allora ho fatto tutto
e alla fine mi è comparso questo txt:
ComboFix 08-11-29.03 - user 2008-11-30 13:00:49.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1040.18.237 [GMT 1:00]
Interruttori di comando utilizzati :: /killall
* Creato nuovo punto di ripristino
ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\user\Dati applicazioni\m
c:\documents and settings\user\Dati applicazioni\m\data.oct
c:\documents and settings\user\Dati applicazioni\m\flec006.exe
c:\documents and settings\user\Dati applicazioni\m\list.oct
c:\documents and settings\user\Dati applicazioni\m\shared\[PC.SOFTWARE].AntiVir.Personal.Edition.Premium.7.&.Key.zip
c:\documents and settings\user\Dati applicazioni\m\shared\1-2-3 Synchronize & Backup 1.4.zip
c:\documents and settings\user\Dati applicazioni\m\shared\123_Bulk_Email_Direct_Sender_2006_5.13_Crack.zip
c:\documents and settings\user\Dati applicazioni\m\shared\5-Minute_Estimate_Construction_Version_5.06.zip
c:\documents and settings\user\Dati applicazioni\m\shared\A.R.S.E.N.A.L._Extended_Power_2.E.zip
c:\documents and settings\user\Dati applicazioni\m\shared\A_Splash_Of_New_Orleans_Screensaver_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\ABest_RM_RMVB_Video_Converter_3.63_(Patch).zip
c:\documents and settings\user\Dati applicazioni\m\shared\Active_Image_Processing_Component_2.0.2007.725.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Advanced Connection Viewer 1.2.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Arc_Menu_5.3a_(KeyGen).zip
c:\documents and settings\user\Dati applicazioni\m\shared\Assessor 2.01.zip
c:\documents and settings\user\Dati applicazioni\m\shared\AutoMail 1.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\AVG.Anti-Virus.+.Firewall.v7.0.338.By.YoNeSi69.zip
c:\documents and settings\user\Dati applicazioni\m\shared\AVI_To_MPEG_Scout_1.00.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Avira.AntiVir.PersonalEdition.Classic.&.Premuim.ENG.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Best Consignnment Shop Software Diamond Edition 4.2.11.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Binary Digital Clock 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Bullet Proof Mailer 1.0 Build 12252003.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Cam2Web_0.80_beta.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Carl's Jr. iTunes Remote Widget 1.36 Beta.zip
c:\documents and settings\user\Dati applicazioni\m\shared\CARTHAGO Groupware 2005 3.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Classical Tetris 2.02.zip
c:\documents and settings\user\Dati applicazioni\m\shared\CM_DiskCleaner_2.1.7.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Collection Studio 1.33.zip
c:\documents and settings\user\Dati applicazioni\m\shared\COM_Port_Splitter_3.5.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Contacts Gadget 2.0.0.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\ConvertStuff_1.9_With_Crack.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Coomer_Player_2.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\DataUndeleter 3.2.zip
c:\documents and settings\user\Dati applicazioni\m\shared\dbmon2_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\DFM Editor 5.3.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Disney's Epcot WinAmp Skin 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\DoOrDel_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\DopeWars_7650_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Downtube_Mini_2.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\EasyFax 8.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\EasyQuery.NET WinForms 1.5.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Eortologio Calendar 1.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\EZ_Backup_My_Photos_Premium_4.7.zip
c:\documents and settings\user\Dati applicazioni\m\shared\EzineAnnouncer 3.30.08.1400.zip
c:\documents and settings\user\Dati applicazioni\m\shared\FadingTaskbar_1.4.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Fetch_5.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\FleetWise_VB_4.3.4.zip
