Citazione:

---

:OTL
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (tsusbhub) -- system32\drivers\tsusbhub.sys File not found
DRV - (Synth3dVsc) -- System32\drivers\synth3dvsc.sys File not found
DRV - (mbr) -- C:\Users\Paolo\AppData\Local\Temp\mbr.sys File not found
DRV - (clwvd) -- system32\DRIVERS\clwvd.sys File not found
DRV - (catchme) -- C:\Users\Paolo\AppData\Local\Temp\catchme.sys File not found
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}: "URL" = htt*://search.chatzum[.com]/?q={searchTerms}
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}: "URL" = htt*://dts.search-results[.com]/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
IE - HKU\.DEFAULT\..\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - No CLSID value found
IE - HKU\S-1-5-18\..\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - No CLSID value found
IE - HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = htt*://search.findeer[.com]
IE - HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = htt*://search.findeer[.com]
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-2125261808-768053736-1260756482-1000\..\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}: "URL" = htt*://searchya[.com]/?q={searchTerms}&s=1&chnl=ft-150&cd=2XzutAtN2Y1L1QzutDtDtCzyyCyCyC0C0CtBzzyB0EyE0ByCtBtN0D0TzutBtDtCtBtDyEtBtB&cr=37268719
IE - HKU\S-1-5-21-2125261808-768053736-1260756482-1000\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}: "URL" = htt*://dts.search-results[.com]/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
FF - HKLM\Software\MozillaPlugins\Apple[.com]/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\microsoft[.com]/GENUINE: disabled File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\fbphotozoominstalldaddy[.com]: C:\Program Files\fbphotozoom\fbphotozoom13.xpi [2012/03/16 10:58:58 | 000,102,233 | ---- | M] ()
O3 - HKLM\..\Toolbar: (no name) - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
[2012/09/06 22:23:42 | 000,000,000 | ---D | C] -- C:\Program Files\Conduit
[2012/09/05 22:20:19 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
Alternate Data Stream - 127 bytes -> C:\ProgramData\Temp:890CC2F3

:Files
ipconfig /flushdns /c

:commands
[purity]
[Reboot]

---