Prova a fare la scansione con HJT in Modalità provvisoria, visto che quella funziona.
Non è il massimo, ma provare non costa niente.

Allora: sfc /scannow ok nemmeno parte, parte invece sfc /scannow, ma quando deve terminare la scansione il sistema entra ncora nella fase "non risponde".

Son riuscito ad usare HJT in provvisoria, ed ecco il risultato:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18.03.29, on 19/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.settorezero.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.it
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.it
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazzetta.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Programmi\BitComet\tools\BitCometBHO_1.1.7.4.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Coolstreaming Tool-Bar v1.0 Toolbar - {bd0e4d83-654e-4213-965b-fcbe887061f4} - C:\Programmi\Coolstreaming_Tool-Bar_v1.0\tbCool.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Coolstreaming Tool-Bar v1.0 Toolbar - {bd0e4d83-654e-4213-965b-fcbe887061f4} - C:\Programmi\Coolstreaming_Tool-Bar_v1.0\tbCool.dll
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Programmi\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Programmi\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVP] "C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [E06IXLRD_387812] "C:\Programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" -m
O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [E06IXLRD_2389078] "C:\Programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" -m
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Programmi\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Programmi\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Programmi\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Programmi\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Aggiungi ad Anti-Banner - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Scarica con FlashGet - C:\Programmi\FlashGet\jc_link.htm
O8 - Extra context menu item: Scarica tutto con FlashGet - C:\Programmi\FlashGet\jc_all.htm
O9 - Extra button: &Tastiera Virtuale - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Programmi\BitComet\tools\BitCometBHO_1.1.7.4.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: C&ontrollo URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programmi\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8301F862-D849-47DE-9DE7-2919CFF6CB4F}: NameServer = 193.70.152.15
O17 - HKLM\System\CCS\Services\Tcpip\..\{9FF528EA-8DDB-4AFA-93A1-87A10C36BDFB}: NameServer = 193.70.192.15,193.70.152.25
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security (avp) - Kaspersky Lab - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 8855 bytes

Presumo che l'eseguibile non gli piacerà e andra in blocco: lo faccio in provvisoria?
E inoltre posso scaricare Combfix da un altro pc? perchè ricordo che la connessione non funziona.....

E' chiedere troppo se mi indichi passo passo come fare (scarica da qui, salva l'eseguibile, copialo, etc. etc) tenendo conto delle mi due problematiche, e cioè che posso lavorare sul pc da controllare solo in provvisoria e che quindi Combofix lo posso solo scaricare con altro pc...

Grazie, ma non vorrei sbagliare....

Ecco il log di Combofix:

ComboFix 09-07-22.01 - Mario 22/07/2009 23.57.55.1.2 - NTFSx86 MINIMAL
Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.447.248 [GMT 2:00]
Eseguito da: c:\documents and settings\Mario\Desktop\Tombo-Fix.exe
AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Installer\8ab2d.msi
c:\windows\Installer\8ab33.msi

.
((((((((((((((((((((((((( Files Creati Da 2009-06-22 al 2009-07-22 )))))))))))))))))))))))))))))))))))
.

