Maffu

Utenti
  • Numero contenuti

    2
  • Iscritto

  • Ultima visita

Su Maffu

  • Livello
    Iniziato
  1. Ciao! hai ragione, ora posto il report che hai chiesto. Scusa il ritardo, causa feste ComboFix 10-01-03.05 - User 04/01/2010 20.56.26.2.1 - x86 MINIMAL Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.1014.785 [GMT 1:00] Eseguito da: c:\documents and settings\User\Desktop\abc.exe AV: Kaspersky Anti-Virus *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0} ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !! . ((((((((((((((((((((((((((((((((((((( Altre eliminazioni ))))))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Esecuzione precedente ------- . c:\documents and settings\User\cmdd.bat c:\windows\kcmd.exe c:\windows\system32\iq3wb4d.dll c:\windows\system32\nsprs.dll c:\windows\system32\prsgrc.dll c:\windows\system32\serauth1.dll c:\windows\system32\serauth2.dll c:\windows\system32\SIntf16.dll c:\windows\system32\ssprs.dll c:\windows\system32\xp8ulkj.dll . ((((((((((((((((((((((((( Files Creati Da 2009-12-04 al 2010-01-04 ))))))))))))))))))))))))))))))))))) . 2010-01-01 21:04 . 2010-01-01 21:04 -------- d-----w- c:\programmi\Curl Corporation 2010-01-01 06:32 . 2010-01-01 06:32 20 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\bases\apu\ForDiff\apu0001.dat.drv 2009-12-29 18:25 . 2009-12-29 18:25 -------- d-----w- C:\kleaner.tmp 2009-12-29 00:37 . 2009-12-29 00:37 -------- d-----w- c:\documents and settings\User\Dati applicazioni\AVP 2009 2009-12-26 19:52 . 2009-12-26 19:54 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Temp 2009-12-26 19:05 . 2009-12-26 19:05 -------- d-----w- c:\documents and settings\User\Impostazioni locali\Dati applicazioni\Curl Corporation 2009-12-26 19:05 . 2009-12-26 19:05 -------- d-----w- c:\documents and settings\User\Dati applicazioni\Curl Corporation 2009-12-17 19:43 . 2009-06-30 08:37 28552 ----a-w- c:\windows\system32\drivers\pavboot.sys 2009-12-17 17:33 . 2009-12-30 13:28 664 ----a-w- c:\windows\system32\d3d9caps.dat 2009-12-17 17:31 . 2009-12-17 17:32 3175784 ----a-w- c:\documents and settings\User\Dati applicazioni\Uniblue\RegistryBooster 2010\_temp\ub.exe 2009-12-14 11:54 . 2009-12-14 11:54 -------- d-----w- c:\programmi\Trend Micro 2009-12-06 17:50 . 2005-06-03 18:49 9600 ----a-w- c:\windows\system32\drivers\TPwSav.sys 2009-12-06 17:50 . 2005-06-03 18:32 28672 ----a-w- c:\windows\system32\EBLib.DLL 2009-12-06 17:46 . 2005-05-17 11:44 94208 ----a-w- c:\windows\system32\TCtrlCommon.dll 2009-12-06 17:46 . 2009-12-06 18:11 -------- d-----w- C:\tmp 2009-12-06 17:31 . 2007-01-13 08:49 188416 ----a-w- c:\windows\system32\igfxres.dll 2009-12-06 17:28 . 2007-01-13 09:46 204800 ----a-w- c:\windows\system32\igfxCoIn_v4764.dll 2009-12-06 17:28 . 2007-01-13 09:33 2482688 ----a-w- c:\windows\system32\igxpdx32.dll 2009-12-06 17:28 . 2007-01-13 09:33 5672032 ----a-w- c:\windows\system32\drivers\igxpmp32.sys 2009-12-06 17:28 . 2007-01-13 09:33 57344 ----a-w- c:\windows\system32\igxprd32.dll 2009-12-06 17:28 . 2007-01-13 09:32 149504 ----a-w- c:\windows\system32\igxpgd32.dll 2009-12-06 17:28 . 2007-01-13 09:32 1563776 ----a-w- c:\windows\system32\igxpdv32.dll 2009-12-06 17:28 . 2009-12-06 17:28 -------- d-----w- c:\windows\system32\Lang 2009-12-06 17:28 . 2007-01-19 09:14 389120 ----a-w- c:\windows\system32\igxpun.exe 2009-12-06 17:28 . 2006-11-10 07:25 319456 ----a-w- c:\windows\system32\difxapi.dll 2009-12-06 17:27 . 