Kaspersky Anti-Virus non si aggiorna

[porfirius]

Un saluto a tutti gli utenti del forum.
Ho un problema molto grave che affligge il mio antivirus: KAV 2010 versione 9.0.0.463
Ieri pomeriggio ho avuto necessità di ripristinare il sistema operativo (Windows Vista Home Premium) alle impostazioni di fabbrica.
Di default si è installato Norton Internet Security, che ho provveduto a disinstallare per fare posto a KAV 2010 (visto che sono possessore di una licenza commerciale per 3 PC).
Il problema è che dopo l'installazione, KAV 2010 non riesce ad effettuare il primo e corposo aggiornamento; trascorrono i minuti, più di 20, e riesce a scaricare soltanto pochissimi KB (gli altri 2 PC, ed anche questo prima del ripristino, non presentano questo problema) per poi bloccarsi con l'apparizione di messaggio di errore.
Norton Internet Security l'ho disinstallato così:
Start-->Pannello di Controllo-->Disinstalla un programma; successivamente ho fatto una ricerca automatica, nel Registro di sistema, di tutte le voci di Norton e le ho cancellate.
Come posso risolvere questo gravissimo problema?
Grazie.

[crazy.cat]

Nel visualizza un rapporto dettagliato cosa c'è scritto?

[porfirius]

Nel visualizza un rapporto dettagliato cosa c'è scritto?

ecco cosa appare:

[crazy.cat]

Scaricati gesysteminfo http://www.getsysteminfo.com/ selezioni il tuo problema, quindi "Problema di aggiornamento" e poi gli invii il tuo log generato dal programma.
Dovrebbe darti l'analisi e una possibile soluzione.

[porfirius]

Scaricati gesysteminfo http://www.getsysteminfo.com/ selezioni il tuo problema, quindi "Problema di aggiornamento" e poi gli invii il tuo log generato dal programma.
Dovrebbe darti l'analisi e una possibile soluzione.

Ecco l'analisi della mia situazione:
http://www.getsysteminfo.com/read.php?file=f405130d1cd9feb12c0c00e58aa3871a&ms=0

[crazy.cat]

Usa ccleaner per fare pulizia generale, poi fai una scansione con combofix e posta il suo log.
Si vede almeno un nome molto strano.
C:\Windows\Temp\{C1FEE3E2-182F-4A86-A456-6B7CAAE699EE}\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\WindowsFirewall.exe

[porfirius]

Usa ccleaner per fare pulizia generale, poi fai una scansione con combofix e posta il suo log.
Si vede almeno un nome molto strano.
C:\Windows\Temp\{C1FEE3E2-182F-4A86-A456-6B7CAAE699EE}\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}\WindowsFirewall.exe

ComboFix 09-11-13.06 - Giovanni 13/11/2009 21.15.54.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6000.0.1252.39.1040.18.2046.1234 [GMT 1:00]
Eseguito da: c:\users\Giovanni\Desktop\ComboFix.exe
AV: Kaspersky Anti-Virus *On-access scanning disabled* (Outdated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
SP: Kaspersky Anti-Virus *disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((( Files Creati Da 2009-10-13 al 2009-11-13 )))))))))))))))))))))))))))))))))))
.