2009-07-19 15:56 . 2008-04-14 02:13 116224 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2009-07-19 15:55 . 2001-08-30 21:08 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2009-07-19 15:55 . 2008-04-14 02:13 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2009-07-19 15:55 . 2001-08-30 21:08 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2009-07-19 15:55 . 2001-08-30 21:08 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2009-07-19 15:55 . 2001-08-30 21:08 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2009-07-19 15:55 . 2001-08-17 18:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2009-07-19 15:55 . 2004-08-03 20:29 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2009-07-19 15:55 . 2004-08-03 20:29 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2009-07-19 15:55 . 2008-04-14 02:13 8192 -c--a-w- c:\windows\system32\dllcache\wshirda.dll
2009-07-19 15:55 . 2008-04-13 18:36 8832 -c--a-w- c:\windows\system32\dllcache\wmiacpi.sys
2009-07-19 15:55 . 2004-08-03 20:31 154624 -c--a-w- c:\windows\system32\dllcache\wlluc48.sys
2009-07-19 15:55 . 2001-08-30 18:46 35402 -c--a-w- c:\windows\system32\dllcache\wlandrv2.sys
2009-07-19 15:53 . 2001-08-17 18:14 249402 -c--a-w- c:\windows\system32\dllcache\vinwm.sys
2009-07-19 15:52 . 2001-08-30 21:08 27136 -c--a-w- c:\windows\system32\dllcache\umaxu22.dll
2009-07-19 15:51 . 2001-08-30 21:07 43008 -c--a-w- c:\windows\system32\dllcache\tp4res.dll
2009-07-19 15:50 . 2001-08-17 20:07 32640 -c--a-w- c:\windows\system32\dllcache\symc8xx.sys
2009-07-19 15:49 . 2001-08-30 21:08 99328 -c--a-w- c:\windows\system32\dllcache\srusd.dll
2009-07-19 15:48 . 2001-08-17 19:57 6784 -c--a-w- c:\windows\system32\dllcache\smbhc.sys
2009-07-19 15:47 . 2001-08-30 20:30 161792 -c--a-w- c:\windows\system32\dllcache\sgsmusb.sys
2009-07-19 15:46 . 2001-08-17 18:50 75392 -c--a-w- c:\windows\system32\dllcache\s3savmxm.sys
2009-07-19 15:45 . 2001-08-17 18:19 3840 -c--a-w- c:\windows\system32\dllcache\rpfun.sys
2009-07-19 15:44 . 2001-08-17 19:28 112574 -c--a-w- c:\windows\system32\dllcache\ptserlp.sys
2009-07-19 15:43 . 2001-08-17 20:07 27296 -c--a-w- c:\windows\system32\dllcache\perc2.sys
2009-07-19 15:42 . 2001-08-30 19:50 54826 -c--a-w- c:\windows\system32\dllcache\otcsercb.sys
2009-07-19 15:41 . 2001-08-17 18:50 39264 -c--a-w- c:\windows\system32\dllcache\neo20xx.sys
2009-07-19 15:40 . 2001-08-17 19:48 12416 -c--a-w- c:\windows\system32\dllcache\msriffwv.sys
2009-07-19 15:40 . 2001-08-17 20:00 2944 -c--a-w- c:\windows\system32\dllcache\msmpu401.sys
2009-07-19 15:40 . 2008-04-13 18:54 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2009-07-19 15:40 . 2001-08-17 20:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2009-07-19 15:40 . 2001-08-17 19:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2009-07-19 15:40 . 2008-04-13 18:46 51200 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2009-07-19 15:40 . 2001-08-17 19:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2009-07-19 15:40 . 2008-04-13 18:46 15232 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2009-07-19 15:40 . 2001-08-17 19:57 16128 -c--a-w- c:\windows\system32\dllcache\modemcsa.sys
2009-07-19 15:40 . 2001-08-17 19:52 6528 -c--a-w- c:\windows\system32\dllcache\miniqic.sys
2009-07-19 15:40 . 2001-08-30 18:34 320384 -c--a-w- c:\windows\system32\dllcache\mgaum.sys
2009-07-19 15:38 . 2001-08-30 18:03 26986 -c--a-w- c:\windows\system32\dllcache\lanepic5.sys
2009-07-19 15:37 . 2001-08-17 19:50 38784 -c--a-w- c:\windows\system32\dllcache\io8.sys