2009-12-06 17:27 -------- d-----w- C:\Intel . (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-01-04 19:53 . 2009-04-01 14:16 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab 2010-01-04 19:45 . 2009-04-01 14:16 704544 --sha-w- c:\windows\system32\drivers\fidbox2.dat 2010-01-04 19:45 . 2009-04-01 14:16 37956 --sha-w- c:\windows\system32\drivers\fidbox.idx 2010-01-04 19:45 . 2009-04-01 14:16 3488 --sha-w- c:\windows\system32\drivers\fidbox2.idx 2010-01-04 19:45 . 2009-04-01 14:16 4720160 --sha-w- c:\windows\system32\drivers\fidbox.dat 2010-01-04 12:37 . 2008-01-29 15:29 33808 ----a-w- c:\windows\system32\drivers\klbg.sys 2010-01-04 12:37 . 2009-04-01 14:39 33808 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\klbg.sys 2010-01-04 12:37 . 2009-04-01 14:39 226832 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab\AVP8\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav8exec\8.0.0.506\XP\klif.sys 2010-01-03 19:45 . 2009-04-01 14:17 95259 ----a-w- c:\windows\system32\drivers\klick.dat 2010-01-03 19:45 . 2009-04-01 14:17 108059 ----a-w- c:\windows\system32\drivers\klin.dat 2010-01-03 18:40 . 2009-06-19 11:35 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Spybot - Search & Destroy 2010-01-03 16:41 . 2009-04-16 10:03 -------- d-----w- c:\documents and settings\User\Dati applicazioni\uTorrent 2010-01-01 22:23 . 2009-11-05 18:05 152576 ----a-w- c:\documents and settings\User\Dati applicazioni\Sun\Java\jre1.6.0_17\lzma.dll 2010-01-01 22:16 . 2009-11-05 18:05 79488 ----a-w- c:\documents and settings\User\Dati applicazioni\Sun\Java\jre1.6.0_17\gtapi.dll 2009-12-30 18:38 . 2009-04-01 08:04 64360 ----a-w- c:\documents and settings\User\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT 2009-12-29 23:24 . 2009-05-15 10:53 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\HP 2009-12-29 18:29 . 2009-04-01 14:16 -------- d-----w- c:\programmi\Kaspersky Lab 2009-12-29 18:24 . 2009-04-01 14:14 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files 2009-12-29 11:59 . 2009-04-01 14:10 -------- d-----w- c:\programmi\Codec Pack - All In 1 2009-12-28 23:50 . 2009-04-01 14:13 -------- d-----w- c:\programmi\CCleaner 2009-12-28 21:56 . 2009-04-14 12:50 -------- d-----w- c:\documents and settings\User\Dati applicazioni\gtk-2.0 2009-12-28 12:06 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\haejx7e.dll 2009-12-26 19:55 . 2009-05-13 11:31 -------- d-----w- c:\programmi\Google 2009-12-26 19:05 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\mn5h7fn.dll 2009-12-26 19:05 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\grcauth2.dll 2009-12-26 19:05 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\grcauth1.dll 2009-12-26 19:05 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\clauth2.dll 2009-12-26 19:05 . 2006-03-02 12:00 1025 ----a-w- c:\windows\system32\clauth1.dll 2009-12-17 17:37 . 2009-11-29 22:31 -------- d-----w- c:\programmi\Uniblue 2009-12-06 17:50 . 2009-04-01 15:12 -------- d--h--w- c:\programmi\InstallShield Installation Information 2009-12-06 17:49 . 2009-04-26 20:38 -------- d-----w- c:\programmi\TOSHIBA 2009-12-01 21:50 . 2009-06-02 22:50 -------- d-----w- c:\programmi\QuickTime 2009-12-01 21:49 . 2009-12-01 21:49 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Apple Computer 2009-12-01 17:58 . 2009-05-15 10:24 -------- d-----w- c:\documents and settings\User\Dati applicazioni\HP 2009-11-30 12:33 . 