il mio problema è che durante le scansioni antivirus il pc si resetta da solo.il log di hijack è successivo a quello di combofix.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20.47.16, on 17/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\VM_STI.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Programmi\Macrium\Reflect\ReflectService.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Programmi\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Programmi\AVG\AVG8\avgtray.exe
C:\Programmi\COMODO\COMODO Internet Security\cfp.exe
C:\Programmi\Mozilla Firefox\firefox.exe
G:\PortableApps\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/ig?hl=it
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [BigDogPath] C:\WINDOWS\VM_STI.EXE Philips SPC315NC Webcam
O4 - HKLM\..\Run: [nwiz] C:\Programmi\NVIDIA Corporation\nView\nwiz.exe /install
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Programmi\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TrayMin315.exe.lnk = ?
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Macrium Reflect Image Mounting Service (ReflectService) - Unknown owner - C:\Programmi\Macrium\Reflect\ReflectService.exe

--
End of file - 5490 bytes


ComboFix 09-09-16.05 - paolo 17/09/2009 20.37.15.2.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.1023.591 [GMT 2:00]
Eseguito da: c:\documents and settings\paolo\Documenti\Download\ComboFix.exe
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00000000-0000-0000-0000-000000000000}
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00000002-0002-0000-3C24-9E7C08000A00}
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: COMODO Firewall *enabled* {043803A3-4F86-4ef6-AFC5-F6E02A79969B}

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Downloaded Program Files\bdcore.dll
c:\windows\Downloaded Program Files\libfn.dll

.
((((((((((((((((((((((((( Files Creati Da 2009-08-17 al 2009-09-17 )))))))))))))))))))))))))))))))))))
.

2009-09-17 12:35 . 2009-09-17 15:13 11952 ----a-w- c:\windows\system32\avgrsstx.dll
2009-09-17 12:35 . 2009-09-17 15:13 108552 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2009-09-17 12:35 . 2009-09-17 15:13 335240 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2009-09-17 12:35 . 2009-09-17 15:13 27784 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2009-09-17 12:35 . 2009-09-17 12:44 -------- d-----w- c:\windows\system32\drivers\Avg
2009-09-17 12:34 . 2009-09-17 12:34 -------- d-----w- c:\programmi\AVG
2009-09-17 12:34 . 2009-09-17 12:34 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\avg8
2009-09-13 11:33 . 2009-09-13 11:34 -------- d-----w- c:\programmi\Windows Live Safety Center
2009-09-08 16:22 . 2009-09-08 16:22 -------- d-----w- c:\programmi\CPUID
2009-09-08 10:33 . 2009-09-17 18:37 -------- d-----w- c:\windows\system32\CatRoot2
2009-08-29 10:48 . 2009-08-29 10:48 -------- d-----w- c:\programmi\NVIDIA Corporation
2009-08-29 10:48 . 2009-08-29 10:48 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\NVIDIA Corporation
2009-08-29 10:38 . 2009-08-29 10:38 -------- d-----w- c:\documents and settings\paolo\SystemRequirementsLab
2009-08-29 09:13 . 2009-08-29 09:16 -------- d-----w- c:\programmi\PCPitstop
2009-08-29 09:13 . 2009-08-29 09:14 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\PCPitstop
2009-08-29 07:10 . 2009-08-29 07:10 -------- d-----w- c:\documents and settings\paolo\Impostazioni locali\Dati applicazioni\WMTools Downloaded Files
2009-08-28 06:40 . 2009-08-28 06:40 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\QuickScan
2009-08-27 09:02 . 2009-08-27 09:02 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\vlc
2009-08-25 10:43 . 2009-08-25 10:43 -------- d-----w- c:\programmi\HD Tune
2009-08-25 07:59 . 2009-08-28 08:15 -------- d-----w- c:\programmi\IObit
2009-08-25 07:59 . 2009-08-25 07:59 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\IObit
2009-08-25 07:07 . 2009-08-25 07:07 -------- d-----w- c:\programmi\File comuni\ArcSoft
2009-08-25 07:07 . 2004-12-07 08:11 258352 ----a-w- c:\windows\system32\unicows.dll
2009-08-25 07:07 . 1995-08-01 02:44 212480 ----a-w- c:\windows\PCDLIB32.DLL
2009-08-25 07:07 . 2009-08-25 07:07 -------- d-----w- c:\programmi\Philips
2009-08-25 07:07 . 2004-06-09 13:37 40960 ----a-w- c:\windows\VM_STI.EXE
2009-08-25 07:07 . 2002-08-22 14:34 147456 ----a-w- c:\windows\VMCap.exe
2009-08-25 07:07 . 2009-08-25 07:07 -------- d-----w- c:\windows\Options
2009-08-25 07:07 . 2005-02-26 14:25 91527 ----a-w- c:\windows\system32\drivers\usbVM31b.sys
2009-08-25 07:07 . 2004-04-26 13:48 53248 ----a-w- c:\windows\amcap.exe
2009-08-25 07:07 . 2003-05-15 15:17 61440 ----a-w- c:\windows\system32\VM31bSTI.dll
2009-08-25 06:14 . 2009-08-25 06:40 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Comodo
2009-08-25 06:14 . 2009-09-17 15:43 179792 ----a-w- c:\windows\system32\guard32.dll
2009-08-25 06:14 . 2009-09-17 15:43 87104 ----a-w- c:\windows\system32\drivers\inspect.sys
2009-08-25 06:14 . 2009-09-17 15:43 25160 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2009-08-25 06:14 . 2009-09-17 15:43 132296 ----a-w- c:\windows\system32\drivers\cmdguard.sys
2009-08-25 06:14 . 2009-08-25 06:14 -------- d-----w- c:\programmi\COMODO

