Olimpo Informatico

[monossido]

Ho un problema nell'avvio del programma scansoft pdf creator.
prima dellìistallazione di aggiornamenti del sistema (tipo ps2 ecc..) andava. da un po mi compare il mess errore nel lancio del programma scansoft pdf creator l'applicazione verrà chiusa. Ho provato a disinstallarlo e a rimetterlo ma niente... Sono disperato... il programma mi serve per lavoro.
Help me!!!

Logfile of HijackThis v1.99.1
Scan saved at 10.22.32, on 13/05/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\carpserv.exe
C:\WINDOWS\system32\atiptaxx.exe
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\CPLBBL16.EXE
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\SMART Technologies Inc\SMART Board Software\SMARTBoardTools.exe
C:\Programmi\SMART Technologies Inc\SMART Board Software\Aware.exe
C:\Programmi\SMART Technologies Inc\SMART Board Software\Marker.exe
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\Programmi\SMART Technologies Inc\SMART Board Software\SMARTBoardService.exe
C:\Programmi\SMART Technologies Inc\SMART Board Software\WebServer.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\eMule\emule.exe
C:\Programmi\Windows Live\Messenger\usnsvc.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\QuickTime\QuickTimePlayer.exe
C:\Programmi\File comuni\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\DOCUME~1\Antonino\IMPOST~1\Temp\Rar$EX09.791\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Programmi\SMART Technologies Inc\Notebook Software\NotebookPlugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\CPLBBL16.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Avvio Veloce di WinZip.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O4 - Global Startup: Strumenti di SMART Board.lnk = C:\Programmi\SMART Technologies Inc\SMART Board Software\SMARTBoardTools.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\programmi\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1210528167554
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FILECO~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O23 - Service: Avira AntiVir Personal ? Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal ? Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: SMART Board Service - SMART Technologies Inc. - C:\Programmi\SMART Technologies Inc\SMART Board Software\SMARTBoardService.exe
O23 - Service: SMART Web Server - Unknown owner - C:\Programmi\SMART Technologies Inc\SMART Board Software\WebServer.exe

[chemicalbit]

[monossido]

Ho Windows XP (ho formattato e reistallato il tutto) e ho installato il service pack 2. Prima di formattare non avevo il service pack2 e tutto mi funzionava. A questo punto ho installato pdf creator e da li il messaggio di errore: impossibile avviare scansoft pdf creator. Il programma verrà terminato. Si può solo cliccare su OK oppure su invia segnalazione a microsoft. Non mi da nessun codice di errore o cose del genere in questa finestra. Penso che sia un problema di malware (virus e simili), perchè cercando su google ho trovato esempi simili (con altri programmi) che riconducevano ad un virus, infezioni o simili.
Ho Avira antivirus personal, firewall penso quello standard di windows, spybot. Facendo la scanzione con questi non mi rileva nessun problema.

Spero di aver fornito abbastanza spiegazioni per trovare una possibile risoluzione... sto impazzendo!!!

[bdoriano]

Fai questa scansione con SystemScan e posta il log su FreeFileHosting come indicato qui.

PS: cambio il titolo del thread.

[monossido]

[chemicalbit]

[monossido]

[monossido]

Vi siete dimenticati di me???

Scusate se stresso ma è importante che risolva il priblema al più presto... sono bloccato con il lavoro!!!...

[chemicalbit]

La lettura del log si sytemscan richiede un po' di tempo 8e bisogna essere capaci di farlo, io non posos ad es. )

Nel frattempo se vuoi puoi fare queste pulizie.

• Disabilita il ripristino di sistema.
  
• Pulisci i files temporanei con ATF-Cleaner e/o CCleaner
  
• Fai una scansione cone Norman Malware Cleaner.
  
  • Scarica il programma
    
  • Avvia il pc in modalità provvisoria.
    
  • Avvia Norman Malware Cleaner e fagli fare la scansione completa.
    
  • Alla fine della scansione viene generato un log sul desktop chiamato NFix_2008-MM-gg_hh-mm-ss.log.
  
  
• Riavvia il computer in modalità normale
  
• Segui le istruzioni di questo topic per eseguire combofix.
  
