dovrebbe essere un errore della pagina di kaspersky
prima di farti collegare su un altro sito voglio fare questo tentativo
ti ho zippato combofix e rkill (combofix l'ho rinominato)
vedi se riesci a scaricarli- se va tutto bene avvia subito rkill e a seguire combofix con le istruzioni che ti ho dato nell'altro post
scompattali prima di eseguirli
scaricali da qui
adesso non mi apre più la pagina con nessuno dei due
innanzitutto grazie per la pazienza...!
allora... la pagina di bitdefender non si apre.
ho avviato rkill e combofix come mi hai detto... ma in C non c'è nessun rapporto di combofix, per cui non so che postarti... quando l'ho avviato è apparsa la barra di caricamento, ma poi niente
guarda meglio senza il rapporto diventa difficile anche perche' potrebbero esserci altri elementi
lo trovi col nome Combofix.txt....semmai usa il cerca di windows
niente non lo trova... non c'è...!
ora devo proprio andare... ma domani mi ricollego... speriamo di riuscire a trovare una soluzione!
intanto grazie 1000!
Eccomi... oggi ho rifatto quello che mi avevi detto e stavolta ha funzionato tutto!
questo è il rapporto, lo divido in due post perché mi dice che è troppo lungo... cmq l'ho caricato al link che mi avevi dato ieri...
ComboFix 10-04-10.01 - moroni andrea 11/04/2010 16.59.42.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.39.1040.18.447.125 [GMT 2:00]
Eseguito da: c:\documents and settings\moroni andrea\Desktop\prob\programmi\hgf.exe
ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\010112010146100109.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\010112010146101115.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\01011201014610499.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\010112010146111103.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\010112010146114101.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\010112010146115119.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\01011201014650115.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\0101120101465198.xxe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269299416.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269339721.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269360581.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269362887.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269374007.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269437663.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269454769.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269515193.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269535009.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269543942.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269547989.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269596544.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269609320.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269886287.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269942021.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1269967643.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270021189.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270050507.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270053025.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270113395.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270197054.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270571745.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270658772.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270741008.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270905709.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270976570.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270976904.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270997240.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270997454.exe
c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\rdr_1270997796.exe
c:\programmi\montorgueil
c:\programmi\montorgueil\14.04168
c:\programmi\montorgueil\BelleBionde\BelleBionde.i co
c:\programmi\montorgueil\DiveVogliose\DiveVogliose .ico
c:\programmi\montorgueil\ZocBorg\ZocBorg.ico
c:\recycler\S-1-5-21-117609710-1078145449-725345543-1003
c:\windows\bill104.exe
c:\windows\bill106.exe
c:\windows\bk23567.dat
c:\windows\fdgg34353edfgdfdf
c:\windows\system32\clbcoko.dll
c:\windows\system32\drivers\mrxoko.sys
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_QL600OKO
-------\Legacy_SWOKO
-------\Service_ql600oko
-------\Service_swoko
((((((((((((((((((((((((( Files Creati Da 2010-03-11 al 2010-04-11 )))))))))))))))))))))))))))))))))))
.
