Impossibile trovare il file/impossibile caricare od eseguire

[glnitaljav]

Salve a tutti,
sono nuovo qui e spero di trovarmi bene.
Io ho un problemino, all'avvio del mio pc (XP) mi vengono fuori dei messaggi di errore:
il primo " Impossibile trovare il file ""C:\Documents." "e se chiudo il messaggio mi viene fuori un successivo messaggio di errore sempre dello stesso file con scritto " impossibile caricare o eseguire il file ... specificato nel registro di sistema " .
Una volta chiuso questo, mi escono gli stessi 2 errori anche per i file :
- "and" (che cacchio è sto and??)
- "settings\userUtente\Dati" e
- "applicazioni\adobe\manager.exe" --->quest'ultimo me l'ha cancellato avg 8.0 perché lo rileva come un trojan downloader.agent ! ah i problemi sono comparsi dopo aver installato avg 8.0!

Spero e confido nella vostra gentilezza! ...il problema non sono capace di eliminarlo! lo stesso problema con il pc di un mio amico (sempre XP) al quale gli ho installato avg 8.0.
AIUUTTOOO!!!
Grazie per l'attenzione

[ste_95]

Prima di tutto, ti do il benvenuto su MegaLab.it!

Scarica HijackThis
Salvalo in una cartella (non aprirlo direttamente, sennò non farà i backup!)
Apri l'eseguibile
Clicca quindi su "Do a System Scan and Save a Logfile"
Attendi che finisca la scansione
Posta sul forum il risultato facendo attenzione a queste regole.

[glnitaljav]

Grazie per il benvenuto e la risposta,
scusa del ritardo per la mia.
comunque la scansione di hijackthis mi dice questo:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16.49.45, on 31/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~2\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~2\AVG\AVG8\avgfws8.exe
C:\Programmi\Telecom Italia\WanMiniport1st\srvany.exe
C:\Programmi\Telecom Italia\WanMiniport1st\WanMiniport1st_srv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~2\AVG\AVG8\avgam.exe
C:\PROGRA~2\AVG\AVG8\avgrsx.exe
C:\PROGRA~2\AVG\AVG8\avgnsx.exe
C:\PROGRA~2\AVG\AVG8\avgemc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\ALICET~1\SMARTB~1\MotiveSB.exe
C:\PROGRA~1\ALICET~1\vendors\AliceRE\content\template\driven~1\syncer\McciTrayApp.exe
C:\PROGRA~2\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\ProgrammiTemp\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F3 - REG:win.ini: run="C:\Documents and Settings\Giuliano\Dati applicazioni\Adobe\Manager.exe"
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi2\AVG\AVG8\avgssie.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ALICET~1\SMARTB~1\MotiveSB.exe
O4 - HKLM\..\Run: [AliceRE_McciTrayApp] C:\PROGRA~1\ALICET~1\vendors\AliceRE\content\template\driven~1\syncer\McciTrayApp.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~2\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi2\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Programmi2\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi2\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {6C269571-C6D7-4818-BCA4-32A035E8C884} (Creative Software AutoUpdate) - http://www.creative.com/softwareupdate/ ... TSUEng.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/softwareupdate/ ... /CTPID.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi2\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~2\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~2\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~2\AVG\AVG8\avgfws8.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Programmi2\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Network WanMiniport First Position - Unknown owner - C:\Programmi\Telecom Italia\WanMiniport1st\srvany.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe

--
End of file - 5825 bytes

Grazie per la pazienza e l'aiuto

[glnitaljav]

...penso che sia collegato tutto a questo: F3 - REG:win.ini: run="C:\Documents and Settings\Giuliano\Dati applicazioni\Adobe\Manager.exe" .
Ci sono arrivato tardi ma collegando tutti gli errori 1."Documents" - 2."and" - 3."settings\user\dati"- 4."applicazioni\adobe\manager.exe"
viene fuori il collegamento!!
...bisogna cancellarlo??..boh .
Aspetto tue notizie.
Grazie ciao

[ste_95]

Si, è proprio quella la voce che causa problemi. Selezionala a sinistra, e premi in basso il pulsante Fix checked.
Al riavvio non dovresti più avere problemi.

[glnitaljav]

..il problema si è impaurito ed è scomparso!!!OK!!!

Non so come ringraziarti...grazie 1000 veramente!
Ciao

[pasquale991]

Ciao senti a me da quasi lo stesso errore, ogni volta che accendo il pc mi da quest'errore:
Impossibile trovare il file "C/Documents". Verificare che il percorso e il nome del file siano corretti e ritentare. Per cercare un file fare clic sul pulsante Start, quindi scegliere Trova.
Come posso fare per risolverlo? Grazie mille.