• Riferisci con un nuovo messaggio in questa discussione dell'esito: se ci sono stati problemi particolari, ecc. ecc. E riporta:
  
  • Carica il log di Norman Malware Cleaner su FreeFileHosting come indicato qui e posta il link che ti viene assegnato
    
  • Il log di Combofix generalmente non è molto lungo, quindi postalo direttamente nel messaggio

[monossido]

NFix_2008-05-14_18-31-01.log


log Combofix

ComboFix 08-05-12.1 - Antonino 2008-05-14 20.28.11.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1040.18.238 [GMT 2:00]
Eseguito da: C:\Documents and Settings\Antonino\Desktop\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Creati Da 2008-04-14 al 2008-05-14 )))))))))))))))))))))))))))))))))))
.

2008-05-14 01:48 . 2008-05-14 01:48 <DIR> d-------- C:\Programmi\ScanSoft
2008-05-14 01:48 . 2008-05-14 01:48 <DIR> d-------- C:\Programmi\File comuni\ScanSoft Shared
2008-05-14 01:48 . 2008-05-14 01:48 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\zeon
2008-05-14 01:48 . 2008-05-14 01:48 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\ScanSoft
2008-05-13 21:20 . 2006-12-11 22:12 176,235 --a------ C:\WINDOWS\system32\Primomonnt.dll
2008-05-13 21:19 . 2008-05-13 21:19 <DIR> d-------- C:\WINDOWS\PrimoPDF4
2008-05-13 21:19 . 2008-05-13 21:24 <DIR> d-------- C:\Programmi\activePDF
2008-05-13 02:32 . 2008-05-13 22:31 <DIR> d-------- C:\Documents and Settings\Antonino\Dati applicazioni\ScanSoft
2008-05-13 01:49 . 2008-05-14 20:04 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-05-13 01:49 . 2008-05-13 01:49 1,409 --a------ C:\WINDOWS\QTFont.for
2008-05-13 01:48 . 2008-05-13 23:17 <DIR> d-------- C:\Documents and Settings\Antonino\Dati applicazioni\Apple Computer
2008-05-13 01:47 . 2008-05-13 01:48 <DIR> d-------- C:\Programmi\iTunes
2008-05-13 01:47 . 2008-05-13 01:47 <DIR> d-------- C:\Programmi\iPod
2008-05-13 01:46 . 2008-05-13 01:46 <DIR> d-------- C:\Programmi\Bonjour
2008-05-13 01:44 . 2008-05-13 01:46 <DIR> d-------- C:\Programmi\QuickTime
2008-05-13 01:44 . 2008-05-13 01:47 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Apple Computer
2008-05-13 01:43 . 2008-05-13 01:43 <DIR> d-------- C:\Programmi\Apple Software Update
2008-05-13 01:43 . 2008-02-18 11:16 30,464 --a------ C:\WINDOWS\system32\drivers\usbaapl.sys
2008-05-13 01:41 . 2008-05-13 01:41 <DIR> d-------- C:\Programmi\File comuni\Apple
2008-05-13 01:41 . 2008-05-13 01:41 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Apple
2008-05-13 01:26 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll
2008-05-13 01:24 . 2008-05-13 01:24 <DIR> d-------- C:\Programmi\Microsoft Works
2008-05-13 01:23 . 2008-05-13 01:23 <DIR> d-------- C:\Programmi\MSBuild
2008-05-13 01:13 . 2008-05-13 01:22 <DIR> d-------- C:\WINDOWS\SHELLNEW
2008-05-13 01:10 . 2008-05-13 01:10 <DIR> dr-h----- C:\MSOCache
2008-05-13 01:03 . 2001-08-30 20:41 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2008-05-13 01:03 . 2001-08-30 20:41 12,160 --a------ C:\WINDOWS\system32\dllcache\mouhid.sys
2008-05-13 01:03 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2008-05-13 01:03 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\dllcache\hidusb.sys
2008-05-12 23:33 . 2008-05-12 23:33 <DIR> d-------- C:\Documents and Settings\Administrator\Dati applicazioni\Zeon
2008-05-12 23:21 . 2008-03-17 19:23 39,808 --a------ C:\WINDOWS\system32\drivers\VIRAGTLT.SYS
2008-05-12 23:20 . 2008-05-14 01:42 <DIR> d-------- C:\VEXPLITE
2008-05-12 20:53 . 2008-05-12 20:53 <DIR> d-------- C:\Programmi\Panda Security
2008-05-12 16:26 . 2008-05-12 16:26 <DIR> d-------- C:\Programmi\Microsoft CAPICOM 2.1.0.2
2008-05-12 16:25 . 2008-05-12 16:25 <DIR> d-------- C:\Programmi\MSXML 4.0
