eeepc NON VEDE più le reti wi-fi

[rippley]

Mi occorre aiuto per l' Eeepc 900 di mia figlia con XP che non "vede" più le reti wireless di casa...e dei vicini..
Il ricevitore è acceso , la periferica funziona corretamente ma non risultano reti senza fili nelle vicinanze, mentre l'altro pc "vede" le reti accese e si collega regolarmente ad internet.
Qualcuno sa darmi qualche consiglio? Grazie
rip.

[jordan air]

Prova a riconfigurare la connessione wireless. Questa guida può tornarti utile.

[Guya]

Hai Provato a premere il tasto "Fn" e contemporaneamente il simbolo grafico della wireless su "F2" ?

[rippley]

Prova a riconfigurare la connessione wireless. Questa guida può tornarti utile.

ho provato a riconfigurare a connessione wireless. In realtà l'eeepc non vede il mio router linksis perfettamente funzionante.
E' come se la rete senza fili non fosse accesa, ed invece lo è.
In realtà quando il netbok si avvia e windows compare sul desktop, si manifesta in basso il fumetto "reti senza fili rilevate. Sono rilevate più reti senza fili fare click con tasto dx per...etc"
Già questo è strano perché di norma non compare nulla e il pc si collega automaticamente alla rete casalinga. Per di più quando, adesso, clikki col destro compare la schermata delle reti senza fili, ma nessuna è rilevata ed il pc rimane disconnesso. (computerino in basso a dx con "X" rossa sopra).
Naturlamente lo stack wi-fi è accesso (luce blu sul pc accesa) anche se a dire il vero premendo il tasto "Fn" + "F2", la radio non si spegne (e riaccende) come dovrebbe.
Ho fatto anche uno scan approfondito per virus, risultato negativo.
Il problema della mancata connessione per maggiore completezza, si è verificato dopo connessione problematica del pc ad una rete wi-fi di un albergo. Probabile che io o mia figlia abbiamo per "forzare" quella connessione abbiamo cambiato qualche parametro... chissà

[Guya]

E' probabile che avete toccato qualche parametro del driver della wireless.

Dalle propietà hardware della scheda di rete senza fili, andare su Avanzate e controllare i seguenti parametri che siano:

802.11b Preamble = Long and Short
Map Registers = 256
Network Addres = vistato su Non presente
Power Save Mode = Normal
Scan valid Interval = 60

Controllare che il router sia anch'esso impostato sula frequenza Europa (canale 11)
Che la chiave di rete sia una WPA-PSK con una passkey preferibilmente composta da numeri senza lettere.

E la cosa più sconcertante che molti non fanno caso è:
CHE NON CI SIANO TELEFONI CORDLESS (sia la base che il telefono)
appiccicati al Router o nelle vicinanze del portatile.

Se non si sitema in questo modo, potrebbe esserci il file di registro di wincozz storto.
Usare un regcleaner per rimuovere eventuali voci non corrette e provare a reistallare
il driver.

Per finire...la sfiga vuole che... l'hardware c'è vine visto da wincozz ma è danneggiato elettronicamente.

[Guya]

C'è anche da dire ...dimenticavo che:

Se il router ha il servizio DHCP abilitato,
naturalmente la sheda wirless deve essere impostata per
ottenere automaticamente sia l'indirizzo IP sia l'indirizzo DNS.

[rippley]

C'è anche da dire ...dimenticavo che:

Se il router ha il servizio DHCP abilitato,
naturalmente la sheda wirless deve essere impostata per
ottenere automaticamente sia l'indirizzo IP sia l'indirizzo DNS.

ho controllate tutte le cose suggerite. Tutto risulta a posto. Staccato anche il codless (che peraltro mai prima aveva dato problemi) ma niente.
Come ci si accerta che la scheda sia impostata sia su l'IP che il DNS?
Ho speranza che in caso di formattazione tutto riprenda a funzionare o devo comprarmi una penna wi-fi?

[Guya]

Tasto destro sull'icona di Risorse di rete. Scegliere propietà.
Appaiono le icone della scheda di rete sia fissa che wirless.
Tasto destro sull'icona della wireless. Scegliere proprietà.
Andare sul protocollo TCP-IP e fare doppio click.
Impostare come descritto in precedenza...tutto automatico.

[Italtec]

prova a reinstallare i driver (aggiornarli anche)

per farlo usa l'altro pc e metti i driver su una penna

[rippley]

sul "famoso" eeepc di mia figlia ho trovato installato Messanger skinner che ho visto citato su MegaLab come programma "rinomato" come pericoloso.
Può essere stato questo programma a provocare il malfunzionamento?
In caso affermativo come posso rimuoverlo?
Ho avast home come antivirus e spybot come antimalaware
grazie!!

[Guya]

a questo punto mi chiedo come riesce ad accendersi sto coso.

[Amantide]

sul "famoso" eeepc di mia figlia ho trovato installato Messanger skinner che ho visto citato su MegaLab come programma "rinomato" come pericoloso.
Può essere stato questo programma a provocare il malfunzionamento?

Facilmente.

