ComboFix 12-06-21.02 - Admin 21/06/2012  22.19.25.1.1 - x86 NETWORK
Microsoft Windows XP Professional  5.1.2600.3.1252.39.1040.18.1022.786 [GMT 2:00]
Eseguito da: c:\documents and settings\Admin\Desktop\ComboFix.exe
AV: AntiVir Desktop *Enabled/Updated* {0012F2B4-5C49-7C92-0300-000000000000}
AV: AntiVir Desktop *Enabled/Updated* {0012F2B4-5CC9-7C92-0300-000000000000}
.
.
(((((((((((((((((((((((((((((((((((((   Altre eliminazioni   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Admin\WINDOWS
c:\documents and settings\Davide.DAVIDE-ATHLON\WINDOWS
c:\programmi\windows-kb890830-v3.5.exe
c:\windows\system32\SET41.tmp
c:\windows\system32\SET45.tmp
c:\windows\system32\SET4D.tmp
.
.
(((((((((((((((((((((((((   Files Creati Da 2012-05-21 al 2012-06-21  )))))))))))))))))))))))))))))))))))
.
.
2012-06-21 18:52 . 2012-06-21 18:52	--------	d-----w-	c:\documents and settings\Admin\Dati applicazioni\Malwarebytes
2012-06-21 18:52 . 2012-06-21 18:52	--------	d-----w-	c:\programmi\Malwarebytes' Anti-Malware
2012-06-21 18:52 . 2012-06-21 18:52	--------	d-----w-	c:\documents and settings\All Users.WINDOWS\Dati applicazioni\Malwarebytes
2012-06-21 18:52 . 2012-04-04 13:56	22344	----a-w-	c:\windows\system32\drivers\mbam.sys
2012-06-14 15:03 . 2012-05-11 14:40	521728	-c----w-	c:\windows\system32\dllcache\jsdbgui.dll
2012-06-06 16:41 . 2008-04-13 09:39	5376	----a-w-	c:\windows\system32\MSPCLOCK.sys
2012-06-06 16:30 . 2012-06-06 16:30	--------	d-----w-	C:\Drivers
2012-06-06 16:30 . 2002-10-15 20:41	102220	----a-w-	c:\windows\system32\drivers\sonypvs1.sys
2012-06-06 16:30 . 2001-11-05 07:23	299923	----a-w-	c:\windows\system32\drivers\sonyhcs.sys
2012-06-06 16:30 . 2001-11-05 07:23	38739	----a-w-	c:\windows\system32\drivers\sonyhcc.sys
2012-06-06 16:30 . 2001-11-05 07:23	6097	----a-w-	c:\windows\system32\drivers\sonyhcb.sys
2012-06-06 16:30 . 2001-07-03 18:39	3654	----a-w-	c:\windows\system32\drivers\Sonyhcp.dll
2012-06-06 16:30 . 2001-07-03 18:33	53248	----a-w-	c:\windows\system32\SONYHCY.DLL
2012-06-06 14:40 . 2012-06-06 14:40	60416	----a-w-	c:\windows\ALCFDRTM.VER
2012-06-06 14:40 . 2012-06-06 14:40	60416	----a-w-	c:\windows\ALCFDRTM.EXE
2012-06-06 14:40 . 2012-06-06 14:40	--------	d-----w-	c:\windows\system32\Lang
2012-06-03 20:45 . 2012-06-03 20:45	--------	d-----w-	c:\programmi\DivX
2012-06-03 20:28 . 2012-06-03 20:28	--------	d-----w-	c:\programmi\TRUST
2012-06-03 20:28 . 1997-01-18 08:40	299520	----a-w-	c:\windows\uninst.exe
2012-06-03 20:28 . 2008-04-13 09:39	5504	-c--a-w-	c:\windows\system32\dllcache\mstee.sys
2012-06-03 20:28 . 2008-04-13 09:39	5504	----a-w-	c:\windows\system32\drivers\MSTEE.sys
2012-06-03 20:28 . 2008-04-13 09:46	10880	-c--a-w-	c:\windows\system32\dllcache\ndisip.sys
2012-06-03 20:28 . 2008-04-13 09:46	10880	----a-w-	c:\windows\system32\drivers\NdisIP.sys
.