2009-11-13 20:22 . 2009-11-13 20:23 -------- d-----w- c:\users\Giovanni\AppData\Local\temp
2009-11-13 20:22 . 2009-11-13 20:22 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-11-13 18:33 . 2009-11-13 18:33 -------- d-----w- c:\programdata\SlySoft
2009-11-13 18:32 . 2009-11-13 18:32 -------- d-----w- c:\program files\SlySoft
2009-11-13 18:25 . 2008-12-04 00:25 120832 ----a-w- c:\users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\2gk6nheq.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}\plugins\npietab.dll
2009-11-13 17:35 . 2008-11-04 02:30 30568 ----a-w- c:\windows\system32\mdimon.dll
2009-11-13 17:32 . 2009-11-13 17:32 -------- d-----w- c:\program files\Microsoft.NET
2009-11-13 17:28 . 2009-11-13 17:28 -------- d-----w- c:\users\Giovanni\AppData\Local\Microsoft Help
2009-11-13 17:26 . 2009-11-13 17:26 -------- d-----r- C:\MSOCache
2009-11-13 17:11 . 2009-11-13 17:11 3 ----a-w- c:\windows\AFirst.cmd
2009-11-13 17:11 . 2007-04-24 07:12 16425744 ----a-w- c:\windows\eRy.exe
2009-11-13 17:11 . 2007-01-15 12:28 336 ----a-w- c:\windows\ACERTOURREMINDERRUN.REG
2009-11-13 17:11 . 2009-11-13 08:30 1248 ----a-w- c:\windows\CLEANUP.CMD
2009-11-13 17:11 . 2002-11-14 14:32 55808 ----a-w- c:\windows\devcon.exe
2009-11-13 15:05 . 2009-11-13 15:05 -------- d-----w- c:\users\Default\AppData\Local\Microsoft Help
2009-11-13 14:34 . 2009-11-13 14:34 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-11-13 14:33 . 2009-11-13 14:33 94643 ----a-w- c:\windows\system32\drivers\klick.dat
2009-11-13 14:33 . 2009-11-13 14:33 105395 ----a-w- c:\windows\system32\drivers\klin.dat
2009-11-13 14:32 . 2009-11-13 20:03 4096 d-----w- c:\programdata\Kaspersky Lab
2009-11-13 14:32 . 2009-11-13 14:32 -------- d-----w- c:\program files\Kaspersky Lab
2009-11-13 14:31 . 2009-11-13 14:31 -------- d-----w- c:\programdata\Kaspersky Lab Setup Files
2009-11-13 14:06 . 2009-11-13 14:06 268800 ----a-w- c:\windows\system32\es.dll
2009-11-13 13:49 . 2009-11-13 13:49 -------- d-----w- c:\users\Giovanni\Tracing
2009-11-13 13:40 . 2009-11-13 13:40 -------- d-----w- c:\users\Giovanni\AppData\Roaming\Intel
2009-11-13 13:40 . 2009-11-13 13:40 -------- d-----w- c:\users\Public\Roaming
2009-11-13 13:40 . 2009-11-13 13:40 -------- d-----w- c:\users\Giovanni\Roaming
2009-11-13 13:40 . 2009-11-13 13:40 -------- d-----w- c:\users\Default\Roaming
2009-11-13 13:40 . 2009-11-13 13:40 -------- d-----w- c:\programdata\Roaming
2009-11-13 13:38 . 2009-11-13 13:38 494592 ----a-w- c:\windows\system32\kerberos.dll
2009-11-13 13:38 . 2009-11-13 13:38 272384 ----a-w- c:\windows\system32\schannel.dll
2009-11-13 13:38 . 2009-11-13 14:08 4096 d-----w- c:\program files\Microsoft Silverlight
2009-11-13 13:36 . 2009-11-13 14:03 -------- d-----w- c:\program files\Microsoft
2009-11-13 13:35 . 2009-11-13 13:35 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-11-13 13:35 . 2009-11-13 13:35 -------- d-----w- c:\program files\Windows Live
2009-11-13 13:31 . 2009-11-13 13:31 97800 ----a-w- c:\windows\system32\infocardapi.dll
2009-11-13 13:31 . 2009-11-13 13:31 622080 ----a-w- c:\windows\system32\icardagt.exe
2009-11-13 13:31 . 2009-11-13 13:31 11264 ----a-w- c:\windows\system32\icardres.dll
2009-11-13 13:31 . 2009-11-13 13:31 105016 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-11-13 13:31 . 2009-11-13 13:31 326160 ----a-w- c:\windows\system32\PresentationHost.exe
2009-11-13 13:31 . 2009-11-13 13:31 781344 ----a-w- c:\windows\system32\PresentationNative_v0300.dll
2009-11-13 13:31 . 2009-11-13 13:31 43544 ----a-w- c:\windows\system32\PresentationHostProxy.dll
2009-11-13 13:30 . 2009-11-13 13:30 -------- d-----w- c:\program files\Common Files\Windows Live
2009-11-13 13:25 . 2009-11-13 13:25 -------- d-----w- c:\users\Giovanni\AppData\Roaming\Blitware
2009-11-13 13:19 . 2009-11-13 13:19 96760 ----a-w- c:\windows\system32\dfshim.dll