Scarica ComboFix , salvandolo sul desktop con un nome di fantasia, ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto inserendolo tra i tag LOG, in questo modo:

Codice: Seleziona tutto

[LOG]qui va inserito il log[/LOG]

[rippley]

non riesco ad inviare il log....
acc....
clikkare su log e si vedono le due parentesi quadre..ma poi se trascino il file di log tra le 2 parentesi succede di tutto, help! thanks & sorry

[rippley]

ComboFix 09-03-10.03 - ADMIN 2009-03-11 14.23.45.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.510.243 [GMT 1:00]
Eseguito da: C:\Documents and Settings\ADMIN\Desktop\fixfix.exe
AV: avast! antivirus 4.8.1335 [VPS 090310-0] *On-access scanning enabled* (Updated)
* Creato nuovo punto di ripristino
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\ADMIN\Impostazioni locali\Dati applicazioni\mogue.dat
C:\Documents and Settings\ADMIN\Impostazioni locali\Dati applicazioni\mogue.exe
C:\Documents and Settings\ADMIN\Impostazioni locali\Dati applicazioni\mogue_nav.dat
C:\Documents and Settings\ADMIN\Impostazioni locali\Dati applicazioni\mogue_navps.dat
C:\WINDOWS\system\msvbvm60.dll

.
((((((((((((((((((((((((( Files Creati Da 2009-02-11 al 2009-03-11 )))))))))))))))))))))))))))))))))))
.

2009-03-11 07:30 . 2009-03-11 07:30 <DIR> d-------- C:\fsaua.data
2009-03-10 22:51 . 2009-03-11 00:07 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2009-03-02 21:54 . 2009-03-02 21:54 <DIR> d-------- C:\WINDOWS\system32\IOSUBSYS
2009-03-01 23:24 . 2009-03-01 23:24 <DIR> d-------- C:\Documents and Settings\ADMIN\Dati applicazioni\FunkyEmoticons
2009-03-01 23:23 . 2009-03-01 23:23 <DIR> d-------- C:\Programmi\FunkyEmoticons
2009-03-01 22:51 . 2009-03-01 22:51 <DIR> d--hs---- C:\Documents and Settings\ADMIN\IECompatCache
2009-03-01 22:50 . 2009-03-01 22:50 <DIR> d--hs---- C:\Documents and Settings\ADMIN\PrivacIE
2009-03-01 22:50 . 2009-03-01 22:50 <DIR> d--hs---- C:\Documents and Settings\ADMIN\IETldCache
2009-03-01 22:43 . 2009-03-01 22:43 <DIR> d-------- C:\WINDOWS\ie8updates
2009-03-01 22:40 . 2009-03-01 22:42 <DIR> d-------- C:\WINDOWS\system32\it-IT
2009-03-01 22:40 . 2009-03-01 22:43 <DIR> d--h-c--- C:\WINDOWS\ie8
2009-03-01 22:34 . 2009-01-11 06:00 79,360 -----c--- C:\WINDOWS\system32\dllcache\iecompat.dll
2009-02-19 23:20 . 2004-08-03 22:59 34,688 --a------ C:\WINDOWS\system32\drivers\lbrtfdc.sys
2009-02-19 23:20 . 2004-08-03 22:59 34,688 --a--c--- C:\WINDOWS\system32\dllcache\lbrtfdc.sys
2009-02-19 23:18 . 2004-08-03 22:59 20,480 --a------ C:\WINDOWS\system32\drivers\flpydisk.sys
2009-02-19 23:18 . 2004-08-03 22:59 20,480 --a--c--- C:\WINDOWS\system32\dllcache\flpydisk.sys
2009-02-19 23:18 . 2001-08-17 21:52 18,688 --a------ C:\WINDOWS\system32\drivers\cdaudio.sys
2009-02-19 23:18 . 2001-08-17 21:52 18,688 --a--c--- C:\WINDOWS\system32\dllcache\cdaudio.sys
2009-02-19 23:18 . 2004-08-03 23:00 8,192 --a------ C:\WINDOWS\system32\drivers\i2omgmt.sys
2009-02-19 23:18 . 2004-08-03 23:00 8,192 --a------ C:\WINDOWS\system32\drivers\changer.sys
2009-02-19 23:18 . 2004-08-03 23:00 8,192 --a--c--- C:\WINDOWS\system32\dllcache\i2omgmt.sys
2009-02-19 23:18 . 2004-08-03 23:00 8,192 --a--c--- C:\WINDOWS\system32\dllcache\changer.sys
2009-02-19 22:44 . 2009-02-19 22:44 <DIR> d-------- C:\Programmi\Microsoft Silverlight

