Gentili utenti,
Come potrete immaginare sono stato infettato. Ho seguito svariate procedure trovate on line per la pulizia che mi hanno dato una certa soddisfazione in quanto ho individuato e spero cancellato definitivamente i file sospetti.
Per completezza ho visto, letto, applicato e apprezzato la Vs guida "come ripulire un pc infetto", vi posto di seguito il risultato analisi Combofix nella speranza che qualche anima buona ci dia un occhio.
Infinitamente ringrazio.
Emme238
ComboFix 12-12-25.02 - Marco 27/12/2012 14:29:48.2.2 - x86
Microsoft Windows 7 Enterprise 6.1.7600.0.1252.39.1033.18.2939.1940 [GMT 1:00]
Eseguito da: c:\users\Marco\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Creati Da 2012-11-27 al 2012-12-27 )))))))))))))))))))))))))))))))))))
.
.
2012-12-27 13:35 . 2012-12-27 13:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-27 13:26 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F406B28A-1303-4FEE-AA27-F316A93A087D}\mpengine.dll
2012-12-27 01:47 . 2012-12-27 01:56 -------- d-----w- c:\programdata\HitmanPro
2012-12-27 00:57 . 2012-10-30 22:51 106560 ----a-w- c:\windows\system32\drivers\aswFW.sys
2012-12-27 00:57 . 2012-10-30 22:51 199320 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2012-12-27 00:57 . 2012-10-30 22:51 20624 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2012-12-27 00:57 . 2012-09-21 09:26 12112 ----a-w- c:\windows\system32\drivers\aswNdis.sys
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\users\Marco\AppData\Roaming\Malwarebytes
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\programdata\Malwarebytes
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-27 00:22 . 2012-09-29 18:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-27 00:17 . 2012-12-27 00:17 -------- d-----w- c:\program files\CCleaner
2012-12-22 23:48 . 2012-12-16 14:25 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 23:48 . 2012-12-16 14:25 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-22 13:28 . 2012-12-22 13:28 -------- d-----w- c:\users\Marco\AppData\Local\PunkBuster
2012-12-22 13:26 . 2012-12-25 21:49 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-12-22 13:26 . 2012-12-22 13:26 22328 ----a-w- c:\users\Marco\AppData\Roaming\PnkBstrK.sys
2012-12-22 13:26 . 2012-12-22 13:29 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-12-22 13:00 . 2012-12-22 13:00 -------- d-----w- c:\program files\Activision
2012-11-28 15:55 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2012-11-28 15:55 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2012-11-28 15:55 . 2006-02-07 14:39 32768 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2012-11-28 15:55 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2012-11-28 15:55 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2012-11-28 15:55 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2012-11-28 15:55 . 2012-11-28 15:55 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2012-11-28 15:55 . 2012-11-28 15:55 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-22 13:35 . 2012-10-17 12:31 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-22 13:35 . 2012-10-17 12:31 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-12 15:34 . 2012-11-12 14:38 22 ----a-w- c:\windows\flash.bat
2012-10-30 22:51 . 2012-10-17 02:08 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-10-17 02:08 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-10-17 02:08 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-10-17 02:08 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-10-17 02:08 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-10-17 02:07 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-10-17 02:07 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-25 13:17 . 2012-10-25 13:17 71680 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
2012-10-25 12:43 . 2012-10-25 12:43 8194584 ----a-w- c:\windows\system32\TVWSetup.exe
2012-10-25 12:43 . 2012-10-25 12:43 59392 ----a-w- c:\windows\system32\oemdspif.dll
2012-10-25 12:43 . 2012-10-25 12:43 51712 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-10-25 12:43 . 2012-10-25 12:43 299520 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-10-25 12:43 . 2012-10-25 12:43 294912 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-10-25 12:43 . 2012-10-25 12:43 291328 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-10-25 12:43 . 2012-10-25 12:43 289280 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-10-25 12:43 . 2012-10-25 12:43 287744 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-10-25 12:43 . 2012-10-25 12:43 280064 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-10-25 12:43 . 2012-10-25 12:43 279040 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-10-25 12:43 . 2012-10-25 12:43 277504 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-10-25 12:43 . 2012-10-25 12:43 262656 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-10-25 12:43 . 2012-10-25 12:43 257536 ----a-w- c:\windows\system32\igfxTMM.dll
