ComboFix 11-04-01.01 - Administrator 02.04.2011  18:36:12.8.2 - x86
Eseguito da: c:\documents and settings\Administrator\Desktop\ComboFix.exe
* Creato nuovo punto di ripristino
* Resident AV is active
.
.
ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
.
(((((((((((((((((((((((((((((((((((((   Altre eliminazioni   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Documenti\RegistroDiSistema 27 Marzo.reg
c:\documents and settings\All Users\Dati applicazioni\mazuki.dll
.
.
\\.\PhysicalDrive0 - Bootkit TDL4 was found and disinfected
.
(((((((((((((((((((((((((   Files Creati Da 2011-03-02 al 2011-04-02  )))))))))))))))))))))))))))))))))))
.
.
2011-03-31 00:38 . 2011-03-31 00:38    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\Electronic Arts
2011-03-31 00:38 . 2011-03-31 00:38    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\EA Core
2011-03-30 21:15 . 2011-03-30 21:15    --------    d-----w-    c:\programmi\Electronic Arts
2011-03-29 15:23 . 2011-03-29 15:23    --------    d-----w-    c:\programmi\Auslogics
2011-03-29 11:57 . 2011-03-29 11:57    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\Megamedia
2011-03-29 11:57 . 2011-03-29 11:57    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\Megamedia
2011-03-29 11:57 . 2011-03-29 11:57    --------    d-----w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Megamedia
2011-03-28 13:02 . 2011-03-28 19:19    --------    d-----w-    c:\programmi\Youdagames
2011-03-25 18:37 . 2011-03-25 19:13    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\PC Tools Performance Toolkit
2011-03-25 18:23 . 2011-02-04 19:32    108056    ----a-w-    c:\windows\system32\drivers\PCTDMDefrag.sys
2011-03-25 18:23 . 2011-02-04 19:31    127256    ----a-w-    c:\windows\system32\drivers\PCTDSMon.sys
2011-03-25 18:23 . 2011-02-16 08:02    37344    ----a-w-    c:\windows\system32\CleanMFT32.exe
2011-03-25 18:23 . 2008-04-02 15:54    1101824    ----a-w-    c:\windows\system32\UniBox210.ocx
2011-03-25 18:23 . 2008-04-02 15:53    212992    ----a-w-    c:\windows\system32\UniBoxVB12.ocx
2011-03-25 18:23 . 2008-04-02 15:53    880640    ----a-w-    c:\windows\system32\UniBox10.ocx
2011-03-25 18:22 . 2011-03-25 18:24    --------    d-----w-    c:\programmi\File comuni\PC Tools
2011-03-25 18:22 . 2011-03-25 18:43    --------    d-----w-    c:\programmi\PC Tools Utilities
2011-03-25 18:22 . 2011-03-25 18:22    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\PC Tools
2011-03-25 00:06 . 2011-03-25 00:57    --------    d-----w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\RadioGet
2011-03-24 23:23 . 2011-03-25 01:59    --------    d-----w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Power2Go
2011-03-23 21:33 . 2011-03-23 21:33    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\ShinyTales
2011-03-23 21:22 . 2011-03-23 21:22    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\MythPeople
2011-03-23 19:52 . 2011-03-23 19:52    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\Anthropics
2011-03-23 19:18 . 2011-03-23 19:19    --------    d-----w-    c:\programmi\Portrait Professional Studio 9
2011-03-23 15:30 . 2011-03-23 15:30    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\IBKPRO
2011-03-22 21:54 . 2011-03-22 21:54    0    ----a-w-    c:\documents and settings\All Users\Dati applicazioni\xml15E2.tmp
2011-03-22 21:54 . 2011-03-22 21:54    0    ----a-w-    c:\documents and settings\All Users\Dati applicazioni\xml15DF.tmp
2011-03-22 21:54 . 2011-03-22 21:54    14177    ----a-w-    c:\documents and settings\All Users\Dati applicazioni\xml15DD.tmp
2011-03-22 21:54 . 2011-03-22 21:54    8114    ----a-w-    c:\documents and settings\All Users\Dati applicazioni\xml15DB.tmp
2011-03-22 21:41 . 2011-03-22 21:41    --------    d-----w-    c:\programmi\SiSoftware
2011-03-21 14:43 . 2011-04-01 23:46    --------    d-----w-    c:\programmi\EA
2011-03-21 14:38 . 2011-03-21 14:38    --------    d-----w-    c:\windows\8A809006C25A4A3A9DAB94659BCDB107.TMP
2011-03-21 14:30 . 2011-03-21 14:30    --------    d-----w-    c:\windows\system32\xlive
2011-03-21 14:30 . 2011-03-21 14:32    --------    d-----w-    c:\programmi\Microsoft Games for Windows - LIVE
2011-03-21 00:19 . 2011-03-21 00:20    --------    d-----w-    c:\programmi\7-Zip
2011-03-19 13:33 . 2011-03-19 13:33    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\ERS G-Studio
2011-03-19 05:22 . 2011-03-19 05:22    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\Enki Games
2011-03-19 04:46 . 2011-03-19 12:34    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\Mipony
2011-03-19 04:46 . 2011-03-19 04:46    --------    d-----w-    c:\programmi\MiPony
2011-03-19 01:02 . 2011-03-30 18:39    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\FileZilla
2011-03-19 01:01 . 2011-03-30 18:37    --------    d-----w-    c:\programmi\FileZilla FTP Client
2011-03-18 21:28 . 2011-03-18 21:28    --------    d-----w-    c:\programmi\File comuni\Pegasus Imaging
2011-03-18 21:28 . 2011-03-18 21:28    --------    d-----w-    c:\programmi\File comuni\Yahoo!
