ComboFix 09-09-14.02 - AUGUSTO 16.09.2009 16:03.1.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.39.1040.18.1015.207 [GMT 2:00]
Eseguito da: c:\users\AUGUSTO\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {00613500-077F-0000-0000-000000006100}
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00310034-0034-0034-6300-630066003100}
SP: AntiVir Desktop *disabled* (Outdated) {00613500-077F-0000-0000-000000006100}
SP: AntiVir Desktop *enabled* (Updated) {00310034-0034-0034-6300-630066003100}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\windows\system32\gatherWirelessInfo.vbs
.
((((((((((((((((((((((((( Files Creati Da 2009-08-16 al 2009-09-16 )))))))))))))))))))))))))))))))))))
.
2009-09-16 14:11 . 2009-09-16 14:11 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-16 14:11 . 2009-09-16 14:11 -------- d-----w- c:\users\AUGUSTO\AppData\Local\temp
2009-09-15 18:13 . 2009-09-15 18:13 131018 ----a-w- c:\users\AUGUSTO\AppData\Local\frcdoars.exe
2009-09-15 09:57 . 2008-04-05 03:34 15360 ----a-w- c:\windows\system32\pacerprf.dll
2009-09-15 09:57 . 2008-04-05 01:21 72192 ----a-w- c:\windows\system32\drivers\pacer.sys
2009-09-14 15:32 . 2009-09-14 15:32 -------- d-----w- c:\windows\Sun
2009-09-14 14:36 . 2009-09-14 15:17 -------- d-----w- c:\users\AUGUSTO\AppData\Roaming\dvdcss
2009-09-14 13:29 . 2009-09-14 13:29 -------- d-----w- c:\programdata\WindowsSearch
2009-09-14 10:26 . 2009-09-14 10:27 -------- d-----w- c:\users\AUGUSTO\AppData\Local\Adobe
2009-09-13 10:58 . 2009-03-08 11:32 72704 ----a-w- c:\windows\system32\admparse.dll
2009-09-13 10:40 . 2008-01-19 07:36 1541120 ----a-w- c:\windows\system32\onex.dll
2009-09-13 10:39 . 2008-01-19 07:37 866816 ----a-w- c:\windows\system32\wmpmde.dll
2009-09-13 10:38 . 2008-01-19 07:37 26624 ----a-w- c:\windows\system32\wtsapi32.dll
2009-09-13 10:37 . 2008-01-19 07:33 599552 ----a-w- c:\windows\system32\vsp1cln.exe
2009-09-13 10:37 . 2008-01-19 07:36 83968 ----a-w- c:\windows\system32\wbem\wmiutils.dll
2009-09-13 10:37 . 2008-01-19 07:36 742912 ----a-w- c:\windows\system32\wbem\wbemcore.dll
2009-09-13 10:37 . 2008-01-19 07:36 30208 ----a-w- c:\windows\system32\wbem\wbemprox.dll
2009-09-13 10:37 . 2008-01-19 07:34 191488 ----a-w- c:\windows\system32\wbem\mofd.dll
2009-09-13 10:37 . 2008-01-19 07:34 102400 ----a-w- c:\windows\system32\wbem\mofinstall.dll
2009-09-13 10:37 . 2008-01-19 07:34 263168 ----a-w- c:\windows\system32\wbem\esscli.dll
2009-09-13 10:37 . 2008-01-19 07:36 357888 ----a-w- c:\windows\system32\wbemcomn.dll
2009-09-13 10:37 . 2008-01-19 07:36 264704 ----a-w- c:\windows\system32\wbem\repdrvfs.dll
2009-09-13 10:36 . 2008-01-19 07:36 129536 ----a-w- c:\windows\system32\sqmapi.dll
2009-09-13 10:36 . 2008-01-19 07:36 704512 ----a-w- c:\windows\system32\SmiEngine.dll
2009-09-13 10:36 . 2008-01-19 07:36 139264 ----a-w- c:\windows\system32\SmiInstaller.dll
2009-09-13 10:36 . 2008-01-19 07:36 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-09-13 10:36 . 2008-01-19 07:33 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-09-13 10:35 . 2008-01-19 07:34 246784 ----a-w- c:\windows\system32\drvstore.dll
2009-09-13 10:35 . 2008-01-19 07:35 35328 ----a-w- c:\windows\system32\mspatcha.dll
2009-09-13 10:35 . 2008-01-19 07:34 305152 ----a-w- c:\windows\system32\msdelta.dll
2009-09-13 10:35 . 2008-01-19 07:34 258560 ----a-w- c:\windows\system32\dpx.dll
2009-09-13 10:35 . 2006-11-02 09:39 6656 ----a-w- c:\windows\system32\kbd106.dll
2009-09-12 13:16 . 2009-09-12 13:16 269312 ----a-w- c:\windows\system32\es.dll
2009-09-11 12:21 . 2009-09-11 12:21 2048 ----a-w- c:\windows\system32\tzres.dll
2009-09-11 12:18 . 2009-09-11 12:18 28672 ----a-w- c:\windows\system32\FwRemoteSvr.dll
2009-09-11 12:18 . 2009-09-11 12:18 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-09-11 12:18 . 2009-09-11 12:18 361984 ----a-w- c:\windows\system32\IPSECSVC.DLL
2009-09-11 12:18 . 2009-09-11 12:18 272896 ----a-w- c:\windows\system32\polstore.dll
