Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Search Settings toolbar - Delta toolbar Opzioni
animactor
Inviato: Friday, February 15, 2013 7:08:13 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Ho appena provato e mi si è inceppato! Adesso riprovo!....
r16
Inviato: Friday, February 15, 2013 7:09:53 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Dove si inceppa ?
Prova in Modalità provvisoria.
animactor
Inviato: Friday, February 15, 2013 7:58:32 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
proprio all'inizio. Ho la scritta della finestra inalto affiancata da un NON RISPONDE e il cerchiodel buffering continua a girare

Questa operazione la devo fare disconnesso da internet?
animactor
Inviato: Friday, February 15, 2013 8:54:10 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Tra l'altro, a seguito di questo incidente, sto notando che ad ogni riavvio del computer vengono fatti degli aggiornamenti. Non so se derivino dai vari antivirus che ho scaricato o che ma, progressivamente, mi ritrovo con il disco C: sempre più pieno. parlo di diversi giga.

Deriva da questo problema?

Grazie e scusate cmq il disturbo

r16
Inviato: Friday, February 15, 2013 9:13:50 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Hai acora Combofix sul desktop vero?
Apri un file di testo con il Block Note sul Desktop
Ci incolli il codice che vedi qui sotto, e salvi il file di testo obbligatoriamente con il nome CFScript.txt


Code:
KillAll::

Driver::
2
AFS
LiveUpSC
SsroService

File::
c:\users\Administrator\AppData\Local\ServiceManager\ssro.exe

Folder::
c:\users\Administrator\AppData\Local\ssupd
c:\users\Administrator\AppData\Local\ServiceManager
c:\users\Administrator\AppData\Local\sshelper
c:\users\Administrator\AppData\Local\SoftwareUpdater
c:\program files (x86)\WebSearch
c:\program files (x86)\BrowseToSave

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SsroService"=-


e trascinalo sull'icona di ComboFix. (quella a forma di leone)
Attendi la fine dei lavori, senza toccare tastiera, mouse o altro.
Posta il log aggiornato di combofix che rilascia.
animactor
Inviato: Friday, February 15, 2013 10:32:30 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Fatta l''operazione con combofix

