Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:04:16, on 02/09/2015
Platform: Unknown Windows (WinNT 6.03.1408)
MSIE: Internet Explorer v11.0 (11.00.9600.17126)
Boot mode: Safe mode

Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\program files (x86)\avira\antivir desktop\avcenter.exe
C:\program files (x86)\avira\antivir desktop\avscan.exe
C:\Users\licia\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1435566624&from=mych123&uid=toshibaxmq01abd050_62q4f9bbsxx62q4f9bbs&z=e168aa5d3523ee3f8a4c066g0zec7wbwfq6qbqco1t
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=dspp&ts=1424975788&from=tugs&uid=TOSHIBAXMQ01ABD050_62Q4F9BBSXX62Q4F9BBS&q={searchTerms}
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1435566624&from=mych123&uid=toshibaxmq01abd050_62q4f9bbsxx62q4f9bbs&z=e168aa5d3523ee3f8a4c066g0zec7wbwfq6qbqco1t
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.v9.com?type=hp&ts=1435566624&from=mych123&uid=toshibaxmq01abd050_62q4f9bbsxx62q4f9bbs&z=e168aa5d3523ee3f8a4c066g0zec7wbwfq6qbqco1t
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type=dspp&ts=1425288952&from=sfpsnew5&uid=TOSHIBAXMQ01ABD050_62Q4F9BBSXX62Q4F9BBS&q={searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type=dspp&ts=1425288952&from=sfpsnew5&uid=TOSHIBAXMQ01ABD050_62Q4F9BBSXX62Q4F9BBS&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.v9.com?type=hp&ts=1435566624&from=mych123&uid=toshibaxmq01abd050_62q4f9bbsxx62q4f9bbs&z=e168aa5d3523ee3f8a4c066g0zec7wbwfq6qbqco1t
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [ToshibaDynamicIconUtility] "C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe"
O4 - HKLM\..\Run: [TPUReg] "C:\Program Files (x86)\TOSHIBA\Password Utility\TosPU.exe" /Retimes
O4 - HKLM\..\Run: [CommonToolkitTray] C:\Program Files (x86)\Fighters\Tray\FightersTray.exe
O4 - HKLM\..\Run: [OfferBoulevard] C:\Program Files (x86)\OfferBoulevard\OfferBoulevardW.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files (x86)\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\RunOnce: [Taplika] C:\WINDOWS\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\licia\AppData\Roaming\Taplika\UpdateProc\bkup.dat"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\RunOnce: [Taplika] C:\WINDOWS\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\licia\AppData\Roaming\Taplika\UpdateProc\bkup.dat"
O4 - HKUS\S-1-5-21-3253684712-1169726433-492310600-1001\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe (User '?')
O4 - HKUS\S-1-5-21-3253684712-1169726433-492310600-1001\..\RunOnce: [Taplika] C:\WINDOWS\SysWOW64\wscript.exe /E:vbscript /B "C:\Users\licia\AppData\Roaming\Taplika\UpdateProc\bkup.dat" (User '?')
O4 - S-1-5-21-3253684712-1169726433-492310600-1001 Startup: Download.lnk = C:\ProgramData\{62a42190-5ce9-4be3-62a4-421905ce8641}\Download.exe (User '?')
O4 - Startup: Download.lnk = C:\ProgramData\{62a42190-5ce9-4be3-62a4-421905ce8641}\Download.exe
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\oexufafono.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\oexufafono.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\oexufafono.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\oexufafono.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\oexufafono.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: c:\programdata\flashbeat\flashbeat32.dll
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Pianificatore (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - Unknown owner - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe (file missing)
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Suite Service - Unknown owner - C:\Program Files (x86)\Fighters\FighterSuiteService.exe (file missing)
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\WINDOWS\servicing\TrustedInstaller.exe (file missing)
O23 - Service: Update Air Globe - Unknown owner - C:\Program Files (x86)\Air Globe\updateAirGlobe.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)

--
End of file - 7192 bytes

ora funziona la connessione e mi rivela l'audio, però ho un problema che l'audio non si sente proprio ieri si sentiva e le pagine nel pc tipo documenti o pannello di controllo o cartelle non si aprono e sotto l'icona connessione se ci passo il mouse sopra esce scritto Non connesso. e se entro nel centro connessioni mi dice sconosciuto e accesso negato però io posso navigare tranquillamente. E il pc v
a abbastanza lento penso ci sia ancora qualche virus maligno
ho fatto la scansione con malwarebytes e questo è il risultato mamb.txt
MBRCheck_09.03.15_10.24.50.txt

scusami hai ragione ho postato in due forum perche avevo bisogno di una risposta veloce e vedendo che erano due forum grandiosi non sapevo dove postare cosi ho scelto entrambi. cmq se vuoi ti posto le cose che mi hai chiesto

ciao cbbusto

bentornato amico di tutti :O)



ps - scusa predator3010 per caso non hai lo stesso pc di edo333

---

quando avvio lo scan di adwcleane mi da quest'errore:
Autolt Error
Line 14774 (file C:\users\licia\downloads\adwcleaner-5-001-multi-win(1).exe')

Error variable must be type object

Ciao mao, un saluto anche a te.

Letto, ti ho risposto. Ciao