[LOG] combofix aiuto per favore :)

[hashcat]

si scusami,il report che non si produce era riguardo mbrscan,per quanto riguarda il disco fissi,si è partizionato in 2 pero la partizione d a dir la verita è piu grande della c.
c 270 gb,d 400 gb +o-

Si, hai ragione, avevo letto male. Comunque nel report c'è qualcosa che non mi convince.

P.S.: Guarda il messaggio privato che ti ho inviato.

[hashcat]

Per cercare di risolvere momentaneamente il problema delle trasparenza imposta il tema contrasto elevato:

Premi contemporaneamente i tasti indicati nell'immagine a seguire:



Apparirà a schermo un messaggio di conferma, premere si per confermare (se non dovesse apparire il bottone premere invio).

[hashcat]

si scusami,il report che non si produce era riguardo mbrscan

Dopo aver impostato il tema a contrasto elevato la schermata di MBRscan dovrebbe apparire così:



Anche se il problema della trasparenza persistesse clicca dove indicato (ti compariva la finestra di opzioni l'immagine che avevo inserito precedentemente si riferiva ad una versione dello strumento precedente).

[peolex4]

ecco il report di mbrscan :

MBRScan v1.1.1

OS : Windows 7 Service Pack 1 (64 bit)
PROCESSOR : Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
BOOT : Normal Boot
DATE : 2012/04/22 (ISO 8601) at 15:17:00
________________________________________________________________________________

DISK : Device\Harddisk0\DR0 __Hitachi HTS547575A9E (JE4O)
BUS_TYPE : (0x03) P-ATA
USE_PIO : NO
MAX_TRANSFER : 128 Kb
ALIGNMENT_MASK : word aligned
________________________________________________________________________________

Device\Harddisk0\DR0 698.6 Go [Fixed] ==> Unknown MBR Code ==> PARTITION TABLE FAKED !!

MBR_MD5 : C5F0EAFEC406C7F0C82ACAB31114FAEF
MBR_SHA1 : C0D9C3E991C1ABD43FBE0F2F5BEA119904177E9A

Device\Harddisk0\Partition1 100.0 Mo 0x07 NTFS / HPFS __ BOOTABLE __
Device\Harddisk0\Partition2 271.0 Go 0x07 NTFS / HPFS
Device\Harddisk0\Partition3 23.67 Go 0x27 RE Hidden partition
Device\Harddisk0\Partition4 403.9 Go 0x07 NTFS / HPFS
________________________________________________________________________________

############################### Additional scan ################################

DRIVER : C:\windows\system32\hal.dll => Invisible on the disk
ADDRESS : 0x03205000
SIZE : 292.0 Ko

DRIVER : C:\windows\system32\kdcom.dll => Invisible on the disk
ADDRESS : 0x00B9C000
SIZE : 40.0 Ko

DRIVER : C:\windows\system32\mcupdate_GenuineIntel.dll => Invisible on the disk
ADDRESS : 0x00CDD000
SIZE : 316.0 Ko

DRIVER : C:\windows\system32\CLFS.SYS => Invisible on the disk
ADDRESS : 0x00D40000
SIZE : 376.0 Ko

DRIVER : C:\windows\system32\CI.dll => Invisible on the disk
ADDRESS : 0x00C00000
SIZE : 768.0 Ko

DRIVER : C:\windows\system32\drivers\Wdf01000.sys => Invisible on the disk
ADDRESS : 0x00ED3000
SIZE : 656.0 Ko

DRIVER : C:\windows\system32\drivers\WDFLDR.SYS => Invisible on the disk
ADDRESS : 0x00F77000
SIZE : 60.0 Ko

DRIVER : C:\windows\system32\drivers\ACPI.sys => Invisible on the disk
ADDRESS : 0x00F86000
SIZE : 348.0 Ko

DRIVER : C:\windows\system32\drivers\WMILIB.SYS => Invisible on the disk
ADDRESS : 0x00FDD000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\drivers\msisadrv.sys => Invisible on the disk
ADDRESS : 0x00FE6000
SIZE : 40.0 Ko

DRIVER : C:\windows\system32\drivers\pci.sys => Invisible on the disk
ADDRESS : 0x00E00000
SIZE : 204.0 Ko

DRIVER : C:\windows\system32\drivers\vdrvroot.sys => Invisible on the disk
ADDRESS : 0x00E33000
SIZE : 52.0 Ko

DRIVER : C:\windows\System32\drivers\partmgr.sys => Invisible on the disk
ADDRESS : 0x00E40000
SIZE : 84.0 Ko