c:\documents and settings\user\Dati applicazioni\m\shared\FoldersSynchronizer_2.2.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Free Article Software 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Freecorder 2.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\French_Manicure_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Garden_Planner_2.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\GenPageCbplus 1.43.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Goliath_.NET_Obfuscator_2_Final.zip
c:\documents and settings\user\Dati applicazioni\m\shared\HPS_WinTail_1.5.4_Build_782.zip
c:\documents and settings\user\Dati applicazioni\m\shared\i.Xchange_Internet_Access_1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\IDELIX_LookOUT_1.0_Beta.zip
c:\documents and settings\user\Dati applicazioni\m\shared\IdiomaX Translation Suite 4.0 [With Crack].zip
c:\documents and settings\user\Dati applicazioni\m\shared\ImTOO_Audio_Maker_3.0.37.0525_Key.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Intellitabs_for_Word_1.0_Key.zip
c:\documents and settings\user\Dati applicazioni\m\shared\iPlayAnywhere for iTunes 4.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Isadora_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\jux2 Meta Search 1.0.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Kaspersky.Anti-Virus.6.0.0.303..italiano.+.key.2007.zip
c:\documents and settings\user\Dati applicazioni\m\shared\KeeBook Creator Pro 2.7.6.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Keygen.BitDefender.v9.Pro.Plus.par.eMule-Paradise.com.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Keylogger Killer 1.5.zip
c:\documents and settings\user\Dati applicazioni\m\shared\LangAgent 1.0.62.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Live_Cricket_Scores_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Loan_Advisor_for_Excel_1.2_(KeyGen).zip
c:\documents and settings\user\Dati applicazioni\m\shared\Lot_Wizard_2.7.69_(Cracked).zip
c:\documents and settings\user\Dati applicazioni\m\shared\LottoPik_649_1.2.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Mail_Password_4.0.282.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Manycam 2.2.zip
c:\documents and settings\user\Dati applicazioni\m\shared\MeasureIt_0.3.6.zip
c:\documents and settings\user\Dati applicazioni\m\shared\MS Word Backup File Auto Save Software 7.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Multi_Screen_Emulator_for_Windows_1.4.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\MusiCat_1.02_build_5.zip
c:\documents and settings\user\Dati applicazioni\m\shared\My Talking Calculator 4.18.zip
c:\documents and settings\user\Dati applicazioni\m\shared\My_Sidebar_for_Internet_Explorer_1.51_[serial].zip
c:\documents and settings\user\Dati applicazioni\m\shared\NC_Scan2PDF_1.02.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Net.Ex Pro 1 build 1.0.1011.zip
c:\documents and settings\user\Dati applicazioni\m\shared\NetworkActiv Port Scanner 4.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\NHL TOOLBAR 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\On_Line_Timer_1.20_(Key).zip
c:\documents and settings\user\Dati applicazioni\m\shared\Pathway_0.5.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Periodic Table 2002 1.2.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Phone_spy_telephone_recording_system_8.2_Key+Serial.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Playa!TraX_1.77.zip
c:\documents and settings\user\Dati applicazioni\m\shared\PocketBackup_1.0.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Posfix_2.34.zip
c:\documents and settings\user\Dati applicazioni\m\shared\PostgreSQL_Import_Multiple_Text_Files_Software_7.0_[KeyGen].zip
c:\documents and settings\user\Dati applicazioni\m\shared\Print_Logger_Pro_3.0.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Pugnax 2.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Quick Recovery Microsoft Outlook 1.0 (Cracked).zip