[ste_95]

Scarica HijackThis
Salvalo in una cartella (non aprirlo direttamente, sennò non farà i backup!)
Apri l'eseguibile
Clicca quindi su "Do a System Scan and Save a Logfile"
Attendi che finisca la scansione
Posta sul forum il risultato facendo attenzione a queste regole.

[salgado]

Salve,anche a me da lo stesso problema cioè all'avvio dice impossibile trovare C:\Documents. Potreste cortesemente dare una mano anche a me?Scusandomi per il disturbo la saluto cordialmente.

[crazy.cat]

Salve,anche a me da lo stesso problema cioè all'avvio dice impossibile trovare C:\Documents. Potreste cortesemente dare una mano anche a me?Scusandomi per il disturbo la saluto cordialmente.

Ti ho risposto qui topic61010.html

[Thorek]

anche io ho lo stesso problema, Windows all'avvio non trova C:\Documents... ho gia fatto una scansione con hiijackthis come scritto sopra, ecco il risultato

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17.20.29, on 03/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Programmi\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Analog Devices\Core\smax4pnp.exe
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\emMON.exe
C:\Programmi\File comuni\Nokia\MPlatform\NokiaMServer.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programmi\DAEMON Tools Lite\DTLite.exe
C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
C:\Programmi\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclMSBTSrv.exe
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
C:\Programmi\Windows Live\Contacts\wlcomm.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Adobe\Reader 9.0\Reader\AcroRd32Info.exe
C:\Documents and Settings\User\Desktop\Nuova cartella\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F3 - REG:win.ini: load=C:\Documents and Settings\User\LOCALS~1\APPLIC~1\logman.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.5.4723.1820\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\WINDOWS\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [36X Raid Configurer] C:\WINDOWS\system32\xRaidSetup.exe boot
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [emMON] emMON.exe
O4 - HKLM\..\Run: [NokiaMServer] C:\Programmi\File comuni\Nokia\MPlatform\NokiaMServer /watchfiles
O4 - HKLM\..\Run: [NokiaMusic FastStart] "C:\Programmi\Nokia\Nokia Music\NokiaMusic.exe" /command:faststart
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avast5] C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe /nogui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [LaunchList] C:\Programmi\Pinnacle\Studio 11\LaunchList2.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Programmi\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [AlcoholAutomount] "C:\Programmi\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
O4 - HKLM\..\Policies\Explorer\Run: [MstInit] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [IEudinit] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\ieudinit.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Esent Utl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\esentutl.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [DllHst] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\dllhst3g.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [SessMgr] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\sessmgr.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Spool] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\spoolsv.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [IEudinit] C:\DOCUME~1\User\IMPOST~1\Temp\ieudinit.exe /waitservice
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [ComRepl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\comrepl.exe /waitservice (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [ComRepl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\comrepl.exe /waitservice (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://C:\Programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/200 ... ader55.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Dragon Age: Origins - Content Updater (DAUpdaterSvc) - BioWare - C:\Programmi\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: PCLEPCI - Pinnacle Systems GmbH - C:\WINDOWS\system32\drivers\pclepci.sys
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Programmi\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 11818 bytes

[ste_95]

Spunta a sinistra le seguenti voci e premi in basso il pulsante Fix Checked:

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Policies\Explorer\Run: [MstInit] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\mstinit.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [IEudinit] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\ieudinit.exe /waitservice
O4 - HKLM\..\Policies\Explorer\Run: [Esent Utl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\MICROS~1\esentutl.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [DllHst] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\dllhst3g.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [SessMgr] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\sessmgr.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [Spool] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\spoolsv.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [IEudinit] C:\DOCUME~1\User\IMPOST~1\Temp\ieudinit.exe /waitservice
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [ComRepl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\comrepl.exe /waitservice (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [ComRepl] C:\Documents and Settings\User\LOCALS~1\APPLIC~1\comrepl.exe /waitservice (User 'Default user')

[crazy.cat]

Spunta a sinistra le seguenti voci e premi in basso il pulsante Fix Checked:)

ti sei dimenticato quella più importante
F3 - REG:win.ini: load=C:\Documents and Settings\User\LOCALS~1\APPLIC~1\logman.exe

[Thorek]

problema risolto , ora funziona tutto bene! grazie di tutto!

[ste_95]

ti sei dimenticato quella più importante
F3 - REG:win.ini: load=C:\Documents and Settings\User\LOCALS~1\APPLIC~1\logman.exe

Argh! Tra un consul di qui e un accipiter di là mi era sfuggita!