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-17 08:51 . 2009-07-31 08:12 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2009-09-14 16:05 . 2009-07-31 14:59 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2009-09-13 10:16 . 2009-07-31 08:20 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\uTorrent
2009-09-10 12:54 . 2009-07-31 14:59 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 12:53 . 2009-07-31 14:59 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-09 19:23 . 2009-07-31 08:12 -------- d-----w- c:\programmi\Spybot - Search & Destroy
2009-08-29 10:38 . 2009-07-29 20:36 -------- d-----w- c:\programmi\SystemRequirementsLab
2009-08-25 07:19 . 2009-08-25 07:19 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\ArcSoft
2009-08-25 07:07 . 2009-07-29 20:15 -------- d--h--w- c:\programmi\InstallShield Installation Information
2009-08-25 06:56 . 2009-08-03 09:20 -------- d---a-w- c:\documents and settings\All Users\Dati applicazioni\TEMP
2009-08-17 01:03 . 2009-08-17 01:03 3674112 ----a-w- c:\windows\system32\nvwssr.dll
2009-08-17 01:02 . 2009-08-17 01:02 229376 ----a-w- c:\windows\system32\nvmccs.dll
2009-08-16 22:57 . 2009-08-16 22:57 2189856 ----a-w- c:\windows\system32\nvcuvid.dll
2009-08-16 22:57 . 2009-08-16 22:57 1706528 ----a-w- c:\windows\system32\nvcuvenc.dll
2009-08-16 22:57 . 2009-08-16 22:57 1597690 ----a-w- c:\windows\system32\nvdata.bin
2009-08-16 22:57 . 2009-07-29 23:11 485920 ----a-w- c:\windows\system32\nvudisp.exe
2009-08-16 22:57 . 2008-09-17 21:55 2002944 ----a-w- c:\windows\system32\nvcuda.dll
2009-08-16 22:57 . 2006-11-17 15:29 868352 ----a-w- c:\windows\system32\nvapi.dll
2009-08-16 22:57 . 2006-11-17 15:29 7729568 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2009-08-16 22:57 . 2006-11-17 15:29 5845760 ----a-w- c:\windows\system32\nv4_disp.dll
2009-08-16 22:57 . 2006-11-17 15:29 155648 ----a-w- c:\windows\system32\nvcodins.dll
2009-08-16 22:57 . 2006-11-17 15:29 155648 ----a-w- c:\windows\system32\nvcod.dll
2009-08-16 22:57 . 2006-11-17 15:29 10457088 ----a-w- c:\windows\system32\nvoglnt.dll
2009-08-11 10:35 . 2009-07-29 20:30 485920 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-08-10 07:04 . 2009-08-10 07:04 -------- d-----w- c:\programmi\Macrium
2009-08-09 18:17 . 2009-08-09 18:17 -------- d-----w- c:\programmi\EASEUS
2009-08-09 10:58 . 2009-08-09 10:58 -------- d-----w- c:\programmi\IZArc
2009-08-09 06:35 . 2009-08-09 06:35 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\CoSoSys
2009-08-08 16:40 . 2009-08-08 16:40 60416 ----a-w- c:\windows\ALCFDRTM.EXE
2009-08-06 06:10 . 2009-08-06 06:10 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\FileZilla
2009-08-06 06:09 . 2009-08-06 06:08 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\Feedreader
2009-08-05 08:59 . 2004-08-19 12:00 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-05 04:59 . 2009-07-30 06:10 -------- d-----w- c:\programmi\Java
2009-08-02 11:56 . 2009-08-02 09:28 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Yahoo!
2009-08-02 11:56 . 2009-08-02 09:28 -------- d-----w- c:\programmi\Yahoo!
2009-08-02 09:29 . 2009-08-02 09:29 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\Yahoo!
2009-08-02 06:34 . 2009-08-02 06:32 -------- d-----w- c:\programmi\K-Lite Codec Pack
2009-08-02 06:18 . 2009-08-02 06:18 -------- d-----w- c:\programmi\Windows Media Connect 2
2009-08-01 09:39 . 2009-08-01 09:39 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\nView_Profiles
2009-08-01 05:19 . 2009-08-01 05:19 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\NVIDIA
2009-07-31 18:57 . 2009-07-31 18:56 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\Media Player Classic
2009-07-31 14:59 . 2009-07-31 14:59 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\Malwarebytes
2009-07-31 14:59 . 2009-07-31 14:59 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2009-07-31 13:48 . 2009-07-31 13:48 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Macrium
2009-07-31 12:13 . 2009-07-31 12:12 -------- d-----w- c:\documents and settings\paolo\Dati applicazioni\DeepBurner
