stebertoz
13-09-2010, 15:18
Se hai un SO a 32 bit scarica Combofix (http://download.bleepingcomputer.com/sUBs/ComboFix.exe) lo esgui seguendo le istruzioni a video (rispondi no alla creazione della console di ripristino) e alla fine riprova la connessione WiFi.
posto di seguito l'intero report:
ComboFix 10-09-12.04 - VGN-FE11S 13/09/2010 14.40.01.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.1022.427 [GMT 2:00]
Eseguito da: c:\documents and settings\VGN-FE11S\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free *On-access scanning disabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\BITS.ini
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\DHTTable.dat
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\pl.dat
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\ProxyList.ini
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223629.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223629.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223629.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223629.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223639.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223639.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223639.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223722.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223722.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223722.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223722.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091202223722.torrent.seeds
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091203092659.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091203092659.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091203092659.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091203092659.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091204203131.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091204203131.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091204203131.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091204203131.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091211124755.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091211124755.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091211124755.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091211124755.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20091211124755.torrent.seeds
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103824.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103824.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103824.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103824.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103824.torrent.seeds
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103912.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103912.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103912.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103949.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103949.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100113103949.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216220911.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216220911.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216220911.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216220911.torrent.seeds
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216221435.torrent
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216221435.torrent.bits
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216221435.torrent.filelist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216221435.torrent.hybridlist
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\Torrent\20100216221435.torrent.seeds
c:\documents and settings\VGN-FE11S\Dati applicazioni\BITS\UPnP.ini
c:\documents and settings\VGN-FE11S\Dati applicazioni\FlashGetBHO
c:\documents and settings\VGN-FE11S\Dati applicazioni\FlashGetBHO\FlashGetBHO3.dll
c:\documents and settings\VGN-FE11S\Dati applicazioni\FlashGetBHO\GetAllUrl.htm
c:\documents and settings\VGN-FE11S\Dati applicazioni\FlashGetBHO\GetUrl.htm
c:\windows\system32\_000005_.tmp.dll
c:\windows\system32\052f75ad.dll
c:\windows\system32\Cache
c:\windows\system32\secustat.dat
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_ASC3550P
-------\Service_asc3550p
((((((((((((((((((((((((( Files Creati Da 2010-08-13 al 2010-09-13 )))))))))))))))))))))))))))))))))))
.
2010-09-03 10:13 . 2010-09-03 10:13 -------- d-----w- c:\windows\system32\winrm
2010-09-03 10:13 . 2010-09-03 10:13 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2010-09-02 21:24 . 2010-09-03 11:48 -------- d-----w- c:\programmi\Windows Desktop Search
2010-09-02 20:45 . 2010-09-02 20:45 -------- d-----w- c:\programmi\Toshiba
2010-08-26 17:46 . 2010-08-26 19:22 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\DivX
2010-08-19 13:35 . 2010-08-19 13:39 -------- d-----w- c:\programmi\QuickTime
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-09-13 12:58 . 2006-02-26 22:19 -------- d-----w- c:\programmi\SpeedFan
2010-09-13 12:56 . 2008-03-07 13:27 970 ----a-w- c:\windows\system32\mhncache.dat
2010-09-13 11:57 . 2006-11-01 09:59 -------- d-----w- c:\documents and settings\VGN-FE11S\Dati applicazioni\VMware
2010-09-11 17:57 . 2010-08-07 11:58 -------- d-----w- c:\programmi\League of Legends
2010-09-08 17:45 . 2006-03-14 15:03 -------- d-----w- c:\programmi\eMule
2010-09-07 08:03 . 2006-02-25 18:41 140608 -c--a-w- c:\documents and settings\VGN-FE11S\Impostazioni locali\Dati applicazioni\GDIPFONTCACHEV1.DAT
2010-09-04 13:28 . 2005-12-14 02:36 682742 ----a-w- c:\windows\system32\perfh010.dat
2010-09-04 13:28 . 2005-12-14 02:36 153984 ----a-w- c:\windows\system32\perfc010.dat
2010-09-03 10:21 . 2006-02-27 09:31 -------- d-----w- c:\programmi\Microsoft.NET
2010-09-03 10:09 . 2009-02-19 11:27 -------- d-----w- c:\programmi\Microsoft
2010-09-03 08:34 . 2005-12-14 13:30 -------- d--h--w- c:\programmi\InstallShield Installation Information
2010-09-03 08:15 . 2007-12-11 17:53 -------- d-----w- c:\programmi\LHSP
2010-09-03 07:58 . 2008-05-24 19:29 -------- d-----w- c:\programmi\Microsoft Silverlight
2010-09-02 19:58 . 2005-12-14 15:58 -------- d-----w- c:\programmi\File comuni\Sony Shared
2010-09-02 19:52 . 2005-12-14 13:52 21275 ----a-w- c:\windows\system32\drivers\AegisP.sys
2010-09-01 07:15 . 2006-02-26 19:48 -------- d-----w- c:\programmi\IncrediMail
2010-08-27 08:22 . 2006-11-17 11:47 -------- d-----w- c:\documents and settings\VGN-FE11S\Dati applicazioni\DivX
2010-08-26 19:22 . 2006-02-20 12:06 -------- d-----w- c:\programmi\DivX
2010-08-26 18:06 . 2009-09-29 12:32 -------- d-----w- c:\programmi\File comuni\DivX Shared
2010-08-23 16:42 . 2010-07-01 17:04 -------- d-----w- c:\programmi\Warcraft III
2010-08-19 13:06 . 2009-06-13 07:27 -------- d-----w- c:\programmi\Safari
2010-08-11 16:20 . 2006-02-28 20:09 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Microsoft Help
2010-08-08 18:43 . 2007-12-12 11:35 -------- d-----w- c:\documents and settings\VGN-FE11S\Dati applicazioni\EssentialPIM
2010-08-08 08:04 . 2010-08-08 08:04 -------- d-----w- c:\documents and settings\VGN-FE11S\Dati applicazioni\LolClient
2010-08-07 12:17 . 2010-08-07 12:04 -------- d-----w- c:\programmi\File comuni\Adobe AIR
2010-08-07 10:25 . 2010-08-07 10:25 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\PMB Files
2010-08-07 10:23 . 2010-08-07 10:23 -------- d-----w- c:\programmi\Pando Networks
2010-07-19 13:39 . 2010-07-01 17:09 79410 ----a-w- c:\windows\War3Unin.dat
2010-07-19 13:15 . 2010-07-01 17:09 2829 ----a-w- c:\windows\War3Unin.pif
2010-07-19 13:15 . 2010-07-01 17:09 139264 ----a-w- c:\windows\War3Unin.exe
2010-07-17 06:31 . 2008-04-20 21:35 243024 ----a-w- c:\windows\system32\drivers\avgtdix.sys
2010-07-17 06:31 . 2010-07-17 06:31 12536 ----a-w- c:\windows\system32\avgrsstx.dll
2010-07-17 06:29 . 2008-04-20 21:35 216400 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2010-06-30 12:31 . 2005-12-14 02:35 149504 ----a-w- c:\windows\system32\schannel.dll
2010-06-24 12:22 . 2005-12-14 02:35 916480 ----a-w- c:\windows\system32\wininet.dll
2010-06-24 09:02 . 2005-12-14 02:35 1851904 ----a-w- c:\windows\system32\win32k.sys
2010-06-21 15:27 . 2005-12-14 02:35 354304 ----a-w- c:\windows\system32\drivers\srv.sys
2010-06-17 14:03 . 2005-12-14 02:35 80384 ----a-w- c:\windows\system32\iccvid.dll
2010-02-22 08:56 . 2008-07-05 12:13 7055 ----a-w- c:\programmi\AAA - Lista programmi.rtf
2006-04-12 08:27 . 2006-04-12 08:27 774144 ------w- c:\programmi\RngInterstitial.dll
2006-02-20 12:06 . 2006-02-20 12:06 56 --sh--r- c:\windows\system32\5C080AD895.sys
2008-01-08 21:31 . 2008-01-08 08:17 5988896 --sha-w- c:\windows\system32\drivers\fidbox.dat
2008-01-08 21:31 . 2008-01-08 08:17 60192 --sha-w- c:\windows\system32\drivers\fidbox2.dat
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"EssentialPIM"="c:\programmi\EssentialPIM\EssentialPIM.exe" [2010-09-03 1961976]
"Google Update"="c:\documents and settings\VGN-FE11S\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" [2008-09-08 133104]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Apoint"="c:\programmi\Apoint\Apoint.exe" [2004-11-17 118784]
"ISBMgr.exe"="c:\programmi\Sony\ISB Utility\ISBMgr.exe" [2004-02-20 32768]
"SonyPowerCfg"="c:\programmi\Sony\VAIO Power Management\SPMgr.exe" [2005-11-28 217088]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2005-12-15 7331840]
"AVG9_TRAY"="c:\progra~1\AVG\AVG9\avgtray.exe" [2010-07-17 2065760]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"DWQueuedReporting"="c:\progra~1\FILECO~1\MICROS~1\DW\dwtrig20.exe" [2008-11-03 435096]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgrsstarter]
2010-07-17 06:31 12536 ----a-w- c:\windows\system32\avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
2006-06-30 11:12 73728 ----a-w- c:\windows\system32\VESWinlogon.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Avvio rapido di HP Image Zone.lnk]
backup=c:\windows\pss\Avvio rapido di HP Image Zone.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Avvio veloce di Adobe Reader.lnk]
backup=c:\windows\pss\Avvio veloce di Adobe Reader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Bluetooth Manager.lnk]
backup=c:\windows\pss\Bluetooth Manager.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^DSLMON.lnk]
backup=c:\windows\pss\DSLMON.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Windows Search.lnk]
backup=c:\windows\pss\Windows Search.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^VGN-FE11S^Menu Avvio^Programmi^Esecuzione automatica^RC.exe.lnk]
backup=c:\windows\pss\RC.exe.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360desktop
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcctMgr
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 7.0
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DesktopTakeover
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\H/PC Connection Agent
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\I downloaded pirated Software from P2P
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\L08IXLRD_134723921
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\L08IXLRD_261823187
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PaperPort PTD
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMware hqtray
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-06-09 08:06 976832 ----a-w- c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-06-20 02:04 35760 ----a-w- c:\programmi\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Device Detection]
2009-10-01 08:33 289960 ----a-w- c:\programmi\myComposer\dd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiskeeperSystray]
2005-07-26 15:52 184408 ----a-w- c:\programmi\Executive Software\Diskeeper\DkIcon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
2010-08-20 19:45 1164584 ----a-w- c:\programmi\DivX\DivX Update\DivXUpdate.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWQueuedReporting]
2008-11-03 23:44 435096 ----a-w- c:\progra~1\FILECO~1\MICROS~1\DW\DWTRIG20.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EssentialPIM]
2010-09-03 09:07 1961976 ----a-w- c:\programmi\EssentialPIM\EssentialPIM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 09:44 31072 ----a-w- c:\programmi\Microsoft Office\Office12\GrooveMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
2005-05-11 21:12 49152 ----a-w- c:\programmi\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
2010-09-01 07:13 353736 ----a-w- c:\programmi\IncrediMail\bin\IncMail.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3]
2006-10-03 07:38 190024 ----a-w- c:\programmi\MessengerPlus! 3\MsgPlus.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon]
2002-03-14 15:46 45056 ----a-w- c:\windows\system32\ico.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
2008-04-14 02:14 1695232 ------w- c:\programmi\Messenger\msmsgs.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 10:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OM_Monitor]
2006-05-16 16:50 40960 ----a-w- c:\programmi\OLYMPUS\OLYMPUS Master\FirstStart.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-08-10 03:15 421888 ----a-w- c:\programmi\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2009-05-11 08:33 148888 ----a-w- c:\programmi\Java\jre6\bin\jusched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2006-12-17 14:58 163576 ----a-w- c:\programmi\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Switcher.exe]
2005-11-24 10:47 167936 ----a-w- c:\programmi\Sony\Wireless Switch Setting Utility\Switcher.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
2006-11-24 16:36 185896 ----a-w- c:\programmi\File comuni\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 5]
2010-04-09 11:37 1459568 ----a-w- c:\programmi\Sony\VAIO Update 5\VAIOUpdt.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIOCameraUtility]
2005-12-01 01:20 69632 ----a-w- c:\programmi\Sony\VAIO Camera Utility\VCUServe.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VMConsole.exe]
2005-12-21 11:26 339968 ----a-w- c:\programmi\Sony\VAIO Media Integrated Server\Platform\VMConsole.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vmware-tray]
2009-08-14 18:19 96816 ----a-w- c:\programmi\VMware\VMware Workstation\vmware-tray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
2006-11-03 17:20 866584 ----a-w- c:\programmi\Windows Defender\MSASCui.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
2006-11-02 21:56 204288 ------w- c:\programmi\Windows Media Player\wmpnscfg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"StarWindService"=2 (0x2)
"VMware NAT Service"=2 (0x2)
"VMnetDHCP"=2 (0x2)
"VMAuthdService"=2 (0x2)
"SSScsiSV"=3 (0x3)
"WMPNetworkSvc"=2 (0x2)
"NetFje"=3 (0x3)
"MSCSPTISRV"=3 (0x3)
"vmount2"=3 (0x3)
"CVPND"=3 (0x3)
"Adobe LM Service"=3 (0x3)
"idsvc"=3 (0x3)
"PACSPTISVR"=3 (0x3)
"Image Converter video recording monitor for VAIO Entertainment"=3 (0x3)
"usnjsvc"=3 (0x3)
"SQLWriter"=2 (0x2)
"SQLBrowser"=3 (0x3)
"ose"=3 (0x3)
"Pml Driver HPZ12"=3 (0x3)
"MSSQLServerADHelper"=3 (0x3)
"MSSQL$SQLEXPRESS"=3 (0x3)
"VAIO Entertainment TV Device Arbitration Service"=3 (0x3)
"FastUserSwitchingCompatibility"=3 (0x3)
"aawservice"=3 (0x3)
"VAIOMediaPlatform-IntegratedServer-UPnP"=3 (0x3)
"VAIOMediaPlatform-IntegratedServer-HTTP"=3 (0x3)
"vmserverdWin32"=3 (0x3)
"ufad-p2v"=3 (0x3)
"Microsoft Office Groove Audit Service"=3 (0x3)
"odserv"=3 (0x3)
"OpenVPNService"=3 (0x3)
"WinDefend"=3 (0x3)
"W3SVC"=3 (0x3)
"VAIOMediaPlatform-Mobile-Gateway"=3 (0x3)
"VAIOMediaPlatform-IntegratedServer-AppServer"=3 (0x3)
"ufad-ws60"=3 (0x3)
"stisvc"=3 (0x3)
"McrdSvc"=3 (0x3)
"JavaQuickStarterService"=2 (0x2)
"ehSched"=2 (0x2)
"ehRecvr"=2 (0x2)
"Diskeeper"=3 (0x3)
"IDriverT"=3 (0x3)
"Bonjour Service"=3 (0x3)
"mi-raysat_3dsmax2010_32"=3 (0x3)
"helpsvc"=3 (0x3)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"MSMSGS"="c:\programmi\Messenger\msmsgs.exe" /background
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\\Programmi\\IncrediMail\\bin\\IMApp.exe"=
"c:\\Programmi\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Programmi\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\IncrediMail\\bin\\ImLc.exe"=
"c:\\Programmi\\HP\\HP Software Update\\HPWUCli.exe"=
"c:\\Programmi\\Sony\\VAIO Media Registration Tool\\VmpClient.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\NetSarang\\Xmanager2\\Xmanager.exe"=
"c:\\Programmi\\FlashGet\\flashget.exe"=
"c:\\Programmi\\SopCast\\adv\\SopAdver.exe"=
"c:\\Programmi\\SopCast\\SopCast.exe"=
"c:\\Documents and Settings\\VGN-FE11S\\Impostazioni locali\\Dati applicazioni\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Programmi\\VMware\\VMware Workstation\\vmware-authd.exe"=
"c:\\Programmi\\AVG\\AVG9\\avgemc.exe"=
"c:\\Programmi\\AVG\\AVG9\\avgupd.exe"=
"c:\\Programmi\\AVG\\AVG9\\avgnsx.exe"=
"c:\\Programmi\\Warcraft III\\Warcraft III.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\Programmi\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Programmi\\League of Legends\\Air\\LolClient.exe"=
"c:\\Programmi\\League of Legends\\Game\\League of Legends.exe"=
"c:\\Programmi\\Sony\\VAIO Media 5.0\\Vc.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Programmi\\Autodesk\\3ds Max 2010\\3dsmax.exe"=
"c:\\Programmi\\Autodesk\\Backburner\\manager.exe"=
"c:\\Programmi\\Autodesk\\Backburner\\monitor.exe"=
"c:\\Programmi\\Autodesk\\Backburner\\server.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"c:\\Programmi\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"c:\\Programmi\\Autodesk\\3ds Max 2010\\mentalray\\satellite\\raysat_3dsmax2010_32.exe"=
"c:\\Programmi\\Autodesk\\3ds Max 2010\\mentalray\\satellite\\raysat_3dsmax2010_32server.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
"c:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programmi\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10000:TCP"= 10000:TCP:torrent
"10001:TCP"= 10001:TCP:torrent
"10002:TCP"= 10002:TCP:torrent
"10003:TCP"= 10003:TCP:torrent
"10004:TCP"= 10004:TCP:torrent
"10005:TCP"= 10005:TCP:torrent
"10006:TCP"= 10006:TCP:torrent
"10007:TCP"= 10007:TCP:torrent
"10008:TCP"= 10008:TCP:torrent
"10009:TCP"= 10009:TCP:torrent
"10010:TCP"= 10010:TCP:torrent
"10011:TCP"= 10011:TCP:torrent
"10012:TCP"= 10012:TCP:torrent
"10013:TCP"= 10013:TCP:torrent
"10014:TCP"= 10014:TCP:torrent
"10015:TCP"= 10015:TCP:torrent
"10016:TCP"= 10016:TCP:torrent
"10017:TCP"= 10017:TCP:torrent
"10018:TCP"= 10018:TCP:torrent
"10019:TCP"= 10019:TCP:torrent
"10020:TCP"= 10020:TCP:torrent
"4242:TCP"= 4242:TCP:emule
"4662:TCP"= 4662:TCP:emule
"4672:UDP"= 4672:UDP:emule
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"4661:TCP"= 4661:TCP:emule
"4665:UDP"= 4665:UDP:emule
"4711:TCP"= 4711:TCP:emule
"4710:TCP"= 4710:TCP:emule
"4715:TCP"= 4715:TCP:emule
"4670:TCP"= 4670:TCP:emule
"4670:UDP"= 4670:UDP:emule
"4675:TCP"= 4675:TCP:emule
"3000:TCP"= 3000:TCP:emule
"14662:TCP"= 14662:TCP:emule
"14672:UDP"= 14672:UDP:emule
"7775:TCP"= 7775:TCP:emule
"1723:TCP"= 1723:TCP:@xpsp2res.dll,-22015
"1701:UDP"= 1701:UDP:@xpsp2res.dll,-22016
"500:UDP"= 500:UDP:@xpsp2res.dll,-22017
"1863:TCP"= 1863:TCP:msn
"6897:TCP"= 6897:TCP:msn
"6899:TCP"= 6899:TCP:msn
"12352:UDP"= 12352:UDP:msn
"14300:TCP"= 14300:TCP:msn
"7790:UDP"= 7790:UDP:msn
"443:TCP"= 443:TCP:msn
"7001:TCP"= 7001:TCP:msn
"7001:UDP"= 7001:UDP:msn
"9:UDP"= 9:UDP:msn
"6885:TCP"= 6885:TCP:varie
"6886:TCP"= 6886:TCP:varie
"6888:TCP"= 6888:TCP:varie
"8864:UDP"= 8864:UDP:*:Disabled:bomberman
"8866:UDP"= 8866:UDP:*:Disabled:bomberman
"8865:UDP"= 8865:UDP:*:Disabled:bomberman
"8867:UDP"= 8867:UDP:*:Disabled:bomberman
"8868:UDP"= 8868:UDP:*:Disabled:bomberman
"8869:UDP"= 8869:UDP:*:Disabled:bomberman
"8870:UDP"= 8870:UDP:*:Disabled:bomberman
"57427:TCP"= 57427:TCP:*:Disabled:Pando Media Booster
"57427:UDP"= 57427:UDP:*:Disabled:Pando Media Booster
"8394:TCP"= 8394:TCP:League of Legends Launcher
"8394:UDP"= 8394:UDP:League of Legends Launcher
"6976:TCP"= 6976:TCP:League of Legends Launcher
"6976:UDP"= 6976:UDP:League of Legends Launcher
"6909:TCP"= 6909:TCP:League of Legends Launcher
"6909:UDP"= 6909:UDP:League of Legends Launcher
"5985:TCP"= 5985:TCP:Gestione remota Windows
"6892:TCP"= 6892:TCP:League of Legends Launcher
"6892:UDP"= 6892:UDP:League of Legends Launcher
"6973:TCP"= 6973:TCP:League of Legends Launcher
"6973:UDP"= 6973:UDP:League of Legends Launcher
R0 sfsync03;StarForce Protection Synchronization Driver (version 3.x);c:\windows\system32\drivers\sfsync03.sys [06/12/2005 17.11.18 35328]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [20/04/2008 23.35.54 216400]
R1 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [20/04/2008 23.35.55 243024]
R2 avg9emc;AVG Free E-mail Scanner;c:\programmi\AVG\AVG9\avgemc.exe [17/07/2010 8.29.41 921952]
R2 avg9wd;AVG Free WatchDog;c:\programmi\AVG\AVG9\avgwdsvc.exe [17/07/2010 8.31.23 308136]
R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB --> c:\programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB [?]
R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [14/08/2009 20.20.34 54960]
R3 SonyImgF;Sony Image Conversion Filter Driver;c:\windows\system32\drivers\SonyImgF.sys [14/12/2005 4.36.27 28800]
R3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21sony.sys [14/12/2005 4.36.26 808448]
S2 vtvsp.sys;vtvsp.sys;\??\c:\programmi\Virtutech\Simics 3.2\Simics 3.2.39\x86-win32\bin\vtvsp\vtvsp.sys --> c:\programmi\Virtutech\Simics 3.2\Simics 3.2.39\x86-win32\bin\vtvsp\vtvsp.sys [?]
S3 DMSKSSRh;DMSKSSRh;\??\c:\docume~1\VGN-FE~1\IMPOST~1\Temp\DMSKSSRh.sys --> c:\docume~1\VGN-FE~1\IMPOST~1\Temp\DMSKSSRh.sys [?]
S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB --> c:\programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB [?]
S3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\drivers\tap0801.sys [01/10/2006 14.37.02 26624]
S3 vaxscsi;vaxscsi;c:\windows\system32\Drivers\vaxscsi.sys --> c:\windows\system32\Drivers\vaxscsi.sys [?]
S3 VUAgent;VUAgent;c:\programmi\Sony\VAIO Update 5\VUAgent.exe [23/02/2010 0.16.13 722288]
S3 WDM_Capture_225;Digital-TV Receiver.;c:\windows\system32\drivers\WDM_Capture_225.sys [04/08/2006 21.21.50 19328]
S3 WDM_Loader_225;DVB-T TV;c:\windows\system32\drivers\WDM_Loader_225.sys [04/08/2006 21.19.54 17152]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [14/12/2005 4.35.33 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13.16.28 753504]
S4 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13.16.28 130384]
S4 mi-raysat_3dsmax2010_32;mental ray 3.7 Satellite for Autodesk 3ds Max 2010 32-bit 32-bit;c:\programmi\Autodesk\3ds Max 2010\mentalray\satellite\raysat_3dsmax2010_32server.exe [12/03/2009 18.36.24 86016]
S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\programmi\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [02/12/2006 6.17.54 2805000]
S4 NetFje;NetFje; [x]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [17/03/2006 15.20.29 716272]
S4 WinDefend;Windows Defender;c:\programmi\Windows Defender\MsMpEng.exe [03/11/2006 19.19.58 13592]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WINRM REG_MULTI_SZ WINRM
.
Contenuto della cartella 'Scheduled Tasks'
2010-09-13 c:\windows\Tasks\ehtray.job
- c:\windows\ehome\ehtray.exe [2005-12-14 21:40]
2010-09-04 c:\windows\Tasks\MP Scheduled Scan.job
- c:\programmi\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
2010-09-13 c:\windows\Tasks\SpeedFan.job
- c:\progra~1\SpeedFan\speedfan.exe [2005-07-20 16:56]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: &Download All by FlashGet - c:\programmi\FlashGet\ComDlls\Bhoall.htm
IE: &Download by FlashGet - c:\programmi\FlashGet\ComDlls\Bholink.htm
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~4\Office12\EXCEL.EXE/3000
LSP: c:\programmi\VMware\VMware Workstation\vsocklib.dll
TCP: {EA959B6D-B9F8-4E8E-BF3F-5E55B3BAD4F5} = 137.204.1.15
.
.
------- Associazioni dei file -------
.
.scr=AutoCADScriptFile
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
Notify-sfc_os32 - sfc_os32.dll
MSConfigStartUp- - c:\windows\system\smss.exe
MSConfigStartUp-ccApp - c:\programmi\File comuni\Symantec Shared\ccApp.exe
MSConfigStartUp-msnmsgr - c:\programmi\MSN Messenger\msnmsgr.exe
MSConfigStartUp-Norton Ghost 10 - c:\programmi\Norton Ghost\Agent\GhostTray.exe
MSConfigStartUp-Share-to-Web Namespace Daemon - c:\programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
MSConfigStartUp-Symantec NetDriver Monitor - c:\progra~1\SYMNET~1\SNDMon.exe
MSConfigStartUp-updateMgr - c:\programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe
MSConfigStartUp-VAIO Update 3 - c:\programmi\Sony\VAIO Update 3\VAIOUpdt.exe
MSConfigStartUp-VAIO Update 4 - c:\programmi\Sony\VAIO Update 4\VAIOUpdt.exe
MSConfigStartUp-zzzHPSETUP - F:\Setup.exe
AddRemove-CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030003 - c:\programmi\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_20030003\HXFSETUP.EXE
