ciao e grazie per l'aiuto
ho fatto come da guida...prima 1 ed invio, poi 2 ed invio... il pc si è riavviato ed ha eseguito tutto... il report finale è questo:
############################## [ FindyKill V4.729 ]
# User : DjAlefio (Administrators) # ALEFIO
# Update on 19/05/09 by Chiquitine29
# Start at: 1.38.05 | 22/05/2009
# Website : http://pagesperso-orange.fr/NosTools/findykill.html
# Intel® Core2 CPU 6320 @ 1.86GHz
# Microsoft Windows XP Professional (5.1.2600 32-bit) # Service Pack 3
# Internet Explorer 6.0.2900.5512
# Windows Firewall Status : Enabled
# AV : Avira AntiVir PersonalEdition 8.0.1.30 [ Enabled | Updated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : Avira AntiVir PersonalEdition 8.0.1.30 [ Enabled | Updated ]
# AV : Avira AntiVir PersonalEdition 8.0.1.30 [ Enabled | Updated ]
# AV : Avira AntiVir PersonalEdition 8.0.1.30 [ Enabled | Updated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : Avira AntiVir PersonalEdition 8.0.1.30 [ (!) Disabled | (!) Outdated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# AV : AntiVir Desktop 9.0.1.26 [ Enabled | Updated ]
# FW : COMODO Firewall[ Enabled ]3.5
# A:\ # Disco floppy, 3,5 pollici
# C:\ # Disco rigido locale # 75,13 Go (33,37 Go free) # NTFS
# D:\ # Disco rigido locale # 189,92 Go (76,59 Go free) [Dati] # NTFS
# E:\ # Disco rigido locale # 233,76 Go (59,03 Go free) [Archivio] # NTFS
# F:\ # Disco rigido locale # 390,63 Go (55,08 Go free) [Film-Archivio 2] # NTFS
# G:\ # Disco CD-ROM
# H:\ # Disco CD-ROM
# I:\ # Disco rigido locale # 931,28 Go (930,76 Go free) [My Book] # FAT32
# J:\ # Disco CD-ROM
############################## [ Active Processes ]
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\File comuni\Acronis\Schedule2\schedul2.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Documents and Settings\All Users\Dati applicazioni\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\LightScribe\LSSrvc.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Programmi\CyberLink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
################## [ Infected Files \ Folders ]
Deleted ! C:\WINDOWS\Prefetch\WINUPGRO.EXE-0D344ACE.pf
Deleted ! "C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers\srosa2.sys"
Deleted ! "C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers\wfsintwq.sys"
Deleted ! "C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers\winupgro.exe"
Deleted ! "C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers\downld"
Deleted ! "C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers"
################## [ Infected Temp Files ]
################## [ Registry / Infected keys ]
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\srosa
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sK9Ou0s
Deleted ! HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_SK9OU0S
Deleted ! HKEY_CURRENT_USER\Software\bisoft
Deleted ! HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winupgro
Deleted ! HKEY_USERS\S-1-5-21-839522115-1060284298-725345543-1003\Software\MobiSoft
Deleted ! HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\"drvsyskit"
################## [ Cleaning Removable drives ]
Deleted ! I:\autorun.inf
################## [ Registry / Mountpoint2 ]
# -> Not found !
################## [ States / Restarting of services ]
