Aiuto Ho Problemi Con Internet Explorer........

tecnico24

ciao,sei infetto purtroppo da instant access.
scarica Findawf http://noahdfear.geekstogo.com/FindAWF.exe
avvialo,scegli la prima opzione e posta il log.

gatto

Grazie dell'aiuto eccoti il responso, ora vado a lavoro perciò seguirò i tuoi consigli e le tue indicazioni stasera ancora grazie

Find AWF report by noahdfear 2006
Version 1.40

bak folders found


Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\BAK

10/06/2004  13.48           286.720 vsnpstd.exe
             1 File        286.720 byte
             2 Directory  45.084.848.128 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\APPS\POWERC~1\BAK

08/10/2004  04.14            81.920 PCMService.exe
             1 File         81.920 byte
             2 Directory  45.084.848.128 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ITUNES\BAK

23/02/2006  16.45           278.528 iTunesHelper.exe
             1 File        278.528 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\MESSEN~2\BAK

27/09/2006  20.36           190.024 MsgPlus.exe
             1 File        190.024 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\QUICKT~1\BAK

20/06/2006  17.19           282.624 qttask.exe
             1 File        282.624 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\BAK

01/07/2004  12.58           118.784 hkcmd.exe
01/07/2004  13.02           155.648 igfxtray.exe
09/07/2001  12.50           155.648 NeroCheck.exe
             3 File        430.080 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ALWILS~1\AVAST4\BAK

15/01/2007  19.28           108.160 ashDisp.exe
             1 File        108.160 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\GOOGLE\GOOGLE~3\BAK

29/07/2007  17.05            68.856 GoogleToolbarNotifier.exe
             1 File         68.856 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\HP\HPSOFT~1\BAK

11/05/2005  23.12            49.152 HPWuSchd2.exe
             1 File         49.152 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\NOKIA\NOKIAP~1\BAK

13/12/2005  08.49           217.088 LAUNCH~1.EXE
             1 File        217.088 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

26/09/2003  12.01           503.808 SynTPEnh.exe
26/09/2003  12.01            98.304 SynTPLpr.exe
             2 File        602.112 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\IME\IMJP8_1\BAK

19/08/2004  15.00           208.952 IMJPMIG.EXE
             1 File        208.952 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\DRIVERS\BAK

08/03/2004  14.23           217.088 Icon.exe
             1 File        217.088 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\FILECO~1\REAL\UPDATE~1\BAK

11/03/2006  16.24           180.269 realsched.exe
             1 File        180.269 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\JAVA\J2RE14~1.2_0\BIN\BAK

03/06/2004  23.05            32.881 jusched.exe
             1 File         32.881 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\IME\TINTLGNT\BAK

19/08/2004  15.00           455.168 TINTSETP.EXE
             1 File        455.168 byte
             2 Directory  45.084.839.936 byte disponibili


Duplicate files of bak directory contents

 28172  8 Oct 2007 "C:\WINDOWS\vsnpstd.exe"
286720 10 Jun 2004 "C:\WINDOWS\bak\vsnpstd.exe"
286720 10 Jun 2004 "C:\Programmi\File comuni\snpstd\vsnpstd.exe"
 28172  8 Oct 2007 "C:\APPS\Powercinema\PCMService.exe"
 81920  8 Oct 2004 "C:\APPS\Powercinema\bak\PCMService.exe"
 28172  8 Oct 2007 "C:\Programmi\iTunes\iTunesHelper.exe"
278528 23 Feb 2006 "C:\Programmi\iTunes\bak\iTunesHelper.exe"
 28172  8 Oct 2007 "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
190024 27 Sep 2006 "C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe"
 28172  8 Oct 2007 "C:\Programmi\QuickTime\qttask.exe"
282624 20 Jun 2006 "C:\Programmi\QuickTime\bak\qttask.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\hkcmd.exe"
118784  1 Jul 2004 "C:\PNP\VIDEO\WIN2000\HKCMD.EXE"
118784  1 Jul 2004 "C:\WINDOWS\system32\bak\hkcmd.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\igfxtray.exe"
155648  1 Jul 2004 "C:\PNP\VIDEO\WIN2000\IGFXTRAY.EXE"
155648  1 Jul 2004 "C:\WINDOWS\system32\bak\igfxtray.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\NeroCheck.exe"
155648  9 Jul 2001 "C:\WINDOWS\system32\bak\NeroCheck.exe"
 79224  6 Sep 2007 "C:\Programmi\Alwil Software\Avast4\ashDisp.exe"
108160 15 Jan 2007 "C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe"

