Per il problema con il rootkit mbr.sys ho cambiato l'hd ma questo sembra essere più lento.
Non sapendo se imputare il problema all'hd vi posto ugualmente i log di combofix e hijackthis.
Perfavore ditemi voi se ho fatto altri danni.
Grazie.
ComboFix 10-10-10.02 - aNNucCia 11/10/2010 10.17.41.5.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.3001.2513 [GMT 2:00]
Eseguito da: c:\documents and settings\aNNucCia\Desktop\ComboFix.exe
AV: avast! Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}
ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
((((((((((((((((((((((((( Files Creati Da 2010-09-11 al 2010-10-11 )))))))))))))))))))))))))))))))))))
.
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin7.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin6.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin5.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin4.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin3.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin2.dll
2010-10-09 18:09 . 2010-10-09 18:09 159744 ----a-w- c:\programmi\Internet Explorer\Plugin\npqtplugin.dll
2010-10-09 18:08 . 2010-10-09 18:09 -------- d-----w- c:\programmi\QuickTime
2010-10-09 18:08 . 2010-10-09 18:08 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Apple Computer
2010-10-09 18:05 . 2010-10-09 18:05 -------- d-sh--w- c:\documents and settings\NetworkService\IETldCache
2010-10-09 18:05 . 2010-10-09 18:05 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Apple
2010-10-09 16:34 . 2009-08-06 17:23 274288 ----a-w- c:\windows\system32\mucltui.dll
2010-10-09 16:34 . 2009-08-06 17:23 215920 ----a-w- c:\windows\system32\muweb.dll
2010-10-09 15:48 . 2009-12-29 08:56 117120 ----a-r- c:\windows\system32\drivers\pmx3gnet.sys
2010-10-09 15:47 . 2009-12-29 08:56 103552 ----a-r- c:\windows\system32\drivers\pmx3gmdm.sys
2010-10-09 15:42 . 2010-10-09 15:42 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Chiavetta Internet Olicard 100
2010-10-09 15:42 . 2010-10-09 15:42 -------- d-----w- c:\programmi\Chiavetta Internet Olicard 100
2010-10-09 10:57 . 2010-10-09 14:48 -------- d-----w- c:\programmi\Spybot - Search & Destroy
2010-10-09 10:57 . 2010-10-09 14:47 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2010-10-09 08:34 . 2010-10-09 08:34 -------- d-----w- c:\programmi\File comuni\Nero
2010-10-09 08:33 . 2010-10-09 08:39 -------- d-----w- c:\programmi\Nero
2010-10-09 02:34 . 2008-01-10 18:44 199176 ----a-w- c:\windows\GVUni.exe
2010-10-09 02:34 . 2007-12-03 22:11 207368 ----a-w- c:\windows\UNINST32.EXE
2010-10-09 02:34 . 2006-01-20 21:42 17408 ----a-w- c:\windows\system32\drivers\DKbFltr.SYS
2010-10-09 02:34 . 2004-12-09 19:04 5120 ----a-w- c:\windows\system32\FILTRCOI.DLL
2010-10-09 02:33 . 2008-07-17 19:27 380928 ----a-w- c:\windows\AcerStore.exe
2010-10-09 02:33 . 2008-05-09 12:58 49152 ----a-w- c:\windows\Interop.IWshRuntimeLibrary.dll
2010-10-09 02:33 . 2010-10-08 17:36 -------- d-----w- c:\windows\WLAN
2010-10-09 02:33 . 2008-04-28 13:14 3626112 ----a-w- c:\windows\system32\drivers\NETw5x32.sys
2010-10-09 02:33 . 2008-04-18 23:09 2756608 ----a-w- c:\windows\system32\NETw5r32.dll
2010-10-09 02:33 . 2008-04-18 23:08 659456 ----a-w- c:\windows\system32\NETw5c32.dll
2010-10-09 02:32 . 2008-01-30 01:45 50576 ----a-w- c:\windows\system32\drivers\tcusb.sys
2010-10-09 02:32 . 2008-04-29 23:09 108032 ----a-w- c:\windows\system32\drivers\IntcHdmi.sys
2010-10-09 02:32 . 2010-10-08 17:36 -------- d-----w- c:\windows\VGA
2010-10-09 02:32 . 2008-04-15 17:46 147456 ----a-w- c:\windows\PLAUNCH.EXE
2010-10-09 02:31 . 2010-10-08 17:36 -------- d-----w- c:\windows\Lan
2010-10-08 22:31 . 2010-10-08 22:31 -------- d-----w- c:\programmi\Microsoft
2010-10-08 22:30 . 2010-10-08 22:30 -------- d-----w- c:\programmi\Windows Live SkyDrive
2010-10-08 22:29 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-08 22:29 . 2010-10-08 22:29 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-10-08 22:29 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-08 22:28 . 2010-10-08 22:28 -------- d-----w- c:\programmi\File comuni\Windows Live
2010-10-08 22:25 . 2010-10-08 22:44 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Messenger Plus!