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-02 20:53 --------- d-----w C:\Programmi\Google
2009-02-21 20:51 --------- d-----w C:\Programmi\eMule
2009-02-10 20:55 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Messenger Plus!
2009-02-10 20:29 52,864 -c--a-w C:\Documents and Settings\ADMIN\Dati applicazioni\GDIPFONTCACHEV1.DAT
2009-02-08 20:40 --------- d-----w C:\Programmi\Messenger Plus! Live
2009-02-06 17:52 49,504 ----a-w C:\WINDOWS\system32\sirenacm.dll
2009-02-02 22:12 --------- d-----w C:\Programmi\File comuni\Adobe
2009-02-02 22:08 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\NOS
2009-02-02 22:04 --------- d-----w C:\Programmi\NOS
2009-01-31 14:25 --------- d-----w C:\Programmi\iTunes
2009-01-31 14:25 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-01-31 14:24 --------- d-----w C:\Programmi\iPod
2009-01-31 14:24 --------- d-----w C:\Programmi\File comuni\Apple
2009-01-31 11:28 --------- d-----w C:\Programmi\QuickTime
2009-01-31 11:12 --------- d-----w C:\Programmi\Bonjour
2009-01-17 23:22 5,637,845 ----a-w C:\Programmi\youtubedownloader.exe
2009-01-17 23:22 --------- d-----w C:\Programmi\YouTube Downloader
2009-01-15 01:05 911,872 ----a-w C:\WINDOWS\system32\wininet.dll
2009-01-15 01:05 43,008 ----a-w C:\WINDOWS\system32\licmgr10.dll
2009-01-15 01:04 18,944 ----a-w C:\WINDOWS\system32\corpol.dll
2009-01-15 01:03 72,704 ----a-w C:\WINDOWS\system32\admparse.dll
2009-01-15 01:03 71,680 ----a-w C:\WINDOWS\system32\iesetup.dll
2009-01-15 01:03 420,352 ----a-w C:\WINDOWS\system32\vbscript.dll
2009-01-15 01:01 34,304 ----a-w C:\WINDOWS\system32\imgutil.dll
2009-01-15 01:00 48,128 ----a-w C:\WINDOWS\system32\mshtmler.dll
2009-01-15 01:00 45,568 ----a-w C:\WINDOWS\system32\mshta.exe
2009-01-15 00:50 156,160 ----a-w C:\WINDOWS\system32\msls31.dll
2009-01-05 22:33 3,751,995 ----a-w C:\WINDOWS\system32\GPhotos.scr
2008-12-20 12:54 2,870 ----a-w C:\Programmi\lwadelegation.srf
2008-12-17 20:36 1,159,496 ----a-w C:\Programmi\wlsetup-custom.exe
2008-12-12 10:18 87,336 ----a-w C:\WINDOWS\system32\dns-sd.exe
2008-12-12 10:11 61,440 ----a-w C:\WINDOWS\system32\dnssd.dll
2008-10-19 16:58 1,675,808 ----a-w C:\Programmi\registryboosterfe.exe
2008-10-17 13:13 214,064 ----a-w C:\Programmi\A-Patch140rc2b31_WLM.zip
2008-10-12 11:54 726,384 ----a-w C:\Programmi\wpsetup.exe
2008-10-09 19:17 3,231,826 ----a-w C:\Programmi\eMule0.49b-Installer1.exe
2008-08-30 16:25 39,185,104 ----a-w C:\Programmi\Ranch_Rush-setup.exe
2008-08-05 20:51 18,878,872 ----a-w C:\Programmi\TomTomHOME2winlatest.exe
2008-08-05 12:15 26,762,264 ----a-w C:\Programmi\setupita.exe
2008-07-28 19:25 1,495,112 ----a-w C:\Programmi\install_flash_player.exe
2008-07-26 21:43 19,442,848 ----a-w C:\Programmi\RingToneMediaStudio2_ENU.exe
2008-07-03 20:10 2,785,559 ----a-w C:\Programmi\WindowsLive_Messenger_PPC.cab
2008-07-03 20:10 18,103,296 ----a-w C:\Programmi\wlm_9.msi
2008-07-03 20:06 3,017 ----a-w C:\Programmi\wlm_9.msi.torrent
2008-07-03 19:30 112,192 ----a-w C:\Programmi\install_NOD32_.exe
2008-06-28 19:52 3,309,160 ----a-w C:\Programmi\eMule0.49a-Installer1.exe
2008-06-21 20:06 448,250 ----a-w C:\Programmi\Google_Earth_CZXD.exe
2008-06-21 16:01 1,295,656 ----a-w C:\Programmi\WRar380b2it.exe
2008-06-18 20:12 8,926,832 ----a-w C:\Programmi\Opera_950_in_Setup.exe
2008-05-31 12:02 62,121,672 ----a-w C:\Programmi\EmoDio_Setup.exe
2008-05-31 10:45 13,052,096 ----a-w C:\Programmi\nentitst.exe
2008-04-27 20:22 18,668 ----a-w C:\Programmi\[PSP]God_of_War_Chains_of_Olympus[ESP-RIP][ESPALPSP.com].rar.torrent
2008-04-27 20:05 11,735 ----a-w C:\Programmi\1343370.htm
2008-04-27 20:03 5,438,448 ----a-w C:\Programmi\BitComet_1_00.exe
2008-04-24 19:36 6,104,632 ----a-w C:\Programmi\picasaweb-current-setup.exe
2008-04-24 13:03 61,832,392 ----a-w C:\Programmi\20071220132158937_MediaStudio5_5212.exe
2008-04-21 18:01 19,521,864 ----a-w C:\Programmi\SafariSetup.exe
2008-04-21 13:01 6,666,408 ----a-w C:\Programmi\Opera_9.27_International_Setup.exe
2008-04-19 22:15 2,751,368 ----a-w C:\Programmi\ccsetup206.exe
2008-04-19 21:10 9,722,720 ----a-w C:\Programmi\spybotsd152.exe
2008-04-18 19:22 1,252,158 ----a-w C:\Programmi\wrar371it.zip
2008-04-07 09:44 2,567,880 ----a-w C:\Programmi\eac-0.99pb4.exe
2008-03-30 09:47 1,256,519 ----a-w C:\Programmi\wrar371it.exe
2008-03-29 14:38 1,488,011 ----a-w C:\Programmi\FLVPlayer.exe
2008-03-27 20:50 1,156,096 ----a-w C:\Programmi\iview410_setup.exe
2008-03-22 08:56 2,402,320 ----a-w C:\Programmi\WLinstaller.exe
2007-04-01 16:37 44,795 ----a-w C:\Programmi\_setup.xml
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2006-03-02 13:00 15360]
"SpybotSD TeaTimer"="C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe" [2008-09-16 12:16 1833296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-04-11 23:13 5406720]
"SonyPowerCfg"="C:\Programmi\Sony\VAIO Power Management\SPMgr.exe" [2004-10-21 19:12 184320]
"RemoteControl"="C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 20:24 32768]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 22:08 81000]
"LXSUPMON"="C:\WINDOWS\system32\LXSUPMON.EXE" [2002-01-28 13:48 885760]
"WinPatrol"="C:\Programmi\BillP Studios\WinPatrol\winpatrol.exe" [2008-10-09 16:52 333120]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2009-01-05 16:18 413696]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 02:38 34672]
"funkyemoticons"="C:\Programmi\FunkyEmoticons\FunkyEmoticons.exe" [2009-02-25 16:33 278528]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2006-03-02 13:00 110592 C:\WINDOWS\system32\bthprops.cpl]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableClock"= 0 (0x0)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoMultiIE"= 0 (0x0)
"LWA"= 0 (0x0)
"LWB"= 0 (0x0)
"LWC"= 0 (0x0)
"LWD"= 0 (0x0)
"LWE"= 0 (0x0)
"LWF"= 0 (0x0)
"LWG"= 0 (0x0)
"LWH"= 0 (0x0)
"LWI"= 0 (0x0)
"LWJ"= 0 (0x0)
"LWK"= 0 (0x0)
"LWL"= 0 (0x0)
"LWM"= 0 (0x0)
"LWN"= 0 (0x0)
"LWO"= 0 (0x0)
"LWP"= 0 (0x0)
"LWQ"= 0 (0x0)
"LWR"= 0 (0x0)
"LWS"= 0 (0x0)
"LWT"= 0 (0x0)
"LWU"= 0 (0x0)
"LWV"= 0 (0x0)
"LWW"= 0 (0x0)
"LWX"= 0 (0x0)
"LWY"= 0 (0x0)
"LWZ"= 0 (0x0)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{88485281-8b4b-4f8d-9ede-82e29a064277}"= "C:\PROGRA~1\MarkAny\CONTEN~1\MACSMA~1.DLL" [2004-11-23 15:51 192512]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.dvsd"= C:\PROGRA~1\FILECO~1\SONYSH~1\VideoLib\sonydv.dll

