Precedente :: Successivo |
Autore |
Messaggio |
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 11 Giu 2013 09:16 Oggetto: il file conteneva un virus ed è stato eliminato [RISOLTO] |
|
|
Ciao a tutti, ho guardato nei vari post precedenti ma non ho trovato la soluzione al mio problema.
Da qualche giorno non riesco a scaricare nulla con internet Explorer, e nemmeno con firefox, perché alla fine del download esce la scritta "il file conteneva un virus ed è stato eliminato" e lo cancella.
Ho provato a fare varie scansioni ma nessuna ha risolto il problema!
come antivirus uso AVIRA e uso il firewall di Windows.
ho fatto scansioni con SPYBOT, con MALWAREBYTES ANTI-MALWARE e con EUSING FREE REGISTRY CLEANER
La versione di Explorer è la 10.
uso WINDOWS7
non so quali altre informazioni possano servirvi
Ringrazio in anticipo chi mi aiuterà |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 11 Giu 2013 16:38 Oggetto: |
|
|
Ciao.
Scarica Adwcleaner sul desktop:
link
N.B:
Hai Avira come antivirus, e detto software utilizza ASK Toolbar come parte della sua sicurezza del web.
Se eliminata, AntiVir WebGuard potrebbe non funzionare più correttamente.
Quindi:
Apri Adwcleaner e clicca sul ? in alto a sinistra.
Clicca su opzioni.
Metti la spunta su :
DisableAskDetection
Clicca OK.
Clicca sul pulsante "Elimina".
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà, e uscirà il log con le eliminazioni.
Postalo qui.
Poi:
Fai questa scansione con OTL.
http://forum.zeusnews.com/viewtopic.php?t=51382
Posta i 2 log con Wikisend. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 11 Giu 2013 18:26 Oggetto: |
|
|
Ciao.
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice: (ti raccomando di copiarlo-incollarlo tutto)
Codice: | :OTL
SRV - (SoftwareUpd) -- C:\Users\Utente\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe (SoftwareUpdService)
SRV - (ServUpdater) -- C:\Users\Utente\AppData\Local\ServUpdater\ServiceUpd.exe (ServiceUpd)
O33 - MountPoints2\{04d84a7e-2c84-11e2-82f9-8a5faf9939dc}\Shell - "" = AutoRun
O33 - MountPoints2\{04d84a7e-2c84-11e2-82f9-8a5faf9939dc}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0c04cb96-18e8-11e2-b3e2-d22f320b0c05}\Shell - "" = AutoRun
O33 - MountPoints2\{0c04cb96-18e8-11e2-b3e2-d22f320b0c05}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0e318833-19a0-11e2-8a34-a68ee44c3d6f}\Shell - "" = AutoRun
O33 - MountPoints2\{0e318833-19a0-11e2-8a34-a68ee44c3d6f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f3960ee-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f3960ee-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f3960f1-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f3960f1-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f3960f9-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f3960f9-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f396102-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f396102-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f396109-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f396109-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{0f396116-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f396116-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{0f396119-f31e-11e1-8f8b-e6d1aac6bb48}\Shell - "" = AutoRun
O33 - MountPoints2\{0f396119-f31e-11e1-8f8b-e6d1aac6bb48}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{136199ae-93a0-11e2-9623-d6ce3881ca67}\Shell - "" = AutoRun
O33 - MountPoints2\{136199ae-93a0-11e2-9623-d6ce3881ca67}\Shell\AutoRun\command - "" = H:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{138c02e6-05fd-11e2-a509-d5c8a84f9263}\Shell - "" = AutoRun
O33 - MountPoints2\{138c02e6-05fd-11e2-a509-d5c8a84f9263}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{138c0306-05fd-11e2-a509-d5c8a84f9263}\Shell - "" = AutoRun
O33 - MountPoints2\{138c0306-05fd-11e2-a509-d5c8a84f9263}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{138c030c-05fd-11e2-a509-d5c8a84f9263}\Shell - "" = AutoRun
O33 - MountPoints2\{138c030c-05fd-11e2-a509-d5c8a84f9263}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{138c0355-05fd-11e2-a509-d5c8a84f9263}\Shell - "" = AutoRun