11813120 12 Nov 2005 "C:\Programmi\GoogleEarthSetup.exe"
52272 3 Feb 2007 "C:\Programmi\Google\googletoolbar4user.exe"
458820 3 Nov 2005 "C:\Programmi\Google\Google Earth\GoogleEarth.exe"
28172 8 Oct 2007 "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
608936 11 Mar 2006 "C:\Programmi\File comuni\Real\GToolbar\GoogleToolbarInstaller.exe"
138168 3 Feb 2007 "C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe"
68856 29 Jul 2007 "C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
28172 8 Oct 2007 "C:\Programmi\HP\HP Software Update\HPWuSchd2.exe"
49152 11 May 2005 "C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe"
28172 8 Oct 2007 "C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe"
217088 13 Dec 2005 "C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE"
503808 26 Sep 2003 "C:\PNP\MOUSE\SYNTPENH.EXE"
28172 8 Oct 2007 "C:\Programmi\Synaptics\SynTP\SynTPEnh.exe"
503808 26 Sep 2003 "C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe"
98304 26 Sep 2003 "C:\PNP\MOUSE\SYNTPLPR.EXE"
28172 8 Oct 2007 "C:\Programmi\Synaptics\SynTP\SynTPLpr.exe"
98304 26 Sep 2003 "C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe"
208952 19 Aug 2004 "C:\WINDOWS\ime\IMJP8_1\imjpmig.exe"
208952 19 Aug 2004 "C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE"
217088 8 Mar 2004 "C:\PNP\NET\ICON.EXE"
217088 8 Mar 2004 "C:\WINDOWS\Temp\Icon.EXE"
32768 16 Nov 2006 "C:\WINDOWS\Installer{37477865-A3F1-4772-AD43-AAFC6BCFF99F}\icon.exe"
32768 15 Aug 2007 "C:\WINDOWS\Installer{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe"
28172 8 Oct 2007 "C:\WINDOWS\system32\drivers\Icon.exe"
217088 8 Mar 2004 "C:\WINDOWS\system32\drivers\bak\Icon.exe"
217088 8 Mar 2004 "C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\Icon.exe"
28172 8 Oct 2007 "C:\Programmi\File comuni\Real\Update_OB\realsched.exe"
180269 11 Mar 2006 "C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe"
28172 8 Oct 2007 "C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe"
75520 15 Dec 2006 "C:\Programmi\Java\jre1.5.0_11\bin\jusched.exe"
32881 3 Jun 2004 "C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe"
455168 19 Aug 2004 "C:\WINDOWS\system32\IME\TINTLGNT\tintsetp.exe"
455168 19 Aug 2004 "C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE"

end of report

tecnico24

@GATTO said:

Grazie dell'aiuto eccoti il responso, ora vado a lavoro perciò seguirò i tuoi consigli e le tue indicazioni stasera ancora grazie

Find AWF report by noahdfear 2006
Version 1.40

bak folders found


Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\BAK

10/06/2004  13.48           286.720 vsnpstd.exe
             1 File        286.720 byte
             2 Directory  45.084.848.128 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\APPS\POWERC~1\BAK

08/10/2004  04.14            81.920 PCMService.exe
             1 File         81.920 byte
             2 Directory  45.084.848.128 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ITUNES\BAK

23/02/2006  16.45           278.528 iTunesHelper.exe
             1 File        278.528 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\MESSEN~2\BAK

27/09/2006  20.36           190.024 MsgPlus.exe
             1 File        190.024 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\QUICKT~1\BAK

20/06/2006  17.19           282.624 qttask.exe
             1 File        282.624 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\BAK

01/07/2004  12.58           118.784 hkcmd.exe
01/07/2004  13.02           155.648 igfxtray.exe
09/07/2001  12.50           155.648 NeroCheck.exe
             3 File        430.080 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ALWILS~1\AVAST4\BAK