[HKLM\~\startupfolder\C:^Documents and Settings^ADMIN^Menu Avvio^Programmi^Esecuzione automatica^C6 Messenger.lnk]
path=C:\Documents and Settings\ADMIN\Menu Avvio\Programmi\Esecuzione automatica\C6 Messenger.lnk
backup=C:\WINDOWS\pss\C6 Messenger.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Microsoft Office.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Microsoft Office.lnk
backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
--a------ 2006-10-16 21:13 87584 C:\Programmi\File comuni\Acronis\Schedule2\schedhlp.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTimounterMonitor]
--a--c--- 2006-10-16 21:17 1941784 C:\Programmi\Acronis\TrueImageHome\TimounterMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
--a------ 2008-03-15 12:03 497664 C:\Programmi\SlySoft\AnyDVD\AnyDVD.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
--a------ 2006-03-02 13:00 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DataLayer]
--a------ 2004-09-23 10:33 1019392 C:\PROGRA~1\FILECO~1\PCSuite\DATALA~1\DATALA~1.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eraser]
--a------ 2007-12-23 00:03 916240 C:\Programmi\Eraser\Eraser.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent]
--a------ 2006-11-13 14:38 1289000 C:\Programmi\Microsoft ActiveSync\wcescomm.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2009-01-06 13:06 290088 C:\Programmi\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LXSUPMON]
--a------ 2002-01-28 13:48 885760 C:\WINDOWS\system32\LXSUPMON.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
---hs---- 2004-08-19 15:51 1667584 C:\Programmi\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2009-02-06 18:52 3885408 C:\Programmi\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2005-09-25 19:11 155648 C:\WINDOWS\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 2004-09-15 15:36 148992 C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
--a------ 2009-01-05 16:18 413696 C:\Programmi\QuickTime\QTTask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSTray]
--a------ 2008-05-27 13:09 475136 C:\Programmi\Samsung\EmoDio\SMSTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer]
--------- 2008-09-16 12:16 1833296 C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2008-02-22 04:25 144784 C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
--a------ 2008-05-06 09:42 202088 C:\Programmi\TomTom HOME 2\HOMERunner.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
--a------ 2006-10-16 21:12 1164912 C:\Programmi\Acronis\TrueImageHome\TrueImageMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\Programmi\Microsoft ActiveSync\rapimgr.exe"= C:\Programmi\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"C:\Programmi\Microsoft ActiveSync\wcescomm.exe"= C:\Programmi\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"C:\Programmi\Microsoft ActiveSync\WCESMgr.exe"= C:\Programmi\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"C:\\Programmi\\Messenger\\msmsgs.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"C:\\Programmi\\Sprite Software\\Sprite Backup\\spriteservice.exe"=
"C:\\WINDOWS\\system32\\muzapp.exe"=
"C:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"14101:TCP"= 14101:TCP:BitComet 14101 TCP
"14101:UDP"= 14101:UDP:BitComet 14101 UDP