2009-07-19 15:36 . 2001-08-17 18:49 58592 -c--a-w- c:\windows\system32\dllcache\i740nt5.sys
2009-07-19 15:35 . 2001-08-17 19:52 5760 -c--a-w- c:\windows\system32\dllcache\hpt4qic.sys
2009-07-19 15:34 . 2001-08-30 21:07 1733120 -c--a-w- c:\windows\system32\dllcache\g400d.dll
2009-07-19 15:33 . 2004-08-03 20:32 137088 -c--a-w- c:\windows\system32\dllcache\essm2e.sys
2009-07-19 15:32 . 2001-08-17 18:20 334208 -c--a-w- c:\windows\system32\dllcache\ds1wdm.sys
2009-07-19 15:31 . 2001-08-17 18:11 20928 -c--a-w- c:\windows\system32\dllcache\defpa.sys
2009-07-19 15:30 . 2001-08-30 21:07 111232 -c--a-w- c:\windows\system32\dllcache\cl5465.dll
2009-07-19 15:29 . 2001-08-30 21:07 9728 -c--a-w- c:\windows\system32\dllcache\brcoinst.dll
2009-07-19 15:28 . 2001-08-30 21:07 61952 -c--a-w- c:\windows\system32\dllcache\acerscad.dll
2009-07-09 21:43 . 2009-07-09 21:43 296976 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.459\sys\i386\5.1\klif.sys
2009-07-09 21:43 . 2009-07-09 21:43 128016 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kav9exec\9.0.0.459\sys\i386\kl1.sys
2009-07-09 21:42 . 2009-07-09 21:42 128016 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\sys\i386\kl1.sys
2009-07-09 21:42 . 2009-07-09 21:42 296976 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\sys\i386\5.1\klif.sys
2009-07-09 21:40 . 2009-07-09 21:40 -------- d-sh--w- c:\documents and settings\Mario\IECompatCache
2009-07-08 00:00 . 2009-07-08 00:00 -------- d-sh--w- c:\documents and settings\Mario\PrivacIE
2009-07-07 23:53 . 2009-07-07 23:53 -------- d-sh--w- c:\documents and settings\Mario\IETldCache
2009-07-07 22:34 . 2009-07-07 22:35 -------- d-----w- c:\windows\ie8updates
2009-07-07 22:30 . 2009-07-07 22:32 -------- dc-h--w- c:\windows\ie8
2009-07-07 22:24 . 2009-06-02 10:12 102912 -c----w- c:\windows\system32\dllcache\iecompat.dll
2009-07-07 22:24 . 2009-04-30 21:13 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2009-07-07 22:24 . 2009-04-30 21:13 246272 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2009-07-07 22:07 . 2009-07-07 22:07 932368 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
2009-07-07 22:07 . 2009-07-07 22:07 678416 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
2009-07-07 22:07 . 2009-07-07 22:07 604688 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
2009-07-07 22:06 . 2009-07-07 22:06 1096208 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
2009-07-07 22:06 . 2009-07-07 22:06 522768 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
2009-07-07 21:55 . 2009-07-07 21:55 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-07-07 21:37 . 2009-07-07 21:37 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files
2009-07-06 12:29 . 2008-04-14 01:53 14720 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2009-07-06 12:29 . 2008-04-14 01:53 14720 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2009-07-06 10:34 . 1998-11-13 02:25 119056 ----a-w- c:\windows\system32\sqlstr.dll
2009-07-06 10:33 . 1998-11-13 02:25 33040 ----a-w- c:\windows\system32\dbmsspxn.dll
2009-07-06 10:33 . 1998-11-13 02:25 33040 ----a-w- c:\windows\system32\dbmsadsn.dll
2009-07-06 10:33 . 1998-11-13 02:25 28944 ----a-w- c:\windows\system32\dbmsvinn.dll
2009-07-06 10:33 . 1998-11-13 02:25 28944 ----a-w- c:\windows\system32\dbmssocn.dll
2009-07-06 10:33 . 1998-11-11 19:51 98576 ----a-w- c:\windows\system32\msrpjt40.dll
2009-07-06 10:33 . 2009-07-14 21:49 -------- d-----w- C:\MSSQL7
2009-07-06 10:17 . 2009-07-14 21:49 -------- d-----w- c:\programmi\ZENITH
2009-06-29 22:56 . 2009-06-29 22:56 -------- d-----w- c:\programmi\File comuni\Windows Live

