Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Non riesco ad installare dei programmi chiedo consultazione log HijackThis Opzioni
monsee
Inviato: Saturday, January 09, 2010 3:05:20 PM
Rank: AiutAmico

Iscritto dal : 4/5/2005
Posts: 22,971
Mi pare che il BOOT.INI vada bene così.
Avast! NON entra in colnflitto con Malwarebytes' AntiMalware (uno è un antivirus, l'altro è un antispyware [se poi usi la versione FREE di Malwarebytes, non può entrarti in conflitto con niente]).
giovannino60
Inviato: Saturday, January 09, 2010 3:55:57 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
VA BENE LA SCANSIONE?

Malwarebytes' Anti-Malware 1.44
Versione del database: 3526
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

09/01/2010 15.04.46
mbam-log-2010-01-09 (15-04-46).txt

Tipo di scansione: Scansione rapida
Elementi scansionati: 139455
Tempo trascorso: 5 minute(s), 52 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 0
Elementi dato del registro infetti: 3
Cartelle infette: 0
File infetti: 0

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
(Nessun elemento malevolo rilevato)

Elementi dato del registro infetti:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
(Nessun elemento malevolo rilevato)
fdaccc
Inviato: Saturday, January 09, 2010 3:56:47 PM

Rank: AiutAmico

Iscritto dal : 12/12/2009
Posts: 2,114
ha eliminato gli elementi malevoli, ma devi eseguire una scansione COMPLETA non RAPIDA.
giovannino60
Inviato: Saturday, January 09, 2010 11:22:44 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
Ecco la scansione completa, sono stati trovati due file infetti, sono infezione pericolose quelle trovate?

Malwarebytes' Anti-Malware 1.44
Versione del database: 3526
Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

09/01/2010 23.21.24
mbam-log-2010-01-09 (23-21-24).txt

Tipo di scansione: Scansione completa (C:\|F:\|I:\|)
Elementi scansionati: 1037443
Tempo trascorso: 5 hour(s), 13 minute(s), 52 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 0
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 2

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
(Nessun elemento malevolo rilevato)

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
C:\System Volume Information\_restore{E375B26E-9A0D-439F-97BF-8C773DA07473}\RP58\A0029591.exe (Rogue.Installer) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{E375B26E-9A0D-439F-97BF-8C773DA07473}\RP123\A0041684.sys (Malware.Trace) -> Quarantined and deleted successfully.
r16
Inviato: Sunday, January 10, 2010 12:03:35 AM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Scarica Combofix

http://download.bleepingcomputer.com/sUBs/ComboFix.exe


Salvalo sul desktop.

Importante: Disabilita il tuo antivirus e chiudi TUTTI i programmi aperti,(Firewall compreso) e dopo aver scaricato COMBOFIX, chiudi la connessione.

Doppio click su combofix.exe (comparirà una videata.)
Se ti verrà chiesto se vuoi Installare LA CONSOLE DI RIPRISTINO DI EMERGENZA, clicca NO.
E' probabile che ti siano inviati messaggi dall'antivirus, tu ignorali.
Durante l'operazione di scansione è importante non usare il PC (neanche il mouse) e attendere pazientemente la fine delle operazioni.
Al termine, verrà creato un file log sul Desktop, chiamato C:\ComboFix.txt. Postalo qui.
giovannino60
Inviato: Sunday, January 10, 2010 9:11:24 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
ComboFix 10-01-04.01 - UTENTE 10/01/2010 19.33.49.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.2047.913 [GMT 1:00]
Eseguito da: C:\Combofix\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100110-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Online Armor Firewall *enabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\RECYCLER\S-1-5-21-1708537768-1292428093-839522115-1003
C:\Thumbs.db
C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll
.
---- Esecuzione precedente -------
.
C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll

.
((((((((((((((((((((((((( Files Creati Da 2009-12-10 al 2010-01-10 )))))))))))))))))))))))))))))))))))
.

