Ciao, ho un problema si aprono ripetutamente pagine web da sole, spesso sono reidndirizzato su altri siti. Allego log combofix
ComboFix 14-09-12.01 - Utente 26/10/2014 8:08.2.4 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1252.39.1040.18.3798.2310 [GMT 1:00]
Eseguito da: c:\users\Utente\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Creato nuovo punto di ripristino
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\background.html
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\content.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\lsdb.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\manifest.json
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\QsXNcDdI.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfmkncejaemmcobmaabfigljmnkeecdm_0.localstorage
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_impaepofmnammebeenafgmllpnjaiime_0.localstorage
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\bootstrap.js
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\chrome.manifest
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\content\bg.js
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\install.rdf
.
.
((((((((((((((((((((((((( Files Creati Da 2014-09-26 al 2014-10-26 )))))))))))))))))))))))))))))))))))
.
.
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2014-10-26 06:57 . 2014-10-26 06:57 -------- d-----w- c:\program files\CCleaner
2014-10-26 06:50 . 2014-10-26 06:50 -------- d-----w- c:\windows\ERUNT
2014-10-26 06:29 . 2014-10-26 06:29 75888 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8265EEE9-2603-4B3B-B17D-8F4E83D1148C}\offreg.dll
2014-10-26 06:23 . 2014-10-14 11:59 11627712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8265EEE9-2603-4B3B-B17D-8F4E83D1148C}\mpengine.dll
2014-10-25 14:25 . 2014-09-10 14:30 1188440 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8FACAF77-42C9-430B-AD79-5BBABE97FCC1}\gapaengine.dll
2014-10-25 14:00 . 2014-10-25 14:00 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-10-25 14:00 . 2014-10-25 14:00 -------- d-----w- c:\program files\Microsoft Security Client
2014-10-25 14:00 . 2010-04-09 11:06 374664 ----a-w- c:\windows\system32\drivers\netio.sys
2014-10-25 13:53 . 2014-10-25 13:53 -------- d-----w- c:\program files (x86)\Trend Micro
2014-10-24 19:45 . 2014-10-24 19:45 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-10-24 19:18 . 2014-10-24 19:18 -------- d-----w- c:\program files (x86)\VS Revo Group
2014-10-24 14:13 . 2014-10-14 19:59 11627712 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A6CA3D0D-7FBA-4572-9107-039B4EDF1B8F}\mpengine.dll
2014-10-19 07:10 . 2014-10-19 07:10 -------- d-----w- c:\windows\system32\SPReview
2014-10-18 15:50 . 2014-10-24 19:55 -------- d-----w- c:\users\Utente\AppData\Roaming\.minecraft
2014-10-16 16:46 . 2014-09-15 00:44 3195392 ----a-w- c:\windows\system32\win32k.sys
2014-10-14 15:48 . 2014-10-24 19:44 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-14 15:48 . 2014-10-24 19:45 -------- d-----w- c:\program files (x86)\Java
2014-10-14 15:47 . 2014-10-14 15:47 0 ----a-w- c:\windows\SysWow64\RENADDD.tmp
2014-10-14 15:47 . 2014-10-14 15:47 0 ----a-w- c:\windows\SysWow64\RENADDC.tmp
2014-10-14 15:46 . 2014-10-24 19:45 -------- d-----w- c:\programdata\Oracle
2014-10-13 16:13 . 2014-10-13 16:13 -------- d-----w- c:\users\Default\AppData\Roaming\AVAST Software
2014-10-05 15:50 . 2014-10-26 06:57 -------- d-----w- c:\users\Utente\AppData\Local\CrashDumps
2014-10-05 15:39 . 2014-10-05 15:39 -------- d-----w- c:\users\Utente\AppData\Local\TechSmith
2014-10-05 15:38 . 2014-10-05 15:38 -------- d-----w- c:\users\Utente\AppData\Roaming\TechSmith
2014-10-05 15:26 . 2014-10-05 15:26 -------- d-----w- c:\programdata\regid.1995-08.com.techsmith
2014-10-05 15:25 . 2014-10-05 15:25 -------- d-----w- c:\program files (x86)\Common Files\TechSmith Shared
2014-10-05 15:25 . 2014-10-05 15:38 -------- d-----w- c:\programdata\TechSmith
2014-10-05 15:25 . 2014-10-05 15:25 -------- d-----w- c:\program files (x86)\TechSmith
2014-10-04 15:53 . 2006-09-28 14:05 3977496 ----a-w- c:\windows\system32\d3dx9_31.dll
2014-10-01 20:25 . 2014-10-01 20:41 -------- d-----w- C:\9268dd21d69d2551cc56f9
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-05 12:24 . 2014-08-29 05:42 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2014-10-05 12:24 . 2014-09-02 15:43 375632 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2014-10-04 10:55 . 2014-08-29 05:41 375632 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-09-22 06:42 . 2014-03-07 09:29 278152 ------w- c:\windows\system32\MpSigStub.exe
2014-09-02 15:44 . 2014-09-02 15:44 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2014-08-29 05:26 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-10-23 6501656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 70e6ca8c;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
.
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - NISDRV
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-02 09:29 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.102\Installer\chrmstp.exe
.
Contenuto della cartella 'Scheduled Tasks'
.
2014-10-26 c:\windows\Tasks\0e8af300-df29-47e7-a036-fad02c1e9387.job
- c:\program files (x86)\CineDPV2\0e8af300-df29-47e7-a036-fad02c1e9387.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-1.job
- c:\program files (x86)\CineDPV2\CineDPV2-codedownloader.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-11.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-11.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-2.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-2.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-3.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-3.exe [2014-09-07 11:42]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-5.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-5.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-5_user.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-5.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-6.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-6.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-7.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-7.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-9.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-9.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\4963af32-05a2-4ab9-8d81-31c73413ae54.job
- c:\program files (x86)\CineDPV2\4963af32-05a2-4ab9-8d81-31c73413ae54.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-1.job
- c:\program files (x86)\TheGoPhoto.it V10\TheGoPhoto.it V10-codedownloader.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-11.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-11.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-3.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-3.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-4.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-4.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-5.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-5.exe [2014-09-02 18:40]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-7.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-7.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-1.job
- c:\program files (x86)\TheTorntv V10\TheTorntv V10-codedownloader.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-11.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-11.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-2.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-2.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-3.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-3.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-4.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-4.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-5.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-5.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-5_user.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-5.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-6.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-6.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-7.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-7.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-11.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-11.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-2.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-2.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-3.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-3.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-07 11:10]
.
2014-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-07 11:07]
.
2014-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-07 11:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-05-28 172016]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-05-28 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-05-28 442352]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 1331288]
.
------- Scansione supplementare -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.it/
uDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = <-loopback>
uSearchAssistant = hxxp://www.google.com
mCustomizeSearch = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mSearchAssistant = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
IE: E&sporta in Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.254.1
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
.
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Ora fine scansione: 2014-10-26 08:26:35
ComboFix-quarantined-files.txt 2014-10-26 07:26
ComboFix2.txt 2014-10-25 13:38
.
Pre-Run: 444.590.034.944 byte disponibili
Post-Run: 444.493.500.416 byte disponibili
.
- - End Of File - - AB022C2E83836912A293D8FB4C95F994