Driver irql not less...?!?

[pilorum]

ragazzi da qualche tempo mi si blocca il pc comparendo una scritta del tipo:
DRIVER IRQL NOT LESS OR EQUAL
adm 8820.sys penso sia il file a cui fa riferimento ma non sono riuscito anche cercando nel web a capire di cosa si tratta qualcuno sa essermi di aiuto?!!?

[ste_95]

Dalla modalità provvisoria, Scarica ComboFix , salvandolo sul desktop con un nome di fantasia, ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto inserendolo tra i tag LOG, in questo modo:

Codice: Seleziona tutto

[LOG]qui va inserito il log[/LOG]

[pilorum]

non riesco a inserirlo tra i tuoi LOG come devo fare

[ste_95]

Va bene, postalo con un normale Copia-Incolla.

[pilorum]

ComboFix 09-08-10.06 - Andrea 14/08/2009 18.48.35.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.2047.1505 [GMT 2:00]
Eseguito da: c:\documents and settings\Andrea\Desktop\ComboFix.exe
AV: Doctor Web Anti-Virus *On-access scanning enabled* (Updated) {3454C8F1-ECBC-4180-A6F4-04632FBA762B}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Andrea\Dati applicazioni\inst.exe
c:\documents and settings\Andrea\Impostazioni locali\Dati applicazioni\fdouffcu.dat
c:\documents and settings\Andrea\Impostazioni locali\Dati applicazioni\fdouffcu_nav.dat
c:\documents and settings\Andrea\Impostazioni locali\Dati applicazioni\fdouffcu_navps.dat
c:\windows\Installer\22e2fe.msi
c:\windows\Installer\2733e.msi
c:\windows\Installer\382b0a.msi
c:\windows\Installer\382b0f.msi
c:\windows\Installer\382b14.msi
c:\windows\Installer\382b19.msi
c:\windows\Installer\382b23.msi
c:\windows\Installer\382b28.msi
c:\windows\Installer\382b3c.msi
c:\windows\Installer\382b4f.msi
c:\windows\Installer\382b54.msi
c:\windows\Installer\382b59.msi
c:\windows\Installer\382b5e.msi
c:\windows\Installer\382b63.msi
c:\windows\Installer\382b68.msi
c:\windows\Installer\382b6d.msi
c:\windows\Installer\382b72.msi
c:\windows\Installer\382b77.msi
c:\windows\Installer\382b7c.msi
c:\windows\Installer\382b81.msi
c:\windows\Installer\382b8b.msi
c:\windows\Installer\382b90.msi
c:\windows\Installer\382b95.msi
c:\windows\Installer\8951f2.msi
c:\windows\Installer\8952c4.msi
c:\windows\Installer\c898f.msi
c:\windows\Installer\c8999.msi
c:\windows\Installer\c899e.msi
c:\windows\Installer\c89a4.msi
c:\windows\Installer\c89aa.msi
c:\windows\Installer\c89af.msi
c:\windows\Installer\c89b4.msi
c:\windows\Installer\c89b9.msi
c:\windows\Installer\d9859.msp
c:\windows\Installer\d985a.msp
c:\windows\Installer\d985b.msp
c:\windows\Installer\d985c.msp
c:\windows\Installer\d985d.msp
c:\windows\Installer\d985e.msp
c:\windows\Installer\d985f.msp
c:\windows\Installer\d9860.msp
c:\windows\Installer\d9861.msp
c:\windows\system32\dumphive.exe
c:\windows\system32\tmp.reg
c:\windows\system32\tmp38.tmp
c:\windows\system32\VCCLSID.exe
c:\windows\system32\w32apiw.dll
c:\windows\system32\WS2Fix.exe

.
((((((((((((((((((((((((( Files Creati Da 2009-07-14 al 2009-08-14 )))))))))))))))))))))))))))))))))))
.