2010-01-09 11:02:03 . 2010-01-09 11:02:03 -------- d-----w- C:\Programmi\CCleaner
2010-01-08 19:38:14 . 2010-01-08 19:38:14 -------- d-----w- C:\Programmi\Windows Installer Clean Up
2010-01-08 15:51:04 . 2010-01-09 12:51:08 -------- d-----w- C:\Aiutamici
2010-01-07 21:10:34 . 2010-01-08 09:29:15 -------- d-----w- C:\Parcelle Tecnobit
2010-01-07 20:50:34 . 2010-01-07 20:51:19 -------- d-----w- C:\Windows installer cleanup
2009-12-28 18:39:35 . 2009-12-28 18:39:35 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\SSScanAppDataDir
2009-12-28 18:39:16 . 2009-12-28 18:39:16 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\MSScanAppDataDir
2009-12-17 09:35:43 . 2009-12-17 09:35:43 179 ----a-w- C:\handle.dat
2009-12-17 09:34:38 . 2009-12-17 09:34:38 -------- d-----w- C:\Programmi\File comuni\Sonic Shared
2009-12-17 09:33:44 . 2009-12-17 09:34:04 -------- d-----w- C:\Programmi\File comuni\HP
2009-12-17 09:30:01 . 2006-03-08 02:33:45 173 ------w- C:\WINDOWS\hpgmdl13.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-10 18:45:11 . 2009-03-04 19:02:08 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\skypePM
2010-01-10 18:42:00 . 2009-03-13 20:28:46 0 ----a-w- C:\WINDOWS\system32\drivers\lvuvc.hs
2010-01-10 18:41:55 . 2009-03-13 20:28:17 0 ----a-w- C:\WINDOWS\system32\drivers\logiflt.iad
2010-01-10 18:24:32 . 2009-03-04 18:58:56 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Skype
2010-01-09 15:10:10 . 2009-11-21 21:24:47 -------- d-----w- C:\Programmi\OFFICE11
2010-01-09 15:04:28 . 2001-08-31 11:00:00 82698 ----a-w- C:\WINDOWS\system32\perfc010.dat
2010-01-09 15:04:28 . 2001-08-31 11:00:00 485418 ----a-w- C:\WINDOWS\system32\perfh010.dat
2010-01-08 19:38:15 . 2010-01-08 19:38:15 3584 ----a-r- C:\Documents and Settings\UTENTE\Dati applicazioni\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2010-01-08 19:37:57 . 2009-09-02 13:15:05 -------- d-----w- C:\Programmi\MSECACHE
2010-01-07 21:15:19 . 2006-10-18 20:19:57 -------- d--h--w- C:\Programmi\InstallShield Installation Information
2010-01-07 15:07:14 . 2009-09-19 06:21:24 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07:04 . 2009-09-19 06:21:21 19160 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-01-06 20:18:47 . 2009-11-21 13:24:23 -------- d-----w- C:\Programmi\XoftSpySE
2009-12-30 16:27:46 . 2006-10-22 08:42:55 -------- d-----w- C:\Programmi\Tecnobit
2009-12-17 09:35:47 . 2006-11-29 18:31:49 102637 ----a-w- C:\WINDOWS\hpgins13.dat
2009-12-17 09:35:43 . 2006-10-18 20:04:05 130568 ----a-w- C:\Documents and Settings\UTENTE\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-12-17 09:32:25 . 2006-10-24 05:30:15 -------- d-----w- C:\Programmi\Hewlett-Packard
2009-12-17 09:32:00 . 2006-11-29 19:12:05 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\HP
2009-12-06 20:24:39 . 2009-10-30 18:19:56 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Profis
2009-12-06 19:45:37 . 2009-11-21 21:23:12 -------- d-----w- C:\Programmi\Hilti
2009-12-05 06:46:08 . 2009-03-04 18:58:30 -------- d-----r- C:\Programmi\Skype
2009-12-05 06:45:58 . 2009-12-05 06:45:58 -------- d-----w- C:\Programmi\File comuni\Skype
2009-12-05 06:45:55 . 2009-03-04 18:58:24 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\Skype
2009-12-03 05:46:51 . 2008-08-10 06:59:21 -------- d-----w- C:\Programmi\IZArc
2009-12-01 17:41:04 . 2006-10-22 06:59:26 -------- d-----w- C:\Programmi\AutoCAD LT 2000
2009-11-26 05:21:49 . 2006-10-23 13:48:46 -------- d-----w- C:\Programmi\File comuni\Logitech
2009-11-24 23:54:29 . 2009-11-22 18:10:28 1280480 ----a-w- C:\WINDOWS\system32\aswBoot.exe
2009-11-24 23:51:09 . 2009-11-22 18:10:45 93424 ----a-w- C:\WINDOWS\system32\drivers\aswmon.sys
2009-11-24 23:49:07 . 2009-11-22 18:10:47 48560 ----a-w- C:\WINDOWS\system32\drivers\aswTdi.sys
2009-11-24 23:48:57 . 2009-11-22 18:10:47 23120 ----a-w- C:\WINDOWS\system32\drivers\aswRdr.sys
2009-11-24 23:47:54 . 2009-11-22 18:10:46 27408 ----a-w- C:\WINDOWS\system32\drivers\aavmker4.sys
2009-11-24 23:47:28 . 2009-11-22 18:10:45 97480 ----a-w- C:\WINDOWS\system32\AvastSS.scr
2009-11-24 15:14:05 . 2009-10-22 14:53:07 1 ----a-w- C:\Documents and Settings\UTENTE\Dati applicazioni\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-11-23 20:01:18 . 2006-10-19 06:28:54 -------- d-----w- C:\Programmi\File comuni\Adobe
2009-11-22 17:48:38 . 2007-01-19 07:13:28 -------- d-----w- C:\Programmi\Microsoft ActiveSync
2009-11-22 17:40:32 . 2006-10-19 06:17:11 -------- d-----w- C:\Programmi\Microsoft Works
2009-11-22 17:40:29 . 2009-11-21 21:24:44 -------- d-----w- C:\Programmi\MEDIA
2009-11-22 17:40:22 . 2009-11-21 21:17:58 -------- d-----w- C:\Programmi\CLIPART
2009-11-22 17:39:41 . 2009-03-12 15:53:06 -------- d-----w- C:\Programmi\MSBuild
2009-11-22 17:39:19 . 2009-11-22 17:03:33 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\Microsoft Help
2009-11-22 14:22:41 . 2009-11-22 14:22:36 -------- d-----w- C:\Programmi\Photoshop
2009-11-22 14:11:14 . 2009-11-22 14:11:04 -------- d-----w- C:\Programmi\Burn masterizzatore
2009-11-22 14:06:28 . 2006-10-19 05:28:42 -------- d-----w- C:\Programmi\Google
2009-11-22 07:03:16 . 2006-10-22 06:26:31 -------- d-----w- C:\Programmi\Graphisoft
2009-11-21 21:27:03 . 2009-11-21 21:27:03 -------- d-----w- C:\Programmi\Templates
2009-11-21 21:26:37 . 2009-11-21 21:26:36 -------- d-----w- C:\Programmi\Print-server
2009-11-21 18:39:57 . 2009-11-21 18:39:57 -------- d-----w- C:\Programmi\Alwil Software
2009-11-21 13:05:19 . 2006-10-19 05:35:49 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Lavasoft
2009-11-21 13:03:18 . 2007-04-07 16:11:00 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Acubix PicoBackup Outlook Express Edition
2009-11-18 15:46:56 . 2008-03-31 14:20:41 -------- d-----w- C:\Programmi\Strutture Tecnobit
2009-11-18 09:50:41 . 2009-09-19 20:03:39 17383456 --sha-w- C:\WINDOWS\system32\drivers\fidbox.dat
2009-11-07 12:45:33 . 2009-11-07 12:45:33 152576 ----a-w- C:\Documents and Settings\UTENTE\Dati applicazioni\Sun\Java\jre1.6.0_17\lzma.dll
2009-05-04 15:23:03 . 2009-05-04 15:23:02 270978 ----a-w- C:\Programmi\La direzione dei lavori.zip
2009-03-26 11:28:08 . 2009-11-21 21:27:00 901120 ----a-w- C:\Programmi\DEI_ScuoleEcocompatibili.exe
2008-08-10 06:57:56 . 2008-08-10 06:57:30 3723454 ----a-w- C:\Programmi\IZArc_Setup.exe
2008-07-17 18:59:36 . 2008-07-17 19:01:10 3536683 ----a-w- C:\Programmi\PicoBackupOESetup.exe
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2006-03-30 14:45:08 . 2006-03-30 14:45:08 313472 C:\Programmi\Adobe\Acrobat 7.0\Reader\bak\AdobeUpdateManager.exe

2006-10-18 20:23:57 . 2003-05-05 06:57:30 143360 C:\Programmi\Analog Devices\SoundMAX\bak\SMTray.exe

2006-10-19 05:16:34 . 2004-06-10 19:10:00 339968 C:\Programmi\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe

2006-10-23 13:43:08 . 2004-05-10 14:54:24 49152 C:\Programmi\Brother\Brmfl04c\bak\BrStDvPt.exe
2009-08-10 13:39:07 . 2004-05-10 14:54:24 49152 C:\Programmi\Brother\Brmfl04c\BrStDvPt.exe

2003-09-29 23:14:58 . 2003-09-29 23:14:58 155648 C:\Programmi\File comuni\ScanSoft Shared\SSBkgdUpdate\bak\SSBkgdupdate.exe

2007-01-27 18:16:46 . 2007-01-27 18:16:46 171448 C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\bak\GoogleToolbarNotifier.exe

2006-02-19 01:41:10 . 2006-02-19 01:41:10 49152 C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe
2006-02-19 01:41:10 . 2006-02-19 01:41:10 49152 C:\Programmi\HP\HP Software Update\hpwuSchd2.exe