15/01/2007  19.28           108.160 ashDisp.exe
             1 File        108.160 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\GOOGLE\GOOGLE~3\BAK

29/07/2007  17.05            68.856 GoogleToolbarNotifier.exe
             1 File         68.856 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\HP\HPSOFT~1\BAK

11/05/2005  23.12            49.152 HPWuSchd2.exe
             1 File         49.152 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\NOKIA\NOKIAP~1\BAK

13/12/2005  08.49           217.088 LAUNCH~1.EXE
             1 File        217.088 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

26/09/2003  12.01           503.808 SynTPEnh.exe
26/09/2003  12.01            98.304 SynTPLpr.exe
             2 File        602.112 byte
             2 Directory  45.084.844.032 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\IME\IMJP8_1\BAK

19/08/2004  15.00           208.952 IMJPMIG.EXE
             1 File        208.952 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\DRIVERS\BAK

08/03/2004  14.23           217.088 Icon.exe
             1 File        217.088 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\FILECO~1\REAL\UPDATE~1\BAK

11/03/2006  16.24           180.269 realsched.exe
             1 File        180.269 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\JAVA\J2RE14~1.2_0\BIN\BAK

03/06/2004  23.05            32.881 jusched.exe
             1 File         32.881 byte
             2 Directory  45.084.839.936 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\IME\TINTLGNT\BAK

19/08/2004  15.00           455.168 TINTSETP.EXE
             1 File        455.168 byte
             2 Directory  45.084.839.936 byte disponibili


Duplicate files of bak directory contents

 28172  8 Oct 2007 "C:\WINDOWS\vsnpstd.exe"
286720 10 Jun 2004 "C:\WINDOWS\bak\vsnpstd.exe"
286720 10 Jun 2004 "C:\Programmi\File comuni\snpstd\vsnpstd.exe"
 28172  8 Oct 2007 "C:\APPS\Powercinema\PCMService.exe"
 81920  8 Oct 2004 "C:\APPS\Powercinema\bak\PCMService.exe"
 28172  8 Oct 2007 "C:\Programmi\iTunes\iTunesHelper.exe"
278528 23 Feb 2006 "C:\Programmi\iTunes\bak\iTunesHelper.exe"
 28172  8 Oct 2007 "C:\Programmi\MessengerPlus! 3\MsgPlus.exe"
190024 27 Sep 2006 "C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe"
 28172  8 Oct 2007 "C:\Programmi\QuickTime\qttask.exe"
282624 20 Jun 2006 "C:\Programmi\QuickTime\bak\qttask.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\hkcmd.exe"
118784  1 Jul 2004 "C:\PNP\VIDEO\WIN2000\HKCMD.EXE"
118784  1 Jul 2004 "C:\WINDOWS\system32\bak\hkcmd.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\igfxtray.exe"
155648  1 Jul 2004 "C:\PNP\VIDEO\WIN2000\IGFXTRAY.EXE"
155648  1 Jul 2004 "C:\WINDOWS\system32\bak\igfxtray.exe"
 28172  8 Oct 2007 "C:\WINDOWS\system32\NeroCheck.exe"
155648  9 Jul 2001 "C:\WINDOWS\system32\bak\NeroCheck.exe"
 79224  6 Sep 2007 "C:\Programmi\Alwil Software\Avast4\ashDisp.exe"
108160 15 Jan 2007 "C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe"