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-08-05 13:17:43 114768]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [2008-08-05 13:17:43 20560]
R3 SPI;Periferica di controllo I/O Sony Programmable;C:\WINDOWS\system32\drivers\SonyPI.sys [2008-03-12 11:00:26 37040]
S4 getPlus(R) Helper;getPlus(R) Helper;C:\Programmi\NOS\bin\getPlus_HelperSvc.exe [2009-02-02 23:04:59 33752]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{749b8378-9db8-11dd-9f7c-00014a279e1a}]
\Shell\AutoRun\command - G:\WD_Windows_Tools\Setup.exe

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenuto della cartella 'Scheduled Tasks'

2009-01-31 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

HKCU-Run-sxchmx - c:\documents and settings\admin\impostazioni locali\dati applicazioni\sxchmx.exe
MSConfigStartUp-Adobe Reader Speed Launcher - C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-BitComet - C:\Programmi\BitComet\BitComet.exe
MSConfigStartUp-swg - C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe


.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Add to Google Photos Screensa&ver - C:\WINDOWS\system32\GPhotos.scr/200
IE: E&sporta in Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.bitdefender.co.uk/scan_uk/scan8/oscan8.cab
.

[rippley]

UFFFF...
ce l'ho fatta.... questo è quello del pc mio, nn di quello "imputato" che arriverà a breve...

[Amantide]

UFFFF...
ce l'ho fatta.... questo è quello del pc mio...

Anche nel tuo pc c'era il famigerato Messenger Skinner, che è stato rimosso con successo da Combofix.

Resto nell'attesa del secondo log.

[rippley]

ciao.
Posto il log di combofix relativo al pc in avaria.
Putroppo nonostante tutti i suggerimenti di MegaLab la situazioneComboFix 09-03-10.03 - Enrico 2009-03-14 16.10.31.5 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.1015.647 [GMT 1:00]
Eseguito da: C:\Documents and Settings\Enrico\Desktop\fixfix.exe
AV: avast! antivirus 4.8.1296 [VPS 090313-0] *On-access scanning disabled* (Updated)

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((( Files Creati Da 2009-02-14 al 2009-03-14 )))))))))))))))))))))))))))))))))))
.

2010-04-21 05:11 . 2008-04-30 12:17 333 --a--c--- C:\WINDOWS\system32\$ncsp$.inf
2010-04-21 05:11 . 2010-04-21 05:11 61 --a--c--- C:\WINDOWS\smscfg.ini
2010-04-21 04:04 . 2007-06-13 21:39 1,162 --a--c--- C:\WINDOWS\sr.VBS
2009-03-11 07:23 . 2009-03-11 08:28 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2009-03-10 22:54 . 2009-03-10 22:54 268 --ah----- C:\sqmdata19.sqm
2009-03-10 22:54 . 2009-03-10 22:54 244 --ah----- C:\sqmnoopt19.sqm
2009-03-08 16:02 . 2009-03-08 16:02 268 --ah----- C:\sqmdata18.sqm
2009-03-08 16:02 . 2009-03-08 16:02 244 --ah----- C:\sqmnoopt18.sqm
2009-03-08 15:39 . 2009-03-08 15:39 268 --ah----- C:\sqmdata17.sqm
2009-03-08 15:39 . 2009-03-08 15:39 244 --ah----- C:\sqmnoopt17.sqm
2009-03-08 15:11 . 2009-03-08 15:11 268 --ah----- C:\sqmdata16.sqm
2009-03-08 15:11 . 2009-03-08 15:11 244 --ah----- C:\sqmnoopt16.sqm
2009-03-08 10:37 . 2009-03-08 10:37 268 --ah----- C:\sqmdata15.sqm
2009-03-08 10:37 . 2009-03-08 10:37 244 --ah----- C:\sqmnoopt15.sqm
2009-03-06 22:40 . 2009-03-06 22:40 268 --ah----- C:\sqmdata14.sqm
2009-03-06 22:40 . 2009-03-06 22:40 244 --ah----- C:\sqmnoopt14.sqm
2009-02-25 22:01 . 2009-03-11 20:18 1,374 --a------ C:\WINDOWS\imsins.BAK