2010-10-08 22:03 . 2010-10-08 22:03 398336 ----a-w- c:\windows\system32\CF32023.exe
2010-10-08 21:37 . 2010-10-09 08:34 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Nero
2010-10-08 21:14 . 2010-10-08 21:14 -------- d-----w- c:\windows\system32\XPSViewer
2010-10-08 21:14 . 2010-10-08 21:14 -------- d-----w- c:\programmi\MSBuild
2010-10-08 21:14 . 2010-10-08 21:14 -------- d-----w- c:\programmi\Reference Assemblies
2010-10-08 21:14 . 2008-07-06 12:06 89088 ----a-w- c:\windows\system32\Spool\prtprocs\w32x86\filterpipelineprintproc.dll
2010-10-08 21:13 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2010-10-08 21:13 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2010-10-08 21:13 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2010-10-08 21:13 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2010-10-08 21:13 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2010-10-08 21:13 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2010-10-08 21:13 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2010-10-08 21:13 . 2008-07-06 10:50 597504 ------w- c:\windows\system32\Spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2010-10-08 21:06 . 2010-10-08 21:06 -------- d-----w- c:\programmi\SpacialAudio
2010-10-08 21:06 . 2009-07-22 15:46 450560 ----a-w- c:\windows\system32\GDS32.DLL
2010-10-08 21:06 . 2009-07-22 15:59 462848 ----a-w- c:\windows\system32\Firebird2Control.cpl
2010-10-08 21:06 . 2010-10-08 21:06 -------- d-----w- c:\programmi\Firebird
2010-10-08 21:02 . 2009-09-04 15:29 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2010-10-08 21:02 . 2009-09-04 15:29 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2010-10-08 21:02 . 2008-10-15 04:22 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2010-10-08 21:02 . 2007-07-19 16:14 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2010-10-08 21:02 . 2007-05-16 14:45 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2010-10-08 21:02 . 2010-10-08 21:02 -------- d-----w- c:\windows\Logs
2010-10-08 20:57 . 2010-10-08 20:57 -------- d-----w- c:\programmi\File comuni\Skype
2010-10-08 20:57 . 2010-10-08 20:57 -------- d-----r- c:\programmi\Skype
2010-10-08 20:56 . 2010-10-08 20:57 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Skype
2010-10-08 20:55 . 2010-10-10 17:10 -------- d-----w- c:\programmi\mIRC
2010-10-08 20:53 . 2010-10-08 20:53 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2010-10-08 20:52 . 2010-10-08 20:52 -------- d-----w- c:\programmi\Trend Micro
2010-10-08 20:52 . 2010-10-08 20:52 -------- d-----w- c:\programmi\File comuni\DVDVideoSoft
2010-10-08 20:52 . 2010-10-08 20:52 -------- d-----w- c:\programmi\DVDVideoSoft
2010-10-08 20:48 . 2010-10-11 08:08 -------- d-----w- c:\programmi\File comuni\Akamai
2010-10-08 20:43 . 2010-10-08 22:43 -------- d-----w- c:\programmi\Messenger Plus! Live
2010-10-08 20:42 . 2010-10-08 20:42 423656 ----a-w- c:\windows\system32\deployJava1.dll
2010-10-08 20:40 . 2010-10-08 20:41 -------- dcsh--w- c:\programmi\File comuni\WindowsLiveInstaller
2010-10-08 20:40 . 2010-10-08 22:30 -------- d-----w- c:\programmi\Windows Live
2010-10-08 20:40 . 2010-10-08 20:40 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\WLInstaller
2010-10-08 20:31 . 2010-08-26 11:08 13312 -c----w- c:\windows\system32\dllcache\iecompat.dll
2010-10-08 20:30 . 2010-06-24 12:22 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2010-10-08 20:30 . 2010-06-24 12:22 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2010-10-08 20:30 . 2010-06-24 12:22 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2010-10-08 20:29 . 2010-10-08 20:30 -------- dc-h--w- c:\windows\ie8