Ecco quello che ne è risultato

ComboFix 13-02-15.01 - Administrator 15/02/2013 22:07:14.3.4 - x64
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.39.1040.18.4013.2000 [GMT 1:00]
Eseguito da: c:\users\Administrator\Desktop\ComboFix.exe
Opzioni usate :: c:\users\Administrator\Desktop\CFScript.txt
AV: Microsoft Security Essentials *Disabled/Updated* {3F839487-C7A2-C958-E30C-E2825BA31FB5}
SP: Microsoft Security Essentials *Disabled/Updated* {84E27563-E198-C6D6-D9BC-D9F020245508}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
FILE ::
"c:\users\Administrator\AppData\Local\ServiceManager\ssro.exe"
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\BrowseToSave
c:\program files (x86)\BrowseToSave\sprotector.dll
c:\program files (x86)\BrowseToSave\uninstall.exe
c:\program files (x86)\WebSearch
c:\program files (x86)\WebSearch\sprotector.dll
c:\program files (x86)\WebSearch\uninstall.exe
c:\users\Administrator\AppData\Local\ServiceManager
c:\users\Administrator\AppData\Local\ServiceManager\settings\settings.ini
c:\users\Administrator\AppData\Local\ServiceManager\ssro.exe
c:\users\Administrator\AppData\Local\ServiceManager\ssro.InstallLog
c:\users\Administrator\AppData\Local\ServiceManager\ssro.InstallState
c:\users\Administrator\AppData\Local\SoftwareUpdater
c:\users\Administrator\AppData\Local\SoftwareUpdater\settings.ini
c:\users\Administrator\AppData\Local\SoftwareUpdater\settings\settings.ini
c:\users\Administrator\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe
c:\users\Administrator\AppData\Local\SoftwareUpdater\SoftwareUpdService.InstallLog
c:\users\Administrator\AppData\Local\SoftwareUpdater\SoftwareUpdService.InstallState
c:\users\Administrator\AppData\Local\sshelper
c:\users\Administrator\AppData\Local\sshelper\sshelper.exe
c:\users\Administrator\AppData\Local\sshelper\System.Data.SQLite.dll
c:\users\Administrator\AppData\Local\sshelper\Wait.exe
c:\users\Administrator\AppData\Local\ssupd
c:\users\Administrator\AppData\Local\ssupd\7z.dll
c:\users\Administrator\AppData\Local\ssupd\AppLib.Zip.dll
c:\users\Administrator\AppData\Local\ssupd\settings.ini
c:\users\Administrator\AppData\Local\ssupd\settings\settings.ini
c:\users\Administrator\AppData\Local\ssupd\ssupd.exe
c:\users\Administrator\AppData\Local\ssupd\ssupd.InstallLog
c:\users\Administrator\AppData\Local\ssupd\ssupd.InstallState
c:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
.
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_AFS
-------\Service_LiveUpSC
-------\Service_SsroService
-------\Service_SsupdService
-------\Service_SsupdService
.
.
((((((((((((((((((((((((( Files Creati Da 2013-01-15 al 2013-02-15 )))))))))))))))))))))))))))))))))))
.
.
2013-02-15 21:19 . 2013-02-15 21:19 -------- d-----w- c:\users\Public\AppData\Local\temp
2013-02-15 21:19 . 2013-02-15 21:19 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-02-15 21:01 . 2013-01-08 05:32 9161176 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{AE047414-3149-496E-B5FF-8530FFCC524C}\mpengine.dll
2013-02-15 16:52 . 2013-02-15 16:52 -------- d-----w- C:\_OTL
2013-02-15 09:35 . 2013-02-15 09:35 -------- d-----w- c:\program files (x86)\Common Files\Skype
2013-02-14 22:04 . 2013-01-08 05:32 9161176 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2013-02-13 21:49 . 2012-12-20 14:02 12406272 ----a-w- c:\windows\system32\ieframe.dll
2013-02-13 21:45 . 2013-01-04 03:22 3150848 ----a-w- c:\windows\system32\win32k.sys
2013-02-13 21:43 . 2013-01-04 05:41 1893224 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-02-13 21:43 . 2013-01-04 05:40 287576 ----a-w- c:\windows\system32\drivers\FWPKCLNT.SYS
2013-02-13 21:43 . 2012-12-26 05:57 1111040 ----a-w- c:\program files\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 21:43 . 2012-12-26 04:51 760320 ----a-w- c:\program files (x86)\Common Files\Microsoft Shared\VGX\VGX.dll
2013-02-13 16:57 . 2013-02-13 16:57 388096 ----a-r- c:\users\Administrator\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe
2013-02-13 16:54 . 2013-02-13 16:54 -------- d-----w- c:\program files (x86)\VS Revo Group
2013-02-13 14:19 . 2013-02-13 14:40 -------- d-----w- c:\users\Administrator\AppData\Roaming\Wise Registry Cleaner
2013-02-13 14:04 . 2013-02-13 14:04 -------- d-----w- c:\program files (x86)\Wise
2013-02-13 11:16 . 2013-02-14 15:05 -------- d-----w- c:\programdata\Spyware Terminator
2013-02-13 11:16 . 2013-02-13 11:16 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2013-02-13 11:16 . 2013-02-13 11:16 -------- d-----w- c:\users\Administrator\AppData\Roaming\Spyware Terminator
2013-02-13 11:16 . 2013-02-13 11:16 -------- d-----w- c:\program files (x86)\Spyware Terminator
2013-02-13 10:51 . 2013-02-13 10:51 -------- d-----w- c:\program files (x86)\MyPcCleaner
2013-02-13 10:50 . 2013-02-13 10:51 -------- d-----w- c:\users\Administrator\AppData\Local\VisualBeeClient
2013-02-13 10:50 . 2013-02-13 10:50 -------- d-----w- c:\users\Administrator\AppData\Local\VisualBeeExe
2013-02-13 10:49 . 2013-02-13 10:50 -------- d-----w- c:\programdata\VisualBee
2013-02-13 09:57 . 2013-02-13 09:57 -------- d-----w- c:\users\Administrator\AppData\Roaming\SendSpace
2013-02-11 17:42 . 2013-02-11 17:47 -------- d-----w- c:\users\Administrator\AppData\Roaming\MAGIX
2013-02-11 17:37 . 2013-02-11 17:37 -------- d-----w- c:\program files (x86)\MAGIX
2013-02-11 17:37 . 2013-02-11 17:37 -------- d-----w- c:\program files\Common Files\MAGIX Services
2013-01-31 16:50 . 2013-02-12 21:51 -------- d-----w- c:\users\Administrator\AppData\Local\Akamai
2013-01-31 01:07 . 2013-01-31 01:07 0 ----a-w- c:\windows\SysWow64\sho9E91.tmp
2013-01-29 09:47 . 2013-01-29 09:47 -------- d-----w- c:\windows\system32\SPReview
2013-01-28 15:34 . 2013-01-28 16:51 -------- d-----w- C:\FLEXLM
2013-01-28 15:08 . 2013-02-15 15:34 -------- d-----w- c:\program files (x86)\Common Files\Autodesk Shared
2013-01-28 11:52 . 2013-01-28 11:54 -------- d-----w- c:\program files (x86)\TornTV.com
2013-01-24 16:06 . 2013-02-11 17:36 -------- d-----w- c:\program files (x86)\MSXML 4.0
2013-01-23 21:36 . 2013-02-12 21:51 -------- d-----w- c:\users\Administrator\AppData\Roaming\REAPER
2013-01-23 21:35 . 2013-01-23 21:35 -------- d-----w- c:\program files\Common Files\Propellerhead Software
2013-01-23 21:34 . 2013-01-23 21:35 -------- d-----w- c:\program files\REAPER (x64)
2013-01-23 19:55 . 2013-02-11 17:37 -------- d-----w- c:\program files (x86)\Common Files\MAGIX Services
2013-01-23 19:55 . 2013-02-11 17:37 -------- d-----w- c:\programdata\MAGIX
2013-01-23 00:48 . 2013-01-23 00:48 0 ----a-w- c:\windows\SysWow64\sho6D4.tmp