2011-03-18 21:28 . 2011-03-18 21:28    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\Studio 15
2011-03-18 21:28 . 2011-03-18 21:28    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\Pinnacle Studio Plus
2011-03-18 17:19 . 2011-03-18 17:19    --------    d-----w-    c:\windows\system32\mapi
2011-03-16 21:43 . 2011-03-16 21:43    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\OtakuSoftware
2011-03-16 05:07 . 2011-03-16 05:07    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\ShaoLin
2011-03-15 20:06 . 2011-03-15 20:06    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\Obsidium
2011-03-15 20:06 . 2011-03-15 20:25    --------    d-----w-    c:\documents and settings\All Users\Dati applicazioni\AllMyMovies
2011-03-15 15:29 . 2011-03-15 15:29    --------    d-----w-    c:\programmi\Calcolo ICI
2011-03-15 10:16 . 2011-03-15 10:16    --------    d-----w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Badaboom
2011-03-15 10:12 . 2011-03-15 10:15    --------    d-----w-    c:\programmi\Badaboom2
2011-03-15 10:08 . 2011-03-15 10:08    --------    d-----w-    c:\programmi\File comuni\Java
2011-03-15 10:08 . 2011-03-15 10:08    0    ------w-    c:\windows\system32\REN4D92.tmp
2011-03-13 19:28 . 2011-03-13 19:28    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\MA2
2011-03-11 04:53 . 2011-03-18 17:07    --------    d-----w-    c:\programmi\File comuni\BioWare
2011-03-11 04:08 . 2011-01-08 03:27    837736    ------w-    c:\windows\system32\nvgenco322040.dll
2011-03-11 04:08 . 2011-01-08 03:27    941160    ------w-    c:\windows\system32\nvdispco322090.dll
2011-03-08 14:05 . 2011-03-08 14:05    --------    d-----w-    c:\documents and settings\LocalService\Dati applicazioni\CyberLink
2011-03-06 23:02 . 2011-03-27 18:32    --------    d-----w-    c:\documents and settings\Administrator\Dati applicazioni\ERS Game Studios
2011-03-05 20:55 . 2011-03-05 20:55    --------    d-----w-    c:\programmi\DsNET Corp
.
.
