Olimpo Informatico

[agrolas]

Salve a tutti!
Volevo chiedere una mano d'aiuto per risolvere un problema che mi si è presentato da diversi giorni. Ogni volta che avvio IExplorer il sistema impiega almeno tre o quattro minuti per aprire la pagina..una volta aperta posso navigare tranquillamente e velocemente su quel sito, ma se voglio aprire contemporaneamente un'altra pagina mi si ripresenta il solito problema. Il guaio è che durante quest'operazione non posso fare niente, neanche chiudere la pagina, e per uscire devo utilizzare Ctrl+Alt+canc con il conseguente messaggio d'errore. Ho controllato sulle opzioni di internet ed ho notato che sui siti attendibili mi compaiono whataboutadog.com e whataboutarabit.com; ho provato ad eliminarli diverse volte ma ricompaiono puntualmente. Non so che fare, è evidente che il mio PC è infetto da virus ma vorrei evitare di formattarlo, considerato che sono abbastanza ignorante in materia confido nell'aiuto di qualcuno.

Allego il log di HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 22.28.18, on 28/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Venturi2\Client\ventc.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\system32\carpserv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\Programmi\Trust\Ami Mouse 250S Cordless\Amoumain.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Venturi2\Configurator\ventcfg.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\DC Series 1\Console\Watch.exe
C:\Programmi\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\franco\Impostazioni locali\Temporary Internet Files\Content.IE5\KBNFI459\HijackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bearfront.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: edit_html Class - {14D1A72D-8705-11D8-B120-0040F46CB696} - C:\Documents and Settings\franco\Desktop\102615518.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Programmi\IDM\QUICKfind\PlugIns\IEHelp.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar4.dll
O4 - HKLM\..\Run: [EPSON Stylus C44 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C44 Series" /O6 "USB001" /M "Stylus C44"
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WatchDog] C:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Programmi\Office Mouse\moffice.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [AVFX Engine] C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\SYSTEM32\V0230Mon.exe
O4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXE
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Programmi\Creative\Shared Files\CTSched.exe" /logon
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programmi\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - Global Startup: Agenda Calendario per la Mia Edizione Personalizzata di Ulead Photo Express 4.0.lnk = C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Venturi 2.lnk = ?
O4 - Global Startup: Watch.lnk = C:\Programmi\DC Series 1\Console\Watch.exe
O8 - Extra context menu item: &Point&&Go - C:\Programmi\File comuni\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Apri in nuova scheda in primo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: Apri in nuova scheda in secondo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O15 - Trusted Zone: *.3
O15 - Trusted Zone: *.whataboutadog.com
O15 - Trusted Zone: *.whataboutarabit.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{A00D1C1E-CF04-45C6-BCE6-D2D4D801E553}: NameServer = 213.230.155.94 213.230.130.222
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Venturi2 Client (Venturi2) - Fourelle Systems, Inc - C:\Program Files\Venturi2\Client\ventc.exe

Questo invece è il log di awf:


Find AWF report by noahdfear ©2006


bak folders found
~~~~~~~~~~~

Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\WINDOWS\BAK

10/10/1999 19.00 41.984 CTRegRun.EXE
30/10/2002 11.40 28.672 htpatch.exe
12/07/2002 12.15 106.496 SiSUSBrg.exe
3 File 177.152 byte
2 Directory 26.481.967.104 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\MOBILE~1\BAK

14/08/2004 04.42 36.864 WatchDog.exe
1 File 36.864 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\MSNMES~1\BAK

0 File 0 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\OFFICE~1\BAK

29/10/2005 19.25 806.912 moffice.exe
1 File 806.912 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\WINDOWS\SYSTEM32\BAK

20/08/2004 00.39 15.360 ctfmon.exe
19/07/2006 19.00 36.961 V0230Mon.exe
2 File 52.321 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\AHEAD\INCD\BAK

12/09/2002 19.13 1.101.824 InCD.exe
1 File 1.101.824 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\ALWILS~1\AVAST4\BAK

30/04/2007 17.42 75.392 ashDisp.exe
1 File 75.392 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\CREATIVE\SHARED~1\BAK

09/01/2006 04.43 53.340 CTSched.exe
1 File 53.340 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\NOKIA\NOKIAP~1\BAK

13/12/2005 09.49 217.088 LAUNCH~1.EXE
22/02/2006 17.18 1.302.528 PcSync2.exe
2 File 1.519.616 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\YAHOO!\MESSEN~1\BAK

31/08/2005 13.54 3.084.288 ypager.exe
1 File 3.084.288 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\CREATIVE\CREATI~1\LIVE!C~2\BAK

31/05/2006 17.00 143.360 CTLCMgr.exe
1 File 143.360 byte
2 Directory 26.481.963.008 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\CREATIVE\CREATI~1\VIDEOFX\BAK

09/06/2006 02.11 24.576 StartFX.exe
1 File 24.576 byte
2 Directory 26.481.958.912 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\PROGRA~1\GOOGLE\GOOGLE~2\121128~1.546\BAK

28/01/2007 01.47 171.448 GoogleToolbarNotifier.exe
1 File 171.448 byte
2 Directory 26.481.958.912 byte disponibili
Il volume nell'unit? C non ha etichetta.