2010-04-10 17:22 . 2010-04-10 17:22 503808 ----a-w- c:\documents and settings\moroni andrea\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-783717cc-n\msvcp71.dll
2010-04-10 17:22 . 2010-04-10 17:22 499712 ----a-w- c:\documents and settings\moroni andrea\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-783717cc-n\jmc.dll
2010-04-10 17:22 . 2010-04-10 17:22 348160 ----a-w- c:\documents and settings\moroni andrea\Dati applicazioni\Sun\Java\Deployment\SystemCache\6.0\5 4\1a209876-783717cc-n\msvcr71.dll
2010-04-10 17:20 . 2010-04-10 17:18 411368 ----a-w- c:\windows\system32\deploytk.dll
2010-04-10 13:37 . 2010-04-10 13:37 -------- d-----w- c:\programmi\CCleaner
2010-04-06 16:48 . 2010-04-06 16:48 -------- d-----w- c:\windows\EHome
2010-03-24 14:32 . 2010-03-24 14:32 56766 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DivXPlusShortcuts\Uninstaller.ex e
2010-03-24 14:32 . 2010-03-24 14:32 57677 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Player\Uninstaller.exe
2010-03-24 14:31 . 2010-03-29 19:10 -------- d-----w- c:\documents and settings\moroni andrea\Dati applicazioni\DivX
2010-03-24 14:28 . 2010-03-24 14:28 84035 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\TransferWizard\Uninstaller.exe
2010-03-24 14:28 . 2009-12-01 19:14 9200 ------w- c:\windows\system32\drivers\cdralw2k.sys
2010-03-24 14:28 . 2009-12-01 19:14 9072 ------w- c:\windows\system32\drivers\cdr4_xp.sys
2010-03-24 14:28 . 2009-12-01 19:14 44944 ------w- c:\windows\system32\drivers\PxHelp20.sys
2010-03-24 14:28 . 2009-12-01 19:14 123888 ------w- c:\windows\system32\pxcpyi64.exe
2010-03-24 14:28 . 2009-12-01 19:14 125424 ------w- c:\windows\system32\pxinsi64.exe
2010-03-24 14:28 . 2009-12-01 19:14 133616 ------w- c:\windows\system32\pxafs.dll
2010-03-24 14:27 . 2010-03-24 14:27 57054 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DSDesktopComponents\Uninstaller. exe
2010-03-24 14:27 . 2010-03-24 14:27 54166 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DSAVCDecoder\Uninstaller.exe
2010-03-24 14:27 . 2010-03-24 14:27 57532 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DSASPDecoder\Uninstaller.exe
2010-03-24 14:27 . 2010-03-24 14:27 56458 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DivXDecoderShortcut\Uninstaller. exe
2010-03-24 14:27 . 2010-03-24 14:27 54174 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DSAACDecoder\Uninstaller.exe
2010-03-24 14:27 . 2010-03-24 14:27 54153 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\DFXPlugin\Uninstaller.exe
2010-03-24 14:27 . 2010-03-24 14:27 54128 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Converter\Uninstaller.exe
2010-03-24 14:26 . 2010-03-24 14:26 54629 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\TranscodeEngine\Uninstaller.exe
2010-03-24 14:26 . 2010-03-24 14:26 54101 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\MPEG2Plugin\Uninstaller.exe
2010-03-24 14:26 . 2010-03-24 14:26 56969 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\ASPEncoder\Uninstaller.exe
2010-03-24 14:02 . 2010-03-24 14:23 754984 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Setup\Resource.dll
2010-03-24 14:02 . 2010-03-24 14:22 986904 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Setup\DivXSetup.exe
2010-03-24 14:02 . 2010-03-24 14:02 56978 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\WebPlayer\Uninstaller.exe
2010-03-24 14:01 . 2010-03-24 14:01 53600 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Update\Uninstaller.exe
2010-03-24 14:01 . 2010-03-24 14:01 57409 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\ControlPanel\Uninstaller.exe
2010-03-24 14:01 . 2010-03-24 14:01 52963 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\MSVC80CRTRedist\Uninstaller.exe
2010-03-24 14:01 . 2010-03-24 14:01 54073 ----a-w- c:\documents and settings\All Users\Dati applicazioni\DivX\Qt4.5\Uninstaller.exe