[Lyukrobinho]

Salve sono un nuovo iscritto. Anche io ho lo stesso problema. Appena partito il mio xp mi da questo errore che non riesce a trovare il file c:\documents.
Ho eseguito il programma trend micro e mi ha dato questo risultato.
Se qualcuno mi può dare una mano grazie
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19.42.27, on 04/02/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Programmi\VIA\VIAudioi\HDADeck\HDeck.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Programmi\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
C:\Programmi\Cyberlink\Shared Files\brs.exe
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
C:\DOCUME~1\Luca\IMPOST~1\Temp\setuper.exe
C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\Programmi\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmi\HP\Digital Imaging\bin\hpqgalry.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgfws8.exe
C:\Programmi\File comuni\Protexis\License Service\PsiService_2.exe
C:\Programmi\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\wscntfy.exe
D:\Torrent\HiJackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Microsoft Office\Office12\OUTLOOK.EXE
C:\Programmi\AVG\AVG8\avgcsrvx.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
F2 - REG:system.ini: Shell=Explorer.exe C:\Documents and Settings\Luca\Dati applicazioni\lsass.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll
O4 - HKLM\..\Run: [HDAudDeck] C:\Programmi\VIA\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [StartCCC] "C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [UpdatePDRShortCut] "C:\Programmi\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" "C:\Programmi\CyberLink\PowerDirector" UpdateWithCreateOnce "Software\CyberLink\PowerDirector\8.0"
O4 - HKLM\..\Run: [Corel File Shell Monitor] C:\Programmi\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe
O4 - HKLM\..\Run: [BDRegion] C:\Programmi\Cyberlink\Shared Files\brs.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programmi\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Programmi\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programmi\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Adobe Acrobat Speed Launcher] "C:\Programmi\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Programmi\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Avvio rapido di HP Image Zone.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Append to Existing PDF - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: acaptuser32.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Programmi\MAGIX\Common\Database\bin\fbserver.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (GoogleUpdateBeta) - Unknown owner - C:\Documents and Settings\Luca\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdateBeta.exe (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Programmi\File comuni\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programmi\CyberLink\Shared files\RichVideo.exe

--

[ste_95]

Scarica ComboFix , salvandolo sul desktop con un nome di fantasia, ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto inserendolo tra i tag LOG, in questo modo:

Codice: Seleziona tutto

[LOG]qui va inserito il log[/LOG]

[Lyukrobinho]

Scarica ComboFix , salvandolo sul desktop con un nome di fantasia, ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto inserendolo tra i tag LOG, in questo modo:

Codice: Seleziona tutto

[LOG]qui va inserito il log[/LOG]

ComboFix 10-02-03.08 - Luca 04/02/2010 19.56.48.1.4 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.3327.2789 [GMT 1:00]
Eseguito da: c:\documents and settings\Luca\Desktop\Tigre.exe
AV: AVG Internet Security *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Firewall *enabled* {8decf618-9569-4340-b34a-d78d28969b66}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\docume~1\Luca\IMPOST~1\Temp\svhost.exe
c:\documents and settings\Luca\Dati applicazioni\inst.exe
c:\documents and settings\Luca\Dati applicazioni\lsass.exe
c:\documents and settings\Luca\Dati applicazioni\onload.exe

.
((((((((((((((((((((((((( Files Creati Da 2010-01-04 al 2010-02-04 )))))))))))))))))))))))))))))))))))
.