c:\documents and settings\user\Dati applicazioni\m\shared\razii_toolbar_for_IE_4.5.128.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Remote_Desktop_Enabler_2.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\RemoteCapture_1.1a.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Return_on_Investment_Solver_3.3c_[KeyGen].zip
c:\documents and settings\user\Dati applicazioni\m\shared\SF2 Splitter 1.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\ShixxNOTE_6.net.zip
c:\documents and settings\user\Dati applicazioni\m\shared\SimpleSpa_3.1.2b.zip
c:\documents and settings\user\Dati applicazioni\m\shared\SmartCodeWebControl 2.8 (Serial).zip
c:\documents and settings\user\Dati applicazioni\m\shared\SMReport_Designer_1.90.zip
c:\documents and settings\user\Dati applicazioni\m\shared\SSE Setup 3.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\SSH_Factory_2.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Star_Remote_Chat_0.34.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Start Menu Cleaner 1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Structure101_For_Java_Mac_OS_X_Edition_2006.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Super.WinPE.Plus.2005.(Updated.Mcafee.022205).zip
c:\documents and settings\user\Dati applicazioni\m\shared\SuperFax for Word 2.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Switch_Center_Enterprise_1.1.5.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Sytadin_1.4.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Terrasoft_CRM_2.88.zip
c:\documents and settings\user\Dati applicazioni\m\shared\TextPredictive_1.0.1_(With_Crack).zip
c:\documents and settings\user\Dati applicazioni\m\shared\The Big Bang Theory - Full Length Videos.zip
c:\documents and settings\user\Dati applicazioni\m\shared\The Code Project Ticker 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\ThreatNuker_2.0.2.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Tips For A Healthy Scalp 1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\TrustyFiles_Pro_3.1.0.15.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Ultra_MP3_CD_Maker_3.01.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Unlogger 2.3.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Unreal_Tournament_2003_-_Fear_deathmatch_map.zip
c:\documents and settings\user\Dati applicazioni\m\shared\Volleyball 1.1.zip
c:\documents and settings\user\Dati applicazioni\m\shared\VolumeTray_2.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\WEBSmith 3.1.0007.zip
c:\documents and settings\user\Dati applicazioni\m\shared\What To Do 1.04.zip
c:\documents and settings\user\Dati applicazioni\m\shared\WinCRC32 2.4.1.40.zip
c:\documents and settings\user\Dati applicazioni\m\shared\WindowsRescue Gamers Edition 1.0.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\WLExt_1.0.zip
c:\documents and settings\user\Dati applicazioni\m\shared\XL_Report_Builder_2.1.4.zip
c:\documents and settings\user\Dati applicazioni\m\shared\XP32_3.7.86.zip
c:\documents and settings\user\Dati applicazioni\m\shared\YASA_DVD_to_3GP_Converter_2.6.82.2847_[Cracked].zip
c:\documents and settings\user\Dati applicazioni\m\srvlist.oct
c:\programmi\MSN Messenger\MsnMsgr.exe
c:\windows\system32\ban_list.txt
c:\windows\system32\drivers\downld
c:\windows\system32\drivers\downld\100421.exe
c:\windows\system32\drivers\downld\101578.exe
c:\windows\system32\drivers\downld\102265.exe
c:\windows\system32\drivers\downld\104750.exe
c:\windows\system32\drivers\downld\106734.exe
c:\windows\system32\drivers\downld\108781.exe
c:\windows\system32\drivers\downld\110515.exe
c:\windows\system32\drivers\downld\111484.exe
c:\windows\system32\drivers\downld\114000.exe
c:\windows\system32\drivers\downld\116609.exe
c:\windows\system32\drivers\downld\118265.exe
c:\windows\system32\drivers\downld\119828.exe
c:\windows\system32\drivers\downld\119843.exe
c:\windows\system32\drivers\downld\122656.exe
c:\windows\system32\drivers\downld\124906.exe