2009-09-11 12:16 . 2009-09-11 12:16 94720 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-09-11 12:16 . 2009-09-11 12:16 241152 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-09-11 12:16 . 2009-09-11 12:16 160768 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-09-11 12:13 . 2009-09-11 12:13 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-09-11 12:13 . 2009-09-11 12:13 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-09-11 12:09 . 2009-09-11 12:09 17920 ----a-w- c:\windows\system32\netevent.dll
2009-09-11 12:09 . 2009-09-11 12:09 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-09-11 12:09 . 2009-09-11 12:09 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-09-11 12:09 . 2009-09-11 12:09 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-09-11 12:09 . 2009-09-11 12:09 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-09-11 12:09 . 2009-09-11 12:09 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-09-11 12:09 . 2009-09-11 12:09 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-09-11 12:09 . 2009-09-11 12:09 104960 ----a-w- c:\windows\system32\netiohlp.dll
2009-09-11 12:09 . 2009-09-11 12:09 10240 ----a-w- c:\windows\system32\finger.exe
2009-09-11 12:09 . 2009-09-11 12:09 897608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-09-11 12:05 . 2009-09-11 12:05 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-09-11 12:05 . 2009-09-11 12:05 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-09-11 12:05 . 2009-09-11 12:05 64512 ----a-w- c:\windows\system32\wlanapi.dll
2009-09-11 12:05 . 2009-09-11 12:05 513024 ----a-w- c:\windows\system32\wlansvc.dll
2009-09-11 12:05 . 2009-09-11 12:05 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-09-11 12:05 . 2009-09-11 12:05 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-09-11 12:03 . 2009-09-11 12:03 2033152 ----a-w- c:\windows\system32\win32k.sys
2009-09-11 12:02 . 2009-09-11 12:02 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-09-11 12:02 . 2009-09-11 12:02 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-09-11 12:02 . 2009-09-11 12:02 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-09-11 12:02 . 2009-09-11 12:02 23552 ----a-w- c:\windows\system32\lpk.dll
2009-09-11 12:02 . 2009-09-11 12:02 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-09-11 12:02 . 2009-09-11 12:02 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-09-11 11:59 . 2009-09-11 11:59 98816 ----a-w- c:\windows\system32\mfps.dll
2009-09-11 11:59 . 2009-09-11 11:59 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-09-11 11:59 . 2009-09-11 11:59 2868224 ----a-w- c:\windows\system32\mf.dll
2009-09-11 11:59 . 2009-09-11 11:59 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-09-11 11:59 . 2009-09-11 11:59 2048 ----a-w- c:\windows\system32\mferror.dll
2009-09-11 11:55 . 2009-09-11 11:55 376832 ----a-w- c:\windows\system32\winhttp.dll
2009-09-11 11:54 . 2009-09-11 11:54 71680 ----a-w- c:\windows\system32\atl.dll
2009-09-11 11:52 . 2009-09-11 11:52 -------- d-----w- c:\program files\Babylon
2009-09-11 11:50 . 2009-09-11 11:50 296960 ----a-w- c:\windows\system32\gdi32.dll
2009-09-11 11:46 . 2009-09-11 11:46 212480 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-09-11 11:44 . 2009-09-11 11:44 562176 ----a-w- c:\windows\system32\msdtcprx.dll
2009-09-11 11:44 . 2009-09-11 11:44 38912 ----a-w- c:\windows\system32\xolehlp.dll
2009-09-11 11:42 . 2009-09-11 11:42 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-09-11 11:41 . 2009-09-11 11:41 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-09-11 11:41 . 2009-09-11 11:41 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-09-11 11:41 . 2009-09-11 11:41 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-09-11 11:39 . 2009-09-11 11:39 303616 ----a-w- c:\windows\system32\wmpeffects.dll
2009-09-11 11:37 . 2009-09-11 11:37 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-09-11 11:37 . 2009-09-11 11:37 1191936 ----a-w- c:\windows\system32\msxml3.dll