O33 - MountPoints2\{138c0355-05fd-11e2-a509-d5c8a84f9263}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{147abbfc-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abbfc-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{147abc09-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc09-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{147abc0c-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc0c-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{147abc11-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc11-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{147abc15-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc15-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{147abc21-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc21-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc27-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc27-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc2b-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc2b-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc2e-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc2e-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc32-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc32-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc36-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc36-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc38-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc38-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc3a-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc3a-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{147abc3d-128d-11e2-b550-9beb4e0ce960}\Shell - "" = AutoRun
O33 - MountPoints2\{147abc3d-128d-11e2-b550-9beb4e0ce960}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{14b70be2-0d0d-11e2-9009-9ca43efd4153}\Shell - "" = AutoRun
O33 - MountPoints2\{14b70be2-0d0d-11e2-9009-9ca43efd4153}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{1a5352e8-7be1-11e2-8243-9dffd4342424}\Shell - "" = AutoRun
O33 - MountPoints2\{1a5352e8-7be1-11e2-8243-9dffd4342424}\Shell\AutoRun\command - "" = H:\AutoRun.exe -- [2011/03/19 01:27:22 | 000,148,320 | R--- | M] ()
O33 - MountPoints2\{1bae26c9-12a1-11e2-8d06-962be308d128}\Shell - "" = AutoRun
O33 - MountPoints2\{1bae26c9-12a1-11e2-8d06-962be308d128}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{242cb9b0-21dc-11e2-beeb-d18ef5e5a761}\Shell - "" = AutoRun
O33 - MountPoints2\{242cb9b0-21dc-11e2-beeb-d18ef5e5a761}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{252effac-0864-11e2-a245-84a0a874608c}\Shell - "" = AutoRun
O33 - MountPoints2\{252effac-0864-11e2-a245-84a0a874608c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2696b8d4-1e56-11e2-b80d-e0661f5e786a}\Shell - "" = AutoRun
O33 - MountPoints2\{2696b8d4-1e56-11e2-b80d-e0661f5e786a}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{2696b8e0-1e56-11e2-b80d-e0661f5e786a}\Shell - "" = AutoRun
O33 - MountPoints2\{2696b8e0-1e56-11e2-b80d-e0661f5e786a}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{28ffbe8a-5ed0-11e2-acb4-e40e304be3c6}\Shell - "" = AutoRun
O33 - MountPoints2\{28ffbe8a-5ed0-11e2-acb4-e40e304be3c6}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb15fbd-f255-11e1-bf3a-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb15fbd-f255-11e1-bf3a-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb15fca-f255-11e1-bf3a-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb15fca-f255-11e1-bf3a-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb15fce-f255-11e1-bf3a-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb15fce-f255-11e1-bf3a-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb15fd0-f255-11e1-bf3a-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb15fd0-f255-11e1-bf3a-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb15fd5-f255-11e1-bf3a-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb15fd5-f255-11e1-bf3a-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb1639c-f255-11e1-bf3a-e8d137c84143}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb1639c-f255-11e1-bf3a-e8d137c84143}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{2eb163aa-f255-11e1-bf3a-e8d137c84143}\Shell - "" = AutoRun
O33 - MountPoints2\{2eb163aa-f255-11e1-bf3a-e8d137c84143}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{39428757-7ed2-11e1-8bd3-bdcd1f1f4b13}\Shell - "" = AutoRun
O33 - MountPoints2\{39428757-7ed2-11e1-8bd3-bdcd1f1f4b13}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{394287c7-7ed2-11e1-8bd3-001e101f8ed0}\Shell - "" = AutoRun
O33 - MountPoints2\{394287c7-7ed2-11e1-8bd3-001e101f8ed0}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{39b6d1e7-4b28-11e2-99a2-c7760f06d92b}\Shell - "" = AutoRun
O33 - MountPoints2\{39b6d1e7-4b28-11e2-99a2-c7760f06d92b}\Shell\AutoRun\command - "" = H:\AutoRun.exe -- [2011/03/19 01:27:22 | 000,148,320 | R--- | M] ()
