Disco rigido anarchico

[R16]

Salve.

del file in prefetch non so nulla;

La cartella prefetch serve per memorizzare i programmi usati dall'utente, per poi velocizzarli in caso di richiamo.
Puoi anche svuotarla tale cartella. (non eliminarla)

l'altro file, quello in cartella Windows\erdnt

ERDNT è un backup dell'Editor del registro.
Sconsiglio la sua eliminazione. (potrebbe servire in futuro, in caso di problemi con il registro.)

Per il file wuauclt.exe (aggiornamenti di Windows Update) bisognerebbe vedere se è corrotto, o danneggiato.
Puoi fare questa scansione: (con gli aggiornamenti di Windows Update ATTIVI)
scarica Scanner Servizio Farbar sul desktop :
http://download.bleepingcomputer.com/farbar/FSS.exe
Metti un segno di spunta in tutte le caselle sul lato sinistro.
Clicca su "Scan".
Si creerà un log (FSS.txt) nella stessa directory in cui viene eseguito lo strumento.
Posta il log.

[Fortebraccio]

Farbar Service Scanner Version: 20-02-2013
Ran by xxxxx (administrator) on 20-02-2013 at 22:23:00
Running from "C:\download2\Farbar_scanner"
Microsoft Windows XP Service Pack 3 (X86)
Boot Mode: Normal
************************************************** **************

Internet Services:
============
Dnscache Service is not running. Checking service configuration:
The start type of Dnscache service is set to Disabled. The default start type is Auto.
The ImagePath of Dnscache service is OK.
The ServiceDll of Dnscache service is OK.


Connection Status:
==============
Localhost is accessible.
LAN connected.
Attempt to access Google IP returned error. Google IP is unreachable
Attempt to access Google.com returned error: Other errors
Attempt to access Yahoo IP returned error. Yahoo IP is unreachable
Attempt to access Yahoo.com returned error: Other errors


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Disabled Policy:
========================


Security Center:
============

Windows Update:
============

Windows Autoupdate Disabled Policy:
============================


File Check:
========
C:\WINDOWS\system32\dhcpcsvc.dll
[2008-04-14 13:00] - [2008-04-14 13:00] - 0126976 ____A (Microsoft Corporation) 699EE7F752A25180AEB92C3A0EAEE440

C:\WINDOWS\system32\Drivers\afd.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\netbt.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\tcpip.sys => MD5 is legit
C:\WINDOWS\system32\Drivers\ipsec.sys => MD5 is legit
C:\WINDOWS\system32\dnsrslvr.dll
[2008-04-14 13:00] - [2009-04-20 18:18] - 0045568 ____A (Microsoft Corporation) B7A1162B1A26DF7B60D5D9500006096C

C:\WINDOWS\system32\ipnathlp.dll
[2008-04-14 13:00] - [2008-04-14 13:00] - 0332288 ____A (Microsoft Corporation) 152C0555925DFE028E3148FD215146BB

C:\WINDOWS\system32\netman.dll
[2008-04-14 13:00] - [2008-04-14 13:00] - 0198144 ____A (Microsoft Corporation) 02815B70FC4CA8611A926176F1C39FC2

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2003-05-09 11:36] - [2008-04-14 03:13] - 0145408 ____A (Microsoft Corporation) 40911E98D0F1CBB1015F2101982F1DDF

C:\WINDOWS\system32\srsvc.dll
[2003-05-09 11:38] - [2008-04-14 03:13] - 0171520 ____A (Microsoft Corporation) B3E3DA70A7A76E69B872DE3D06D32C19

C:\WINDOWS\system32\Drivers\sr.sys
[2003-05-09 11:38] - [2008-04-14 02:56] - 0073472 ____A (Microsoft Corporation) 618718CAE288BF7CBD8FCBAB2577D932

C:\WINDOWS\system32\wscsvc.dll
[2008-04-14 13:00] - [2008-04-14 13:00] - 0080896 ____A (Microsoft Corporation) 926D921C93CFF1E19EF4DE3E4C8368CA

C:\WINDOWS\system32\wbem\WMIsvc.dll
[2003-05-09 11:36] - [2008-04-14 03:13] - 0145408 ____A (Microsoft Corporation) 40911E98D0F1CBB1015F2101982F1DDF

C:\WINDOWS\system32\wuauserv.dll
[2003-05-09 11:36] - [2008-04-14 03:13] - 0006656 ____A (Microsoft Corporation) CC48415E6C7CBAA441A3D6A6DCCBCFA6

C:\WINDOWS\system32\qmgr.dll
[2002-01-22 14:37] - [2008-04-14 03:13] - 0409088 ____A (Microsoft Corporation) 48C4763A9C8990FB48B73445BEB15D6A

C:\WINDOWS\system32\es.dll
[2008-04-14 13:00] - [2008-07-07 21:27] - 0253952 ____A (Microsoft Corporation) 8360CB9756E598A5C6214EACFB3677C3

C:\WINDOWS\system32\cryptsvc.dll
[2008-04-14 13:00] - [2008-04-14 13:00] - 0062464 ____A (Microsoft Corporation) B6FCBB157E9C8ABDCA4134C535535A8B

C:\WINDOWS\system32\svchost.exe
[2008-04-14 13:00] - [2008-04-14 13:00] - 0014336 ____A (Microsoft Corporation) BB8363ABEC09AA2F9B363484E282117C

C:\WINDOWS\system32\rpcss.dll
[2008-04-14 13:00] - [2009-02-09 11:51] - 0401408 ____A (Microsoft Corporation) BC4E0226341AAEC1222336B3AED86BAB

C:\WINDOWS\system32\services.exe
[2008-04-14 13:00] - [2009-02-09 12:22] - 0111104 ____A (Microsoft Corporation) 26845F272435302E0F3322E660A24F7D


Extra List:
=======
epfwtdir(9) Gpc(3) IPSec(5) irda(10) NetBT(6) PSched(7) RFCOMM(11) Tcpip(4)
0x0B0000000500000001000000020000000300000004000000 060000000700000008000000090000000A0000000B000000
IpSec Tag value is correct.

**** End of log ****

[R16]

Salve.
Consiglio queste 2 scansioni:
1 )Scarica Adwcleaner sul desktop : (serve per eliminare adware e toolbar)
http://general-changelog-team.fr/fr/...e/2-adwcleaner
Clicca sul pulsante "Elimina ".
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà , e uscirà il log con le eliminazioni.
Postalo qui.

2 )Scarica OTL, e salvalo sul desktop : (non elimina nulla per il momento, serve per avere un'idea sullo stato del pc)

http://oldtimer.geekstogo.com/OTL.exe

Clicca sull'icona di OTL che trovi sul tuo desktop .

Metti la spunta su SCAN ALL USERS .

Sotto output , metti la spunta : minimal output

Clicca sulla freccettina di File Age e seleziona 60 Days

Metti la spunta a LOP Check e Purity Check .

Clicca su RUN SCAN
Lascia fare la scansione senza interferire.

Al termine della scansione trovi 2 log sul desktop. OTL.txt ed Extras.txt , salvali e caricali su Wikisend , per postarli sul forum.