2010-02-03 17:31 . 2010-02-03 17:31 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\IsolatedStorage
2010-02-03 17:31 . 2010-02-03 17:31 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\HP
2010-02-03 17:30 . 2010-02-04 18:32 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\ApplicationHistory
2010-02-03 17:30 . 2010-02-03 17:30 133 ----a-w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\fusioncache.dat
2010-02-02 21:30 . 2010-02-02 21:31 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\FLEXnet
2010-02-02 21:30 . 2010-02-02 21:30 -------- d-----w- c:\programmi\File comuni\Macrovision Shared
2010-02-02 21:30 . 2008-04-07 04:38 22872 ----a-r- c:\windows\system32\AdobePDFUI.dll
2010-02-02 21:30 . 2008-04-07 04:38 45392 ----a-r- c:\windows\system32\AdobePDF.dll
2010-02-02 18:36 . 2010-02-02 18:36 -------- d-----w- c:\documents and settings\LocalService\Dati applicazioni\CyberLink
2010-02-02 18:19 . 2008-04-13 10:46 51200 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2010-02-02 18:19 . 2008-04-13 10:46 51200 ----a-w- c:\windows\system32\drivers\msdv.sys
2010-02-02 18:19 . 2008-04-13 10:46 38912 -c--a-w- c:\windows\system32\dllcache\avc.sys
2010-02-02 18:19 . 2008-04-13 10:46 38912 ----a-w- c:\windows\system32\drivers\avc.sys
2010-02-02 18:19 . 2008-04-13 10:46 48128 -c--a-w- c:\windows\system32\dllcache\61883.sys
2010-02-02 18:19 . 2008-04-13 10:46 48128 ----a-w- c:\windows\system32\drivers\61883.sys
2010-02-02 18:11 . 2010-02-02 18:11 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\MAGIX
2010-02-02 18:06 . 2010-02-02 18:06 108768 ----a-w- c:\windows\system32\drivers\ACEDRV08.sys
2010-02-02 17:59 . 2010-02-02 17:59 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\MAGIX
2010-02-02 17:55 . 2001-05-16 16:54 309616 ----a-w- c:\windows\system32\wmv8dmod.dll
2010-02-02 17:55 . 2001-05-11 12:18 420240 ----a-w- c:\windows\system32\mpg4c32.dll
2010-02-02 17:52 . 2010-02-02 17:59 -------- d-----w- c:\programmi\File comuni\MAGIX Shared
2010-02-02 17:46 . 2010-02-02 18:00 -------- d-----w- c:\programmi\MAGIX
2010-02-02 17:46 . 2002-09-20 22:33 1089536 ----a-w- c:\windows\system32\ROBOEX32.DLL
2010-02-02 17:46 . 1999-01-28 12:44 49152 ----a-w- c:\windows\system32\INETWH32.dll
2010-02-02 17:46 . 1998-10-15 15:28 85504 ----a-w- c:\windows\system32\HtmlWH.dll
2010-02-02 17:46 . 2010-02-02 18:00 -------- d-----w- c:\windows\system32\MAGIX
2010-02-02 17:46 . 2007-02-07 09:53 663552 ----a-w- c:\windows\system32\mgxoschk.dll
2010-02-02 17:14 . 2010-02-02 17:14 -------- d-----w- c:\programmi\File comuni\HP
2010-02-02 17:13 . 2010-02-02 17:13 -------- d-----w- c:\programmi\Hewlett-Packard
2010-02-02 17:13 . 2010-02-02 17:13 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Hewlett-Packard
2010-02-02 17:13 . 2004-05-11 09:53 626960 ----a-r- c:\windows\system32\hpvaut32.dll
2010-02-02 17:13 . 2004-05-11 09:53 487424 ----a-r- c:\windows\system32\hpvcp70.dll
2010-02-02 17:13 . 2004-05-11 09:53 344064 ----a-r- c:\windows\system32\hpvcr70.dll
2010-02-02 17:13 . 2003-04-18 14:29 44544 ----a-w- c:\windows\system32\MSXML4a.dll
2010-02-02 17:12 . 2010-02-02 17:12 45056 ----a-r- c:\documents and settings\Luca\Dati applicazioni\Microsoft\Installer\{457791C5-D702-4143-A7B2-2744BE9573F2}\NewShortcut1_5B69D3033CA54B39B5ECE7D051297E77.exe
2010-02-02 17:12 . 2010-02-02 17:12 -------- d-----w- c:\programmi\File comuni\Hewlett-Packard
2010-02-02 17:11 . 2010-02-02 17:11 -------- d-----w- c:\windows\system32\URTTEMP
2010-02-02 17:09 . 2004-03-18 15:56 204800 ----a-w- c:\windows\system32\HPZipr12.dll
2010-02-02 17:09 . 2004-03-18 15:55 65536 ----a-w- c:\windows\system32\HPZipm12.exe
2010-02-02 17:09 . 2004-03-18 15:53 278584 ----a-w- c:\windows\system32\HPZidr12.dll
2010-02-02 17:09 . 2004-03-18 15:39 57344 ----a-w- c:\windows\system32\HPZisn12.dll
2010-02-02 17:09 . 2004-03-18 15:39 94208 ----a-w- c:\windows\system32\HPZipt12.dll
2010-02-02 17:09 . 2004-03-18 15:38 61440 ----a-w- c:\windows\system32\HPZinw12.exe
2010-02-02 17:09 . 1998-10-29 15:45 306688 ----a-w- c:\windows\IsUninst.exe
2010-02-02 17:08 . 2010-02-02 17:15 -------- d-----w- c:\programmi\HP
2010-02-02 16:55 . 2010-02-02 16:55 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\Creative
2010-02-01 17:22 . 2010-02-01 17:22 -------- d-----w- c:\programmi\VideoLAN
2010-01-31 20:40 . 2010-01-31 20:50 1956072 ----a-w- c:\documents and settings\Luca\Dati applicazioni\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
2010-01-31 17:04 . 2010-01-31 17:04 -------- d-----w- c:\programmi\DVD Shrink
2010-01-26 22:11 . 2010-02-02 22:31 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\Adobe
2010-01-26 22:11 . 2010-02-02 21:32 -------- d-----w- c:\programmi\File comuni\Adobe
2010-01-26 17:45 . 2008-04-13 18:13 54784 ----a-w- c:\windows\system32\drivers\vfwwdm32.dll
2010-01-26 17:45 . 2005-01-20 02:13 63488 ----a-r- c:\windows\system32\drivers\wssbtr1f.sys
2010-01-26 17:45 . 2005-01-20 02:12 48556 ----a-r- c:\windows\system32\drivers\SktBt2k.sys
2010-01-26 17:45 . 2005-01-20 02:12 77824 ----a-r- c:\windows\system32\drivers\SioUi2k.dll
2010-01-26 17:45 . 2005-01-20 02:12 48076 ----a-r- c:\windows\system32\drivers\Sio9502k.sys
2010-01-26 17:45 . 2005-01-20 02:12 40960 ----a-r- c:\windows\system32\drivers\SCTray.exe
2010-01-26 17:45 . 2005-01-20 02:11 51169 ----a-r- c:\windows\system32\drivers\OXSER.SYS
2010-01-26 17:44 . 2004-12-16 15:32 13304 ----a-w- c:\windows\system32\drivers\BTNetFilter.sys
2010-01-26 17:44 . 2004-09-22 17:08 12504 ----a-w- c:\windows\system32\drivers\VHIDMini.sys
2010-01-26 17:44 . 2004-12-01 16:55 22488 ----a-w- c:\windows\system32\drivers\btcusb.sys
2010-01-26 17:44 . 2004-11-05 10:39 82148 ----a-w- c:\windows\system32\drivers\VcommMgr.sys
2010-01-26 17:44 . 2004-10-19 12:40 28207 ----a-w- c:\windows\system32\drivers\BTHidMgr.sys