c:\windows\system32\drivers\downld\128781.exe
c:\windows\system32\drivers\downld\130343.exe
c:\windows\system32\drivers\downld\130828.exe
c:\windows\system32\drivers\downld\132109.exe
c:\windows\system32\drivers\downld\135156.exe
c:\windows\system32\drivers\downld\136203.exe
c:\windows\system32\drivers\downld\137734.exe
c:\windows\system32\drivers\downld\139218.exe
c:\windows\system32\drivers\downld\143015.exe
c:\windows\system32\drivers\downld\144546.exe
c:\windows\system32\drivers\downld\145015.exe
c:\windows\system32\drivers\downld\145406.exe
c:\windows\system32\drivers\downld\147000.exe
c:\windows\system32\drivers\downld\147656.exe
c:\windows\system32\drivers\downld\149703.exe
c:\windows\system32\drivers\downld\156062.exe
c:\windows\system32\drivers\downld\157937.exe
c:\windows\system32\drivers\downld\160062.exe
c:\windows\system32\drivers\downld\160515.exe
c:\windows\system32\drivers\downld\161390.exe
c:\windows\system32\drivers\downld\161531.exe
c:\windows\system32\drivers\downld\163203.exe
c:\windows\system32\drivers\downld\164140.exe
c:\windows\system32\drivers\downld\165109.exe
c:\windows\system32\drivers\downld\165312.exe
c:\windows\system32\drivers\downld\165531.exe
c:\windows\system32\drivers\downld\165750.exe
c:\windows\system32\drivers\downld\166859.exe
c:\windows\system32\drivers\downld\167390.exe
c:\windows\system32\drivers\downld\167546.exe
c:\windows\system32\drivers\downld\168046.exe
c:\windows\system32\drivers\downld\168968.exe
c:\windows\system32\drivers\downld\169562.exe
c:\windows\system32\drivers\downld\172765.exe
c:\windows\system32\drivers\downld\177171.exe
c:\windows\system32\drivers\downld\181625.exe
c:\windows\system32\drivers\downld\185031.exe
c:\windows\system32\drivers\downld\186031.exe
c:\windows\system32\drivers\downld\186234.exe
c:\windows\system32\drivers\downld\187328.exe
c:\windows\system32\drivers\downld\188031.exe
c:\windows\system32\drivers\downld\189484.exe
c:\windows\system32\drivers\downld\192046.exe
c:\windows\system32\drivers\downld\196734.exe
c:\windows\system32\drivers\downld\202578.exe
c:\windows\system32\drivers\downld\205531.exe
c:\windows\system32\drivers\downld\205796.exe
c:\windows\system32\drivers\downld\206015.exe
c:\windows\system32\drivers\downld\209140.exe
c:\windows\system32\drivers\downld\209453.exe
c:\windows\system32\drivers\downld\210046.exe
c:\windows\system32\drivers\downld\210468.exe
c:\windows\system32\drivers\downld\210625.exe
c:\windows\system32\drivers\downld\210812.exe
c:\windows\system32\drivers\downld\214078.exe
c:\windows\system32\drivers\downld\215265.exe
c:\windows\system32\drivers\downld\216109.exe
c:\windows\system32\drivers\downld\216156.exe
c:\windows\system32\drivers\downld\216578.exe
c:\windows\system32\drivers\downld\217296.exe
c:\windows\system32\drivers\downld\218453.exe
c:\windows\system32\drivers\downld\221453.exe
c:\windows\system32\drivers\downld\221500.exe
c:\windows\system32\drivers\downld\227078.exe
c:\windows\system32\drivers\downld\227734.exe
c:\windows\system32\drivers\downld\229906.exe
c:\windows\system32\drivers\downld\230734.exe
c:\windows\system32\drivers\downld\231937.exe
c:\windows\system32\drivers\downld\234125.exe
c:\windows\system32\drivers\downld\234921.exe
c:\windows\system32\drivers\downld\238281.exe
c:\windows\system32\drivers\downld\241937.exe
c:\windows\system32\drivers\downld\243312.exe
c:\windows\system32\drivers\downld\244656.exe
c:\windows\system32\drivers\downld\245531.exe
c:\windows\system32\drivers\downld\246671.exe
c:\windows\system32\drivers\downld\250015.exe
c:\windows\system32\drivers\downld\251218.exe
c:\windows\system32\drivers\downld\251937.exe
c:\windows\system32\drivers\downld\252656.exe
c:\windows\system32\drivers\downld\253328.exe
c:\windows\system32\drivers\downld\253906.exe
c:\windows\system32\drivers\downld\255343.exe
c:\windows\system32\drivers\downld\2556734.exe
c:\windows\system32\drivers\downld\2559359.exe
c:\windows\system32\drivers\downld\2562671.exe
c:\windows\system32\drivers\downld\256671.exe