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-06-10 21:07 . 2012-04-17 19:00	426184	----a-w-	c:\windows\system32\FlashPlayerApp.exe
2012-06-10 21:07 . 2011-10-04 18:59	70344	----a-w-	c:\windows\system32\FlashPlayerCPLApp.cpl
2012-06-02 13:19 . 2011-10-03 17:16	329240	----a-w-	c:\windows\system32\wucltui.dll
2012-06-02 13:19 . 2011-10-03 17:16	219160	----a-w-	c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19 . 2011-10-03 17:16	210968	----a-w-	c:\windows\system32\wuweb.dll
2012-06-02 13:19 . 2011-10-03 17:16	35864	----a-w-	c:\windows\system32\wups.dll
2012-06-02 13:19 . 2011-10-03 17:16	53784	----a-w-	c:\windows\system32\wuauclt.exe
2012-06-02 13:19 . 2009-08-06 17:24	45080	----a-w-	c:\windows\system32\wups2.dll
2012-06-02 13:19 . 2008-04-13 17:13	97304	----a-w-	c:\windows\system32\cdm.dll
2012-06-02 13:19 . 2009-08-06 17:23	15896	----a-w-	c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19 . 2011-10-03 17:16	577048	----a-w-	c:\windows\system32\wuapi.dll
2012-06-02 13:19 . 2009-08-06 17:23	24088	----a-w-	c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19 . 2009-08-06 17:23	18968	----a-w-	c:\windows\system32\wuaueng.dll.mui
2012-06-02 13:19 . 2009-08-06 17:23	15896	----a-w-	c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19 . 2011-10-03 17:16	1933848	----a-w-	c:\windows\system32\wuaueng.dll
2012-06-02 13:18 . 2012-01-26 14:45	214256	----a-w-	c:\windows\system32\muweb.dll
2012-06-02 13:18 . 2012-01-26 14:45	275696	----a-w-	c:\windows\system32\mucltui.dll
2012-06-02 13:18 . 2012-01-26 14:45	18672	----a-w-	c:\windows\system32\mucltui.dll.mui
2012-05-31 13:21 . 2008-04-13 17:13	603136	----a-w-	c:\windows\system32\crypt32.dll
2012-05-16 15:06 . 2008-04-13 17:13	916992	----a-w-	c:\windows\system32\wininet.dll
2012-05-15 13:56 . 2008-04-13 16:50	1863168	----a-w-	c:\windows\system32\win32k.sys
2012-05-15 10:18 . 2011-10-03 20:31	883008	----a-w-	c:\windows\system32\nvgenco32.dll
2012-05-15 10:18 . 2011-10-03 20:31	65536	----a-w-	c:\windows\system32\OpenCL.dll
2012-05-15 10:18 . 2011-10-03 20:31	6012928	----a-w-	c:\windows\system32\nvcuda.dll
2012-05-15 10:18 . 2011-10-03 20:31	4373248	----a-w-	c:\windows\system32\nv4_disp.dll
2012-05-15 10:18 . 2011-10-03 20:31	2530624	----a-w-	c:\windows\system32\nvcuvid.dll
2012-05-15 10:18 . 2011-10-03 20:31	2445120	----a-w-	c:\windows\system32\nvcuvenc.dll
2012-05-15 10:18 . 2011-10-03 20:31	2359808	----a-w-	c:\windows\system32\nvapi.dll
2012-05-15 10:18 . 2011-10-03 20:31	18771968	----a-w-	c:\windows\system32\nvoglnt.dll
2012-05-15 10:18 . 2011-10-03 20:31	17543168	----a-w-	c:\windows\system32\nvcompiler.dll
2012-05-15 10:18 . 2011-10-03 20:31	14014656	----a-w-	c:\windows\system32\drivers\nv4_mini.sys
2012-05-15 10:18 . 2011-10-03 20:31	1000768	----a-w-	c:\windows\system32\nvdispco32.dll
2012-05-15 09:43 . 2011-10-03 20:32	229376	----a-w-	c:\windows\system32\nvrszhc.dll
2012-05-15 09:43 . 2011-10-03 20:32	253952	----a-w-	c:\windows\system32\nvrsth.dll
2012-05-15 09:43 . 2011-10-03 20:32	253952	----a-w-	c:\windows\system32\nvrssv.dll