2010-01-26 17:44 . 2004-10-19 12:37 61312 ----a-w- c:\windows\system32\drivers\VComm.sys
2010-01-26 17:44 . 2004-10-19 10:39 20096 ----a-w- c:\windows\system32\drivers\blueletaudio.sys
2010-01-26 17:44 . 2004-09-21 17:18 7680 ----a-w- c:\windows\system32\btinstall.dll
2010-01-26 17:44 . 2004-09-21 17:18 148830 ----a-w- c:\windows\system32\drivers\bcbthub.sys
2010-01-26 17:44 . 2004-09-21 17:18 116021 ----a-w- c:\windows\system32\drivers\fw203x.sys
2010-01-26 17:44 . 2004-09-21 17:18 11604 ----a-w- c:\windows\system32\drivers\vbtenum.sys
2010-01-26 17:44 . 2004-09-21 17:15 10804 ----a-w- c:\windows\system32\drivers\BtNetDrv.sys
2010-01-26 17:28 . 2007-06-08 12:54 264192 ----a-w- c:\windows\system32\midas.dll
2010-01-26 17:28 . 2000-05-10 22:00 77824 ----a-w- c:\windows\system32\MSBIND.DLL
2010-01-26 17:28 . 2010-01-26 17:28 -------- d-----w- c:\programmi\Medicube
2010-01-26 17:28 . 2004-03-28 21:36 122880 ----a-w- c:\windows\system32\VBMySQLDirect.dll
2010-01-26 17:28 . 2003-12-19 13:59 925696 ----a-w- c:\windows\system32\libmySQL.dll
2010-01-26 17:28 . 2002-12-04 13:00 385024 ----a-w- c:\windows\system32\VBAR332.DLL
2010-01-26 17:28 . 1999-06-02 22:00 101888 ----a-w- c:\windows\system32\Vb6stkit.dll
2010-01-26 17:28 . 1998-12-03 22:44 57344 ----a-w- c:\windows\system32\mfc42ita.dll
2010-01-25 23:22 . 2010-02-04 16:19 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\Corel
2010-01-25 23:20 . 2010-02-04 16:17 2880 --sha-w- c:\documents and settings\All Users\Dati applicazioni\KGyGaAvL.sys
2010-01-25 23:20 . 2010-01-25 23:34 88 --sh--r- c:\documents and settings\All Users\Dati applicazioni\4FA7AF3CE6.sys
2010-01-25 23:15 . 2010-01-25 23:15 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\Corel
2010-01-25 23:14 . 2010-01-25 23:15 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Corel
2010-01-25 23:14 . 2010-01-25 23:14 -------- d-----w- c:\programmi\File comuni\Corel
2010-01-25 23:14 . 2010-01-25 23:14 -------- d-----w- c:\programmi\File comuni\Protexis
2010-01-25 23:03 . 2010-01-25 23:14 -------- d-----w- c:\programmi\Corel
2010-01-25 23:02 . 2010-02-01 17:22 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\vlc
2010-01-25 23:01 . 2010-01-31 17:22 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\DVD Shrink
2010-01-25 23:01 . 2010-01-25 23:01 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\BackTalk
2010-01-25 23:01 . 2004-07-26 03:16 598086 ----a-w- c:\documents and settings\Luca\Dati applicazioni\BackTalk\Helper.exe
2010-01-25 23:01 . 2010-01-27 17:34 -------- d-----w- c:\programmi\DVD Shrink Pro
2010-01-25 22:55 . 2010-01-25 22:55 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\Vso
2010-01-25 22:55 . 2010-01-25 22:55 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2010-01-25 22:55 . 2010-01-25 22:55 47360 ----a-w- c:\documents and settings\Luca\Dati applicazioni\pcouffin.sys
2010-01-25 22:55 . 2010-01-25 22:55 -------- d-----w- c:\programmi\DVDFab 6
2010-01-25 22:46 . 2010-01-25 22:46 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Sports Interactive
2010-01-25 22:44 . 2008-05-30 13:19 507400 ----a-w- c:\windows\system32\XAudio2_1.dll
2010-01-25 22:41 . 2010-01-25 22:41 -------- d-----w- c:\programmi\Sports Interactive
2010-01-25 22:40 . 2010-01-25 22:40 -------- d--h--w- c:\documents and settings\Luca\InstallAnywhere
2010-01-25 21:34 . 2010-02-04 17:06 -------- d-----w- C:\$AVG8.VAULT$
2010-01-25 21:34 . 2010-01-25 21:34 -------- d-----w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\Google
2010-01-25 21:26 . 2010-01-25 22:39 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\Sports Interactive
2010-01-25 21:16 . 2007-04-12 13:19 129024 ----a-w- c:\windows\system32\AVERM.dll
2010-01-25 21:16 . 2006-09-26 12:57 28672 ----a-w- c:\windows\system32\AVEQT.dll
2010-01-25 21:16 . 2010-01-25 21:17 -------- d-----w- c:\programmi\Allok 3GP PSP MP4 iPod Video Converter
2010-01-25 21:04 . 2010-01-25 21:05 -------- d-----w- c:\programmi\eMule
2010-01-25 20:50 . 2010-01-25 21:01 -------- d-----w- c:\documents and settings\All Users\CyberLink
2010-01-25 20:49 . 2010-01-25 20:49 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\CyberLink
2010-01-25 20:48 . 2010-02-02 19:15 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\CyberLink
2010-01-25 20:46 . 2010-01-25 20:46 53319 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Temp\{D36DD326-7280-11D8-97C8-000129760CBE}\PostBuild.exe
2010-01-25 20:45 . 2010-01-31 17:09 -------- d-----w- c:\programmi\CyberLink
2010-01-25 20:45 . 2010-01-25 20:46 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Temp
2010-01-25 20:45 . 2010-01-25 20:45 36864 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Temp\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\PostBuild.exe
2010-01-25 20:14 . 2010-01-25 20:14 -------- d-----w- c:\programmi\uTorrent
2010-01-25 20:08 . 2010-01-25 20:09 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\Nero
2010-01-25 20:08 . 2010-01-25 20:08 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Nero
2010-01-25 20:08 . 2010-01-25 20:08 -------- d-----w- c:\programmi\Nero
2010-01-25 20:08 . 2010-01-25 20:08 -------- d-----w- c:\programmi\File comuni\Nero
2010-01-25 20:04 . 2010-02-04 18:37 -------- d-----w- c:\documents and settings\Luca\Tracing
2010-01-25 20:01 . 2010-01-25 20:01 -------- d-----w- c:\programmi\Microsoft
2010-01-25 20:01 . 2010-01-25 20:01 -------- d-----w- c:\programmi\Windows Live SkyDrive
2010-01-25 20:01 . 2010-01-25 20:42 -------- d-----w- c:\programmi\Windows Live
2010-01-25 20:00 . 2010-02-01 22:46 -------- d-----w- C:\FOTO
2010-01-25 19:56 . 2010-01-25 19:57 -------- d-----w- c:\windows\system32\Adobe
2010-01-25 19:42 . 2010-01-25 19:42 -------- d-----w- c:\programmi\File comuni\Windows Live

