Aiuto PC


Virus Polizia Penitenziaria,Polizia di Stato,Carabinieri (RISOLTO)

« Older   Newer »
 
  Share  
.
  1. mikebulls
     
    .

    User deleted


    ciao! copio sotto il file


    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-07-2013
    Ran by SYSTEM on 15-07-2013 13:35:54
    Running from E:\
    Windows 7 Ultimate (X86) OS Language: English(US)
    Internet Explorer Version 10
    Boot Mode: Recovery

    The current controlset is ControlSet001
    ATTENTION!:=====> FRST is updated to run from normal or Safe mode to produce a full FRST.txt log and Addition.txt log.

    ==================== Registry (Whitelisted) ==================

    HKLM\...\Run: [PWRISOVM.EXE] - C:\Program Files\PowerISO\PWRISOVM.EXE [180224 2010-04-12] (PowerISO Computing, Inc.)
    HKLM\...\Run: [avgnt] - "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min [281768 2010-12-05] (Avira GmbH)
    HKLM\...\Run: [BCSSync] - "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices [91520 2010-03-13] (Microsoft Corporation)
    HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s [9972328 2010-12-23] (Realtek Semiconductor)
    HKLM\...\Run: [NeroFilterCheck] - C:\Windows\system32\NeroCheck.exe [155648 2001-07-09] (Ahead Software Gmbh)
    HKLM\...\Run: [AliceRV_McciTrayApp] - C:\Program Files\Alice ti aiuta\McciTrayApp.exe [x]
    HKLM\...\Run: [NPSStartup] - [x]
    HKLM\...\Run: [LWS] - C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe -hide [205336 2011-08-12] (Logitech Inc.)
    HKLM\...\Run: [QuickTime Task] - "C:\Program Files\QuickTime\QTTask.exe" -atboottime [421888 2011-10-24] (Apple Inc.)
    HKLM\...\Run: [APSDaemon] - "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [59720 2013-01-28] (Apple Inc.)
    HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon [2565520 2011-03-14] (CANON INC.)
    HKLM\...\Run: [CanonSolutionMenuEx] - C:\Program Files\Canon\Solution Menu EX\CNSEMAIN.EXE /logon [1612920 2011-08-04] (CANON INC.)
    HKLM\...\Run: [SunJavaUpdateSched] - "C:\Program Files\Common Files\Java\Java Update\jusched.exe" [252848 2012-07-02] (Sun Microsystems, Inc.)
    HKLM\...\Run: [iTunesHelper] - "C:\Program Files\iTunes\iTunesHelper.exe" [152392 2013-02-20] (Apple Inc.)
    HKU\Default\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-13] (Microsoft Corporation)
    HKU\Default User\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-13] (Microsoft Corporation)
    HKU\UpdatusUser\...\RunOnce: [mctadmin] - C:\Windows\System32\mctadmin.exe [ 2009-07-13] (Microsoft Corporation)
    HKU\user\...\Run: [Google Update] - "C:\Users\user\AppData\Local\Google\Update\GoogleUpdate.exe" /c [ 2011-10-26] (Google Inc.)
    HKU\user\...\Run: [MobileDocuments] - C:\Program Files\Common Files\Apple\Internet Services\ubd.exe [ 2012-02-23] (Apple Inc.)
    HKU\user\...\Run: [Facebook Update] - "C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [ 2012-07-14] (Facebook Inc.)
    HKU\user\...\Winlogon: [Shell] explorer.exe,C:\Users\user\AppData\Roaming\cache.dat <==== ATTENTION

    ========================== Services (Whitelisted) =================

    S2 AntiVirScheduler; C:\Program Files\Avira\AntiVir Desktop\sched.exe [136360 2011-05-03] (Avira GmbH)
    S2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [269480 2011-09-13] (Avira GmbH)
    S2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [138192 2011-02-06] ()
    S2 Realtek11nSU; C:\Program Files\Sitecom\150N USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek)
    S2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2011-08-19] (Logitech Inc.)
    S2 Winmgmt; C:\PROGRA~3\b34btbztdb0vavaw.exe [x]