2010-10-08 20:22 . 2010-10-08 20:22 -------- d-----w- c:\programmi\File comuni\Apple
2010-10-08 20:21 . 2010-10-08 20:21 -------- d-----w- c:\programmi\Apple Software Update
2010-10-08 20:21 . 2010-10-08 20:21 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Apple
2010-10-08 20:19 . 2010-10-08 20:19 -------- d-----w- c:\programmi\MSXML 4.0
2010-10-08 20:18 . 2010-10-08 20:18 -------- d-----w- c:\programmi\VideoLAN
2010-10-08 20:16 . 2010-10-08 20:16 -------- d-----w- c:\programmi\JRE
2010-10-08 20:15 . 2010-10-08 20:42 73728 ----a-w- c:\windows\system32\javacpl.cpl
2010-10-08 20:15 . 2010-10-08 20:42 -------- d-----w- c:\programmi\Java
2010-10-08 20:15 . 2010-10-08 20:43 -------- d-----w- c:\programmi\File comuni\Java
2010-10-08 20:14 . 2010-10-08 20:15 -------- d-----w- c:\programmi\OpenOffice
2010-10-08 20:13 . 2010-10-08 20:13 -------- d-----w- c:\programmi\CCleaner
2010-10-08 20:12 . 2010-02-24 13:11 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2010-10-08 20:11 . 2010-04-28 18:11 2193664 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2010-10-08 20:11 . 2010-04-28 05:41 2070528 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2010-10-08 20:11 . 2010-04-28 05:41 2149888 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2010-10-08 20:11 . 2008-04-13 09:45 26368 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2010-10-08 20:11 . 2010-04-28 05:41 2028032 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2010-10-08 20:05 . 2010-02-12 10:03 293376 ------w- c:\windows\system32\browserchoice.exe
2010-10-08 19:47 . 2010-09-07 14:52 165584 ----a-w- c:\windows\system32\drivers\aswSP.sys
2010-10-08 19:47 . 2010-09-07 14:47 17744 ----a-w- c:\windows\system32\drivers\aswFsBlk.sys
2010-10-08 19:47 . 2010-09-07 14:47 23376 ----a-w- c:\windows\system32\drivers\aswRdr.sys
2010-10-08 19:47 . 2010-09-07 14:52 46672 ----a-w- c:\windows\system32\drivers\aswTdi.sys
2010-10-08 19:47 . 2010-09-07 14:47 100176 ----a-w- c:\windows\system32\drivers\aswmon2.sys
2010-10-08 19:47 . 2010-09-07 14:47 94544 ----a-w- c:\windows\system32\drivers\aswmon.sys
2010-10-08 19:47 . 2010-09-07 14:46 28880 ----a-w- c:\windows\system32\drivers\aavmker4.sys
2010-10-08 19:47 . 2010-09-07 15:12 38848 ----a-w- c:\windows\avastSS.scr
2010-10-08 19:47 . 2010-09-07 15:11 167592 ----a-w- c:\windows\system32\aswBoot.exe
2010-10-08 19:47 . 2010-10-08 19:47 -------- d-----w- c:\programmi\Alwil Software
2010-10-08 19:47 . 2010-10-08 19:47 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Alwil Software
2010-10-08 19:33 . 2010-10-08 19:33 -------- d-----w- c:\documents and settings\NetworkService\Menu Avvio
2010-10-08 19:29 . 2008-04-13 09:45 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2010-10-08 19:29 . 2008-04-13 09:45 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2010-10-08 19:29 . 2010-10-08 19:29 -------- d-----w- c:\programmi\Acer Inc
2010-10-08 18:04 . 2010-10-08 18:04 -------- d-----w- c:\programmi\Launch Manager
2010-10-08 18:03 . 2005-09-21 00:27 10368 ----a-w- c:\windows\system32\drivers\iviaspi.sys
2010-10-08 18:03 . 2010-10-08 18:03 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Corel
2010-10-08 18:03 . 2010-10-08 18:03 -------- d-----w- c:\programmi\File comuni\Protexis
2010-10-08 18:03 . 2010-10-08 18:03 -------- d-----w- c:\programmi\File comuni\InterVideo
2010-10-08 18:01 . 2007-04-13 09:51 321024 ----a-w- c:\windows\system32\ERUpdateHidden.EXE
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((( SnapShot_2010-10-09_21.42.02 )))))))))))))))))))))))))))))))))))))))))
.