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-07-22 22:06 . 2004-08-19 12:00 85132 ----a-w- c:\windows\system32\perfc010.dat
2009-07-22 22:06 . 2004-08-19 12:00 492266 ----a-w- c:\windows\system32\perfh010.dat
2009-07-22 21:53 . 2006-12-11 22:36 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab
2009-07-13 21:51 . 2007-03-19 22:35 -------- d-----w- c:\programmi\mIRC
2009-07-11 23:36 . 2009-01-04 21:36 -------- d-----w- c:\documents and settings\Mario\Dati applicazioni\uTorrent
2009-07-09 21:43 . 2009-05-24 13:30 128016 ----a-w- c:\windows\system32\drivers\kl1.sys
2009-07-07 21:51 . 2007-11-28 22:39 856096 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-07-07 21:51 . 2007-11-28 22:39 82352 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-07-07 21:51 . 2007-11-28 22:39 509420 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-07-07 21:51 . 2007-11-28 22:39 37956384 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-07-07 21:47 . 2006-12-11 22:36 -------- d-----w- c:\programmi\Kaspersky Lab
2009-07-07 13:15 . 2009-07-07 13:15 0 ----a-w- C:\31.tmp
2009-07-07 12:28 . 2009-07-07 12:28 0 ----a-w- C:\2E.tmp
2009-07-07 10:18 . 2009-07-07 10:18 0 ----a-w- C:\2A.tmp
2009-07-07 09:37 . 2009-07-07 09:37 0 ----a-w- C:\27.tmp
2009-07-07 09:15 . 2009-07-07 09:15 0 ----a-w- C:\24.tmp
2009-07-07 08:55 . 2009-07-07 08:55 0 ----a-w- C:\21.tmp
2009-07-07 08:24 . 2009-07-07 08:24 0 ----a-w- C:\1E.tmp
2009-07-07 08:06 . 2009-07-07 08:06 0 ----a-w- C:\1B.tmp
2009-07-07 07:59 . 2009-07-07 07:59 0 ----a-w- C:\18.tmp
2009-07-07 07:47 . 2009-07-07 07:47 0 ----a-w- C:\15.tmp
2009-07-07 07:46 . 2009-07-07 07:46 0 ----a-w- C:\12.tmp
2009-07-07 07:41 . 2009-07-07 07:41 0 ----a-w- C:\E.tmp
2009-07-07 07:03 . 2009-07-07 07:03 0 ----a-w- C:\B.tmp
2009-07-07 06:52 . 2009-07-07 06:52 0 ----a-w- C:\7.tmp
2009-07-06 12:26 . 2009-07-06 12:26 0 ----a-w- c:\windows\system32\drivers\SET4.tmp
2009-07-06 10:47 . 2006-09-03 22:13 -------- d-----w- c:\programmi\FlashGet
2009-07-06 10:33 . 2008-02-27 22:24 -------- d-----w- c:\programmi\eMule
2009-07-06 10:17 . 2007-05-08 21:18 253952 ------w- c:\windows\Setup1.exe
2009-07-06 10:17 . 2007-05-08 21:18 74752 ----a-w- c:\windows\ST6UNST.EXE
2009-07-05 19:30 . 2006-04-26 22:58 -------- d-----w- c:\programmi\Yahoo!
2009-07-05 12:51 . 2009-01-04 21:36 -------- d-----w- c:\programmi\uTorrent
2009-06-24 20:45 . 2007-04-12 21:08 -------- d---a-w- c:\documents and settings\All Users\Dati applicazioni\TEMP
2009-06-22 10:52 . 2009-06-22 10:50 -------- d-----w- c:\programmi\Gargaroz
2009-06-18 21:38 . 2009-05-25 09:15 152576 ----a-w- c:\documents and settings\Mario\Dati applicazioni\Sun\Java\jre1.6.0_13\lzma.dll
2009-06-15 13:24 . 2009-06-15 13:24 64088 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files\Kaspersky Internet Security 2010 9.0.0.459\Italian\setup.exe
2009-06-14 22:25 . 2009-06-14 22:25 1915520 ----a-w- c:\documents and settings\Mario\Dati applicazioni\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2009-05-25 03:21 . 2009-05-25 03:21 219664 ----a-w- c:\windows\system32\klogon.dll
2009-05-25 03:18 . 2009-05-25 03:18 27507 ----a-w- c:\windows\system32\drivers\klopp.dat
2009-05-20 20:44 . 2007-11-28 22:36 105395 ----a-w- c:\windows\system32\drivers\klin.dat
2009-05-20 20:44 . 2007-11-28 22:36 94643 ----a-w- c:\windows\system32\drivers\klick.dat
2009-05-16 18:59 . 2009-05-16 18:59 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2009-05-13 15:46 . 2007-04-04 13:58 31760 ----a-w- c:\windows\system32\drivers\klim5.sys
2009-05-13 05:02 . 2004-08-19 12:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-10 14:16 . 2005-12-15 18:47 80280 -c--a-w- c:\documents and settings\Mario\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-05-07 15:32 . 2004-08-19 12:00 347648 ----a-w- c:\windows\system32\localspl.dll
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"E06IXLRD_387812"="c:\programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" [2005-06-04 301776]
"OM_Monitor"="c:\programmi\OLYMPUS\OLYMPUS Master\Monitor.exe" [2006-05-16 57344]
"E06IXLRD_2389078"="c:\programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" [2005-06-04 301776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2006-02-23 77824]
"TomTomHOME.exe"="c:\programmi\TomTom HOME\TomTomHOME.exe" [2007-03-14 3770024]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"SoundMAXPnP"="c:\programmi\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"RemoteControl"="c:\programmi\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 32768]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"ATIPTA"="c:\programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-06-28 344064]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-03-17 148888]
"TkBellExe"="c:\programmi\File comuni\Real\Update_OB\realsched.exe" [2009-04-07 198160]
"GSICONEXE"="GSICON.EXE" - c:\windows\system32\gsicon.exe [2001-10-16 75776]
"DSLAGENTEXE"="dslagent.exe" - c:\windows\system32\dslagent.exe [2001-10-02 16384]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" - c:\windows\system32\HdAShCut.exe [2004-10-27 61952]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Sitecom Wireless Utility.lnk - c:\programmi\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE [2008-6-9 913408]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2007-05-25 13:22 63040 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\NetMeeting\\conf.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\\Programmi\\Windows Media Player\\wmplayer.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Programmi\\mIRC\\mirc.exe"=
"c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\BitComet\\BitComet.exe"=
"c:\\Programmi\\SpeedBit Video Accelerator\\VideoAcceleratorEngine.exe"=
"c:\\Programmi\\Mediacenter 1.0a\\Mediacenter.exe"=
"c:\\Programmi\\eMule\\eMule.exe"=
"c:\\Programmi\\AvaTrader\\fx_loader.exe"=
"c:\\Programmi\\SopCast\\adv\\SopAdver.exe"=
"c:\\Programmi\\SopCast\\SopCast.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\Mario\\Desktop\\utorrent.exe"=
"c:\\Programmi\\P2Pcontrol\\p2control.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12931:TCP"= 12931:TCP:BitComet 12931 TCP
"12931:UDP"= 12931:UDP:BitComet 12931 UDP
"453:TCP"= 453:TCP:eMule_TCP
"53008:TCP"= 53008:TCP:Utorrent
"463:UDP"= 463:UDP:eMule_UDP
"10111:TCP"= 10111:TCP:Utorrent
"10111:UDP"= 10111:UDP:10111