2008-05-12 16:15 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-05-12 16:15 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-05-12 16:15 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-05-12 15:15 . 2008-03-01 14:58 6,066,176 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2008-05-12 15:15 . 2007-04-17 11:32 2,455,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dat
2008-05-12 15:15 . 2007-03-08 07:11 1,032,192 --------- C:\WINDOWS\system32\dllcache\ieframe.dll.mui
2008-05-12 15:15 . 2008-03-01 14:58 459,264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2008-05-12 15:15 . 2008-03-01 14:58 383,488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2008-05-12 15:15 . 2008-03-01 14:58 267,776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2008-05-12 15:15 . 2008-03-01 14:58 63,488 --------- C:\WINDOWS\system32\dllcache\icardie.dll
2008-05-12 15:15 . 2008-03-01 14:58 52,224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2008-05-12 15:15 . 2008-02-22 12:00 13,824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2008-05-12 15:12 . 2008-05-12 15:18 <DIR> d-------- C:\WINDOWS\system32\it-it
2008-05-12 14:59 . 2007-08-13 18:54 33,792 --a------ C:\WINDOWS\system32\dllcache\custsat.dll
2008-05-12 01:10 . 2008-05-12 01:09 691,545 --a------ C:\WINDOWS\unins000.exe
2008-05-12 01:10 . 2008-05-12 01:10 2,554 --a------ C:\WINDOWS\unins000.dat
2008-05-12 01:03 . 2008-05-12 07:13 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2008-05-12 01:02 . 2008-05-12 01:09 <DIR> d-------- C:\Programmi\Spybot - Search & Destroy
2008-05-12 00:47 . 2008-05-12 00:47 <DIR> d-------- C:\Documents and Settings\Antonino\Dati applicazioni\vlc
2008-05-12 00:45 . 2008-05-12 00:45 <DIR> d-------- C:\Programmi\VideoLAN
2008-05-12 00:23 . 2008-05-12 00:23 <DIR> d-------- C:\Programmi\Soliddocuments
2008-05-12 00:17 . 2008-05-12 00:17 <DIR> d-------- C:\Documents and Settings\Antonino\Dati applicazioni\Zeon
2008-05-12 00:16 . 2008-05-12 00:16 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\InstallShield
2008-05-12 00:15 . 2008-05-12 00:15 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2008-05-12 00:11 . 2006-08-21 11:14 128,896 --------- C:\WINDOWS\system32\dllcache\fltmgr.sys
2008-05-12 00:11 . 2006-08-21 11:14 23,040 --------- C:\WINDOWS\system32\dllcache\fltmc.exe
2008-05-12 00:11 . 2006-08-21 14:26 16,896 --------- C:\WINDOWS\system32\dllcache\fltlib.dll
2008-05-12 00:02 . 2008-05-12 00:02 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\eXPert PDF 5
2008-05-11 23:58 . 2007-07-09 15:09 584,192 --------- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-05-11 23:36 . 2008-05-11 23:36 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\SMART Technologies Inc
2008-05-11 23:34 . 2008-05-11 23:34 <DIR> d-------- C:\Documents and Settings\Antonino\Dati applicazioni\SMART Technologies Inc
2008-05-11 23:23 . 2003-02-14 19:14 110,592 --a------ C:\WINDOWS\system32\tsccvid.dll
2008-05-11 23:21 . 2008-05-11 23:21 <DIR> d-------- C:\Programmi\SMART Technologies Inc
2008-05-11 23:21 . 2008-05-11 23:23 <DIR> d-------- C:\Programmi\File comuni\SMART Technologies Inc
2008-05-11 22:51 . 2008-05-13 01:43 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-05-11 22:51 . 2008-05-11 23:49 <DIR> d-------- C:\Documents and Settings\Antonino\Contacts
2008-05-11 22:43 . 2004-08-20 00:39 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-05-11 22:43 . 2004-08-04 07:58 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2008-05-11 22:43 . 2004-08-04 07:58 15,104 --a------ C:\WINDOWS\system32\dllcache\usbscan.sys
2008-05-11 22:43 . 2001-08-30 23:07 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-05-11 22:37 . 2008-05-14 00:55 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Microsoft Help
2008-05-11 22:35 . 2008-05-11 22:51 <DIR> d-------- C:\Programmi\Windows Live
2008-05-11 22:35 . 2008-05-11 22:50 <DIR> d--hsc--- C:\Programmi\File comuni\WindowsLiveInstaller