+ 2010-10-11 08:08 . 2010-10-11 08:08 16384 c:\windows\Temp\Perflib_Perfdata_790.dat
+ 2010-10-11 08:08 . 2010-10-11 08:08 16384 c:\windows\Temp\Perflib_Perfdata_5ac.dat
+ 2008-09-05 08:14 . 2010-10-10 21:50 85492 c:\windows\system32\perfc010.dat
+ 2008-09-05 08:14 . 2010-10-10 21:50 72488 c:\windows\system32\perfc009.dat
- 2010-10-09 18:37 . 2010-10-09 18:37 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5b0279d9cf310178085bf7f9ffd218f9\Microsoft.SqlServer.CustomControls.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 74752 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5b0279d9cf310178085bf7f9ffd218f9\Microsoft.SqlServer.CustomControls.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5663cf86900591cf6272226aebe0ab90\microsoft.sqlserver.setup.resources.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 51712 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5663cf86900591cf6272226aebe0ab90\microsoft.sqlserver.setup.resources.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 18944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\390d8a0094aba0aeab2dc04ea310bb68\microsoft.sqlserver.gridcontrol.resources.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 18944 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\390d8a0094aba0aeab2dc04ea310bb68\microsoft.sqlserver.gridcontrol.resources.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 69632 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\ddddd3bfbb951ecd9ff7114bc512281b\microsoft.netenterpriseservers.exceptionmessagebox.resources.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 69632 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\ddddd3bfbb951ecd9ff7114bc512281b\microsoft.netenterpriseservers.exceptionmessagebox.resources.ni.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 77824 c:\windows\assembly\GAC_MSIL\System.Web.RegularExpressions\2.0.0.0__b03f5f7f11d50a3a\System.Web.RegularExpressions.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 81920 c:\windows\assembly\GAC_MSIL\System.Drawing.Design\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.Design.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 81920 c:\windows\assembly\GAC_MSIL\System.Configuration.Install\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.Install.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 32768 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 12800 c:\windows\assembly\GAC_MSIL\Microsoft.Vsa.Vb.CodeDOMProcessor\8.0.0.0__b03f5f7f11d50a3a\Microsoft.Vsa.Vb.CodeDOMProcessor.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 28672 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Vsa\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Vsa.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 77824 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Utilities\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Utilities.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 36864 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Framework\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 77824 c:\windows\assembly\GAC_MSIL\IEHost\2.0.0.0__b03f5f7f11d50a3a\IEHost.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 13312 c:\windows\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 10752 c:\windows\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 72192 c:\windows\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 69120 c:\windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 8192 c:\windows\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 7168 c:\windows\assembly\GAC_MSIL\Microsoft_VsaVb\8.0.0.0__b03f5f7f11d50a3a\Microsoft_VsaVb.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 5632 c:\windows\assembly\GAC_MSIL\Microsoft.VisualC\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualC.Dll
- 2010-10-09 21:14 . 2010-10-09 21:14 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 6656 c:\windows\assembly\GAC_MSIL\IIEHost\2.0.0.0__b03f5f7f11d50a3a\IIEHost.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 8192 c:\windows\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a\IEExecRemote.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 113664 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 258048 c:\windows\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
+ 2008-09-05 08:14 . 2010-10-10 21:50 491320 c:\windows\system32\perfh010.dat
+ 2008-09-05 08:14 . 2010-10-10 21:50 443222 c:\windows\system32\perfh009.dat
+ 2010-10-11 08:14 . 2010-10-11 08:14 529408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f1e8955a27a68884b6f9d4df711e166e\Microsoft.SqlServer.GridControl.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 529408 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\f1e8955a27a68884b6f9d4df711e166e\Microsoft.SqlServer.GridControl.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 989184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\aa01e1555b04d307cbe6c2911e63ed3a\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 989184 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\aa01e1555b04d307cbe6c2911e63ed3a\Microsoft.SqlServer.WizardFrameworkLite.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 336384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5723c79679f2f691a57a4300c2252f0f\microsoft.sqlserver.wizardframeworklite.resources.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 336384 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\5723c79679f2f691a57a4300c2252f0f\microsoft.sqlserver.wizardframeworklite.resources.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0cc7a9cd49866accef8708377da25536\Microsoft.SqlServer.Setup.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 355840 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.SqlServer#\0cc7a9cd49866accef8708377da25536\Microsoft.SqlServer.Setup.ni.dll