((((((((((((((((((((((((((((((((((((((((   Find3M Report   )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-04-02 14:01 . 2009-12-09 06:24    5302    ----a-w-    c:\windows\system32\PerfStringBackup.TMP
2011-03-24 21:24 . 2009-04-23 20:08    29480    ------w-    c:\windows\system32\msxml3a.dll
2011-03-24 21:24 . 2003-02-21 03:42    353576    ------w-    c:\windows\system32\msvcr71.dll
2011-03-24 21:24 . 2003-03-18 19:14    505128    ------w-    c:\windows\system32\msvcp71.dll
2011-02-22 06:38 . 2011-02-22 06:38    86016    ------w-    c:\windows\system32\frapsvid.dll
2011-02-06 10:40 . 2011-02-06 10:40    93696    ------w-    c:\windows\system32\EP1KSSP.DLL
2011-02-06 10:40 . 2011-02-06 10:40    178176    ------w-    c:\windows\system32\ep1k_certd.exe
2011-02-06 10:40 . 2011-02-06 10:40    12288    ------w-    c:\windows\system32\ep1ksrv.exe
2011-02-06 10:40 . 2011-02-06 10:40    446464    ------w-    c:\windows\system32\EP1CSP32.DAT
2011-02-06 10:40 . 2011-02-06 10:40    24064    ------w-    c:\windows\system32\JEPSAI20.DLL
2011-02-06 10:40 . 2011-02-06 10:40    180224    ------w-    c:\windows\system32\EP1CSP32.DLL
2011-02-06 10:40 . 2011-02-06 10:40    165888    ------w-    c:\windows\system32\EP1PK111.DLL
2011-02-06 10:40 . 2011-02-06 10:40    95232    ------w-    c:\windows\system32\EP1KDL20.DLL
2011-02-06 10:40 . 2011-02-06 10:40    81920    ------w-    c:\windows\system32\EPSMODU.DLL
2011-02-06 10:40 . 2011-02-06 10:40    81920    ------w-    c:\windows\system32\EPASMOD.DLL
2011-02-06 10:40 . 2011-02-06 10:40    69632    ------w-    c:\windows\system32\EPSMODUE.DLL
2011-02-06 10:40 . 2011-02-06 10:40    53248    ------w-    c:\windows\system32\EPASSMDFULL.DLL
2011-02-06 10:40 . 2011-02-06 10:40    45056    ------w-    c:\windows\system32\EPASSMD.DLL
2011-02-06 10:40 . 2011-02-06 10:40    4608    ------w-    c:\windows\system32\ft1kco.dll
2011-02-06 10:40 . 2011-02-06 10:40    22272    ------w-    c:\windows\system32\drivers\eps1k.sys
2011-02-06 10:40 . 2011-02-06 10:40    9856    ------w-    c:\windows\system32\drivers\usbic1k.SYS
2011-02-06 10:40 . 2011-02-06 10:40    8832    ------w-    c:\windows\system32\drivers\IC1KENUM.SYS
2011-02-02 20:40 . 2010-05-11 14:36    472808    ------w-    c:\windows\system32\deployJava1.dll
2011-02-02 18:19 . 2010-08-29 18:34    73728    ------w-    c:\windows\system32\javacpl.cpl
2011-01-08 03:27 . 2010-04-04 14:19    61440    ------w-    c:\windows\system32\OpenCL.dll
2011-01-08 03:27 . 2010-04-04 14:19    2251368    ------w-    c:\windows\system32\nvcuvenc.dll
2011-01-08 03:27 . 2010-04-04 14:19    13004800    ------w-    c:\windows\system32\nvcompiler.dll
2011-01-08 03:27 . 2009-03-27 08:03    9888672    ------w-    c:\windows\system32\drivers\nv4_mini.sys
2011-01-08 03:27 . 2009-03-27 08:03    6397824    ------w-    c:\windows\system32\nv4_disp.dll
2011-01-08 03:27 . 2009-03-27 08:03    4980736    ------w-    c:\windows\system32\nvcuda.dll
2011-01-08 03:27 . 2009-03-27 08:03    2916968    ------w-    c:\windows\system32\nvcuvid.dll
2011-01-08 03:27 . 2009-03-27 08:03    1958400    ------w-    c:\windows\system32\nvapi.dll
2011-01-08 03:27 . 2009-03-27 08:03    14671872    ------w-    c:\windows\system32\nvoglnt.dll
2011-01-07 18:58 . 2011-01-07 18:58    282624    ------w-    c:\windows\system32\nvrsel.dll
2011-01-07 18:58 . 2011-01-07 18:58    274432    ------w-    c:\windows\system32\nvrsesm.dll
2011-01-07 18:58 . 2011-01-07 18:58    253952    ------w-    c:\windows\system32\nvrsth.dll
2011-01-07 18:58 . 2011-01-07 18:58    249856    ------w-    c:\windows\system32\nvrseng.dll
2011-01-07 18:58 . 2011-01-07 18:58    126976    ------w-    c:\windows\system32\nvrszht.dll
2011-01-07 18:58 . 2011-01-07 18:58    331776    ------w-    c:\windows\system32\nvrshe.dll
2011-01-07 18:58 . 2011-01-07 18:58    286720    ------w-    c:\windows\system32\nvrsfr.dll
2011-01-07 18:58 . 2011-01-07 18:58    274432    ------w-    c:\windows\system32\nvrsnl.dll