2008-05-11 22:35 . 2008-05-11 22:46 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\WLInstaller
2008-05-11 22:17 . 2008-05-13 22:39 <DIR> d-------- C:\Programmi\eMule
2008-05-11 21:57 . 2008-05-11 21:57 <DIR> d-------- C:\Programmi\File comuni\Ahead
2008-05-11 21:57 . 2008-05-11 21:57 <DIR> d-------- C:\Programmi\Ahead
2008-05-11 21:57 . 2001-07-06 13:41 569,344 --a------ C:\WINDOWS\system32\imagr5.dll
2008-05-11 21:57 . 2001-07-06 11:44 544,768 --a------ C:\WINDOWS\system32\imagx5.dll
2008-05-11 21:57 . 2001-07-06 17:24 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll
2008-05-11 21:57 . 2001-07-09 10:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2008-05-11 21:57 . 2001-06-26 07:15 38,912 --a------ C:\WINDOWS\system32\picn20.dll
2008-05-11 21:42 . 2003-02-28 18:26 139,536 --a------ C:\WINDOWS\system32\javaee.dll
2008-05-11 21:32 . 2008-05-11 21:32 <DIR> d-------- C:\Programmi\Avira
2008-05-11 21:32 . 2008-05-11 21:32 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Avira
2008-05-11 21:17 . 2008-05-11 21:17 <DIR> d-------- C:\Documents and Settings\LocalService\Menu Avvio
2008-05-11 20:52 . 2008-05-11 21:18 316,640 --a------ C:\WINDOWS\WMSysPr9.prx
2008-05-11 20:50 . 2008-05-11 20:50 <DIR> d-------- C:\WINDOWS\provisioning
2008-05-11 20:50 . 2008-05-11 20:50 <DIR> d-------- C:\WINDOWS\peernet
2008-05-11 20:17 . 2004-08-19 15:39 11,776 --------- C:\WINDOWS\system32\spnpinst.exe
2008-05-11 20:17 . 2004-08-02 14:20 7,208 --------- C:\WINDOWS\system32\secupd.sig
2008-05-11 20:17 . 2004-08-02 14:20 4,569 --------- C:\WINDOWS\system32\secupd.dat
2008-05-11 19:54 . 2006-09-06 17:43 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2008-05-11 19:52 . 2008-05-11 19:52 <DIR> d-------- C:\WINDOWS\system32\bits
2008-05-11 19:52 . 2004-08-20 00:39 351,232 --a------ C:\WINDOWS\system32\winhttp.dll
2008-05-11 19:52 . 2004-08-20 00:39 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2008-05-11 19:52 . 2004-08-20 00:39 8,192 --------- C:\WINDOWS\system32\bitsprx2.dll
2008-05-11 19:52 . 2004-08-20 00:39 7,168 --------- C:\WINDOWS\system32\bitsprx3.dll
2008-05-11 19:50 . 2007-07-30 19:19 549,720 --a------ C:\WINDOWS\system32\wuapi.dll
2008-05-11 19:50 . 2007-07-30 19:19 325,976 --a------ C:\WINDOWS\system32\wucltui.dll
2008-05-11 19:50 . 2007-07-30 19:19 216,408 --a------ C:\WINDOWS\system32\wuaucpl.cpl
2008-05-11 19:50 . 2007-07-30 19:19 43,352 --a------ C:\WINDOWS\system32\wups2.dll
2008-05-11 19:50 . 2007-07-30 19:19 38,232 --a------ C:\WINDOWS\system32\wucltui.dll.mui
2008-05-11 19:50 . 2007-07-30 19:18 33,624 --a------ C:\WINDOWS\system32\wups.dll
2008-05-11 19:50 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuaucpl.cpl.mui
2008-05-11 19:50 . 2007-07-30 19:20 30,040 --a------ C:\WINDOWS\system32\wuapi.dll.mui
2008-05-11 19:50 . 2007-07-30 19:18 21,336 --a------ C:\WINDOWS\system32\wuaueng.dll.mui
2008-05-11 19:43 . 2008-05-11 19:43 <DIR> d--hs---- C:\Documents and Settings\Antonino\UserData
2008-05-11 19:41 . 2008-05-11 19:41 <DIR> d-------- C:\Programmi\Axon Data
2008-05-11 19:03 . 2004-08-20 00:39 97,280 --a------ C:\WINDOWS\system32\dpcdll.dll
2008-05-11 19:01 . 2004-08-20 00:39 1,179,648 --a------ C:\WINDOWS\system32\d3d8.dll
2008-05-11 19:00 . 2007-04-18 18:14 2,854,400 --a------ C:\WINDOWS\system32\msi.dll
2008-05-11 18:59 . 2004-08-20 00:38 2,973,696 --a------ C:\WINDOWS\system32\wmploc.dll
2008-05-11 18:56 . 2002-06-14 18:46 19,274 --a------ C:\WINDOWS\001201_.tmp
2008-05-11 18:46 . 2004-08-20 00:39 338,944 --a------ C:\WINDOWS\system32\zipfldr.dll
2008-05-11 18:45 . 2004-08-20 00:39 280,576 --a------ C:\WINDOWS\system32\mstask.dll
2008-05-11 18:45 . 2004-08-20 00:39 193,024 --a------ C:\WINDOWS\system32\schedsvc.dll
2008-05-11 18:45 . 2004-08-20 00:39 113,152 --a------ C:\WINDOWS\system32\netdde.exe