11813120 12 Nov 2005 "C:\Programmi\GoogleEarthSetup.exe"
52272 3 Feb 2007 "C:\Programmi\Google\googletoolbar4user.exe"
458820 3 Nov 2005 "C:\Programmi\Google\Google Earth\GoogleEarth.exe"
28172 8 Oct 2007 "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
608936 11 Mar 2006 "C:\Programmi\File comuni\Real\GToolbar\GoogleToolbarInstaller.exe"
138168 3 Feb 2007 "C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe"
68856 29 Jul 2007 "C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe"
28172 8 Oct 2007 "C:\Programmi\HP\HP Software Update\HPWuSchd2.exe"
49152 11 May 2005 "C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe"
28172 8 Oct 2007 "C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe"
217088 13 Dec 2005 "C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE"
503808 26 Sep 2003 "C:\PNP\MOUSE\SYNTPENH.EXE"
28172 8 Oct 2007 "C:\Programmi\Synaptics\SynTP\SynTPEnh.exe"
503808 26 Sep 2003 "C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe"
98304 26 Sep 2003 "C:\PNP\MOUSE\SYNTPLPR.EXE"
28172 8 Oct 2007 "C:\Programmi\Synaptics\SynTP\SynTPLpr.exe"
98304 26 Sep 2003 "C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe"
208952 19 Aug 2004 "C:\WINDOWS\ime\IMJP8_1\imjpmig.exe"
208952 19 Aug 2004 "C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE"
217088 8 Mar 2004 "C:\PNP\NET\ICON.EXE"
217088 8 Mar 2004 "C:\WINDOWS\Temp\Icon.EXE"
32768 16 Nov 2006 "C:\WINDOWS\Installer{37477865-A3F1-4772-AD43-AAFC6BCFF99F}\icon.exe"
32768 15 Aug 2007 "C:\WINDOWS\Installer{C04E32E0-0416-434D-AFB9-6969D703A9EF}\icon.exe"
28172 8 Oct 2007 "C:\WINDOWS\system32\drivers\Icon.exe"
217088 8 Mar 2004 "C:\WINDOWS\system32\drivers\bak\Icon.exe"
217088 8 Mar 2004 "C:\WINDOWS\system32\ReinstallBackups\0010\DriverFiles\Icon.exe"
28172 8 Oct 2007 "C:\Programmi\File comuni\Real\Update_OB\realsched.exe"
180269 11 Mar 2006 "C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe"
28172 8 Oct 2007 "C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe"
75520 15 Dec 2006 "C:\Programmi\Java\jre1.5.0_11\bin\jusched.exe"
32881 3 Jun 2004 "C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe"
455168 19 Aug 2004 "C:\WINDOWS\system32\IME\TINTLGNT\tintsetp.exe"
455168 19 Aug 2004 "C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE"

end of report

ciao,scarica avenger http://swandog46.geekstogo.com/avenger.zip
clicca sull'opzione **Input script manually **e poi sulla **lente di ingrandimento.
**nello spazio bianco,fai copia|incolla delle seguenti righe:

files to delete:
C:\WINDOWS\vsnpstd.exe
C:\APPS\Powercinema\PCMService.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\NeroCheck.exe
C:\Programmi\Alwil Software\Avast4\ashDisp.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE
C:\WINDOWS\system32\drivers\Icon.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe
C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

files to move:
C:\WINDOWS\bak\vsnpstd.exe | C:\WINDOWS\vsnpstd.exe
C:\APPS\Powercinema\bak\PCMService.exe | C:\APPS\Powercinema\PCMService.exe
C:\Programmi\iTunes\bak\iTunesHelper.exe | C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe | C:\Programmi\MessengerPlus! 3\MsgPlus.exe
C:\Programmi\QuickTime\bak\qttask.exe | C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\system32\bak\hkcmd.exe | C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\bak\igfxtray.exe | C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\bak\NeroCheck.exe | C:\WINDOWS\system32\NeroCheck.exe
C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe | C:\Programmi\Alwil Software\Avast4\ashDisp.exe
C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe | C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE | C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE
C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe | C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe | C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE | C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE
C:\WINDOWS\system32\drivers\bak\Icon.exe | C:\WINDOWS\system32\drivers\Icon.exe
C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe | C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe | C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe
C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe | C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE | C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE

Poi clicca su Done.
poi sul semaforo verde,due volte si,il pc si riavviera',posta qua il log di avenger(C:/avenger.txt) e poi dimmi come va.

strano si separano le lettere.sara' un errore del forum

comunque google e toolbar attaccato,modificalo tu nello script.(nell'ultima righa)

gatto

grazie ma sembrerebbe che ancora non abbiamo risolto eccoti quello che mi hai richiesto

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\qfwoqrqw

Script file located at: ??\C:\WINDOWS\ycbxiwst.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

Beginning to process script file:

File C:\WINDOWS\vsnpstd.exe deleted successfully.
File C:\APPS\Powercinema\PCMService.exe deleted successfully.
File C:\Programmi\iTunes\iTunesHelper.exe deleted successfully.
File C:\Programmi\MessengerPlus! 3\MsgPlus.exe deleted successfully.
File C:\Programmi\QuickTime\qttask.exe deleted successfully.
File C:\WINDOWS\system32\hkcmd.exe deleted successfully.
File C:\WINDOWS\system32\igfxtray.exe deleted successfully.
File C:\WINDOWS\system32\NeroCheck.exe deleted successfully.
File C:\Programmi\Alwil Software\Avast4\ashDisp.exe deleted successfully.