2011-01-07 18:58 . 2011-01-07 18:58    270336    ------w-    c:\windows\system32\nvrsru.dll
2011-01-07 18:58 . 2011-01-07 18:58    262144    ------w-    c:\windows\system32\nvrshu.dll
2011-01-07 18:58 . 2011-01-07 18:58    258048    ------w-    c:\windows\system32\nvrssl.dll
2011-01-07 18:58 . 2011-01-07 18:58    253952    ------w-    c:\windows\system32\nvrsda.dll
2011-01-07 18:58 . 2011-01-07 18:58    249856    ------w-    c:\windows\system32\nvrsfi.dll
2011-01-07 18:58 . 2011-01-07 18:58    229376    ------w-    c:\windows\system32\nvrszhc.dll
2011-01-07 18:58 . 2011-01-07 18:58    335872    ------w-    c:\windows\system32\nvrsar.dll
2011-01-07 18:58 . 2011-01-07 18:58    282624    ------w-    c:\windows\system32\nvrses.dll
2011-01-07 18:58 . 2011-01-07 18:58    278528    ------w-    c:\windows\system32\nvrsde.dll
2011-01-07 18:58 . 2011-01-07 18:58    270336    ------w-    c:\windows\system32\nvrsptb.dll
2011-01-07 18:58 . 2011-01-07 18:58    266240    ------w-    c:\windows\system32\nvrsko.dll
2011-01-07 18:58 . 2011-01-07 18:58    258048    ------w-    c:\windows\system32\nvrstr.dll
2011-01-07 18:58 . 2011-01-07 18:58    258048    ------w-    c:\windows\system32\nvrssk.dll
2011-01-07 18:58 . 2011-01-07 18:58    253952    ------w-    c:\windows\system32\nvrssv.dll
2011-01-07 18:58 . 2011-01-07 18:58    253952    ------w-    c:\windows\system32\nvrsno.dll
2011-01-07 18:58 . 2011-01-07 18:58    249856    ------w-    c:\windows\system32\nvrscs.dll
2011-01-07 18:58 . 2011-01-07 18:58    282624    ------w-    c:\windows\system32\nvrsit.dll
2011-01-07 18:58 . 2011-01-07 18:58    274432    ------w-    c:\windows\system32\nvrspt.dll
2011-01-07 18:58 . 2011-01-07 18:58    270336    ------w-    c:\windows\system32\nvrsja.dll
2011-01-07 18:58 . 2011-01-07 18:58    258048    ------w-    c:\windows\system32\nvrspl.dll
2011-01-07 18:58 . 2011-01-07 18:58    81920    ------w-    c:\windows\system32\nvwddi.dll
2011-01-07 18:58 . 2011-01-07 18:58    580200    ------w-    c:\windows\system32\easyUpdatusAPIU.dll
2011-01-07 18:58 . 2011-01-07 18:58    277608    ------w-    c:\windows\system32\nvmccs.dll
2011-01-07 18:58 . 2011-01-07 18:58    156776    ------w-    c:\windows\system32\nvsvc32.exe
2011-01-07 18:58 . 2011-01-07 18:58    145000    ------w-    c:\windows\system32\nvcolor.exe
2011-01-07 18:58 . 2011-01-07 18:58    13880424    ------w-    c:\windows\system32\nvcpl.dll
2011-01-07 18:58 . 2011-01-07 18:58    111208    ------w-    c:\windows\system32\nvmctray.dll
2010-02-18 23:28 . 2010-02-18 23:28    774144    ----a-w-    c:\programmi\RngInterstitial.dll
.
.
(((((((((((((((((((((((((((((((((((((   Punti Reg Caricati   ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{77F4E711-789B-447F-9614-96759B2F83C6}]
2011-01-13 04:16    64000    ----a-w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Megamedia\Megakey\MegaIeHelper.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"HPDJ Taskbar Utility"="c:\windows\system32\spool\drivers\w32x86\3\hpztsb02.exe" [2001-04-17 192512]
"egui"="c:\programmi\ESET\ESET NOD32 Antivirus\egui.exe" [2009-10-01 2054360]
"JMB36X IDE Setup"="c:\windows\RaidTool\xInsIDE.exe" [2010-09-07 43608]
"36X Raid Configurer"="c:\windows\system32\xRaidSetup.exe" [2010-09-07 1976920]
"SoundMAXPnP"="c:\programmi\Analog Devices\Core\smax4pnp.exe" [2006-06-23 847872]
"Acrobat Assistant 8.0"="c:\programmi\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [2011-01-30 821144]
"CanonSolutionMenuEx"="c:\programmi\Canon\Solution Menu EX\CNSEMAIN.EXE" [2010-04-02 1185112]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2011-01-07 111208]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-01-07 13880424]
"nwiz"="c:\programmi\NVIDIA Corporation\nView\nwiz.exe" [2010-11-04 1753192]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2010-10-29 249064]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 25088]
.