# Services : [ Auto=2 / Request=3 / Disable=4 ]
# Ndisuio -> # Type of startup =3
# EapHost -> # Type of startup =2
# Ip6Fw -> # Type of startup =2
# SharedAccess -> # Type of startup =2
# wuauserv -> # Type of startup =2
# wscsvc -> # Type of startup =2
# Safe boot mode restored !
################## [ Searching Other Infections ]
# Références de comparaison Bagle MD5 :
File ... : C:\Documents and Settings\DjAlefio\Dati applicazioni\drivers\winupgro.exe
CRC32 .. : 54365150
MD5 .... : 3838ee14ca76a0badb5ae38245b08c75
Deleted ! : C:\Programmi\File comuni\Nero\Lib\NMBgMonitor.exe
# Taille : 868352 # MD5 : 3838EE14CA76A0BADB5AE38245B08C75
Deleted ! : C:\RECYCLER\S-1-5-21-839522115-1060284298-725345543-1003\Dc145.exe
# Taille : 868352 # MD5 : 3838EE14CA76A0BADB5AE38245B08C75
Deleted ! : E:\MP3\dc++\Memeo AutoBackup 2.00.1451 [KeyGen].zip
Contain install.exe [868352] with Bagle CRC32 : 54365150
################## [ Corrupted files # Re-Installation required ]
C:\Casino\Betaland Casino\update.exe
C:\Documents and Settings\DjAlefio\Desktop\ComboFix.exe
C:\Hijackthis\HijackThis.exe
C:\Programmi\ASUS\ASUSUpdate\Update.exe
C:\Programmi\Avira\AntiVir Desktop\avcenter.exe
C:\Programmi\Avira\AntiVir Desktop\avgnt.exe
C:\Programmi\Avira\AntiVir Desktop\avguard.exe
C:\Programmi\Avira\AntiVir Desktop\sched.exe
C:\Programmi\Betaland Poker\update.exe
C:\Programmi\Comodo\COMODO Internet Security\cfp.exe
C:\Programmi\Comodo\COMODO Internet Security\cmdagent.exe
C:\Programmi\Comodo\COMODO Internet Security\Repair\cfp.exe
C:\Programmi\Comodo\COMODO Internet Security\Repair\cmdagent.exe
C:\Programmi\ImTOO\DVD to iPod Converter 5\update\Update.exe
C:\Programmi\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Programmi\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program\register.exe
C:\Programmi\Mozilla Firefox\uninstall\helper.exe
C:\Programmi\PeerGuardian2\pg2.exe
C:\Programmi\Spyware Doctor\drvctl.exe
C:\Programmi\Spyware Doctor\pctsAuxs.exe
C:\Programmi\Spyware Doctor\pctsSvc.exe
C:\Programmi\Spyware Doctor\pctsTray.exe
C:\Programmi\Spyware Doctor\sdinvoker.exe
C:\Programmi\Spyware Doctor\sdloader.exe
C:\Programmi\Spyware Doctor\TFEngine\TFService.exe
C:\Programmi\Spyware Doctor\Update.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\clamscan.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\ClamTray.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\ClamWin.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\freshclam.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\sigtool.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\ClamWin\ClamWin\bin\WClose.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\hijackthis\HijackThis.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Mozilla FirefoxPortable\App\firefox\uninstall\helper.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Spybot\blindman.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Spybot\SpybotSD.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Spybot\TeaTimer.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Spybot\Update.exe
C:\Programmi\WiPS Titanium 2.1\Programmi\Winpooch\freshclam.exe
C:\WINDOWS\$hf_mig$\KB873339\update\update.exe
C:\WINDOWS\$hf_mig$\KB885835\update\update.exe
C:\WINDOWS\$hf_mig$\KB885836\update\update.exe
C:\WINDOWS\$hf_mig$\KB886185\update\update.exe
C:\WINDOWS\$hf_mig$\KB887472\update\update.exe
