Problema file che non si deframmentano

[Mark_it]

Ciao a tutti!
Ho un problema con il seguente file che non si deframmenta (2 frammenti da 120 k):

SYZ_DAT\EMF_Decrypt.exe

Non riesco nemmeno a vedere questa cartella, perchè è invisibile (anche mostrando i file e cartelle nascoste) equindi non riesco ad eliminare il file.
Credo sia un residuo di una disinstallazione andata male del programma MAGIC FOLDER.
Non riesco proprio a capire come risolvere il problema, perchè se non finisco il defrag, il pc mi da dei problemi con il sw di backup!
Aiutatemi per favore!!! Grazie a tutti!
Mark

[MIKI68]

Non sembra che sia quello che dici tu.... fai una pulizia con cclaner...

[Mark_it]

Non sembra che sia quello che dici tu.... fai una pulizia con cclaner...

Ho già effettuato alcuni cicli di pulizia con ccleaner ma purtroppo senza soluzione.. grazie ma purtroppo non ho risolto..
Ho effettuato anche una scansione con il sx Blacklight rootkit eliminator di fsecure che mi ha presentato il seguente log dove sono evidenziati i file nascosti che non riesco a cancellare (e nemmeno a trovare come dicevo prima).
Il log della scansione è il seguente:

Codice: Seleziona tutto

02/26/09 17:51:26 [Info]: BlackLight Engine 2.2.1092 initialized
02/26/09 17:51:26 [Info]: OS: 5.1 build 2600 (Service Pack 2)
02/26/09 17:51:26 [Note]: 7019 4
02/26/09 17:51:26 [Note]: 7005 0
02/26/09 17:51:29 [Note]: 7006 0
02/26/09 17:51:29 [Note]: 7011 500
02/26/09 17:51:29 [Note]: 7035 0
02/26/09 17:51:29 [Note]: 7026 0
02/26/09 17:51:29 [Note]: 7026 0
02/26/09 17:51:35 [Note]: FSRAW library version 1.7.1024
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\ali.exe
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\cdlock.dll
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\cpy.exe
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\dirlist
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\dirlist_bak
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\DL.BAK
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\EMF_Decrypt.exe
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\fldrvw61.ocx
02/26/09 17:51:36 [Note]: 7002 0
02/26/09 17:51:36 [Note]: 7003 1
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:36 [Info]: Hidden file: c:\SYZ_DAT\install.exe
02/26/09 17:51:36 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\magic.exe
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\mf.chm
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\mf.txx
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\mfx
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\MFX.CFG
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\mfx_cfg.org
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\readme.txt
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\systray.exe
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 17:51:37 [Info]: Hidden file: c:\SYZ_DAT\tb.exe
02/26/09 17:51:37 [Note]: 7002 0
02/26/09 17:51:37 [Note]: 7003 1
02/26/09 17:51:37 [Note]: 10002 3
02/26/09 18:06:16 [Info]: Hidden file: c:\WINDOWS\system32\drivers\MFX.sys
02/26/09 18:06:16 [Note]: 7002 0
02/26/09 18:06:16 [Note]: 7003 1
02/26/09 18:06:16 [Note]: 10002 1
02/26/09 18:26:09 [Note]: 7007 0

Aitatemi ragazzi, non so come uscirne! grazie mille!

[MIKI68]

Allora posta il log di hijackthis che lo eliminiamo da lì

[Mark_it]

Allora posta il log di hijackthis che lo eliminiamo da lì

Eccotelo, grazie mille:

Codice: Seleziona tutto

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15.05.54, on 28/02/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\sm56hlpr.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\ASUS\Power4 Gear\BatteryLife.exe
C:\Programmi\AVG\AVG8\avgcsrvx.exe
C:\Programmi\Wireless Console 2\wcourier.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\ASUSTeK\ASUSDVD\PDVDServ.exe
C:\Programmi\Intel\Wireless\bin\ZCfgSvc.exe
C:\Programmi\Intel\Wireless\Bin\ifrmewrk.exe
C:\Programmi\Intel\Wireless\Bin\EOUWiz.exe
C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
C:\Programmi\Winamp\winampa.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\Programmi\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\DS Clock\dsclock.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe
C:\Programmi\Rainlendar2\Rainlendar2.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Documents and Settings\Principale\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe
C:\Programmi\Microsoft ActiveSync\wcescomm.exe
C:\Programmi\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
C:\Programmi\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
C:\Programmi\3M\PSNLite\PsnLite.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Programmi\Mozilla Thunderbird\thunderbird.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\Programmi\Windows Live\Messenger\usnsvc.exe
C:\Programmi\Microsoft Office\Office12\WINWORD.EXE
C:\Programmi\AVG\AVG8\avgcsrvx.exe
C:\WINDOWS\system32\cmd.exe
C:\Documents and Settings\Principale\Desktop\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG8\avgssie.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programmi\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Programmi\AVG\AVG8\avgtoolbar.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programmi\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: IE Developer Toolbar BHO - {CC7E636D-39AA-49b6-B511-65413DA137A1} - C:\Programmi\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: &Barradell'Accessibilità - {11352A67-0178-46B1-8855-D50B2F81C054} - C:\Programmi\WAT_IT\Accessibility_Toolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programmi\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\Programmi\AVG\AVG8\avgtoolbar.dll
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Power_Gear] C:\Programmi\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [Wireless Console 2] C:\Programmi\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\ASUSTeK\ASUSDVD\PDVDServ.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Programmi\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Programmi\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] "C:\Programmi\Intel\Wireless\Bin\EOUWiz.exe"
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Programmi\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NBKeyScan] "C:\Programmi\Nero\Nero 7\Nero BackItUp\NBKeyScan.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DS Clock] "C:\Programmi\DS Clock\dsclock.exe"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Rainlendar2] C:\Programmi\Rainlendar2\Rainlendar2.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Principale\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
O4 - HKCU\..\Run: [PMCRemote] C:\Programmi\Pinnacle\Shared Files\Programs\Remote\Remoterm.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Acrobat Assistant.lnk = C:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Programmi\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Pinnacle Streaming Server.lnk = C:\Programmi\Pinnacle\Shared Files\Programs\StrmServer\StrmServer.exe
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Programmi\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferiti portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: IE Developer Toolbar - {48FFE35F-36D9-44bd-A6CC-1D34414EAC0D} - C:\Programmi\Microsoft\Internet Explorer Developer Toolbar\IEDevToolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1188827627281
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1153321660401
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programmi\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Programmi\Sygate\SPF\smc.exe

--
End of file - 13131 bytes

Spero che mi possiate aiutare! Grazie a tutti!

[MIKI68]

Non c'è..... fai una cosa avvia spybot e fai la scansione dovrebbe individuarlo dai prova!!!Se non hai spybot scaricalo e aggiornalo http://www.safer-networking.org/it/mirrors/index.html

[MIKI68]

Ho trovato questo programma indivdua perfettamente il file c:\SYZ_DAT\EMF_Decrypt.exe eliminandolo quindi scarica e avvialo : http://www.pctuner.net/download/scheda/ ... ler-v1.71/

[hydra]

Per favore, quando inserite delle parti di testo molto lunghe, come i vari log appunto, mettetele tra i tag CODE, almeno il topic risulta leggibile.