rootkit non si elimina

[diego78]

Ciao a tutti, combofix, mi rileva un rootkit che non riesce ad eliminare e che in un mese (penso per colpa sua) mi ha bloccato due volte la connessione internet ( connettività limitata o assente)- zero access- ho risolto sempre facendo girare antivirus in modalità provvisoria ma l'infezione presunta rimane segnalata sempre da combo. Ho provato con tanti tool specifici e generici anche quelli da voi citati , tanti antivirus, ma il problema persiste.
Vorrei allegare l'ultimo report di combofix ma non so come fare, se per cortesia mi potete aiutare.
Vi ringrazio anticpatamente.

[Luke57]

Ciao, Scarica Kaspersky TDSS Killer:
http://support.kaspersky.com/downloads/ ... killer.exe
● posiziona il file scaricato sul Desktop
● clicca due volte sul file TDSSKiller.exe per avviare l'applicazione
● successivamente premi il pulsante Start scan

Nota - riguardo al programma:
● non cliccare sul pulsante Stop scan per nessun motivo, la scansione si interromperebbe

Giunti a questo punto, inizia la scansione del sistema alla ricerca di software malevolo:
● se viene trovato un file infetto, l'azione di default sarà Cure: clicca quindi su Continua
● se viene trovato un file sospetto, l'azione di default sarà Skip: clicca quindi su Continua
● se non viene rilevato nulla, chiudi semplicemente il programma al termine della scansione

Una volta terminata la scansione, si presenterà una di queste due opzioni:
● non è necessario il riavvio del sistema: allega il Report situato nel Disco Locale C:\, di nome TDSSKiller.[Version]_[Date]_[Time]_log.txt
● è necessario riavviare il sistema: clicca su Riavvia ora, infine allega il risultato della scansione (si trova nello stesso percorso menzionato poco fa')

I report di combofix e di tdskiller inseriscili qui:
http://wikisend.com/

carichi sul sito i file con Upload e al termine ti sarà fornito un link per poterli vedere. Copia il link in
un post.

[diego78]

ecco il report, non mi ha dato nessun avvertimento dopo la scansione, fammi sapere cosa ne pensi

grazie

TDSSKiller.2.7.36.0_04.06.2012_07.34.52_log.zip

[Luke57]

Ciao, puoi caricare su wikisend anche il report di combofix?

[diego78]

eccolo:


ComboFix.zip

[Luke57]

Ciao, apri un file di testo con il blocco note di windows, al suo interno copia e incolla il seguente script in neretto:


Folder::
c:\documents and settings\utente\Dati applicazioni\Dozuma
c:\documents and settings\utente\Dati applicazioni\Idriz
c:\documents and settings\utente\Dati applicazioni\Luve

File::
c:\windows\system32\020F.sys
c:\windows\system32\04aA.sys
c:\windows\system32\09cB.sys
c:\windows\system32\1e58.sys
c:\windows\system32\20c14.sy
c:\windows\system32\2657.sys
c:\windows\system32\4383.sys
c:\windows\system32\72a6.sys
c:\windows\system32\75c13.sys
c:\windows\system32\9fe12.sys
c:\windows\system32\e3bE.sys
c:\windows\system32\f8dC.sys
c:\windows\system32\fb94.sys
c:\windows\system32\Drivers\utiymzq1.sys

Driver::
020F
04aA
09cB
2657
20c14
4383
72a6
75c13
afe12
ad010
c4b2
c4b2
f8dC
fb94
utiymzq1


salva il file nel desktop, chiamandolo obbligatoriamente CFScript.txt
Trascinalo con il puntatore del mouse sull'icona di combofix, il programma avvierà una nuova scansione, al termine inserisci nuovamente in wikisend il report che rilascerà in modo da poterlo vedere.