2009-08-14 14:32 . 2009-08-14 14:32 -------- d-----w- c:\documents and settings\Andrea\Dati applicazioni\Ubisoft
2009-08-14 14:31 . 2009-08-14 14:31 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Ubisoft
2009-08-14 14:15 . 2009-08-14 14:15 -------- d-----w- c:\programmi\Ubisoft
2009-08-13 10:24 . 2009-07-10 13:26 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-08-11 08:50 . 2006-11-20 13:34 50432 ----a-w- c:\windows\system32\drivers\hcdriver.sys
2009-07-20 19:06 . 2009-08-14 11:46 -------- d-----w- c:\documents and settings\Andrea\Dati applicazioni\vlc
2009-07-17 19:01 . 2009-07-17 19:01 58880 -c----w- c:\windows\system32\dllcache\atl.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-14 16:20 . 2001-08-31 12:00 72130 ----a-w- c:\windows\system32\perfc010.dat
2009-08-14 16:20 . 2001-08-31 12:00 443900 ----a-w- c:\windows\system32\perfh010.dat
2009-08-14 16:14 . 2009-02-13 08:40 -------- d-----w- c:\programmi\DrWeb
2009-08-14 14:15 . 2007-11-02 20:13 -------- d--h--w- c:\programmi\InstallShield Installation Information
2009-08-13 12:04 . 2009-03-07 12:41 -------- d-----w- c:\documents and settings\Andrea\Dati applicazioni\dvdcss
2009-08-11 18:10 . 2008-11-12 20:46 29336 ----a-w- c:\documents and settings\Andrea\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-08-09 11:02 . 2009-06-06 17:30 -------- d-----w- c:\documents and settings\Andrea\Dati applicazioni\U3
2009-08-05 08:59 . 2007-11-02 20:08 205312 ----a-w- c:\windows\system32\mswebdvd.dll
2009-07-17 19:01 . 2001-08-31 12:00 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-12 10:21 . 2004-08-19 22:39 233472 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-02 19:21 . 2009-07-02 19:21 -------- d-----w- c:\programmi\Utherverse Digital Inc
2009-06-29 15:55 . 2001-08-31 12:00 827392 ----a-w- c:\windows\system32\wininet.dll
2009-06-29 15:55 . 2004-08-19 22:39 78336 ----a-w- c:\windows\system32\ieencode.dll
2009-06-29 15:54 . 2001-08-31 12:00 17408 ------w- c:\windows\system32\corpol.dll
2009-06-27 09:48 . 2009-06-27 09:48 -------- d-----w- c:\programmi\SureThing
2009-06-27 09:48 . 2009-06-27 09:48 -------- d-----w- c:\programmi\File comuni\SureThing Shared
2009-06-26 19:46 . 2009-06-26 19:46 1078 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_4ae13d6c.exe
2009-06-26 19:46 . 2009-06-26 19:46 1078 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_2cd672ae.exe
2009-06-26 19:46 . 2009-06-26 19:46 1078 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_294823.exe
2009-06-26 19:46 . 2009-06-26 19:46 1078 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{0F9196C6-58B4-445B-B56E-B1200FECC151}\_18be6784.exe
2009-06-26 19:46 . 2009-06-26 19:46 -------- d-----w- c:\programmi\Microsoft Bootvis
2009-06-26 19:23 . 2009-06-26 19:21 -------- d-----w- c:\programmi\TuneXP
2009-06-26 19:21 . 2009-06-26 19:21 720896 ----a-w- c:\windows\iun6002.exe
2009-06-22 17:23 . 2009-06-22 17:23 -------- d-----w- c:\programmi\LightScribe
2009-06-22 17:07 . 2009-06-22 17:03 -------- d-----w- c:\programmi\File comuni\Droppix
2009-06-22 17:04 . 2009-03-31 18:10 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Droppix
2009-06-20 10:04 . 2009-06-20 10:04 -------- d-----w- c:\programmi\CDBurnerXP
2009-06-20 09:53 . 2009-06-20 09:53 -------- d-----w- c:\programmi\Alcohol Soft
2009-06-20 09:50 . 2009-06-20 09:50 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-06-20 09:40 . 2007-12-25 11:21 -------- d-----w- c:\programmi\File comuni\LightScribe
2009-06-17 16:06 . 2009-06-17 16:06 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Innovative Solutions
2009-06-16 14:36 . 2001-08-31 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-06-16 14:36 . 2001-08-31 12:00 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 10:43 . 2001-08-31 12:00 78336 ----a-w- c:\windows\system32\telnet.exe
2009-06-15 10:43 . 2001-08-31 12:00 82432 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-10 14:13 . 2001-08-31 12:00 85504 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 07:19 . 2007-11-02 19:32 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-06-10 06:14 . 2001-08-31 12:00 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-03 19:09 . 2007-11-02 20:08 1296384 ----a-w- c:\windows\system32\quartz.dll
2009-05-23 17:22 . 2009-05-23 17:22 10134 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}\ARPPRODUCTICON.exe
2009-05-23 17:21 . 2009-05-23 17:21 10134 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}\ARPPRODUCTICON.exe
2009-05-23 17:20 . 2009-05-23 17:20 10134 ----a-r- c:\documents and settings\Andrea\Dati applicazioni\Microsoft\Installer\{56918C0C-0D87-4CA6-92BF-4975A43AC719}\ARPPRODUCTICON.exe
2008-05-17 10:03 . 2008-05-17 10:03 2 --shatr- c:\windows\winstart.bat
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EPSON Stylus D88 Series"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIABE.EXE" [2005-01-27 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2008-02-10 385024]
"SpIDerAgent"="c:\programmi\DrWeb\SpIDerAgent.exe" [2009-06-15 447728]
"SpIDerMail"="c:\programmi\DrWeb\spiderml.exe" [2009-07-02 644336]
"SpIDerNT"="c:\progra~1\DrWeb\spiderui.exe" [2009-04-29 251144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-26 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-26 13729792]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-03-09 148888]
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" - c:\windows\KHALMNPR.Exe [2007-04-11 56080]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\Andrea\Menu Avvio\Programmi\Esecuzione automatica\
Registration Assassin's Creed.LNK - c:\programmi\Ubisoft\Assassin's Creed\Register\RegistrationReminder.exe [2009-8-14 967304]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WdfLoadGroup]
@=""