2012-10-25 12:43 . 2012-10-25 12:43 252952 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-10-25 12:43 . 2012-10-25 12:43 206848 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-10-25 12:43 . 2012-10-25 12:43 205312 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-10-25 12:43 . 2012-10-25 12:43 155648 ----a-w- c:\windows\system32\igfxCoIn_v1872.dll
2012-10-25 12:43 . 2012-10-25 12:43 141848 ----a-w- c:\windows\system32\igfxtray.exe
2012-10-25 12:43 . 2012-10-25 12:43 304640 ----a-w- c:\windows\system32\igfxrita.lrc
2012-10-25 12:43 . 2012-10-25 12:43 672792 ----a-w- c:\windows\system32\igfxcfg.exe
2012-10-25 12:43 . 2012-10-25 12:43 6042112 ----a-w- c:\windows\system32\ig4icd32.dll
2012-10-25 12:43 . 2012-10-25 12:43 5946368 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2012-10-25 12:43 . 2012-10-25 12:43 5702656 ----a-w- c:\windows\system32\igfxress.dll
2012-10-25 12:43 . 2012-10-25 12:43 549888 ----a-w- c:\windows\system32\igdumdx32.dll
2012-10-25 12:43 . 2012-10-25 12:43 3839488 ----a-w- c:\windows\system32\ig4dev32.dll
2012-10-25 12:43 . 2012-10-25 12:43 310784 ----a-w- c:\windows\system32\igfxrell.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303616 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303616 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303104 ----a-w- c:\windows\system32\igfxresp.lrc
2012-10-25 12:43 . 2012-10-25 12:43 288256 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-10-25 12:43 . 2012-10-25 12:43 281088 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-10-25 12:43 . 2012-10-25 12:43 280576 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-10-25 12:43 . 2012-10-25 12:43 275968 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-10-25 12:43 . 2012-10-25 12:43 252416 ----a-w- c:\windows\system32\igfxrara.lrc
2012-10-25 12:43 . 2012-10-25 12:43 249856 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-10-25 12:43 . 2012-10-25 12:43 23552 ----a-w- c:\windows\system32\igfxexps.dll
2012-10-25 12:43 . 2012-10-25 12:43 217088 ----a-w- c:\windows\system32\igfxdev.dll
2012-10-25 12:43 . 2012-10-25 12:43 199680 ----a-w- c:\windows\system32\igfxpph.dll
2012-10-25 12:43 . 2012-10-25 12:43 179712 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-10-25 12:43 . 2012-10-25 12:43 178176 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-10-25 12:43 . 2012-10-25 12:43 173080 ----a-w- c:\windows\system32\igfxext.exe
2012-10-25 12:43 . 2012-10-25 12:43 151064 ----a-w- c:\windows\system32\igfxpers.exe
2012-10-25 12:43 . 2012-10-25 12:43 130048 ----a-w- c:\windows\system32\igfxdo.dll
2012-10-25 12:43 . 2012-10-25 12:43 119296 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-10-25 12:43 . 2012-10-25 12:43 174104 ----a-w- c:\windows\system32\hkcmd.exe
2012-10-25 12:43 . 2009-07-13 22:09 3646976 ----a-w- c:\windows\system32\igd10umd32.dll
2012-10-25 12:43 . 2009-07-13 22:09 4233728 ----a-w- c:\windows\system32\igdumd32.dll
2012-10-25 12:43 . 2012-10-25 12:43 1002008 ----a-w- c:\windows\system32\igxpun.exe
2012-10-25 12:43 . 2012-10-25 12:43 94720 ----a-w- c:\windows\system32\hccutils.dll
2012-10-25 12:43 . 2012-10-25 12:43 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2012-10-19 14:11 . 2012-10-19 14:11 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-19 14:11 . 2012-10-19 14:11 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-19 14:11 . 2012-10-19 14:11 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-19 14:11 . 2012-10-19 14:11 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-10-19 14:11 . 2012-10-19 14:11 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-10-19 14:11 . 2012-10-19 14:11 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-19 14:11 . 2012-10-19 14:11 367104 ----a-w- c:\windows\system32\html.iec
2012-10-19 14:11 . 2012-10-19 14:11 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-10-19 14:11 . 2012-10-19 14:11 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-19 14:11 . 2012-10-19 14:11 161792 ----a-w- c:\windows\system32\msls31.dll
2012-10-19 14:11 . 2012-10-19 14:11 152064 ----a-w- c:\windows\system32\wextract.exe
2012-10-19 14:11 . 2012-10-19 14:11 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-10-19 14:11 . 2012-10-19 14:11 11776 ----a-w- c:\windows\system32\mshta.exe
2012-10-19 14:11 . 2012-10-19 14:11 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-19 14:11 . 2012-10-19 14:11 101888 ----a-w- c:\windows\system32\admparse.dll
2012-10-19 12:31 . 2012-10-19 12:31 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-19 12:31 . 2012-10-19 12:31 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-19 12:31 . 2012-10-19 12:31 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-18 12:32 . 2012-10-18 12:32 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin
2012-10-15 16:59 . 2012-10-17 02:08 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-12-25 16:46 . 2012-12-25 16:46 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HAZON CLIC"="c:\program files\Garzanti Linguistica\Hazon Clic\Hazon.exe" [2001-10-30 524288]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-25 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-25 151064]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [x]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [x]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - WS2IFSL
.