2012-05-15 09:43 . 2011-10-03 20:32	126976	----a-w-	c:\windows\system32\nvrszht.dll
2012-05-15 09:43 . 2011-10-03 20:32	282624	----a-w-	c:\windows\system32\nvrsit.dll
2012-05-15 09:43 . 2011-10-03 20:32	335872	----a-w-	c:\windows\system32\nvrsar.dll
2012-05-15 09:43 . 2011-10-03 20:32	282624	----a-w-	c:\windows\system32\nvrsel.dll
2012-05-15 09:43 . 2011-10-03 20:32	274432	----a-w-	c:\windows\system32\nvrsnl.dll
2012-05-15 09:43 . 2011-10-03 20:32	274432	----a-w-	c:\windows\system32\nvrsesm.dll
2012-05-15 09:43 . 2011-10-03 20:32	266240	----a-w-	c:\windows\system32\nvrsko.dll
2012-05-15 09:43 . 2011-10-03 20:32	249856	----a-w-	c:\windows\system32\nvrseng.dll
2012-05-15 09:43 . 2011-10-03 20:32	258048	----a-w-	c:\windows\system32\nvrssl.dll
2012-05-15 09:43 . 2011-10-03 20:32	335872	----a-w-	c:\windows\system32\nvrshe.dll
2012-05-15 09:43 . 2011-10-03 20:32	286720	----a-w-	c:\windows\system32\nvrsfr.dll
2012-05-15 09:43 . 2011-10-03 20:32	274432	----a-w-	c:\windows\system32\nvrspt.dll
2012-05-15 09:43 . 2011-10-03 20:32	253952	----a-w-	c:\windows\system32\nvrsno.dll
2012-05-15 09:43 . 2011-10-03 20:32	249856	----a-w-	c:\windows\system32\nvrsfi.dll
2012-05-15 09:43 . 2011-10-03 20:32	282624	----a-w-	c:\windows\system32\nvrses.dll
2012-05-15 09:43 . 2011-10-03 20:32	270336	----a-w-	c:\windows\system32\nvrsru.dll
2012-05-15 09:43 . 2011-10-03 20:32	258048	----a-w-	c:\windows\system32\nvrssk.dll
2012-05-15 09:43 . 2011-10-03 20:32	258048	----a-w-	c:\windows\system32\nvrstr.dll
2012-05-15 09:43 . 2011-10-03 20:32	262144	----a-w-	c:\windows\system32\nvrshu.dll
2012-05-15 09:43 . 2011-10-03 20:32	253952	----a-w-	c:\windows\system32\nvrsda.dll
2012-05-15 09:43 . 2011-10-03 20:32	274432	----a-w-	c:\windows\system32\nvrsja.dll
2012-05-15 09:43 . 2011-10-03 20:32	258048	----a-w-	c:\windows\system32\nvrspl.dll
2012-05-15 09:43 . 2011-10-03 20:32	278528	----a-w-	c:\windows\system32\nvrsde.dll
2012-05-15 09:43 . 2011-10-03 20:32	270336	----a-w-	c:\windows\system32\nvrsptb.dll
2012-05-15 09:43 . 2011-10-03 20:32	249856	----a-w-	c:\windows\system32\nvrscs.dll
2012-05-15 09:40 . 2011-10-03 20:32	54272	----a-w-	c:\windows\system32\nvwddi.dll
2012-05-15 09:40 . 2011-10-03 20:32	15504192	----a-w-	c:\windows\system32\nvcpl.dll
2012-05-15 09:40 . 2011-10-03 20:32	143680	----a-w-	c:\windows\system32\nvcolor.exe
2012-05-15 09:40 . 2011-10-03 20:32	164160	----a-w-	c:\windows\system32\nvsvc32.exe
2012-05-15 09:40 . 2011-10-03 20:32	108352	----a-w-	c:\windows\system32\nvmctray.dll
2012-05-11 14:40 . 2008-04-13 17:14	1469440	------w-	c:\windows\system32\inetcpl.cpl
2012-05-11 14:40 . 2008-04-13 17:13	43520	----a-w-	c:\windows\system32\licmgr10.dll
2012-05-11 11:38 . 2008-04-13 16:50	385024	----a-w-	c:\windows\system32\html.iec
2012-05-05 03:14 . 2008-04-13 18:55	2072832	----a-w-	c:\windows\system32\ntkrnlpa.exe
2012-05-05 03:14 . 2008-04-13 16:55	2196352	----a-w-	c:\windows\system32\ntoskrnl.exe
2012-05-02 13:46 . 2011-10-03 17:14	139656	----a-w-	c:\windows\system32\drivers\rdpwd.sys
2012-04-30 23:21 . 2012-04-30 23:21	97208	----a-w-	c:\programmi\mozilla firefox\components\browsercomps.dll
.