c:\documents and settings\Administrator\Menu Avvio\Programmi\Esecuzione automatica\
FreePOPs.lnk - c:\programmi\FreePOPs\freepopsd.exe [2008-12-27 49152]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984D045-52CF-49cd-DB77-08F378FEA4DB}"= "c:\programmi\Stardock\ObjectDockPlus2\ODMenu.dll" [2010-03-24 511344]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\programmi\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LBTWlgn]
2010-10-28 10:13    64592    ----a-w-    c:\programmi\File comuni\Logishrd\Bluetooth\LBTWLgn.dll
.
[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Avvio^Programmi^Esecuzione automatica^is-6O6IH.lnk]
.
[HKLM\~\startupfolder\C:^Documents and Settings^Administrator^Menu Avvio^Programmi^Esecuzione automatica^Logitech . Registrazione prodotti.lnk]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCE Print Dispatcher
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminatorUpdate
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\360Amigo]
2011-03-19 23:17    4743240    ----a-w-    c:\program files\360Amigo\360Amigo.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2008-10-13 10:16    165144    ----a-w-    c:\programmi\File comuni\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager]
2010-07-22 20:10    402432    ----a-w-    c:\programmi\File comuni\Adobe\CS5ServiceManager\CS5ServiceManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent DNA]
2010-03-26 22:39    323392    ----a-w-    c:\programmi\DNA\btdna.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ClamWin]
2009-04-14 10:52    86016    ----a-w-    c:\programmi\ClamWin\bin\ClamTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverChecker.exe]
2009-12-31 15:36    13561856    ----a-w-    c:\programmi\Driver Checker\DriverChecker.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EvtMgr6]
2010-10-28 23:32    1352272    ----a-w-    c:\programmi\Logitech\SetPointP\SetPoint.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
2008-10-09 17:23    133104    ----atw-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
2008-10-25 09:44    31072    ----a-w-    c:\programmi\Microsoft Office\Office12\GrooveMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InnoSetupRegFile.0000000001]
2009-09-02 04:30    687104    ----a-w-    c:\windows\is-QOJPR.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstantAccess]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes Anti-Malware (reboot)]
2010-12-20 16:08    963976    ----a-w-    c:\programmi\Malwarebytes' Anti-Malware\mbam.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Malwarebytes' Anti-Malware]
2010-12-20 16:08    443728    ----a-w-    c:\programmi\Malwarebytes' Anti-Malware\mbamgui.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MegakeyUpdater]
2011-01-13 05:38    64000    ----a-w-    c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Megamedia\Megakey\MegakeyUpdater.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
2001-07-09 09:50    155648    ------w-    c:\windows\system32\NeroCheck.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Pando Media Booster]
2010-03-26 22:42    2937528    ----a-w-    c:\programmi\Pando Networks\Media Booster\PMB.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PE2CKFNT SE]
1998-07-03 10:51    25088    ------r-    c:\programmi\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RegisterDropHandler]
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
2010-10-29 13:49    249064    ----a-w-    c:\programmi\File comuni\Java\Java Update\jusched.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
2010-02-19 11:37    517096    ----a-w-    c:\programmi\File comuni\Adobe\SwitchBoard\SwitchBoard.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TomTomHOME.exe]
2010-12-10 12:28    247144    ----a-w-    c:\documents and settings\Administrator\Desktop\Programmi\TomTom HOME 2\TomTomHOMERunner.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdatePDRShortCut]