2009-07-31 12:09 . 2009-07-30 04:23 13688 ----a-w- c:\documents and settings\paolo\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-07-31 09:37 . 2004-08-19 12:00 79292 ----a-w- c:\windows\system32\perfc010.dat
2009-07-31 09:37 . 2004-08-19 12:00 478808 ----a-w- c:\windows\system32\perfh010.dat
2009-07-31 09:34 . 2009-07-31 09:34 -------- d-----w- c:\programmi\MSBuild
2009-07-31 09:34 . 2009-07-31 09:34 -------- d-----w- c:\programmi\Reference Assemblies
2009-07-31 08:24 . 2009-07-31 08:24 -------- d-----w- c:\programmi\uTorrent
2009-07-30 15:59 . 2009-07-30 15:59 -------- d-----w- c:\programmi\Microsoft
2009-07-30 15:59 . 2009-07-30 15:59 -------- d-----w- c:\programmi\Windows Live
2009-07-30 15:59 . 2009-07-30 15:59 -------- d-----w- c:\programmi\Windows Live SkyDrive
2009-07-30 15:56 . 2009-07-30 15:56 -------- d-----w- c:\programmi\File comuni\Windows Live
2009-07-30 05:58 . 2009-07-30 05:58 0 ----a-w- c:\windows\nsreg.dat
2009-07-30 05:26 . 2009-07-30 05:23 4212 ---h--w- c:\windows\system32\zllictbl.dat
2009-07-30 05:23 . 2009-07-30 05:23 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\MailFrontier
2009-07-29 22:52 . 2009-07-29 20:36 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-07-29 22:30 . 2009-07-29 21:01 -------- d-----w- c:\programmi\Realtek AC97
2009-07-29 22:10 . 2004-08-13 08:56 5810 ----a-w- c:\windows\system32\drivers\ASACPI.sys
2009-07-29 21:00 . 2009-07-29 20:15 -------- d-----w- c:\programmi\File comuni\InstallShield
2009-07-29 20:36 . 2009-07-29 20:36 552 ----a-w- c:\windows\system32\d3d8caps.dat
2009-07-29 20:16 . 2009-07-29 20:16 -------- d-----w- c:\programmi\Fastrate USB 100
2009-07-29 20:15 . 2009-07-29 20:15 -------- d-----w- c:\programmi\Telecom Italia
2009-07-29 19:55 . 2009-07-29 19:55 -------- d-----w- c:\programmi\microsoft frontpage
2009-07-29 19:54 . 2009-07-29 19:54 -------- d-----w- c:\programmi\Servizi in linea
2009-07-29 19:53 . 2009-07-29 19:53 21840 ----a-w- c:\windows\system32\emptyregdb.dat
2009-07-25 03:23 . 2009-07-30 06:11 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-07-17 19:01 . 2004-08-19 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 21:43 . 2004-08-19 12:00 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-06-29 15:55 . 2004-08-19 12:00 827392 ------w- c:\windows\system32\wininet.dll
2009-06-29 15:55 . 2004-08-19 12:00 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-06-29 15:54 . 2004-08-19 12:00 17408 ----a-w- c:\windows\system32\corpol.dll
2009-06-25 08:25 . 2004-08-19 12:00 735744 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:25 . 2004-08-19 12:00 56832 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:25 . 2004-08-19 12:00 54272 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:25 . 2004-08-19 12:00 301568 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:25 . 2004-08-19 12:00 147456 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:25 . 2004-08-19 12:00 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-24 11:18 . 2004-08-19 12:00 92928 ----a-w- c:\windows\system32\drivers\ksecdd.sys
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-07-25 149280]
"BigDogPath"="c:\windows\VM_STI.EXE" [2004-06-09 40960]
"nwiz"="c:\programmi\NVIDIA Corporation\nView\nwiz.exe" [2009-08-12 1657376]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2009-08-17 13877248]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2009-08-17 86016]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-09-17 2007832]
"COMODO Internet Security"="c:\programmi\COMODO\COMODO Internet Security\cfp.exe" [2009-09-17 1799952]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\soundman.exe [2006-11-17 577536]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
TrayMin315.exe.lnk - c:\programmi\Philips\Philips SPC315NC Webcam\TrayMin315.exe [2009-8-25 278528]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2009-09-17 15:13 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\guard32.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\\Programmi\\AVG\\AVG8\\avgemc.exe"=
"c:\\Programmi\\AVG\\AVG8\\avgupd.exe"=
"c:\\Programmi\\AVG\\AVG8\\avgnsx.exe"=