[Luke57]

Ciao, apri un file di testo con il blocco note di windows, al suo interno copia e incolla il seguente script in neretto:


Folder::
c:\documents and settings\utente\Dati applicazioni\Dozuma
c:\documents and settings\utente\Dati applicazioni\Idriz
c:\documents and settings\utente\Dati applicazioni\Luve

File::
c:\windows\system32\020F.sys
c:\windows\system32\04aA.sys
c:\windows\system32\09cB.sys
c:\windows\system32\1e58.sys
c:\windows\system32\20c14.sy
c:\windows\system32\2657.sys
c:\windows\system32\4383.sys
c:\windows\system32\72a6.sys
c:\windows\system32\75c13.sys
c:\windows\system32\9fe12.sys
c:\windows\system32\e3bE.sys
c:\windows\system32\f8dC.sys
c:\windows\system32\fb94.sys
c:\windows\system32\Drivers\utiymzq1.sys

Driver::
020F
04aA
09cB
2657
20c14
4383
72a6
75c13
afe12
ad010
c4b2
c4b2
f8dC
fb94
utiymzq1


salva il file nel desktop, chiamandolo obbligatoriamente CFScript.txt
Trascinalo con il puntatore del mouse sull'icona di combofix, il programma avvierà una nuova scansione, al termine inserisci nuovamente in wikisend il report che rilascerà in modo da poterlo vedere.

[diego78]

fatto tutto ecco il report di combo

ComboFix.zip

fammi sapere
grazie

[Luke57]

Ciao, al file CFScript.txt sostituisci il contenuto precedente con il seguente in neretto, salvando le modifiche:

Folder::
c:\documents and settings\utente\Dati applicazioni\fifa
c:\documents and settings\utente\Impostazioni locali\Dati applicazioni\lptmp1636419680

File::
c:\windows\system32\a63A.sys
c:\windows\system32\1e58.sys
c:\windows\system32\9fe12.sys
c:\windows\system32\e3bE.sys

Driver::
a63A
1e58
9fe12
e3bE

Ripeti la manovra di trascinamento; posta il nuovo report.

[diego78]

Ciao questo è il nuovo report di combo
ComboFix.zip

[Luke57]

Ciao, adesso sembra a posto. Quali problemi riscontri?
Vai qui:
http://www.winmagazine.it/forum/index.php?topic=21170.0
scarica e utilizza malwarebytes per una scansione completa. Alla fine posta il report prodotto nel solito modo.

[diego78]

Ciao questo è il report
mbam-log-2012-06-05 (05-58-25).zip

Al momento non riscontro nessun problema però come scritto in precedenza zero access per due volte mi ha bloccato la connessione a internet.

Fammi sapere.
grazie

[Luke57]

Ciao, è pulito. Scarica Systemlook:
http://jpshortstuff.247fixes.com/SystemLook.exe
sul desktop.

Nella schermata principale copia questo codice:

:folderfind
$NtUninstallKB*$

Clicca su Look per far partire lo scan e posta il suo report (si apre una finestra notepad si aprirà con il contenuto dello scan).

[diego78]

QUESTO E' REPORT
SystemLook.zip

FAMMI SAPERE
GRAZIE

[Luke57]

Scarica OTL
http://oldtimer.geekstogo.com/OTL.exe
Nel box bianco di otl incolla il seguente codice in neretto.

netsvcs
"%WinDir%\$NtUninstallKB*$."

Clicca poi sul pulsante RUN SCAN .A fine scansione OTL produrrà due file di log (OTL.txt ed Extras.txt).Inseriscili come al solito su wikisend

[diego78]

ecco i report OTL
otl.zip

fammi sapere
grazie

[Luke57]

Ciao, Riapri OTL e incolla completamente il seguente script (colore verde) nel box bianco di OTL.Clicca sul pulsante RUN FIX.Il log che ne scaturisce lo inserisci su wikisend, come al solito.