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [15/12/2008 20.41.32 33808]
R0 m5287;m5287;c:\windows\system32\drivers\m5287.sys [29/08/2005 12.41.07 101120]
R2 LMIRfsDriver;LogMeIn Remote File System Driver;c:\windows\system32\drivers\LMIRfsDriver.sys [14/08/2007 23.52.35 46112]
R2 P1080_CT_CDI;Creative PD1080 HAL Service;c:\windows\system32\drivers\P1080cdi.sys [26/12/2005 0.24.28 3424]
R3 AtmElan;LAN ATM emulata;c:\windows\system32\drivers\atmlane.sys [19/08/2004 14.00.00 55808]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [04/04/2007 15.58.26 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 20.59.44 19472]
R3 ULI5261XP;ULi M526X Ethernet NT Driver;c:\windows\system32\drivers\ULILAN51.SYS [15/12/2005 15.49.34 28672]
S2 gafwload;D-Link DSL-200 USB ADSL Loader;c:\windows\system32\drivers\gafwload.sys [10/04/2007 14.21.00 26987]
S2 LMIInfo;LogMeIn Kernel Information Provider;\??\c:\programmi\LogMeIn\x86\RaInfo.sys --> c:\programmi\LogMeIn\x86\RaInfo.sys [?]
S3 AtmLane;Emulazione LAN ATM;c:\windows\system32\drivers\atmlane.sys [19/08/2004 14.00.00 55808]
S3 gaausb;D-Link DSL-200 USB ADSL Modem(ATM);c:\windows\system32\drivers\gaausb.sys [10/04/2007 14.21.00 231682]
S3 P1080BLK;Creative CardCam Value (Still Image);c:\windows\system32\drivers\p1080stl.sys [26/12/2005 0.24.04 72728]
S3 P1080VID;Creative CardCam Value (Video);c:\windows\system32\drivers\P1080vid.sys [26/12/2005 0.24.28 374944]
S4 LMIRfsClientNP;LMIRfsClientNP; [x]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenuto della cartella 'Scheduled Tasks'