R0 pssnap;Paramount Software Snapshot Filter;c:\windows\system32\drivers\pssnap.sys [20/05/2008 8.32.40 15328]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [17/09/2009 14.35.10 335240]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [17/09/2009 14.35.15 108552]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdguard.sys [25/08/2009 8.14.23 132296]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [25/08/2009 8.14.23 25160]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [17/09/2009 17.13.18 908056]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [17/09/2009 17.13.22 297752]
R2 ReflectService;Macrium Reflect Image Mounting Service;c:\programmi\Macrium\Reflect\ReflectService.exe [06/08/2008 11.34.02 216032]
R3 Stmatm;ATM/ADSL miniport;c:\windows\system32\drivers\stmatm.sys [29/07/2009 22.16.24 59338]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [09/08/2009 20.18.06 8704]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [09/08/2009 20.18.06 3072]
S3 TaurusUsb;ADSL Modem USB Service 1.09a;c:\windows\system32\drivers\torususb.sys [29/07/2009 22.16.24 527980]

--- Altri Servizi/Drivers In Memoria ---

*Deregistered* - cpuz132
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/ig?hl=it
FF - ProfilePath - c:\documents and settings\paolo\Dati applicazioni\Mozilla\Firefox\Profiles\sgeqbn1n.default\
FF - prefs.js: keyword.URL - hxxp://us.yhs.search.yahoo.com/avg/search?fr=yhs-avg&type=yahoo_avg_hs2-tb-web_us&p=
FF - component: c:\programmi\AVG\AVG8\Firefox\components\avgssff.dll
FF - plugin: c:\programmi\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\programmi\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - true.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-09-17 20:39
Windows 5.1.2600 Service Pack 3 NTFS

detected NTDLL code modification:
ZwClose, ZwOpenFile

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Environment*]
"Licence0"="04F0D21-79D8-7A25-D702-433F"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(724)
c:\windows\system32\guard32.dll

- - - - - - - > 'lsass.exe'(784)
c:\windows\system32\guard32.dll
.
Ora fine scansione: 2009-09-17 20.41.06
ComboFix-quarantined-files.txt 2009-09-17 18:41

Pre-Run: 35.144.818.688 byte disponibili
Post-Run: 35.116.924.928 byte disponibili

227 --- E O F --- 2009-09-10 04:47

Solo con l'antivirus?
Prova a fare una scansione in Modalità Provvisoria, e vedi se ripete lo scherzo.
Cosa intendi con "si resetta", che si riavvia?