.
(((((((((((((((((((((((((((((((((((((   Punti Reg Caricati   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RaidTool"="c:\programmi\VIA\RAID\raid_tool.exe" [2005-04-26 589824]
"SoundMan"="SOUNDMAN.EXE" [2005-06-20 77824]
"avgnt"="c:\programmi\Avira\AntiVir Desktop\avgnt.exe" [2011-04-21 281768]
"Adobe ARM"="c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2011-05-04 252136]
"CanonMyPrinter"="c:\programmi\Canon\MyPrinter\BJMyPrt.exe" [2010-03-25 2516296]
"APSDaemon"="c:\programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"QuickTime Task"="c:\programmi\QuickTime\QTTask.exe" [2011-10-24 421888]
"iTunesHelper"="c:\programmi\iTunes\iTunesHelper.exe" [2012-03-27 421736]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2012-05-15 15504192]
"NvMediaCenter"="NvMCTray.dll" [2012-05-15 108352]
"nwiz"="c:\programmi\NVIDIA Corporation\nview\nwiz.exe" [2012-05-15 1634112]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes Anti-Malware"="c:\programmi\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-04-04 462408]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-13 15360]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\eMule\\emule.exe"=
"c:\\Programmi\\MSN Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Google\\Google Earth\\client\\googleearth.exe"=
"c:\\WINDOWS\\system32\\IPCamera.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\Programmi\\File comuni\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"=
"c:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"c:\\Programmi\\iTunes\\iTunes.exe"=
"c:\\Programmi\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
.
S2 DCamUSB20;TRUST USB2 AUDIO VIDEO EDITOR;c:\windows\system32\drivers\CsMini20.sys [03/06/2012 22.27.24 46216]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\programmi\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [25/04/2012 17.14.24 1262400]
S2 SkypeUpdate;Skype Updater;c:\programmi\Skype\Updater\Updater.exe [29/02/2012 8.50.48 158856]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [17/04/2012 21.00.54 257224]
S3 epmntdrv;epmntdrv;c:\windows\system32\epmntdrv.sys [03/10/2011 23.46.30 13192]
S3 EuGdiDrv;EuGdiDrv;c:\windows\system32\EuGdiDrv.sys [03/10/2011 23.46.30 8456]
S3 MozillaMaintenance;Mozilla Maintenance Service;c:\programmi\Mozilla Maintenance Service\maintenanceservice.exe [01/05/2012 1.22.44 129976]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [08/12/2011 22.27.04 137472]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [08/12/2011 22.27.05 8576]
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - DCAMUSB20
*NewlyCreated* - USB20SCAN
.
Contenuto della cartella 'Scheduled Tasks'
.
2012-06-17 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-17 21:07]
.
2012-06-12 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2011-06-01 16:57]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.1.254
TCP: Interfaces\{016A843B-2303-4DF2-803E-BC228F7FC347}: NameServer = 192.168.1.254
DPF: {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} - hxxp://192.168.1.104:8080/codebase/DVM_IPCam2.ocx
FF - ProfilePath - c:\documents and settings\Admin\Dati applicazioni\Mozilla\Firefox\Profiles\39vvvr8s.default\
FF - prefs.js: network.proxy.type - 0
.
.
------- Associazioni dei file -------
.
.scr=AutoCADScriptFile
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2012-06-21 22:24
Windows 5.1.2600 Service Pack 3 NTFS
.
scansione processi nascosti ... 
.
scansione entrate autostart nascoste ... 
.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
  RaidTool = c:\programmi\VIA\RAID\raid_tool.exe???? 
.
Scansione files nascosti ... 
.
Scansione completata con successo
Files nascosti: 0
.
**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\€–€|ÿÿÿÿÀ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Ora fine scansione: 2012-06-21  22:25:56
ComboFix-quarantined-files.txt  2012-06-21 20:25
.
Pre-Run: 45.220.364.288 byte disponibili
Post-Run: 45.940.269.056 byte disponibili
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ITA.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 3933BC37B5AB8BC47549EA451A2E34E7