2013-01-20 14:59 . 2013-01-20 14:59 230320 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2013-01-19 13:28 . 2013-01-19 13:28 -------- d-----w- c:\users\Administrator\AppData\Roaming\Publish Providers
2013-01-19 13:27 . 2013-01-19 13:27 -------- d-----w- c:\users\Administrator\AppData\Roaming\Sony
2013-01-19 13:14 . 2013-01-19 13:14 -------- d-----w- c:\program files (x86)\Sony
2013-01-19 13:13 . 2013-01-19 13:13 -------- d-----w- c:\program files (x86)\Sony Setup
2013-01-18 22:30 . 2013-01-18 22:30 0 ----a-w- c:\windows\SysWow64\sho3C.tmp
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-02-14 01:01 . 2011-05-04 15:24 70004024 ----a-w- c:\windows\system32\MRT.exe
2013-02-08 16:45 . 2012-04-04 19:55 697712 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-02-08 16:45 . 2011-06-27 19:20 74096 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-01-30 10:53 . 2011-07-15 13:34 273840 ------w- c:\windows\system32\MpSigStub.exe
2013-01-20 14:59 . 2011-04-27 13:25 130008 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2013-01-15 15:56 . 2012-06-17 19:05 477616 ----a-w- c:\windows\SysWow64\npdeployJava1.dll
2013-01-15 15:56 . 2011-05-08 11:25 473520 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-01-13 01:23 . 2013-01-13 01:23 0 ----a-w- c:\windows\SysWow64\shoFBA.tmp
2013-01-04 04:43 . 2013-02-13 21:48 44032 ----a-w- c:\windows\apppatch\acwow64.dll
2012-12-31 17:53 . 2012-12-31 17:53 0 ----a-w- c:\windows\SysWow64\sho91CB.tmp
2012-12-27 21:53 . 2012-12-27 21:53 0 ----a-w- c:\windows\SysWow64\sho71B2.tmp
2012-12-16 16:52 . 2012-12-21 17:18 46080 ----a-w- c:\windows\system32\atmlib.dll
2012-12-16 14:40 . 2012-12-21 17:18 367616 ----a-w- c:\windows\system32\atmfd.dll
2012-12-16 14:25 . 2012-12-21 17:18 295424 ----a-w- c:\windows\SysWow64\atmfd.dll
2012-12-16 14:25 . 2012-12-21 17:18 34304 ----a-w- c:\windows\SysWow64\atmlib.dll
2012-12-14 15:49 . 2011-07-12 20:48 24176 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-12-10 01:09 . 2012-12-10 01:09 0 ----a-w- c:\windows\SysWow64\shoBF0A.tmp
2012-12-07 16:40 . 2012-12-07 16:40 0 ----a-w- c:\windows\SysWow64\shoC09.tmp
2012-12-07 05:41 . 2013-01-09 19:21 441856 ----a-w- c:\windows\system32\Wpc.dll
2012-12-07 05:35 . 2013-01-09 19:21 2745856 ----a-w- c:\windows\system32\gameux.dll
2012-12-07 05:04 . 2013-01-09 19:21 308736 ----a-w- c:\windows\SysWow64\Wpc.dll
2012-12-07 04:57 . 2013-01-09 19:21 2576384 ----a-w- c:\windows\SysWow64\gameux.dll
2012-12-07 03:45 . 2013-01-09 19:21 43520 ----a-w- c:\windows\system32\csrr.rs
2012-12-07 03:45 . 2013-01-09 19:21 45568 ----a-w- c:\windows\system32\oflc-nz.rs
2012-12-07 03:45 . 2013-01-09 19:21 30720 ----a-w- c:\windows\system32\usk.rs
2012-12-07 03:45 . 2013-01-09 19:21 23552 ----a-w- c:\windows\system32\oflc.rs
2012-12-07 03:45 . 2013-01-09 19:21 44544 ----a-w- c:\windows\system32\pegibbfc.rs
2012-12-07 03:45 . 2013-01-09 19:21 40960 ----a-w- c:\windows\system32\cob-au.rs
2012-12-07 03:45 . 2013-01-09 19:21 21504 ----a-w- c:\windows\system32\grb.rs
2012-12-07 03:45 . 2013-01-09 19:21 20480 ----a-w- c:\windows\system32\pegi-pt.rs
2012-12-07 03:45 . 2013-01-09 19:21 20480 ----a-w- c:\windows\system32\pegi-fi.rs
2012-12-07 03:45 . 2013-01-09 19:21 46592 ----a-w- c:\windows\system32\fpb.rs
2012-12-07 03:45 . 2013-01-09 19:21 20480 ----a-w- c:\windows\system32\pegi.rs
2012-12-07 03:45 . 2013-01-09 19:21 15360 ----a-w- c:\windows\system32\djctq.rs
2012-12-07 03:45 . 2013-01-09 19:21 51712 ----a-w- c:\windows\system32\esrb.rs
2012-12-07 03:45 . 2013-01-09 19:21 55296 ----a-w- c:\windows\system32\cero.rs
2012-12-07 03:21 . 2013-01-09 19:21 45568 ----a-w- c:\windows\SysWow64\oflc-nz.rs
2012-12-07 03:21 . 2013-01-09 19:21 43520 ----a-w- c:\windows\SysWow64\csrr.rs
2012-12-07 03:21 . 2013-01-09 19:21 44544 ----a-w- c:\windows\SysWow64\pegibbfc.rs
2012-12-07 03:21 . 2013-01-09 19:21 30720 ----a-w- c:\windows\SysWow64\usk.rs
2012-12-07 03:21 . 2013-01-09 19:21 23552 ----a-w- c:\windows\SysWow64\oflc.rs
2012-12-07 03:21 . 2013-01-09 19:21 20480 ----a-w- c:\windows\SysWow64\pegi-pt.rs
2012-12-07 03:21 . 2013-01-09 19:21 20480 ----a-w- c:\windows\SysWow64\pegi.rs
2012-12-07 03:21 . 2013-01-09 19:21 20480 ----a-w- c:\windows\SysWow64\pegi-fi.rs
2012-12-07 03:21 . 2013-01-09 19:21 46592 ----a-w- c:\windows\SysWow64\fpb.rs
2012-12-07 03:21 . 2013-01-09 19:21 21504 ----a-w- c:\windows\SysWow64\grb.rs
2012-12-07 03:21 . 2013-01-09 19:21 51712 ----a-w- c:\windows\SysWow64\esrb.rs
2012-12-07 03:21 . 2013-01-09 19:21 55296 ----a-w- c:\windows\SysWow64\cero.rs
2012-12-07 03:21 . 2013-01-09 19:21 40960 ----a-w- c:\windows\SysWow64\cob-au.rs
2012-12-07 03:21 . 2013-01-09 19:21 15360 ----a-w- c:\windows\SysWow64\djctq.rs
2012-12-05 00:48 . 2012-12-05 00:48 0 ----a-w- c:\windows\SysWow64\sho2730.tmp
2012-12-02 14:55 . 2012-12-02 14:55 0 ----a-w- c:\windows\SysWow64\sho589F.tmp
2012-12-01 16:00 . 2012-12-01 16:00 0 ----a-w- c:\windows\SysWow64\shoE1EC.tmp
2012-11-30 09:31 . 2012-11-30 09:31 972264 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{A63F5B88-D9FE-45CF-8ED7-81FE4E03AE9E}\gapaengine.dll
2012-11-27 11:09 . 2012-11-27 11:09 0 ----a-w- c:\windows\SysWow64\sho893D.tmp
2012-11-22 10:32 . 2013-01-09 19:22 801280 ----a-w- c:\windows\system32\usp10.dll
2012-11-22 09:33 . 2013-01-09 19:22 627712 ----a-w- c:\windows\SysWow64\usp10.dll
2012-11-20 05:55 . 2013-01-09 19:21 307200 ----a-w- c:\windows\system32\ncrypt.dll
2012-11-20 05:10 . 2013-01-09 19:21 219136 ----a-w- c:\windows\SysWow64\ncrypt.dll
2009-05-14 20:15 . 2009-05-14 20:15 5719400 ----a-w- c:\program files\Common Files\adlmint_libFNP.dll
2009-05-14 20:15 . 2009-05-14 20:15 4397928 ----a-w- c:\program files\Common Files\adlmint.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 94208 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt.14.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="c:\users\Administrator\AppData\Local\Facebook\Update\FacebookUpdate.exe" [2012-07-11 138096]
"ISUSPM"="c:\program files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-10 218032]
"Akamai NetSession Interface"="c:\users\Administrator\AppData\Local\Akamai\netsession_win.exe" [2012-10-09 4441920]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-01-08 18705664]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Share-to-Web Namespace Daemon"="c:\program files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2002-04-17 69632]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-12-03 946352]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-12-19 41208]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-02-20 59240]
"SwitchBoard"="c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2012-04-18 421888]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2012-09-17 254896]