DRIVER : C:\windows\system32\DRIVERS\compbatt.sys => Invisible on the disk
ADDRESS : 0x00E55000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\DRIVERS\BATTC.SYS => Invisible on the disk
ADDRESS : 0x00E5E000
SIZE : 48.0 Ko

DRIVER : C:\windows\system32\drivers\volmgr.sys => Invisible on the disk
ADDRESS : 0x00E6A000
SIZE : 84.0 Ko

DRIVER : C:\windows\System32\drivers\volmgrx.sys => Invisible on the disk
ADDRESS : 0x00D9E000
SIZE : 368.0 Ko

DRIVER : C:\windows\System32\drivers\mountmgr.sys => Invisible on the disk
ADDRESS : 0x00E7F000
SIZE : 104.0 Ko

DRIVER : C:\windows\system32\DRIVERS\iaStor.sys => Invisible on the disk
ADDRESS : 0x01067000
SIZE : 1.33 Mo

DRIVER : C:\windows\system32\drivers\atapi.sys => Invisible on the disk
ADDRESS : 0x011BB000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\drivers\ataport.SYS => Invisible on the disk
ADDRESS : 0x011C4000
SIZE : 168.0 Ko

DRIVER : C:\windows\system32\drivers\msahci.sys => Invisible on the disk
ADDRESS : 0x011EE000
SIZE : 44.0 Ko

DRIVER : C:\windows\system32\drivers\PCIIDEX.SYS => Invisible on the disk
ADDRESS : 0x01000000
SIZE : 64.0 Ko

DRIVER : C:\windows\system32\drivers\amdxata.sys => Invisible on the disk
ADDRESS : 0x01010000
SIZE : 44.0 Ko

DRIVER : C:\windows\system32\drivers\fltmgr.sys => Invisible on the disk
ADDRESS : 0x0101B000
SIZE : 304.0 Ko

DRIVER : C:\windows\system32\drivers\fileinfo.sys => Invisible on the disk
ADDRESS : 0x00E99000
SIZE : 80.0 Ko

DRIVER : C:\windows\System32\Drivers\Ntfs.sys => Invisible on the disk
ADDRESS : 0x0125D000
SIZE : 1.64 Mo

DRIVER : C:\windows\System32\Drivers\msrpc.sys => Invisible on the disk
ADDRESS : 0x014AC000
SIZE : 376.0 Ko

DRIVER : C:\windows\System32\Drivers\ksecdd.sys => Invisible on the disk
ADDRESS : 0x0150A000
SIZE : 108.0 Ko

DRIVER : C:\windows\System32\Drivers\cng.sys => Invisible on the disk
ADDRESS : 0x01525000
SIZE : 456.0 Ko

DRIVER : C:\windows\System32\drivers\pcw.sys => Invisible on the disk
ADDRESS : 0x01597000
SIZE : 68.0 Ko

DRIVER : C:\windows\System32\Drivers\Fs_Rec.sys => Invisible on the disk
ADDRESS : 0x015A8000
SIZE : 40.0 Ko

DRIVER : C:\windows\system32\drivers\ndis.sys => Invisible on the disk
ADDRESS : 0x01615000
SIZE : 972.0 Ko

DRIVER : C:\windows\system32\drivers\NETIO.SYS => Invisible on the disk
ADDRESS : 0x01708000
SIZE : 384.0 Ko

DRIVER : C:\windows\System32\Drivers\ksecpkg.sys => Invisible on the disk
ADDRESS : 0x01768000
SIZE : 172.0 Ko

DRIVER : C:\windows\System32\drivers\tcpip.sys => Invisible on the disk
ADDRESS : 0x018DE000
SIZE : 2.02 Mo

DRIVER : C:\windows\System32\drivers\fwpkclnt.sys => Invisible on the disk
ADDRESS : 0x01AE2000
SIZE : 296.0 Ko

DRIVER : C:\windows\system32\drivers\volsnap.sys => Invisible on the disk
ADDRESS : 0x01B2C000
SIZE : 304.0 Ko

DRIVER : C:\windows\System32\Drivers\spldr.sys => Invisible on the disk
ADDRESS : 0x01B78000
SIZE : 32.0 Ko

DRIVER : C:\windows\System32\drivers\rdyboost.sys => Invisible on the disk
ADDRESS : 0x01B80000
SIZE : 232.0 Ko

DRIVER : C:\windows\system32\DRIVERS\nvpciflt.sys => Invisible on the disk
ADDRESS : 0x01BBA000
SIZE : 20.0 Ko

DRIVER : C:\windows\System32\Drivers\mup.sys => Invisible on the disk
ADDRESS : 0x01BBF000
SIZE : 72.0 Ko

DRIVER : C:\windows\System32\drivers\hwpolicy.sys => Invisible on the disk
ADDRESS : 0x01BD1000
SIZE : 36.0 Ko