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-03 17:30 . 2010-01-25 17:29 89608 ----a-w- c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2010-02-02 17:15 . 2010-01-25 17:36 104249 ----a-w- c:\windows\hpoins04.dat
2010-02-02 17:11 . 2001-09-01 05:00 75494 ----a-w- c:\windows\system32\perfc010.dat
2010-02-02 17:11 . 2001-09-01 05:00 450274 ----a-w- c:\windows\system32\perfh010.dat
2010-01-31 17:10 . 2010-01-25 17:16 -------- d--h--w- c:\programmi\InstallShield Installation Information
2010-01-31 17:09 . 2010-01-18 06:30 505392 ----a-w- c:\windows\system32\msvcp71.dll
2010-01-25 19:19 . 2010-01-25 19:19 587032 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgiproxy.exe
2010-01-25 19:19 . 2010-01-25 19:19 1471768 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgupd.dll
2010-01-25 19:19 . 2010-01-25 19:19 1126168 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgupd.exe
2010-01-25 19:19 . 2010-01-25 19:19 758040 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avginet.dll
2010-01-25 19:18 . 2010-01-25 19:22 12936 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgrkx86.sys
2010-01-25 19:18 . 2010-01-25 19:22 10520 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgrsstx.dll
2010-01-25 19:18 . 2010-01-25 19:22 26824 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgmfx86.sys
2010-01-25 19:18 . 2010-01-25 19:22 287000 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgrsx.exe
2010-01-25 19:18 . 2010-01-25 19:22 29208 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgfwdx.sys
2010-01-25 19:18 . 2010-01-25 19:22 55576 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgfwda.dll
2010-01-25 19:18 . 2010-01-25 19:22 50968 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgfwdx.dll
2010-01-25 19:18 . 2010-01-25 19:22 35096 ----a-w- c:\documents and settings\All Users\Dati applicazioni\avg8\update\backup\avgfwda.sys
2010-01-25 18:06 . 2010-01-25 17:00 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-01-25 17:48 . 2010-01-25 17:48 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\ATI
2010-01-25 17:48 . 2010-01-25 17:48 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\ATI
2010-01-25 17:48 . 2010-01-25 17:48 0 ----a-w- c:\windows\ativpsrm.bin
2010-01-25 17:23 . 2010-01-25 17:19 -------- d-----w- c:\programmi\ATI Technologies
2010-01-25 17:22 . 2010-01-25 17:22 9158 ----a-r- c:\documents and settings\Luca\Dati applicazioni\Microsoft\Installer\{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}\ARPPRODUCTICON.exe
2010-01-25 17:22 . 2010-01-25 17:22 -------- d-----w- c:\programmi\File comuni\ATI Technologies
2010-01-25 17:20 . 2010-01-25 17:15 -------- d-----w- c:\programmi\File comuni\InstallShield
2010-01-25 17:17 . 2010-01-25 17:17 -------- d-----w- c:\programmi\Realtek
2010-01-25 17:17 . 2010-01-25 17:17 -------- d-----w- c:\documents and settings\Luca\Dati applicazioni\InstallShield
2010-01-25 17:16 . 2010-01-25 17:15 -------- d-----w- c:\programmi\VIA
2010-01-25 17:14 . 2010-01-25 17:14 -------- d-----w- c:\programmi\Intel
2010-01-25 17:01 . 2010-01-25 17:01 -------- d-----w- c:\programmi\microsoft frontpage
2010-01-25 17:00 . 2010-01-25 17:00 -------- d-----w- c:\programmi\Servizi in linea
2010-01-25 16:58 . 2010-01-25 16:58 21840 ----a-w- c:\windows\system32\emptyregdb.dat
2010-01-18 06:30 . 2010-01-18 06:30 348160 ----a-w- c:\windows\system32\msvcr71.dll
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="c:\programmi\Messenger\msmsgs.exe" [2008-04-13 1695232]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HDAudDeck"="c:\programmi\VIA\VIAudioi\HDADeck\HDeck.exe" [2008-10-07 33538048]
"StartCCC"="c:\programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-02-03 61440]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb10.exe" [2004-06-21 172032]
"GrooveMonitor"="c:\programmi\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2010-01-27 2043160]
"UpdatePDRShortCut"="c:\programmi\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe" [2008-12-03 218408]
"Corel File Shell Monitor"="c:\programmi\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe" [2008-08-18 16712]
"BDRegion"="c:\programmi\Cyberlink\Shared Files\brs.exe" [2007-11-16 91432]
"RemoteControl"="c:\programmi\CyberLink\PowerDVD\PDVDServ.exe" [2007-10-28 72736]
"LanguageShortcut"="c:\programmi\CyberLink\PowerDVD\Language\Language.exe" [2007-10-11 62760]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2004-02-12 49152]
"HP Component Manager"="c:\programmi\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 241664]
"Adobe Acrobat Speed Launcher"="c:\programmi\Adobe\Acrobat 9.0\Acrobat\Acrobat_sl.exe" [2008-06-12 37232]
"Acrobat Assistant 8.0"="c:\programmi\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" [2008-06-11 640376]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Avvio rapido di HP Image Zone.lnk - c:\programmi\HP\Digital Imaging\bin\hpqthb08.exe [2004-5-28 53248]
HP Digital Imaging Monitor.lnk - c:\programmi\HP\Digital Imaging\bin\hpqtra08.exe [2004-5-28 241664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-01-25 19:22 11952 ----a-w- c:\windows\system32\avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\system32\acaptuser32.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"BlueSoleil Hid Service"=2 (0x2)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programmi\\AVG\\AVG8\\avgam.exe"=
"c:\\Programmi\\AVG\\AVG8\\avgupd.exe"=
"c:\\Programmi\\AVG\\AVG8\\avgnsx.exe"=
"d:\\C\\Documents and Settings\\Documents and Settings\\Documenti\\utorrent-1.8-beta-9137.upx.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"d:\\C\\eMule\\emule.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\Sports Interactive\\Football Manager 2010\\fm.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"16007:TCP"= 16007:TCP:Emule
"44941:UDP"= 44941:UDP:Emule