"AdobeCS6ServiceManager"="c:\program files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" [2012-03-09 1073312]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
McAfee Security Scan Plus.lnk - c:\program files (x86)\McAfee Security Scan\3.0.318\SSScheduler.exe [2013-2-5 272248]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=0 (0x0)
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe [2013-01-08 161536]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;c:\program files (x86)\Spyware Terminator\st_rsser64.exe [2013-02-12 1149104]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files\Motorola\Bluetooth\audiosrv.exe [2010-04-15 1096456]
R3 BTMCOM;Bluetooth Serial Port;c:\windows\system32\Drivers\btmcom.sys [2010-04-09 52736]
R3 BTMHID;BTMHID;c:\windows\system32\DRIVERS\btmhid.sys [2010-03-23 34048]
R3 BTMUSB;Motorola Bluetooth Radio Service;c:\windows\system32\Drivers\btmusb.sys [2010-04-15 3231104]
R3 EUCR;EUCR;c:\windows\system32\DRIVERS\EUCR6SK.SYS [2010-08-09 88912]
R3 fspad_xp64;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_xp64;c:\windows\system32\DRIVERS\fspad_xp64.sys [2010-01-25 54272]
R3 hidkmdf;KMDF Driver;c:\windows\system32\DRIVERS\hidkmdf.sys [2012-05-30 13688]
R3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files (x86)\McAfee Security Scan\3.0.318\McCHSvc.exe [2013-02-05 235216]
R3 MGHwCtrl;MGHwCtrl;c:\program files\msi\msi Software Install\MGHwCtrl.sys [x]
R3 netr7364;Driver scheda LAN wireless USB RT73 per Vista;c:\windows\system32\DRIVERS\netr7364.sys [2009-06-10 707072]
R3 NETw5s64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 64 Bit;c:\windows\system32\DRIVERS\NETw5s64.sys [2010-03-18 7680512]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-01-20 130008]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe [2013-01-27 379360]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 WacHidRouter;Wacom Hid Router;c:\windows\system32\DRIVERS\wachidrouter.sys [2012-05-30 66424]
R3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\DRIVERS\wacmoumonitor.sys [2010-11-02 13312]
R3 wacomrouterfilter;Wacom Router Filter Driver;c:\windows\system32\DRIVERS\wacomrouterfilter.sys [2012-05-07 15736]
R3 WatAdminSvc;Servizio Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2011-05-03 1255736]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [2009-07-09 55280]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys [2010-02-24 191616]
S2 Bluetooth OBEX Service;Bluetooth OBEX Service;c:\program files\Motorola\Bluetooth\obexsrv.exe [2010-04-22 677128]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2012-01-04 822624]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-03-04 13336]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [2012-12-14 398184]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-12-14 682344]
S2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\progra~2\mcafee\SITEAD~1\mcsacore.exe [2012-06-15 103472]
S2 mi-raysat_3dsmax2013_64;mental ray 3.10 Satellite for Autodesk 3ds Max 2013 64-bit;c:\program files\Autodesk\3ds Max 2013\NVIDIA\raysat_3dsmax2013_64server.exe [2011-09-14 86016]
S2 Micro Star SCM;Micro Star SCM;c:\program files (x86)\System Control Manager\MSIService.exe [2009-07-09 160768]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2011-10-01 508776]
S2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [2013-01-31 3289208]
S2 sp_rsdrv2;Spyware Terminator Driver Filter;c:\windows\system32\DRIVERS\stflt.sys [2013-02-13 51496]
S2 TabletServiceWacom;TabletServiceWacom;c:\program files\Tablet\Wacom\Wacom_Tablet.exe [2012-05-30 8712096]
S2 TeamViewer8;TeamViewer 8;c:\program files (x86)\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
S2 TouchServiceWacom;Wacom Professional Touch Service;c:\program files\Tablet\Wacom\Wacom_TouchService.exe [2012-05-30 567712]
S3 Bluetooth Device Manager;Bluetooth Device Manager;c:\program files\Motorola\Bluetooth\devmgrsrv.exe [2010-04-15 4170504]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64;c:\program files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-01-14 1432400]
S3 fspad_wlh64;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_wlh64;c:\windows\system32\DRIVERS\fspad_wlh64.sys [2010-01-25 54272]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-12-14 24176]
S3 nusb3hub;NEC Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [2010-01-22 77824]
S3 nusb3xhc;NEC Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [2010-01-22 180224]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [2010-06-23 344680]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys [2011-10-01 764264]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys [2011-10-01 268648]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys [2011-10-01 25960]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys [2011-10-01 22376]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2011-10-01 219496]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-02-02 17:00 1607120 ----a-w- c:\program files (x86)\Google\Chrome\Application\24.0.1312.57\Installer\chrmstp.exe
.
Contenuto della cartella 'Scheduled Tasks'
.
2013-02-15 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-04-04 16:45]
.
2013-02-14 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-166822519-1469985362-3066766102-500Core.job
- c:\users\Administrator\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-20 20:53]
.
2013-02-15 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-166822519-1469985362-3066766102-500UA.job
- c:\users\Administrator\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-09-20 20:53]
.
2013-02-15 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-30 10:50]
.
2013-02-15 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-04-30 10:50]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 97792 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 97792 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 97792 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2012-02-14 22:58 97792 ----a-w- c:\users\Administrator\AppData\Roaming\Dropbox\bin\DropboxExt64.14.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-08-17 11438696]
"RtHDVBg"="c:\program files\Realtek\Audio\HDA\RAVBg64.exe" [2010-08-17 2120808]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-01-27 1281512]
.
------- Scansione supplementare -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local;<local>
mSearchAssistant =
TCP: DhcpNameServer = 151.9.92.2 212.216.112.112
FF - ProfilePath - c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ega1vnpe.default\
FF - prefs.js: browser.search.selectedEngine -
FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/ig
