Benvenuto Ospite

Aiutamici Forum » Computer & Internet » Problemi Informatici » pc lento

3 pages: [1] 2 3

pc lento

Opzioni

Topic Precedente · Topic Sucessivo

fmancini

Inviato: Wednesday, August 18, 2010 12:33:14 PM

Rank: AiutAmico

Iscritto dal : 12/16/2006
Posts: 105

ciao a tutti..
ho il pc lento in apertura(forse troppi programmi??)e lento in generale..Allego il log di ComboFix,se mi potete aiutare ve ne sarei molto grato!!
ComboFix 10-08-17.03 - Franco 18/08/2010 12.05.08.6.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.959.456 [GMT 2:00]
Eseguito da: c:\documents and settings\Franco\Desktop\Antivirus.Spyw.Pulizia.Defr\ComboFix.exe
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00000002-0002-0000-6C25-9E7C08000A00}
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00000002-0002-0000-7C25-9E7C08000A00}
AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Outdated) {00000000-0000-0000-0000-000000000000}
AV: Avira AntiVir PersonalEdition Classic *On-access scanning enabled* (Updated) {804FD0EC-FFA4-00EB-0D24-347CA8A3377C}
* Resident AV is active

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Franco\Dati applicazioni\PriceGong
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\1.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\a.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\b.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\c.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\d.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\e.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\f.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\g.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\h.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\i.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\J.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\k.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\l.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\m.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\mru.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\n.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\o.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\p.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\q.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\r.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\s.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\t.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\u.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\v.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\w.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\x.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\y.xml
c:\documents and settings\Franco\Dati applicazioni\PriceGong\Data\z.xml

.
((((((((((((((((((((((((( Files Creati Da 2010-07-18 al 2010-08-18 )))))))))))))))))))))))))))))))))))
.

2010-08-16 19:06 . 2010-08-16 19:06 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Messenger_Plus_Live_Italy
2010-08-16 19:06 . 2010-08-16 19:06 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Apple
2010-08-12 09:19 . 2010-08-12 09:19 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Temp
2010-08-12 09:17 . 2010-08-12 09:17 -------- d-----w- c:\windows\system32\wbem\Repository
2010-08-11 19:48 . 2010-08-11 19:48 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Google
2010-08-11 19:37 . 2010-08-11 19:37 -------- d-----w- c:\documents and settings\LocalService\Impostazioni locali\Dati applicazioni\Google
2010-08-10 15:46 . 2010-08-10 15:46 -------- d-----w- c:\programmi\File comuni\SWF Studio

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-08-16 21:51 . 2007-05-20 16:04 -------- d-----w- c:\documents and settings\Franco\Dati applicazioni\Skype
2010-08-16 20:08 . 2007-05-23 20:24 -------- d-----w- c:\documents and settings\Franco\Dati applicazioni\LimeWire
2010-08-12 18:54 . 2007-09-27 16:38 -------- d-----w- c:\programmi\Messenger Plus! Live
2010-08-12 18:45 . 2008-04-24 13:31 -------- d-----r- c:\programmi\Skype
2010-08-11 21:59 . 2001-08-31 12:00 62350 ----a-w- c:\windows\system32\perfc010.dat
2010-08-11 21:59 . 2001-08-31 12:00 564460 ----a-w- c:\windows\system32\perfh010.dat
2010-08-11 19:55 . 2007-05-21 18:31 -------- d-----w- c:\programmi\Alice ti aiuta
2010-08-11 19:38 . 2010-06-08 19:13 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Google Updater
2010-08-10 13:30 . 2007-05-20 16:03 -------- d-----w- c:\programmi\Google
2010-08-10 13:09 . 2010-06-26 10:51 -------- d-----w- c:\programmi\Official Emule
2010-08-10 13:09 . 2010-06-26 10:50 -------- d-----w- c:\programmi\fbtoolbar
2010-08-10 13:09 . 2007-11-16 08:51 -------- dcsh--w- c:\programmi\File comuni\WindowsLiveInstaller
2010-08-10 13:09 . 2007-05-23 19:59 -------- d-----w- c:\programmi\eMule
2010-08-06 21:48 . 2010-05-08 13:45 -------- d-----w- c:\programmi\Messenger_Plus_Live_Italy
2010-06-30 12:31 . 2004-08-19 13:39 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-29 05:34 . 2009-06-11 13:17 -------- d-----w- c:\documents and settings\Franco\Dati applicazioni\Azureus
2010-06-28 22:07 . 2008-10-19 18:39 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-06-26 16:55 . 2007-05-23 20:12 -------- d-----w- c:\programmi\LimeWire
2010-06-26 14:47 . 2007-10-05 14:39 -------- d-----w- c:\programmi\FaxTalk Communicator
2010-06-26 10:49 . 2010-06-26 10:49 453120 ----a-w- c:\windows\system32\AdvatarRes.dll
2010-06-24 12:22 . 2004-08-19 13:39 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-24 09:02 . 2004-08-19 13:31 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-23 13:57 . 2010-08-12 09:11 8530 ----a-w- c:\windows\pchealth\helpctr\Config\Cache\Professional_32_1040.dat
2010-06-21 15:27 . 2004-08-03 21:14 354304 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-21 06:58 . 2010-01-21 09:42 13568 ----a-w- c:\windows\system32\drivers\USBCRFT.SYS
2010-06-19 16:04 . 2009-08-27 10:16 -------- d-----w- c:\documents and settings\Franco\Dati applicazioni\Any Video Converter
2010-06-17 14:03 . 2004-08-19 13:39 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-06-14 14:31 . 2007-05-18 09:15 744448 ----a-w- c:\windows\pchealth\helpctr\binaries\helpsvc.exe
2010-06-14 07:41 . 2004-08-19 13:39 1172480 ----a-w- c:\windows\system32\msxml3.dll
2010-06-04 08:16 . 2010-06-04 07:46 19876 ------w- c:\windows\HPHins02.dat
2010-06-04 08:12 . 2010-06-04 08:12 45056 ----a-r- c:\documents and settings\Franco\Dati applicazioni\Microsoft\Installer\{DDA2B32F-EB16-4C96-A130-4E4A4C1E6B12}\NewShortcut1_5B69D3033CA54B39B5ECE7D051297E77.exe
2010-06-04 08:11 . 2010-06-04 08:11 43672 ----a-w- c:\windows\system32\drivers\AFS2K.SYS
2010-06-03 21:35 . 2010-03-31 09:12 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2010-06-03 02:41 . 2010-06-03 02:41 3600384 ----a-w- c:\windows\system32\GPhotos.scr
2010-05-21 12:14 . 2009-10-03 10:39 221568 ------w- c:\windows\system32\MpSigStub.exe
2008-04-17 12:30 . 2008-01-26 18:15 88 --sh--r- c:\windows\system32\2DE126F1C3.sys
2008-04-17 12:30 . 2007-11-20 23:13 3350 --sha-w- c:\windows\system32\KGyGaAvL.sys
.