DRIVER : C:\windows\System32\DRIVERS\fvevol.sys => Invisible on the disk
ADDRESS : 0x01800000
SIZE : 232.0 Ko

DRIVER : C:\windows\system32\drivers\disk.sys => Invisible on the disk
ADDRESS : 0x0183A000
SIZE : 88.0 Ko

DRIVER : C:\windows\system32\drivers\CLASSPNP.SYS => Invisible on the disk
ADDRESS : 0x01850000
SIZE : 192.0 Ko

DRIVER : C:\windows\system32\DRIVERS\dtsoftbus01.sys => Invisible on the disk
ADDRESS : 0x04200000
SIZE : 292.0 Ko

DRIVER : C:\windows\system32\DRIVERS\cdrom.sys => Invisible on the disk
ADDRESS : 0x04249000
SIZE : 168.0 Ko

DRIVER : C:\windows\System32\Drivers\Null.SYS => Invisible on the disk
ADDRESS : 0x04273000
SIZE : 36.0 Ko

DRIVER : C:\windows\System32\Drivers\Beep.SYS => Invisible on the disk
ADDRESS : 0x043E3000
SIZE : 28.0 Ko

DRIVER : C:\windows\System32\drivers\vga.sys => Invisible on the disk
ADDRESS : 0x043EA000
SIZE : 56.0 Ko

DRIVER : C:\windows\System32\drivers\VIDEOPRT.SYS => Invisible on the disk
ADDRESS : 0x0188E000
SIZE : 148.0 Ko

DRIVER : C:\windows\System32\drivers\watchdog.sys => Invisible on the disk
ADDRESS : 0x018B3000
SIZE : 64.0 Ko

DRIVER : C:\windows\System32\DRIVERS\RDPCDD.sys => Invisible on the disk
ADDRESS : 0x018C3000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\drivers\rdpencdd.sys => Invisible on the disk
ADDRESS : 0x018CC000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\drivers\rdprefmp.sys => Invisible on the disk
ADDRESS : 0x018D5000
SIZE : 36.0 Ko

DRIVER : C:\windows\System32\Drivers\Msfs.SYS => Invisible on the disk
ADDRESS : 0x01BDA000
SIZE : 44.0 Ko

DRIVER : C:\windows\System32\Drivers\Npfs.SYS => Invisible on the disk
ADDRESS : 0x01BE5000
SIZE : 68.0 Ko

DRIVER : C:\windows\system32\DRIVERS\tdx.sys => Invisible on the disk
ADDRESS : 0x01793000
SIZE : 136.0 Ko

DRIVER : C:\windows\system32\DRIVERS\TDI.SYS => Invisible on the disk
ADDRESS : 0x017B5000
SIZE : 52.0 Ko

DRIVER : C:\windows\system32\drivers\afd.sys => Invisible on the disk
ADDRESS : 0x01400000
SIZE : 548.0 Ko

DRIVER : C:\windows\System32\DRIVERS\netbt.sys => Invisible on the disk
ADDRESS : 0x015B2000
SIZE : 276.0 Ko

DRIVER : C:\windows\system32\drivers\ws2ifsl.sys => Invisible on the disk
ADDRESS : 0x017C2000
SIZE : 44.0 Ko

DRIVER : C:\windows\system32\DRIVERS\wfplwf.sys => Invisible on the disk
ADDRESS : 0x01BF6000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\DRIVERS\pacer.sys => Invisible on the disk
ADDRESS : 0x017CD000
SIZE : 152.0 Ko

DRIVER : C:\windows\system32\DRIVERS\vwififlt.sys => Invisible on the disk
ADDRESS : 0x01489000
SIZE : 88.0 Ko

DRIVER : C:\windows\system32\DRIVERS\netbios.sys => Invisible on the disk
ADDRESS : 0x01600000
SIZE : 60.0 Ko

DRIVER : C:\windows\system32\DRIVERS\wanarp.sys => Invisible on the disk
ADDRESS : 0x01200000
SIZE : 108.0 Ko

DRIVER : C:\windows\system32\DRIVERS\termdd.sys => Invisible on the disk
ADDRESS : 0x0121B000
SIZE : 80.0 Ko

DRIVER : C:\windows\system32\Drivers\SABI.sys => Invisible on the disk
ADDRESS : 0x017F3000
SIZE : 40.0 Ko

DRIVER : C:\windows\system32\DRIVERS\rdbss.sys => Invisible on the disk
ADDRESS : 0x06EA5000
SIZE : 324.0 Ko