FF - ExtSQL: 2013-02-05 19:03; {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}; c:\program files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
FF - ExtSQL: 2013-02-13 11:23; 511b69a888517@511b69a888550.com; c:\users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\ega1vnpe.default\extensions\511b69a888517@511b69a888550.com
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
AddRemove-SP_4e24eecb - c:\program files (x86)\WebSearch\uninstall.exe
AddRemove-SP_f2a323db - c:\program files (x86)\BrowseToSave\uninstall.exe
AddRemove-{3AF262C7-8A7F-9D1A-E59B-CD9493360C47} - c:\progra~3\INSTAL~2\{2BC12~1\Setup.exe
.
.
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Internet Explorer\Approved Extensions]
@Denied: (2) (Administrator)
"{9D717F81-9148-4F12-8568-69135F087DB0}"=hex:51,66,7a,6c,4c,1d,3b,1b,91,60,65,
82,77,c0,7f,07,98,6a,36,4f,5b,4d,31,a5
"{4D2D3B0F-69BE-477A-90F5-FDDB05357975}"=hex:51,66,7a,6c,4c,1d,3b,1b,1f,24,39,
52,81,38,17,0f,8d,f7,a2,87,01,70,35,60
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"6256FFB019F8FDFBD36745B06F4540E9AEAF222A25"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,a9,eb,16,61,23,69,53,46,ad,2e,7d,\
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.001\UserChoice]
@Denied: (2) (Administrator)
"Progid"="001_auto_file"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.669\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.669"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.AAC\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.AAC"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADT\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ADTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ADTS"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ai\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\Photoshop.exe"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aif\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.aif"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aifc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AIFF"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aiff\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.aiff"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.amf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.amf"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.aspx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="aspx_auto_file"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.asx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.au\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.au"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.avr\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.avr"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.B4S\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.caf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.caf"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cbr\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\WinRAR.exe"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.CDA\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.CDA"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\wordpad.exe"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\soffice.exe"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Photoshop.EPSFile.9"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.far\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.far"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.fla\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Flash.Movie"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flac\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.FLAC"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.flv\UserChoice]
@Denied: (2) (Administrator)
"Progid"="mplayerc.flv"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (Administrator)
"Progid"="QuickTime.gif"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htk\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.htk"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.iff\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.iff"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.it\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.it"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.itz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.itz"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="jpegfile"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.KAR\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.KAR"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m3u8\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.m4a\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.M4A"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mat\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.mat"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mdz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.mdz"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mid\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MID"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.midi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MIDI"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MIZ\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MIZ"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MOD\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.mod"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mov\UserChoice]
@Denied: (2) (Administrator)
"Progid"="mplayerc.mov"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.MP1\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MP1"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MP2"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp3\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.MP3"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mp4\UserChoice]
@Denied: (2) (Administrator)
"Progid"="mplayerc.mp4"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mpa\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.MPEG"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mtm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.mtm"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.NSA\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.NSA"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nst\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.nst"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.odt\UserChoice]
@Denied: (2) (Administrator)