O33 - MountPoints2\{3e46f42d-7a53-11da-88ca-0018f35ac8a9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e46f42d-7a53-11da-88ca-0018f35ac8a9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{3e46f4c4-7a53-11da-88ca-0018f35ac8a9}\Shell - "" = AutoRun
O33 - MountPoints2\{3e46f4c4-7a53-11da-88ca-0018f35ac8a9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{417f5401-644f-11e2-860b-95e09c9aef2e}\Shell - "" = AutoRun
O33 - MountPoints2\{417f5401-644f-11e2-860b-95e09c9aef2e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{428368eb-4029-11e2-bac1-d98f2ec5ed24}\Shell - "" = AutoRun
O33 - MountPoints2\{428368eb-4029-11e2-bac1-d98f2ec5ed24}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{4348c245-1036-11e2-8396-fc626dc2e5b1}\Shell - "" = AutoRun
O33 - MountPoints2\{4348c245-1036-11e2-8396-fc626dc2e5b1}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{47edc576-1d1a-11e2-8cf1-dda7b534a42a}\Shell - "" = AutoRun
O33 - MountPoints2\{47edc576-1d1a-11e2-8cf1-dda7b534a42a}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{499599c1-1cd6-11e2-9559-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{499599c1-1cd6-11e2-9559-806e6f6e6963}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{49959a38-1cd6-11e2-9559-001e101f79c9}\Shell - "" = AutoRun
O33 - MountPoints2\{49959a38-1cd6-11e2-9559-001e101f79c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{49959a42-1cd6-11e2-9559-001e101f79c9}\Shell - "" = AutoRun
O33 - MountPoints2\{49959a42-1cd6-11e2-9559-001e101f79c9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{52c45030-ecf7-11e1-9f60-b9d2403dfa10}\Shell - "" = AutoRun
O33 - MountPoints2\{52c45030-ecf7-11e1-9f60-b9d2403dfa10}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{52c45036-ecf7-11e1-9f60-cecdb1067862}\Shell - "" = AutoRun
O33 - MountPoints2\{52c45036-ecf7-11e1-9f60-cecdb1067862}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{52c4503d-ecf7-11e1-9f60-cecdb1067862}\Shell - "" = AutoRun
O33 - MountPoints2\{52c4503d-ecf7-11e1-9f60-cecdb1067862}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{54bc6ef6-7986-11e2-b070-e80399323161}\Shell - "" = AutoRun
O33 - MountPoints2\{54bc6ef6-7986-11e2-b070-e80399323161}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{58354fb0-4bf2-11e2-8b2f-abf87eab3f11}\Shell - "" = AutoRun
O33 - MountPoints2\{58354fb0-4bf2-11e2-8b2f-abf87eab3f11}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{591bf706-1356-11e2-b750-c8c5a13deb60}\Shell - "" = AutoRun
O33 - MountPoints2\{591bf706-1356-11e2-b750-c8c5a13deb60}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5a0af754-3d2a-11e2-9590-dcf5888760a9}\Shell - "" = AutoRun
O33 - MountPoints2\{5a0af754-3d2a-11e2-9590-dcf5888760a9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5ba592df-2fa8-11e2-8a9b-87bce89a4d1e}\Shell - "" = AutoRun
O33 - MountPoints2\{5ba592df-2fa8-11e2-8a9b-87bce89a4d1e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5ba592ff-2fa8-11e2-8a9b-87bce89a4d1e}\Shell - "" = AutoRun
O33 - MountPoints2\{5ba592ff-2fa8-11e2-8a9b-87bce89a4d1e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5d1801b1-65e1-11e2-8cb0-a01cb82be729}\Shell - "" = AutoRun
O33 - MountPoints2\{5d1801b1-65e1-11e2-8cb0-a01cb82be729}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{5e3354ca-4740-11e2-ba91-8008f2d39120}\Shell - "" = AutoRun
O33 - MountPoints2\{5e3354ca-4740-11e2-ba91-8008f2d39120}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{5e59c8c8-39df-11e2-a312-ce4ef775891f}\Shell - "" = AutoRun
O33 - MountPoints2\{5e59c8c8-39df-11e2-a312-ce4ef775891f}\Shell\AutoRun\command - "" = F:\Setup.exe
O33 - MountPoints2\{5f00eebd-66aa-11e2-830f-d32561209661}\Shell - "" = AutoRun
O33 - MountPoints2\{5f00eebd-66aa-11e2-830f-d32561209661}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{60af83f4-f18c-11e1-b047-a602074a2312}\Shell - "" = AutoRun
O33 - MountPoints2\{60af83f4-f18c-11e1-b047-a602074a2312}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{60af83fc-f18c-11e1-b047-a602074a2312}\Shell - "" = AutoRun
O33 - MountPoints2\{60af83fc-f18c-11e1-b047-a602074a2312}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{60af840b-f18c-11e1-b047-c14f2f980e45}\Shell - "" = AutoRun
O33 - MountPoints2\{60af840b-f18c-11e1-b047-c14f2f980e45}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{60af843e-f18c-11e1-b047-c14f2f980e45}\Shell - "" = AutoRun
O33 - MountPoints2\{60af843e-f18c-11e1-b047-c14f2f980e45}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{6262a6c8-ee67-11e1-8ab2-8c97222ac224}\Shell - "" = AutoRun
O33 - MountPoints2\{6262a6c8-ee67-11e1-8ab2-8c97222ac224}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{6431058d-0c43-11e2-95dc-d75c4f8cd467}\Shell - "" = AutoRun