2010-03-24 14:00 . 2010-03-24 14:01 -------- d-----w- c:\programmi\File comuni\DivX Shared
2010-03-24 14:00 . 2010-03-24 14:32 -------- d-----w- c:\programmi\DivX
2010-03-24 13:58 . 2010-03-24 14:33 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\DivX
2010-03-21 13:18 . 2010-03-21 13:23 -------- d-----w- C:\2945ab4431825f3ee12a
2010-03-21 13:14 . 2010-03-21 13:16 -------- d-----w- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\ApplicationHistory
2010-03-21 13:14 . 2010-03-21 13:14 142 ----a-w- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\fusioncache.dat
2010-03-20 12:04 . 2004-08-19 10:00 25600 ----a-w- c:\documents and settings\LocalService\Dati applicazioni\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
2010-03-20 11:59 . 2010-03-20 11:59 -------- d-----w- c:\programmi\Windows Media Connect 2
2010-03-20 11:55 . 2010-03-20 11:57 -------- d-----w- c:\windows\system32\drivers\UMDF
2010-03-20 11:55 . 2010-03-20 11:55 -------- d-----w- c:\windows\system32\LogFiles
2010-03-20 11:34 . 2010-03-29 21:16 -------- d-----w- c:\documents and settings\moroni andrea\Dati applicazioni\vlc
2010-03-20 11:31 . 2010-03-20 11:31 -------- d-----w- c:\programmi\VideoLAN
2010-03-19 12:28 . 2010-03-19 12:28 -------- d-----w- C:\$AVG
2010-03-19 12:23 . 2010-03-22 13:36 -------- d-----w- c:\programmi\uTorrent
2010-03-19 12:23 . 2010-04-10 18:33 -------- d-----w- c:\documents and settings\moroni andrea\Dati applicazioni\uTorrent
2010-03-19 12:04 . 2010-03-19 12:04 12464 ----a-w- c:\windows\system32\avgrsstx.dll
2010-03-19 12:03 . 2010-03-19 12:03 216200 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-03-19 12:03 . 2010-03-19 12:03 29512 ----a-w- c:\windows\system32\drivers\avgmfx86.sys
2010-03-19 12:03 . 2010-03-22 16:09 -------- d-----w- c:\windows\system32\drivers\Avg
2010-03-19 12:02 . 2010-03-19 12:02 242696 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-03-19 12:02 . 2010-03-19 12:02 -------- d-----w- c:\programmi\AVG
2010-03-19 12:01 . 2010-03-19 15:07 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\avg9
2010-03-18 18:01 . 2010-04-01 15:06 -------- d-----w- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\Temp
2010-03-18 18:01 . 2010-03-18 18:03 -------- d-----w- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\Google
2010-03-18 16:14 . 2010-03-18 16:14 -------- d-----w- c:\windows\ServicePackFiles
2010-03-18 16:11 . 2010-03-18 16:11 -------- d-----w- c:\programmi\MSXML 4.0
2010-03-18 16:08 . 2010-04-10 13:59 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-03-18 16:02 . 2009-12-31 16:14 352640 -c----w- c:\windows\system32\dllcache\srv.sys
2010-03-18 15:59 . 2009-06-21 22:05 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2010-03-18 15:58 . 2009-10-23 14:27 3555328 -c----w- c:\windows\system32\dllcache\moviemk.exe
2010-03-18 15:58 . 2009-12-04 14:41 453760 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-03-18 15:57 . 2008-06-14 17:59 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-03-18 15:57 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\drivers\bthport.sys
2010-03-18 15:55 . 2009-11-21 16:38 470528 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-03-18 15:53 . 2008-05-08 12:28 202752 -c----w- c:\windows\system32\dllcache\rmcast.sys
2010-03-18 15:53 . 2008-05-01 14:31 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2010-03-18 15:53 . 2009-07-10 13:41 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2010-03-18 15:52 . 2008-04-11 18:50 683520 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2010-03-18 15:50 . 2009-06-05 07:42 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2010-03-18 15:48 . 2008-10-15 16:57 332800 -c----w- c:\windows\system32\dllcache\netapi32.dll
2010-03-18 15:48 . 2009-07-31 04:57 1172480 -c----w- c:\windows\system32\dllcache\msxml3.dll