2009-09-11 11:27 . 2009-09-11 11:27 636928 ----a-w- c:\windows\system32\localspl.dll
2009-09-11 11:26 . 2009-09-11 11:26 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-09-11 11:26 . 2009-09-11 11:26 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-09-11 11:26 . 2009-09-11 11:26 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-09-11 11:26 . 2009-09-11 11:26 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-09-11 11:26 . 2009-09-11 11:26 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-09-11 11:26 . 2009-09-11 11:26 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-09-11 11:20 . 2009-09-11 11:20 2927104 ----a-w- c:\windows\explorer.exe
2009-09-11 11:17 . 2008-01-19 07:34 15872 ----a-w- c:\windows\system32\hcrstco.dll
2009-09-11 11:17 . 2006-11-02 09:46 8704 ----a-w- c:\windows\system32\hccoin.dll
2009-09-11 11:15 . 2009-09-11 11:15 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-09-11 11:15 . 2009-09-11 11:15 439896 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-09-11 11:15 . 2009-09-11 11:15 213504 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-11 11:15 . 2009-09-11 11:15 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-09-11 11:15 . 2009-09-11 11:15 9728 ----a-w- c:\windows\system32\lsass.exe
2009-09-11 11:15 . 2009-09-11 11:15 72704 ----a-w- c:\windows\system32\secur32.dll
2009-09-11 11:15 . 2009-09-11 11:15 1256448 ----a-w- c:\windows\system32\lsasrv.dll
2009-09-11 11:15 . 2009-09-11 11:15 270848 ----a-w- c:\windows\system32\schannel.dll
2009-09-11 11:03 . 2009-09-11 11:03 6656 ----a-w- c:\windows\system32\kbd106n.dll
2009-09-11 11:03 . 2009-09-11 11:03 988216 ----a-w- c:\windows\system32\winload.exe
2009-09-11 11:03 . 2009-09-11 11:03 927288 ----a-w- c:\windows\system32\winresume.exe
2009-09-11 11:03 . 2009-09-11 11:03 40960 ----a-w- c:\windows\system32\srclient.dll
2009-09-11 11:03 . 2009-09-11 11:03 318464 ----a-w- c:\windows\system32\rstrui.exe
2009-09-11 11:03 . 2009-09-11 11:03 378368 ----a-w- c:\windows\system32\srcore.dll
2009-09-11 11:03 . 2009-09-11 11:03 46592 ----a-w- c:\windows\system32\setbcdlocale.dll
2009-09-11 11:03 . 2009-09-11 11:03 19000 ----a-w- c:\windows\system32\kd1394.dll
2009-09-11 11:03 . 2009-09-11 11:03 14848 ----a-w- c:\windows\system32\srdelayed.exe
2009-09-11 11:02 . 2009-09-11 11:02 615992 ----a-w- c:\windows\system32\ci.dll
2009-09-11 10:54 . 2009-09-11 10:54 24064 ----a-w- c:\windows\system32\amxread.dll
2009-09-11 10:54 . 2009-09-11 10:54 13824 ----a-w- c:\windows\system32\apilogen.dll
2009-09-11 10:52 . 2009-09-11 10:52 712704 ----a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-11 10:52 . 2009-09-11 10:52 425472 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-11 10:52 . 2009-09-11 10:52 347136 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-11 10:47 . 2009-09-11 10:47 37888 ----a-w- c:\windows\system32\printcom.dll
2009-09-11 10:47 . 2009-09-11 10:47 443392 ----a-w- c:\windows\system32\win32spl.dll
2009-09-11 10:46 . 2009-09-11 10:46 113664 ----a-w- c:\windows\system32\drivers\rmcast.sys
2009-09-11 10:46 . 2009-09-11 10:46 14848 ----a-w- c:\windows\system32\wshrm.dll
2009-09-11 10:45 . 2009-09-11 10:45 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-09-11 10:45 . 2009-09-11 10:45 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-09-11 10:45 . 2009-09-11 10:45 4096 ----a-w- c:\windows\system32\dxmasf.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-16 13:47 . 2006-11-06 01:52 662608 ----a-w- c:\windows\system32\perfh010.dat
2009-09-16 13:47 . 2006-11-06 01:52 120120 ----a-w- c:\windows\system32\perfc010.dat
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-09-14 10:02 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-09-14 10:02 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-09-14 09:40 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2009-09-14 09:40 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2009-09-11 10:59 . 2009-09-11 10:59 551424 ----a-w- c:\windows\system32\rpcss.dll