2006-06-15 07:43:20 . 2006-06-15 07:43:20 49152 C:\Programmi\HP\ToolboxFX\bin\bak\HPTLBXFX.exe
2009-08-10 13:39:08 . 2006-06-15 07:43:20 49152 C:\Programmi\HP\ToolboxFX\bin\HPTLBXFX.exe

2006-10-22 06:23:15 . 2005-11-10 11:03:52 36975 C:\Programmi\Java\jre1.5.0_06\bin\bak\jusched.exe
2009-08-10 13:39:08 . 2005-11-10 11:03:52 36975 C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe

2007-12-11 15:21:42 . 2007-09-25 00:11:35 132496 C:\Programmi\Java\jre1.6.0_03\bin\bak\jusched.exe
2009-08-10 13:39:08 . 2007-09-25 00:11:35 132496 C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe

2006-10-23 13:48:46 . 2003-12-01 09:38:16 892928 C:\Programmi\Logitech\iTouch\bak\iTouch.exe

2006-10-23 16:30:55 . 2003-07-29 22:37:28 332288 C:\Programmi\MemoRex\bak\MemoRexStart.exe
2009-08-10 13:39:06 . 2003-07-29 22:37:28 332288 C:\Programmi\MemoRex\MemoRexStart.exe

2006-06-21 02:52:42 . 2006-06-21 02:52:42 1211176 C:\Programmi\Microsoft ActiveSync\bak\wcescomm.exe
2006-06-21 02:52:42 . 2006-06-21 02:52:42 1211176 C:\Programmi\Microsoft ActiveSync\wcescomm.exe

2006-09-01 14:57:48 . 2006-09-01 14:57:48 282624 C:\Programmi\QuickTime\bak\qttask.exe
2009-08-10 13:39:07 . 2006-09-01 14:57:48 282624 C:\Programmi\QuickTime\qttask.exe

2005-06-17 13:52:52 . 2005-06-17 13:52:52 1129472 C:\Programmi\Salvataggio outlook express\PicoBackupOE\bak\PicoBackupAgent.exe

2001-08-31 11:00:00 . 2004-08-19 13:39:36 15360 C:\WINDOWS\system32\bak\ctfmon.exe
2001-08-31 11:00:00 . 2008-04-13 17:14:04 15360 C:\WINDOWS\system32\ctfmon.exe

.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="C:\Programmi\Skype\\Phone\Skype.exe" [2009-10-09 12:11:12 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"zzzHPSETUP"="D:\Setup.exe \RESET" [X]
"Logitech Utility"="Logi_MwX.Exe" [2003-11-07 09:50:00 19968]
"HPUsageTracking"="C:\Programmi\HP\HP UT\bin\hppusg.exe" [2006-06-14 13:20:06 36864]
"LogitechQuickCamRibbon"="C:\Programmi\Logitech\QuickCam\Quickcam.exe" [2008-02-13 12:06:58 2196240]
"SunJavaUpdateSched"="C:\Programmi\Java\jre6\bin\jusched.exe" [2009-10-11 03:17:36 149280]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 23:51:40 81000]
"Acrobat Assistant 7.0"="C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2004-12-14 01:12:02 483328]
"HP Software Update"="C:\Programmi\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41:10 49152]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2006-09-01 14:57:48 282624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 17:14:04 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WUAppSetup"="C:\Programmi\File comuni\logishrd\WUApp32.exe" [2008-12-17 05:51:04 443664]

C:\Documents and Settings\UTENTE\Menu Avvio\Programmi\Esecuzione automatica\
Printkey.lnk - C:\Printkey.exe [2006-10-22 514560]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Alice ti aiuta.lnk - C:\Programmi\Alice ti aiuta\bin\matcli.exe [2006-10-23 212992]
Avvio rapido HP Photosmart Premier.lnk - C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe [2006-2-10 73728]
Avvio veloce di Adobe Acrobat.lnk - C:\WINDOWS\Installer\{AC76BA86-1034-4700-7760-000000000002}\SC_Acrobat.exe [2009-11-23 25214]
Logitech Desktop Messenger.lnk - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-3-24 66864]
Status Monitor.lnk - C:\Programmi\Brother\Brmfcmon\BrMfcWnd.exe [2006-10-23 819200]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\H:\0autocheck autochk *

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\Programmi\Microsoft ActiveSync\rapimgr.exe"= C:\Programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Programmi\Microsoft ActiveSync\wcescomm.exe"= C:\Programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Programmi\Microsoft ActiveSync\WCESMgr.exe"= C:\Programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Programmi\\JavaSoft\\JRE\\1.3.1_13\\bin\\javaw.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Programmi\\Graphisoft\\ArchiCAD 11\\ArchiCAD.exe"=
"C:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"C:\\Programmi\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Programmi\\Adobe\\Acrobat 7.0\\Acrobat\\Acrobat.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\Skype\\Plugin Manager\\skypePM.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"9633:TCP"= 9633:TCP:gyira
"3389:TCP"= 3389:TCP:Remote Desktop

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [22/11/2009 19.10.45 114768]
R1 OADevice;OADriver;C:\WINDOWS\system32\drivers\OADriver.sys [21/09/2009 16.08.32 200784]
R1 OAmon;OAmon;C:\WINDOWS\system32\drivers\OAmon.sys [21/09/2009 16.08.32 24656]
R1 OAnet;OAnet;C:\WINDOWS\system32\drivers\OAnet.sys [21/09/2009 16.08.32 29776]
R2 ACCAKeyServer;ACCA Key Server v.2.00;C:\ACCA\ACCAKeyServer\ACCAKeyService.EXE [15/03/2009 18.35.13 528896]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [22/11/2009 19.10.45 20560]
R2 CPUSB;CPUsb.Sys driver;C:\WINDOWS\system32\drivers\CPUSB.sys [22/10/2006 9.09.26 17080]
R2 cpwnt;cpwnt;C:\WINDOWS\system32\drivers\CPWNT.SYS [21/10/2006 19.08.06 21824]
S1 SASKUTIL;SASKUTIL;\??\F:\Programmi\SuperantiSpyware\SASKUTIL.sys --> F:\Programmi\SuperantiSpyware\SASKUTIL.sys [?]
S1 soqwx32;soqwx32;\??\C:\WINDOWS\system32\drivers\soqwx32.sys --> C:\WINDOWS\system32\drivers\soqwx32.sys [?]
S2 OAcat;Online Armor Helper Service;"F:\Programmi\Firewall Armor\Online Armor\OAcat.exe" --> F:\Programmi\Firewall Armor\Online Armor\OAcat.exe [?]
S2 SvcOnlineArmor;Online Armor;F:\Programmi\Firewall Armor\Online Armor\oasrv.exe --> F:\Programmi\Firewall Armor\Online Armor\oasrv.exe [?]
S3 MSHUSBVideo;NX6000/NX3000/VX5000/VX5500/VX7000 Filter Driver;C:\WINDOWS\system32\drivers\nx6000.sys [12/03/2009 17.33.32 33808]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
gzemr
ejivo
.
Contenuto della cartella 'Scheduled Tasks'