Contenuto della cartella 'Scheduled Tasks'
.
2012-12-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-17 13:36]
.
2012-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-28 17:09]
.
2012-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-28 17:09]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 83.103.25.250 62.101.93.101
FF - ProfilePath - c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\efxfkyjm.default\
.
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @DenieD: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @DenieD: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @DenieD: (A) (Users) @DenieD: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security] @DenieD: (Full) (Everyone)
.
Ora fine scansione: 2012-12-27 14:36:52
ComboFix-quarantined-files.txt 2012-12-27 13:36
ComboFix2.txt 2012-12-27 03:24
.
Pre-Run: 92.127.956.992 bytes free
Post-Run: 91.843.592.192 bytes free
.
- - End Of File - - D6B402B430263BEFEF81889C2027F5DF
Come potrete immaginare sono stato infettato. Ho seguito svariate procedure trovate on line per la pulizia che mi hanno dato una certa soddisfazione in quanto ho individuato e spero cancellato definitivamente i file sospetti.
Per completezza ho visto, letto, applicato e apprezzato la Vs guida "come ripulire un pc infetto", vi posto di seguito il risultato analisi Combofix nella speranza che qualche anima buona ci dia un occhio.
Infinitamente ringrazio.
Emme238
ComboFix 12-12-25.02 - Marco 27/12/2012 14:29:48.2.2 - x86
Microsoft Windows 7 Enterprise 6.1.7600.0.1252.39.1033.18.2939.1940 [GMT 1:00]
Eseguito da: c:\users\Marco\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Creati Da 2012-11-27 al 2012-12-27 )))))))))))))))))))))))))))))))))))
.
.
2012-12-27 13:35 . 2012-12-27 13:35 -------- d-----w- c:\users\Default\AppData\Local\temp
2012-12-27 13:26 . 2012-11-08 18:00 6812136 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{F406B28A-1303-4FEE-AA27-F316A93A087D}\mpengine.dll
2012-12-27 01:47 . 2012-12-27 01:56 -------- d-----w- c:\programdata\HitmanPro
2012-12-27 00:57 . 2012-10-30 22:51 106560 ----a-w- c:\windows\system32\drivers\aswFW.sys
2012-12-27 00:57 . 2012-10-30 22:51 199320 ----a-w- c:\windows\system32\drivers\aswNdis2.sys
2012-12-27 00:57 . 2012-10-30 22:51 20624 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2012-12-27 00:57 . 2012-09-21 09:26 12112 ----a-w- c:\windows\system32\drivers\aswNdis.sys
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\users\Marco\AppData\Roaming\Malwarebytes
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\programdata\Malwarebytes
2012-12-27 00:22 . 2012-12-27 00:22 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2012-12-27 00:22 . 2012-09-29 18:54 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-27 00:17 . 2012-12-27 00:17 -------- d-----w- c:\program files\CCleaner
2012-12-22 23:48 . 2012-12-16 14:25 295424 ----a-w- c:\windows\system32\atmfd.dll
2012-12-22 23:48 . 2012-12-16 14:25 34304 ----a-w- c:\windows\system32\atmlib.dll
2012-12-22 13:28 . 2012-12-22 13:28 -------- d-----w- c:\users\Marco\AppData\Local\PunkBuster
2012-12-22 13:26 . 2012-12-25 21:49 22328 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2012-12-22 13:26 . 2012-12-22 13:26 22328 ----a-w- c:\users\Marco\AppData\Roaming\PnkBstrK.sys
2012-12-22 13:26 . 2012-12-22 13:29 66872 ----a-w- c:\windows\system32\PnkBstrA.exe
2012-12-22 13:00 . 2012-12-22 13:00 -------- d-----w- c:\program files\Activision
2012-11-28 15:55 . 2006-02-07 14:40 204800 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iuser.dll