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Alice ti aiuta.lnk]
backup=c:\windows\pss\Alice ti aiuta.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Logitech SetPoint.lnk]
backup=c:\windows\pss\Logitech SetPoint.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Andrea^Menu Avvio^Programmi^Esecuzione automatica^Registrazione prodotti Logitech.lnk]
backup=c:\windows\pss\Registrazione prodotti Logitech.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Andrea^Menu Avvio^Programmi^Esecuzione automatica^Secunia PSI (RC4).lnk]
backup=c:\windows\pss\Secunia PSI (RC4).lnkStartup

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"c:\\Programmi\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx9.exe"=
"c:\\Programmi\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Dx10.exe"=
"c:\\Programmi\\Ubisoft\\Assassin's Creed\\AssassinsCreed_Launcher.exe"=

P2 SPIDERNT;SpIDer Guard for Windows;c:\progra~1\DrWeb\spidernt.exe [09/12/2008 14.28.26 251144]
R0 DwProt;DrWeb Protection;c:\windows\system32\drivers\dwprot.sys [13/02/2009 10.43.06 101496]
R2 DrWebEngine;Dr.Web Scanning Engine (DrWebEngine);c:\programmi\File comuni\Doctor Web\Scanning Engine\dwengine.exe [21/01/2009 16.09.18 886072]
R2 Network WanMiniport First Position;Network WanMiniport First Position;c:\programmi\Telecom Italia\WanMiniport1st\srvany.exe [14/05/2009 19.51.20 8192]
R2 SPIDER;SpIDer Guard File System Monitor;c:\progra~1\DrWeb\spider.sys [09/12/2008 14.28.24 394184]
R2 TomTomHOMEService;TomTomHOMEService;c:\programmi\TomTom HOME 2\TomTomHOMEService.exe [03/06/2009 14.46.36 92008]
R3 hcdriver;Intel EHCI Compliance Test Tool Device Driver;c:\windows\system32\drivers\hcdriver.sys [11/08/2009 10.50.47 50432]
S0 Partizan;Partizan;c:\windows\system32\drivers\Partizan.sys c:\windows\system32\drivers\Partizan.sys
S1 SASKUTIL;SASKUTIL;\??\c:\programmi\SUPERAntiSpyware\SASKUTIL.sys c:\programmi\SUPERAntiSpyware\SASKUTIL.sys
S3 ADM851X;IDF Alice Gate 2 plus USB;c:\windows\system32\DRIVERS\ADM851X.SYS c:\windows\system32\DRIVERS\ADM851X.SYS
S3 GPU-Z;GPU-Z;\??\c:\docume~1\Andrea\IMPOST~1\Temp\GPU-Z.sys c:\docume~1\Andrea\IMPOST~1\Temp\GPU-Z.sys
S3 MEMSWEEP2;MEMSWEEP2;\??\c:\windows\system32\10F.tmp c:\windows\system32\10F.tmp
S3 RegGuard;RegGuard;c:\windows\system32\drivers\regguard.sys [17/05/2008 12.03.54 25773]
S3 ultradfg;ultradfg;c:\windows\system32\drivers\ultradfg.sys [02/10/2008 14.54.06 24576]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\programmi\File comuni\LightScribe\LSRunOnce.exe"
.
Contenuto della cartella 'Scheduled Tasks'

