Siccome non sono molto esperto non riesco a capirlo bene...qualcuno di voi ha voglia di vedere se c'è qualche problema e come si legge questo file?grazie mille a tutti
- Codice: Seleziona tutto
ComboFix 10-10-12.03 - Stefano 14/10/2010 19.17.19.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.39.1040.18.1279.803 [GMT 2:00]
Eseguito da: c:\documents and settings\Stefano\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Updated) {0012F2B4-55E1-7C92-0300-000000000000}
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\vbzlib1.dll
.
((((((((((((((((((((((((( Files Creati Da 2010-09-14 al 2010-10-14 )))))))))))))))))))))))))))))))))))
.
2010-10-14 16:28 . 2010-10-14 16:29 -------- d-----w- c:\programmi\JDownloader
2010-10-14 11:45 . 2010-10-14 11:45 -------- d-----w- c:\documents and settings\Stefano\Dati applicazioni\vlc
2010-10-14 10:16 . 2010-10-14 10:16 -------- d-----w- c:\documents and settings\Stefano\Dati applicazioni\Avira
2010-10-14 08:30 . 2010-10-14 08:30 -------- d-----w- c:\documents and settings\Stefano\Impostazioni locali\Dati applicazioni\Sunbelt Software
2010-10-14 08:13 . 2010-10-14 08:13 -------- dc-h--w- c:\documents and settings\All Users\Dati applicazioni\{ECC164E0-3133-4C70-A831-F08DB2940F70}
2010-10-13 18:24 . 2010-10-13 18:24 -------- d-----w- c:\programmi\DiskCheckup
2010-10-13 18:20 . 2010-09-01 12:22 126856 ----a-w- c:\windows\system32\drivers\avipbb.sys
2010-10-13 18:19 . 2010-09-01 12:22 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2010-10-13 18:19 . 2010-06-17 13:28 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2010-10-13 18:19 . 2010-06-17 13:28 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2010-10-13 18:19 . 2010-10-13 18:19 -------- d-----w- c:\programmi\Avira
2010-10-08 20:21 . 2010-10-08 20:21 -------- d-----w- c:\documents and settings\Daniela\Impostazioni locali\Dati applicazioni\NOS
2010-10-08 20:03 . 2010-10-08 20:03 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\McAfee
2010-09-27 13:25 . 2010-09-14 23:06 718296 ----a-w- c:\programmi\Mozilla Firefox\mozcpp19.dll
2010-09-27 13:25 . 2010-09-14 23:06 14808 ----a-w- c:\programmi\Mozilla Firefox\plugin-container.exe
2010-09-22 16:10 . 2010-09-22 16:10 103864 ----a-w- c:\programmi\Mozilla Firefox\plugins\nppdf32.dll
2010-09-22 16:10 . 2010-09-22 16:10 103864 ----a-w- c:\programmi\Internet Explorer\PLUGINS\nppdf32.dll
2010-09-15 18:35 . 2010-10-11 11:42 -------- d-----w- c:\documents and settings\Stefano\Tracing
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"HP Software Update"="c:\programmi\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"TkBellExe"="c:\programmi\File comuni\Real\Update_OB\realsched.exe" [2008-05-11 185896]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2010-05-14 248552]
"Adobe ARM"="c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-20 932288]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2010-09-01 281768]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360]
c:\documents and settings\Adriano\Menu Avvio\Programmi\Esecuzione automatica\
Mozilla Thunderbird.lnk - c:\programmi\Mozilla Thunderbird\thunderbird.exe [2008-4-10 8319560]
c:\documents and settings\Stefano\Menu Avvio\Programmi\Esecuzione automatica\
SpeedFan.lnk - c:\programmi\SpeedFan\speedfan.exe [2010-7-24 4334272]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"QuickTime Task"="c:\programmi\QuickTime\QTTask.exe" -atboottime
"D-Link AirPlus G"=c:\programmi\D-Link\AirPlus G\AirGCFG.exe
"ANIWZCS2Service"=c:\programmi\ANI\ANIWZCS2 Service\WZCSLDR2.exe
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\Kodak\\Kodak EasyShare software\\bin\\EasyShare.exe"=
"c:\\Programmi\\Java\\jre1.6.0_04\\bin\\javaw.exe"=
"c:\\Programmi\\Mozilla Firefox\\firefox.exe"=
"c:\\Programmi\\File comuni\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Programmi\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"38732:TCP"= 38732:TCP:Emule_TCp
"38742:UDP"= 38742:UDP:Emule_UDP
R0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [24/04/2008 17.48.14 5248]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [25/06/2010 11.06.26 64288]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programmi\Lavasoft\Ad-Aware\AAWService.exe [12/08/2010 14.15.19 1357464]
S4 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [24/04/2008 17.48.14 160640]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
Contenuto della cartella 'Scheduled Tasks'
2010-10-14 c:\windows\Tasks\Ad-Aware Scan (Scansione).job
- c:\programmi\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 08:35]
2010-10-14 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\programmi\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 08:35]
2008-12-04 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
2010-10-14 c:\windows\Tasks\Manutenzione in 1 clic.job
- c:\programmi\TuneUp Utilities 2009\OneClickStarter.exe [2008-12-04 09:21]
2010-10-14 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAEXEC.exe [2009-08-03 13:07]
.
.
------- Scansione supplementare -------
.
uInternet Connection Wizard,ShellNext = hxxp://java.com/it/download/help/index.xml
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Stefano\Dati applicazioni\Mozilla\Firefox\Profiles\oi03q32h.default\
FF - prefs.js: browser.startup.homepage - www.google.it
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nppl3260.dll
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nprjplug.dll
FF - plugin: c:\program files\Real\RealPlayer\Netscape6\nprpjplug.dll
FF - plugin: c:\programmi\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\programmi\Mozilla Firefox\plugins\npybrowserplus_2.4.17.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
HKLM-Run-Cmaudio - cmicnfg.cpl
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\•€|ÿÿÿÿ"•€|þ»Ñw*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\System32\\FM20ENU.DLL"
.
Ora fine scansione: 2010-10-14 19:24:15
ComboFix-quarantined-files.txt 2010-10-14 17:24
Pre-Run: 25.884.921.856 byte disponibili
Post-Run: 26.057.756.672 byte disponibili
WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /fastdetect /NoExecute=OptIn
- - End Of File - - 3824ED9920BBDE853AF4A6F741B41D14