2009-11-13 13:19 . 2009-11-13 13:19 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-11-13 13:19 . 2009-11-13 13:19 83968 ----a-w- c:\windows\system32\mscories.dll
2009-11-13 13:19 . 2009-11-13 13:19 282112 ----a-w- c:\windows\system32\mscoree.dll
2009-11-13 13:19 . 2009-11-13 13:19 158720 ----a-w- c:\windows\system32\mscorier.dll
2009-11-13 12:46 . 2009-11-13 12:46 95232 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-11-13 12:46 . 2009-11-13 12:46 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-11-13 12:46 . 2009-11-13 12:46 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-11-13 12:45 . 2009-11-13 12:45 87040 ----a-w- c:\windows\system32\msoert2.dll
2009-11-13 12:45 . 2009-11-13 12:45 39424 ----a-w- c:\windows\system32\ACCTRES.dll
2009-11-13 12:45 . 2009-11-13 12:45 205824 ----a-w- c:\windows\system32\msoeacct.dll
2009-11-13 12:45 . 2009-11-13 12:45 123904 ----a-w- c:\windows\system32\L2SecHC.dll
2009-11-13 12:45 . 2009-11-13 12:45 67584 ----a-w- c:\windows\system32\wlanhlp.dll
2009-11-13 12:45 . 2009-11-13 12:45 502272 ----a-w- c:\windows\system32\wlansvc.dll
2009-11-13 12:45 . 2009-11-13 12:45 47104 ----a-w- c:\windows\system32\wlanapi.dll
2009-11-13 12:45 . 2009-11-13 12:45 297984 ----a-w- c:\windows\system32\wlansec.dll
2009-11-13 12:45 . 2009-11-13 12:45 290816 ----a-w- c:\windows\system32\wlanmsm.dll
2009-11-13 12:43 . 2009-11-13 12:43 71680 ----a-w- c:\windows\system32\atl.dll
2009-11-13 12:43 . 2009-11-13 12:43 297472 ----a-w- c:\windows\system32\gdi32.dll
2009-11-13 12:43 . 2009-11-13 12:43 211456 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-11-13 12:42 . 2009-11-13 12:42 500736 ----a-w- c:\windows\system32\msdtcprx.dll
2009-11-13 12:42 . 2009-11-13 12:42 30208 ----a-w- c:\windows\system32\xolehlp.dll
2009-11-13 12:42 . 2009-11-13 12:42 36352 ----a-w- c:\windows\system32\tsgqec.dll
2009-11-13 12:42 . 2009-11-13 12:42 116736 ----a-w- c:\windows\system32\aaclient.dll
2009-11-13 12:42 . 2009-11-13 12:42 1871872 ----a-w- c:\windows\system32\mstscax.dll
2009-11-13 12:42 . 2009-11-13 12:42 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-11-13 12:42 . 2009-11-13 12:42 1194496 ----a-w- c:\windows\system32\msxml3.dll
2009-11-13 12:41 . 2009-11-13 12:41 63488 ----a-w- c:\windows\system32\drivers\mpsdrv.sys
2009-11-13 12:41 . 2009-11-13 12:41 396800 ----a-w- c:\windows\system32\MPSSVC.dll
2009-11-13 12:41 . 2009-11-13 12:41 392192 ----a-w- c:\windows\system32\FirewallAPI.dll
2009-11-13 12:41 . 2009-11-13 12:41 86016 ----a-w- c:\windows\system32\icfupgd.dll
2009-11-13 12:41 . 2009-11-13 12:41 61952 ----a-w- c:\windows\system32\cmifw.dll
2009-11-13 12:41 . 2009-11-13 12:41 23040 ----a-w- c:\windows\system32\drivers\tunnel.sys
2009-11-13 12:41 . 2009-11-13 12:41 178688 ----a-w- c:\windows\system32\iphlpsvc.dll
2009-11-13 12:41 . 2009-11-13 12:41 16896 ----a-w- c:\windows\system32\wfapigp.dll
2009-11-13 12:41 . 2009-11-13 12:41 15360 ----a-w- c:\windows\system32\drivers\TUNMP.SYS
2009-11-13 12:40 . 2009-11-13 12:40 428032 ----a-w- c:\windows\system32\EncDec.dll
2009-11-13 12:40 . 2009-11-13 12:40 1244672 ----a-w- c:\windows\system32\mcmde.dll
2009-11-13 12:40 . 2009-11-13 12:40 292352 ----a-w- c:\windows\system32\psisdecd.dll
2009-11-13 12:40 . 2009-11-13 12:40 696832 ----a-w- c:\windows\system32\localspl.dll
2009-11-13 12:39 . 2009-11-13 12:39 88576 ----a-w- c:\windows\system32\avifil32.dll
2009-11-13 12:39 . 2009-11-13 12:39 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-11-13 12:39 . 2009-11-13 12:39 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-11-13 12:39 . 2009-11-13 12:39 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-13 12:39 . 2009-11-13 12:39 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-11-13 12:39 . 2009-11-13 12:39 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-11-13 12:39 . 2009-11-13 12:39 45112 ----a-w- c:\windows\system32\drivers\pciidex.sys