File C:\Programmi\Google\GoogleToolbarNotifier\GoogleTo olbarNotifier.exe not found!
Deletion of file C:\Programmi\Google\GoogleToolbarNotifier\GoogleTo olbarNotifier.exe failed!

Could not process line:
C:\Programmi\Google\GoogleToolbarNotifier\GoogleTo olbarNotifier.exe
Status: 0xc0000034

File C:\Programmi\HP\HP Software Update\HPWuSchd2.exe deleted successfully.
File C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPEnh.exe deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPLpr.exe deleted successfully.
File C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE deleted successfully.
File C:\WINDOWS\system32\drivers\Icon.exe deleted successfully.
File C:\Programmi\File comuni\Real\Update_OB\realsched.exe deleted successfully.
File C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe deleted successfully.
File C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE deleted successfully.
File move operation C:\WINDOWS\bak\vsnpstd.exe|C:\WINDOWS\vsnpstd.exe completed successfully.
File move operation C:\APPS\Powercinema\bak\PCMService.exe|C:\APPS\Powercinema\PCMService.exe completed successfully.
File move operation C:\Programmi\iTunes\bak\iTunesHelper.exe|C:\Programmi\iTunes\iTunesHelper.exe completed successfully.
File move operation C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe|C:\Programmi\MessengerPlus! 3\MsgPlus.exe completed successfully.
File move operation C:\Programmi\QuickTime\bak\qttask.exe|C:\Programmi\QuickTime\qttask.exe completed successfully.
File move operation C:\WINDOWS\system32\bak\hkcmd.exe|C:\WINDOWS\system32\hkcmd.exe completed successfully.
File move operation C:\WINDOWS\system32\bak\igfxtray.exe|C:\WINDOWS\system32\igfxtray.exe completed successfully.
File move operation C:\WINDOWS\system32\bak\NeroCheck.exe|C:\WINDOWS\system32\NeroCheck.exe completed successfully.
File move operation C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe|C:\Programmi\Alwil Software\Avast4\ashDisp.exe completed successfully.
File move operation C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe|C:\Programmi\HP\HP Software Update\HPWuSchd2.exe completed successfully.
File move operation C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE|C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE completed successfully.
File move operation C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe|C:\Programmi\Synaptics\SynTP\SynTPEnh.exe completed successfully.
File move operation C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe|C:\Programmi\Synaptics\SynTP\SynTPLpr.exe completed successfully.
File move operation C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE|C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE completed successfully.
File move operation C:\WINDOWS\system32\drivers\bak\Icon.exe|C:\WINDOWS\system32\drivers\Icon.exe completed successfully.
File move operation C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe|C:\Programmi\File comuni\Real\Update_OB\realsched.exe completed successfully.
File move operation C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe|C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe completed successfully.
File move operation C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe|C:\Programmi\Google\GoogleToolbarNotifier\GoogleTo olbarNotifier.exe completed successfully.
File move operation C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE|C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE completed successfully.

Completed script processing.

Finished! Terminate.

gatto

mi sono accorto che c'erano 2 errori e prima ne avevo corretto solo 1 ho rifatto tutto con il testo giusto......questo è il responso.....cmq explorer non funziona ancora

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\tkuxisfl

Script file located at: ??\C:\WINDOWS\tywmosyu.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

Beginning to process script file:

File C:\WINDOWS\vsnpstd.exe deleted successfully.
File C:\APPS\Powercinema\PCMService.exe deleted successfully.
File C:\Programmi\iTunes\iTunesHelper.exe deleted successfully.
File C:\Programmi\MessengerPlus! 3\MsgPlus.exe deleted successfully.
File C:\Programmi\QuickTime\qttask.exe deleted successfully.
File C:\WINDOWS\system32\hkcmd.exe deleted successfully.
File C:\WINDOWS\system32\igfxtray.exe deleted successfully.
File C:\WINDOWS\system32\NeroCheck.exe deleted successfully.
File C:\Programmi\Alwil Software\Avast4\ashDisp.exe deleted successfully.
File C:\Programmi\Google\GoogleToolbarNotifier\GoogleTo olbarNotifier.exe deleted successfully.
File C:\Programmi\HP\HP Software Update\HPWuSchd2.exe deleted successfully.
File C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPEnh.exe deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPLpr.exe deleted successfully.
File C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE deleted successfully.
File C:\WINDOWS\system32\drivers\Icon.exe deleted successfully.
File C:\Programmi\File comuni\Real\Update_OB\realsched.exe deleted successfully.
File C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe deleted successfully.
File C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE deleted successfully.

File C:\WINDOWS\bak\vsnpstd.exe not found!
File move operation C:\WINDOWS\bak\vsnpstd.exe|C:\WINDOWS\vsnpstd.exe failed!

Could not process line:
C:\WINDOWS\bak\vsnpstd.exe|C:\WINDOWS\vsnpstd.exe
Status: 0xc0000034

File C:\APPS\Powercinema\bak\PCMService.exe not found!
File move operation C:\APPS\Powercinema\bak\PCMService.exe|C:\APPS\Powercinema\PCMService.exe failed!

Could not process line:
C:\APPS\Powercinema\bak\PCMService.exe|C:\APPS\Powercinema\PCMService.exe
Status: 0xc0000034

File C:\Programmi\iTunes\bak\iTunesHelper.exe not found!
File move operation C:\Programmi\iTunes\bak\iTunesHelper.exe|C:\Programmi\iTunes\iTunesHelper.exe failed!

Could not process line:
C:\Programmi\iTunes\bak\iTunesHelper.exe|C:\Programmi\iTunes\iTunesHelper.exe
Status: 0xc0000034

File C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe not found!
File move operation C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe|C:\Programmi\MessengerPlus! 3\MsgPlus.exe failed!

Could not process line:
C:\Programmi\MessengerPlus! 3\bak\MsgPlus.exe|C:\Programmi\MessengerPlus! 3\MsgPlus.exe
Status: 0xc0000034

File C:\Programmi\QuickTime\bak\qttask.exe not found!
File move operation C:\Programmi\QuickTime\bak\qttask.exe|C:\Programmi\QuickTime\qttask.exe failed!

Could not process line:
C:\Programmi\QuickTime\bak\qttask.exe|C:\Programmi\QuickTime\qttask.exe
Status: 0xc0000034

File C:\WINDOWS\system32\bak\hkcmd.exe not found!
File move operation C:\WINDOWS\system32\bak\hkcmd.exe|C:\WINDOWS\system32\hkcmd.exe failed!

Could not process line:
C:\WINDOWS\system32\bak\hkcmd.exe|C:\WINDOWS\system32\hkcmd.exe
Status: 0xc0000034

File C:\WINDOWS\system32\bak\igfxtray.exe not found!
File move operation C:\WINDOWS\system32\bak\igfxtray.exe|C:\WINDOWS\system32\igfxtray.exe failed!

Could not process line:
C:\WINDOWS\system32\bak\igfxtray.exe|C:\WINDOWS\system32\igfxtray.exe
Status: 0xc0000034

File C:\WINDOWS\system32\bak\NeroCheck.exe not found!
File move operation C:\WINDOWS\system32\bak\NeroCheck.exe|C:\WINDOWS\system32\NeroCheck.exe failed!

Could not process line:
C:\WINDOWS\system32\bak\NeroCheck.exe|C:\WINDOWS\system32\NeroCheck.exe
Status: 0xc0000034

File C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe not found!
File move operation C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe|C:\Programmi\Alwil Software\Avast4\ashDisp.exe failed!

Could not process line:
C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe|C:\Programmi\Alwil Software\Avast4\ashDisp.exe
Status: 0xc0000034

File C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe not found!
File move operation C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe|C:\Programmi\HP\HP Software Update\HPWuSchd2.exe failed!

Could not process line:
C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe|C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
Status: 0xc0000034

File C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE not found!
File move operation C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE|C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE failed!