+ 2010-10-11 08:14 . 2010-10-11 08:14 231936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\c8b06ec827865d0e37447f75b1c27b23\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
- 2010-10-09 18:37 . 2010-10-09 18:37 231936 c:\windows\assembly\NativeImages_v2.0.50727_32\Microsoft.NetEnterp#\c8b06ec827865d0e37447f75b1c27b23\Microsoft.NetEnterpriseServers.ExceptionMessageBox.ni.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 839680 c:\windows\assembly\GAC_MSIL\System.Web.Services\2.0.0.0__b03f5f7f11d50a3a\System.Web.Services.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 835584 c:\windows\assembly\GAC_MSIL\System.Web.Mobile\2.0.0.0__b03f5f7f11d50a3a\System.Web.Mobile.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 114688 c:\windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 258048 c:\windows\assembly\GAC_MSIL\System.Security\2.0.0.0__b03f5f7f11d50a3a\System.Security.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 131072 c:\windows\assembly\GAC_MSIL\System.Runtime.Serialization.Formatters.Soap\2.0.0.0__b03f5f7f11d50a3a\System.Runtime.Serialization.Formatters.Soap.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 303104 c:\windows\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 258048 c:\windows\assembly\GAC_MSIL\System.Messaging\2.0.0.0__b03f5f7f11d50a3a\System.Messaging.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 372736 c:\windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 626688 c:\windows\assembly\GAC_MSIL\System.Drawing\2.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 401408 c:\windows\assembly\GAC_MSIL\System.DirectoryServices\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 188416 c:\windows\assembly\GAC_MSIL\System.DirectoryServices.Protocols\2.0.0.0__b03f5f7f11d50a3a\System.DirectoryServices.Protocols.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 970752 c:\windows\assembly\GAC_MSIL\System.Deployment\2.0.0.0__b03f5f7f11d50a3a\System.Deployment.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 745472 c:\windows\assembly\GAC_MSIL\System.Data.SqlXml\2.0.0.0__b77a5c561934e089\System.Data.SqlXml.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 425984 c:\windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.configuration.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 110592 c:\windows\assembly\GAC_MSIL\sysglobl\2.0.0.0__b03f5f7f11d50a3a\sysglobl.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 659456 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 372736 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 110592 c:\windows\assembly\GAC_MSIL\Microsoft.VisualBasic.Compatibility.Data\8.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.Compatibility.Data.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 749568 c:\windows\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 655360 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Tasks\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Tasks.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 348160 c:\windows\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 507904 c:\windows\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 261632 c:\windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 113664 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.Wrapper.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 258048 c:\windows\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a\System.EnterpriseServices.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 486400 c:\windows\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 3149824 c:\windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 2048000 c:\windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.XML.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 5025792 c:\windows\assembly\GAC_MSIL\System.Windows.Forms\2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 5062656 c:\windows\assembly\GAC_MSIL\System.Design\2.0.0.0__b03f5f7f11d50a3a\System.Design.dll
+ 2010-10-10 21:49 . 2010-10-10 21:49 5238784 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 5238784 c:\windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- 2010-10-09 21:14 . 2010-10-09 21:14 2933248 c:\windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
+ 2010-10-10 21:50 . 2010-10-10 21:50 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- 2010-10-09 21:13 . 2010-10-09 21:13 4546560 c:\windows\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
.