DRIVER : C:\windows\system32\drivers\nsiproxy.sys => Invisible on the disk
ADDRESS : 0x06EF6000
SIZE : 48.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mssmbios.sys => Invisible on the disk
ADDRESS : 0x06F02000
SIZE : 44.0 Ko

DRIVER : C:\windows\System32\drivers\discache.sys => Invisible on the disk
ADDRESS : 0x06F0D000
SIZE : 60.0 Ko

DRIVER : C:\windows\System32\Drivers\dfsc.sys => Invisible on the disk
ADDRESS : 0x06F1C000
SIZE : 120.0 Ko

DRIVER : C:\windows\system32\DRIVERS\blbdrive.sys => Invisible on the disk
ADDRESS : 0x06F3A000
SIZE : 68.0 Ko

DRIVER : C:\windows\system32\DRIVERS\tunnel.sys => Invisible on the disk
ADDRESS : 0x06F4B000
SIZE : 152.0 Ko

DRIVER : C:\windows\system32\DRIVERS\nvlddmkm.sys => Invisible on the disk
ADDRESS : 0x0F20D000
SIZE : 12.43 Mo

DRIVER : C:\windows\System32\Drivers\nvBridge.kmd => Invisible on the disk
ADDRESS : 0x0FE7C000
SIZE : 8.0 Ko

DRIVER : C:\windows\System32\drivers\dxgkrnl.sys => Invisible on the disk
ADDRESS : 0x0FE7E000
SIZE : 976.0 Ko

DRIVER : C:\windows\System32\drivers\dxgmms1.sys => Invisible on the disk
ADDRESS : 0x0FF72000
SIZE : 280.0 Ko

DRIVER : C:\windows\system32\DRIVERS\igdkmd64.sys => Invisible on the disk
ADDRESS : 0x07434000
SIZE : 11.69 Mo

DRIVER : C:\windows\system32\DRIVERS\HECIx64.sys => Invisible on the disk
ADDRESS : 0x07FE5000
SIZE : 68.0 Ko

DRIVER : C:\windows\system32\drivers\usbehci.sys => Invisible on the disk
ADDRESS : 0x07400000
SIZE : 68.0 Ko

DRIVER : C:\windows\system32\drivers\USBPORT.SYS => Invisible on the disk
ADDRESS : 0x06F71000
SIZE : 344.0 Ko

DRIVER : C:\windows\system32\DRIVERS\HDAudBus.sys => Invisible on the disk
ADDRESS : 0x0FFB8000
SIZE : 144.0 Ko

DRIVER : C:\windows\system32\DRIVERS\i8042prt.sys => Invisible on the disk
ADDRESS : 0x07411000
SIZE : 120.0 Ko

DRIVER : C:\windows\system32\DRIVERS\kbdclass.sys => Invisible on the disk
ADDRESS : 0x0FFDC000
SIZE : 60.0 Ko

DRIVER : C:\windows\system32\DRIVERS\ETD.sys => Invisible on the disk
ADDRESS : 0x06FC7000
SIZE : 144.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mouclass.sys => Invisible on the disk
ADDRESS : 0x0FFEB000
SIZE : 60.0 Ko

DRIVER : C:\windows\system32\DRIVERS\GEARAspiWDM.sys => Invisible on the disk
ADDRESS : 0x0F200000
SIZE : 52.0 Ko

DRIVER : C:\windows\system32\DRIVERS\wmiacpi.sys => Invisible on the disk
ADDRESS : 0x07FF6000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\DRIVERS\CmBatt.sys => Invisible on the disk
ADDRESS : 0x0742F000
SIZE : 20.0 Ko

DRIVER : C:\windows\system32\DRIVERS\intelppm.sys => Invisible on the disk
ADDRESS : 0x06E00000
SIZE : 88.0 Ko

DRIVER : C:\windows\system32\DRIVERS\AMPPAL.sys => Invisible on the disk
ADDRESS : 0x06E16000
SIZE : 312.0 Ko

DRIVER : C:\windows\system32\DRIVERS\CompositeBus.sys => Invisible on the disk
ADDRESS : 0x06E64000
SIZE : 64.0 Ko

DRIVER : C:\windows\system32\DRIVERS\serscan.sys => Invisible on the disk
ADDRESS : 0x06E74000
SIZE : 32.0 Ko

DRIVER : C:\windows\system32\drivers\ksthunk.sys => Invisible on the disk
ADDRESS : 0x0FFFA000
SIZE : 24.0 Ko

DRIVER : C:\windows\system32\drivers\ks.sys => Invisible on the disk
ADDRESS : 0x02E33000
SIZE : 268.0 Ko

DRIVER : C:\windows\system32\DRIVERS\clwvd.sys => Invisible on the disk
ADDRESS : 0x02E76000
SIZE : 24.0 Ko