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [25/01/2010 20.18.39 12552]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [25/01/2010 20.18.36 335240]
R1 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [25/01/2010 20.18.38 108552]
R2 ACEDRV08;ACEDRV08;c:\windows\system32\drivers\ACEDRV08.sys [02/02/2010 19.06.30 108768]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [25/01/2010 20.21.58 297752]
R2 avgfws8;AVG8 Firewall;c:\progra~1\AVG\AVG8\avgfws8.exe [25/01/2010 20.21.56 1370488]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [25/01/2010 20.18.02 29208]
R3 V0330VID;WebCam Vista;c:\windows\system32\drivers\V0330Vid.sys [25/01/2010 18.35.09 178913]
R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [25/01/2010 18.16.06 876288]
S2 GoogleUpdateBeta;Google Update Service;c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdateBeta.exe /svc c:\documents and settings\Luca\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdateBeta.exe
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [25/01/2010 20.18.02 29208]
S3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\programmi\MAGIX\Common\Database\bin\fbserver.exe [02/02/2010 18.59.28 1527900]
.
Contenuto della cartella 'Scheduled Tasks'
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
IE: Append Link Target to Existing PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append to Existing PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert Link Target to Adobe PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert to Adobe PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-04 19:58
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
HDAudDeck = c:\programmi\VIA\VIAudioi\HDADeck\HDeck.exe 1????????????????????????????????????????????