O33 - MountPoints2\{6431058d-0c43-11e2-95dc-d75c4f8cd467}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{66971ee5-3869-11e2-b342-92cc1b683bb1}\Shell - "" = AutoRun
O33 - MountPoints2\{66971ee5-3869-11e2-b342-92cc1b683bb1}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{71648314-6130-11e1-a76e-0018f35ac8a9}\Shell - "" = AutoRun
O33 - MountPoints2\{71648314-6130-11e1-a76e-0018f35ac8a9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{75320a6b-09e8-11e2-8f21-eef963ad3b6c}\Shell - "" = AutoRun
O33 - MountPoints2\{75320a6b-09e8-11e2-8f21-eef963ad3b6c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7545719c-ecd5-11e1-8c7a-e9732fdb6315}\Shell - "" = AutoRun
O33 - MountPoints2\{7545719c-ecd5-11e1-8c7a-e9732fdb6315}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{754571b5-ecd5-11e1-8c7a-a97d41ff1150}\Shell - "" = AutoRun
O33 - MountPoints2\{754571b5-ecd5-11e1-8c7a-a97d41ff1150}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{755d4ad7-0b7a-11e2-8a0b-b5bb7d52a1a7}\Shell - "" = AutoRun
O33 - MountPoints2\{755d4ad7-0b7a-11e2-8a0b-b5bb7d52a1a7}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{793bad6f-61f3-11e2-9a44-b7b790ff863a}\Shell - "" = AutoRun
O33 - MountPoints2\{793bad6f-61f3-11e2-9a44-b7b790ff863a}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7979ff05-2895-11e2-8557-d10b7c75d56f}\Shell - "" = AutoRun
O33 - MountPoints2\{7979ff05-2895-11e2-8557-d10b7c75d56f}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7979ff15-2895-11e2-8557-d10b7c75d56f}\Shell - "" = AutoRun
O33 - MountPoints2\{7979ff15-2895-11e2-8557-d10b7c75d56f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7979ff1a-2895-11e2-8557-d10b7c75d56f}\Shell - "" = AutoRun
O33 - MountPoints2\{7979ff1a-2895-11e2-8557-d10b7c75d56f}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7b0c85e9-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c85e9-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7b0c85f9-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c85f9-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7b0c8604-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c8604-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7b0c8607-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c8607-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7b0c860a-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c860a-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7b0c860c-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c860c-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b0c8613-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c8613-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b0c8619-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c8619-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7b0c861e-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c861e-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{7b0c8668-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c8668-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7b0c866b-06c3-11e2-9eb4-8e8b60e94865}\Shell - "" = AutoRun
O33 - MountPoints2\{7b0c866b-06c3-11e2-9eb4-8e8b60e94865}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7be18888-3784-11e2-904a-fddd88cf9b61}\Shell - "" = AutoRun
O33 - MountPoints2\{7be18888-3784-11e2-904a-fddd88cf9b61}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7be188bb-3784-11e2-904a-fddd88cf9b61}\Shell - "" = AutoRun
O33 - MountPoints2\{7be188bb-3784-11e2-904a-fddd88cf9b61}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7f58de55-2a28-11e2-8a09-e4284dd08662}\Shell - "" = AutoRun
O33 - MountPoints2\{7f58de55-2a28-11e2-8a09-e4284dd08662}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{7f58de5b-2a28-11e2-8a09-e4284dd08662}\Shell - "" = AutoRun
O33 - MountPoints2\{7f58de5b-2a28-11e2-8a09-e4284dd08662}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8002abe7-1bfa-11e2-8c62-d9c1d89ee1b5}\Shell - "" = AutoRun
O33 - MountPoints2\{8002abe7-1bfa-11e2-8c62-d9c1d89ee1b5}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{80c4c9fb-1c52-11e2-98c7-8510f229c41e}\Shell - "" = AutoRun
O33 - MountPoints2\{80c4c9fb-1c52-11e2-98c7-8510f229c41e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{83d06693-2edf-11e2-986a-d4979886e7c2}\Shell - "" = AutoRun
O33 - MountPoints2\{83d06693-2edf-11e2-986a-d4979886e7c2}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{86f12bf5-1cc4-11e2-8c8e-f23d71c13e24}\Shell - "" = AutoRun
O33 - MountPoints2\{86f12bf5-1cc4-11e2-8c8e-f23d71c13e24}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8724745f-ab23-11e1-943d-fb972466be59}\Shell - "" = AutoRun