2010-01-10 C:\WINDOWS\Tasks\XoftSpySE 2.job
- C:\Programmi\XoftSpySE\XoftSpy.exe [2009-11-21 13:24:23 . 2007-07-23 16:34:00]

2010-01-10 C:\WINDOWS\Tasks\XoftSpySE.job
- C:\Programmi\XoftSpySE\XoftSpy.exe [2009-11-21 13:24:23 . 2007-07-23 16:34:00]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.virgilio.it/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.virgilio.it/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Converti destinazione link in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti destinazione link in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti i link selezionati in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Converti i link selezionati in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Converti in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti nel file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti selezione in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti selezione in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&sporta in Microsoft Excel - C:\PROGRA~1\Office12\EXCEL.EXE/3000
TCP: {667CCFE0-179F-4596-86C5-C5967CC876D0} = 151.99.125.2,151.99.125.3
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
FF - ProfilePath - C:\Documents and Settings\UTENTE\Dati applicazioni\Mozilla\Firefox\Profiles\1awbkkbc.default\
FF - prefs.js: browser.startup.homepage - hxxp://VIRGILIO.IT
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

BHO-{D187A56B-A33F-4CBE-9D77-459FC0BAE012} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
Toolbar-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - F:\Programmi\SuperantiSpyware\SASSEH.DLL
ShellExecuteHooks-{4F07DA45-8170-4859-9B5F-037EF2970034} - F:\PROGRA~1\FIREWA~1\ONLINE~1\oaevent.dll
Notify-!SASWinLogon - F:\Programmi\SuperantiSpyware\SASWINLO.dll
Notify-avgrsstarter - avgrsstx.dll
AddRemove-001FFFFFFF10FF00FF1501F08F02F000-R1 - f:\Programmi\Graphisoft\ArchiCAD 10\Uninstall.AC\uninstaller.exe
AddRemove-Channel V2.76 - F:\PROGRA~1\Hilti\CHANNE~1\UNWISE.EXE
r16
Inviato: Monday, January 11, 2010 12:39:42 AM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Vai in installazione Applicazioni, e Rimuovi Tutte le versioni Java che trovi.
Poi fai una pulizia con CCleaner.
C'è un dialer da levare. ( e anche altro)
Cominciamo dal Dialer:
Scarica FindAWF:
http://noahdfear.geekstogo.com/FindAWF.exe 3. Esegui FindAWF,premi un tasto qualsiasi,poi premi il tasto 1 e INVIO, aspetti il log che FindAWF stamperà su un file di testo alla fine della ricerca.
Il filelog lo posti in questa discussione.
giovannino60
Inviato: Monday, January 11, 2010 6:57:45 AM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
Tutti i java che ti ho indicato con una freccia? Vedi anche i numeri?
Ma Java non serrve, l'ho reinstallo dopo? Grazie

monsee
Inviato: Monday, January 11, 2010 11:23:47 AM
Rank: AiutAmico

Iscritto dal : 4/5/2005
Posts: 22,971
Sì, Java serve.
Sì, dopo vedrai che ti sarà consigliato di installarlo.
Ma ti sarà consigliato di installare la versione più recente e aggiornata (la quale, peraltro, è scaricabile anche da Aiutamici): le versioni che hai adesso, invece, sono obsolete, il che può dare problemi: per questo, ti è stato (giustamente) suggerito di disinstallarle.
giovannino60
Inviato: Monday, January 11, 2010 11:47:23 AM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
Per evitare di disinstallare altri software, devo disinstallare tutti i driver che ho indicato con le frecce, oppure ho indicato dei driver che non devono essere disinstallati? Grazie
monsee
Inviato: Monday, January 11, 2010 11:56:59 AM
Rank: AiutAmico

Iscritto dal : 4/5/2005
Posts: 22,971
Non andrebbe disinstallata la versione più recente ed aggiornata (quella che si chiama: "Java(TM)6 Update 17")...
Tuttavia, per evitar problemi, ti suggerisco di disinstallare tutti i Java (quelli che hai segnato con le frecce), poi di RIAVVIARE il computer e, infine, di re-installare solo Java(TM)6 Update 17...
In questo modo dovresti poterti ritrovar comunque un Java Runtime ben aggiornato e perfettamente funzionante.
giovannino60
Inviato: Monday, January 11, 2010 12:18:22 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
Dove la trovo questa : "Java Runtime ben aggiornato e perfettamente funzionante". ?
paolopa
Inviato: Monday, January 11, 2010 12:21:06 PM

Rank: AiutAmico

Iscritto dal : 10/14/2008
Posts: 2,777
fdaccc
Inviato: Monday, January 11, 2010 12:21:09 PM

Rank: AiutAmico

Iscritto dal : 12/12/2009
Posts: 2,114
r16
Inviato: Monday, January 11, 2010 12:46:15 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Il log di Combofix, non è completo.
Manca la parte finale.
Postamelo integralmente.

E, per favore, NON installare nessun Java, per il momento.
Bisogna prima eliminare il Dialer.
Il dialer lo utilizzerebbe per fare ulteriori danni.
giovannino60
Inviato: Monday, January 11, 2010 2:29:53 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
ComboFix 10-01-04.01 - UTENTE 10/01/2010 19.33.49.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.2047.913 [GMT 1:00]
Eseguito da: C:\Combofix\ComboFix.exe
AV: avast! antivirus 4.8.1368 [VPS 100110-0] *On-access scanning disabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
AV: AVG Anti-Virus *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: Online Armor Firewall *enabled* {B797DAA0-7E2E-4711-8BB3-D12744F1922A}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\RECYCLER\S-1-5-21-1708537768-1292428093-839522115-1003
C:\Thumbs.db
C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll
.
---- Esecuzione precedente -------
.
C:\WINDOWS\TEMP\logishrd\LVPrcInj01.dll

.
((((((((((((((((((((((((( Files Creati Da 2009-12-10 al 2010-01-10 )))))))))))))))))))))))))))))))))))
.