DRIVER : C:\windows\system32\DRIVERS\AgileVpn.sys => Invisible on the disk
ADDRESS : 0x02E7C000
SIZE : 88.0 Ko

DRIVER : C:\windows\system32\DRIVERS\rasl2tp.sys => Invisible on the disk
ADDRESS : 0x02E92000
SIZE : 144.0 Ko

DRIVER : C:\windows\system32\DRIVERS\ndistapi.sys => Invisible on the disk
ADDRESS : 0x02EB6000
SIZE : 48.0 Ko

DRIVER : C:\windows\system32\DRIVERS\ndiswan.sys => Invisible on the disk
ADDRESS : 0x02EC2000
SIZE : 188.0 Ko

DRIVER : C:\windows\system32\DRIVERS\raspppoe.sys => Invisible on the disk
ADDRESS : 0x02EF1000
SIZE : 108.0 Ko

DRIVER : C:\windows\system32\DRIVERS\raspptp.sys => Invisible on the disk
ADDRESS : 0x02F0C000
SIZE : 132.0 Ko

DRIVER : C:\windows\system32\DRIVERS\rassstp.sys => Invisible on the disk
ADDRESS : 0x02F2D000
SIZE : 104.0 Ko

DRIVER : C:\windows\system32\DRIVERS\swenum.sys => Invisible on the disk
ADDRESS : 0x02F47000
SIZE : 8.0 Ko

DRIVER : C:\windows\system32\DRIVERS\umbus.sys => Invisible on the disk
ADDRESS : 0x02F49000
SIZE : 72.0 Ko

DRIVER : C:\windows\system32\DRIVERS\usbhub.sys => Invisible on the disk
ADDRESS : 0x02F5B000
SIZE : 360.0 Ko

DRIVER : C:\windows\System32\Drivers\NDProxy.SYS => Invisible on the disk
ADDRESS : 0x02FB5000
SIZE : 84.0 Ko

DRIVER : C:\windows\system32\drivers\RTKVHD64.sys => Invisible on the disk
ADDRESS : 0x084BF000
SIZE : 2.77 Mo

DRIVER : C:\windows\system32\drivers\portcls.sys => Invisible on the disk
ADDRESS : 0x08783000
SIZE : 244.0 Ko

DRIVER : C:\windows\system32\drivers\drmk.sys => Invisible on the disk
ADDRESS : 0x087C0000
SIZE : 136.0 Ko

DRIVER : C:\windows\system32\DRIVERS\IntcDAud.sys => Invisible on the disk
ADDRESS : 0x08400000
SIZE : 332.0 Ko

DRIVER : C:\windows\System32\win32k.sys => Invisible on the disk
ADDRESS : 0x00020000
SIZE : 3.08 Mo

DRIVER : C:\windows\System32\drivers\Dxapi.sys => Invisible on the disk
ADDRESS : 0x08453000
SIZE : 48.0 Ko

DRIVER : C:\windows\System32\Drivers\crashdmp.sys => Invisible on the disk
ADDRESS : 0x0845F000
SIZE : 56.0 Ko

DRIVER : C:\windows\System32\Drivers\dump_iaStor.sys => Invisible on the disk
ADDRESS : 0x0427C000
SIZE : 1.33 Mo

DRIVER : C:\windows\System32\Drivers\dump_dumpfve.sys => Invisible on the disk
ADDRESS : 0x0846D000
SIZE : 76.0 Ko

DRIVER : C:\windows\system32\DRIVERS\monitor.sys => Invisible on the disk
ADDRESS : 0x08480000
SIZE : 56.0 Ko

DRIVER : C:\windows\system32\DRIVERS\usbccgp.sys => Invisible on the disk
ADDRESS : 0x0848E000
SIZE : 116.0 Ko

DRIVER : C:\windows\system32\DRIVERS\USBD.SYS => Invisible on the disk
ADDRESS : 0x084AB000
SIZE : 8.0 Ko

DRIVER : C:\windows\System32\Drivers\usbvideo.sys => Invisible on the disk
ADDRESS : 0x02FCA000
SIZE : 184.0 Ko

DRIVER : C:\windows\system32\DRIVERS\MijXfilt.sys => Invisible on the disk
ADDRESS : 0x02E00000
SIZE : 132.0 Ko

DRIVER : C:\windows\system32\DRIVERS\xusb21.sys => Invisible on the disk
ADDRESS : 0x084AD000
SIZE : 68.0 Ko

DRIVER : C:\windows\system32\DRIVERS\hidusb.sys => Invisible on the disk
ADDRESS : 0x087E2000
SIZE : 56.0 Ko