2010-03-18 15:47 . 2008-04-21 21:26 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
2010-04-10 17:21 . 2004-08-31 06:50 -------- d-----w- c:\programmi\File comuni\Java
2010-04-10 17:18 . 2004-08-31 06:50 -------- d-----w- c:\programmi\Java
2010-03-25 14:23 . 2005-02-12 14:03 -------- d-----w- c:\documents and settings\moroni andrea\Dati applicazioni\AdobeUM
2010-03-22 21:15 . 2004-09-01 05:51 -------- d-----w- c:\programmi\File comuni\Adobe
2010-03-19 15:06 . 2004-09-01 04:57 -------- d-----w- c:\programmi\Norton Internet Security
2010-03-19 12:33 . 2006-01-16 17:39 -------- d-----w- c:\documents and settings\moroni andrea\Dati applicazioni\sgrunt
2010-03-19 11:52 . 2004-08-31 07:34 -------- d--h--w- c:\programmi\InstallShield Installation Information
2010-03-19 11:52 . 2005-02-27 15:01 -------- d-----w- c:\programmi\eMule
2010-03-19 11:48 . 2004-09-01 04:56 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Symantec
2010-03-19 11:47 . 2004-09-01 04:56 -------- d-----w- c:\programmi\File comuni\Symantec Shared
2010-03-08 17:59 . 2010-03-08 17:59 94208 ----a-w- c:\windows\system32\dpl100.dll
2010-02-19 19:27 . 2010-02-19 19:27 720384 ----a-w- c:\windows\system32\DivX.dll
2010-02-19 19:27 . 2010-02-19 19:27 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2010-02-19 19:27 . 2010-02-19 19:27 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2010-02-19 19:27 . 2010-02-19 19:27 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2010-02-19 19:27 . 2010-02-19 19:27 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2010-02-19 19:27 . 2010-02-19 19:27 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2007-05-13 13:01 . 2007-05-13 13:01 4 ----a-w- c:\programmi\WQLINGUEtl.txt
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"TOSCDSPD"="c:\programmi\TOSHIBA\TOSCDSPD\toscdspd .exe" [2003-09-15 65536]
"Google Update"="c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" [2010-03-18 136176]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"CFSServ.exe"="CFSServ.exe -NoClient" [X]
"ATIModeChange"="Ati2mdxx.exe" [2001-09-04 28672]
"ATIPTA"="c:\programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-03-09 335872]
"SynTPLpr"="c:\programmi\Synaptics\SynTP\SynTPLpr. exe" [2004-04-22 98304]
"SynTPEnh"="c:\programmi\Synaptics\SynTP\SynTPEnh. exe" [2004-04-22 507904]
"AGRSMMSG"="AGRSMMSG.exe" [2004-02-20 88363]
"THotkey"="c:\programmi\Toshiba\Toshiba Applet\thotkey.exe" [2004-08-16 430080]
"TPSMain"="TPSMain.exe" [2004-08-12 266240]
"NDSTray.exe"="NDSTray.exe" [BU]
"SmoothView"="c:\programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2004-04-30 118784]
"PadTouch"="c:\programmi\TOSHIBA\PadTouch\PadExe.e xe" [2004-02-12 1019904]
"TFncKy"="TFncKy.exe" [BU]
"ccApp"="c:\programmi\File comuni\Symantec Shared\ccApp.exe" [2004-02-04 70760]
"dla"="c:\windows\system32\dla\tfswctrl.exe" [2004-07-20 122939]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2005-12-01 77824]
"Acrobat Assistant 7.0"="c:\programmi\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2004-12-14 483328]
"DivXUpdate"="c:\programmi\DivX\DivX Update\DivXUpdate.exe" [2010-03-05 1135912]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2010-02-18 248040]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-03-19 12:04 12464 ----a-w- c:\windows\system32\avgrsstx.dll
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\AVG\\AVG9\\avgupd.exe"=
"c:\\Programmi\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List]
"8085:TCP"= 8085:TCP:MyOKOPort
S0 atiide;atiide;c:\windows\system32\DRIVERS\atiide.s ys [2004-04-14 5632]
S1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2010-03-19 216200]
S1 AvgTdiX;AVG Free Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [2010-03-19 242696]
S2 avg9wd;AVG Free WatchDog;c:\programmi\AVG\AVG9\avgwdsvc.exe [2010-03-19 308064]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
termsvc REG_MULTI_SZ swoko
.