    ==================== Drivers (Whitelisted) ====================

    S2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [20747 2011-01-16] (Meetinghouse Data Communications)
    S1 AsIO; C:\Windows\System32\drivers\AsIO.sys [11296 2009-08-04] ()
    S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [66616 2011-09-13] (Avira GmbH)
    S1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [138192 2011-09-13] (Avira GmbH)
    S3 cpuz134; C:\Program Files\CPUID\PC Wizard 2010\pcwiz_x32.sys [20328 2010-07-09] (Windows (R) Win 7 DDK provider)
    S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2010-06-13] ()
    S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
    S3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [13216 2009-07-16] ()
    S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [816792 2010-01-08] ()
    S3 RT61; C:\Windows\System32\DRIVERS\RT61.sys [352768 2005-08-26] (Ralink Technology Inc.)
    S1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2010-06-17] (Avira GmbH)
    S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
    S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
    S3 VGPU; System32\drivers\rdvgkmd.sys [x]

    ==================== NetSvcs (Whitelisted) ===================


    ==================== One Month Created Files and Folders ========

    2013-07-15 12:39 - 2013-07-15 12:39 - 00000000 ____D C:\FRST
    2013-07-14 07:50 - 2013-07-15 03:28 - 00000560 _____ C:\Windows\setupact.log
    2013-07-14 07:50 - 2013-07-15 03:28 - 00000004 _____ C:\Users\user\AppData\Roaming\cache.ini
    2013-07-14 07:50 - 2013-07-14 07:50 - 00000000 _____ C:\Windows\setuperr.log
    2013-07-13 04:24 - 2013-07-13 07:03 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e17-18
    2013-07-10 23:17 - 2013-06-11 15:43 - 14329856 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 02877440 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 01767936 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 01141248 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\System32\jscript.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
    2013-07-10 23:17 - 2013-06-11 15:43 - 00042496 _____ (Microsoft Corporation) C:\Windows\System32\ie4uinit.exe
    2013-07-10 23:17 - 2013-06-11 15:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 13760512 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 02046976 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 00391168 _____ (Microsoft Corporation) C:\Windows\System32\ieui.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 00109056 _____ (Microsoft Corporation) C:\Windows\System32\iesysprep.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 00061440 _____ (Microsoft Corporation) C:\Windows\System32\iesetup.dll
    2013-07-10 23:17 - 2013-06-11 15:42 - 00033280 _____ (Microsoft Corporation) C:\Windows\System32\iernonce.dll
    2013-07-10 23:17 - 2013-06-11 14:51 - 00071680 _____ (Microsoft Corporation) C:\Windows\System32\RegisterIEPKEYs.exe
    2013-07-10 23:17 - 2013-06-06 18:37 - 02706432 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
    2013-07-10 23:06 - 2013-06-04 19:05 - 02347520 _____ (Microsoft Corporation) C:\Windows\System32\win32k.sys
    2013-07-10 23:06 - 2013-06-03 20:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\System32\qedit.dll
    2013-07-10 23:06 - 2013-05-05 20:56 - 01620480 _____ (Microsoft Corporation) C:\Windows\System32\WMVDECOD.DLL
    2013-07-10 23:06 - 2013-04-09 15:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\System32\DWrite.dll
    2013-07-09 13:22 - 2013-07-14 07:50 - 00000000 ____D C:\Users\user\AppData\Local\{6D381C85-EDBC-A65D-2486-D7EC0465C3B6}
    2013-07-08 04:01 - 2013-07-08 07:09 - 1927345170 _____ C:\Users\user\Downloads\La mia baby sitter e un vampiro 2010.avi
    2013-07-08 03:49 - 2013-07-13 05:49 - 1596141568 _____ C:\Users\user\Downloads\Baseketball 1998.avi
    2013-07-07 02:24 - 2013-07-07 04:42 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e15-16
    2013-07-03 03:53 - 2013-07-03 07:08 - 1783060480 _____ C:\Users\user\Downloads\L.Uomo.Con.I.Pugni.Di.Ferro.2012.iTALiAN.AC3.BRRip.XviD-T4P3.avi
    2013-07-03 03:42 - 2013-07-03 03:42 - 00000000 ____D C:\Users\user\Downloads\Una.Notte.Da.Leoni.3.2013.iTALiAN.MD.R6.XviD-DSS
    2013-07-03 03:39 - 2013-07-03 03:40 - 00000000 ____D C:\Users\user\Downloads\Fast.&.Furious.6.2013.iTALiAN.720p.MD.TS.XviD-DSS
    2013-07-02 12:00 - 2013-07-02 12:00 - 00000000 ____D C:\Windows\pss
    2013-06-28 03:56 - 2013-06-28 04:27 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e13-14
    2013-06-26 08:27 - 2013-06-26 08:27 - 00000000 ____D C:\Program Files\Mozilla Firefox
    2013-06-25 03:16 - 2013-06-25 03:16 - 00000000 ____D C:\Users\user\AppData\Roaming\Cycling '74
    2013-06-20 11:09 - 2013-06-20 11:49 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e11-12
    2013-06-17 11:22 - 2013-06-26 14:07 - 00000000 ____D C:\Program Files\Mozilla Firefox.bak