"Progid"="opendocument.WriterDocument.1"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ogg\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.OGG"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.okt\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.okt"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.paf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.paf"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="AcroExch.Document"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.php\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\PhotoViewer.dll"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pls\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (Administrator)
"Progid"="PhotoViewer.FileAssoc.Png"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ppt\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Applications\\soffice.exe"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ptm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.ptm"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pvf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.pvf"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rar\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WinRAR"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.raw"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rf64\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.rf64"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rmi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.RMI"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rtf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="rtffile"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3m\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.s3m"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.s3z\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.s3z"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sd2\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.sd2"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sds\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.sds"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.sf\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.sf"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.snd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.AU"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.stm"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.stz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.stz"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.SWF\UserChoice]
@Denied: (2) (Administrator)
"Progid"="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (Administrator)
"Progid"="PhotoViewer.FileAssoc.Tiff"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Photoshop.TIFFFile.9"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.TTS\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.TTS"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ult\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.ult"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.VLB\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.VLB"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.voc\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.voc"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vpj\UserChoice]
@Denied: (2) (Administrator)
"Progid"="NCH.VideoPad.vpj"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.w64\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.w64"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wal\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.SkinZip"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wav\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.wav"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wax\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WAX"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wlz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.LangZip"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASF"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wma\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.WMA"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmd\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMD"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wms\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMS"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.ASX"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WMZ"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpl\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.PlayList"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wpp\UserChoice]
@Denied: (2) (Administrator)
"Progid"="NCH.WavePad.wpp"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wsz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.SkinZip"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wve\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.wve"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wvx\UserChoice]
@Denied: (2) (Administrator)
"Progid"="WMP11.AssocFile.WVX"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (Administrator)
"Progid"="FirefoxHTML"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xi\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.xi"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xm\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.xm"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xmz\UserChoice]
@Denied: (2) (Administrator)
"Progid"="Winamp.File.xmz"
.
[HKEY_USERS\S-1-5-21-166822519-1469985362-3066766102-500\Software\Microsoft\Windows\CurrentVersion\Ext\Settings]
@Denied: (2) (Administrator)
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{BEB3C0C7-B648-4257-96D9-B5D024816E27}\Version*Version]
"Version"=hex:d1,ef,c6,6f,62,4f,05,45,7f,11,d0,71,ef,2f,65,5f,c3,08,09,ff,af,
f5,75,29,71,3e,0b,ba,b8,52,00,80,c1,d5,4b,9c,fe,42,62,8c,9f,07,a1,8a,86,d2,\
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_5_502_149_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_5_502_149.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Minnetonka Audio Software\SurCode Dolby Digital Premiere\Version*Version]
"Version"=hex:d1,ef,c6,6f,62,4f,05,45,7f,11,d0,71,ef,2f,65,5f,c3,08,09,ff,af,
f5,75,29,71,3e,0b,ba,b8,52,00,80,c1,d5,4b,9c,fe,42,62,8c,9f,07,a1,8a,86,d2,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
c:\program files (x86)\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
.
**************************************************************************
.
Ora fine scansione: 2013-02-15 22:27:39 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2013-02-15 21:27
ComboFix2.txt 2013-02-13 22:45
ComboFix3.txt 2011-07-12 22:35
.
Pre-Run: 63.888.703.488 byte disponibili
Post-Run: 63.643.332.608 byte disponibili
.
- - End Of File - - 3F638A9D5FC6C589D141BEC94B39715D

