First of all I'd like to thank you for all the help I'm sure I'll receive
Well, the subject says it all! (especially the aarggh!)
smitfraud was found by spybot, correction does not work (it appears in any further scan)
spybot's log first line says:
--- Search result list ---
Smitfraud-C.Toolbar888: Impostazioni (Chiave di registro, nothing done)
HKEY_USERS\S-1-5-21-2441790150-2827057584-3830170805-1006\Software\Microsoft\aldd
how can I remove it?
avg anti-spyware says I had Trojan.BHO.o in C:\WINDOWS\system32\tmp7.tmp.dll, but now I'm clean, if it can help.
avast (upadated) found nothing, but many files (emule zip downloads) were rated as decompression bombs
I have a complete log of spybot too, if it can help.
hopefully yours, Thranduil