2010-01-09 11:02:03 . 2010-01-09 11:02:03 -------- d-----w- C:\Programmi\CCleaner
2010-01-08 19:38:14 . 2010-01-08 19:38:14 -------- d-----w- C:\Programmi\Windows Installer Clean Up
2010-01-08 15:51:04 . 2010-01-09 12:51:08 -------- d-----w- C:\Aiutamici
2010-01-07 21:10:34 . 2010-01-08 09:29:15 -------- d-----w- C:\Parcelle Tecnobit
2010-01-07 20:50:34 . 2010-01-07 20:51:19 -------- d-----w- C:\Windows installer cleanup
2009-12-28 18:39:35 . 2009-12-28 18:39:35 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\SSScanAppDataDir
2009-12-28 18:39:16 . 2009-12-28 18:39:16 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\MSScanAppDataDir
2009-12-17 09:35:43 . 2009-12-17 09:35:43 179 ----a-w- C:\handle.dat
2009-12-17 09:34:38 . 2009-12-17 09:34:38 -------- d-----w- C:\Programmi\File comuni\Sonic Shared
2009-12-17 09:33:44 . 2009-12-17 09:34:04 -------- d-----w- C:\Programmi\File comuni\HP
2009-12-17 09:30:01 . 2006-03-08 02:33:45 173 ------w- C:\WINDOWS\hpgmdl13.dat

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-10 18:45:11 . 2009-03-04 19:02:08 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\skypePM
2010-01-10 18:42:00 . 2009-03-13 20:28:46 0 ----a-w- C:\WINDOWS\system32\drivers\lvuvc.hs
2010-01-10 18:41:55 . 2009-03-13 20:28:17 0 ----a-w- C:\WINDOWS\system32\drivers\logiflt.iad
2010-01-10 18:24:32 . 2009-03-04 18:58:56 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Skype
2010-01-09 15:10:10 . 2009-11-21 21:24:47 -------- d-----w- C:\Programmi\OFFICE11
2010-01-09 15:04:28 . 2001-08-31 11:00:00 82698 ----a-w- C:\WINDOWS\system32\perfc010.dat
2010-01-09 15:04:28 . 2001-08-31 11:00:00 485418 ----a-w- C:\WINDOWS\system32\perfh010.dat
2010-01-08 19:38:15 . 2010-01-08 19:38:15 3584 ----a-r- C:\Documents and Settings\UTENTE\Dati applicazioni\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2010-01-08 19:37:57 . 2009-09-02 13:15:05 -------- d-----w- C:\Programmi\MSECACHE
2010-01-07 21:15:19 . 2006-10-18 20:19:57 -------- d--h--w- C:\Programmi\InstallShield Installation Information
2010-01-07 15:07:14 . 2009-09-19 06:21:24 38224 ----a-w- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-01-07 15:07:04 . 2009-09-19 06:21:21 19160 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2010-01-06 20:18:47 . 2009-11-21 13:24:23 -------- d-----w- C:\Programmi\XoftSpySE
2009-12-30 16:27:46 . 2006-10-22 08:42:55 -------- d-----w- C:\Programmi\Tecnobit
2009-12-17 09:35:47 . 2006-11-29 18:31:49 102637 ----a-w- C:\WINDOWS\hpgins13.dat
2009-12-17 09:35:43 . 2006-10-18 20:04:05 130568 ----a-w- C:\Documents and Settings\UTENTE\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-12-17 09:32:25 . 2006-10-24 05:30:15 -------- d-----w- C:\Programmi\Hewlett-Packard
2009-12-17 09:32:00 . 2006-11-29 19:12:05 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\HP
2009-12-06 20:24:39 . 2009-10-30 18:19:56 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Profis
2009-12-06 19:45:37 . 2009-11-21 21:23:12 -------- d-----w- C:\Programmi\Hilti
2009-12-05 06:46:08 . 2009-03-04 18:58:30 -------- d-----r- C:\Programmi\Skype
2009-12-05 06:45:58 . 2009-12-05 06:45:58 -------- d-----w- C:\Programmi\File comuni\Skype
2009-12-05 06:45:55 . 2009-03-04 18:58:24 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\Skype
2009-12-03 05:46:51 . 2008-08-10 06:59:21 -------- d-----w- C:\Programmi\IZArc
2009-12-01 17:41:04 . 2006-10-22 06:59:26 -------- d-----w- C:\Programmi\AutoCAD LT 2000
2009-11-26 05:21:49 . 2006-10-23 13:48:46 -------- d-----w- C:\Programmi\File comuni\Logitech
2009-11-24 23:54:29 . 2009-11-22 18:10:28 1280480 ----a-w- C:\WINDOWS\system32\aswBoot.exe
2009-11-24 23:51:09 . 2009-11-22 18:10:45 93424 ----a-w- C:\WINDOWS\system32\drivers\aswmon.sys
2009-11-24 23:49:07 . 2009-11-22 18:10:47 48560 ----a-w- C:\WINDOWS\system32\drivers\aswTdi.sys
2009-11-24 23:48:57 . 2009-11-22 18:10:47 23120 ----a-w- C:\WINDOWS\system32\drivers\aswRdr.sys
2009-11-24 23:47:54 . 2009-11-22 18:10:46 27408 ----a-w- C:\WINDOWS\system32\drivers\aavmker4.sys
2009-11-24 23:47:28 . 2009-11-22 18:10:45 97480 ----a-w- C:\WINDOWS\system32\AvastSS.scr
2009-11-24 15:14:05 . 2009-10-22 14:53:07 1 ----a-w- C:\Documents and Settings\UTENTE\Dati applicazioni\OpenOffice.org\3\user\uno_packages\cache\stamp.sys
2009-11-23 20:01:18 . 2006-10-19 06:28:54 -------- d-----w- C:\Programmi\File comuni\Adobe
2009-11-22 17:48:38 . 2007-01-19 07:13:28 -------- d-----w- C:\Programmi\Microsoft ActiveSync
2009-11-22 17:40:32 . 2006-10-19 06:17:11 -------- d-----w- C:\Programmi\Microsoft Works
2009-11-22 17:40:29 . 2009-11-21 21:24:44 -------- d-----w- C:\Programmi\MEDIA
2009-11-22 17:40:22 . 2009-11-21 21:17:58 -------- d-----w- C:\Programmi\CLIPART
2009-11-22 17:39:41 . 2009-03-12 15:53:06 -------- d-----w- C:\Programmi\MSBuild
2009-11-22 17:39:19 . 2009-11-22 17:03:33 -------- d-----w- C:\Documents and Settings\All Users\Dati applicazioni\Microsoft Help
2009-11-22 14:22:41 . 2009-11-22 14:22:36 -------- d-----w- C:\Programmi\Photoshop
2009-11-22 14:11:14 . 2009-11-22 14:11:04 -------- d-----w- C:\Programmi\Burn masterizzatore
2009-11-22 14:06:28 . 2006-10-19 05:28:42 -------- d-----w- C:\Programmi\Google
2009-11-22 07:03:16 . 2006-10-22 06:26:31 -------- d-----w- C:\Programmi\Graphisoft
2009-11-21 21:27:03 . 2009-11-21 21:27:03 -------- d-----w- C:\Programmi\Templates
2009-11-21 21:26:37 . 2009-11-21 21:26:36 -------- d-----w- C:\Programmi\Print-server
2009-11-21 18:39:57 . 2009-11-21 18:39:57 -------- d-----w- C:\Programmi\Alwil Software
2009-11-21 13:05:19 . 2006-10-19 05:35:49 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Lavasoft
2009-11-21 13:03:18 . 2007-04-07 16:11:00 -------- d-----w- C:\Documents and Settings\UTENTE\Dati applicazioni\Acubix PicoBackup Outlook Express Edition
2009-11-18 15:46:56 . 2008-03-31 14:20:41 -------- d-----w- C:\Programmi\Strutture Tecnobit
2009-11-18 09:50:41 . 2009-09-19 20:03:39 17383456 --sha-w- C:\WINDOWS\system32\drivers\fidbox.dat
2009-11-07 12:45:33 . 2009-11-07 12:45:33 152576 ----a-w- C:\Documents and Settings\UTENTE\Dati applicazioni\Sun\Java\jre1.6.0_17\lzma.dll
2009-05-04 15:23:03 . 2009-05-04 15:23:02 270978 ----a-w- C:\Programmi\La direzione dei lavori.zip
2009-03-26 11:28:08 . 2009-11-21 21:27:00 901120 ----a-w- C:\Programmi\DEI_ScuoleEcocompatibili.exe
2008-08-10 06:57:56 . 2008-08-10 06:57:30 3723454 ----a-w- C:\Programmi\IZArc_Setup.exe
2008-07-17 18:59:36 . 2008-07-17 19:01:10 3536683 ----a-w- C:\Programmi\PicoBackupOESetup.exe
.

