problema bho.dll... sapete aiutarmi?

[Luke57]

Ciao, nel report pare tutto a posto, per il problema della chiavetta prova a chiedere in altre sezioni del forum.

[sconsolata]

ok ti ringrazio..... ))

[juanmarcobargas]

Salve rientro in questo argomento, perchè anche io ho riscontrato questo problema, ogni volta che accendo il computer mi si visualizza il messaggio che il file bho.dll non è installato e ie3sh non può funzionare.
Ho windows vista.
E questo problema si è notato insieme a una barra degli strumenti FAst browser search , che provando a seguire anche le istruzioni di molti siti, non ho potuto rimuovere dall'installazione applicazioni del pannello di controllo come mi veniva richiesto! sapete aiutarmi?

[shel]

ciao

Scarica questo programma :
http://www.trendsecure.com/portal/en-US ... kthis.php#
e mettilo nella directory C dove avrai preparato una cartella con il suo nome.
Lanci l'eseguibile e clicchi su " do a system scan and save a log" alla fine salvi questo file con estensione *.TXT e lo alleghi ad un post sul forum.

[juanmarcobargas]

scusa la mia ignoranza per allegare il file?

[juanmarcobargas]

http://www.yourfilelink.com/get.php?fid=523283

[shel]

segui questi passaggi

Avvia Hijack e clicca su "do a system scan only"
Metti la spunta a queste voci e clicca su "fix checked"


R3 - URLSearchHook: SearchHelper Class - {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16} - C:\Program Files\SGPSA\mtwb3sh.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: BrowserHelper Class - {8A9D74F9-560B-4FE7-ABEB-3B2E638E5CD6} - C:\Program Files\SGPSA\SearchAssistant.dll

O2 - BHO: XBTBPos00 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll (file missing)

O3 - Toolbar: Fast Browser Search Toolbar - {1BB22D38-A411-4B13-A746-C2A4F4EC7344} - C:\Program Files\Fast Browser Search\IE\FBStoolbar.dll (file missing)

scarica Ccleaner

http://www.filehippo.com/download_ccleaner/

1) per il download dell'ultima versione clicca a destra in alto sotto la freccia verde
2) installalo
3) clicca su "avvia pulizia", ripeti il procedimento 2 volte

clicca su Registro, nella pagina successiva clicca Trova problemi, poi al termine dello scan clicca su Ripara selezionati , risposndi di sì alla richiesta di salvare il backup (salvalo in una cartella a piacimento) poi ripara tutti gli elementi trovati.


fai una scansione completa con http://www.superantispyware.com/

configuralo come da foto e posta il rapporto che rilascia

http://www.zeusnews.it/zz_upload/img/PS ... 477731.jpg
http://www.zeusnews.it/zz_upload/img/PS ... 926902.jpg


scarica

http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Aggiornalo
Esegui una scansione completa
Posta il risultato senza rimuovere niente

[chemarcos7]

ciao sono sempre juan marco bargas, non mi faceva piu entrare con quel nick...


Ho fatto tutti i passi fino a superspyware ma non mi ha fatto salvare un rapporto, a termine della scansione mi ha detto riavvia il computer per completare...ho riavviato ed è ripartito con il solito bho.dll

Aggiungo inoltre che leggendo per eliminare fastbrowser search toolbarr inoltre su internet mi viene detto di rimuovere per prima cosa quello da programmi e funzionalità, ma questo sia per fastbrowser search che per mozilla non me lo disinstalla.

[chemarcos7]

Ciao questo comunque è il file di log dopo la scansione con malware
http://www.2shared.com/file/10297594/903bc493/mbam-log-2009-12-28__16-53-09_.html

[alma.bitetto]

Ciao, mi sono appena iscritta e ho letto le regole del forum.....cercando l'errore bho.dll ho trovato i tanti interventi fatti ma mi sembra di aver capito che è necessario chiedere un aiuto specifico....ecco AIUTOOOOOOOOOOOOO! non sono una grande esperta e da diversi giorni l'errore mi perseguita....cosa devo fare? quale dei tanti consigli da te postati devo seguire? ho letto ma sono confusa e nn so da dove partire
GRAZIE!