2009-07-22 c:\windows\Tasks\RegCure Program Check.job
- c:\programmi\RegCure\RegCure.exe [2007-08-02 16:20]

2009-04-09 c:\windows\Tasks\RegCure.job
- c:\programmi\RegCure\RegCure.exe [2007-08-02 16:20]

2009-07-22 c:\windows\Tasks\User_Feed_Synchronization-{C9BF0748-0B48-4C2B-B8A7-4043570F50BE}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 02:31]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.gazzetta.it/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE: &D&ownload &with BitComet - c:\programmi\BitComet\BitComet.exe/AddLink.htm
IE: &D&ownload all video with BitComet - c:\programmi\BitComet\BitComet.exe/AddVideo.htm
IE: &D&ownload all with BitComet - c:\programmi\BitComet\BitComet.exe/AddAllLink.htm
IE: Aggiungi ad Anti-Banner - c:\programmi\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Scarica con FlashGet - c:\programmi\FlashGet\jc_link.htm
IE: Scarica tutto con FlashGet - c:\programmi\FlashGet\jc_all.htm
TCP: {8301F862-D849-47DE-9DE7-2919CFF6CB4F} = 193.70.152.15
TCP: {9FF528EA-8DDB-4AFA-93A1-87A10C36BDFB} = 193.70.192.15,193.70.152.25
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-07-23 00:05
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(1400)
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\LMIinit.dll

- - - - - - - > 'explorer.exe'(3732)
c:\windows\system32\WININET.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\LMIRfsClientNP.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\windows\system32\ati2evxx.exe
c:\programmi\Java\jre6\bin\jqs.exe
c:\programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\HPZipm12.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Ora fine scansione: 2009-07-22 0.10.38 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2009-07-22 22:09

Pre-Run: 139.159.785.472 byte disponibili
Post-Run: 139.043.856.384 byte disponibili

296 --- E O F --- 2009-06-14 23:42

Innanzitutto scrivo dal pc incriminato e questo significa che tutto è tornato a funzionare.
Il link richiesto: Norman2.log

Poi: alla prima scansione Norman ha trovato 6 infezioni, e perchè questo possa servire a altri posto diseguito il log del file Norman1:
Norman Malware Cleaner
Copyright © 1990 - 2009, Norman ASA. Built 2009/07/22 15:48:46

Norman Scanner Engine Version: 6.01.09
Nvcbin.def Version: 6.01.00, Date: 2009/07/22 15:48:46, Variants: 3578120

Scan started: 23/07/2009 23:19:48

Running pre-scan cleanup routine:
Operating System: Microsoft Windows XP Home 5.1.2600(Safe mode) Service Pack 3
Logged on user: P4630\Mario

Set registry value: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLS = "C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll" -> ""
Removed registry value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -> DisableRegistryTools = 0x00000000
Removed registry value: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer -> NoDrives = 0x00000000
Removed registry value: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer -> NoDrives = 0x00000000


Scanning running processes and process memory...

Number of processes/threads found: 516
Number of processes/threads scanned: 516
Number of processes/threads not scanned: 0
Number of infected processes/threads terminated: 0
Total scanning time: 16s


Scanning file system...

Scanning: C:\*.*

C:\Documents and Settings\Mario\ynqxaoof.exe (Infected with Dialer.HN)
Deleted file

C:\Documents and Settings\Mario\Dati applicazioni\Convivea\Bit_Che\scripts\special.exe (Infected with W32/Packed_FSG.D)
Deleted file

C:\System Volume Information\_restore{5989C6DC-D094-4FED-AD33-2903A11B8DE5}\RP1\A0012150.exe (Infected with Dialer.HN)
Deleted file

C:\System Volume Information\_restore{5989C6DC-D094-4FED-AD33-2903A11B8DE5}\RP1\A0012151.exe (Infected with W32/Packed_FSG.D)
Deleted file