-- Snapshot per reimpostare la data corrente --
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"preload"="c:\windows\RUNXMLPL.exe" [2007-04-21 20480]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2008-04-14 208952]
"MSPY2002"="c:\windows\system32\IME\PINTLGNT\ImScInst.exe" [2008-04-14 59392]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2008-04-14 455168]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-06-17 150040]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-06-17 170520]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-06-17 141848]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"ZPdtWzdVitaKey MC3000"="c:\programmi\Acer\Acer Bio Protection\PdtWzd.exe" [2010-10-08 3724800]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 16862720]
"avast5"="c:\programmi\Alwil Software\Avast5\avastUI.exe" [2010-09-07 2838912]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2010-05-14 248552]
"ePower_DMC"="c:\programmi\Acer\Empowering Technology\ePower\ePower_DMC.exe" [2008-07-08 466944]
"QuickTime Task"="c:\programmi\QuickTime\QTTask.exe" [2010-09-08 421888]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLinkedConnections"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AWinNotifyVitaKey MC3000]
2010-10-08 17:57 3167744 ----a-w- c:\programmi\Acer\Acer Bio Protection\WinNotify.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\spba]
2008-03-25 13:24 567560 ----a-w- c:\programmi\File comuni\SPBA\homefus2.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Acer Empowering Technology.lnk]
path=c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Acer Empowering Technology.lnk
backup=c:\windows\pss\Acer Empowering Technology.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^BTTray.lnk]
path=c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\BTTray.lnk
backup=c:\windows\pss\BTTray.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2010-09-20 21:07 932288 ----a-r- c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
2010-09-23 02:47 35760 ----a-w- c:\programmi\Adobe\Reader 9.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
2008-01-24 23:22 159744 ----a-w- c:\programmi\Apoint2K\Apoint.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel]
2006-07-18 05:40 53248 ------w- c:\programmi\Realtek\Audio\InstallShield\AzMixerSel.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BkupTray]
2008-04-06 20:42 34040 ----a-w- c:\programmi\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Boot]
2007-12-25 01:17 579584 ----a-w- c:\programmi\Acer\Empowering Technology\ePower\Boot.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ePower_DMC]
2008-07-08 16:18 466944 ----a-w- c:\programmi\Acer\Empowering Technology\ePower\ePower_DMC.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService]
2007-07-11 12:07 421888 ----a-w- c:\programmi\Acer\Empowering Technology\eRecovery\eRAgent.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif]
2008-05-07 15:41 178712 ----a-w- c:\programmi\Intel\Intel Matrix Storage Manager\IAAnotif.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LManager]
2008-07-25 02:48 875016 ----a-w- c:\progra~1\LAUNCH~1\LManager.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
2010-04-16 20:11 3872080 ----a-w- c:\programmi\Windows Live\Messenger\msnmsgr.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent]
2010-03-26 08:52 1234216 ----a-w- c:\programmi\Nero\Nero 10\Nero BackItUp\NBAgent.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetI]
2007-10-23 08:56 200704 ----a-w- c:\windows\PLFSetI.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PLFSetL]
2007-07-05 10:35 94208 ----a-w- c:\windows\PLFSetL.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ProductReg]
2008-09-23 03:53 6144 ----a-w- c:\programmi\Acer\WR_PopUp\ProductReg.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2010-09-08 09:17 421888 ----a-w- c:\programmi\QuickTime\QTTask.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TimMonitor]
2010-01-19 15:45 393216 ----a-w- c:\programmi\Chiavetta Internet Olicard 100\TimMonitor.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\NewTech Infosystems\\NTI Backup Now 5\\BackupSvc.exe"=
"c:\\Programmi\\NewTech Infosystems\\NTI Backup Now 5\\SchedulerSvc.exe"=
"c:\\Programmi\\NewTech Infosystems\\NTI Backup Now 5\\Client\\Agentsvc.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Programmi\\SpacialAudio\\SAMBC\\SAMBC.exe"=
"c:\\Programmi\\mIRC\\mirc.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Documents and Settings\\aNNucCia\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1031:TCP"= 1031:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
R0 AlfaFF;AlfaFF File System mini-filter;c:\windows\system32\drivers\AlfaFF.sys [08/10/2010 19.57.32 42608]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [08/10/2010 21.47.31 165584]
R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [14/04/2008 6.00.00 14336]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [08/10/2010 21.47.31 17744]
R2 BUNAgentSvc;NTI Backup Now 5 Agent Service;c:\programmi\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [03/03/2008 13.11.14 16384]
R2 FirebirdGuardianDefaultInstance;Firebird Guardian - DefaultInstance;c:\programmi\Firebird\Firebird_2_1\bin\fbguard.exe -s DefaultInstance --> c:\programmi\Firebird\Firebird_2_1\bin\fbguard.exe -s DefaultInstance [?]