O33 - MountPoints2\{8724745f-ab23-11e1-943d-fb972466be59}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{891aa91a-44e0-11e2-b047-fc6f494cb05e}\Shell - "" = AutoRun
O33 - MountPoints2\{891aa91a-44e0-11e2-b047-fc6f494cb05e}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8a159059-11c3-11e2-84d5-9e4eadca1052}\Shell - "" = AutoRun
O33 - MountPoints2\{8a159059-11c3-11e2-84d5-9e4eadca1052}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8b8115d1-7247-11e1-ace2-d3e8933482cd}\Shell - "" = AutoRun
O33 - MountPoints2\{8b8115d1-7247-11e1-ace2-d3e8933482cd}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{8d1011f5-6a98-11e2-a4e0-f60b58944863}\Shell - "" = AutoRun
O33 - MountPoints2\{8d1011f5-6a98-11e2-a4e0-f60b58944863}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{8e0b47cd-2af1-11e2-9d42-e536ed11932c}\Shell - "" = AutoRun
O33 - MountPoints2\{8e0b47cd-2af1-11e2-9d42-e536ed11932c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8e0b47f4-2af1-11e2-9d42-e536ed11932c}\Shell - "" = AutoRun
O33 - MountPoints2\{8e0b47f4-2af1-11e2-9d42-e536ed11932c}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{8e0b4803-2af1-11e2-9d42-e536ed11932c}\Shell - "" = AutoRun
O33 - MountPoints2\{8e0b4803-2af1-11e2-9d42-e536ed11932c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{8e177eb5-32cd-11e2-9c29-ce8faa3a9660}\Shell - "" = AutoRun
O33 - MountPoints2\{8e177eb5-32cd-11e2-9c29-ce8faa3a9660}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{95117a13-355c-11e2-ab1b-bf20c62a5ad7}\Shell - "" = AutoRun
O33 - MountPoints2\{95117a13-355c-11e2-ab1b-bf20c62a5ad7}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{96d2754b-0e9f-11e2-8a28-ba12da258e1d}\Shell - "" = AutoRun
O33 - MountPoints2\{96d2754b-0e9f-11e2-8a28-ba12da258e1d}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{96d27558-0e9f-11e2-8a28-ba12da258e1d}\Shell - "" = AutoRun
O33 - MountPoints2\{96d27558-0e9f-11e2-8a28-ba12da258e1d}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{97826262-9761-11e2-a7d8-b38ca58dbb66}\Shell - "" = AutoRun
O33 - MountPoints2\{97826262-9761-11e2-a7d8-b38ca58dbb66}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{97fea30b-2703-11e2-9319-f2d739c91569}\Shell - "" = AutoRun
O33 - MountPoints2\{97fea30b-2703-11e2-9319-f2d739c91569}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{97fea349-2703-11e2-9319-f2d739c91569}\Shell - "" = AutoRun
O33 - MountPoints2\{97fea349-2703-11e2-9319-f2d739c91569}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{9d852d0d-5c73-11e2-80ef-918e7fd72a6a}\Shell - "" = AutoRun
O33 - MountPoints2\{9d852d0d-5c73-11e2-80ef-918e7fd72a6a}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a00ed69d-24a8-11e2-a45c-dabcb48e921f}\Shell - "" = AutoRun
O33 - MountPoints2\{a00ed69d-24a8-11e2-a45c-dabcb48e921f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a00ed6ab-24a8-11e2-a45c-dabcb48e921f}\Shell - "" = AutoRun
O33 - MountPoints2\{a00ed6ab-24a8-11e2-a45c-dabcb48e921f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a7beeb83-12a3-11e2-bd29-001e101f1ed9}\Shell - "" = AutoRun
O33 - MountPoints2\{a7beeb83-12a3-11e2-bd29-001e101f1ed9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a7beeb87-12a3-11e2-bd29-001e101f1ed9}\Shell - "" = AutoRun
O33 - MountPoints2\{a7beeb87-12a3-11e2-bd29-001e101f1ed9}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{a92213e8-3b01-11e2-b0a6-8954dfb53a3e}\Shell - "" = AutoRun
O33 - MountPoints2\{a92213e8-3b01-11e2-b0a6-8954dfb53a3e}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{aefd56d1-1d8d-11e2-8c9e-ce9395add530}\Shell - "" = AutoRun
O33 - MountPoints2\{aefd56d1-1d8d-11e2-8c9e-ce9395add530}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{b4fe3260-55b8-11e2-bb2e-c4e837e9fd2d}\Shell - "" = AutoRun
O33 - MountPoints2\{b4fe3260-55b8-11e2-bb2e-c4e837e9fd2d}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{b76ad0d9-0719-11e2-a550-b794311b667b}\Shell - "" = AutoRun
O33 - MountPoints2\{b76ad0d9-0719-11e2-a550-b794311b667b}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bc31a216-ef35-11e1-9ee3-c25a708eb612}\Shell - "" = AutoRun
O33 - MountPoints2\{bc31a216-ef35-11e1-9ee3-c25a708eb612}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bc31a21a-ef35-11e1-9ee3-c25a708eb612}\Shell - "" = AutoRun
O33 - MountPoints2\{bc31a21a-ef35-11e1-9ee3-c25a708eb612}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bc31a24d-ef35-11e1-9ee3-9c72393e1f42}\Shell - "" = AutoRun