C:\WINDOWS\system32\cont_offersfortoday-remove.exe (Infected with Smalltroj.HYNQ)
Deleted file

Scanning: c:\System Volume Information\*.*

c:\System Volume Information\_restore{5989C6DC-D094-4FED-AD33-2903A11B8DE5}\RP1\A0012154.exe (Infected with Smalltroj.HYNQ)
Deleted file


Running post-scan cleanup routine:

Number of files found: 177305
Number of archives unpacked: 455
Number of files scanned: 177294
Number of files not scanned: 11
Number of files skipped due to exclude list: 0
Number of infected files found: 6
Number of infected files repaired/deleted: 6
Number of infections removed: 6
Total scanning time: 45m 55s


Se poi mi spiegate cos'era, meglio ancora....

Parlato troppo presto.
Al riavvio (la sera prima, dopo che Norman aveva lavorato, sembrava anzi era tutto a posto) si ripresentano ancora problemi: gli eseguibili pare funzionino (anche HJT funziona fino alla creazione del log), ma la connessione torna a non funzionare (tra l'altro adesso nemmeno il portatile riesce più a trovare l'aggancio al router: praticamente mi da come connesso ma internet non apre alcuna pagina) e quindi niente internet.

Ho provato a usare nuovamente Norman inprovvisoria, ma non rileva nulla. E chiaramente non ho potuto seguire la procedura che mi hai consigliato.

Sto impazzendo....

Fatto tutto ma senza risultati.
Anche se devo dire che, per le condizioini in cui sono Malwarebytes è stato utilizzato in provvisoria e senzxa poterlo aggiornare, lo stesso HJT sempre in provvisioria. Fatta anche la riparazione della connessione come suggerito.

Di seguito log di Malwarebytes:

Malwarebytes' Anti-Malware 1.39
Versione del database: 2421
Windows 5.1.2600 Service Pack 3

28/07/2009 0.43.07
mbam-log-2009-07-28 (00-43-07).txt

Tipo di scansione: Scansione completa (C:\|)
Elementi scansionati: 159165
Tempo trascorso: 23 minute(s), 27 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 0
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 0

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
(Nessun elemento malevolo rilevato)

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
(Nessun elemento malevolo rilevato)


e di HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 0.48.14, on 28/07/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Safe mode

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gazzetta.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch5 Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\PROGRA~1\FlashGet\jccatch.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Coolstreaming Tool-Bar v1.0 Toolbar - {bd0e4d83-654e-4213-965b-fcbe887061f4} - C:\Programmi\Coolstreaming_Tool-Bar_v1.0\tbCool.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: Coolstreaming Tool-Bar v1.0 Toolbar - {bd0e4d83-654e-4213-965b-fcbe887061f4} - C:\Programmi\Coolstreaming_Tool-Bar_v1.0\tbCool.dll
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TomTomHOME.exe] "C:\Programmi\TomTom HOME\TomTomHOME.exe" -s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [ATIPTA] "C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avp] "C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [E06IXLRD_387812] "C:\Programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" -m
O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [E06IXLRD_2389078] "C:\Programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" -m
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Sitecom Wireless Utility.lnk = C:\Programmi\Sitecom\Sitecom Wireless Network USB Adapter Turbo G WL-172\Installer\WLANUTL.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Scarica con FlashGet - C:\Programmi\FlashGet\jc_link.htm
O8 - Extra context menu item: Scarica tutto con FlashGet - C:\Programmi\FlashGet\jc_all.htm
O9 - Extra button: &Tastiera Virtuale - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: C&ontrollo URL - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programmi\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - https://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Kaspersky Internet Security (avp) - Kaspersky Lab - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: HP Port Resolver - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBPRO.EXE
O23 - Service: HP Status Server - Hewlett-Packard Company - C:\WINDOWS\system32\spool\drivers\w32x86\3\HPBOID.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

--
End of file - 7303 bytes

Eccolo, grazie (naturalmente ho lavorato in provvisoria):


Find AWF report by noahdfear ©2006
Version 1.40



bak folders found
~~~~~~~~~~~



Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~



end of report

Stasera ci provo, anche se comunque restano tutti i problemi con gli eseguibili....

Intanto grazie per l'assistenza...ti faccio sapere