2009-11-29 22:23 -------- d-----w- c:\documents and settings\User\Dati applicazioni\Uniblue 2009-11-30 12:21 . 2009-11-30 12:20 -------- dc-h--w- c:\documents and settings\All Users\Dati applicazioni\{C4C0E335-EDDF-46A0-A57D-F3802AE44275} 2009-11-30 12:14 . 2009-11-30 12:10 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\DriverScanner 2009-11-30 12:11 . 2009-11-30 12:08 -------- dc-h--w- c:\documents and settings\All Users\Dati applicazioni\{D5ABFFAD-D592-4F98-B02B-587125B4801F} 2009-11-30 00:02 . 2009-11-30 00:02 -------- d-----w- c:\documents and settings\User\Dati applicazioni\toshiba 2009-11-29 14:11 . 2009-11-29 14:11 -------- d-----w- c:\documents and settings\User\Dati applicazioni\Canneverbe_Limited 2009-11-29 14:11 . 2009-11-29 14:11 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Canneverbe Limited 2009-11-29 14:10 . 2009-11-29 14:10 -------- d-----w- c:\programmi\CDBurnerXP 2009-11-27 01:35 . 2009-04-14 17:34 -------- d-----w- c:\documents and settings\User\Dati applicazioni\Skype 2009-11-27 01:34 . 2009-04-14 17:34 -------- d-----r- c:\programmi\Skype 2009-11-27 01:34 . 2009-11-27 01:34 -------- d-----w- c:\programmi\File comuni\Skype 2009-11-27 01:34 . 2009-04-14 17:33 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Skype 2009-11-27 01:29 . 2009-04-14 17:37 -------- d-----w- c:\documents and settings\User\Dati applicazioni\skypePM 2009-11-24 16:17 . 2009-06-19 11:35 -------- d-----w- c:\programmi\Spybot - Search & Destroy 2009-11-14 13:24 . 2009-11-14 13:24 64072 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files\Kaspersky Anti-Virus 2010 9.0.0.736\French\setup.exe 2009-11-09 19:37 . 2009-11-09 19:37 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Messenger Plus! 2009-11-09 19:03 . 2009-11-09 19:03 -------- d-----w- c:\programmi\Messenger Plus! Live 2009-11-07 17:08 . 2009-11-07 17:06 -------- d-----w- c:\programmi\Microsoft 2009-11-05 18:08 . 2006-03-02 12:00 84354 ----a-w- c:\windows\system32\perfc010.dat 2009-11-05 18:08 . 2006-03-02 12:00 489648 ----a-w- c:\windows\system32\perfh010.dat 2009-10-21 05:38 . 2009-10-21 05:38 75776 ----a-w- c:\windows\system32\SET46A.tmp 2009-10-21 05:38 . 2009-10-21 05:38 25088 ----a-w- c:\windows\system32\SET46B.tmp 2009-10-21 05:38 . 2006-03-02 12:00 75776 ----a-w- c:\windows\system32\strmfilt.dll 2009-10-21 05:38 . 2006-03-02 12:00 25088 ----a-w- c:\windows\system32\httpapi.dll 2009-10-20 16:20 . 2006-03-02 12:00 265728 ----a-w- c:\windows\system32\drivers\http.sys 2009-10-13 10:33 . 2006-03-02 12:00 271360 ----a-w- c:\windows\system32\oakley.dll 2009-10-12 13:38 . 2009-10-12 13:38 150016 ----a-w- c:\windows\system32\SET443.tmp 2009-10-12 13:38 . 2006-03-02 12:00 150016 ----a-w- c:\windows\system32\rastls.dll 2009-10-12 13:38 . 2009-10-12 13:38 79872 ----a-w- c:\windows\system32\SET444.tmp 2009-10-12 13:38 . 2006-03-02 12:00 79872 ----a-w- c:\windows\system32\raschap.dll 2009-10-11 03:17 . 2009-04-01 14:12 411368 ----a-w- c:\windows\system32\deploytk.dll . ((((((((((((((((((((((((((((((((((((( Punti Reg Caricati )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* i valori vuoti & legittimi/default non sono visualizzati. REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "LightScribe Control Panel"="c:\programmi\File comuni\LightScribe\LightScribeControlPanel.exe" [2008-01-24 2289664] "MsnMsgr"="c:\programmi\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856] "SpybotSD TeaTimer"="c:\programmi\Spybot - Search & Destroy\TeaTimer.exe" [2009-03-05 2260480] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Apoint"="c:\programmi\Apoint2K\Apoint.exe" [2004-03-24 196608] "RemoteControl"="c:\programmi\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216] "LanguageShortcut"="c:\programmi\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256] "NeroFilterCheck"="c:\programmi\File comuni\Ahead\Lib\NeroCheck.exe" [2008-02-27 570664] "Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792] "PadTouch"="c:\programmi\TOSHIBA\Touch and Launch\PadExe.exe" [2005-08-30 1077329] "HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2005-05-11 49152] "SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2009-10-11 149280] "QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2009-11-10 417792] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-01-13 131072] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-01-13 163840] "Persistence"="c:\windows\system32\igfxpers.exe" [2007-01-13 135168] "TFncKy"="TFncKy.exe" [bU] "CeEKEY"="c:\programmi\TOSHIBA\E-KEY\CeEKey.exe" [2005-09-06 671744] "TCtryIOHook"="TCtrlIOHook.exe" [2005-08-22 28672] c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\ HP Digital Imaging Monitor.lnk - c:\programmi\HP\Digital Imaging\bin\hpqtra08.exe [2005-5-11 282624] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys] @="Driver" [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus] "DisableMonitoring"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "DisableNotifications"= 1 (0x1) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Programmi\\Messenger\\msmsgs.exe"= "c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Programmi\\uTorrent\\uTorrent.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqtra08.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"= "c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"= "c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"= "c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"= "c:\\Programmi\\Bonjour\\mDNSResponder.exe"= "c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Programmi\\Skype\\Phone\\Skype.exe"= "c:\\Programmi\\Skype\\Plugin Manager\\skypePM.exe"= S0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 16.29.38 33808] S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [17/12/2009 20.43.18 28552] S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [05/07/2009 19.47.28 642560] S2 gupdate1c9d867a39fbf1a;Servizio di Google Update (gupdate1c9d867a39fbf1a);"c:\programmi\Google\Update\GoogleUpdate.exe" /svc --> c:\programmi\Google\Update\GoogleUpdate.exe [?] S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 17.06.48 24592] [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{10880D85-AAD9-4558-ABDC-2AB1552D831F}] 2008-01-24 10:30 451872 ----a-w- c:\programmi\File comuni\LightScribe\LSRunOnce.exe . Contenuto della cartella 'Scheduled Tasks' 2009-12-29 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34] . . ------- Scansione supplementare ------- . uStart Page = about:blank uInternet Connection Wizard,ShellNext = iexplore uInternet Settings,ProxyOverride = *.local IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 TCP: {FC9D1121-B843-4109-8FC6-2CD448437027} = 83.216.172.1,83.216.172.2 FF - ProfilePath - c:\documents and settings\User\Dati applicazioni\Mozilla\Firefox\Profiles\2k85x4vt.maffu\ FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/ FF - plugin: c:\documents and settings\User\Impostazioni locali\Dati applicazioni\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\programmi\Curl Corporation\Surge\plugins\np-curl-surge-5-0.dll FF - plugin: c:\programmi\Google\Google Earth\plugin\npgeplugin.dll FF - plugin: c:\programmi\Google\Update\1.2.183.13\npGoogleOneClick8.dll FF - plugin: c:\programmi\Java\jre6\bin\npdeploytk.dll FF - plugin: c:\programmi\Microsoft\Office Live\npOLW.dll FF - plugin: c:\programmi\Mozilla Firefox\plugins\np-curl-surge-5-0.dll FF - plugin: c:\programmi\Mozilla Firefox\plugins\np-curl-surge.dll FF - plugin: c:\programmi\Unity\WebPlayer\loader\npUnity3D32.dll FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ . - - - - CHIAVI ORFANE RIMOSSE - - - - ActiveSetup-hptray - c:\windows\hptray.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-01-04 21:04 Windows 5.1.2600 Service Pack 3 NTFS scansione processi nascosti ... scansione entrate autostart nascoste ... Scansione files nascosti ... Scansione completata con successo Files nascosti: 0 ************************************************************************** . --------------------- CHIAVI DI REGISTRO BLOCCATE --------------------- [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\h–€|ÿÿÿÿ¤•€|ù•9~*] "0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL" . --------------------- Dlls caricate dai processi in esecuzione --------------------- - - - - - - - > 'explorer.exe'(1300) c:\windows\system32\WININET.dll c:\progra~1\WINDOW~2\wmpband.dll . Ora fine scansione: 2010-01-04 21:08:59 ComboFix-quarantined-files.txt 2010-01-04 20:08 Pre-Run: 72.475.152.384 byte disponibili Post-Run: 72.439.742.464 byte disponibili - - End Of File - - 664D01E7B211E909AA37E1A44356EC17 Mi si disattiva in continuazione Kaspersky dicendo che non è aggiornato o dandomi errori sconosciuti e non con la chiave.
  2. Salve, ho un problema fastidiosissimo che non riesco a risolvere. Quando accendo il computer (non sempre, quando ha voglia) mi appaiono finisetre di errore per tutte le applicazioni che si aprono o che voglio aprire, gli errori sono: - pincopallino.exe immagine danneggiata - pincopallino.exe immagine non appartenente e a win2 (non è esattamente così, ma in questo momento non ricordo) - pincopallino.exe errore di applicazione: riferimento (numero con mille 0) alla memoria (altro numero) non trovato e da adesso c'è una new entry, che PER ORA mi da solo con windows media player: - wmplayer.exe errore di applicazione: si è verificato l'errore di exception eccezione software sconosciuta 0xc06d007 nell'applicazione alla posizione 0x7c812afb Quando parte la serie di errori ovviamente non posso fare più nulla, e mi si disattiva anche kaspersky antivirus, in pratica non riesco a far nulla, neanche una misera scansione. Ho fatto la scansione in modalità provvisoria con tutte le cartelle nascoste visibili sia con Kaspersky, che con Avast, con RegistryBooster, con CCleaner..anche con HijackThis, ho messo il log nell'apposito spazio nel sito ma non trova nulla!! L'unica cosa che ho trovato è stato facendo una scansione con Pandantivirus online, mi ha trovato uno spyware latente che si trova in un exe in una sottocartella di System Volume Information, lo spyware è vvsn.exe, ma è dentro un'altro exe..o cmq ha il nome di un exe d quella sottocartella e non mi azzardo a cancellarlo e scansionandolo singolarmente non si trova niente. Qualcuno mi aiuti! Vi supplico. XD Grazie.