Code:

<pre>
c:\programmi\Google\GoogleToolbarNotifier\googletoolbarnotifier .exe
c:\programmi\Logitech\Desktop Messenger\8876480\Program\backweb-8876480 .exe
c:\programmi\SUPERAntiSpyware\superantispyware .exe
c:\windows\system32\ctfmon .exe
c:\windows\system32\hphmon05 .exe
c:\windows\system32\nerocheck .exe
c:\windows\system32\spool\drivers\w32x86\3\hpztsb09 .exe
</pre>

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{08d495ab-a86c-47b0-82ef-da87bf92f730}"= "c:\programmi\Messenger_Plus_Live_Italy\tbMes1.dll" [2010-08-12 2734688]

[HKEY_CLASSES_ROOT\clsid\{08d495ab-a86c-47b0-82ef-da87bf92f730}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{08d495ab-a86c-47b0-82ef-da87bf92f730}]
2010-08-12 09:32 2734688 ----a-w- c:\programmi\Messenger_Plus_Live_Italy\tbMes1.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{83CED28E-B96A-43FC-A276-2AD7A48EB6BE}]
2010-06-26 10:49 893440 ----a-w- c:\programmi\fbtoolbar\IE BHO.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{08d495ab-a86c-47b0-82ef-da87bf92f730}"= "c:\programmi\Messenger_Plus_Live_Italy\tbMes1.dll" [2010-08-12 2734688]

[HKEY_CLASSES_ROOT\clsid\{08d495ab-a86c-47b0-82ef-da87bf92f730}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{08D495AB-A86C-47B0-82EF-DA87BF92F730}"= "c:\programmi\Messenger_Plus_Live_Italy\tbMes1.dll" [2010-08-12 2734688]