Numero di serie del volume: 784F-1F09

Directory di C:\WINDOWS\SYSTEM32\SPOOL\DRIVERS\W32X86\3\BAK

10/12/2002 05.06 75.776 E_S10IC2.EXE
1 File 75.776 byte
2 Directory 26.481.958.912 byte disponibili


Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~

23568 12 Jun 2007 "C:\WINDOWS\CTRegRun.EXE"
41984 10 Oct 1999 "C:\WINDOWS\bak\CTRegRun.EXE"
23568 12 Jun 2007 "C:\WINDOWS\htpatch.exe"
28672 30 Oct 2002 "C:\WINDOWS\bak\htpatch.exe"
23568 12 Jun 2007 "C:\WINDOWS\SiSUSBrg.exe"
106496 12 Jul 2002 "C:\WINDOWS\bak\SiSUSBrg.exe"
23568 12 Jun 2007 "C:\Programmi\mobile PhoneTools\WatchDog.exe"
36864 14 Aug 2004 "C:\Programmi\mobile PhoneTools\bak\WatchDog.exe"
23568 12 Jun 2007 "C:\Programmi\Office Mouse\moffice.exe"
806912 29 Oct 2005 "C:\Programmi\Office Mouse\bak\moffice.exe"
15360 20 Aug 2004 "C:\WINDOWS\system32\ctfmon.exe"
15360 20 Aug 2004 "C:\WINDOWS\system32\bak\ctfmon.exe"
15360 20 Aug 2004 "C:\WINDOWS\SoftwareDistribution\Download\5d02aa687fced580cdb60abdb77eb075\ctfmon.exe"
23568 12 Jun 2007 "C:\WINDOWS\system32\V0230Mon.exe"
36961 19 Jul 2006 "C:\WINDOWS\CtDrvInstall\{76303233-30646576-0000000000000000}\V0230Mon.exe"
36961 19 Jul 2006 "C:\WINDOWS\system32\bak\V0230Mon.exe"
23568 12 Jun 2007 "C:\Programmi\Ahead\InCD\InCD.exe"
1101824 12 Sep 2002 "C:\Programmi\Ahead\InCD\bak\InCD.exe"
75392 30 Apr 2007 "C:\Programmi\Alwil Software\Avast4\ashDisp.exe"
75392 30 Apr 2007 "C:\Programmi\Alwil Software\Avast4\bak\ashDisp.exe"
23568 12 Jun 2007 "C:\Programmi\Creative\Shared Files\CTSched.exe"
53340 9 Jan 2006 "C:\Programmi\Creative\Shared Files\bak\CTSched.exe"
217088 13 Dec 2005 "C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe"
217088 13 Dec 2005 "C:\Programmi\Nokia\Nokia PC Suite 6\bak\LAUNCH~1.EXE"
1302528 22 Feb 2006 "C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe"
1302528 22 Feb 2006 "C:\Programmi\Nokia\Nokia PC Suite 6\bak\PcSync2.exe"
23568 12 Jun 2007 "C:\Programmi\Yahoo!\Messenger\ypager.exe"
3084288 31 Aug 2005 "C:\Programmi\Yahoo!\Messenger\bak\ypager.exe"
23568 12 Jun 2007 "C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
143360 31 May 2006 "C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\bak\CTLCMgr.exe"
23568 12 Jun 2007 "C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe"
24576 9 Jun 2006 "C:\Programmi\Creative\Creative Live! Cam\VideoFX\bak\StartFX.exe"
52272 28 Jan 2007 "C:\Programmi\Google\googletoolbar4user.exe"
11635064 27 Oct 2005 "C:\Documents and Settings\franco\Documenti\GoogleEarth.exe"
446532 1 Sep 2005 "C:\Programmi\Google\Google Earth\GoogleEarth.exe"
138168 28 Jan 2007 "C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe"
23568 12 Jun 2007 "C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe"
171448 28 Jan 2007 "C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\bak\GoogleToolbarNotifier.exe"
75776 10 Dec 2002 "C:\WINDOWS\system32\spool\drivers\w32x86\E_S10IC2.EXE"
23568 12 Jun 2007 "C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S10IC2.EXE"
75776 10 Dec 2002 "C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\E_S10IC2.EXE"


end of report


Attendo i vostri consigli e vi ringrazio anticipatamente!