c:\windows\system32\drivers\downld\2571109.exe
c:\windows\system32\drivers\downld\2572390.exe
c:\windows\system32\drivers\downld\2584000.exe
c:\windows\system32\drivers\downld\2587000.exe
c:\windows\system32\drivers\downld\258750.exe
c:\windows\system32\drivers\downld\2590984.exe
c:\windows\system32\drivers\downld\2592859.exe
c:\windows\system32\drivers\downld\260562.exe
c:\windows\system32\drivers\downld\260968.exe
c:\windows\system32\drivers\downld\2615093.exe
c:\windows\system32\drivers\downld\2624203.exe
c:\windows\system32\drivers\downld\2651937.exe
c:\windows\system32\drivers\downld\2662671.exe
c:\windows\system32\drivers\downld\2666156.exe
c:\windows\system32\drivers\downld\2667406.exe
c:\windows\system32\drivers\downld\2673359.exe
c:\windows\system32\drivers\downld\2704015.exe
c:\windows\system32\drivers\downld\270515.exe
c:\windows\system32\drivers\downld\270765.exe
c:\windows\system32\drivers\downld\2713953.exe
c:\windows\system32\drivers\downld\2724125.exe
c:\windows\system32\drivers\downld\272515.exe
c:\windows\system32\drivers\downld\280250.exe
c:\windows\system32\drivers\downld\282843.exe
c:\windows\system32\drivers\downld\285375.exe
c:\windows\system32\drivers\downld\285781.exe
c:\windows\system32\drivers\downld\292156.exe
c:\windows\system32\drivers\downld\292171.exe
c:\windows\system32\drivers\downld\293234.exe
c:\windows\system32\drivers\downld\293453.exe
c:\windows\system32\drivers\downld\297312.exe
c:\windows\system32\drivers\downld\302390.exe
c:\windows\system32\drivers\downld\302953.exe
c:\windows\system32\drivers\downld\309421.exe
c:\windows\system32\drivers\downld\310781.exe
c:\windows\system32\drivers\downld\312078.exe
c:\windows\system32\drivers\downld\313375.exe
c:\windows\system32\drivers\downld\329328.exe
c:\windows\system32\drivers\downld\331546.exe
c:\windows\system32\drivers\downld\332984.exe
c:\windows\system32\drivers\downld\334250.exe
c:\windows\system32\drivers\downld\338609.exe
c:\windows\system32\drivers\downld\342375.exe
c:\windows\system32\drivers\downld\346656.exe
c:\windows\system32\drivers\downld\358390.exe
c:\windows\system32\drivers\downld\374609.exe
c:\windows\system32\drivers\downld\382406.exe
c:\windows\system32\drivers\downld\385609.exe
c:\windows\system32\drivers\downld\386734.exe
c:\windows\system32\drivers\downld\389906.exe
c:\windows\system32\drivers\downld\391781.exe
c:\windows\system32\drivers\downld\418000.exe
c:\windows\system32\drivers\downld\432234.exe
c:\windows\system32\drivers\downld\444046.exe
c:\windows\system32\drivers\downld\462000.exe
c:\windows\system32\drivers\downld\512734.exe
c:\windows\system32\drivers\downld\80890.exe
c:\windows\system32\drivers\downld\82750.exe
c:\windows\system32\drivers\downld\88281.exe
c:\windows\system32\drivers\downld\90031.exe
c:\windows\system32\drivers\downld\91656.exe
c:\windows\system32\drivers\downld\92421.exe
c:\windows\system32\drivers\downld\93718.exe
c:\windows\system32\drivers\downld\94656.exe
c:\windows\system32\drivers\downld\95500.exe
c:\windows\system32\drivers\downld\97734.exe
c:\windows\system32\drivers\srosa.sys
c:\windows\system32\drivers\srosa2.sys
c:\windows\system32\drivers\winfilse.exe
c:\windows\system32\mdelk.exe
c:\windows\system32\wintems.exe
F:\Autorun.inf
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Service_SROSA
-------\Legacy_SROSA
-------\Legacy_ASC3550P
-------\Legacy_SK9OU0S
-------\Service_sK9Ou0s
((((((((((((((((((((((((( Files Creati Da 2008-10-28 al 2008-11-30 )))))))))))))))))))))))))))))))))))
.
2008-11-28 20:05 . 2008-11-28 20:05 d-------- c:\programmi\Electronic Arts
2008-11-28 20:05 . 2005-05-26 15:34 2,297,552 --a------ c:\windows\system32\d3dx9_26.dll
2008-11-28 20:05 . 2006-07-28 09:30 236,824 --a------ c:\windows\system32\xactengine2_3.dll
2008-11-28 20:05 . 2006-07-28 09:30 62,744 --a------ c:\windows\system32\xinput1_2.dll
2008-11-26 22:12 . 2008-11-26 22:12 d-------- c:\documents and settings\All Users\Dati applicazioni\Yahoo! Companion
2008-11-26 22:10 . 2008-11-26 22:11 d-------- c:\programmi\Yahoo!