2008-05-11 18:45 . 2004-08-20 00:39 18,944 --a------ C:\WINDOWS\system32\nddenb32.dll
2008-05-11 18:45 . 2004-08-20 00:39 12,288 --a------ C:\WINDOWS\system32\mstinit.exe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-05-11 22:13 --------- d-----w C:\Programmi\File comuni\InstallShield
2008-05-11 17:43 --------- d-----w C:\Programmi\File comuni\Adobe
2008-05-11 17:01 4 --sha-w C:\WINDOWS\Fonts\ARIAL.TCX
2008-03-25 04:51 621,344 ----a-w C:\WINDOWS\system32\mswstr10.dll
2008-03-25 04:51 621,344 ------w C:\WINDOWS\system32\dllcache\mswstr10.dll
2008-03-25 04:51 183,072 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-25 04:51 183,072 ------w C:\WINDOWS\system32\dllcache\msjint40.dll
2008-03-20 08:06 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-20 08:06 1,845,248 ------w C:\WINDOWS\system32\dllcache\win32k.sys
2008-03-01 16:28 3,591,680 ------w C:\WINDOWS\system32\dllcache\mshtml.dll
2008-02-29 08:57 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
2008-02-29 08:57 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
2008-02-20 06:50 282,624 ----a-w C:\WINDOWS\system32\gdi32.dll
2008-02-20 06:50 282,624 ------w C:\WINDOWS\system32\dllcache\gdi32.dll
2008-02-20 05:33 45,568 ----a-w C:\WINDOWS\system32\dnsrslvr.dll
2008-02-20 05:33 45,568 ------w C:\WINDOWS\system32\dllcache\dnsrslvr.dll
2008-02-20 05:33 148,992 ------w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-02-16 09:01 474,624 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
2008-02-16 09:01 151,552 ------w C:\WINDOWS\system32\dllcache\cdfview.dll
2008-02-16 09:01 1,495,040 ------w C:\WINDOWS\system32\dllcache\shdocvw.dll
2008-02-16 09:01 1,056,256 ------w C:\WINDOWS\system32\dllcache\danim.dll
2008-02-16 09:01 1,023,488 ------w C:\WINDOWS\system32\dllcache\browseui.dll
2008-02-15 05:44 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* i valori vuoti & legittimi/default non sono visualizzati.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 00:39 15360]
"MsnMsgr"="C:\Programmi\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CARPService"="carpserv.exe" [2002-07-09 23:37 4608 C:\WINDOWS\system32\carpserv.exe]
"LaunchApp"="Alaunch" []
"ATIModeChange"="Ati2mdxx.exe" [2001-09-05 08:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe]
"AtiPTA"="atiptaxx.exe" [2002-03-13 09:30 286720 C:\WINDOWS\system32\atiptaxx.exe]
"SynTPLpr"="C:\Programmi\Synaptics\SynTP\SynTPLpr.exe" [2002-06-03 13:17 126976]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2002-06-03 13:15 540672]
"LManager"="C:\PROGRA~1\LAUNCH~1\CPLBBL16.EXE" [2002-08-14 06:29 147456]
"avgnt"="C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 10:50 155648]
"ISUSPM Startup"="C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-04-17 12:41 196608]
"ISUSScheduler"="C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" [2004-04-13 06:07 69632]
"GrooveMonitor"="C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016]
"QuickTime Task"="C:\Programmi\QuickTime\qttask.exe" [2008-03-28 23:37 413696]
"iTunesHelper"="C:\Programmi\iTunes\iTunesHelper.exe" [2008-03-30 10:36 267048]
"SSBkgdUpdate"="C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" [2003-09-30 00:14 155648]
"PDF4 Registry Controller"="C:\Programmi\ScanSoft\PDF Professional 4.0\\RegistryController.exe" [2006-08-22 19:09 40960]
"ScanSoft PDF Professional 4-reminder"="C:\Programmi\ScanSoft\PDF Professional 4.0\Ereg\ereg.exe" [2006-04-20 13:45 1404928]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 00:39 15360]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Avvio Veloce di WinZip.lnk - C:\Programmi\WinZip\WZQKPICK.EXE [2008-05-11 21:53:39 106560]
Strumenti di SMART Board.lnk - C:\Programmi\SMART Technologies Inc\SMART Board Software\SMARTBoardTools.exe [2007-05-03 11:30:38 4048400]