Codice: Seleziona tutto

:Services
:Processes
KILLALLPROCESSES
:OTL
[2011/05/31 14.08.56 | 000,000,000 | -HSD | M] -- C:\WINDOWS\$NtUninstallKB14183$
[2011/05/31 09.58.17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2079403$
[2011/05/31 09.57.27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2115168$
[2011/05/31 09.57.46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2121546$
[2011/05/31 09.57.23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2229593$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2229593_0$
[2011/05/31 09.58.01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2296011$
[2011/05/31 10.32.52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2345886$
[2011/05/31 09.57.49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2347290$
[2011/05/31 09.23.01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2360937$
[2011/05/31 09.58.03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2378111_WM9$
[2011/05/31 09.58.09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2387149$
[2011/05/31 09.23.15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2393802$
[2011/05/31 09.59.53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2412687$
[2011/05/31 09.58.36 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2419632$
[2011/05/31 09.58.20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2423089$
[2011/05/31 09.58.31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2440591$
[2011/05/31 09.58.24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443105$
[2011/05/31 09.58.28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2443685$
[2011/05/31 09.55.11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2467659$
[2011/06/24 08.02.14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476490$
[2011/05/31 09.58.54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2476687$
[2011/05/31 09.58.50 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478960$
[2011/05/31 09.58.42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2478971$
[2011/05/31 09.59.04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2479943$
[2011/05/31 09.59.08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2481109$
[2011/05/31 09.58.46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2483185$
[2011/05/31 09.59.11 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2485663$
[2011/05/31 13.58.05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2492386$
[2011/05/31 09.59.41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2497640$
[2011/05/31 09.59.31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503658$
[2011/06/24 08.02.08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2503665$
[2011/05/31 09.59.19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506212$
[2011/05/31 09.59.23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2506223$
[2011/05/31 09.59.45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507618$
[2011/07/13 07.38.46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2507938$
[2011/05/31 09.59.34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508272$
[2011/05/31 09.59.15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2508429$
[2011/05/31 09.59.57 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2509553$
[2011/05/31 09.59.49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2510581$
[2011/05/31 09.59.27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2511455$
[2011/05/31 10.00.01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2524375$
[2011/06/24 08.02.03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2535512$
[2011/06/24 08.01.53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276$
[2011/08/11 18.27.58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2536276-v2$
[2011/06/29 07.20.39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2541763$
[2011/06/24 08.01.19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893$
[2011/11/09 08.13.38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2544893-v2$
[2011/07/13 07.35.54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2555917$
[2011/08/11 18.24.44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2562937$
[2011/10/14 00.15.17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2564958$
[2011/08/11 18.24.53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2566454$
[2011/10/14 00.10.19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567053$
[2011/08/11 18.28.04 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2567680$
[2011/08/11 18.27.52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570222$
[2011/08/24 17.11.01 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570791$
[2011/09/15 22.13.02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2570947$
[2012/05/16 05.53.08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2584146$
[2012/01/12 17.22.13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2585542$
[2011/10/14 00.10.13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2592799$
[2012/01/11 15.47.29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2598479$
[2012/01/11 15.47.21 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2603381$
[2011/09/07 07.34.16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2607712$
[2011/09/15 22.14.32 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2616676$
[2011/12/15 07.54.56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2618451$
[2011/12/15 07.55.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2619339$
[2011/12/15 07.54.47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2620712$
[2012/03/14 14.48.15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2621440$
[2011/12/15 07.59.54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2624667$
[2012/01/11 15.49.18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2631813$
[2011/12/15 07.54.15 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633171$
[2011/12/15 07.55.16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2633952$
[2011/12/15 08.00.00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2639417$
[2012/03/14 14.50.28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641653$
[2011/11/11 07.31.39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2641690$
[2012/01/11 15.49.25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2646524$
[2012/03/14 14.48.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2647518$
[2012/04/11 10.35.53 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2653956$
[2012/05/09 07.36.30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2659262$
[2012/02/16 12.38.30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2660465$
[2012/02/16 12.36.14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2661637$
[2012/05/09 07.24.22 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2676562$
[2012/05/09 07.29.03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2686509$
[2012/05/09 07.27.28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2695962$
[2012/06/04 13.37.14 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB2718704$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB883667$
[2010/01/19 15.35.41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB885464$
[2010/01/19 15.34.24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB885855$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB888239$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB888402$
[2010/01/19 15.35.58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB889673$
[2010/01/19 15.34.48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB892559$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB896256$
[2010/01/20 18.55.52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB898461$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB909095$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB909667$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB912436$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB914440$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB915326$
[2011/05/31 13.56.20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB915800-v4$
[2010/08/03 09.56.37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB915865$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB918005$
[2011/05/31 09.23.09 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923561$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB923561_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB925720$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB926239$
[2012/05/23 12.45.03 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB929399$
[2011/05/31 14.08.28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB939683$
[2011/05/31 13.56.33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB940157$
[2011/05/31 14.08.17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB941569$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB944338-v2$
[2011/05/31 09.45.31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946648$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB946648_0$
[2011/05/31 09.45.18 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950762$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950762_0$
[2011/05/31 09.45.38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950974$
[2012/05/25 13.37.51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB950974_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951066_0$