[bdoriano]

ciao angrolas,

Toh! Ancora lui... si è diffuso bene...

Scarica questo e scompattalo in una sua cartella non temporanea e non sul desktop

Avvia AVENGER
Clicca su input script manually
Clicca sulla lente d'ingrandimento
Inserisci queste righe:

[agrolas]

Ciao bdoriano! Ti ringrazio per i preziosi consigli!
Ho eseguito tutte le operazioni che mi hai elencato e ti allego i log che mi hai richiesto.

Log di Averenger:

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\gtcpcdmm

*******************

Script file located at: \??\C:\Program Files\vgpdgrej.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\CTRegRun.EXE deleted successfully.
File C:\WINDOWS\htpatch.exe deleted successfully.
File C:\WINDOWS\SiSUSBrg.exe deleted successfully.
File C:\Programmi\mobile PhoneTools\WatchDog.exe deleted successfully.
File C:\Programmi\Office Mouse\moffice.exe deleted successfully.
File C:\WINDOWS\system32\V0230Mon.exe deleted successfully.
File C:\Programmi\Ahead\InCD\InCD.exe deleted successfully.
File C:\Programmi\Creative\Shared Files\CTSched.exe deleted successfully.
File C:\Programmi\Yahoo!\Messenger\ypager.exe deleted successfully.
File C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe deleted successfully.
File C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe deleted successfully.
File C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe deleted successfully.
File C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S10IC2.EXE deleted successfully.
File move operation C:\WINDOWS\bak\CTRegRun.EXE|C:\WINDOWS\CTRegRun.EXE completed successfully.
File move operation C:\WINDOWS\bak\htpatch.exe|C:\WINDOWS\htpatch.exe completed successfully.
File move operation C:\WINDOWS\bak\SiSUSBrg.exe|C:\WINDOWS\SiSUSBrg.exe completed successfully.
File move operation C:\Programmi\mobile PhoneTools\bak\WatchDog.exe|C:\Programmi\mobile PhoneTools\WatchDog.exe completed successfully.
File move operation C:\Programmi\Office Mouse\bak\moffice.exe|C:\Programmi\Office Mouse\moffice.exe completed successfully.
File move operation C:\WINDOWS\system32\bak\V0230Mon.exe|C:\WINDOWS\system32\V0230Mon.exe completed successfully.
File move operation C:\Programmi\Ahead\InCD\bak\InCD.exe|C:\Programmi\Ahead\InCD\InCD.exe completed successfully.
File move operation C:\Programmi\Creative\Shared Files\bak\CTSched.exe|C:\Programmi\Creative\Shared Files\CTSched.exe completed successfully.
File move operation C:\Programmi\Yahoo!\Messenger\bak\ypager.exe|C:\Programmi\Yahoo!\Messenger\ypager.exe completed successfully.
File move operation C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\bak\CTLCMgr.exe|C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe completed successfully.
File move operation C:\Programmi\Creative\Creative Live! Cam\VideoFX\bak\StartFX.exe|C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe completed successfully.
File move operation C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\bak\GoogleToolbarNotifier.exe|C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe completed successfully.
File move operation C:\WINDOWS\system32\spool\drivers\w32x86\3\bak\E_S10IC2.EXE|C:\WINDOWS\system32\spool\drivers\w32x86\3\E_S10IC2.EXE completed successfully.

Completed script processing.

*******************

Finished! Terminate.