DRIVER : C:\windows\system32\DRIVERS\HIDCLASS.SYS => Invisible on the disk
ADDRESS : 0x06E7C000
SIZE : 100.0 Ko

DRIVER : C:\windows\system32\DRIVERS\HIDPARSE.SYS => Invisible on the disk
ADDRESS : 0x087F0000
SIZE : 36.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mouhid.sys => Invisible on the disk
ADDRESS : 0x02E21000
SIZE : 52.0 Ko

DRIVER : C:\windows\system32\DRIVERS\kbdhid.sys => Invisible on the disk
ADDRESS : 0x06E95000
SIZE : 56.0 Ko

DRIVER : C:\windows\System32\TSDDD.dll => Invisible on the disk
ADDRESS : 0x00540000
SIZE : 40.0 Ko

DRIVER : C:\windows\System32\cdd.dll => Invisible on the disk
ADDRESS : 0x00780000
SIZE : 156.0 Ko

DRIVER : C:\windows\system32\drivers\luafv.sys => Invisible on the disk
ADDRESS : 0x0122F000
SIZE : 140.0 Ko

DRIVER : C:\windows\system32\drivers\WudfPf.sys => Invisible on the disk
ADDRESS : 0x00EAD000
SIZE : 132.0 Ko

DRIVER : C:\windows\system32\DRIVERS\lltdio.sys => Invisible on the disk
ADDRESS : 0x06FEB000
SIZE : 84.0 Ko

DRIVER : C:\windows\system32\DRIVERS\nwifi.sys => Invisible on the disk
ADDRESS : 0x03E4B000
SIZE : 332.0 Ko

DRIVER : C:\windows\system32\DRIVERS\ndisuio.sys => Invisible on the disk
ADDRESS : 0x03E9E000
SIZE : 76.0 Ko

DRIVER : C:\windows\system32\DRIVERS\rspndr.sys => Invisible on the disk
ADDRESS : 0x03EB1000
SIZE : 96.0 Ko

DRIVER : C:\windows\system32\DRIVERS\TurboB.sys => Invisible on the disk
ADDRESS : 0x03EC9000
SIZE : 32.0 Ko

DRIVER : C:\windows\system32\drivers\HTTP.sys => Invisible on the disk
ADDRESS : 0x03ED1000
SIZE : 804.0 Ko

DRIVER : C:\windows\system32\DRIVERS\bowser.sys => Invisible on the disk
ADDRESS : 0x03F9A000
SIZE : 120.0 Ko

DRIVER : C:\windows\System32\drivers\mpsdrv.sys => Invisible on the disk
ADDRESS : 0x03FB8000
SIZE : 96.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mrxsmb.sys => Invisible on the disk
ADDRESS : 0x03FD0000
SIZE : 180.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mrxsmb10.sys => Invisible on the disk
ADDRESS : 0x06496000
SIZE : 312.0 Ko

DRIVER : C:\windows\system32\DRIVERS\mrxsmb20.sys => Invisible on the disk
ADDRESS : 0x064E4000
SIZE : 144.0 Ko

DRIVER : C:\windows\system32\drivers\peauth.sys => Invisible on the disk
ADDRESS : 0x06508000
SIZE : 664.0 Ko

DRIVER : C:\windows\System32\Drivers\secdrv.SYS => Invisible on the disk
ADDRESS : 0x065AE000
SIZE : 44.0 Ko

DRIVER : C:\windows\System32\DRIVERS\srvnet.sys => Invisible on the disk
ADDRESS : 0x065B9000
SIZE : 196.0 Ko

DRIVER : C:\windows\System32\drivers\tcpipreg.sys => Invisible on the disk
ADDRESS : 0x065EA000
SIZE : 72.0 Ko

DRIVER : C:\windows\System32\DRIVERS\srv2.sys => Invisible on the disk
ADDRESS : 0x06400000
SIZE : 420.0 Ko

DRIVER : C:\windows\System32\DRIVERS\srv.sys => Invisible on the disk
ADDRESS : 0x09C72000
SIZE : 608.0 Ko

DRIVER : C:\windows\System32\Drivers\fastfat.SYS => Invisible on the disk
ADDRESS : 0x09D96000
SIZE : 216.0 Ko

DRIVER : C:\windows\system32\DRIVERS\NETwNs64.sys => Invisible on the disk
ADDRESS : 0x0B890000
SIZE : 8.51 Mo

DRIVER : C:\windows\system32\DRIVERS\vwifibus.sys => Invisible on the disk
ADDRESS : 0x0C112000
SIZE : 52.0 Ko

DRIVER : C:\windows\system32\DRIVERS\vwifimp.sys => Invisible on the disk
ADDRESS : 0x0C11F000
SIZE : 40.0 Ko

