Intanto grazie per la tua risposta, al primo punto non venivano rilevati problemi, provato col cavo, la connessione ad internet rimane, mentre l'icona del collegamento wireless mi dava collegamento che si connetteva e disconetteva, posso aggiungere che aspesso quando entro nelle proprietà della connessione wireless e guardavo l'indirizzo IP, questo era in automatico, anche se io glielo metto sempre manualmente, c'è un modo perchè rimanga fisso? ora ti allego il file come da te richiesto, io nn ci ho capito nulla, spero che a te possa essere utile. ciao e ancora grazie
ComboFix 09-06-29.04 - Carlo 30/06/2009 15.56.02.1 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.39.1040.18.1790.1003 [GMT 2:00]
Eseguito da: c:\users\Carlo\Downloads\ComboFix.exe
AV: avast! antivirus 4.8.1335 [VPS 090425-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: avast! antivirus 4.8.1335 [VPS 090425-0] *enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
SP: Spyware Terminator *disabled* (Outdated) {55EE49A8-16BE-4601-BBE6-607B7F7317DE}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((( Files Creati Da 2009-05-28 al 2009-06-30 )))))))))))))))))))))))))))))))))))
.
2009-06-30 14:02 . 2009-06-30 14:02 -------- d-----w- c:\users\Carlo\AppData\Local\temp
2009-06-14 15:45 . 2009-04-21 11:55 2033152 ----a-w- c:\windows\system32\win32k.sys
2009-06-14 15:44 . 2009-04-23 12:43 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-06-14 14:45 . 2009-06-14 14:45 -------- d-----w- c:\users\Public\CyberLink
2009-06-04 08:28 . 2001-05-22 05:00 22016 ----a-w- c:\windows\system32\borlndmm.dll
2009-06-04 08:28 . 1997-03-24 02:00 17408 ----a-w- c:\windows\system32\Delphimm.dll
2009-06-04 08:28 . 2009-06-04 08:28 -------- d-----w- c:\program files\ModelliFiscali
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-30 13:50 . 2009-05-13 10:35 -------- d-----w- c:\users\Carlo\AppData\Roaming\Spyware Terminator
2009-06-30 13:44 . 2006-11-06 01:52 662846 ----a-w- c:\windows\system32\perfh010.dat
2009-06-30 13:44 . 2006-11-06 01:52 120326 ----a-w- c:\windows\system32\perfc010.dat
2009-06-29 16:06 . 2009-04-24 17:03 88915 ----a-w- c:\programdata\nvModes.dat
2009-06-29 12:29 . 2009-04-23 19:01 6944 ----a-w- c:\users\Carlo\AppData\Local\d3d9caps.dat
2009-06-25 08:40 . 2009-05-13 10:35 -------- d-----w- c:\programdata\Spyware Terminator
2009-06-17 08:17 . 2009-06-17 08:17 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdRapi_01_00_00.Wdf
2009-06-14 15:02 . 2009-06-14 15:02 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-06-14 14:45 . 2007-07-28 02:19 -------- d-----w- c:\programdata\CyberLink
2009-06-14 14:45 . 2008-02-21 14:32 -------- d-----w- c:\users\Carlo\AppData\Roaming\CyberLink
2009-05-27 11:23 . 2009-05-27 11:23 -------- d-----w- c:\program files\Formosoft
2009-05-27 11:23 . 2007-07-28 00:59 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-25 08:06 . 2009-05-25 08:04 -------- d-----w- c:\program files\Advanced Pdf to Word Converter Free
2009-05-24 12:52 . 2009-05-24 12:52 -------- d-----w- c:\program files\DivX
2009-05-24 12:52 . 2009-05-24 12:52 -------- d-----w- c:\program files\Common Files\DivX Shared
2009-05-18 11:03 . 2009-05-18 11:03 -------- d-----w- c:\users\Carlo\AppData\Roaming\DivX
2009-05-13 10:58 . 2009-05-13 10:35 -------- d-----w- c:\program files\Spyware Terminator
2009-05-13 10:36 . 2009-05-13 10:36 -------- d-----w- c:\program files\Crawler
2009-05-13 10:35 . 2009-05-13 10:35 6144 ----a-w- c:\programdata\Spyware Terminator\sp_rsdel.exe
2009-05-13 10:35 . 2009-05-13 10:35 5632 ----a-w- c:\programdata\Spyware Terminator\fileobjinfo.sys
2009-05-13 10:35 . 2009-05-13 10:35 142592 ----a-w- c:\windows\system32\drivers\sp_rsdrv2.sys
2009-05-13 08:44 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-05-09 05:50 . 2009-06-14 15:45 915456 ----a-w- c:\windows\system32\wininet.dll