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\programdata\Preferiti
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\programdata\Modelli
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\programdata\Menu Avvio
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\programdata\Documenti
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\programdata\Dati applicazioni
2009-09-09 07:18 . 2009-09-09 07:18 -------- d-sh--we c:\program files\File comuni
2009-07-26 14:44 . 2009-07-26 14:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-21 21:52 . 2009-09-13 11:00 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-09-13 11:00 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-09-13 11:00 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-09-13 11:00 133632 ----a-w- c:\windows\system32\ieUnatt.exe
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-07-10 15:28 1174920 ----a-w- c:\program files\Ask.com\GenericAskToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-07-10 1174920]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\startupfolder\C:^Users^AUGUSTO^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.1.lnk]
path=c:\users\AUGUSTO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.1.lnk
backup=c:\windows\pss\OpenOffice.org 3.1.lnk.Startup
backupExtension=.Startup
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{9EAB5AA4-FC5D-433E-96A2-4D31F98FA921}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{0CFFAD46-4F3A-434D-9682-66651DBE9DD5}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent
"{CCC3642E-925E-4C1C-9763-57727DE76E50}"= UDP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent (TCP-In)
"{E148C46F-2D9A-49DA-A634-BA74C86590D6}"= TCP:c:\program files\BitTorrent\bittorrent.exe:BitTorrent (UDP-In)
"TCP Query User{49E47AEA-F56F-4C2C-8BE4-B36508D2B9C5}c:\\program files\\emule048extreme\\emule0.49b-xtreme7.1\\emule.exe"= UDP:c:\program files\emule048extreme\emule0.49b-xtreme7.1\emule.exe:eMule
"UDP Query User{D042E8FA-ADC9-4081-BCD1-71E21C4EE62E}c:\\program files\\emule048extreme\\emule0.49b-xtreme7.1\\emule.exe"= TCP:c:\program files\emule048extreme\emule0.49b-xtreme7.1\emule.exe:eMule
"TCP Query User{EC001565-E2AA-4841-A9BC-01A04E66C657}c:\\program files\\emule048extreme\\emule0.49b-xtreme7.1\\emule.exe"= UDP:c:\program files\emule048extreme\emule0.49b-xtreme7.1\emule.exe:eMule
"UDP Query User{CF5AB6C2-42F1-49CB-8DCD-2E24A5D659A8}c:\\program files\\emule048extreme\\emule0.49b-xtreme7.1\\emule.exe"= TCP:c:\program files\emule048extreme\emule0.49b-xtreme7.1\emule.exe:eMule
"TCP Query User{66DD8269-A146-4A70-8D10-B67E414A1129}c:\\program files\\bittorrent\\bittorrent.exe"= UDP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
"UDP Query User{415F8797-057B-4010-AD7F-E24A665315BC}c:\\program files\\bittorrent\\bittorrent.exe"= TCP:c:\program files\bittorrent\bittorrent.exe:BitTorrent
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)
R3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [2009-04-22 9728]
R3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [2009-04-22 3072]
S3 Atc002;NDIS Miniport Driver for Atheros L2 Fast Ethernet Controller;c:\windows\system32\DRIVERS\l260x86.sys [2008-04-15 29184]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
.
------- Scansione supplementare -------
.
uStart Page =
hxxp://www.google.it/mStart Page =
hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktopIE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-09-16 16:11
Windows 6.0.6001 Service Pack 1 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
Ora fine scansione: 2009-09-16 16:15
ComboFix-quarantined-files.txt 2009-09-16 14:15
Pre-Run: 457'106'284'544 byte disponibili
Post-Run: 456'731'963'392 byte disponibili
263 --- E O F --- 2009-09-15 14:30