2012-11-28 15:55 . 2006-02-07 14:40 274432 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iscript.dll
2012-11-28 15:55 . 2006-02-07 14:39 32768 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\Objectps.dll
2012-11-28 15:55 . 2006-02-07 14:45 757760 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iKernel.dll
2012-11-28 15:55 . 2006-02-07 14:40 69715 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\ctor.dll
2012-11-28 15:55 . 2005-11-13 22:19 5632 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\DotNetInstaller.exe
2012-11-28 15:55 . 2012-11-28 15:55 331908 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\setup.dll
2012-11-28 15:55 . 2012-11-28 15:55 200836 ----a-w- c:\program files\Common Files\InstallShield\Professional\RunTime\11\50\Intel32\iGdi.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-22 13:35 . 2012-10-17 12:31 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-12-22 13:35 . 2012-10-17 12:31 697272 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-12 15:34 . 2012-11-12 14:38 22 ----a-w- c:\windows\flash.bat
2012-10-30 22:51 . 2012-10-17 02:08 361032 ----a-w- c:\windows\system32\drivers\aswSP.sys
2012-10-30 22:51 . 2012-10-17 02:08 54232 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2012-10-30 22:51 . 2012-10-17 02:08 738504 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-30 22:51 . 2012-10-17 02:08 58680 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2012-10-30 22:51 . 2012-10-17 02:08 21256 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2012-10-30 22:51 . 2012-10-17 02:07 41224 ----a-w- c:\windows\avastSS.scr
2012-10-30 22:50 . 2012-10-17 02:07 227648 ----a-w- c:\windows\system32\aswBoot.exe
2012-10-25 13:17 . 2012-10-25 13:17 71680 ----a-w- c:\windows\system32\drivers\nhcDriver.sys
2012-10-25 12:43 . 2012-10-25 12:43 8194584 ----a-w- c:\windows\system32\TVWSetup.exe
2012-10-25 12:43 . 2012-10-25 12:43 59392 ----a-w- c:\windows\system32\oemdspif.dll
2012-10-25 12:43 . 2012-10-25 12:43 51712 ----a-w- c:\windows\system32\igfxsrvc.dll
2012-10-25 12:43 . 2012-10-25 12:43 299520 ----a-w- c:\windows\system32\igfxrnld.lrc
2012-10-25 12:43 . 2012-10-25 12:43 294912 ----a-w- c:\windows\system32\igfxrptg.lrc
2012-10-25 12:43 . 2012-10-25 12:43 291328 ----a-w- c:\windows\system32\igfxrrus.lrc
2012-10-25 12:43 . 2012-10-25 12:43 289280 ----a-w- c:\windows\system32\igfxrptb.lrc
2012-10-25 12:43 . 2012-10-25 12:43 287744 ----a-w- c:\windows\system32\igfxrplk.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrsve.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrsky.lrc
2012-10-25 12:43 . 2012-10-25 12:43 280064 ----a-w- c:\windows\system32\igfxrnor.lrc
2012-10-25 12:43 . 2012-10-25 12:43 279040 ----a-w- c:\windows\system32\igfxrtrk.lrc
2012-10-25 12:43 . 2012-10-25 12:43 277504 ----a-w- c:\windows\system32\igfxrslv.lrc
2012-10-25 12:43 . 2012-10-25 12:43 262656 ----a-w- c:\windows\system32\igfxrtha.lrc
2012-10-25 12:43 . 2012-10-25 12:43 257536 ----a-w- c:\windows\system32\igfxTMM.dll
2012-10-25 12:43 . 2012-10-25 12:43 252952 ----a-w- c:\windows\system32\igfxsrvc.exe
2012-10-25 12:43 . 2012-10-25 12:43 206848 ----a-w- c:\windows\system32\igfxrjpn.lrc
2012-10-25 12:43 . 2012-10-25 12:43 205312 ----a-w- c:\windows\system32\igfxrkor.lrc
2012-10-25 12:43 . 2012-10-25 12:43 155648 ----a-w- c:\windows\system32\igfxCoIn_v1872.dll
2012-10-25 12:43 . 2012-10-25 12:43 141848 ----a-w- c:\windows\system32\igfxtray.exe
2012-10-25 12:43 . 2012-10-25 12:43 304640 ----a-w- c:\windows\system32\igfxrita.lrc
2012-10-25 12:43 . 2012-10-25 12:43 672792 ----a-w- c:\windows\system32\igfxcfg.exe
2012-10-25 12:43 . 2012-10-25 12:43 6042112 ----a-w- c:\windows\system32\ig4icd32.dll