2008-11-26 22:10 . 2008-11-26 22:11 d-------- c:\programmi\CCleaner
2008-11-26 21:38 . 2008-11-26 21:38 d-------- c:\documents and settings\All Users\Dati applicazioni\HP Product Assistant
2008-11-26 21:17 . 2008-11-30 13:06 54,156 --ah----- c:\windows\QTFont.qfn
2008-11-26 21:17 . 2008-11-26 21:17 1,409 --a------ c:\windows\QTFont.for
2008-11-26 16:03 . 2008-11-26 16:03 d-------- c:\documents and settings\user\Dati applicazioni\Malwarebytes
2008-11-26 16:03 . 2008-10-22 16:10 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2008-11-26 16:03 . 2008-10-22 16:10 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2008-11-26 16:02 . 2008-11-26 16:03 d-------- c:\programmi\Malwarebytes' Anti-Malware
2008-11-26 16:02 . 2008-11-26 16:02 d-------- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2008-11-25 16:10 . 2008-11-25 17:33 d-------- c:\programmi\MagicISO
2008-11-21 17:38 . 2006-03-09 09:17 37,768 -ra------ c:\windows\system32\drivers\OLD3BA.tmp
2008-11-12 15:26 . 2008-10-24 12:21 455,296 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-12 15:24 . 2008-09-04 18:15 1,106,944 -----c--- c:\windows\system32\dllcache\msxml3.dll
2008-11-01 16:28 . 2008-11-01 16:28 d-------- c:\programmi\uTorrent
2008-11-01 16:28 . 2008-11-25 16:09 d-------- c:\documents and settings\user\Dati applicazioni\uTorrent
2008-10-29 19:54 . 2008-10-31 20:19 d-------- c:\programmi\MyFree Codec
2008-10-26 12:15 . 2008-10-26 12:15 d-------- c:\windows\system32\it
2008-10-26 12:15 . 2008-10-26 12:15 d-------- c:\windows\system32\bits
2008-10-26 12:15 . 2008-10-26 12:15 d-------- c:\windows\l2schemas
2008-10-26 12:12 . 2008-10-26 12:16 d-------- c:\windows\ServicePackFiles
2008-10-26 11:50 . 2008-10-29 20:06 65 --a------ c:\windows\FISHUI.INI
2008-10-26 11:48 . 2008-10-26 11:50 d-------- c:\documents and settings\user\Dati applicazioni\DataCast
2008-10-26 11:47 . 2008-10-26 11:47 d-------- c:\programmi\MarkAny
2008-10-24 12:57 . 2008-10-15 17:36 337,408 -----c--- c:\windows\system32\dllcache\netapi32.dll
2008-10-23 13:15 . 2004-08-19 14:23 701,440 --------- c:\windows\system32\drivers\ati2mtag.sys
2008-10-15 15:33 . 2008-09-08 11:41 333,824 -----c--- c:\windows\system32\dllcache\srv.sys
2008-10-15 15:31 . 2008-09-15 16:24 1,846,400 -----c--- c:\windows\system32\dllcache\win32k.sys
2008-10-15 15:30 . 2008-08-14 14:22 2,192,896 -----c--- c:\windows\system32\dllcache\ntoskrnl.exe
2008-10-15 15:30 . 2008-08-14 14:22 2,148,864 -----c--- c:\windows\system32\dllcache\ntkrnlmp.exe
2008-10-15 15:30 . 2008-08-14 14:22 2,069,760 -----c--- c:\windows\system32\dllcache\ntkrnlpa.exe
2008-10-15 15:30 . 2008-08-14 14:22 2,027,520 -----c--- c:\windows\system32\dllcache\ntkrpamp.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-30 12:02 --------- d-----w c:\programmi\MSN Messenger
2008-11-27 19:30 --------- d-----w c:\programmi\eMule
2008-11-25 20:33 --------- d-----w c:\programmi\D-Tools
2008-11-25 16:08 --------- d-----w c:\programmi\EA GAMES
2008-11-21 16:50 --------- d--h--w c:\programmi\InstallShield Installation Information
2008-11-01 16:46 --------- d-----w c:\programmi\iPod
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-21 15:15 --------- d-----w c:\programmi\HP
2008-09-21 17:45 968 ----a-w c:\documents and settings\user\Dati applicazioni\wklnhst.dat
2008-05-20 20:53 53,416 ----a-w c:\documents and settings\user\Dati applicazioni\GDIPFONTCACHEV1.DAT
2004-10-27 14:05 22,144 ----a-w c:\windows\inf\other\ADM851X.sys
2004-10-27 14:05 22,144 ----a-w c:\windows\inf\ADM851X.sys
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"E06IXLRD_10827187"="c:\programmi\Microsoft Encarta\Microsoft Encarta Enciclopedia DVD - 2006\EDICT.EXE" [2005-06-04 301776]
"updateMgr"="c:\programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-31 313472]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\programmi\File comuni\Ahead\Lib\NeroCheck.exe" [2007-03-02 153136]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2007-11-08 8491008]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2007-11-08 81920]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"DAEMON Tools-1033"="c:\programmi\D-Tools\daemon.exe" [2004-08-22 81920]