Fatemi sapere cosa devo fare perfavore

Grazie

r16
Inviato: Saturday, February 16, 2013 10:14:08 AM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Sembra che ci siamo.
Apri OTL e clicca su CleanUP.
Si disistallerà sia Combofix che lo stesso OTL.
Ti chiederà il riavvio del pc: acconsenti.

Apri CCleaner.
Clicca su "Strumenti".
Clicca su "Ripristino Sistema"
Seleziona TUTTI i punti di ripristino e poi clicca "Rimuovi".

N.B:
Il punto segnalato in grigio (il primo) non lo puoi eliminare per motivi di sicurezza.

Riscontri problemi?
animactor
Inviato: Saturday, February 16, 2013 11:14:31 AM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Ciao R16

Ho fatto! Non ho visto altri file e di ripiristino del sistema tranne quello grigio su CCleaner. Al momento non riscontro problemi e sono stati eliminati pure 8 giga di spazio dal dico c: Che a quesot punto penso fossero gli aggiornamenti degli Antivirus. Non so se sia stato rislto del tutto ma non mi pare che ci siano problemi.

Eventualmente come me ne posso accorgere?

Grazie tante dell'aiuto....
r16
Inviato: Saturday, February 16, 2013 12:44:30 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Commenta:
Eventualmente come me ne posso accorgere?

Usando il pc.
Se non riscontri anomalie, e il pc è abbastanza veloce, il problema è risolto.
Questi tipi di infezioni non sono mai semplici da eliminare completamente.
Per esempio, nell'ultima scansione di Combofix, il Fake (finto antivirus) si trovava ancora in avvio del pc.
c:\users\Administrator\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Check
nonostante abbiamo fatto svariate scansioni.
Commenta:
Grazie tante dell'aiuto....

Di niente.
Se riscontri problemi torna pure qui.
Ciao.
animactor
Inviato: Saturday, February 16, 2013 12:51:36 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Guarda.