[shel]

ciao

http://www.trendsecure.com/portal/en-US ... kthis.php#

lancia il programma cliccando l’eseguibile e avvia la scansione, scegliendo la voce "Do a system scan and save a logfile"

Ricordati di mettere HIJACKTHIS in una cartella a lui dedicata (in Programmi o Documenti), l'importante è che non si trovi sul desktop o in cartelle temporanee è importante se vuoi salvare i backup

Posta il log che ti rilascia

[alma.bitetto]

fatto....ma come ti allego il file? (lo so sono un disastro)

[shel]

non sei un disastro

www.wikisend.com

[alma.bitetto]

http://wikisend.com/download/590852/hijackthis.log

così?

[shel]

start\pannello di controllo\ installazione applicazioni

rimuovi la Search USA Toolbar, e' solo un veicolo in piu' per far circolare spyware e virus



Avvia Hijack e clicca su "do a system scan only"
Metti la spunta a queste voci e clicca su "fix checked"

R3 - URLSearchHook: (no name) - {91C18ED5-5E1C-4AE5-A148-A861DE8C8E16} - (no file)

R3 - URLSearchHook: Search USA Toolbar - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Program Files\Search_USA\tbSear.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search USA Toolbar - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Program Files\Search_USA\tbSear.dll

O2 - BHO: Search Assistant - {F0626A63-410B-45E2-99A1-3F2475B2D695} - C:\Program Files\SGPSA\BHO.dll (file missing)

O3 - Toolbar: Search USA Toolbar - {48405d3d-2674-4cd8-b1ef-9a719443bd3f} - C:\Program Files\Search_USA\tbSear.dll

Scarica e installa malwarebytes
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
Esegui una "scansione completa" (seleziona l'opzione)
A scansione completata, posta il rapporto e per ora non rimuovere nulla

[alma.bitetto]

ecco fatto

http://wikisend.com/download/530026/mbam-log-2010-01-22 (16-03-35).txt

[shel]

riavvia malwarebytes ed elimina tutto


scarica http://www.filehippo.com/download_ccleaner/

1) per il download dell'ultima versione clicca a destra in alto sotto la freccia verde
2) installalo (senza la toolbar aggiuntiva)
3) clicca su "avvia pulizia", ripeti il procedimento 2 volte

clicca su Registro, nella pagina successiva clicca Trova problemi, poi al termine dello scan clicca su Ripara selezionati , risposndi di sì alla richiesta di salvare il backup (salvalo in una cartella a piacimento) poi ripara tutti gli elementi trovati.

poi


scarica http://www.atribune.org/ccount/click.php?id=1


Avvia ATFCleaner.exe con un doppio click

1.1) seleziona la casella Select All
2.1) clicca sul pulsante Empty selected
3.1) aspetta l'avviso Done Cleaning
(se usi opera o firefox,spunta anche le loro sezioni)



scarica sul desktop
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- disconnetiti da internet
- disattiva l'antivirus
- esegui ComboFix.exe
- digita 1
- segui le instruzioni
- finita la scansione portati in C:\ e copia/incolla, nella tua prossima risposta, il contenuto del file di testo Combofix.txt

[alma.bitetto]

ho riavviato ed eliminato i 4 file infetti

ho scaricato ed installato l'ippopotamo ma nn c'è nessun tasto avvia pulizia da cliccare.....sul desktop ho il collgamento ma se lo apro mi rifa l'installazione....che ho combinato?

[alma.bitetto]

scusa scusa scusa....ho fatto il download dell'update checker....
(che vergogna)
ora vado con il download giusto....

[alma.bitetto]

ComboFix 10-01-21.08 - Lisca 22/01/2010 20.33.59.1.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.39.1040.18.3069.1727 [GMT 1:00]
Eseguito da: c:\users\Lisca\Desktop\ComboFix.exe
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {00000102-76FE-75C4-CCEA-2A0068B6CF75}
AV: AntiVir Desktop *On-access scanning enabled* (Updated) {00310034-0034-0034-6300-630066003100}
AV: Norton Internet Security *On-access scanning enabled* (Outdated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *enabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: AntiVir Desktop *disabled* (Outdated) {00000102-76FE-75C4-CCEA-2A0068B6CF75}
SP: AntiVir Desktop *enabled* (Updated) {00310034-0034-0034-6300-630066003100}
SP: Norton Internet Security *enabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-3291712576-1736606891-529853708-500
c:\$recycle.bin\S-1-5-21-4253685374-936891558-3230070666-500
c:\program files\Search Guard Plus
c:\program files\Search Guard Plus\fbsProtection.xml
c:\program files\Search Guard Plus\fbsProtectionI.xml
c:\program files\Search Guard Plus\fbsSearchProvider.xml
c:\program files\Search Guard Plus\FbsSearchProviderIE8.exe
c:\program files\Search Guard Plus\SearchGuardPlus.exe
c:\program files\Search Guard Plus\SearchGuardPlus.ico
c:\program files\Search Guard Plus\uninstalSGP.exe
c:\program files\Search Guard PlusU
c:\program files\Search Guard PlusU\SGPU.ico
c:\program files\Search Guard PlusU\sgpUpdater.exe
c:\program files\Search Guard PlusU\sgpUpdater.xml
c:\program files\Search Guard PlusU\sgpUpdaters.exe
c:\program files\Search Guard PlusU\uninstalSGPU.exe
c:\program files\SGPSA
c:\program files\SGPSA\ie3sh.exe
c:\windows\system32\KBL.LOG