2012-10-25 12:43 . 2012-10-25 12:43 5946368 ----a-w- c:\windows\system32\drivers\igdkmd32.sys
2012-10-25 12:43 . 2012-10-25 12:43 5702656 ----a-w- c:\windows\system32\igfxress.dll
2012-10-25 12:43 . 2012-10-25 12:43 549888 ----a-w- c:\windows\system32\igdumdx32.dll
2012-10-25 12:43 . 2012-10-25 12:43 3839488 ----a-w- c:\windows\system32\ig4dev32.dll
2012-10-25 12:43 . 2012-10-25 12:43 310784 ----a-w- c:\windows\system32\igfxrell.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303616 ----a-w- c:\windows\system32\igfxrfra.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303616 ----a-w- c:\windows\system32\igfxrdeu.lrc
2012-10-25 12:43 . 2012-10-25 12:43 303104 ----a-w- c:\windows\system32\igfxresp.lrc
2012-10-25 12:43 . 2012-10-25 12:43 288256 ----a-w- c:\windows\system32\igfxrhun.lrc
2012-10-25 12:43 . 2012-10-25 12:43 282624 ----a-w- c:\windows\system32\igfxrcsy.lrc
2012-10-25 12:43 . 2012-10-25 12:43 281088 ----a-w- c:\windows\system32\igfxrfin.lrc
2012-10-25 12:43 . 2012-10-25 12:43 280576 ----a-w- c:\windows\system32\igfxrdan.lrc
2012-10-25 12:43 . 2012-10-25 12:43 275968 ----a-w- c:\windows\system32\igfxrenu.lrc
2012-10-25 12:43 . 2012-10-25 12:43 252416 ----a-w- c:\windows\system32\igfxrara.lrc
2012-10-25 12:43 . 2012-10-25 12:43 249856 ----a-w- c:\windows\system32\igfxrheb.lrc
2012-10-25 12:43 . 2012-10-25 12:43 23552 ----a-w- c:\windows\system32\igfxexps.dll
2012-10-25 12:43 . 2012-10-25 12:43 217088 ----a-w- c:\windows\system32\igfxdev.dll
2012-10-25 12:43 . 2012-10-25 12:43 199680 ----a-w- c:\windows\system32\igfxpph.dll
2012-10-25 12:43 . 2012-10-25 12:43 179712 ----a-w- c:\windows\system32\igfxrcht.lrc
2012-10-25 12:43 . 2012-10-25 12:43 178176 ----a-w- c:\windows\system32\igfxrchs.lrc
2012-10-25 12:43 . 2012-10-25 12:43 173080 ----a-w- c:\windows\system32\igfxext.exe
2012-10-25 12:43 . 2012-10-25 12:43 151064 ----a-w- c:\windows\system32\igfxpers.exe
2012-10-25 12:43 . 2012-10-25 12:43 130048 ----a-w- c:\windows\system32\igfxdo.dll
2012-10-25 12:43 . 2012-10-25 12:43 119296 ----a-w- c:\windows\system32\igfxcpl.cpl
2012-10-25 12:43 . 2012-10-25 12:43 174104 ----a-w- c:\windows\system32\hkcmd.exe
2012-10-25 12:43 . 2009-07-13 22:09 3646976 ----a-w- c:\windows\system32\igd10umd32.dll
2012-10-25 12:43 . 2009-07-13 22:09 4233728 ----a-w- c:\windows\system32\igdumd32.dll
2012-10-25 12:43 . 2012-10-25 12:43 1002008 ----a-w- c:\windows\system32\igxpun.exe
2012-10-25 12:43 . 2012-10-25 12:43 94720 ----a-w- c:\windows\system32\hccutils.dll
2012-10-25 12:43 . 2012-10-25 12:43 452440 ----a-w- c:\windows\system32\d3dx10_40.dll
2012-10-19 14:11 . 2012-10-19 14:11 86528 ----a-w- c:\windows\system32\iesysprep.dll
2012-10-19 14:11 . 2012-10-19 14:11 76800 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2012-10-19 14:11 . 2012-10-19 14:11 74752 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2012-10-19 14:11 . 2012-10-19 14:11 74752 ----a-w- c:\windows\system32\iesetup.dll
2012-10-19 14:11 . 2012-10-19 14:11 63488 ----a-w- c:\windows\system32\tdc.ocx
2012-10-19 14:11 . 2012-10-19 14:11 48640 ----a-w- c:\windows\system32\mshtmler.dll
2012-10-19 14:11 . 2012-10-19 14:11 367104 ----a-w- c:\windows\system32\html.iec
2012-10-19 14:11 . 2012-10-19 14:11 35840 ----a-w- c:\windows\system32\imgutil.dll
2012-10-19 14:11 . 2012-10-19 14:11 23552 ----a-w- c:\windows\system32\licmgr10.dll
2012-10-19 14:11 . 2012-10-19 14:11 161792 ----a-w- c:\windows\system32\msls31.dll
2012-10-19 14:11 . 2012-10-19 14:11 152064 ----a-w- c:\windows\system32\wextract.exe
2012-10-19 14:11 . 2012-10-19 14:11 150528 ----a-w- c:\windows\system32\iexpress.exe