[HKEY_CLASSES_ROOT\clsid\{08d495ab-a86c-47b0-82ef-da87bf92f730}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\programmi\RocketDock\RocketDock.exe" [2007-09-02 495616]
"RestoreDesktop"="c:\programmi\Restore Desktop\RestoreDesktop.exe" [2003-03-11 45056]
"SmartRAM"="c:\programmi\IObit\Advanced SystemCare 3\Sup_SmartRAM.exe" [2010-01-22 200280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2010-02-27 209153]
"nwiz"="nwiz.exe" [N/A]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2010-04-03 110696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2010-04-03 13670504]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2010-03-17 421888]
"OpwareSE4"="c:\programmi\ScanSoft\OmniPageSE4.0\OpwareSE4.exe" [2006-03-21 69632]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
WDDMStatus.lnk - c:\programmi\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe [2009-11-13 2057536]
WDSmartWare.lnk - c:\programmi\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe [2009-11-13 9117504]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoPopUpsOnBoot"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programmi\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager]
2003-12-22 06:38 241664 ----a-w- c:\programmi\HP\hpcoretech\hpcmpmgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2003-12-05 13:41 49152 ----a-w- c:\programmi\Hewlett-Packard\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
2006-03-21 12:19 69632 ----a-w- c:\programmi\ScanSoft\OmniPageSE4.0\OpWareSE4.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
2009-11-11 08:57 1451520 ----a-w- c:\programmi\Nokia\Nokia PC Suite 7\PCSuite.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-03-17 19:53 421888 ----a-w- c:\programmi\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSBkgdUpdate]
2003-09-29 23:14 155648 ----a-r- c:\programmi\File comuni\ScanSoft Shared\SSBkgdUpdate\SSBkgdUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-02-08 15:58 39408 ----a-w- c:\programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
"RTHDCPL"=RTHDCPL.EXE
"Alcmtr"=ALCMTR.EXE
"SunJavaUpdateSched"="c:\programmi\Java\jre1.6.0_07\bin\jusched.exe"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\fxsclnt.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\usmt\\migwiz.exe"=
"c:\\Programmi\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Programmi\\File comuni\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Programmi\\LimeWire\\LimeWire.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\Vuze\\Azureus.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\\Programmi\\NetMeeting\\conf.exe"=
"c:\\Programmi\\iTunes\\iTunes.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Programmi\\Microsoft Office\\OFFICE11\\WINWORD.EXE"=
"c:\\Programmi\\eMule\\eMule.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"25736:TCP"= 25736:TCP:eMule_TCP
"25745:UDP"= 25745:UDP:eMule_UDP
"5985:TCP"= 5985:TCP:*:Disabled:Gestione remota Windows

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [31/03/2010 11.12.05 64288]
R0 RVSystem;RVSystem;c:\windows\system32\drivers\rvsystem.sys [18/04/2010 21.47.10 45648]
R1 rvsmon;rvsmon;c:\windows\system32\drivers\rvsmon.sys [18/04/2010 21.47.20 264128]
R1 rvsmonn;rvsmonn;c:\windows\system32\drivers\rvsmonn1.sys [18/04/2010 21.47.23 28640]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\programmi\Avira\AntiVir Desktop\sched.exe [27/02/2010 20.39.45 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\programmi\Avira\AntiVir Desktop\avwebgrd.exe [27/02/2010 20.39.43 434945]
R2 ASKService;ASKService;c:\programmi\AskBarDis\bar\bin\AskService.exe [11/06/2009 15.17.58 464264]
R2 ASKUpgrade;ASKUpgrade;c:\programmi\AskBarDis\bar\bin\ASKUpgrade.exe [11/06/2009 15.18.09 234888]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programmi\Lavasoft\Ad-Aware\AAWService.exe [04/02/2010 17.52.57 1352832]
R2 RVSMONBL;Returnil Virtual System Core Service;c:\windows\system32\Returnil\RVS3\rvsmon.exe [06/04/2010 17.13.18 1254800]
R2 rvsmonf;rvsmonf;c:\windows\system32\drivers\rvsmonf.sys [18/04/2010 21.47.22 1035080]
R2 WDDMService;WD SmartWare Drive Manager;c:\programmi\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [13/11/2009 11.28.04 110592]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service;c:\programmi\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [16/06/2009 8.58.08 20480]
R2 WinDefend;Windows Defender;c:\programmi\Windows Defender\MsMpEng.exe [03/11/2006 18.19.58 13592]
R3 CardReaderFilter;Card Reader Filter;c:\windows\system32\drivers\USBCRFT.SYS [21/01/2010 11.42.06 13568]
S1 StarPortLite;StarPort Storage Controller (Lite);c:\windows\system32\DRIVERS\StarPortLite.sys --> c:\windows\system32\DRIVERS\StarPortLite.sys [?]
S2 AntiVirMailService;Avira AntiVir MailGuard;c:\programmi\Avira\AntiVir Desktop\avmailc.exe [27/02/2010 20.39.41 194817]
S2 gupdate1c98a061b8f7796;Google Update Service (gupdate1c98a061b8f7796);c:\programmi\Google\Update\GoogleUpdate.exe [08/02/2009 17.58.37 133104]
S2 Network WanMiniport First Position;Network WanMiniport First Position;c:\programmi\Telecom Italia\WanMiniport1st\srvany.exe [13/07/2008 11.51.57 8192]
S3 MA8630C;MA8630C;c:\windows\system32\drivers\MA8630C.sys [07/10/2008 22.38.45 23248]
S3 MA8630M;MA8630M;c:\windows\system32\drivers\MA8630M.sys [07/10/2008 22.38.46 25428]
S3 MA8630U;MA8630U;c:\windows\system32\drivers\MA8630U.sys [07/10/2008 22.38.47 51154]
S3 WDC_SAM;WD SCSI Pass Thru driver;c:\windows\system32\drivers\wdcsam.sys [11/05/2010 14.17.20 11520]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [19/08/2004 15.39.46 14336]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [25/03/2008 11.11.27 717296]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
getPlusHelper REG_MULTI_SZ getPlusHelper
WINRM REG_MULTI_SZ WINRM
.
Contenuto della cartella 'Scheduled Tasks'