((((((((((((((((((((((((((((((((((((((((((((( AWF ))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2006-03-30 14:45:08 . 2006-03-30 14:45:08 313472 C:\Programmi\Adobe\Acrobat 7.0\Reader\bak\AdobeUpdateManager.exe

2006-10-18 20:23:57 . 2003-05-05 06:57:30 143360 C:\Programmi\Analog Devices\SoundMAX\bak\SMTray.exe

2006-10-19 05:16:34 . 2004-06-10 19:10:00 339968 C:\Programmi\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe

2006-10-23 13:43:08 . 2004-05-10 14:54:24 49152 C:\Programmi\Brother\Brmfl04c\bak\BrStDvPt.exe
2009-08-10 13:39:07 . 2004-05-10 14:54:24 49152 C:\Programmi\Brother\Brmfl04c\BrStDvPt.exe

2003-09-29 23:14:58 . 2003-09-29 23:14:58 155648 C:\Programmi\File comuni\ScanSoft Shared\SSBkgdUpdate\bak\SSBkgdupdate.exe

2007-01-27 18:16:46 . 2007-01-27 18:16:46 171448 C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\bak\GoogleToolbarNotifier.exe

2006-02-19 01:41:10 . 2006-02-19 01:41:10 49152 C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe
2006-02-19 01:41:10 . 2006-02-19 01:41:10 49152 C:\Programmi\HP\HP Software Update\hpwuSchd2.exe

2006-06-15 07:43:20 . 2006-06-15 07:43:20 49152 C:\Programmi\HP\ToolboxFX\bin\bak\HPTLBXFX.exe
2009-08-10 13:39:08 . 2006-06-15 07:43:20 49152 C:\Programmi\HP\ToolboxFX\bin\HPTLBXFX.exe

2006-10-22 06:23:15 . 2005-11-10 11:03:52 36975 C:\Programmi\Java\jre1.5.0_06\bin\bak\jusched.exe
2009-08-10 13:39:08 . 2005-11-10 11:03:52 36975 C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe

2007-12-11 15:21:42 . 2007-09-25 00:11:35 132496 C:\Programmi\Java\jre1.6.0_03\bin\bak\jusched.exe
2009-08-10 13:39:08 . 2007-09-25 00:11:35 132496 C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe

2006-10-23 13:48:46 . 2003-12-01 09:38:16 892928 C:\Programmi\Logitech\iTouch\bak\iTouch.exe

2006-10-23 16:30:55 . 2003-07-29 22:37:28 332288 C:\Programmi\MemoRex\bak\MemoRexStart.exe
2009-08-10 13:39:06 . 2003-07-29 22:37:28 332288 C:\Programmi\MemoRex\MemoRexStart.exe

2006-06-21 02:52:42 . 2006-06-21 02:52:42 1211176 C:\Programmi\Microsoft ActiveSync\bak\wcescomm.exe
2006-06-21 02:52:42 . 2006-06-21 02:52:42 1211176 C:\Programmi\Microsoft ActiveSync\wcescomm.exe

2006-09-01 14:57:48 . 2006-09-01 14:57:48 282624 C:\Programmi\QuickTime\bak\qttask.exe
2009-08-10 13:39:07 . 2006-09-01 14:57:48 282624 C:\Programmi\QuickTime\qttask.exe

2005-06-17 13:52:52 . 2005-06-17 13:52:52 1129472 C:\Programmi\Salvataggio outlook express\PicoBackupOE\bak\PicoBackupAgent.exe

2001-08-31 11:00:00 . 2004-08-19 13:39:36 15360 C:\WINDOWS\system32\bak\ctfmon.exe
2001-08-31 11:00:00 . 2008-04-13 17:14:04 15360 C:\WINDOWS\system32\ctfmon.exe

.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="C:\Programmi\Skype\\Phone\Skype.exe" [2009-10-09 12:11:12 25623336]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"zzzHPSETUP"="D:\Setup.exe \RESET" [X]
"Logitech Utility"="Logi_MwX.Exe" [2003-11-07 09:50:00 19968]
"HPUsageTracking"="C:\Programmi\HP\HP UT\bin\hppusg.exe" [2006-06-14 13:20:06 36864]
"LogitechQuickCamRibbon"="C:\Programmi\Logitech\QuickCam\Quickcam.exe" [2008-02-13 12:06:58 2196240]
"SunJavaUpdateSched"="C:\Programmi\Java\jre6\bin\jusched.exe" [2009-10-11 03:17:36 149280]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2009-11-24 23:51:40 81000]
"Acrobat Assistant 7.0"="C:\Programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2004-12-14 01:12:02 483328]
"HP Software Update"="C:\Programmi\HP\HP Software Update\HPWuSchd2.exe" [2006-02-19 01:41:10 49152]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2006-09-01 14:57:48 282624]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2008-04-13 17:14:04 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"WUAppSetup"="C:\Programmi\File comuni\logishrd\WUApp32.exe" [2008-12-17 05:51:04 443664]

C:\Documents and Settings\UTENTE\Menu Avvio\Programmi\Esecuzione automatica\
Printkey.lnk - C:\Printkey.exe [2006-10-22 514560]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Alice ti aiuta.lnk - C:\Programmi\Alice ti aiuta\bin\matcli.exe [2006-10-23 212992]
Avvio rapido HP Photosmart Premier.lnk - C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe [2006-2-10 73728]
Avvio veloce di Adobe Acrobat.lnk - C:\WINDOWS\Installer\{AC76BA86-1034-4700-7760-000000000002}\SC_Acrobat.exe [2009-11-23 25214]
Logitech Desktop Messenger.lnk - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [2009-3-24 66864]
Status Monitor.lnk - C:\Programmi\Brother\Brmfcmon\BrMfcWnd.exe [2006-10-23 819200]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk /r \??\H:\0autocheck autochk *