R2 NAUpdate;@c:\programmi\Nero\Update\NASvc.exe,-200;c:\programmi\Nero\Update\NASvc.exe [25/03/2010 14.39.22 490280]
R2 NTIBackupSvc;NTI Backup Now 5 Backup Service;c:\programmi\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe [06/04/2008 22.42.24 50424]
R2 regi;regi;c:\windows\system32\drivers\regi.sys [17/04/2007 20.09.28 11032]
R3 FirebirdServerDefaultInstance;Firebird Server - DefaultInstance;c:\programmi\Firebird\Firebird_2_1\bin\fbserver.exe -s DefaultInstance --> c:\programmi\Firebird\Firebird_2_1\bin\fbserver.exe -s DefaultInstance [?]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\system32\drivers\IntcHdmi.sys [09/10/2010 4.32.11 108032]
R3 O2MDRDR;O2MDRDR;c:\windows\system32\drivers\o2media.sys [13/05/2008 21.49.12 51288]
R3 O2SDRDR;O2SDRDR;c:\windows\system32\drivers\o2sd.sys [12/06/2008 18.30.12 43608]
S2 IGBASVC;iGroupTec Service;c:\programmi\Acer\Acer Bio Protection\BASVC.exe [08/10/2010 19.57.36 3566080]
S2 NTISchedulerSvc;NTI Backup Now 5 Scheduler Service;c:\programmi\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [04/04/2008 3.03.14 131072]
S3 pmx3gmdm;Olivetti USB Device for Legacy Serial Communication;c:\windows\system32\drivers\pmx3gmdm.sys [09/10/2010 17.47.47 103552]
S3 pmx3gnet;Olivetti USB-NDIS miniport;c:\windows\system32\drivers\pmx3gnet.sys [09/10/2010 17.48.47 117120]
S3 TpChoice;Touch Pad Detection Filter driver;c:\windows\system32\drivers\TpChoice.sys [26/12/2007 7.23.10 17968]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai REG_MULTI_SZ Akamai
.
Contenuto della cartella 'Scheduled Tasks'
2010-10-09 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.crawler.com/homepage.aspx?tbid=60342
IE: Invia a Bluetooth - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Invia a periferica &Bluetooth... - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
FF - ProfilePath - c:\documents and settings\aNNucCia\Dati applicazioni\Mozilla\Firefox\Profiles\9ap00kg5.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://it.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:it:official
FF - prefs.js: keyword.URL - hxxp://www.crawler.com/search/dispatcher.aspx?tp=aus&tbid=60342&qkw=
FF - plugin: c:\programmi\Java\jre6\bin\new_plugin\npdeployJava1.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
---- FIREFOX POLICIES ----
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgbaam7a8h", true);
c:\programmi\Mozilla Firefox\greprefs\all.js - pref("network.IDN.whitelist.xn--mgberp4a5d4ar", true);
c:\programmi\Mozilla Firefox\defaults\pref\firefox.js - pref("dom.ipc.plugins.enabled", false);
.