O33 - MountPoints2\{bc31a24d-ef35-11e1-9ee3-9c72393e1f42}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bc31a256-ef35-11e1-9ee3-9c72393e1f42}\Shell - "" = AutoRun
O33 - MountPoints2\{bc31a256-ef35-11e1-9ee3-9c72393e1f42}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bc31a262-ef35-11e1-9ee3-9c72393e1f42}\Shell - "" = AutoRun
O33 - MountPoints2\{bc31a262-ef35-11e1-9ee3-9c72393e1f42}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bd401cdb-10fa-11e2-84e5-a90ea4da8a6f}\Shell - "" = AutoRun
O33 - MountPoints2\{bd401cdb-10fa-11e2-84e5-a90ea4da8a6f}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{bd9050e5-94d3-11e1-86aa-ee88903f0c6f}\Shell - "" = AutoRun
O33 - MountPoints2\{bd9050e5-94d3-11e1-86aa-ee88903f0c6f}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{c5c6fafb-14e8-11e2-bae7-001e101fb4df}\Shell - "" = AutoRun
O33 - MountPoints2\{c5c6fafb-14e8-11e2-bae7-001e101fb4df}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{c5c6fb14-14e8-11e2-bae7-e4531f601c69}\Shell - "" = AutoRun
O33 - MountPoints2\{c5c6fb14-14e8-11e2-bae7-e4531f601c69}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ca61a1a6-ed2e-11e1-a0d9-e65357d7f120}\Shell - "" = AutoRun
O33 - MountPoints2\{ca61a1a6-ed2e-11e1-a0d9-e65357d7f120}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cc9f7033-05fa-11e2-b16a-b9839447ac3c}\Shell - "" = AutoRun
O33 - MountPoints2\{cc9f7033-05fa-11e2-b16a-b9839447ac3c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cc9f703a-05fa-11e2-b16a-b9839447ac3c}\Shell - "" = AutoRun
O33 - MountPoints2\{cc9f703a-05fa-11e2-b16a-b9839447ac3c}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{cd5be99b-f0c2-11e1-82ac-de818160a316}\Shell - "" = AutoRun
O33 - MountPoints2\{cd5be99b-f0c2-11e1-82ac-de818160a316}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ce732f8d-6156-11e1-a6a3-0018f35ac8a9}\Shell - "" = AutoRun
O33 - MountPoints2\{ce732f8d-6156-11e1-a6a3-0018f35ac8a9}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{d59e5b17-0dd5-11e2-af38-9138e0d940a4}\Shell - "" = AutoRun
O33 - MountPoints2\{d59e5b17-0dd5-11e2-af38-9138e0d940a4}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{d59e5b3a-0dd5-11e2-af38-9138e0d940a4}\Shell - "" = AutoRun
O33 - MountPoints2\{d59e5b3a-0dd5-11e2-af38-9138e0d940a4}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{d6662713-50ff-11e2-86cf-fa71a134082c}\Shell - "" = AutoRun
O33 - MountPoints2\{d6662713-50ff-11e2-86cf-fa71a134082c}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{df53e2d3-4040-11e2-bbcd-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{df53e2d3-4040-11e2-bbcd-806e6f6e6963}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{e3590db2-717f-11e1-b1c3-bc79f9b36f1c}\Shell - "" = AutoRun
O33 - MountPoints2\{e3590db2-717f-11e1-b1c3-bc79f9b36f1c}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{e3c828f1-141e-11e2-b3e6-8665763d8526}\Shell - "" = AutoRun
O33 - MountPoints2\{e3c828f1-141e-11e2-b3e6-8665763d8526}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{e7f7cef5-27cc-11e2-b7cc-e2330d881e60}\Shell - "" = AutoRun
O33 - MountPoints2\{e7f7cef5-27cc-11e2-b7cc-e2330d881e60}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{ec180bea-3dcd-11e2-846a-d9eb15a84964}\Shell - "" = AutoRun
O33 - MountPoints2\{ec180bea-3dcd-11e2-846a-d9eb15a84964}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f4ce8450-345e-11e2-82ba-cf9f824b0e21}\Shell - "" = AutoRun
O33 - MountPoints2\{f4ce8450-345e-11e2-82ba-cf9f824b0e21}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f4e8e095-ed9e-11e1-a5c3-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{f4e8e095-ed9e-11e1-a5c3-806e6f6e6963}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f50a4aec-1b36-11e2-9914-ffccf4310952}\Shell - "" = AutoRun
O33 - MountPoints2\{f50a4aec-1b36-11e2-9914-ffccf4310952}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f50a4b05-1b36-11e2-9914-ffccf4310952}\Shell - "" = AutoRun
O33 - MountPoints2\{f50a4b05-1b36-11e2-9914-ffccf4310952}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\{f872fbbc-42da-11e2-ae4e-7844767c9c46}\Shell - "" = AutoRun
O33 - MountPoints2\{f872fbbc-42da-11e2-ae4e-7844767c9c46}\Shell\AutoRun\command - "" = E:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
[2012/03/16 09:53:25 | 000,000,000 | ---D | M] -- C:\Users\Utente\AppData\Roaming\UK's Kalender
:Files
C:\Users\Utente\AppData\Local\SoftwareUpdater
C:\Users\Utente\AppData\Local\ServUpdater
ipconfig /flushdns /c
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
:commands
[purity]
[emptytemp]
[Emptyjava]
[EMPTYFLASH]
[start explorer]
[Reboot] |
Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire.