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\Programmi\Microsoft ActiveSync\rapimgr.exe"= C:\Programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Programmi\Microsoft ActiveSync\wcescomm.exe"= C:\Programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Programmi\Microsoft ActiveSync\WCESMgr.exe"= C:\Programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Programmi\\JavaSoft\\JRE\\1.3.1_13\\bin\\javaw.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Programmi\\Graphisoft\\ArchiCAD 11\\ArchiCAD.exe"=
"C:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"C:\\Programmi\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"=
"C:\\Programmi\\Adobe\\Acrobat 7.0\\Acrobat\\Acrobat.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\Skype\\Plugin Manager\\skypePM.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"9633:TCP"= 9633:TCP:gyira
"3389:TCP"= 3389:TCP:Remote Desktop

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [22/11/2009 19.10.45 114768]
R1 OADevice;OADriver;C:\WINDOWS\system32\drivers\OADriver.sys [21/09/2009 16.08.32 200784]
R1 OAmon;OAmon;C:\WINDOWS\system32\drivers\OAmon.sys [21/09/2009 16.08.32 24656]
R1 OAnet;OAnet;C:\WINDOWS\system32\drivers\OAnet.sys [21/09/2009 16.08.32 29776]
R2 ACCAKeyServer;ACCA Key Server v.2.00;C:\ACCA\ACCAKeyServer\ACCAKeyService.EXE [15/03/2009 18.35.13 528896]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [22/11/2009 19.10.45 20560]
R2 CPUSB;CPUsb.Sys driver;C:\WINDOWS\system32\drivers\CPUSB.sys [22/10/2006 9.09.26 17080]
R2 cpwnt;cpwnt;C:\WINDOWS\system32\drivers\CPWNT.SYS [21/10/2006 19.08.06 21824]
S1 SASKUTIL;SASKUTIL;\??\F:\Programmi\SuperantiSpyware\SASKUTIL.sys --> F:\Programmi\SuperantiSpyware\SASKUTIL.sys [?]
S1 soqwx32;soqwx32;\??\C:\WINDOWS\system32\drivers\soqwx32.sys --> C:\WINDOWS\system32\drivers\soqwx32.sys [?]
S2 OAcat;Online Armor Helper Service;"F:\Programmi\Firewall Armor\Online Armor\OAcat.exe" --> F:\Programmi\Firewall Armor\Online Armor\OAcat.exe [?]
S2 SvcOnlineArmor;Online Armor;F:\Programmi\Firewall Armor\Online Armor\oasrv.exe --> F:\Programmi\Firewall Armor\Online Armor\oasrv.exe [?]
S3 MSHUSBVideo;NX6000/NX3000/VX5000/VX5500/VX7000 Filter Driver;C:\WINDOWS\system32\drivers\nx6000.sys [12/03/2009 17.33.32 33808]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
gzemr
ejivo
.
Contenuto della cartella 'Scheduled Tasks'

2010-01-10 C:\WINDOWS\Tasks\XoftSpySE 2.job
- C:\Programmi\XoftSpySE\XoftSpy.exe [2009-11-21 13:24:23 . 2007-07-23 16:34:00]

2010-01-10 C:\WINDOWS\Tasks\XoftSpySE.job
- C:\Programmi\XoftSpySE\XoftSpy.exe [2009-11-21 13:24:23 . 2007-07-23 16:34:00]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.virgilio.it/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.virgilio.it/
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Converti destinazione link in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti destinazione link in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti i link selezionati in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Converti i link selezionati in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Converti in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti nel file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti selezione in Adobe PDF - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti selezione in file PDF esistente - C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&sporta in Microsoft Excel - C:\PROGRA~1\Office12\EXCEL.EXE/3000
TCP: {667CCFE0-179F-4596-86C5-C5967CC876D0} = 151.99.125.2,151.99.125.3
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
DPF: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
FF - ProfilePath - C:\Documents and Settings\UTENTE\Dati applicazioni\Mozilla\Firefox\Profiles\1awbkkbc.default\
FF - prefs.js: browser.startup.homepage - hxxp://VIRGILIO.IT
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

BHO-{D187A56B-A33F-4CBE-9D77-459FC0BAE012} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
Toolbar-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
WebBrowser-{4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - C:\Programmi\Burn4Free Toolbar\v3.3.0.3\Burn4Free_Toolbar.dll
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - F:\Programmi\SuperantiSpyware\SASSEH.DLL
ShellExecuteHooks-{4F07DA45-8170-4859-9B5F-037EF2970034} - F:\PROGRA~1\FIREWA~1\ONLINE~1\oaevent.dll
Notify-!SASWinLogon - F:\Programmi\SuperantiSpyware\SASWINLO.dll
Notify-avgrsstarter - avgrsstx.dll
AddRemove-001FFFFFFF10FF00FF1501F08F02F000-R1 - f:\Programmi\Graphisoft\ArchiCAD 10\Uninstall.AC\uninstaller.exe
AddRemove-Channel V2.76 - F:\PROGRA~1\Hilti\CHANNE~1\UNWISE.EXE


giovannino60
Inviato: Monday, January 11, 2010 3:25:41 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691