    ==================== One Month Modified Files and Folders =======

    2013-07-15 12:39 - 2013-07-15 12:39 - 00000000 ____D C:\FRST
    2013-07-15 03:29 - 2011-12-15 01:18 - 00196608 _____ C:\Windows\System32\Ikeext.etl
    2013-07-15 03:28 - 2013-07-14 07:50 - 00000560 _____ C:\Windows\setupact.log
    2013-07-15 03:28 - 2013-07-14 07:50 - 00000004 _____ C:\Users\user\AppData\Roaming\cache.ini
    2013-07-15 03:28 - 2011-01-16 01:38 - 00000000 ____D C:\ProgramData\NVIDIA
    2013-07-15 03:26 - 2013-04-25 11:06 - 01988187 _____ C:\Windows\WindowsUpdate.log
    2013-07-15 03:20 - 2009-07-13 20:34 - 00020576 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    2013-07-15 03:20 - 2009-07-13 20:34 - 00020576 ____H C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
    2013-07-15 02:31 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\System32\LogFiles
    2013-07-14 07:50 - 2013-07-14 07:50 - 00000000 _____ C:\Windows\setuperr.log
    2013-07-14 07:50 - 2013-07-09 13:22 - 00000000 ____D C:\Users\user\AppData\Local\{6D381C85-EDBC-A65D-2486-D7EC0465C3B6}
    2013-07-14 00:28 - 2011-12-15 04:21 - 00000000 ____D C:\Program Files\Star Wars-The Old Republic
    2013-07-13 07:57 - 2011-01-16 02:34 - 00000000 ____D C:\Users\user\AppData\Roaming\uTorrent
    2013-07-13 07:03 - 2013-07-13 04:24 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e17-18
    2013-07-13 05:49 - 2013-07-08 03:49 - 1596141568 _____ C:\Users\user\Downloads\Baseketball 1998.avi
    2013-07-13 05:10 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\Microsoft.NET
    2013-07-11 10:45 - 2009-07-13 20:33 - 00482296 _____ C:\Windows\System32\FNTCACHE.DAT
    2013-07-11 10:43 - 2011-03-24 04:12 - 00000000 ____D C:\Program Files\Microsoft Silverlight
    2013-07-11 10:43 - 2009-07-13 23:50 - 00000000 ____D C:\Program Files\Windows Journal
    2013-07-11 10:43 - 2009-07-13 20:52 - 00000000 ____D C:\Program Files\Windows Defender
    2013-07-10 23:19 - 2011-01-16 01:26 - 00700118 _____ C:\Windows\System32\perfh010.dat
    2013-07-10 23:19 - 2011-01-16 01:26 - 00128270 _____ C:\Windows\System32\perfc010.dat
    2013-07-10 23:19 - 2011-01-15 17:29 - 01568730 _____ C:\Windows\System32\PerfStringBackup.INI
    2013-07-10 23:18 - 2011-01-16 02:11 - 00000000 ____D C:\ProgramData\Microsoft Help
    2013-07-10 23:15 - 2011-01-15 17:47 - 75699896 _____ (Microsoft Corporation) C:\Windows\System32\MRT.exe
    2013-07-10 08:22 - 2012-03-21 10:00 - 00000000 ____D C:\Users\user\Documents\Navigazione
    2013-07-08 07:09 - 2013-07-08 04:01 - 1927345170 _____ C:\Users\user\Downloads\La mia baby sitter e un vampiro 2010.avi
    2013-07-07 04:42 - 2013-07-07 02:24 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e15-16
    2013-07-03 08:54 - 2012-10-19 00:09 - 00000000 ____D C:\ProgramData\CanonIJPLM
    2013-07-03 07:08 - 2013-07-03 03:53 - 1783060480 _____ C:\Users\user\Downloads\L.Uomo.Con.I.Pugni.Di.Ferro.2012.iTALiAN.AC3.BRRip.XviD-T4P3.avi
    2013-07-03 03:42 - 2013-07-03 03:42 - 00000000 ____D C:\Users\user\Downloads\Una.Notte.Da.Leoni.3.2013.iTALiAN.MD.R6.XviD-DSS
    2013-07-03 03:40 - 2013-07-03 03:39 - 00000000 ____D C:\Users\user\Downloads\Fast.&.Furious.6.2013.iTALiAN.720p.MD.TS.XviD-DSS
    2013-07-02 12:00 - 2013-07-02 12:00 - 00000000 ____D C:\Windows\pss
    2013-07-02 11:50 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\tracing
    2013-06-28 04:27 - 2013-06-28 03:56 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e13-14
    2013-06-27 10:40 - 2012-04-02 07:25 - 00000000 ____D C:\Users\user\AppData\Roaming\TS3Client
    2013-06-26 22:56 - 2012-09-29 03:50 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
    2013-06-26 14:07 - 2013-06-17 11:22 - 00000000 ____D C:\Program Files\Mozilla Firefox.bak
    2013-06-26 08:27 - 2013-06-26 08:27 - 00000000 ____D C:\Program Files\Mozilla Firefox
    2013-06-25 03:16 - 2013-06-25 03:16 - 00000000 ____D C:\Users\user\AppData\Roaming\Cycling '74
    2013-06-20 11:49 - 2013-06-20 11:09 - 00000000 ____D C:\Users\user\Downloads\574R.W4R5.L4.GU3RR4.D31.CL0N1.S05e11-12
    2013-06-17 09:38 - 2009-07-13 18:37 - 00000000 ____D C:\Windows\rescache