Posta il log. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 12 Giu 2013 05:13 Oggetto: |
|
|
link
ecco qua |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 13 Giu 2013 05:29 Oggetto: |
|
|
link
ecco i risultati della scansione con OTL....i miei problemi non si sono risolti |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 13 Giu 2013 17:02 Oggetto: |
|
|
Ciao.
Citazione: | non riesco a scaricare nulla con internet Explorer, e nemmeno con firefox, perché alla fine del download esce la scritta "il file conteneva un virus ed è stato eliminato" e lo cancella. - |
La finestra che ti dice quelle cose, a chi si riferisce ? (Avira o qualche altro software)
Chi lo cancella? (Avira ?)
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Codice: | :OTL
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
FF - prefs.js..browser.startup.homepage: " http://search.findeer.com"
[2013/05/30 16:22:39 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Utente\AppData\Roaming\mozilla\Firefox\Profiles\k8f358cs.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2013/06/11 11:37:17 | 000,094,669 | ---- | M] () (No name found) -- C:\Users\Utente\AppData\Roaming\mozilla\firefox\profiles\k8f358cs.default\extensions\speedtestanalysis@SpeedAnalysis.com.xpi
[2012/10/07 08:04:50 | 000,001,867 | ---- | M] () -- C:\Users\Utente\AppData\Roaming\mozilla\firefox\profiles\k8f358cs.default\searchplugins\findeer.xml
O4 - HKLM..\Run: [CDAServer] C:\Programmi\Common Files\Common Desktop Agent\CDASrv.exe ()
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{27CC704D-DAA1-4595-99D0-110B9C920F57}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{9D6155B1-E76C-44D8-BF6A-EEF91B2FB618}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D7D6486B-C2D6-4CA0-A8D2-F81029EF7A0D}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E6397C6D-E3EC-4863-BCE0-FD104A1D77B8}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F222C917-3833-44B2-8D7C-F139D7A6B38F}: NameServer = 8.8.8.8,8.8.4.4
[2013/06/11 12:08:43 | 000,000,000 | --SD | C] -- C:\ComboFix
:Files
ipconfig /flushdns /c
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
:commands
[purity]
[emptytemp]
[Emptyjava]
[RESETHOSTS]
[EMPTYFLASH]
[start explorer]
[Reboot] |
Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire.
Posta il log.
Per ultimo fai un "Ripristina Firefox":
link |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 13 Giu 2013 17:52 Oggetto: |
|
|
ho provato anche a disattivare AVIRA ma la finestra esce lo stesso....quindi suppongo che non sia AVIRA.
ti posto anche l'immagine della finestra di errore,magari capisci meglio!
link
link
continuo a riscontrare lo stesso problema |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 13 Giu 2013 20:24 Oggetto: |
|
|
Per favore postami l'immagine in un altro formato. (NON.doc)
Hai eseguito il "Ripristina Firefox" ?
Se il problema persiste:
Scarica RougeKiller sul desktop.
link (per S.O 32 bit)
link (per S.O 64 bit)
Chiudi tutti i programmi in esecuzione.
Avvia RogueKiller.exe.
Il tool farà una pre-scansione in automatico.
Finita la pre-scansione,si apre una finestra: clicca su " Accept".
Adesso clicca su "Scan".
Finita la scansione, clicca su "Report" troverai il log sul desktop.
Postalo qui |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
|
Top |
|
|
luce06200 Mortale devoto
Registrato: 14/06/13 08:51 Messaggi: 6
|
Inviato: 14 Giu 2013 09:05 Oggetto: |
|
|
Buongiorno,
scusate se mi intrometto in questa discussione ma anch'io da qualche giorno ho lo stesso problema di Stefano, ovvero non riesco a scaricare file né da Explorer né da Firefox perché il processo si interrompe sempre dicendo "Il file conteneva un virus ed è stato eliminato". Il problema è indipendente dal sito in questione, dal browser e dal tipo di file che cerco di scaricare.
Ho effettuato scansioni con lo Strumento di rimozione malware Microsoft, Malwarebytes' Anti-Malware, AdwCleaner e RogueKiller (ho letto questi consigli nella community Microsoft), ma la situazione non è migliorata per niente!
Ho notato che Microsoft Security Essential era scomparso dalla barra in basso e ovviamente penso che sia un problema legato all'altro... Ho letto (ma ahimè non ricordo dove) che potesse dare problemi il fatto che MSE non fosse completamente disinstallato, allora l'ho fatto dal registro (perché dal Pannello di Controllo non riuscivo) e poi l'ho rinstallato, ma il problema è sempre lì, non so più cosa provare!