C:\WINDOWS\$hf_mig$\KB888302\update\update.exe
C:\WINDOWS\$hf_mig$\KB890046\update\update.exe
C:\WINDOWS\$hf_mig$\KB890859\update\update.exe
C:\WINDOWS\$hf_mig$\KB891781\update\update.exe
C:\WINDOWS\$hf_mig$\KB893756\update\update.exe
C:\WINDOWS\$hf_mig$\KB894391\update\update.exe
C:\WINDOWS\$hf_mig$\KB896358\update\update.exe
C:\WINDOWS\$hf_mig$\KB896423\update\update.exe
C:\WINDOWS\$hf_mig$\KB896428\update\update.exe
C:\WINDOWS\$hf_mig$\KB898461\update\update.exe
C:\WINDOWS\$hf_mig$\KB899587\update\update.exe
C:\WINDOWS\$hf_mig$\KB899591\update\update.exe
C:\WINDOWS\$hf_mig$\KB900485\update\update.exe
C:\WINDOWS\$hf_mig$\KB900725\update\update.exe
C:\WINDOWS\$hf_mig$\KB901017\update\update.exe
C:\WINDOWS\$hf_mig$\KB901214\update\update.exe
C:\WINDOWS\$hf_mig$\KB902400\update\update.exe
C:\WINDOWS\$hf_mig$\KB904706\update\update.exe
C:\WINDOWS\$hf_mig$\KB904942\update\update.exe
C:\WINDOWS\$hf_mig$\KB905414\update\update.exe
C:\WINDOWS\$hf_mig$\KB905749\update\update.exe
C:\WINDOWS\$hf_mig$\KB908519\update\update.exe
C:\WINDOWS\$hf_mig$\KB908531\update\update.exe
C:\WINDOWS\$hf_mig$\KB910437\update\update.exe
C:\WINDOWS\$hf_mig$\KB911280\update\update.exe
C:\WINDOWS\$hf_mig$\KB911562\update\update.exe
C:\WINDOWS\$hf_mig$\KB911927\update\update.exe
C:\WINDOWS\$hf_mig$\KB913580\update\update.exe
C:\WINDOWS\$hf_mig$\KB914388\update\update.exe
C:\WINDOWS\$hf_mig$\KB914389\update\update.exe
C:\WINDOWS\$hf_mig$\KB916595\update\update.exe
C:\WINDOWS\$hf_mig$\KB917344\update\update.exe
C:\WINDOWS\$hf_mig$\KB917953\update\update.exe
C:\WINDOWS\$hf_mig$\KB918118\update\update.exe
C:\WINDOWS\$hf_mig$\KB918439\update\update.exe
C:\WINDOWS\$hf_mig$\KB919007\update\update.exe
C:\WINDOWS\$hf_mig$\KB920213\update\update.exe
C:\WINDOWS\$hf_mig$\KB920342\update\update.exe
C:\WINDOWS\$hf_mig$\KB920670\update\update.exe
C:\WINDOWS\$hf_mig$\KB920683\update\update.exe
C:\WINDOWS\$hf_mig$\KB920685\update\update.exe
C:\WINDOWS\$hf_mig$\KB920872\update\update.exe
C:\WINDOWS\$hf_mig$\KB921503\update\update.exe
C:\WINDOWS\$hf_mig$\KB922582\update\update.exe
C:\WINDOWS\$hf_mig$\KB922819\update\update.exe
C:\WINDOWS\$hf_mig$\KB923414\update\update.exe
C:\WINDOWS\$hf_mig$\KB923980\update\update.exe
C:\WINDOWS\$hf_mig$\KB924270\update\update.exe
C:\WINDOWS\$hf_mig$\KB924496\update\update.exe
C:\WINDOWS\$hf_mig$\KB925720\update\update.exe
C:\WINDOWS\$hf_mig$\KB925876\update\update.exe
C:\WINDOWS\$hf_mig$\KB925902\update\update.exe
C:\WINDOWS\$hf_mig$\KB926255\update\update.exe
C:\WINDOWS\$hf_mig$\KB926436\update\update.exe
C:\WINDOWS\$hf_mig$\KB927779\update\update.exe
C:\WINDOWS\$hf_mig$\KB927802\update\update.exe
C:\WINDOWS\$hf_mig$\KB927891\update\update.exe
C:\WINDOWS\$hf_mig$\KB928255\update\update.exe
C:\WINDOWS\$hf_mig$\KB928843\update\update.exe
C:\WINDOWS\$hf_mig$\KB929123\update\update.exe
C:\WINDOWS\$hf_mig$\KB930178\update\update.exe
C:\WINDOWS\$hf_mig$\KB930916\update\update.exe
C:\WINDOWS\$hf_mig$\KB931261\update\update.exe
C:\WINDOWS\$hf_mig$\KB931784\update\update.exe
C:\WINDOWS\$hf_mig$\KB932168\update\update.exe
C:\WINDOWS\$hf_mig$\KB933360\update\update.exe
C:\WINDOWS\$hf_mig$\KB933729\update\update.exe
C:\WINDOWS\$hf_mig$\KB935839\update\update.exe
C:\WINDOWS\$hf_mig$\KB935840\update\update.exe
C:\WINDOWS\$hf_mig$\KB936021\update\update.exe
C:\WINDOWS\$hf_mig$\KB936357\update\update.exe
C:\WINDOWS\$hf_mig$\KB937143\update\update.exe