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-14 12:01 --------- d-----w C:\Programmi\eMule
2009-02-23 20:55 --------- d-----w C:\Programmi\File comuni\Apple
2009-02-23 20:53 --------- d-----w C:\Programmi\Google
2009-02-20 16:48 1,076 ----a-w C:\Documents and Settings\Enrico\Dati applicazioni\wklnhst.dat
2009-02-10 18:56 --------- d-----w C:\Documents and Settings\Enrico\Dati applicazioni\Techno Design IP
2009-02-10 14:21 --------- d-----w C:\Programmi\Messenger Plus! Live
2009-02-09 14:56 1,846,272 ----a-w C:\WINDOWS\system32\win32k.sys
2009-02-03 13:12 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2009-02-03 13:10 --------- d-----w C:\Programmi\Spybot - Search & Destroy
2009-02-03 13:09 16,409,960 ----a-w C:\Programmi\spybotsd162.exe
2009-02-02 20:39 --------- d-----w C:\Programmi\Circle Developement
2008-11-16 11:32 67,167,528 ----a-w C:\Programmi\iTunes801Setup.exe
2008-11-08 18:26 3,231,826 ----a-w C:\Programmi\eMule0.49b-Installer1.exe
2008-07-09 20:24 13,052,096 ----a-w C:\Programmi\nentitst.exe
2008-07-09 20:22 5,190,160 ----a-w C:\Programmi\DriverDetective.exe
2008-06-06 22:27 7,851,520 -c--a-w C:\Programmi\setup.msi
.

((((((((((((((((((((((((((((( SnapShot@2009-03-11_15.11.52,70 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-09-17 14:29:12 20,040 ----a-w C:\WINDOWS\system32\config\systemprofile\Dati applicazioni\Microsoft\IdentityCRL\PRODUCTION\ppcrlconfig.dll
+ 2008-12-05 07:12:04 144,896 -c----w C:\WINDOWS\system32\dllcache\schannel.dll
- 2008-09-15 15:38:29 1,846,016 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2009-02-09 14:56:50 1,846,272 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-11-05 18:11:30 1,741,888 ----a-w C:\WINDOWS\system32\drivers\athwx.sys
- 2009-01-20 13:33:48 187,408 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2009-03-12 13:57:36 187,408 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2007-05-02 20:00:58 546,976 ----a-r C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\ar5211.sys
- 2007-04-25 14:21:04 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
+ 2008-12-05 07:12:04 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
- 2008-07-09 07:42:34 18,808 ------w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:19:29 18,808 ------w C:\WINDOWS\system32\spmsg.dll
+ 2009-03-14 15:04:52 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5dc.dat
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Programmi\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 10:34 5724184]
"SpybotSD TeaTimer"="C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 15:31 2144088]
"rvydhsw"="c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw.exe" [BU]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-09-24 08:43 104984]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-09-24 08:43 121368]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2007-09-24 08:43 100888]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 18:18 81000]
"AsusTray"="C:\Programmi\EeePC\ACPI\AsTray.exe" [2008-03-27 16:20 102400]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2008-09-06 15:09 413696]
"RTHDCPL"="RTHDCPL.EXE" [2008-03-06 10:14 16858112 C:\WINDOWS\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00 15360]
"DWQueuedReporting"="C:\PROGRA~1\FILECO~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 12:45 36040]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^AutoRun OSCleaner.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\AutoRun OSCleaner.lnk
backup=C:\WINDOWS\pss\AutoRun OSCleaner.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^InterVideo WinCinema Manager.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\InterVideo WinCinema Manager.lnk
backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Enrico^Menu Avvio^Programmi^Esecuzione automatica^C6 Messenger.lnk]
path=C:\Documents and Settings\Enrico\Menu Avvio\Programmi\Esecuzione automatica\C6 Messenger.lnk
backup=C:\WINDOWS\pss\C6 Messenger.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Enrico^Menu Avvio^Programmi^Esecuzione automatica^StarOffice 8.lnk]
path=C:\Documents and Settings\Enrico\Menu Avvio\Programmi\Esecuzione automatica\StarOffice 8.lnk
backup=C:\WINDOWS\pss\StarOffice 8.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsusACPIServer]
--a------ 2008-03-20 11:52 544768 C:\Programmi\EeePC\ACPI\AsAcpiSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2006-03-02 13:00 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-10-01 18:57 289576 C:\Programmi\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
---hs---- 2004-10-13 17:24 1694208 C:\Programmi\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 10:34 5724184 C:\Programmi\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSTray]
--a------ 2008-05-27 14:09 475136 E:\SMSTray.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-08-19 14:39:58 111184]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [2008-08-19 14:39:58 20560]
R2 NwSapAgent;Agente SAP;C:\WINDOWS\system32\svchost.exe -k netsvcs [2008-03-24 21:17:56 14336]
R3 AsusACPI;ASUS ACPI Driver;C:\WINDOWS\system32\drivers\ASUSACPI.SYS [2008-04-30 11:32:36 11264]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;C:\WINDOWS\system32\drivers\l251x86.sys [2008-04-17 09:57:07 30720]
S3 Ktp;Elantech Smart-Pad;C:\WINDOWS\system32\drivers\ETD.sys [2008-04-18 18:16:18 25088]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8283de03-cf38-11dd-bb38-0015afa5a4cd}]
\Shell\AutoRun\command - F:\WD_Windows_Tools\Setup.exe
.
Contenuto della cartella 'Scheduled Tasks'

2009-02-20 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-02-23 C:\WINDOWS\Tasks\Verifica aggiornamenti per Windows Live Toolbar.job
- C:\Programmi\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Windows Live Search - C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
.
non è cambiata rispetto al primo 3d che ho postato.
Grazie comunque di tutto.