.
((((((((((((((((((((((((( Files Creati Da 2009-12-22 al 2010-01-22 )))))))))))))))))))))))))))))))))))
.

2010-01-22 19:25 . 2010-01-22 19:25 -------- d-----w- c:\users\Lisca\AppData\Local\Adobe
2010-01-22 19:10 . 2010-01-22 19:10 -------- d-----w- c:\program files\CCleaner
2010-01-22 18:54 . 2010-01-22 18:54 -------- d-----w- c:\program files\FileHippo.com
2010-01-22 13:10 . 2010-01-22 13:10 -------- d-----w- c:\users\Lisca\AppData\Roaming\Malwarebytes
2010-01-22 13:10 . 2010-01-07 15:07 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-22 13:10 . 2010-01-22 13:10 -------- d-----w- c:\programdata\Malwarebytes
2010-01-22 13:10 . 2010-01-22 15:03 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-01-22 13:10 . 2010-01-07 15:07 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-01-22 12:57 . 2010-01-22 12:57 2560 ----a-w- c:\windows\_MSRSTRT.EXE
2010-01-22 11:53 . 2010-01-21 00:00 1647984 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\NAVEX32A.DLL
2010-01-22 11:53 . 2010-01-21 00:00 177520 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\NAVENG32.DLL
2010-01-22 11:53 . 2010-01-21 00:00 1323568 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\NAVEX15.SYS
2010-01-22 11:53 . 2010-01-21 00:00 84912 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\NAVENG.SYS
2010-01-22 11:53 . 2010-01-21 00:00 102448 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\ERASER.SYS
2010-01-22 11:53 . 2010-01-21 00:00 371248 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\EECTRL.SYS
2010-01-22 11:53 . 2010-01-21 00:00 259440 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\ECMSVR32.DLL
2010-01-22 11:53 . 2010-01-21 00:00 2747440 ----a-w- c:\programdata\Symantec\Definitions\VirusDefs\20100121.005\CCERASER.DLL
2010-01-22 11:05 . 2010-01-22 11:05 -------- d-----w- c:\program files\Widget vodafone.it
2010-01-16 17:18 . 2009-10-19 13:38 156672 ----a-w- c:\windows\system32\t2embed.dll
2010-01-16 17:18 . 2009-10-19 13:35 72704 ----a-w- c:\windows\system32\fontsub.dll
2010-01-01 11:01 . 2010-01-01 11:03 -------- d-----w- c:\programdata\WinZip
2010-01-01 10:42 . 2010-01-01 10:42 -------- d-----w- c:\program files\Common Files\PX Storage Engine
2010-01-01 10:42 . 2010-01-01 10:42 -------- d-----w- c:\users\Lisca\AppData\Roaming\DivX
2010-01-01 10:41 . 2010-01-01 10:42 -------- d-----w- c:\program files\DivX
2010-01-01 10:41 . 2010-01-01 10:41 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-12-28 21:48 . 2010-01-22 11:01 -------- d-----w- c:\program files\Microsoft Silverlight