2012-10-19 14:11 . 2012-10-19 14:11 11776 ----a-w- c:\windows\system32\mshta.exe
2012-10-19 14:11 . 2012-10-19 14:11 110592 ----a-w- c:\windows\system32\IEAdvpack.dll
2012-10-19 14:11 . 2012-10-19 14:11 101888 ----a-w- c:\windows\system32\admparse.dll
2012-10-19 12:31 . 2012-10-19 12:31 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-10-19 12:31 . 2012-10-19 12:31 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-10-19 12:31 . 2012-10-19 12:31 746984 ----a-w- c:\windows\system32\deployJava1.dll
2012-10-18 12:32 . 2012-10-18 12:32 163056 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10142.bin
2012-10-15 16:59 . 2012-10-17 02:08 44784 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2012-12-25 16:46 . 2012-12-25 16:46 262112 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2012-10-30 22:50 121528 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\program files\Skype\Phone\Skype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HAZON CLIC"="c:\program files\Garzanti Linguistica\Hazon Clic\Hazon.exe" [2001-10-30 524288]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-10-30 4297136]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2012-07-03 252848]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-09-23 926896]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-10-25 141848]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-10-25 174104]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-10-25 151064]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-08-27 59280]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2012-09-09 421776]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [x]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe [x]
S0 aswNdis;avast! Firewall NDIS Filter Service;c:\windows\system32\DRIVERS\aswNdis.sys [x]
S0 aswNdis2;avast! Firewall Core Firewall Service; [x]
S1 aswFW;avast! TDI Firewall driver; [x]
S1 aswKbd;aswKbd; [x]
S1 aswSnx;aswSnx; [x]
S1 aswSP;aswSP; [x]
S2 aswFsBlk;aswFsBlk; [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [x]
S3 SFEP;Sony Firmware Extension Parser;c:\windows\system32\DRIVERS\SFEP.sys [x]
S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [x]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [x]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [x]
S3 VUAgent;VUAgent;c:\program files\Sony\VAIO Update Common\VUAgent.exe [x]
S3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x86.sys [x]
.
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - WS2IFSL
.
Contenuto della cartella 'Scheduled Tasks'
.
2012-12-27 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-17 13:36]
.
2012-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-28 17:09]
.
2012-12-27 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-10-28 17:09]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uInternet Settings,ProxyOverride = *.local
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 83.103.25.250 62.101.93.101
FF - ProfilePath - c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\efxfkyjm.default\
.
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @DenieD: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @DenieD: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @DenieD: (A) (Users) @DenieD: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security] @DenieD: (Full) (Everyone)
.
Ora fine scansione: 2012-12-27 14:36:52
ComboFix-quarantined-files.txt 2012-12-27 13:36
ComboFix2.txt 2012-12-27 03:24
.
Pre-Run: 92.127.956.992 bytes free
Post-Run: 91.843.592.192 bytes free
.
- - End Of File - - D6B402B430263BEFEF81889C2027F5DF