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Programmi/File comuni/Akamai/netsession_win_062a651.dll"
[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Akamai]
"ServiceDll"="C:/Programmi/File comuni/Akamai/netsession_win_062a651.dll"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
- - - - - - - > 'winlogon.exe'(908)
c:\programmi\Acer\Acer Bio Protection\WinNotify.dll
c:\programmi\Acer\Acer Bio Protection\CustomRes.dll
c:\programmi\File comuni\SPBA\vtapip.dll
c:\programmi\File comuni\SPBA\infql2.dll
c:\windows\system32\bsapi.dll
c:\programmi\File comuni\SPBA\homefus2.dll
c:\programmi\File comuni\SPBA\homepass.dll
c:\programmi\File comuni\SPBA\bio.dll
c:\programmi\File comuni\SPBA\qlbase.dll
c:\programmi\File comuni\SPBA\vtapipql.dll
c:\windows\system32\l3codeca.acm
- - - - - - - > 'explorer.exe'(1168)
c:\windows\system32\WININET.dll
c:\programmi\Acer\Empowering Technology\ePower\SysHook.dll
c:\windows\system32\msi.dll
c:\windows\system32\webcheck.dll
.
Ora fine scansione: 2010-10-11 10:22:40
ComboFix-quarantined-files.txt 2010-10-11 08:22
ComboFix2.txt 2010-10-09 21:43
ComboFix3.txt 2010-10-09 16:07
ComboFix4.txt 2010-10-08 23:18
ComboFix5.txt 2010-10-11 08:16
Pre-Run: 79.757.688.832 byte disponibili
Post-Run: 79.914.627.072 byte disponibili
- - End Of File - - 767889B51367C28C7CEAF39CF82F48FB
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10.28.13, on 11/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
C:\Programmi\Firebird\Firebird_2_1\bin\fbguard.exe
C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Programmi\File comuni\InterVideo\RegMgr\iviRegMgr.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\LightScribe\LSSrvc.exe
C:\Programmi\Nero\Update\NASvc.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Programmi\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
C:\Programmi\Acer\Acer Bio Protection\PdtWzd.exe
C:\Programmi\O2Micro Flash Memory Card Driver\o2flash.exe
C:\Programmi\File comuni\Protexis\License Service\PsiService_2.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\Alwil Software\Avast5\avastUI.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\Programmi\Acer\Empowering Technology\ePower\ePower_DMC.exe
C:\Programmi\Acer\Acer Bio Protection\PwdBank.exe
C:\Programmi\Firebird\Firebird_2_1\bin\fbserver.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.crawler.com/homepage.aspx?tbid=60342R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant =
http://www.crawler.com/search/ie.aspx?tb_id=60342R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch =
http://dnl.crawler.com/support/sa_customize.aspx?TbId=60342R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://go.microsoft.com/fwlink/?LinkId=74005R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [preload] C:\Windows\RUNXMLPL.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [ZPdtWzdVitaKey MC3000] "C:\Programmi\Acer\Acer Bio Protection\PdtWzd.exe" show
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [avast5] "C:\Programmi\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ePower_DMC] C:\Programmi\Acer\Empowering Technology\ePower\ePower_DMC.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Invia a Bluetooth - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O8 - Extra context menu item: Invia a periferica &Bluetooth... - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Programmi\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra 'Tools' menuitem: Quick-Launching Area - {10954C80-4F0F-11d3-B17C-00C0DFE39736} - C:\Programmi\Acer\Acer Bio Protection\PwdBank.exe
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: AWinNotifyVitaKey MC3000 - C:\Programmi\Acer\Acer Bio Protection\WinNotify.dll
O20 - Winlogon Notify: spba - C:\Programmi\File comuni\SPBA\homefus2.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Mail Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Web Scanner - AVAST Software - C:\Programmi\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Programmi\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Programmi\Firebird\Firebird_2_1\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Programmi\Firebird\Firebird_2_1\bin\fbserver.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: iGroupTec Service (IGBASVC) - Unknown owner - C:\Programmi\Acer\Acer Bio Protection\BASVC.exe
O23 - Service: IviRegMgr - InterVideo - C:\Programmi\File comuni\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Programmi\File comuni\LightScribe\LSSrvc.exe
O23 - Service: @C:\Programmi\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Programmi\Nero\Update\NASvc.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Programmi\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Programmi\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: O2Micro Flash Memory Card Service (o2flash) - O2Micro International - C:\Programmi\O2Micro Flash Memory Card Driver\o2flash.exe
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - C:\Programmi\File comuni\Protexis\License Service\PsiService_2.exe
--
End of file - 8735 bytes