Salve a tutti, ho bisogno di aiuto.Da qualche giorno mi succede una cosa strana,premetto che il mio sistema operativo è windows 7 e l'antivirus installato è avira.Ultimamente spybot,durante una scansione, mi ha rilevato delle minacce che ho fatto ripulire.Da allora in poi avira mi ha rilevato un malwere spostato come da configurazione in quarantena,ma ogni volta che rifaccio la scansione mi ritrova sempre lo stesso virus(il file contiene il codice sospetto GEN/PwdZIP- nome del file c:\programdata\spybot.....|sweetIM8.zip)provo ad eliminarlo dalla quarantena ma alla successiva scansione con avira mi ricompare.Ripeto la scansione con spybot e mi dice che non ci sono minacce.Faccio una scansione con malwerebyte's il report mi dice che non ci sono minacce.Allora cerco di scansionare il pc in modalità provvisoria,ma durante la scansione di avira il mio monitor diventa nero,quindi non riesco a portare a termine la scansione in modalità provvisoria in quanto non vedo cosa succede.Io non so più cosa fare,mi date una mano a risolvere questo probblema ,grazie.

Intanto lascia stare spybot, poi posta un log di Hijack This, lo trovi QUI che facciamo un controllo.

Scusa cbbusto, sono riuscito a scaricare hijack ho fatto una scansione e ti posto il log.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:15:22, on 30/11/2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [EPSON Stylus DX6000 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_FATIBIE.EXE /FU "C:\Windows\TEMP\E_SE6E4.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [Google Update] "C:\Users\ANTONIO\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O4 - Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - (no file)
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - (no file)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - (no file)
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - (no file)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6943 bytes

Tutto questo per me è Arabo,fortuna ad avere gli aiutamici.Grazie cbbusto

Grazie cbbusto,prima di eseguire superantispyware devo disinstallare spybot?

Salve cbbusto,ho fatto quello che dicevi,fixato con hijiack,pulito con ccleaner e scansionato con superantispyware.Questo è il log di superanntisyiware




SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/02/2011 at 07:22 PM

Application Version : 5.0.1136

Core Rules Database Version : 8004
Trace Rules Database Version: 5816

Scan type : Complete Scan
Total Scan Time : 00:32:25

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 556
Memory threats detected : 0
Registry items scanned : 69742
Registry threats detected : 0
File items scanned : 43072
File threats detected : 35

Adware.Tracking Cookie
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\M7QLJ2QP.txt [ Cookie:antonio@track.adform.net/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\5XTH5KJG.txt [ Cookie:antonio@imrworldwide.com/cgi-bin ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\XGZ3LD0H.txt [ Cookie:antonio@serving-sys.com/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\2H0B0DPN.txt [ Cookie:antonio@ad.yieldmanager.com/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\42WO236B.txt [ Cookie:antonio@weborama.fr/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\78YS3UNE.txt [ Cookie:antonio@adtech.de/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\FRG8SKWS.txt [ Cookie:antonio@swatch.solution.weborama.fr/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\4OY7KKYL.txt [ Cookie:antonio@revsci.net/ ]
C:\USERS\ANTONIO\AppData\Roaming\Microsoft\Windows\Cookies\Low\KO60CZLM.txt [ Cookie:antonio@weboramaitdata.solution.weborama.fr/ ]
eas.apm.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.adtech.de [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.imrworldwide.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
compraonline.mediaworld.it [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
rts.pgmediaserve.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.f.megaclick.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.f.megaclick.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.f.megaclick.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.megaclick.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.serving-sys.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.bs.serving-sys.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.histats.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
.revsci.net [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]

Trojan.Agent/Gen-SoftonicDownloader
C:\USERS\ANTONIO\DOWNLOADS\SOFTONICDOWNLOADER_PER_WINSCAN2PDF.EXE


come vedi tra tante porcherie c'è anche un trojan.Mi domando,come mai avira abbia permesso l'accesso a questo virus,identificandolo solo come file sospetto è ad ogni scansione mi compariva l'ho stesso probblema,senza eliminarlo completamente o comunque spostarlo in quarantena e farlo marcire li?
Perchè nemmeno spybot non è riuscito a riscontrare questo virus? Ma ancora di più malwarebytes che anche lui non mi ha rilevato niente.
Dopo questa scansione nè ho eseguite un'altre, sempre con superantispyware, che mi continua a rilevare cookies, perche? ti posto anche gli altri due log.


SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/02/2011 at 08:06 PM

Application Version : 5.0.1136

Core Rules Database Version : 8004
Trace Rules Database Version: 5816

Scan type : Complete Scan
Total Scan Time : 00:32:24

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Limited User

Memory items scanned : 558
Memory threats detected : 0
Registry items scanned : 69741
Registry threats detected : 0
File items scanned : 43231
File threats detected : 8

Adware.Tracking Cookie
eas8.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas8.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
ad1.emediate.dk [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
ad1.emediate.dk [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
ad1.emediate.dk [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas8.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas.apm.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]




SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/03/2011 at 09:53 AM

Application Version : 5.0.1136

Core Rules Database Version : 8004
Trace Rules Database Version: 5816

Scan type : Complete Scan
Total Scan Time : 00:32:22

Operating System Information
Windows 7 Ultimate 64-bit, Service Pack 1 (Build 6.01.7601)
UAC On - Administrator

Memory items scanned : 569
Memory threats detected : 0
Registry items scanned : 69836
Registry threats detected : 0
File items scanned : 43403
File threats detected : 5

Adware.Tracking Cookie
.shinystat.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
ad.zanox.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
wstat.wibiya.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
eas8.emediate.eu [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]
www.googleadservices.com [ C:\USERS\ANTONIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5DD97JT2.DEFAULT\COOKIES.SQLITE ]

Dopo queste scansioni, ho fatto lavorare avira, questa volta non ha rilevato niente, nemmeno file sospetti. Tutto normale.
Ti ringrazio per avermi aiutato a risolvere questo probblema,ti sarei grato se ancora una volta mi rispondessi a tutti quei dubbi descritti prima,giusto per cercare di capire un tantino in più, e comunque grazie ancora.

Grazie per le informazioni, come sempre sei molto disponibile,come dici te ,se a volte alcuni virus scappano al controllo vorra dire che ti "romperò" di frequente,scherzo naturalmente.Ti posto ancora una volta il log di hijack.Dammi buone nuove.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:44:13, on 03/12/2011
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O4 - Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office12\EXCEL.EXE/3000
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 5656 bytes

Ciao miticoalex,non disturbi affatto.Fammi capire ,se superantispyware non lo considera nocivo, come dici te, perchè allora lo ha messo in quarantena segnandolo come trojan?

Riguardo a quel trojan o pseudo tale, mi sono scordato di parlarne nella risposta, mi dovevo assentare, ti ha già risposto l'amico mitico, comunque non è un pericolo ma io ne farei a meno, lo puoi eliminare, così come puoi definitivamente eliminare tutte quello che hai messo in quarantena.
Il log è pulito, tutto OK il pc dovrebbe funzionare bene.
Se il pc è a posto dovresti fare l'immagine del sistema così in caso di problemi ti fai il ripristino e in pochi minuti ritorna tutto perfettamente funzionante, leggi la guida di alfonso, QUI.
Un saluto.

Elevator attento....è cb-busto e non cb-buso. I busi sono altra cosa !!

Ai perfettamente ragione colpodifrusta ,non mi sono accorto dell'errore,chiedo scusa a cbbusto.