R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about :blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\mtzxk.dll/sp.html#29126
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {815F7C5F-448E-A479-1D2A-285401DC8A31} - C:\WINDOWS\SYSTEM\SYSEJ.DLL (file missing)
O4 - HKLM\..\Run: [ControlPanel] C:\WINDOWS\SYSTEM\host32.exe internat.dll,LoadKeyboardProfile
O4 - HKLM\..\Run: [twetehmcz] C:\WINDOWS\SYSTEM\qusnac.exe
O4 - HKLM\..\Run: [EnergyPlugIn] C:\Programmi\EnergyPlugIn\EnergyPlugin.exe
O4 - HKLM\..\Run: [Windows Update AutoUpdate Client] C:\WINDOWS\SYSTEM\winupd\wuauclt.exe (spero di non sbagliarmi con questa: si trova in una directory errata!)
O4 - HKLM\..\RunServices: [NTNM.EXE] C:\WINDOWS\NTNM.EXE
O15 - Trusted Zone: *.windupdates.com (HKLM)
O15 - Trusted Zone: *.skoobidoo.com (HKLM)
O15 - Trusted IP range: 67.19.185.246 (perchè una società di Dallas-TX dovrebbe essere trusted?)
O15 - ProtocolDefaults: 'http' protocol is in Trusted Zone, should be Internet Zone
O15 - ProtocolDefaults: 'https' protocol is in Trusted Zone, should be Internet Zone
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} -
http://deposito.hostance.net/dialer/1053611.exe
O16 - DPF: {FFFF0001-0001-101A-A3C9-08002B2F49FC} -
http://download.energyfactor.com/di...ivex_575_it.exe
O21 - SSODL: KTxGjxXdQuYPpRs - {2B7A10EB-81D0-BA41-8AF5-B6C65F530B47} - C:\WINDOWS\SYSTEM\ahuno.dll (file missing)