2009-11-13 12:39 . 2009-11-13 12:39 21560 ----a-w- c:\windows\system32\drivers\atapi.sys
2009-11-13 12:39 . 2009-11-13 12:39 109624 ----a-w- c:\windows\system32\drivers\ataport.sys
2009-11-13 12:39 . 2009-11-13 12:39 211000 ----a-w- c:\windows\system32\drivers\volsnap.sys
2009-11-13 12:39 . 2009-11-13 12:39 17464 ----a-w- c:\windows\system32\drivers\intelide.sys
2009-11-13 12:39 . 2009-11-13 12:39 154624 ----a-w- c:\windows\system32\drivers\nwifi.sys
2009-11-13 12:37 . 2009-11-13 12:36 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-13 12:36 . 2009-11-13 12:36 -------- d-----w- c:\program files\Java
2009-11-13 12:34 . 2009-11-13 12:34 -------- d-----w- c:\windows\system32\Adobe
2009-11-13 12:29 . 2009-11-13 12:29 -------- d-----w- c:\users\Giovanni\AppData\Local\Seven Zip
2009-11-13 12:24 . 2009-11-13 12:24 0 ----a-w- c:\windows\nsreg.dat
2009-11-13 12:24 . 2009-11-13 12:24 -------- d-----w- c:\users\Giovanni\AppData\Local\Mozilla
2009-11-13 11:49 . 2009-11-13 11:49 25600 ----a-w- c:\windows\system32\amxread.dll
2009-11-13 11:49 . 2009-11-13 11:49 14848 ----a-w- c:\windows\system32\apilogen.dll
2009-11-13 11:49 . 2009-11-13 11:49 33280 ----a-w- c:\windows\system32\slwmi.dll
2009-11-13 11:49 . 2009-11-13 11:49 268288 ----a-w- c:\windows\system32\mcbuilder.exe
2009-11-13 11:49 . 2009-11-13 11:49 223232 ----a-w- c:\windows\system32\SLC.dll
2009-11-13 11:49 . 2009-11-13 11:49 566784 ----a-w- c:\windows\system32\SLCommDlg.dll
2009-11-13 11:49 . 2009-11-13 11:49 351232 ----a-w- c:\windows\system32\SLUI.exe
2009-11-13 11:49 . 2009-11-13 11:49 57856 ----a-w- c:\windows\system32\SLUINotify.dll
2009-11-13 11:49 . 2009-11-13 11:49 186368 ----a-w- c:\windows\system32\SLLUA.exe
2009-11-13 11:49 . 2009-11-13 11:49 2605568 ----a-w- c:\windows\system32\SLsvc.exe
2009-11-13 11:49 . 2009-11-13 11:49 39936 ----a-w- c:\windows\system32\slcinst.dll
2009-11-13 11:45 . 2009-11-13 11:45 -------- d-----w- c:\program files\CCleaner
2009-11-13 11:32 . 2009-11-13 11:32 788992 ----a-w- c:\windows\system32\rpcrt4.dll
2009-11-13 11:14 . 2009-11-13 11:14 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-13 11:12 . 2009-11-13 11:12 704000 ----a-w- c:\windows\system32\PhotoScreensaver.scr
2009-11-13 11:12 . 2009-11-13 11:12 356352 ----a-w- c:\windows\system32\wbem\wbemcomn.dll
2009-11-13 11:12 . 2009-11-13 11:12 24064 ----a-w- c:\windows\system32\wtsapi32.dll
2009-11-13 11:12 . 2009-11-13 11:12 28344 ----a-w- c:\windows\system32\drivers\battc.sys
2009-11-13 11:12 . 2009-11-13 11:12 258232 ----a-w- c:\windows\system32\drivers\acpi.sys
2009-11-13 11:12 . 2009-11-13 11:12 20920 ----a-w- c:\windows\system32\drivers\compbatt.sys
2009-11-13 11:12 . 2009-11-13 11:12 14208 ----a-w- c:\windows\system32\drivers\CmBatt.sys
2009-11-13 11:12 . 2009-11-13 11:12 11264 ----a-w- c:\windows\system32\drivers\wmiacpi.sys
2009-11-13 11:12 . 2009-11-13 11:12 542720 ----a-w- c:\windows\system32\sysmain.dll
2009-11-13 11:11 . 2009-11-13 11:11 194560 ----a-w- c:\windows\system32\WebClnt.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-13 20:20 . 2006-11-06 01:52 682422 ----a-w- c:\windows\system32\perfh010.dat
2009-11-13 20:20 . 2006-11-06 01:52 114828 ----a-w- c:\windows\system32\perfc010.dat
2009-11-13 18:49 . 2009-11-13 08:33 13166 ----a-w- c:\users\Giovanni\AppData\Roaming\nvModes.dat
2009-11-13 18:25 . 2007-05-10 22:52 8192 d-----w- c:\programdata\Microsoft Help
2009-11-13 17:38 . 2007-05-10 22:54 28672 d-----w- c:\program files\Microsoft Works
2009-11-13 13:41 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-11-13 13:01 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-13 12:59 . 2006-11-02 11:18 4096 d-----w- c:\program files\Windows Mail
2009-11-13 12:19 . 2007-05-10 23:00 16384 d-----w- c:\program files\Common Files\Symantec Shared
2009-11-13 11:18 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Defender
2009-11-13 11:17 . 2006-11-02 12:37 4096 d-----w- c:\program files\Windows Sidebar