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4C74-92FE-5B863F82066B}]
"ImagePath"="\??\c:\programmi\CyberLink\PowerDVD\000.fcl"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(1172)
c:\windows\system32\Ati2evxx.dll
.
Ora fine scansione: 2010-02-04 19:59:55
ComboFix-quarantined-files.txt 2010-02-04 18:59

Pre-Run: 457.414.504.448 byte disponibili
Post-Run: 457.928.392.704 byte disponibili

WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 01217ED6D2CF6AF439C254FF22DDCE73

[ste_95]

Non ho guardato per in intero il log, ma hai ancora problemi?

[giugiu0303]

Sono nuva e penso di trovarmi bene in questo forum
Mi date una mano?
mi dite per cortesia cosa devo cancellare:
Grazie a tutti

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\brsvc01a.exe
C:\WINDOWS\system32\brss01a.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Programmi\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\ScanSoft\PaperPort\pptd40nt.exe
C:\Programmi\Brother\ControlCenter2\brctrcen.exe
C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Programmi\Eset\nod32kui.exe
C:\Programmi\Ask.com\Updater\Updater.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmi\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\Giusy\Desktop\Bootstrapper_0-uvdhqmaP_.exe
C:\Programmi\antivirus\Trend Micro\HiJackThis\HiJackThis.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\MsiExec.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\regasm.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.facebook.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Programmi\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Programmi\Share_Accelerator_MM\tbShar.dll
F3 - REG:win.ini: load=C:\DOCUME~1\Giusy\DATIAP~1\MICROS~1\ieudinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Programmi\Share_Accelerator_MM\tbShar.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Programmi\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programmi\Ask.com\GenericAskToolbar.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Programmi\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Programmi\AskTBar\bar\1.bin\ASKTBAR.DLL (file missing)
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Programmi\Share_Accelerator_MM\tbShar.dll
O3 - Toolbar: Softonic Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programmi\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Programmi\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Programmi\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [SetDefPrt] C:\Programmi\Brother\Brmfl05a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter2.0] C:\Programmi\Brother\ControlCenter2\brctrcen.exe /autorun
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [ApnUpdater] "C:\Programmi\Ask.com\Updater\Updater.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKLM\..\Policies\Explorer\Run: [MqtgSVC] C:\WINDOWS\mqtgsvc.exe /waitservice
O4 - HKCU\..\Policies\Explorer\Run: [rsvp] C:\WINDOWS\System\rsvp.exe /waitservice
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [Mstsc] C:\WINDOWS\mstsc.exe /waitservice (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [Mstsc] C:\WINDOWS\mstsc.exe /waitservice (User 'Default user')
O4 - Startup: OpenOffice.org 2.0.lnk = C:\Programmi\OpenOffice.org 2.0\program\quickstart.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Controllo dello stato.lnk = C:\Programmi\Brother\Brmfcmon\BrMfcWnd.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmi\InterVideo\Common\Bin\WinCinemaMgr.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Programmi\Dealio\kb127\Dealio.dll
O9 - Extra 'Tools' menuitem: Dealio - {E908B145-C847-4e85-B315-07E2E70DECF8} - C:\Programmi\Dealio\kb127\Dealio.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Programmi\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programmi\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe