Vista/7 - Schermate blu (bsod):individuazione cause dell'errore e possibili soluzioni

[megasimo89]

Originariamente inviato da Eress

Si sono alte, bisogna che intervieni in qualche modo, altrimenti prima o poi qualcosa andrà in fumo li dentro

Ormai sono anni che va avanti cosi
Aspetto che si frigga qualcosa prima di prenderne uno nuovo
Come mi consigli di operare??

[Eress]

Se aspetti per uno nuovo allora non fare nulla
Per iniziare dagli una bella pulita all'interno

[megasimo89]

Originariamente inviato da Eress

Se aspetti per uno nuovo allora non fare nulla
Per iniziare dagli una bella pulita all'interno

Ok ma nel frattempo vorrei farlo vivere il più possibile
Comunque, partiamo dal presupposto che non intendo riaprirlo. L'ultima volta è stata davvero una tortura psico/fisica.
Si potrebbe risolvere qualcosa con un sistema di raffreddamento esterno? Quello che ho ha solo una ventola, aiuta un poco, ma comunque le temperature sono sempre altissime.

[Eress]

Se il pc è intasato di polvere e sporcizia all'interno quella ventola esterna non aiuta niente, potrebbe servire solo in caso di un pc pulito. L'unico sistema davvero utile è la pulizia, quando avevo il portatile anch'io lo pulivo ogni due tre mesi, non è poi così complicato da fare

[megasimo89]

Originariamente inviato da Eress

Se il pc è intasato di polvere e sporcizia all'interno quella ventola esterna non aiuta niente, potrebbe servire solo in caso di un pc pulito. L'unico sistema davvero utile è la pulizia, quando avevo il portatile anch'io lo pulivo ogni due tre mesi, non è poi così complicato da fare

Non conosci il mio portatile
Ne ho smontati tanto, per sfizio o necessità, e non ne avevo visto mai uno più difficile e assemblato a caso lol

[Eress]

Ok, ma le temperature sono quelle che sono, ti rendi conto da solo che qualcosa devi fare per abbassarle e non vedo altra soluzione

[aled1974]

avevo un acer (vedi firma) e so cosa vuol dire, o si smonta con tanta pazienza o si usa una bomboletta, come già detto

viceversa tienilo così e aspetta che frigga, anche perchè se è come penso, dentro hai un tappeto uniforme di polvere e puoi anche montare una turbina jet sotto al notebook che tanto non sortirà grandi benefici

ciao ciao

[Eress]

Originariamente inviato da aled1974

avevo un acer (vedi firma) e so cosa vuol dire, o si smonta con tanta pazienza o si usa una bomboletta, come già detto

Anch'io qualche anno fa ho avuto un acer del genere ed era un vero aspirapolvere alla fine l'ho dovuto cambiare, dopo mai più visto nulla del genere, intendo tutta quella sporcizia dentro un pc

[megasimo89]

e se provassi qualcosa del genere???
https://fbcdn-sphotos-a.akamaihd.net...55465351_n.jpg

Scherzi a parte, l'unica soluzione per ora per me è l'uso di una bomboletta. Consigli su quale prendere e come usarla al meglio??

Comunque per quanto riguarda il problema con la sospensione del computer. Ora non esce più nessuna schermata blu, solo uno schermo nero all'apertura dello schermo che mi costringe al riavvio meccanico .

[Eress]

Originariamente inviato da megasimo89

e se provassi qualcosa del genere???
https://fbcdn-sphotos-a.akamaihd.net...55465351_n.jpg

Così il tuo pc rischia di prendere il volo
Prova una delle solite bombolette e ricordati di tenere ben salta la ventolina quando ci soffi sopra l'aria altrimenti rischi di romperla

[megasimo89]

Originariamente inviato da Eress

Così il tuo pc rischia di prendere il volo
Prova una delle solite bombolette e ricordati di tenere ben salta la ventolina quando ci soffi sopra l'aria altrimenti rischi di romperla

In realtà visto che vorrei evitare (anche se ci sto un po' ripensando) di smontare il pc, quello che volevo fare è qualcosa di simile.



Opinioni?

EDIT: sorry mi sa che stiamo andando OT, prometto che è l'ultima domanda del genere

[Eress]

No così non serve a nulla sprechi solo i soldi della bomboletta

[megasimo89]

Originariamente inviato da Eress

No così non serve a nulla sprechi solo i soldi della bomboletta

Eh lo immaginavo, mi pareva strano. Sparo l'aria dentro le ventole e la polvere si poggia comunque sul case :S.
Mi sa che mi tocca smontare proprio tutto tutto, dall'hard disk all LCD, per arrivare a queste maledette e ostinate ventole!!
Grazie mille comunque

[Eress]

Meglio smontarlo

[Giulio_P]

Originariamente inviato da Giulio_P

da quando ho preso il mio desktop pc (win 7 installato) il poc fa fatica a spengersi o a riavviarsi: dopo essersi disconnesso da win rimane fisso a lungo sulla schermata di win nera che dice vado a braccio) Chiusura in corso...
pare che il problema a quanto dice Whocrashed risieda nel:
ntoskrnl.exe
come si risolve il problema? ho aggiornato driver, bios, pulito registro configurazione, etc.... ma il problema spesso si ripresenta (vedere sotto)

--------------------------------------------------------------------------------
Welcome to WhoCrashed Professional Edition v 3.01
--------------------------------------------------------------------------------

This program checks for drivers which have been crashing your computer. If your computer has displayed a blue screen of death, suddenly rebooted or shut down then this program will help you find the root cause and possibly a solution. 

Whenever a computer suddenly reboots without displaying any notice or blue screen of death, the first thing that is often thought about is a hardware failure. In reality, on Windows most crashes are caused by malfunctioning device drivers and kernel modules. In case of a kernel error, many computers do not show a blue screen unless they are configured for this. Instead these systems suddenly reboot without any notice. 

This program will analyze your crash dumps with the single click of a button. It will tell you what drivers are likely to be responsible for crashing your computer. If will report a conclusion which offers suggestions on how to proceed in any situation while the analysis report will display internet links which will help you further troubleshoot any detected problems. 


To obtain technical support visit www.resplendence.com/support

To check if an update of this program is available, click here.

Click the Analyze Local button to analyze this computer or the Analyze Remote button for a computer on the network...



--------------------------------------------------------------------------------
System Information (local)
--------------------------------------------------------------------------------

computer name: GIULIO-PCHOF
windows version: Windows 7 Service Pack 1, 6.1, build: 7601
windows dir: C:\Windows
CPU: AuthenticAMD AMD A8-3800 APU with Radeon(tm) HD Graphics AMD586, level: 18
4 logical processors, active mask: 15
RAM: 3749847040 total
VM: 2147352576, free: 1957838848



--------------------------------------------------------------------------------
Crash Dump Analysis
--------------------------------------------------------------------------------

Crash dump directory: C:\Windows\Minidump

Crash dumps are enabled on your computer.


On Mon 02.04.2012 20:26:06 GMT your computer crashed
crash dump file: C:\Windows\Minidump\040212-30950-01.dmp
uptime: 1 day, 09:53:42
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005C43060, 0xFFFFF80005407518, 0xFFFFFA800AEF03E0)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Mon 02.04.2012 20:26:06 GMT your computer crashed
crash dump file: C:\Windows\memory.dmp
uptime: 1 day, 09:53:42
This was probably caused by the following module: ntkrnlmp.exe (nt!KeBugCheckEx+0x0) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005C43060, 0xFFFFF80005407518, 0xFFFFFA800AEF03E0)
Error: DRIVER_POWER_STATE_FAILURE
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Sun 01.04.2012 10:31:35 GMT your computer crashed
crash dump file: C:\Windows\Minidump\040112-22214-01.dmp
uptime: 8 days, 22:50:52
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005042060, 0xFFFFF80000B9C518, 0xFFFFFA800D1E78A0)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Thu 22.03.2012 17:14:57 GMT your computer crashed
crash dump file: C:\Windows\Minidump\032212-16551-01.dmp
uptime: 08:45:09
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005EE2060, 0xFFFFF80005407518, 0xFFFFFA8003AD4770)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Thu 22.03.2012 08:28:59 GMT your computer crashed
crash dump file: C:\Windows\Minidump\032212-19141-01.dmp
uptime: 19:58:25
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA800504F060, 0xFFFFF80000B9C518, 0xFFFFFA8008AC7C10)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Mon 19.03.2012 12:29:43 GMT your computer crashed
crash dump file: C:\Windows\Minidump\031912-18408-01.dmp
uptime: 4 days, 05:18:38
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005D22060, 0xFFFFF80005352518, 0xFFFFFA8005963470)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Wed 14.03.2012 21:52:17 GMT your computer crashed
crash dump file: C:\Windows\Minidump\031412-17019-01.dmp
uptime: 15:49:37
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CD40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005CE6060, 0xFFFFF80000B9C518, 0xFFFFFA8008E8CC10)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Tue 13.03.2012 23:06:07 GMT your computer crashed
crash dump file: C:\Windows\Minidump\031412-38235-01.dmp
uptime: 15:39:40
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005D24060, 0xFFFFF80005407518, 0xFFFFFA800D347C10)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Tue 06.03.2012 02:34:44 GMT your computer crashed
crash dump file: C:\Windows\Minidump\030612-27331-01.dmp
uptime: 3 days, 04:01:24
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005C9E060, 0xFFFFF80000B9C518, 0xFFFFFA800476CC10)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Sun 26.02.2012 19:06:19 GMT your computer crashed
crash dump file: C:\Windows\Minidump\022612-17612-01.dmp
uptime: 10:19:56
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA80036CA060, 0xFFFFF80000B9C518, 0xFFFFFA8005AC2C10)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Fri 24.02.2012 08:45:31 GMT your computer crashed
crash dump file: C:\Windows\Minidump\022412-22386-01.dmp
uptime: 4 days, 16:47:43
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005141060, 0xFFFFF80005407518, 0xFFFFFA8016A31850)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Sun 05.02.2012 17:22:27 GMT your computer crashed
crash dump file: C:\Windows\Minidump\020512-26114-01.dmp
uptime: 6 days, 00:52:02
This was probably caused by the following module: atikmpag.sys (atikmpag+0x780C) 
Bugcheck code: 0x116 (0xFFFFFA800483D250, 0xFFFFF8800751580C, 0x0, 0x2)
Error: VIDEO_TDR_ERROR
file path: C:\Windows\system32\drivers\atikmpag.sys
product: AMD driver
company: Advanced Micro Devices, Inc.
description: AMD multi-vendor Miniport Driver
Bug check description: This indicates that an attempt to reset the display driver and recover from a timeout failed. 
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: atikmpag.sys (AMD multi-vendor Miniport Driver, Advanced Micro Devices, Inc.). 
Google query: atikmpag.sys Advanced Micro Devices, Inc. VIDEO_TDR_ERROR




On Fri 25.11.2011 00:47:06 GMT your computer crashed
crash dump file: C:\Windows\Minidump\112511-18798-01.dmp
uptime: 1 day, 17:57:56
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005D00060, 0xFFFFF80000B9C518, 0xFFFFFA8009D3B1D0)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Thu 17.11.2011 23:50:22 GMT your computer crashed
crash dump file: C:\Windows\Minidump\111811-22276-01.dmp
uptime: 05:24:26
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8004FE9060, 0xFFFFF80005407518, 0xFFFFFA800431B2D0)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 


On Tue 15.11.2011 00:08:10 GMT your computer crashed
crash dump file: C:\Windows\Minidump\111511-18704-01.dmp
uptime: 02:28:11
This was probably caused by the following module: ntoskrnl.exe (nt+0x7CC40) 
Bugcheck code: 0x9F (0x3, 0xFFFFFA8005A73060, 0xFFFFF80005407518, 0xFFFFFA8008C79650)
Error: DRIVER_POWER_STATE_FAILURE
file path: C:\Windows\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This bug check indicates that the driver is in an inconsistent or invalid power state.
This appears to be a typical software driver bug and is not likely to be caused by a hardware problem. 
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time. 



--------------------------------------------------------------------------------
Conclusion
--------------------------------------------------------------------------------

21 crash dumps have been found and analyzed. Only 15 are included in this report. A third party driver has been identified to be causing system crashes on your computer. It is strongly suggested that you check for updates for these drivers on their company websites. Click on the links below to search with Google for updates for these drivers: 

atikmpag.sys (AMD multi-vendor Miniport Driver, Advanced Micro Devices, Inc.)

If no updates for these drivers are available, try searching with Google on the names of these drivers in combination the errors that have been reported for these drivers and include the brand and model name of your computer as well in the query. This often yields interesting results from discussions from users who have been experiencing similar problems.


Read the topic general suggestions for troubleshooting system crashes for more information. 

Note that it's not always possible to state with certainty whether a reported driver is actually responsible for crashing your system or that the root cause is in another module. Nonetheless it's suggested you look for updates for the products that these drivers belong to and regularly visit Windows update or enable automatic updates for Windows. In case a piece of malfunctioning hardware is causing trouble, a search with Google on the bug check errors together with the model name and brand of your computer may help you investigate this further.

riuppo il problema segnalato tempo fa.ho usato memtest 4.20, ho fatto ben 4 passate alla ram ma non ha rilevato nessun problema.
usero' anche goldtest, ma se la ram non e' il problema cosa devo fare?
il problema continua a ripresentarsi allo spegnimento del pc... e sempre a causa di questo ntoskrnl.exe come vedete sopra. ho usato anche RegInOut per pulire il registro...

[Eress]

intanto il registro lascialo perdere che non c'entra col tuo problema, semmai la pulizia potrebbe peggiorare le cose, poi servirebbe qualche altra informazione, quali processi hai attivi nel task, in avvio e software di sicurezza installati, magari posta anche un log di HijackThis. Controllato anche nel visualizzatore eventi?

[Giulio_P]

come software di sicurezza utilizzo Kaspersky Internet security 2012.
per i processi attivi ecco due schermate:
http://dl.dropbox.com/u/16139849/1a%20schermata.jpg
http://dl.dropbox.com/u/16139849/2a%20schermata.jpg

ho lanciato HijackThis e mi da' un mex di errore:

---------------------------
HijackThis
---------------------------
For some reason your system denied write access to the Hosts file. If any hijacked domains are in this file, HijackThis may NOT be able to fix this.



If that happens, you need to edit the file yourself. To do this, click Start, Run and type:



notepad C:\Windows\System32\drivers\etc\hosts



and press Enter. Find the line(s) HijackThis reports and delete them. Save the file as 'hosts.' (with quotes), and reboot.



For Vista: simply, exit HijackThis, right click on the HijackThis icon, choose 'Run as administrator'.
---------------------------
OK
---------------------------

cosa devo fare? ho provato a scrivere sotto Esegui la voce che dice, ma il file che mi apre non ha nulla, eccetto roba scritta dopo dei #...
oltretutto se vado a creare la startup list, mi apre notepad vuoto con un file senza nome e mi appare un'altra finestra che dice:

---------------------------
Blocco note
---------------------------
Impossibile trovare il file C:\Program Files (x86)\Trend Micro\HiJackThis\startuplist.txt.

Creare un nuovo file?
---------------------------
Sì No Annulla
---------------------------

ops, vedo adesso che su sistemi a 64 bit devo usare non il normale hijackthis, ma hijackfree... lo faro' nel pomeriggio!!

sono andato adesso nel visualizzatore eventi ed ecco cosa ho trovato:
http://dl.dropbox.com/u/16139849/vis...e%20eventi.jpg

dimmi se devo postare qualcosa da un altro menu del visualizzatore eventi...

[Eress]

Ht lo devi lanciare come amministratore altrimenti non funziona.
Per l'errore in spegnimento proverei a disabilitare completamente kaspersky e poi provare un riavvio

[megasimo89]

Mi intrometto di nuovo nella discussione con un altro OT e mi scuso per questo.
Sapreste per caso consigliarmi che kit di cacciaviti prendere/cercare per smontare tutti i pezzi del portatile? L'ultima volta l'ho fatto con un mio amico.
Vi ringrazio in anticipo e mi scuso ancora.

[Giulio_P]

Originariamente inviato da Eress

Ht lo devi lanciare come amministratore altrimenti non funziona.
Per l'errore in spegnimento proverei a disabilitare completamente kaspersky e poi provare un riavvio

ok, fatto:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:16:10, on 08.05.2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CyberLink\PowerRecover\Reminder.exe
C:\Program Files (x86)\Steam\Steam.exe
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\Sony\ReaderDesktop\appHelper\ReaderAppHelper.exe
C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Users\Giulio\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
C:\Program Files (x86)\Quick Screen Capture\Capture.exe
C:\Program Files (x86)\Quick Screen Capture\Capture.exe
C:\Program Files (x86)\Quick Screen Capture\Capture.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\cvh.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
C:\Program Files (x86)\Emsisoft HiJackFree\a2hijackfree.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.aldi.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?

LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?

LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe

\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 

Internet Security 2012\ievkbd.dll
O2 - BHO: AMD SteadyVideo BHO - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java

\jre6\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common 

Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google 

Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars

\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java

\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab

\Kaspersky Internet Security 2012\klwtbbho.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google 

Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Reader Application Helper] C:\Program Files (x86)\Sony\ReaderDesktop\appHelper

\ReaderAppHelper.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Steam] "C:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O4 - Startup: Dropbox.lnk = Giulio\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
O4 - Global Startup: watchmi tray.lnk = ?
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet 

Security 2012\ie_banner_deny.htm
O9 - Extra button: eBay.at - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/5221-29898-

17534-1/4 (file missing)
O9 - Extra 'Tools' menuitem: eBay.at - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - 

http://rover.ebay.com/rover/1/5221-29898-17534-1/4 (file missing)
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-

8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - 

{219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files (x86)\Kaspersky 

Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype

\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files 

(x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files (x86)\Kaspersky Lab

\Kaspersky Internet Security 2012\klwtbbho.dll
O9 - Extra button: eBay.at - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - http://rover.ebay.com/rover/1/5221-29898-

17534-1/4 (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: eBay.at - {0B65DCC9-1740-43dc-B19C-4F309FB6A6CA} - 

http://rover.ebay.com/rover/1/5221-29898-17534-1/4 (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{27E5F3F9-A5D0-4D89-9C87-038823CE6887}: Domain = tu-graz.ac.at
O17 - HKLM\System\CCS\Services\Tcpip\..\{27E5F3F9-A5D0-4D89-9C87-038823CE6887}: NameServer = 129.27.2.3,129.27.3.3
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype

\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery

\AlbumDownloadProtocolHandler.dll
O18 - Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo

\VideoMIMEFilter.dll
O18 - Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - C:\Program Files (x86)\amd\SteadyVideo

\VideoMIMEFilter.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files 

(x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file 

missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel

\Fuel.Service.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support

\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files (x86)\Kaspersky Lab

\Kaspersky Internet Security 2012\avp.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ShrewSoft DNS Proxy Daemon (dtpd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\dtpd.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file 

missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe 

(file missing)
O23 - Service: Google Update-Dienst (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update

\GoogleUpdate.exe
O23 - Service: Google Update-Dienst (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update

\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater

\GoogleUpdaterService.exe
O23 - Service: ShrewSoft IKE Daemon (iked) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\iked.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ShrewSoft IPSEC Daemon (ipsecd) - Unknown owner - C:\Program Files\ShrewSoft\VPN Client\ipsecd.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe 

(file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows

\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis

\License Service\PsiService_2.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows

\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file 

missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows

\System32\snmptrap.exe (file missing)
O23 - Service: Sony SCSI Helper Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\Fsk

\SonySCSIHelperService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe 

(file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe 

(file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam

\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows

\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows

\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file 

missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file 

missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat

\WatAdminSvc.exe (file missing)
O23 - Service: watchmi service (watchmi) - Unknown owner - C:\Program Files (x86)\watchmi\TvdService.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows

\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows

\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program 

Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13782 bytes

dopo provo a lanciare anche hijackfree.
devo far sistemare qualcosa ad hijack? per ora non ho fatto nulla.