Contenuto della cartella 'Scheduled Tasks'
2010-04-10 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-874478802-3831814246-985171651-1006Core.job
- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2010-03-18 18:01]
2010-04-11 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-874478802-3831814246-985171651-1006UA.job
- c:\documents and settings\moroni andrea\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2010-03-18 18:01]
2005-02-19 c:\windows\Tasks\Promemoria registrazione 1.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-31 10:00]
2005-02-12 c:\windows\Tasks\Promemoria registrazione 2.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-31 10:00]
2005-03-05 c:\windows\Tasks\Promemoria registrazione 3.job
- c:\windows\system32\OOBE\oobebaln.exe [2004-08-31 10:00]
2005-02-19 c:\windows\Tasks\Symantec NetDetect.job
- c:\programmi\Symantec\LiveUpdate\NDETECT.EXE [2004-09-01 13:19]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.repubblica.it/
IE: Converti destinazione link in Adobe PDF - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti destinazione link in file PDF esistente - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti i link selezionati in Adobe PDF - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Converti i link selezionati in file PDF esistente - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Converti in Adobe PDF - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti nel file PDF esistente - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Converti selezione in Adobe PDF - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Converti selezione in file PDF esistente - c:\programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Trusted Zone: 1
Trusted Zone: archiviosex.net\www
Trusted Zone: otherchance.com\www
Trusted Zone: redfunny.com\www
Trusted Zone: sgrunt.biz\www
Trusted Zone: superspots.biz\www
Trusted Zone: xbeta69.com\www
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
HKLM-Run-9xadiras - 9xadiras.exe
************************************************** ************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-04-11 17:18
Windows 5.1.2600 Service Pack 2 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
************************************************** ************************
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
- - - - - - - > 'winlogon.exe'(636)
c:\windows\system32\Ati2evxx.dll
- - - - - - - > 'explorer.exe'(4024)
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\msi.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
c:\windows\system32\TPwrCfg.DLL
c:\windows\system32\TPwrReg.dll
c:\windows\system32\TPSTrace.DLL
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\ACS.exe
c:\programmi\File comuni\Symantec Shared\ccSetMgr.exe
c:\programmi\AVG\AVG9\avgchsvx.exe
c:\programmi\AVG\AVG9\avgrsx.exe
c:\programmi\AVG\AVG9\avgcsrvx.exe
c:\programmi\File comuni\Symantec Shared\ccEvtMgr.exe
c:\windows\system32\Ati2evxx.exe
c:\programmi\File comuni\Symantec Shared\ccProxy.exe
c:\programmi\TOSHIBA\ConfigFree\CFSvcs.exe
c:\windows\system32\DVDRAMSV.exe
c:\programmi\Java\jre6\bin\jqs.exe
c:\programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\programmi\AVG\AVG9\avgnsx.exe
c:\programmi\File comuni\Symantec Shared\Security Center\SymWSC.exe
c:\windows\system32\wscntfy.exe
c:\windows\AGRSMMSG.exe
c:\windows\system32\TPSMain.exe
c:\programmi\TOSHIBA\ConfigFree\NDSTray.exe
c:\programmi\TOSHIBA\TOSHIBA Controls\TFncKy.exe
c:\windows\system32\TPSBattM.exe
c:\programmi\ADSL\StarModem ADSL USB MODEM\dslmon.exe
c:\windows\system32\RAMASST.exe
c:\windows\system32\msiexec.exe
.
************************************************** ************************
.
Ora fine scansione: 2010-04-11 17:21:06 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2010-04-11 15:20
Pre-Run: 20.634.488.832 byte disponibili
Post-Run: 20.545.449.984 byte disponibili
- - End Of File - - 0215E1D2662B53D0C172C1ACFDD03612
Permessi di invio
Rispondi quotando