Find AWF report by noahdfear ©2006
Version 1.40



bak folders found
~~~~~~~~~~~

Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\MEMOREX\BAK

29/07/2003 23.37 332 288 MemoRexStart.exe
1 File 332 288 byte
2 Directory 225 073 917 952 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\MESSEN~1\BAK

0 File 0 byte
2 Directory 225 073 917 952 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\MI3AA1~1\BAK

21/06/2006 03.52 1 211 176 wcescomm.exe
1 File 1 211 176 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\QUICKT~1\BAK

01/09/2006 15.57 282 624 qttask.exe
1 File 282 624 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\TOMTOM~1\BAK

0 File 0 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\WINDOWS\SYSTEM32\BAK

19/08/2004 14.39 15 360 ctfmon.exe
1 File 15 360 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\ANALOG~1\SOUNDMAX\BAK

05/05/2003 07.57 143 360 SMTray.exe
1 File 143 360 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\ATITEC~1\ATICON~1\BAK

10/06/2004 20.10 339 968 atiptaxx.exe
1 File 339 968 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\BROTHER\BRMFL04C\BAK

10/05/2004 15.54 49 152 BrStDvPt.exe
1 File 49 152 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\HP\HPSOFT~1\BAK

19/02/2006 02.41 49 152 HPWuSchd2.exe
1 File 49 152 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\LOGITECH\ITOUCH\BAK

01/12/2003 10.38 892 928 iTouch.exe
1 File 892 928 byte
2 Directory 225 073 913 856 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\SALVAT~1\PICOBA~1\BAK

17/06/2005 14.52 1 129 472 PicoBackupAgent.exe
1 File 1 129 472 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\ADOBE\ACROBA~1.0\READER\BAK

30/03/2006 15.45 313 472 AdobeUpdateManager.exe
1 File 313 472 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\FILECO~1\SCANSO~1\SSBKGD~1\BAK

30/09/2003 00.14 155 648 SSBkgdupdate.exe
1 File 155 648 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\GOOGLE\GOOGLE~1\121128~1.546\BAK

27/01/2007 19.16 171 448 GoogleToolbarNotifier.exe
1 File 171 448 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\HP\TOOLBO~1\BIN\BAK

15/06/2006 08.43 49 152 HPTLBXFX.exe
1 File 49 152 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\JAVA\JRE15~1.0_0\BIN\BAK

10/11/2005 12.03 36 975 jusched.exe
1 File 36 975 byte
2 Directory 225 073 909 760 byte disponibili
Il volume nell'unità C non ha etichetta.
Numero di serie del volume: 80CD-DD62

Directory di C:\PROGRA~1\JAVA\JRE16~1.0_0\BIN\BAK

25/09/2007 01.11 132 496 jusched.exe
1 File 132 496 byte
2 Directory 225 073 909 760 byte disponibili


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

3134186 16 May 2005 "C:\Z-agenda\MemoRex1-8-300.exe"
322560 8 Jan 2004 "C:\Programmi\MemoRex\MemoRexOpt.exe"
332288 29 Jul 2003 "C:\Programmi\MemoRex\bak\MemoRexStart.exe"
1211176 21 Jun 2006 "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
1211176 21 Jun 2006 "C:\Programmi\Microsoft ActiveSync\bak\wcescomm.exe"
282624 1 Sep 2006 "C:\Programmi\QuickTime\qttask.exe"
282624 1 Sep 2006 "C:\Programmi\QuickTime\bak\qttask.exe"
15360 13 Apr 2008 "C:\WINDOWS\system32\ctfmon.exe"
15360 13 Apr 2008 "C:\WINDOWS\ERDNT\cache\ctfmon.exe"
15360 19 Aug 2004 "C:\WINDOWS\system32\bak\ctfmon.exe"
143360 5 May 2003 "C:\Programmi\Analog Devices\SoundMAX\bak\SMTray.exe"
339968 10 Jun 2004 "C:\Programmi\ATI Technologies\ATI Control Panel\bak\atiptaxx.exe"
49152 10 May 2004 "C:\Programmi\Brother\Brmfl04c\BrStDvPt.exe"
49152 10 May 2004 "C:\Programmi\Brother\Brmfl04c\bak\BrStDvPt.exe"
49152 19 Feb 2006 "C:\Programmi\HP\HP Software Update\hpwuSchd2.exe"
49152 19 Feb 2006 "C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe"
892928 1 Dec 2003 "C:\Programmi\Logitech\iTouch\bak\iTouch.exe"
3536683 17 Jul 2008 "C:\Programmi\PicoBackupOESetup.exe"
2125824 20 Jun 2005 "C:\Programmi\PicoBackupOE\PicoBackup.exe"
3536683 30 Mar 2007 "C:\Programmi\Salvataggio outlook express\PicoBackupOESetup.exe"
1129472 17 Jun 2005 "C:\Programmi\Salvataggio outlook express\PicoBackupOE\bak\PicoBackupAgent.exe"
307200 22 Nov 2004 "C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe"
307200 22 Nov 2004 "C:\Programmi\Adobe\Acrobat 7.0\Acrobat Elements\AdobeUpdateManager.exe"
970752 16 Mar 2005 "C:\Programmi\File comuni\Adobe\Updater\AdobeUpdater.exe"
313472 30 Mar 2006 "C:\Programmi\Adobe\Acrobat 7.0\Reader\bak\AdobeUpdateManager.exe"
155648 30 Sep 2003 "C:\Programmi\File comuni\ScanSoft Shared\SSBkgdUpdate\bak\SSBkgdupdate.exe"
13281280 9 Jul 2008 "C:\Programmi\Google\Google Earth\googleearth.exe"
26694 5 Aug 2008 "C:\WINDOWS\Installer\{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}\googleearth.exe_407B9B5CDAC54F44A756B57CAB4E6A8B.exe"
171448 27 Jan 2007 "C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\bak\GoogleToolbarNotifier.exe"
49152 15 Jun 2006 "C:\Programmi\HP\ToolboxFX\bin\HPTLBXFX.exe"
49152 15 Jun 2006 "C:\Programmi\HP\ToolboxFX\bin\bak\HPTLBXFX.exe"
36975 10 Nov 2005 "C:\Programmi\Java\jre1.5.0_06\bin\bak\jusched.exe"
132496 25 Sep 2007 "C:\Programmi\Java\jre1.6.0_03\bin\bak\jusched.exe"
36975 10 Nov 2005 "C:\Programmi\Java\jre1.5.0_06\bin\bak\jusched.exe"
132496 25 Sep 2007 "C:\Programmi\Java\jre1.6.0_03\bin\bak\jusched.exe"


end of report
r16
Inviato: Monday, January 11, 2010 3:32:54 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Apri un file di testo sul Desktop (start\esegui\digita: notepad.exe\ Ok
Ci incolli il codice che vedi qui sotto, e salvi il file di testo obbligatoriamente con il nome CFScript.txt

Code:
File::
C:\WINDOWS\system32\drivers\soqwx32.sys
C:\WINDOWS\system32\drivers\aswFsBlk.sys

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"9633:TCP"=-

NetSvcs::
gzemr
ejivo

Driver::
soqwx32
aswFsBlk
gzemr
ejivo


e trascinalo sull'icona di ComboFix.
Attendi la fine dei lavori, senza toccare tastiera, mouse o altro.
Posta il log aggiornato di combofix
giovannino60
Inviato: Monday, January 11, 2010 4:04:08 PM
Rank: AiutAmico

Iscritto dal : 8/20/2009
Posts: 1,691
Non ho l'icona di Combofix sul desktop, come faccio a metterla?
r16
Inviato: Monday, January 11, 2010 4:11:11 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
giovannino60 ha scritto:
Non ho l'icona di Combofix sul desktop, come faccio a metterla?

Perchè NON hai seguito le istruzioni ALLA LETTERA.
Ti avevo detto di scaricarlo sul DESKTOP. (l'ho scritto persino in rosso)

Adesso disistallalo così:
Start
Esegui
nella finestra di dialogo, copia ed incolla questo comando: Combofix /Uninstall
Attendi la fine dei lavori senza toccare tastiera, mouse o altro.

Installa questa versione :
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
E questa volta, lo DEVI scaricare sul DESKTOP.

Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.