac09f-7f55-48ac-a4bf-7374aa875445" systemname="FHDTY-PC" username="SYSTEM" type="Error" source="Protection" datetime="2015-04-21T19:39:48.152455+02:00" LoggingEventType="4" severity="debug" message="IsLicensed" code="13"/>

<record last_modified_tag="fb289827-858e-48d3-b0c0-ce467bc33be3" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T19:39:48.183655+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopping"/>

<record last_modified_tag="c38bae76-003a-463c-b0e2-1ea2808b0fd0" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T19:39:48.183655+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopped"/>

<record last_modified_tag="fa327550-7e16-40a3-80f9-f57e0f86b0b7" systemname="FHDTY-PC" username="SYSTEM" type="Error" source="Protection" datetime="2015-04-21T19:46:55.987248+02:00" LoggingEventType="4" severity="debug" message="IsLicensed" code="13"/>

<record last_modified_tag="bbcd797b-ffb8-4288-a1d7-2014d82101d1" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T19:46:56.018448+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopping"/>

<record last_modified_tag="8b3d6acc-09ba-4e52-b212-ef6cace198ca" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T19:46:56.018448+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopped"/>

<record last_modified_tag="82ad6502-d5e1-4548-9b00-24792a8823ce" systemname="FHDTY-PC" username="SYSTEM" type="Scan" source="Manual" datetime="2015-04-21T20:32:58.142099+02:00" LoggingEventType="6" severity="debug" starttime="2015-04-21T19:47:58+02:00" scantype="threat" scanresult="completed" nonmalwaredetections="61" malwaredetections="0" duration="1527"/>

<record last_modified_tag="a205c14d-687a-4d92-9f16-cc0c5ebe5bbe" systemname="FHDTY-PC" username="SYSTEM" type="Error" source="Protection" datetime="2015-04-21T20:34:21.024841+02:00" LoggingEventType="4" severity="debug" message="IsLicensed" code="13"/>

<record last_modified_tag="959b2d3d-8126-4d63-a4b2-768d2217b449" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T20:34:21.040441+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopping"/>

<record last_modified_tag="0e37bcbf-6de6-4e46-b35d-70d05e196538" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T20:34:21.040441+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopped"/>

<record last_modified_tag="c04da037-4f31-4764-9cb3-d6f32c89bad8" systemname="FHDTY-PC" username="SYSTEM" type="Error" source="Protection" datetime="2015-04-21T20:43:45.541240+02:00" LoggingEventType="4" severity="debug" message="IsLicensed" code="13"/>

<record last_modified_tag="faa32b87-6d47-421e-9dac-d5415c17ca23" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T20:43:45.541240+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopping"/>

<record last_modified_tag="06085691-67c5-4746-aab1-41bb69470347" systemname="FHDTY-PC" username="SYSTEM" type="Protection" source="Protection" datetime="2015-04-21T20:43:45.556840+02:00" LoggingEventType="2" severity="debug" subtype="Malware Protection" result="Stopped"/>

<record toVersion="2015.4.21.1" name="Remediation Database" last_modified_tag="e5fd886b-3496-4a85-8cc3-d637e9be9279" fromVersion="2015.4.6.2" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T21:05:19.791673+02:00" LoggingEventType="1" severity="debug"/>

<record toVersion="2015.4.21.1" name="Rootkit Database" last_modified_tag="9599cf66-a918-4c49-a778-3726257860f2" fromVersion="2015.4.20.1" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T21:52:24.855716+02:00" LoggingEventType="1" severity="debug"/>

<record toVersion="2015.4.21.6" name="Malware Database" last_modified_tag="e02b8dc4-1623-4439-b35e-f8d20d7324fc" fromVersion="2015.4.21.5" systemname="FHDTY-PC" username="SYSTEM" type="Update" source="Manual" datetime="2015-04-21T21:54:08.027617+02:00" LoggingEventType="1" severity="debug"/>

</logs>

Li ho eliminati dalla Quarantena

Grazie per la pazienza

Ciao CCBUSTO

Ho eseguito la scansione con Trend Micro HijackThis v2.0.5
ecco il log.


Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 07:50:48, on 23/04/2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17728)

FIREFOX: 37.0.1 (x86 it)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\PDF24\pdf24.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe
C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe
C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_17_0_0_169.exe
C:\Users\Administrator\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [EaseUS TB Tray Agent] "C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1429767433
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O9 - Extra button: Skype Click to Call settings - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{45A15253-B87B-4D52-A2F4-AD74F46679B0}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{45A15253-B87B-4D52-A2F4-AD74F46679B0}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{45A15253-B87B-4D52-A2F4-AD74F46679B0}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O18 - Protocol: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: EaseUS Agent Service (EaseUS Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: OfficeScan NT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmlisten.exe
O23 - Service: OfficeScan NT Proxy Service (TmProxy) - Trend Micro Inc. - C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmProxy.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9444 bytes

Non ho effettuato nessuna oazione sui record estratti.
Devo fare qualcosa per eliminarli ?

Ho caricato Trend Micro OfficeScan client come antivirus. Per errore avevo caricato anche avast non avendo visto la presenza di trend micro.
Posso lasciare Trend Micro o è meglio sostituirlo con Avast ?

Pensavo anche di installate privatefirewall come firewall e disattivare quello nativo Microsoft.
Grazie

Moreno

Ciao Moreno,

Ho caricato Trend Micro OfficeScan client come antivirus. Per errore avevo caricato anche avast non avendo visto la presenza di trend micro.
Posso lasciare Trend Micro o è meglio sostituirlo con Avast ?

Pensavo anche di installate privatefirewall come firewall e disattivare quello nativo Microsoft.
Grazie

Come già suggerito da ciocca, io ti consiglio di lasciar perdere sia trend micro che avast e metti MSE (quello che uso anch'io), ottimo antivirus, per il firevall quello di vindows 7 va più che bene non metterne altri, questa è la mia opinione, altri la pensano diversamente, decidi tu.
Se decidi per MSE, lo scarichi dal sito Microsoft, poi ti disconnetti, elimini i 2 antivirus col loro uninstaller, poi pulisci il Registro con Ccleaner e quindi installi MSE, ti ricolleghi alla rete e lo aggiorni, poi fai una scansione.
Se invece decidi pe uno dei due, Trend Micro dovresti acquistarlo, meglio Avast.

Apri Hijack e clicca sul secondo pulsante Do a system scan only poi metti il segno di spunta sulle voci sotto elencate, clicca il tasto Fix checked per procedere all'eliminazione, nella finestra che appare clicca su SI per accettare e l'operazione e conclusa.

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe
O4 - HKLM\..\Run: [EaseUS EPM tray] C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\EpmNews.exe
O4 - HKLM\..\Run: [EaseUS EPM Tray Agent] "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.2\bin\TrayPopupE\TrayTipAgentE.exe"
O4 - HKLM\..\Run: [EaseUS TB Tray Agent] "C:\Program Files (x86)\EaseUS\TrayPopup\TrayTipAgent.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [GUDelayStartup] "C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe" -delayrun
O4 - HKCU\..\RunOnce: [Adobe Speed Launcher] 1429767433

Le voci 04 si riferiscono a programmi in avvio automatico i programmi non vengono toccati ma viene solo disattivato l'avvio, inutile.
Per il resto tutto a posto.

Di DNS vedo che ne hai 5 a cosa ti servono, ne basta uno quello di Google.
Fai sapere se tutto è a posto.