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-01-22 19:33 . 2010-01-22 19:33 12568 ----a-w- c:\windows\system32\drivers\PROCEXP113.SYS
2010-01-22 16:31 . 2007-11-27 09:31 662846 ----a-w- c:\windows\system32\perfh010.dat
2010-01-22 16:31 . 2007-11-27 09:31 120326 ----a-w- c:\windows\system32\perfc010.dat
2010-01-22 12:57 . 2008-05-22 18:40 12 ----a-w- c:\windows\bthservsdp.dat
2010-01-19 21:19 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2010-01-14 10:12 . 2009-10-02 17:56 181120 ------w- c:\windows\system32\MpSigStub.exe
2010-01-05 20:50 . 2009-12-29 10:28 55141 ----a-w- c:\programdata\nvModes.dat
2010-01-05 20:50 . 2008-05-22 19:07 -------- d-----w- c:\programdata\NVIDIA
2010-01-04 00:06 . 2009-12-08 09:15 -------- d-----w- c:\programdata\McAfee Security Scan
2010-01-02 06:38 . 2010-01-22 00:26 916480 ----a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 00:26 71680 ----a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 00:26 109056 ----a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 00:26 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-12-27 11:49 . 2009-12-08 09:15 -------- d-----w- c:\programdata\NOS
2009-12-26 18:42 . 2009-06-30 22:16 -------- d-----w- c:\program files\Google
2009-12-16 15:04 . 2009-12-16 15:04 -------- d-----w- c:\programdata\Avira
2009-12-16 15:04 . 2009-12-16 15:04 -------- d-----w- c:\program files\Avira
2009-12-16 12:17 . 2009-12-16 12:17 -------- d-----w- c:\program files\Windows Portable Devices
2009-12-16 12:17 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-12-16 12:17 . 2009-12-16 12:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_07_00.Wdf
2009-12-16 12:17 . 2009-12-16 12:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-12-13 21:40 . 2009-04-11 21:38 54133 ----a-w- c:\users\Lisca\AppData\Roaming\nvModes.dat
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Calendar
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Sidebar
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Journal
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Collaboration
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Photo Gallery
2009-12-13 18:30 . 2006-11-02 12:37 -------- d-----w- c:\program files\Windows Defender
2009-12-11 22:23 . 2009-12-11 22:23 -------- d-----w- c:\programdata\Norton
2009-12-11 22:04 . 2009-06-24 11:00 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-12-10 12:11 . 2009-07-06 14:33 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-12-10 12:00 . 2009-12-10 12:00 -------- d-----w- c:\programdata\McAfee
2009-12-10 11:50 . 2009-10-20 16:33 38784 ----a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-12-10 11:50 . 2009-07-06 14:33 38784 ----a-w- c:\users\Lisca\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-12-10 11:21 . 2007-11-27 02:24 -------- d-----w- c:\programdata\Microsoft Help
2009-12-08 09:19 . 2007-11-27 02:28 -------- d-----w- c:\program files\Common Files\Adobe
2009-12-08 09:15 . 2009-12-08 09:15 -------- d-----w- c:\program files\McAfee Security Scan
2009-12-08 09:15 . 2009-12-08 09:15 836464 ----a-w- c:\programdata\NOS\Adobe_Downloads\SecurityScan_Release.exe
2009-11-14 00:47 . 2009-11-14 00:47 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-11-14 00:47 . 2009-11-14 00:47 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-11-14 00:47 . 2009-11-14 00:47 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-11-14 00:47 . 2009-11-14 00:47 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-11-14 00:47 . 2009-11-14 00:47 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-11-14 00:47 . 2009-11-14 00:47 696320 ----a-w- c:\windows\system32\DivX.dll
2009-11-09 12:31 . 2009-12-10 11:22 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-11-09 12:30 . 2009-12-10 11:22 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-11-09 10:36 . 2009-12-10 11:22 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-10-29 09:17 . 2009-12-09 10:24 2048 ----a-w- c:\windows\system32\tzres.dll
2009-10-26 14:09 . 2009-10-26 14:09 1095936 ----a-w- c:\windows\system32\drivers\smserial.sys
2009-10-26 13:49 . 2009-10-26 13:49 516096 ----a-w- c:\windows\system32\sm56co85.dll
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-04-11 1233920]
"WindowsWelcomeCenter"="oobefldr.dll" [2009-04-11 2153472]
"HPAdvisor"="c:\program files\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2007-10-01 1783136]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
"FileHippo.com"="c:\program files\FileHippo.com\UpdateChecker.exe" [2009-11-02 155648]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPStart"="c:\program files\Synaptics\SynTP\SynTPStart.exe" [2007-09-15 102400]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2009-10-26 1458176]
"RtHDVCpl"="RtHDVCpl.exe" [2007-08-17 4702208]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-07-25 174616]
"QlbCtrl"="c:\program files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe" [2007-09-19 202032]
"OnScreenDisplay"="c:\program files\Hewlett-Packard\HP QuickTouch\HPKBDAPP.exe" [2007-09-04 554320]
"UCam_Menu"="c:\program files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe" [2007-08-16 218408]
"DpAgent"="c:\program files\DigitalPersona\Bin\dpagent.exe" [2007-09-20 671744]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2008-10-17 51048]
"HP Health Check Scheduler"="c:\program files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe" [2008-06-16 75008]
"hpWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe" [2007-09-13 480560]
"WAWifiMessage"="c:\program files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe" [2007-01-08 311296]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"QPService"="c:\program files\HP\QuickPlay\QPService.exe" [2009-01-12 468264]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"HP Software Update"="c:\program files\Hp\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-05-30 292136]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2008-03-28 1045800]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-04 13556256]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-04 92704]