Ultimo log di HijackThis:

Logfile of HijackThis v1.99.1
Scan saved at 11.15.41, on 30/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Venturi2\Client\ventc.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Programmi\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\carpserv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\htpatch.exe
C:\Programmi\mobile PhoneTools\WatchDog.exe
C:\Programmi\Trust\Ami Mouse 250S Cordless\Amoumain.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\Office Mouse\moffice.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\SYSTEM32\V0230Mon.exe
C:\Programmi\Office Mouse\MOUSE32A.EXE
C:\Programmi\Creative\Shared Files\CTSched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
C:\Programmi\Yahoo!\Messenger\ymsgr_tray.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Venturi2\Configurator\ventcfg.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\DC Series 1\Console\Watch.exe
C:\Programmi\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Windows Live Toolbar\msn_sl.exe
C:\Documents and Settings\franco\Impostazioni locali\Temporary Internet Files\Content.IE5\KBNFI459\HijackThis[1].exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bearfront.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Programmi\IDM\QUICKfind\PlugIns\IEHelp.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar4.dll
O4 - HKLM\..\Run: [EPSON Stylus C44 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C44 Series" /O6 "USB001" /M "Stylus C44"
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WatchDog] C:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Programmi\Office Mouse\moffice.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [AVFX Engine] C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\SYSTEM32\V0230Mon.exe
O4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXE
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Programmi\Creative\Shared Files\CTSched.exe" /logon
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programmi\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - Global Startup: Agenda Calendario per la Mia Edizione Personalizzata di Ulead Photo Express 4.0.lnk = C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Venturi 2.lnk = ?
O4 - Global Startup: Watch.lnk = C:\Programmi\DC Series 1\Console\Watch.exe
O8 - Extra context menu item: &Point&&Go - C:\Programmi\File comuni\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Apri in nuova scheda in primo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: Apri in nuova scheda in secondo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{A00D1C1E-CF04-45C6-BCE6-D2D4D801E553}: NameServer = 213.230.130.222 213.230.155.94
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Venturi2 Client (Venturi2) - Fourelle Systems, Inc - C:\Program Files\Venturi2\Client\ventc.exe


Per il momento ho visto che Internet Explorer funziona nuovamente bene, prova a dare uno sguardo ai log per vedere se c'è qualcosa che non va. Se dovessi riscontrare qualche problema ti farò sapere al più presto.
Per il momento ti ringrazio per la tua consulenza
Ciao!!!

[Sante62]

Ciao.
In attesa comunque di un parere più esperto, potresti eliminare con HJT queste stringhe perchè non necessarie o superflue:

O4 - Global Startup: Venturi 2.lnk = ?
O4 - Global Startup: Watch.lnk = C:\Programmi\DC Series 1\Console\Watch.exe

[bdoriano]

Come ti ha già suggerito Sante62, queste voci le puoi fixare con hijackthis:

[agrolas]

Grazie Sante62 per il tuo intervento e il prezioso consiglio!
Grazie anche a te bdoriano, ho seguito le altre indicazioni che mi hai dato ed ho effettuato tutte le altre operazioni.
Allego l'ultimo log di HJT:

Logfile of HijackThis v1.99.1
Scan saved at 20.30.23, on 01/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Venturi2\Client\ventc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\Programmi\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\carpserv.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\htpatch.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\mobile PhoneTools\WatchDog.exe
C:\Programmi\Trust\Ami Mouse 250S Cordless\Amoumain.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\Office Mouse\moffice.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe
C:\WINDOWS\SYSTEM32\V0230Mon.exe
C:\Programmi\Creative\Shared Files\CTSched.exe
C:\Programmi\Office Mouse\MOUSE32A.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmi\MSN Messenger\MsnMsgr.Exe
C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
C:\Programmi\Yahoo!\Messenger\ymsgr_tray.exe
C:\PROGRA~1\FILECO~1\Nokia\MPAPI\MPAPI3s.exe
C:\Programmi\DC Series 1\Console\Watch.exe
C:\Programmi\Alice ti aiuta\bin\mpbtn.exe