DRIVER : C:\windows\System32\smss.exe => Invisible on the disk
ADDRESS : 0x482C0000
SIZE : 128.0 Ko

BCD EmsSettings {0CE4991B-E6B3-4B16-B23C-5E0D9250E5D9} => BcdLibraryBoolean_EmsEnabled (16000020)

SystemStartOptions : NOEXECUTE=OPTIN NUMPROC=8

________________________________________________________________________________

_____FAKED \Device\Harddisk0\DR0

0x00000000 50 41 53 53 00 00 00 00 00 00 00 00 00 00 00 00 PASS............
0x00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000000F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000110 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x000001F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

__ORIGINAL \Device\Harddisk0\DR0

0x00000000 33 C0 8E D8 8E C0 8E D0 BC 00 7C 8B F4 BF 00 06 3À.Ø.À.м.|.ô¿..
0x00000010 B9 00 01 FC F3 A5 EA 1B 00 60 00 0E 1F 06 E8 95 ¹..üó¥ê..`....è.
0x00000020 00 07 80 3E 97 01 01 74 75 80 3E 97 01 02 74 00 ...>...tu.>...t.
0x00000030 C6 06 94 01 00 E8 04 01 BE BE 01 B3 04 F6 04 80 Æ....è..¾¾.³.ö..
0x00000040 75 0F 83 C6 10 FE CB 75 F4 CD 18 BE 5D 01 E8 FC u..Æ.þËuôÍ.¾].èü
0x00000050 00 BB 00 7C 06 53 50 55 8B EC C7 46 02 00 00 5D .».|.SPU.ìÇF...]
0x00000060 50 55 8B EC C7 46 02 00 00 5D FF 74 0A FF 74 08 PU.ìÇF...].t..t.
0x00000070 06 53 50 55 8B EC C7 46 02 01 00 5D 50 55 8B EC .SPU.ìÇF...]PU.ì
0x00000080 C7 46 02 10 00 5D 16 1F 8B F4 B4 42 CD 13 83 C4 ÇF...]...ô´BÍ..Ä
0x00000090 10 EB 00 CB C6 06 95 01 00 E8 A0 00 EB 00 BB 00 .ë.ËÆ....è..ë.».
0x000000A0 7C 06 53 B8 01 02 B5 00 B1 05 B6 00 B2 80 CD 13 |.S¸..µ.±.¶.².Í.
0x000000B0 C6 06 94 01 01 CB B8 00 F0 8E C0 33 C0 8B F0 BB Æ....˸.ð.À3À.ð»
0x000000C0 FF FF 26 81 3C 53 77 74 08 83 C6 01 4B 75 F3 EB ..&.<Swt..Æ.Kuóë
0x000000D0 1A 26 81 7C 02 53 6D 74 02 EB EE 26 81 7C 04 69 .&.|.Smt.ëî&.|.i
0x000000E0 40 74 02 EB E4 83 C6 06 E8 01 00 C3 1E 57 26 8B @t.ëä.Æ.è..Ã.W&.
0x000000F0 14 26 8A 44 03 EE 26 8B 44 07 8E D8 26 8B 44 05 .&.D.î&.D..Ø&.D.
0x00000100 8B F8 C7 05 43 58 C7 45 02 5C 00 26 8A 44 02 EE .øÇ.CXÇE.\.&.D.î
0x00000110 B1 02 8A 65 05 80 FC FF 74 13 80 FC 80 76 0E C7 ±..e..ü.t..ü.v.Ç
0x00000120 45 02 5D 00 80 EC 80 88 65 05 EE B1 01 26 8B 14 E.]..ì..e.î±.&..
0x00000130 26 8A 44 04 EE 5F 1F 88 0E 97 01 C3 BB 00 06 B8 &.D.î_.....û..¸
0x00000140 01 03 B5 00 B1 01 B6 00 B2 80 CD 13 C3 AC 3C 00 ..µ.±.¶.².Í.ì<.
0x00000150 74 0A B4 0E B7 00 B3 07 CD 10 EB F1 C3 4D 69 73 t.´.·.³.Í.ëñÃMis
0x00000160 73 69 6E 67 20 6F 70 65 72 61 74 69 6E 67 20 73 sing operating s
0x00000170 79 73 74 65 6D 00 00 00 00 00 00 00 00 00 00 00 ystem...........
0x00000180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0x00000190 46 44 53 54 00 00 3E 02 00 27 00 00 BC 0A 8D 7E FDST..>..'..¼..~
0x000001A0 67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 g operating syst
0x000001B0 65 6D 00 00 00 63 7B 9A 5E 10 7D 81 00 00 80 20 em...c{.^.}....
0x000001C0 21 00 07 DF 13 0C 00 08 00 00 00 20 03 00 00 DF !..ß....... ...ß
0x000001D0 14 0C 07 FE FF FF 00 28 03 00 00 00 E0 21 00 FE ...þ...(....à!.þ
0x000001E0 FF FF 0F FE FF FF 00 28 E3 21 00 F0 7B 32 00 FE ...þ...(ã!.ð{2.þ
0x000001F0 FF FF 27 FE FF FF 00 18 5F 54 00 48 F5 02 55 AA ..'þ...._T.Hõ.Uª

[hashcat]

Se impostando questo tema hai risolto (temporaneamente) i problemi di trasparenza prova a postare anche il log di OTL.