c:\users\Lisca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Widget vodafone.lnk - c:\program files\Widget vodafone.it\Widget vodafone.it.exe [2010-1-22 95232]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-8-12 110592]
BTTray.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2007-9-5 727592]
McAfee Security Scan.lnk - c:\program files\McAfee Security Scan\1.0.150\SSScheduler.exe [2009-7-28 199184]
WinZip Quick Pick.lnk - c:\program files\WinZip\WZQKPICK.EXE [2009-11-18 495432]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ scecli DPPWDFLT

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"VistaSp2"=hex(b):fb,05,a7,58,23,7c,ca,01

R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\SymcData\ipsdefs\20090610.001\IDSvix86.sys [15/06/2009 22.27.28 272432]
R2 {22D78859-9CE9-4B77-BF18-AC83E81A9263};Power Control [2009/04/11 23:26];c:\program files\Hp\QuickPlay\000.fcl [11/04/2009 22.24.31 87536]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [16/12/2009 16.04.46 108289]
R2 LiveUpdate Notice;LiveUpdate Notice;c:\program files\Common Files\Symantec Shared\CCSVCHST.EXE [12/04/2009 9.10.39 149352]
R3 COH_Mon;COH_Mon;c:\windows\System32\drivers\COH_Mon.sys [29/05/2007 20.55.00 23888]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [22/01/2010 12.53.20 102448]
R3 NETw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\System32\drivers\NETw5v32.sys [17/11/2008 15.40.22 3668480]
R3 SYMNDISV;SYMNDISV;c:\windows\System32\drivers\symndisv.sys [19/02/2009 12.31.18 41008]
S2 gupdate;Servizio di Google Update (gupdate);c:\program files\Google\Update\GoogleUpdate.exe [02/10/2009 22.12.17 133104]
S3 FontCache;Servizio cache tipi di carattere Windows;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [15/06/2009 22.56.57 21504]

--- Altri Servizi/Drivers In Memoria ---

*NewlyCreated* - COMHOST
*Deregistered* - MBAMSwissArmy

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bthsvcs REG_MULTI_SZ BthServ
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contenuto della cartella 'Scheduled Tasks'

2010-01-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-02 21:12]

2010-01-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-10-02 21:12]

2010-01-05 c:\windows\Tasks\Norton Internet Security - Scansione completa sistema - Lisca.job
- c:\program files\Norton Internet Security\Norton AntiVirus\Navw32.exe [2007-08-27 00:19]

2010-01-22 c:\windows\Tasks\User_Feed_Synchronization-{4B077E44-4E20-4C80-995D-AC764C6F4C26}.job
- c:\windows\system32\msfeedssync.exe [2010-01-22 04:56]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
mStart Page = hxxp://ie.redirect.hp.com/svs/rdr?TYPE= ... &pf=laptop
uInternet Settings,ProxyOverride = *.local
IE: &AOL Toolbar Cerca - c:\program files\aol\aol toolbar 5.0\resources\it-it\local\search.html
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Invia immagine alla periferica &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Invia pagina alla periferica &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

HKLM-Run-FBSSA - c:\program files\SGPSA\ie3sh.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-01-22 20:39
Windows 6.0.6002 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
FBSSA = c:\program files\SGPSA\ie3sh.exe???????????????????????????????????????????????????????????????????

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{22D78859-9CE9-4B77-BF18-AC83E81A9263}]
"ImagePath"="\??\c:\program files\HP\QuickPlay\000.fcl"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'lsass.exe'(756)
c:\windows\system32\DPPWDFLT.dll
.
Ora fine scansione: 2010-01-22 20:41:23
ComboFix-quarantined-files.txt 2010-01-22 19:41

Pre-Run: 129.437.999.104 byte disponibili
Post-Run: 129.364.254.720 byte disponibili

- - End Of File - - 7B59B25F462F022CE367BFA7AE98FC94



questo è il report ma ti avviso che non sono riuscita a disattivare l'antivirus (avira e norton)è uguale?
grazie grazie grazie