2009-11-13 11:10 . 2009-11-13 11:10 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-11-13 11:10 . 2009-11-13 11:10 7680 ----a-w- c:\windows\system32\lsass.exe
2009-11-13 11:10 . 2009-11-13 11:10 72704 ----a-w- c:\windows\system32\secur32.dll
2009-11-13 11:10 . 2009-11-13 11:10 408136 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-11-13 11:10 . 2009-11-13 11:10 216576 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-13 11:10 . 2009-11-13 11:10 1233920 ----a-w- c:\windows\system32\lsasrv.dll
2009-11-13 11:10 . 2009-11-13 11:10 49664 ----a-w- c:\windows\system32\csrsrv.dll
2009-11-13 11:10 . 2009-11-13 11:10 376320 ----a-w- c:\windows\system32\winsrv.dll
2009-11-13 11:10 . 2009-11-13 11:10 98816 ----a-w- c:\windows\system32\mfps.dll
2009-11-13 11:10 . 2009-11-13 11:10 2855424 ----a-w- c:\windows\system32\mf.dll
2009-11-13 11:10 . 2009-11-13 11:10 52736 ----a-w- c:\windows\system32\rrinstaller.exe
2009-11-13 11:10 . 2009-11-13 11:10 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-11-13 11:10 . 2009-11-13 11:10 2048 ----a-w- c:\windows\system32\mferror.dll
2009-11-13 10:55 . 2009-11-13 10:55 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_NuidFltr_01005.Wdf
2009-11-13 10:27 . 2007-05-10 22:01 12288 d--h--w- c:\program files\InstallShield Installation Information
2009-11-13 08:47 . 2007-05-10 22:39 -------- d-----w- c:\programdata\CyberLink
2009-11-13 08:35 . 2007-05-10 22:38 4096 d-----w- c:\program files\Acer Arcade Deluxe
2009-11-13 08:30 . 2009-11-13 08:30 -------- d-----w- c:\users\Giovanni\AppData\Roaming\InstallShield
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\programdata\Preferiti
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\programdata\Modelli
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\programdata\Menu Avvio
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\programdata\Documenti
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\programdata\Dati applicazioni
2009-11-13 08:26 . 2009-11-13 08:26 -------- d-sh--we c:\program files\File comuni
2009-09-28 18:20 . 2009-09-28 18:20 89256 ----a-w- c:\windows\system32\ElbyCDIO.dll
2009-09-26 17:57 . 2009-09-26 17:57 25768 ----a-w- c:\windows\system32\drivers\ElbyCDIO.sys
2009-08-27 05:22 . 2009-11-13 18:23 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-27 05:17 . 2009-11-13 18:23 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-08-27 05:17 . 2009-11-13 18:23 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-08-27 03:42 . 2009-11-13 18:23 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-08-17 22:33 . 2009-08-17 22:33 1193832 ----a-w- c:\windows\system32\FM20.DLL
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2007-03-23 857648]
"NvSvc"="c:\windows\system32\nvsvc.dll" [2007-05-04 86016]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-05-04 8429568]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-05-04 81920]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-12 457728]
"eAudio"="c:\acer\Empowering Technology\eAudio\eAudio.exe" [2007-04-26 1286144]
"PLFSet"="c:\windows\PLFSet.dll" [2007-03-09 45056]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 174872]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [2007-05-04 502544]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-11-13 149280]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2010\avp.exe" [2009-07-03 303376]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-04-13 4431872]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-5-10 535336]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd.dll c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dll c:\windows\System32\eNetHook.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BTTray.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\BTTray.lnk
backup=c:\windows\pss\BTTray.lnk.CommonStartup
backupExtension=.CommonStartup