2009-05-09 05:34 . 2009-06-14 15:45 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-05-06 13:41 . 2009-05-06 13:41 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_00_00.Wdf
2009-04-30 12:37 . 2009-06-14 15:45 293376 ----a-w- c:\windows\system32\psisdecd.dll
2009-04-30 12:37 . 2009-06-14 15:45 428544 ----a-w- c:\windows\system32\EncDec.dll
2009-04-25 12:45 . 2006-11-02 10:25 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-04-25 12:16 . 2006-11-02 10:32 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2009-04-25 12:16 . 2006-11-02 10:32 82432 ----a-w- c:\windows\system32\axaltocm.dll
2009-04-23 20:11 . 2008-02-21 09:31 72544 ----a-w- c:\users\Carlo\AppData\Local\GDIPFONTCACHEV1.DAT
2009-04-23 19:17 . 2009-04-23 19:17 410984 ----a-w- c:\windows\system32\deploytk.dll
2009-04-23 12:42 . 2009-06-14 15:45 636928 ----a-w- c:\windows\system32\localspl.dll
2009-04-09 13:59 . 2009-04-09 13:59 958464 ----a-w- c:\windows\system32\drivers\athr.sys
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"Uniblue RegistryBooster2"="c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe" [2007-06-13 99872]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-19 125952]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="c:\acer\Empowering Technology\eDataSecurity\eDSloader.exe" [2007-04-25 457216]
"eAudio"="c:\acer\Empowering Technology\eAudio\eAudio.exe" [2007-06-11 1286144]
"LManager"="c:\progra~1\LAUNCH~1\LManager.exe" [2007-08-15 772616]
"PlayMovie"="c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe" [2007-05-24 206952]
"WarReg_PopUp"="c:\acer\WR_PopUp\WarReg_PopUp.exe" [2006-11-05 57344]
"Apoint"="c:\program files\Apoint2K\Apoint.exe" [2007-07-21 159744]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-05-22 151552]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-23 148888]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-12-03 13556256]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-12-03 92704]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"Windows Mobile-based device management"="c:\windows\WindowsMobile\wmdSync.exe" [2006-11-02 215552]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-07-06 4669440]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-06-15 1826816]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Acer Tour Reminder"="c:\acer\AcerTour\Reminder.exe" [2007-05-22 151552]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Canon LBP2900 Finestra di stato.lnk - c:\windows\System32\spool\drivers\w32x86\3\CNAB4LAK.EXE [2007-1-16 50848]
Empowering Technology Launcher.lnk - c:\acer\Empowering Technology\eAPLauncher.exe [2007-7-28 535336]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aawservice]
@="Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UacDisableNotify"=dword:00000001
"InternetSettingsDisableNotify"=dword:00000001
"AutoUpdateDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{2E2F1A78-1C3D-492D-9957-8E9581487425}"= c:\program files\Acer Arcade Deluxe\Acer Arcade Deluxe\Acer Arcade Deluxe.exe:Acer Arcade Deluxe
"{F3646932-7A75-40D6-BEEE-C5366675653E}"= c:\program files\Acer Arcade Deluxe\VideoMagician\VideoMagician.exe:VideoMagician
"{0E5DEFB0-FF0C-48DE-9412-720274AD2AC4}"= c:\program files\Acer Arcade Deluxe\HomeMedia\HomeMedia.exe:HomeMedia
"{1C185533-4B0F-4322-917F-ED8F386D4653}"= c:\program files\Acer Arcade Deluxe\DV Wizard\DV Wizard.exe:DV Wizard
"{50E2DE35-BA5C-457E-A370-E31DE8A6786F}"= c:\program files\Acer Arcade Deluxe\DVDivine\DVDivine.exe:DVDivine
"{72DAF5D2-CF52-4739-86EC-4D48041F19A9}"= c:\program files\Acer Arcade Deluxe\Play Movie\PlayMovie.exe:Play Movie
"{AFEC571B-DF95-4F65-8CE4-A58CA6B16053}"= c:\program files\Acer Arcade Deluxe\Play Movie\PMVService.exe:Play Movie Resident Program