2010-08-18 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\programmi\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-02-04 20:59]

2010-08-16 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]

2010-06-23 c:\windows\Tasks\CanoScan Toolbox 5.job
- c:\progra~1\Canon\CANOSC~1.0\CSTBox.exe [2009-10-16 16:54]

2010-08-18 c:\windows\Tasks\GlaryInitialize.job
- c:\programmi\Glary Utilities\initialize.exe [2010-02-07 08:01]

2010-08-18 c:\windows\Tasks\Google Software Updater.job
- c:\programmi\Google\Common\Google Updater\GoogleUpdaterService.exe [2007-05-20 19:13]

2010-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2009-02-08 15:58]

2010-08-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2009-02-08 15:58]

2010-08-17 c:\windows\Tasks\HP Usg Daily.job
- c:\programmi\Hewlett-Packard\{5372B9A6-6E51-4f90-9B40-E0A3B8475C4E}\pexpress\hphped05.exe [2004-04-01 10:33]

2010-08-18 c:\windows\Tasks\MP Scheduled Scan.job
- c:\programmi\Windows Defender\MpCmdRun.exe [2006-11-03 16:20]

2010-08-16 c:\windows\Tasks\Pulitura disco.job
- c:\windows\system32\cleanmgr.exe [2004-08-19 02:14]

2010-08-16 c:\windows\Tasks\WebReg 20091021182202.job
- c:\programmi\Hewlett-Packard\Digital Imaging\bin\hpqwrg.exe [2002-10-16 13:39]

2010-08-12 c:\windows\Tasks\Windows Update.job
- c:\windows\system32\wupdmgr.exe [2001-08-31 12:00]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.com/ig?hl=it
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mSearch Bar = hxxp://www.mirarsearch.com/?useie5=1&q=
IE: &ieSpell Options - c:\programmi\ieSpell\iespell.dll/SPELLOPTION.HTM
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Check &Spelling - c:\programmi\ieSpell\iespell.dll/SPELLCHECK.HTM
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Lookup on Merriam Webster - file://c:\programmi\ieSpell\Merriam Webster.HTM
IE: Lookup on Wikipedia - file://c:\programmi\ieSpell\wikipedia.HTM
LSP: c:\programmi\Avira\AntiVir Desktop\avsda.dll
TCP: {154CF1E7-118E-4EE7-BFF7-6DC81998C56B} = 85.37.17.8 85.38.28.73
DPF: CabBuilder - hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/2.9.2.0/GarminAxControl.CAB
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
DPF: {4EC99A0B-E57C-4FBE-B9C4-8428424FBF88} - hxxp://aiuto.alice.it/ata/static/installers/McciControlInstaller_6.6.cab
DPF: {528BF874-2681-4CE3-8C62-AA0D3BC0A719} - hxxp://aiuto.alice.it/ata/static/installers/McciControlInstaller_6.6.cab
DPF: {5AF01DCD-8539-4814-9693-ADF47058F075} - hxxp://aiuto.alice.it/ata/static/installers/WebflowActiveXInstaller_4-1-5.cab
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-08-18 12:11
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (LocalSystem)
"659BD8E725A05FDCC64118EA787EAA2B534A94FABE"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,8b,4e,a9,aa,a0,bb,b4,43,bb,86,30,\
"3A77B377802A4B6183DDE08FDE4AD9AF647A702826"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,8b,4e,a9,aa,a0,bb,b4,43,bb,86,30,\

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil10i_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'lsass.exe'(768)
c:\programmi\Avira\AntiVir Desktop\avsda.dll
.
Ora fine scansione: 2010-08-18 12:15:28
ComboFix-quarantined-files.txt 2010-08-18 10:15
ComboFix2.txt 2010-06-24 22:29
ComboFix3.txt 2010-06-23 15:03
ComboFix4.txt 2010-06-22 16:17
ComboFix5.txt 2010-08-18 10:02

Pre-Run: 15.847.161.856 byte disponibili
Post-Run: 15.876.079.616 byte disponibili

Current=1 Default=1 Failed=0 LastKnownGood=4 Sets=1,2,3,4
- - End Of File - - B52AB08759FE307113A76D02D4DACD0E