    ==================== Known DLLs (Whitelisted) ============


    ==================== Bamital & volsnap Check =================

    C:\Windows\explorer.exe => MD5 is legit
    C:\Windows\System32\winlogon.exe => MD5 is legit
    C:\Windows\System32\wininit.exe => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\System32\services.exe => MD5 is legit
    C:\Windows\System32\User32.dll => MD5 is legit
    C:\Windows\System32\userinit.exe => MD5 is legit
    C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

    ==================== EXE ASSOCIATION =====================

    HKLM\...\.exe: exefile => OK
    HKLM\...\exefile\DefaultIcon: %1 => OK
    HKLM\...\exefile\open\command: "%1" %* => OK

    ==================== Restore Points =========================

    Restore point made on: 2013-07-10 03:10:53
    Restore point made on: 2013-07-10 23:08:56
    Restore point made on: 2013-07-11 10:59:32
    Restore point made on: 2013-07-13 03:29:00

    ==================== Memory info ===========================

    Percentage of memory in use: 12%
    Total physical RAM: 4095.18 MB
    Available physical RAM: 3589.75 MB
    Total Pagefile: 4093.46 MB
    Available Pagefile: 3589.82 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1937.61 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:149.04 GB) (Free:32.73 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
    Drive e: () (Removable) (Total:14.9 GB) (Free:14.9 GB) FAT32
    Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 8BC68BC6)
    Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 1 (Size: 15 GB) (Disk ID: 00000000)
    Partition 1: (Not Active) - (Size=15 GB) - (Type=0C)


    LastRegBack: 2013-07-13 06:24

    ==================== End Of Log ===========================


    Edit:Ho risolto leggendo i tuoi messaggi precedenti su come compilare il fix.Grazie

    Edited by vicky67 - 26/7/2013, 14:03
     
    .
698 replies since 5/6/2013, 08:44   22513 views
  Share  
.