[2011/05/31 09.45.23 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376-v2$
[2010/01/22 10.43.37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951376-v2_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951748_0$
[2011/05/31 09.45.27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB951978$
[2011/05/31 09.46.08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952004$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952004_0$
[2011/05/31 09.56.13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952069_WM9$
[2011/05/31 09.45.41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952287$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952287_0$
[2011/05/31 09.45.34 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952954$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB952954_0$
[2011/05/31 14.08.45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954154_WM11$
[2012/02/03 20.57.41 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954155_WM9$
[2011/05/31 09.45.48 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB954459$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955069_0$
[2011/05/31 09.56.26 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955759$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB955759_0$
[2011/05/31 09.46.02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956572$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956572_0$
[2011/05/31 09.46.33 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956744$
[2011/05/31 09.45.52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956802$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956802_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956803_0$
[2011/05/31 09.55.37 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956844$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB956844_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB957097_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958470$
[2011/05/31 09.45.45 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958644$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958644_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB958687_0$
[2011/05/31 09.46.17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB959426$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB959426_0$
[2011/05/31 09.46.12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960803$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960803_0$
[2011/05/31 09.46.40 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960859$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB960859_0$
[2011/05/31 10.27.25 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961118$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961118_0$
[2011/05/31 09.46.20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961501$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB961501_0$
[2011/05/31 14.09.59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB963093$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB967715_0$
[2011/05/31 09.55.59 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968389$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB968389_0$
[2011/05/31 13.57.32 | 000,000,000 | ---D | M] -- C:\WINDOWS\$NtUninstallKB968930$
[2011/05/31 09.55.54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969059$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969059_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB969947_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970238_0$
[2011/05/31 10.27.47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970430$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB970430_0$
[2011/05/31 09.58.58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971029$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971032$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971468_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971486_0$
[2011/05/31 13.57.27 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971513$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971557_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971633_0$
[2011/05/31 09.46.46 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971657$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971657_0$
[2011/05/31 10.27.51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971737$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB971737_0$
[2011/05/31 09.56.35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB972270$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB972270_0$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973354_0$
[2011/05/31 09.46.35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973507$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973507_0$
[2011/05/31 09.46.24 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973540_WM9$
[2011/05/31 09.56.08 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973687$
[2011/05/30 19.19.06 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973687_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973687_1$
[2011/05/31 09.46.43 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973815$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973815_0$
[2011/05/31 09.46.28 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973869$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973869_0$
[2011/05/31 09.56.31 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB973904$
[2011/05/31 09.55.51 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974112$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974112_0$
[2011/05/31 09.56.17 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974318$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974318_0$
[2011/05/31 09.56.20 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974392$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974392_0$
[2011/05/31 09.55.47 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974571$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB974571_0$
[2011/05/31 09.55.44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975025$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975025_0$
[2011/05/31 09.56.05 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975467$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975467_0$
[2011/05/31 09.57.54 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975558_WM8$
[2011/05/31 09.56.44 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975560$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975560_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975561_0$
[2011/05/31 09.57.19 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975562$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975562_0$
[2011/05/31 09.56.38 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB975713$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977165_0$
[2011/05/31 09.56.56 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977816$
[2011/05/31 09.56.49 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977914$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB977914_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978037_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978251_0$
[2011/05/31 09.57.00 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978338$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978338_0$
[2011/05/31 09.57.10 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978542$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978542_0$
[2011/05/31 09.57.02 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978601$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978601_0$
[2011/05/31 09.57.13 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978695_WM9$
[2011/05/31 09.56.52 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978706$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB978706_0$
[2011/05/31 09.23.29 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979309$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979309_0$
[2011/05/31 09.57.16 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979482$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979482_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979559_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979683_0$
[2011/05/31 09.57.58 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB979687$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980218_0$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980232_0$
[2011/05/31 09.57.39 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB980436$
[2011/05/31 09.57.42 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981322$
[2011/05/30 19.19.07 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981350$
[2011/05/31 09.57.35 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB981997$
[2011/05/31 09.58.12 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982132$
[2011/05/31 09.57.30 | 000,000,000 | -H-D | M] -- C:\WINDOWS\$NtUninstallKB982665$

:Commands
[emptytemp]

[diego78]

ecco il nuovo report otl

06052012_204014.zip

[Luke57]

Ciao, ripeti lo scan con otl inserendo nel box bianco quanto segue:

netsvcs
"%WinDir%\$NtUninstallKB*$."

Clicca poi sul pulsante RUN SCAN . A fine scansione inserisci il solito report su wikisend

[diego78]

fatto anche questo

OTL.zip