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"C:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"C:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"12001:UDP"= 12001:UDP:SMART WebServer Handshake Multicast Port

R2 ousbehci;OrangeWare USB Enhanced Host Controller Service;C:\WINDOWS\system32\Drivers\ousbehci.sys [2004-08-01 08:09]
R2 SMART Web Server;SMART Web Server;"C:\Programmi\SMART Technologies Inc\SMART Board Software\WebServer.exe" [2007-04-19 06:42]
R3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;C:\WINDOWS\system32\DRIVERS\ousb2hub.sys [2004-08-01 08:09]
R3 WBMS;Winbond Memory Stick Storage (MS) Device Driver;C:\WINDOWS\system32\Drivers\WBMS.SYS [2002-03-02 02:20]
R3 WBSD;Winbond Secure Digital Storage (SD/MMC) Device Driver;C:\WINDOWS\system32\Drivers\WBSD.SYS [2002-01-29 03:05]
S3 PRISM;Intersil PRISM Wireless LAN Driver;C:\WINDOWS\system32\DRIVERS\PRISMNDS.sys [2002-01-17 00:17]

*Newly Created Service* - CATCHME
.
Contenuto della cartella 'Scheduled Tasks'
"2008-05-13 12:43:16 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Programmi\Apple Software Update\SoftwareUpdate.exe
"2002-08-22 14:37:48 C:\WINDOWS\Tasks\Symantec NetDetect.job"
- C:\Programmi\Symantec\LiveUpdate\NDETECT.EXE
.
**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-14 20:28:54
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
Ora fine scansione: 2008-05-14 20.30.34
ComboFix-quarantined-files.txt 2008-05-14 18:30:30
ComboFix2.txt 2008-05-14 18:18:25

11 Directory 15,975,800,832 byte disponibili
13 Directory 15,964,106,752 byte disponibili

233 --- E O F --- 2008-05-13 22:55:15

[bdoriano]

Il log di combofix non evidenzia infezioni di sorta.
Potrebbe essere un problema di incompatibilità software tra la versione di ScanSoft che hai installato e XP SP2.
Dovresti provare a vedere sul sito della ScanSoft se esistono aggiornamenti che risolvono il problema.