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-09-13 14:59
Windows 5.1.2600 Service Pack 3 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
[HKEY_USERS\S-1-5-21-2137722733-4167066537-1545077173-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{527772DD-55F7-7FDF-229C-908F51D0738C}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"oaaaoiiflhacbiioekpjppijgjhjfg"=hex:64,61,6e,6e,63,68,69,6c,00,70
"oamafggmaeabgkmkhknjlhbdloenlo"=hex:6a,61,6e,6e,70,67,6a,69,70,64,6b,68,6a,6c,
63,6f,66,66,65,6c,00,fd
"nacbhnlimmnpfahjcoanhjbkcmcj"=hex:6a,61,6e,6e,70,67,6a,69,70,64,6b,68,6a,6c,
63,6f,66,66,65,6c,00,fd
[HKEY_USERS\S-1-5-21-2137722733-4167066537-1545077173-1006\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:5e,71,c0,5c,bd,79,7d,0b,89,f8,0e,b8,84,15,4f,c4,48,15,4f,07,b1,52,69,
84,5b,80,db,aa,c0,a9,24,4e,e2,9b,b8,af,a6,d3,dd,6e,ee,e0,7a,62,7e,be,f0,6b,\
"??"=hex:83,7f,48,a2,a1,eb,eb,46,57,2b,47,1d,4e,12,74,32
[HKEY_USERS\S-1-5-21-2137722733-4167066537-1545077173-1006\Software\SecuROM\License information*]
"datasecu"=hex:00,ca,62,31,1c,3c,58,08,cf,de,30,57,4b,47,5e,e5,a9,b8,5a,59,7f,
81,06,1b,7f,e7,3e,10,c8,91,c4,50,44,e2,3d,f8,73,f6,5d,88,e0,97,fa,50,ec,a1,\
"rkeysecu"=hex:ca,9f,a0,8f,9d,d3,3d,4b,f0,89,53,a7,46,85,a3,2c
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe,-101"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10h_ActiveX.exe"
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,79,00,73,00,\
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
- - - - - - - > 'winlogon.exe'(1148)
c:\windows\system32\VESWinlogon.dll
- - - - - - - > 'explorer.exe'(2152)
c:\windows\system32\WININET.dll
c:\programmi\Windows Media Player\wmpband.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\programmi\WinSCP\DragExt.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\programmi\Intel\Wireless\Bin\EvtEng.exe
c:\programmi\Intel\Wireless\Bin\S24EvMon.exe
c:\programmi\AVG\AVG9\avgchsvx.exe
c:\programmi\AVG\AVG9\avgrsx.exe
c:\programmi\AVG\AVG9\avgcsrvx.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
c:\windows\system32\dllhost.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\programmi\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
c:\programmi\AVG\AVG9\avgnsx.exe
c:\windows\system32\nvsvc32.exe
c:\programmi\Intel\Wireless\Bin\RegSrvc.exe
c:\programmi\Sony\VAIO Event Service\VESMgr.exe
c:\programmi\File comuni\Microsoft Shared\Windows Live\WLIDSVC.EXE
c:\programmi\AVG\AVG9\avgcsrvx.exe
c:\programmi\File comuni\Microsoft Shared\Windows Live\WLIDSvcM.exe
c:\windows\system32\wscntfy.exe
c:\windows\eHome\ehmsas.exe
c:\programmi\Apoint\Apntex.exe
c:\documents and settings\VGN-FE11S\Impostazioni locali\Dati applicazioni\Google\Update\1.2.183.29\GoogleCrashHandler.exe
.
**************************************************************************
.
Ora fine scansione: 2010-09-13 15:12:16 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2010-09-13 13:12
Pre-Run: 26.144.800.768 byte disponibili
Post-Run: 26.019.229.696 byte disponibili
WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition" /noexecute=optin /fastdetect
Current=4 Default=4 Failed=2 LastKnownGood=5 Sets=1,2,3,4,5
- - End Of File - - 000874E03604C4434E3BC0D26B01B3A7
vBulletin® v3.6.4, Copyright ©2000-2026, Jelsoft Enterprises Ltd.