Could not process line:
C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE|C:\Programmi\Nokia\Nokia PC Suite 6\LAUNCH~1.EXE
Status: 0xc0000034

File C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe not found!
File move operation C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe|C:\Programmi\Synaptics\SynTP\SynTPEnh.exe failed!

Could not process line:
C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe|C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
Status: 0xc0000034

File C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe not found!
File move operation C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe|C:\Programmi\Synaptics\SynTP\SynTPLpr.exe failed!

Could not process line:
C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe|C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
Status: 0xc0000034

File C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE not found!
File move operation C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE|C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE failed!

Could not process line:
C:\WINDOWS\ime\IMJP8_1\bak\IMJPMIG.EXE|C:\WINDOWS\ime\IMJP8_1\IMJPMIG.EXE
Status: 0xc0000034

File C:\WINDOWS\system32\drivers\bak\Icon.exe not found!
File move operation C:\WINDOWS\system32\drivers\bak\Icon.exe|C:\WINDOWS\system32\drivers\Icon.exe failed!

Could not process line:
C:\WINDOWS\system32\drivers\bak\Icon.exe|C:\WINDOWS\system32\drivers\Icon.exe
Status: 0xc0000034

File C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe not found!
File move operation C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe|C:\Programmi\File comuni\Real\Update_OB\realsched.exe failed!

Could not process line:
C:\Programmi\File comuni\Real\Update_OB\bak\realsched.exe|C:\Programmi\File comuni\Real\Update_OB\realsched.exe
Status: 0xc0000034

File C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe not found!
File move operation C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe|C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe failed!

Could not process line:
C:\Programmi\Java\j2re1.4.2_05\bin\bak\jusched.exe|C:\Programmi\Java\j2re1.4.2_05\bin\jusched.exe
Status: 0xc0000034

File C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe not found!
File move operation C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe|C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe failed!

Could not process line:
C:\Programmi\Google\GoogleToolbarNotifier\bak\GoogleToolbarNotifier.exe|C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Status: 0xc0000034

File C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE not found!
File move operation C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE|C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE failed!

Could not process line:
C:\WINDOWS\system32\IME\TINTLGNT\bak\TINTSETP.EXE|C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE
Status: 0xc0000034

Completed script processing.

Finished! Terminate.

tecnico24

riposta un log di findawf.

gatto

appena apro il pc adesso mi chiede "HPPProductAssistant" disc........che cos'è??
cmq ecco il log

Find AWF report by noahdfear 2006
Version 1.40

bak folders found


Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\BAK

             0 File              0 byte
             2 Directory  45.080.645.632 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\APPS\POWERC~1\BAK

             0 File              0 byte
             2 Directory  45.080.645.632 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ITUNES\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\MESSEN~2\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\QUICKT~1\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\ALWILS~1\AVAST4\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\GOOGLE\GOOGLE~3\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\HP\HPSOFT~1\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\NOKIA\NOKIAP~1\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\SYNAPT~1\SYNTP\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\IME\IMJP8_1\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\DRIVERS\BAK

             0 File              0 byte
             2 Directory  45.080.641.536 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\FILECO~1\REAL\UPDATE~1\BAK

             0 File              0 byte
             2 Directory  45.080.637.440 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\PROGRA~1\JAVA\J2RE14~1.2_0\BIN\BAK

             0 File              0 byte
             2 Directory  45.080.637.440 byte disponibili
Il volume nell'unit? C ? HDD
Numero di serie del volume: 70E8-BCFA

Directory di C:\WINDOWS\SYSTEM32\IME\TINTLGNT\BAK

             0 File              0 byte
             2 Directory  45.080.637.440 byte disponibili


Duplicate files of bak directory contents

end of report

tecnico24

il log di findawf e' pulito.
proviamo cosi:
scansione con total scan www.nanoscan.com/as/v1/
clicca su full scan e poi su scan now.aspetta che fa l'update e la scansione,quando ha finito esce un log.
caricalo qua:
http://megaupload.com
e dacci il link per scaricarlo

gatto

grazie ancora per il tuo aiuto!!!ho fatto lo scan che mi hai detto.......però sono dovuto uscire e quando sono tornato da lavoro lo scan mi aveva riavviato in automatico il pc e non c'era nessun log.......il problema continua ad esserci.........hai altri suggerimenti????

caspa

format (invio) ?