Se Stefano o qualcuno di voi trovasse la soluzione e fosse così gentile da postarla qui gliene sarei molto grata! Grazie in anticipo dell'attenzione e dell'aiuto che vorrete darmi. |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 14 Giu 2013 17:03 Oggetto: |
|
|
@luce06200:
Apri un nuovo topic, spiega il problema scarica Combofix:
Segui le istruzioni di questo topic per usare Combofix: ( e ricorda di salvarlo sul Desktop)
http://forum.zeusnews.com/viewtopic.php?t=45224
E posta il log. (nel nuovo topic.)
stefano77:
Cerca di fare mente locale cosa hai scaricato PRIMA che succedesse questo inconveniente.
Disistalla SpyBot (da "Programmi e funzionalità")
Fai anche tu una scansione con Combofix:
Segui le istruzioni di questo topic per usare Combofix: (ricorda di salvarlo sul Desktop)
http://forum.zeusnews.com/viewtopic.php?t=45224
Posta il log. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 15 Giu 2013 05:59 Oggetto: |
|
|
Ciao,ho disinstallato spybot come mi hai detto.
combofix si blocca(anche in modalità provvisoria)dopo che appare la scritta in cui dice ke sta facendo la scansione e ci vogliono una decina di minuti(o + del doppio)....l'ho lasciato andare x tutta la notte ma è rimasto bloccato li |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 15 Giu 2013 09:57 Oggetto: |
|
|
Ciao.
Ti sei dimenticato di scrivermi, se ti ricordi cosa hai scaricato PRIMA di questo inconveniente.
Dovrebbe trattarsi di un'infezione (probabilmente Adware) installata a tua insaputa con un programma che hai scaricato di recente.
In ogni caso, rifai una nuova scansione con OTL.
Posta il log. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 15 Giu 2013 10:48 Oggetto: |
|
|
Ciao,io purtroppo non ricordo di aver scaricato niente di particolare prima del manifestarsi del problema.
eccoti la scansione con OTL
link
Grazie |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 15 Giu 2013 11:25 Oggetto: |
|
|
scarica Scanner Servizio Farbar sul desktop :
link
Metti un segno di spunta in tutte le caselle sul lato sinistro.
Clicca su "Scan".
Si creerà un log (FSS.txt) nella stessa directory in cui viene eseguito lo strumento.
Posta il log. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 15 Giu 2013 11:32 Oggetto: |
|
|
link
ecco a te |
|
Top |
|
|
R16 Dio maturo
Registrato: 07/03/08 21:58 Messaggi: 10124
|
Inviato: 15 Giu 2013 14:00 Oggetto: |
|
|
Ciao.
Però...ce ne sono di danni...
Scarica questi 2 file .re dul desktop:
link
link
Cliccaci sopra con il tasto destro (uno alla volta) e scegli "Unisci".
Ti comparirà un messaggio di successo. (se non compare vuol dire che ha fallito)
Riavvia il pc.
Poi segui alla lettera queste indicazioni:
Scarica ripristino di Windows da Tweaking.com e decomprimi il contenuto in una cartella appena creata sul desktop.
link
Decomprimi la cartella .zip sul desktop.
Doppio click su "Repair_Windows"
Eseguilo.
Clicca sulla scheda "Start Repairs".
Clicca su "Start".
Si apre una finestra in cui ti chiede se vuoi creare un punto di ripristino, clicca NO.
Metti la spunta a: (se trovi le caselline tutte spuntate clicca su : "Unselect All")
Citazione: | Reset Registry Permissions
Reset File Permissions
Register System Files
Repair WMI
Repair Windows Firewall
Repair Internet Explorer
Repair Hosts File
Remove Policies Set By Infections
Repair Icons
Repair Windows Updates
Set Windows Services To default startup. |
Ora, nella parte in basso a destra, seleziona la casella "Restart / Shutdown System When Finished"
Quindi assicurarsi che il pulsante di opzione "Restart System" sia abilitato. (se manca la spunta, la metti)
Clicca "Start".
Aspetta pazientemente che le eventuali riparazioni siano effettuate.
Il pc si riavvierà automaticamente
Importante:
Assicurati di non avere programmi in esecuzione, durante le riparazioni. |
|
Top |
|
|
stefano77 Mortale pio
Registrato: 11/06/13 08:52 Messaggi: 23
|
Inviato: 16 Giu 2013 07:22 Oggetto: |
|
|
Ciao,ho fatto tutto seguendo le tue istruzioni passo-passo.
il programma ci ha messo circa mezz'ora e poi,come avevi detto,si è riavviato il pc.
Il problema persiste.
ti allego la scansione OTL.
link
link
e quella con FARBAR
link |
|
Top |
|
|
|