[Amantide]

Purtroppo il Combofix non è riuscito da solo a rimuovere il Messenger Skinner, ora gli diamo una mano.

Copia ed incolla il seguente testo su blocconote e salva il file su desktop con il nome CFScript.txt.

Codice: Seleziona tutto

File::
C:\Documents and Settings\Enrico\Dati applicazioni\wklnhst.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw.exe
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw_nav.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw_navps.dat

Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"rvydhsw"=-


Ora trascina il file CFScript.txt sull'icona di ComboFix. Aspetta il termine della scansione e posta il nuovo log di Combofix.

[rippley]

Ecco l'ultimo log dopo le operazioni suggerite...

ComboFix 09-03-10.03 - Enrico 2009-03-14 18:24:32.6 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1040.18.1015.555 [GMT 1:00]
Eseguito da: C:\Documents and Settings\Enrico\Desktop\fixfix.exe
Opzioni usate :: C:\Documents and Settings\Enrico\Desktop\CFScript.txt
AV: avast! antivirus 4.8.1296 [VPS 090313-0] *On-access scanning disabled* (Updated)

ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!

FILE ::
C:\Documents and Settings\Enrico\Dati applicazioni\wklnhst.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw.exe
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw_nav.dat
c:\documents and settings\enrico\impostazioni locali\dati applicazioni\rvydhsw_navps.dat
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Enrico\Dati applicazioni\wklnhst.dat
F:\AUTORUN.INF

.
((((((((((((((((((((((((( Files Creati Da 2009-02-14 al 2009-03-14 )))))))))))))))))))))))))))))))))))
.

2010-04-21 05:11 . 2008-04-30 12:17 333 --a--c--- C:\WINDOWS\system32\$ncsp$.inf
2010-04-21 05:11 . 2010-04-21 05:11 61 --a--c--- C:\WINDOWS\smscfg.ini
2010-04-21 04:04 . 2007-06-13 21:39 1,162 --a--c--- C:\WINDOWS\sr.VBS
2009-03-14 18:14 . 2009-03-14 18:14 <DIR> d-------- C:\WINDOWS\LastGood
2009-03-11 07:23 . 2009-03-11 08:28 <DIR> d-------- C:\WINDOWS\BDOSCAN8
2009-03-10 22:54 . 2009-03-10 22:54 268 --ah----- C:\sqmdata19.sqm
2009-03-10 22:54 . 2009-03-10 22:54 244 --ah----- C:\sqmnoopt19.sqm
2009-03-08 16:02 . 2009-03-08 16:02 268 --ah----- C:\sqmdata18.sqm
2009-03-08 16:02 . 2009-03-08 16:02 244 --ah----- C:\sqmnoopt18.sqm
2009-03-08 15:39 . 2009-03-08 15:39 268 --ah----- C:\sqmdata17.sqm
2009-03-08 15:39 . 2009-03-08 15:39 244 --ah----- C:\sqmnoopt17.sqm
2009-03-08 15:11 . 2009-03-08 15:11 268 --ah----- C:\sqmdata16.sqm
2009-03-08 15:11 . 2009-03-08 15:11 244 --ah----- C:\sqmnoopt16.sqm
2009-03-08 10:37 . 2009-03-08 10:37 268 --ah----- C:\sqmdata15.sqm
2009-03-08 10:37 . 2009-03-08 10:37 244 --ah----- C:\sqmnoopt15.sqm
2009-03-06 22:40 . 2009-03-06 22:40 268 --ah----- C:\sqmdata14.sqm
2009-03-06 22:40 . 2009-03-06 22:40 244 --ah----- C:\sqmnoopt14.sqm

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-14 12:01 --------- d-----w C:\Programmi\eMule
2009-02-23 20:55 --------- d-----w C:\Programmi\File comuni\Apple
2009-02-23 20:53 --------- d-----w C:\Programmi\Google
2009-02-10 18:56 --------- d-----w C:\Documents and Settings\Enrico\Dati applicazioni\Techno Design IP
2009-02-10 14:21 --------- d-----w C:\Programmi\Messenger Plus! Live
2009-02-09 14:56 1,846,272 ----a-w C:\WINDOWS\system32\win32k.sys
2009-02-03 13:12 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2009-02-03 13:10 --------- d-----w C:\Programmi\Spybot - Search & Destroy
2009-02-03 13:09 16,409,960 ----a-w C:\Programmi\spybotsd162.exe
2009-02-02 20:39 --------- d-----w C:\Programmi\Circle Developement
2008-11-16 11:32 67,167,528 ----a-w C:\Programmi\iTunes801Setup.exe
2008-11-08 18:26 3,231,826 ----a-w C:\Programmi\eMule0.49b-Installer1.exe
2008-07-09 20:24 13,052,096 ----a-w C:\Programmi\nentitst.exe
2008-07-09 20:22 5,190,160 ----a-w C:\Programmi\DriverDetective.exe
2008-06-06 22:27 7,851,520 -c--a-w C:\Programmi\setup.msi
.