[peolex4]

purtroppo non è cambiato nulla per quanto riguarda otl o le procedure di installazione di antivirus,oltre a non vedere i tasti con le scritte si blocca spesso il pc durante queste operazioni...

[Uomo_Senza_Sonno]

Forse sarà meglio prima ripristinare il mbr ed effettuare una pulizia da eventuali rootkit (dal log di combofix non si vede nulla), procediamo così: seguendo questa guida posta gli screenshot dei seguenti settori con HxD, poi se troviamo qualcosa facciamo pulizia ma soprattutto ripristiniamo il mbr.

I settori da postare (posta le immagini a finestra a tutto schermo, e con una risoluzione minima di 1024x768) sono i seguenti:

0
2047
1465147391
1465147392
e l'ultimo settore disponibile

[peolex4]

ecco qui le immagini dei vari settori,purtroppo non sono i risoluzione minima ma con le opzioni e le impostazioni in generali trovo qualche problema per via delle icone senza scritte o trasparenti quindi spero che andranno bene anche cosi...

[Uomo_Senza_Sonno]

Posta anche il settore 1465147390, se non c'è nulla dovremo andare a cercare l'altro estremo di partizione

[hashcat]

Se nel frattempo hai tempo effetua una scansione con il Bitdefender e con il DrWeb rescue disk.

[hashcat]

Ecco qui i link:

Bitdefender link

DrWeb Live CD

[peolex4]

grazie stavo gia all'opera per creare la pennetta rescue,comunque ecco qui l'altro settore che mi hai chiesto,purtroppo mi sembra che non ci sia nulla neanche qui:

[peolex4]

Purtroppo non riesco a stabilire la connessione a internet dal rescue disk di bitdefender,quindi non posso scaricare l'update

[peolex4]

Dr web : can't access try; job contro turned off

[hashcat]

Per scaricare gli aggiornamenti hai utilizzato una connessione LAN?

[hashcat]

Dr web : can't access try; job contro turned off

Prova a masterizzare l'ISO su CD con Imgburn, piuttosto che metterla su pendrive (da pendrive a volte da problemi).

[hashcat]

Puoi evitare di scaricare gli aggiornamenti do Bitdefender seguendo questa procedura (si ringrazia nikola291 per aver segnalato la procedura):

1. Installare Bitdefender su pendrive
2. Scaricare il file cumulative.zip e copiarlo nella pendrive
3. Avviare normalmente Bitdefender, non aggiornarlo
4. Nella schermata iniziale di Bitdefender selezionare Setting, cancellare il contenuto nel campo server di update (lasciandolo vuoto) salvare e uscire dal menu impostazioni
5. Lanciare l'update che mostrerà un messaggio d'errore, cliccare su ok.
6. Comparirà una finestra nella quale è attivato il tasto aggiornamento manuale
7. Cliccare su questo tasto e selezionare il file cumulative.zip
8. Attendere il completamento del processo d'aggiornamento
9. A questo punto il nostro software è aggiornato.

[hashcat]

Come verifica addizionale scarica aswMBR ed esegui una scansione (non scaricare il database).
Al termine della scansione posta il log.

[Uomo_Senza_Sonno]

Per quanto riguarda la ricerca del secondo estremo di partizione, portati al settore numero 1465147390 e utilizza la funzione trova selezioandola da Cerca-->trova, scrivi nel campo vuoto "manca il sistema operativo" e seleziona su indietro. Se non trova nulla, prova ad inserire "missing operanting system"

[hashcat]

Per quanto riguarda la ricerca del secondo estremo di partizione, portati al settore numero 1465147390 e utilizza la funzione trova selezioandola da Cerca-->trova, scrivi nel campo vuoto "manca il sistema operativo" e seleziona su indietro. Se non trova nulla, prova ad inserire "missing operanting system"

Se non trovi riscontri con nessuno di questi due prova con "sistema operativo mancante" anche se probabilmente, la stringa che troverai sarà quella in inglese.

P.S.: Ovviamente le stringhe devi cercarle omettendo gli apici.