C:\Programmi\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\Documents and Settings\franco\Documenti\PROGRAMMI antivirus\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bearfront.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar4.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O2 - BHO: QUICKfind BHO Object - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Programmi\IDM\QUICKfind\PlugIns\IEHelp.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar4.dll
O4 - HKLM\..\Run: [EPSON Stylus C44 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C44 Series" /O6 "USB001" /M "Stylus C44"
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WatchDog] C:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Programmi\Office Mouse\moffice.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -onlytray
O4 - HKLM\..\Run: [AVFX Engine] C:\Programmi\Creative\Creative Live! Cam\VideoFX\StartFX.exe
O4 - HKLM\..\Run: [V0230Mon.exe] C:\WINDOWS\SYSTEM32\V0230Mon.exe
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Programmi\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Programmi\Yahoo!\Messenger\ypager.exe" -quiet
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Creative Live! Cam Manager] "C:\Programmi\Creative\Creative Live! Cam\Live! Cam Manager\CTLCMgr.exe"
O4 - Global Startup: Agenda Calendario per la Mia Edizione Personalizzata di Ulead Photo Express 4.0.lnk = C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia Edizione Personalizzata\CalCheck.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Kodak EasyShare software.lnk = C:\Programmi\Kodak\Kodak EasyShare Software\bin\EasyShare.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Watch.lnk = C:\Programmi\DC Series 1\Console\Watch.exe
O8 - Extra context menu item: &Point&&Go - C:\Programmi\File comuni\Expert System\PGPlatform\PGPlatform.htm
O8 - Extra context menu item: &Windows Live Search - res://C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Apri in nuova scheda in primo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: Apri in nuova scheda in secondo piano - res://C:\Programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?c94740496d594c92b8358fce80e19859
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\msjava.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesit.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Programmi\File comuni\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{A00D1C1E-CF04-45C6-BCE6-D2D4D801E553}: NameServer = 213.230.155.94 213.230.130.222
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Programmi\File comuni\EPSON\EBAPI\SAgent2.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Venturi2 Client (Venturi2) - Fourelle Systems, Inc - C:\Program Files\Venturi2\Client\ventc.exe

Come puoi notare non ho fixato la voce:

O4 - Global Startup: Watch.lnk = C:\Programmi\DC Series 1\Console\Watch.exe

indicatami da Sante62 perchè non ho avuto conferma da parte tua.
Per quanto riguarda Hijackthis l'avevo scaricato in una cartella all'interno dei programmi ma quando la richiamavo non si avviava, cioè si apriva una finestra con la dicitura:
C:\Programmi\HijackThis.exe non è un'applica zione di Win32 valida.
L'unica soluzione che ho trovato era di eseguirla direttamente da internet.
Adesso ho cancellato quella cartella ed ho scaricato nuovamente il programma in una nuova cartella dei Documenti; adesso da lì riesco ad avviare tranquillamente HJT.
Sono proprio una frana vero?
Intanto pare che il PC si avii molto più rapidamente di prima e la navigazione in IExplorer è tornata alla normalità.
Probabilmente ci saranno ancora tante cose da mettere a posto ma per adesso sono supersoddisfatto..se non fosse per i tuoi preziosi consigli mi troverei ancora in alto mare.
Grazie ancora!
A presto!

P.S.
Non ho ancora avuto il tempo di presentarmi ma lo farò al più presto..ho scoperto un sito veramente interessante.

[Sante62]

Ciao.

Oltre a quella voce puoi fixare anche queste perchè superflue e contribuiscono a rallentare il sistema operativo.

O4 - HKLM\..\Run: [WatchDog] C:\Programmi\mobile PhoneTools\WatchDog.exe
O4 - HKLM\..\Run: [CTRegRun] C:\WINDOWS\CTRegRun.EXE

O4 - Global Startup: Agenda Calendario per la Mia Edizione Personalizzata di Ulead Photo Express 4.0.lnk = C:\Programmi\Ulead Systems\Ulead Photo Express 4.0 La Mia

O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE

Se qualche programma non dovesse andare, puoi sempre ripristinare la stringa con HJT Selezionando Main Menu -> View the List of Backup.
Quì trovi la lista delle stringhe eliminate, basta spuntare quella che interessa e cliccare su Restore
Ciao.

[bdoriano]

@Sante62:
E' più idoneo utilizzare un programma tipo msconfig o Autoruns o CodeStuff Starter o la funzione apposita di Spybot S&D. Dove puoi disabilitare le voci che non vuoi far partire all'avvio senza cancellare/spostare alcun file.
Se poi scopri che qualcuno di questi programmi è necessario, ad esempio, per far funzionare correttamente la webcam o lo scanner o la cattura delle immagini da fotocamera, ti basta riabilitare la relativa voce disabilitata.