C:\WINDOWS\$hf_mig$\KB937894\update\update.exe
C:\WINDOWS\$hf_mig$\KB938127\update\update.exe
C:\WINDOWS\$hf_mig$\KB938828\update\update.exe
C:\WINDOWS\$hf_mig$\KB938829\update\update.exe
C:\WINDOWS\$hf_mig$\KB939653\update\update.exe
C:\WINDOWS\$hf_mig$\KB941202\update\update.exe
C:\WINDOWS\$hf_mig$\KB941568\update\update.exe
C:\WINDOWS\$hf_mig$\KB941644\update\update.exe
C:\WINDOWS\$hf_mig$\KB941693\update\update.exe
C:\WINDOWS\$hf_mig$\KB942615\update\update.exe
C:\WINDOWS\$hf_mig$\KB942763\update\update.exe
C:\WINDOWS\$hf_mig$\KB942840\update\update.exe
C:\WINDOWS\$hf_mig$\KB943055\update\update.exe
C:\WINDOWS\$hf_mig$\KB943460\update\update.exe
C:\WINDOWS\$hf_mig$\KB943485\update\update.exe
C:\WINDOWS\$hf_mig$\KB944338\update\update.exe
C:\WINDOWS\$hf_mig$\KB944533\update\update.exe
C:\WINDOWS\$hf_mig$\KB944653\update\update.exe
C:\WINDOWS\$hf_mig$\KB945553\update\update.exe
C:\WINDOWS\$hf_mig$\KB946026\update\update.exe
C:\WINDOWS\$hf_mig$\KB946627\update\update.exe
C:\WINDOWS\$hf_mig$\KB946648\update\update.exe
C:\WINDOWS\$hf_mig$\KB947864\update\update.exe
C:\WINDOWS\$hf_mig$\KB948590\update\update.exe
C:\WINDOWS\$hf_mig$\KB948881\update\update.exe
C:\WINDOWS\$hf_mig$\KB950749\update\update.exe
C:\WINDOWS\$hf_mig$\KB950759\update\update.exe
C:\WINDOWS\$hf_mig$\KB950760\update\update.exe
C:\WINDOWS\$hf_mig$\KB950762\update\update.exe
C:\WINDOWS\$hf_mig$\KB950974\update\update.exe
C:\WINDOWS\$hf_mig$\KB951066\update\update.exe
C:\WINDOWS\$hf_mig$\KB951072-v2\update\update.exe
C:\WINDOWS\$hf_mig$\KB951376\update\update.exe
C:\WINDOWS\$hf_mig$\KB951376-v2\update\update.exe
C:\WINDOWS\$hf_mig$\KB951698\update\update.exe
C:\WINDOWS\$hf_mig$\KB951748\update\update.exe
C:\WINDOWS\$hf_mig$\KB951978\update\update.exe
C:\WINDOWS\$hf_mig$\KB952287\update\update.exe
C:\WINDOWS\$hf_mig$\KB952954\update\update.exe
C:\WINDOWS\$hf_mig$\KB953838\update\update.exe
C:\WINDOWS\$hf_mig$\KB953839\update\update.exe
C:\WINDOWS\$hf_mig$\KB954211\update\update.exe
C:\WINDOWS\$hf_mig$\KB954459\update\update.exe
C:\WINDOWS\$hf_mig$\KB954600\update\update.exe
C:\WINDOWS\$hf_mig$\KB955069\update\update.exe
C:\WINDOWS\$hf_mig$\KB955839\update\update.exe
C:\WINDOWS\$hf_mig$\KB956391\update\update.exe
C:\WINDOWS\$hf_mig$\KB956802\update\update.exe
C:\WINDOWS\$hf_mig$\KB956803\update\update.exe
C:\WINDOWS\$hf_mig$\KB956841\update\update.exe
C:\WINDOWS\$hf_mig$\KB957095\update\update.exe
C:\WINDOWS\$hf_mig$\KB957097\update\update.exe
C:\WINDOWS\$hf_mig$\KB958644\update\update.exe
C:\WINDOWS\$hf_mig$\KB958687\update\update.exe
C:\WINDOWS\$NtServicePackUninstall$\sysinfo.exe
C:\WINDOWS\$NtUninstallKB946627$\update.exe
C:\WINDOWS\ServicePackFiles\i386\sysinfo.exe
C:\WINDOWS\SoftwareDistribution\Download\13e46350dac6ff234b8417e3d188e63a\update\update.exe
C:\WINDOWS\SoftwareDistribution\Download\6e506d68bf0587dd5cd3d6631188c9a9\update\update.exe
C:\WINDOWS\SoftwareDistribution\Download\860f51b26d7ef4ba76e38a9aba997b84\update\update.exe
C:\WINDOWS\SoftwareDistribution\Download\88ebc3059d41a0cce4bf827a273a1c2f\update\update.exe
C:\WINDOWS\system32\dllcache\register.exe
D:\Alessio\Installazione Programmi\WinInizio\HijackThis.exe
################################### [ Cracks / Keygens / Serials ]
# -> Nothing found !
################## [ ! End of Report # FindyKill V4.729 ! ]
aspetto notizie e vedo già che le cose vanno meglio