"{E9810BA5-6942-44A1-A4C5-27213DC10B6B}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
"{CBA2AC2D-0366-474B-B536-9CD99382F438}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"TCP Query User{63C8538F-8403-4393-BE1D-066350927A7A}c:\\program files\\tavoliverdi\\tvcontrollo.exe"= UDP:c:\program files\tavoliverdi\tvcontrollo.exe:TVControllo
"UDP Query User{DAD9ACA1-6640-4FAC-8BAF-277B114116AE}c:\\program files\\tavoliverdi\\tvcontrollo.exe"= TCP:c:\program files\tavoliverdi\tvcontrollo.exe:TVControllo
"TCP Query User{B93D72A5-24BF-4D0C-94C4-64348DE96C12}c:\\program files\\tavoliverdi\\tavoliverdi.exe"= UDP:c:\program files\tavoliverdi\tavoliverdi.exe:Applicativo Principale
"UDP Query User{F3D28250-C4F0-4AF8-89C7-EFD4AFE3B312}c:\\program files\\tavoliverdi\\tavoliverdi.exe"= TCP:c:\program files\tavoliverdi\tavoliverdi.exe:Applicativo Principale
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile\AuthorizedApplications\List]
"c:\\Acer\\Empowering Technology\\eDataSecurity\\eDSfsu.exe"= c:\acer\Empowering Technology\eDataSecurity\eDSfsu.exe:*:Enabled:eDSfsu
"c:\\Acer\\Empowering Technology\\eDataSecurity\\encryption.exe"= c:\acer\Empowering Technology\eDataSecurity\encryption.exe:*:Enabled:encryption
"c:\\Acer\\Empowering Technology\\eDataSecurity\\decryption.exe"= c:\acer\Empowering Technology\eDataSecurity\decryption.exe:*:Enabled:decryption
R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [23/04/2009 22.32.08 114768]
R2 {49DE1C67-83F8-4102-99E0-C16DCC7EEC796};{49DE1C67-83F8-4102-99E0-C16DCC7EEC796};c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl [21/02/2008 11.34.19 13560]
R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [23/04/2009 22.32.08 20560]
R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [23/04/2009 22.31.43 51792]
R3 enecir;ENE CIR Receiver;c:\windows\System32\drivers\enecir.sys [28/07/2007 11.30.01 32256]
S3 WSVD;WSVD;c:\windows\System32\drivers\WSVD.sys [21/02/2008 18.15.05 80744]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
WindowsMobile REG_MULTI_SZ wcescomm rapimgr
LocalServiceRestricted REG_MULTI_SZ WcesComm RapiMgr
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contenuto della cartella 'Scheduled Tasks'
2009-06-30 c:\windows\Tasks\User_Feed_Synchronization-{6998BA9A-722F-4C01-BE73-8CE7E385A3D3}.job
- c:\windows\system32\msfeedssync.exe [2009-05-01 11:31]
2008-02-21 c:\windows\Tasks\Verifica aggiornamenti per Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE [2007-10-19 10:20]
.
.
------- Scansione supplementare -------
.
uStart Page =
hxxp://www.google.it/uSearchMigratedDefaultURL =
hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
mStart Page =
hxxp://it.intl.acer.yahoo.comIE: &Windows Live Search - c:\program files\Windows Live Toolbar\msntb.dll/search.htm
IE: Crawler Search - tbr:iemenu
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {9B5A9F96-FAB1-4AAA-A1BA-EB8B995636BC} = 192.168.1.254,223.255.255.255
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - c:\progra~1\Crawler\Toolbar\ctbr.dll
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2009-06-30 16:02
Windows 6.0.6001 Service Pack 1 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{49DE1C67-83F8-4102-99E0-C16DCC7EEC796}]
"ImagePath"="\??\c:\program files\Acer Arcade Deluxe\Play Movie\000.fcl"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
- - - - - - - > 'Explorer.exe'(4060)
c:\windows\system32\MsnChatHook.dll
c:\windows\system32\ShowErrMsg.dll
c:\windows\system32\sysenv.dll
c:\windows\system32\BatchCrypto.dll
c:\windows\system32\CryptoAPI.dll
c:\windows\system32\keyManager.dll
.
Ora fine scansione: 2009-06-30 16.03.55
ComboFix-quarantined-files.txt 2009-06-30 14:03
Pre-Run: 38.853.898.240 byte disponibili
Post-Run: 38.718.959.616 byte disponibili
185 --- E O F --- 2009-06-29 14:09
Registrazione
di dreammax » 24/06/09 19:34 