Si, hai un paio di voci, sul log di Combofix, sospette.
A mio avviso, la causa dei riavvii, potrebbe essere un Rootkit.
Prova a fare una scansione con drweb :
Scarica sul desktop DoctorWeb: (in fondo pagina trovi il Download)
http://www.drweb-antivirus.it/index.php?option=com_content&task=view&id=3&Itemid=0
Clicca su Avvia.
Farà una scansione preliminare.
Quando sarà finita, seleziona Scansione completa e clicca sul triangolino verde.
Se trova infezioni, usa il tasto "Sposta".
Non postare il log (sarà lunghissimo) posta solo gli eventuali file infetti che trova.
Il log lo trovi in:
C:\Documents and Settings\nomeutente\DoctorWeb\CureIt.log

Ciao.
Se hai ripristinato l'immagine, non serve la scansione con drweb.
Si. molto probabilmente era un Rootkit.
Comunque Paolo, quando indico delle istruzioni, non và bene che si eseguano delle altre, (cleanup and repair ) proprio perchè oltre a essere inutili, possono peggiorare la situazione.
Ciao!

Facciamo un ultimo controllo: (sempre se te lo permette:)
SYSTEM SCAN

scaricalo sul desktop
http://www.suspectfile.com/systemscan
Aprilo ed assicurati che tutte le opzioni siano spuntate, clicca su "Scan Now"
Finita la scansione verranno rilasciati (sempre sul desktop all'interno della cartella suspectfile) due file.
Collegati ad internet e vai alla pagina WikiSend: http://www.wikisend.com/
Clicca sul bottone "Sfoglia"
Seleziona il file appena salvato
Clicca su Upload file
Dopo qualche secondo, vieni spostato su una nuova pagina con il link in diversi formati:
Download Link / Forum Link
Seleziona Forum Link, copialo e incollalo in un nuovo messaggio per il forum.
Ricordati d'effettuare la scansione senza connessione attiva e con l'antivirus disabilitato salvo poi riattivarlo a scansione terminata.

NB:
la durata della scansione può risultare lunga, potrebbe addirittura sembrare che il programma non stia lavorando, non preoccuparti non è così.
SystemScan viene riconosciuto, erroneamente, da alcuni antivirus come infetto.

Riprova Paolo.
Alle volte, prima di decidersi a partire, fà i capricci.

sta facendo la scansione,almeno sembra,speriamo bene.sul desktop ho una cartella, "download", che prima non c era,sara' quella che ha installato system scan?

Và beh...
Per curiosità, fammi sapere che componente hardware si è guastato.
Ciao.

Se risultasse un problema hardware, Paolo non avrebbe nessuna colpa.


Non sbandierarlo molto, le sorprese possono arrivare per tutti.
Me compreso.

ciao r16,credo di aver risolto,ti spiego cio'che ho fattonel caso a qualcuno si verificasse un problema analogo:formattato,ma appena installato windows,collegato ad internet per gli agiornamenti dell antivirus temo di essermi preso qualcosa perchè il pc ha rallentato di brutto...addirittura schermata blu.finito di piangere ho usato la solita immagine di sistema,aggiornato a.v e windows,il problema persisteva,ad ogni scansione crasch.disinstallato firewall e installato un altro,eliminato programmi non indispensabili,nulla.controllato i cluster dell hd con hd tune,tutto a posto.ho fatto uno scandisk approfondito che è durato parecchio,mi ha eliminato una voce dell indice e recuperato i file perduti,e a quel punto magicamente dr web è arrivato in fondo senza battere ciglio(per la cronaca:tutto negativo)!
ti ringrazio per l aiuto,e mi scuso per il tempo che ti ho fatto perdere,forse potevo arrivarci prima di postare,ma non sapevo dove sbattere la testa.buona giornata!
@cbbusto:ti ringrazio per avermi considerato una persona precisa e attenta,ma come vedi sono tutt altro.buona giornata anche a te.