((((((((((((((((((((((((((((( SnapShot@2009-03-11_15.11.52,70 )))))))))))))))))))))))))))))))))))))))))
.
+ 2007-05-02 20:00:58 546,976 ----a-r C:\WINDOWS\LastGood\system32\DRIVERS\ar5211.sys
+ 2008-09-17 14:29:12 20,040 ----a-w C:\WINDOWS\system32\config\systemprofile\Dati applicazioni\Microsoft\IdentityCRL\PRODUCTION\ppcrlconfig.dll
+ 2008-12-05 07:12:04 144,896 -c----w C:\WINDOWS\system32\dllcache\schannel.dll
- 2008-09-15 15:38:29 1,846,016 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2009-02-09 14:56:50 1,846,272 -c----w C:\WINDOWS\system32\dllcache\win32k.sys
+ 2008-11-05 18:11:30 1,741,888 ----a-w C:\WINDOWS\system32\drivers\athwx.sys
- 2009-01-20 13:33:48 187,408 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2009-03-12 13:57:36 187,408 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2007-05-02 20:00:58 546,976 ----a-r C:\WINDOWS\system32\ReinstallBackups\0008\DriverFiles\ar5211.sys
- 2007-04-25 14:21:04 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
+ 2008-12-05 07:12:04 144,896 ----a-w C:\WINDOWS\system32\schannel.dll
- 2008-07-09 07:42:34 18,808 ------w C:\WINDOWS\system32\spmsg.dll
+ 2007-11-30 11:19:29 18,808 ------w C:\WINDOWS\system32\spmsg.dll
+ 2009-03-14 15:48:55 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_5d4.dat
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Programmi\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 10:34 5724184]
"SpybotSD TeaTimer"="C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 15:31 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-09-24 08:43 104984]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-09-24 08:43 121368]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2007-09-24 08:43 100888]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 00:11 132496]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 18:18 81000]
"AsusTray"="C:\Programmi\EeePC\ACPI\AsTray.exe" [2008-03-27 16:20 102400]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2008-09-06 15:09 413696]
"RTHDCPL"="RTHDCPL.EXE" [2008-03-06 10:14 16858112 C:\WINDOWS\RTHDCPL.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-03-02 13:00 15360]
"DWQueuedReporting"="C:\PROGRA~1\FILECO~1\MICROS~1\DW\dwtrig20.exe" [2005-04-25 12:45 36040]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^AutoRun OSCleaner.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\AutoRun OSCleaner.lnk
backup=C:\WINDOWS\pss\AutoRun OSCleaner.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^InterVideo WinCinema Manager.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\InterVideo WinCinema Manager.lnk
backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Enrico^Menu Avvio^Programmi^Esecuzione automatica^C6 Messenger.lnk]
path=C:\Documents and Settings\Enrico\Menu Avvio\Programmi\Esecuzione automatica\C6 Messenger.lnk
backup=C:\WINDOWS\pss\C6 Messenger.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Enrico^Menu Avvio^Programmi^Esecuzione automatica^StarOffice 8.lnk]
path=C:\Documents and Settings\Enrico\Menu Avvio\Programmi\Esecuzione automatica\StarOffice 8.lnk
backup=C:\WINDOWS\pss\StarOffice 8.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AsusACPIServer]
--a------ 2008-03-20 11:52 544768 C:\Programmi\EeePC\ACPI\AsAcpiSvr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2006-03-02 13:00 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
--a------ 2008-10-01 18:57 289576 C:\Programmi\iTunes\iTunesHelper.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
---hs---- 2004-10-13 17:24 1694208 C:\Programmi\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
--a------ 2007-10-18 10:34 5724184 C:\Programmi\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMSTray]
--a------ 2008-05-27 14:09 475136 E:\SMSTray.exe

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-08-19 14:39:58 111184]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\drivers\aswFsBlk.sys [2008-08-19 14:39:58 20560]
R2 NwSapAgent;Agente SAP;C:\WINDOWS\system32\svchost.exe -k netsvcs [2008-03-24 21:17:56 14336]
R3 AsusACPI;ASUS ACPI Driver;C:\WINDOWS\system32\drivers\ASUSACPI.SYS [2008-04-30 11:32:36 11264]
R3 AtcL002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;C:\WINDOWS\system32\drivers\l251x86.sys [2008-04-17 09:57:07 30720]
S3 Ktp;Elantech Smart-Pad;C:\WINDOWS\system32\drivers\ETD.sys [2008-04-18 18:16:18 25088]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8283de03-cf38-11dd-bb38-0015afa5a4cd}]
\Shell\AutoRun\command - F:\WD_Windows_Tools\Setup.exe
.
Contenuto della cartella 'Scheduled Tasks'

2009-02-20 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]

2009-02-23 C:\WINDOWS\Tasks\Verifica aggiornamenti per Windows Live Toolbar.job
- C:\Programmi\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Windows Live Search - C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
.

[rippley]

comunque sarei dell'idea di ripristinare il p.c anche perché ho ritrovato il disco di ripristino dell'eeepc

magari, con calma, qualcuno mi sa dire come si fa, così con i 50 euro che risparmio dall'assistenza gli pago da bere