"Motive SmartBridge"="c:\progra~1\ALICET~1\SMARTB~1\MotiveSB.exe" [2006-04-21 438359]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2008-03-28 413696]
"iTunesHelper"="c:\programmi\iTunes\iTunesHelper.exe" [2008-03-30 267048]
"SpyHunter Security Suite"="c:\programmi\Enigma Software Group\SpyHunter\SpyHunter3.exe" [2008-01-23 847872]
"D-Link AirPlus XtremeG Utility"="c:\programmi\Wireless USB adapter Alice G-132\AirPlusCFG.exe" [2006-11-20 1728512]
"ANIWZCS2Service"="c:\programmi\ANI\ANIWZCS2 Service\WZCSLDR2.exe" [2006-06-29 49152]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-30 98352]
"nwiz"="nwiz.exe" [2007-11-08 c:\windows\system32\nwiz.exe]
"RTHDCPL"="RTHDCPL.EXE" [2007-11-23 c:\windows\RTHDCPL.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Adobe Reader Speed Launch.lnk - c:\programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-24 29696]
Alice ti aiuta.lnk - c:\programmi\Alice ti aiuta\bin\matcli.exe [2008-05-06 217088]
ASRock WiFi-802.11g.lnk - c:\programmi\ASRock WiFi-802.11g\RtWLan.exe [2007-12-27 978944]
Avvio rapido HP Photosmart Premier.lnk - c:\programmi\HP\Digital Imaging\bin\hpqthb08.exe [2006-02-10 73728]
HP Digital Imaging Monitor.lnk - c:\programmi\HP\Digital Imaging\bin\hpqtra08.exe [2006-02-19 288472]
Microsoft Office.lnk - c:\programmi\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"=
"c:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"c:\\WINDOWS\\system32\\muzapp.exe"=
"c:\\Programmi\\MSN Messenger\\livecall.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\iTunes\\iTunes.exe"=
R3 A5AGU;D-Link USB Wireless Network Adapter Service;c:\windows\system32\DRIVERS\A5AGU.sys [2006-09-21 347648]
R3 PAC207;Trust WB-1400T Webcam;c:\windows\system32\DRIVERS\pfc027.sys [2005-02-24 162176]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\K]
\Shell\AutoRun\command - K:\LaunchU3.exe -a
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1aa67994-23de-11dd-81df-001b110a4cd5}]
\Shell\AutoRun\command - setupSNK.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}]
"c:\programmi\File comuni\LightScribe\LSRunOnce.exe"
.
Contenuto della cartella 'Scheduled Tasks'
2008-11-27 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-04-11 16:57]
2008-11-30 c:\windows\Tasks\Verifica aggiornamenti per Windows Live Toolbar.job
- c:\programmi\Windows Live Toolbar\MSNTBUP.EXE [2006-09-27 16:39]
.
- - - - ORFÃOS REMOVIDOS - - - -
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
HKCU-Run-MsnMsgr - c:\programmi\MSN Messenger\MsnMsgr.Exe
Notify-WgaLogon - (no file)
.
------- Supplementare di scansione -------
.
uStart Page = hxxp://it.yahoo.com/
mStart Page = hxxp://home.sweetim.com
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = *.local
IE: &Windows Live Search - c:\programmi\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 -: Microsoft XML Parser for Java - file:///C:/WINDOWS/Java/classes/xmldso.cab
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-11-30 13:05:30
Windows 5.1.2600 Service Pack 3 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\programmi\Bonjour\mDNSResponder.exe
c:\programmi\File comuni\LightScribe\LSSrvc.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\PAStiSvc.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\rundll32.exe
c:\programmi\Alice ti aiuta\bin\mpbtn.exe
c:\programmi\iPod\bin\iPodService.exe
c:\programmi\HP\Digital Imaging\bin\hpqste08.exe
c:\programmi\HP\Digital Imaging\bin\hpqimzone.exe
.
**************************************************************************
.
Ora fine scansione: 2008-11-30 13:15:02 - macchina è stato riavviato
ComboFix-quarantined-files.txt 2008-11-30 12:14:58
Pre-Run: 16,600,625,152 byte disponibili
Post-Run: 17,236,344,832 byte disponibili
502 --- E O F --- 2008-11-12 20:43:24