2009-02-13 c:\windows\Tasks\Dr.Web Daily scan.job
- c:\programmi\DrWeb\DrWeb32w.exe [2009-02-09 11:28]

2009-08-14 c:\windows\Tasks\Dr.Web Update.job
- c:\programmi\DrWeb\DrWebUpW.exe [2009-02-09 11:29]

2009-05-29 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2009-03-31 20:18]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
uDefault_Search_URL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
mStart Page = hxxp://it.yahoo.com
mSearch Bar = 687474703a2f2f7777772e676f6f676c652e636f6d2f
mSearchMigratedDefaultURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
uInternet Settings,ProxyServer = 127.0.0.1:8088
uInternet Settings,ProxyOverride = 127.0.0.1;192.168.1.1;<local>
mSearchURL = 687474703a2f2f7777772e676f6f676c652e636f6d2f
LSP: c:\programmi\DrWeb\drwebsp.dll
DPF: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
FF - ProfilePath - c:\documents and settings\Andrea\Dati applicazioni\Mozilla\Firefox\Profiles\1xg51bg7.default\

---- FIREFOX POLICIES ----
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("media.cache_size", 51200);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("media.ogg.enabled", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("media.wave.enabled", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("content.sink.event_probe_rate", 3);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("layout.css.dpi", -1);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("layout.css.devPixelsPerPx", -1);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("dom.max_chrome_script_run_time", 0);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("geo.enabled", true);
c:\programmi\Mozilla Firefox\greprefs\security-prefs.js - pref("security.remember_cert_checkbox_default_setting", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr", "moz35");
c:\programmi\Mozilla Firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-cjkt", "moz35");
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.history", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.formdata", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.passwords", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.downloads", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cookies", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.cache", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.sessions", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.offlineApps", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.clearOnShutdown.siteSettings", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.history", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.formdata", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.passwords", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.downloads", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cookies", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.cache", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.sessions", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.offlineApps", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.cpd.siteSettings", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("privacy.sanitize.migrateFx3Prefs", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-08-14 18:51
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MEMSWEEP2]
"ImagePath"="\??\c:\windows\system32\10F.tmp"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-1454471165-1993962763-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:6e,a8,ed,11,e6,66,9e,c3,e6,da,93,1f,a6,56,14,2b,c6,aa,05,88,5f,
45,ab,84,2c,5a,24,dc,1b,f6,6c,8e,48,b6,e2,87,56,bf,73,ce,fa,42,92,c1,02,f9,\
"rkeysecu"=hex:31,49,d7,e2,10,45,57,43,89,4a,3c,f3,9d,df,44,c6

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IE40.BrowseUI\RegBackup]
@DACL=(02 0000)
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'lsass.exe'(568)
c:\programmi\DrWeb\drwebsp.dll
.
Ora fine scansione: 2009-08-14 18.54.19
ComboFix-quarantined-files.txt 2009-08-14 16:54

Pre-Run: 7.307.882.496 byte disponibili
Post-Run: 7.172.255.744 byte disponibili

WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn/

Current=3 Default=3 Failed=2 LastKnownGood=4 Sets=1,2,3,4
280 --- E O F --- 2009-08-13 12:25

[ste_95]

Combofix ha cancellato un po' di file nocivi. Aspetta qualche giorno e vedi se il problema continua a persistere. Nel frattempo, carica su www.virustotal.com il seguente file:

2009-08-11 08:50 . 2006-11-20 13:34 50432 ----a-w- c:\windows\system32\drivers\hcdriver.sys

[pilorum]

credo di aver capito il problema dovuto all'installazione di un gioco.
il file adm8820.sys fa riferimento alla scheda audio aureal vortex 8820 wdm , ho provato a cercare i driver per aggiornarli ma senza risultato.
il fatto è che non risultano esserci problemi di incompatibilità, e si verifica solo dopo decine di minuti che mio fratello usa quel game.

[winman]

quindi è una Bsod o schermata blu : ci dovrebbero essere dei codici di riferiment nella schermata blu ; quei codici sono importanti perché ti permettono di risalire al tipo di problema !

ti consiglio il software blue screen view :

http://nirsoft.net/utils/blue_screen_view.html

forse potrebbe esserti utile !