Ora come ora mi pare tutto a Posto. In effetti mi va un pò lento ad aprire la pagina di Mozilla. Trattasi di pochi secondi dopo che ho cliccato sull'icona e il buffering è scomparso.

Il finto Antivirus cmq è da due giorni che non lo vedo quindi sono abbastanza sicuro di averlo debellato. Ma potrei pure sbagliarmi.

Adesso provo a riavviare il computer e a riutilizzarlo

Vedo se mi da altri problemi , nel qual caso tornerò a domandarvi sul forum

In ogni caso vi ringrazio.
r16
Inviato: Saturday, February 16, 2013 2:17:38 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Stavo per dimenticare una cosa piuttosto importante:
Windows 7 non è aggiornato.
Ti consiglio di aggiornarlo al SP1:
http://windows.microsoft.com/it-IT/windows7/learn-how-to-install-windows-7-service-pack-1-sp1

Poi vai in "Programmi e funzionalità" e disistalla Firefox.
Installa l'ultima versione:
http://www.mozilla.org/it/firefox/fx/


animactor
Inviato: Saturday, February 16, 2013 2:34:23 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
r16 ha scritto:
Stavo per dimenticare una cosa piuttosto importante:
Windows 7 non è aggiornato.
Ti consiglio di aggiornarlo al SP1:
http://windows.microsoft.com/it-IT/windows7/learn-how-to-install-windows-7-service-pack-1-sp1

Poi vai in "Programmi e funzionalità" e disistalla Firefox.
Installa l'ultima versione:
http://www.mozilla.org/it/firefox/fx/




Ma se disinstallo Firefox, non perdo i miei preferiti?
come farei poi a salvarli e recuperarli?
animactor
Inviato: Saturday, February 16, 2013 2:46:26 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
ho trovato il problema. Mi impedisce di scaricare sevice pack 1 e mi da un errore noto come ERRORE codice 8024200D e non riesco a risolverlo. Dove potrei scaricarlo manualmente?.....

Grazie
r16
Inviato: Saturday, February 16, 2013 2:46:39 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Commenta:
Ma se disinstallo Firefox, non perdo i miei preferiti?
come farei poi a salvarli e recuperarli?

http://aranzulla.tecnologia.virgilio.it/come-salvare-i-segnalibri-di-mozilla-firefox-18863.html
r16
Inviato: Saturday, February 16, 2013 9:12:55 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Commenta:
Mi impedisce di scaricare sevice pack 1

La domanda è d'obbligo: il S.O è originale?
animactor
Inviato: Sunday, February 17, 2013 2:05:12 AM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Immaginavo di si dato che era già instalato appena comprato il computer ma a questo punto devo supporre che siano tutti farlocchi.

Ho trovato modo di installare il service pack downloadandolo da un altra parte.Spero sia sufficiente ma, in caso contrario, fammi sapere che procedure devo adottare.

Ti ringrazio e ti auguro un buon fine settimana

Ciao

r16
Inviato: Sunday, February 17, 2013 2:07:35 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Commenta:
Immaginavo di si dato che era già instalato appena comprato il computer ma a questo punto devo supporre che siano tutti farlocchi.

Non è detto che sia farlocco.....
Ci possono essere problemi anche su un S.O originale per l'installazione del Sp1.
Comunque l'importante è che tu lo abbia installato.
Questo permetterà di avere un pc, meno vulnerabile di quello che avevi prima.
Con Firefox cosa hai fatto?
Ancora problemi?



animactor
Inviato: Sunday, February 17, 2013 3:25:39 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Nessun problema.

Con Firefox ho seguito le procedure che mi hai consigliato.

Ora mi funziona tranquillo, senza problemi coi preferiti. In realtà non ho disinstallato la versione precedente e installato quella nuova. Pensavo me lo avrebbe fatto notare durante l'installazione. Ma ora se guardo sul Pannello di controllo, mi dice che Firefox è aggiornato all'ultima versione scaricata, che è quella che mi hai detto tu.

Fammi sapere se è meglio che disinstalli e reinstalli, ok?

Intanto cmq ti ringrazio e ti auguro buona giornata.

A presto
r16
Inviato: Sunday, February 17, 2013 3:29:32 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Commenta:
Fammi sapere se è meglio che disinstalli e reinstalli, ok?

No no, se hai installato l'ultima versione, e il problema è risolto, lascia tutto com'è.
Se sei soddisfatto del funzionamento del pc possiamo chiudere.
animactor
Inviato: Sunday, February 17, 2013 3:41:05 PM
Rank: AiutAmico

Iscritto dal : 2/13/2013
Posts: 52
Sono abbastanza soddisfatto. Dovessero esserci problemi non esisterò a ricontattarvi


Grazie di tutto. CiaAngel
Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.