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-1376142052-3379912633-1200093917-1000]
"EnableNotificationsRef"=dword:00000007

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\System32\drivers\klbg.sys [15/12/2008 20.41.32 33808]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\System32\drivers\klim6.sys [15/05/2009 18.50.22 21008]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [13/11/2009 9.35.39 13560]
R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE [30/03/2009 16.28.36 1533808]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\System32\drivers\klmouflt.sys [16/05/2009 20.59.34 19472]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [17/11/2008 7.40.22 3668480]
R3 winbondcir;Winbond IR Transceiver;c:\windows\System32\drivers\winbondcir.sys [11/05/2007 7.34.30 43008]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [11/05/2007 7.34.39 179712]

--- Altri Servizi/Drivers In Memoria ---

*NewlyCreated* - PROCEXP113
*Deregistered* - aftyqpod
*Deregistered* - mbr
*Deregistered* - PROCEXP113
.
Contenuto della cartella 'Scheduled Tasks'
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page = hxxp://it.intl.acer.yahoo.com
uSearchURL,(Default) = hxxp://it.rd.yahoo.com/customize/ycomp/ ... .yahoo.com
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\Giovanni\AppData\Roaming\Mozilla\Firefox\Profiles\2gk6nheq.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/ig
FF - component: c:\program files\Mozilla Firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\Microsoft\Office Live\npOLW.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

HKLM-Run-eRecoveryService - (no file)
HKU-Default-Run-Acer Tour Reminder - c:\acer\AcerTour\Reminder.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-13 21:23
Windows 6.0.6000 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(784)
c:\windows\system32\eNetHook.dll

- - - - - - - > 'lsass.exe'(796)
c:\windows\system32\eNetHook.dll

- - - - - - - > 'Explorer.exe'(1752)
c:\windows\system32\MsnChatHook.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\BatchCrypto.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\keyManager.dll
c:\acer\Empowering Technology\EPOWER\SysHook.dll
.
Ora fine scansione: 2009-11-13 21:25
ComboFix-quarantined-files.txt 2009-11-13 20:25

Pre-Run: 55.250.534.400 byte disponibili
Post-Run: 55.220.219.904 byte disponibili

- - End Of File - - 824FEC449A5FB8067F6D0AD38E2A96B6

[Max01]

Prova ad utilizzare anche il Norton removal tool: http://www.softpedia.com/get/Tweak/Unin ... Tool.shtml.