2008-06-06 13:03    222504    ----a-w-    c:\programmi\CyberLink\PowerDirector\MUITransfer\MUIStartMenu.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USBToolTip]
2007-02-20 10:07    199752    ----a-w-    c:\progra~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
2007-12-20 15:05    77824    ------w-    c:\windows\system32\VTTimer.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"TuneUp.ProgramStatisticsSvc"=2 (0x2)
"UxTuneUp"=2 (0x2)
"TuneUp.Defrag"=3 (0x3)
"ServiceLayer"=3 (0x3)
"gusvc"=3 (0x3)
"AcrSch2Svc"=2 (0x2)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"Adobe Acrobat Speed Launcher"="c:\programmi\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"
"QuickTime Task"="c:\programmi\QuickTime\QTTask.exe" -atboottime
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 10.0\Reader\Reader_sl.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\runservices-]
"RegisterDropHandler"=c:\progra~1\TEXTBR~1.0\Bin\REGIST~1.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Orbitdownloader\\orbitdm.exe"=
"c:\\Programmi\\Orbitdownloader\\orbitnet.exe"=
"c:\\Documents and Settings\\Administrator\\temp\\TeamViewer\\Version4\\TeamViewer.exe"=
"c:\\Programmi\\VideoLAN\\VLC\\vlc.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\Programmi\\Java\\jre6\\bin\\javaw.exe"=
"c:\\Programmi\\filehippo.com\\UpdateChecker.exe"=
"c:\\Programmi\\mIRC\\mirc.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\DNA\\btdna.exe"=
"c:\\Documents and Settings\\Administrator\\Desktop\\Programmi\\FirefoxPortable\\App\\Firefox\\firefox.exe"=
"c:\\Programmi\\FreePOPs\\freepopsd.exe"=
"c:\\Programmi\\Pando Networks\\Media Booster\\PMB.exe"=
"c:\\Documents and Settings\\Administrator\\temp\\TeamViewer\\Version5\\TeamViewer.exe"=
"c:\\xampp\\apache\\bin\\httpd.exe"=
"c:\\xampp\\mysql\\bin\\mysqld.exe"=
"c:\\Programmi\\eMule\\eMule.exe"=
"c:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programmi\\Ubisoft\\Ubisoft Game Launcher\\UbisoftGameLauncher.exe"=
"c:\\Programmi\\Steam\\Steam.exe"=
"c:\\Programmi\\Skype\\Plugin Manager\\skypePM.exe"=
"c:\\Programmi\\Skype\\Phone\\Skype.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Programmi\\DsNET Corp\\aTube Catcher 2.0\\yct.exe"=
"c:\\Programmi\\Java\\jre6\\launch4j-tmp\\JDownloader.exe"=
"c:\\Programmi\\Pinnacle\\Studio 15\\Programs\\RM.exe"=
"c:\\Programmi\\Pinnacle\\Studio 15\\Programs\\Studio.exe"=
"c:\\Programmi\\Pinnacle\\Studio 15\\Programs\\umi.exe"=
"c:\\Programmi\\SiSoftware\\SiSoftware Sandra Professional Home 2011.SP1a\\RpcAgentSrv.exe"=
"c:\\Programmi\\SiSoftware\\SiSoftware Sandra Professional Home 2011.SP1a\\WNt500x86\\RpcSandraSrv.exe"=
"c:\\Programmi\\Electronic Arts\\Crytek\\Crysis 2\\bin32\\Crysis2.exe"=
"c:\\WINDOWS\\system32\\mmc.exe"=
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"26731:TCP"= 26731:TCP:*:Disabled:SolidNetworkManager
"26731:UDP"= 26731:UDP:*:Disabled:SolidNetworkManager
"5009:TCP"= 5009:TCP:SolidNetworkManager
"5009:UDP"= 5009:UDP:SolidNetworkManager
"56827:TCP"= 56827:TCP:Pando Media Booster
"56827:UDP"= 56827:UDP:Pando Media Booster
"1066:TCP"= 1066:TCP:Akamai NetSession Interface
"5000:UDP"= 5000:UDP:Akamai NetSession Interface
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
.
R1 as6eio;as6eio;c:\windows\System32\drivers\as6eio.sys [x]
R2 DMDefragService;Performance Toolkit Disk Defrag Service;c:\programmi\PC Tools Utilities\Tools\Defrag\DMDefragSrv.exe [2011-02-16 1050592]
R3 DMRepairService;Performance Toolkit Disk Repair Service;c:\programmi\PC Tools Utilities\Tools\Repair\DMRepairSrv.exe [2011-02-16 1034208]
R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]
R3 FirebirdServerMAGIXInstance;Firebird Server - MAGIX Instance;c:\programmi\File comuni\MAGIX Services\Database\bin\fbserver.exe [2008-08-07 3276800]
R3 gwiopm;gwiopm;c:\programmi\My Drivers\gwiopm.sys [x]
R3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des [2010-05-03 3604720]
R3 PCTDMDefrag;PCTDMDefrag;c:\windows\system32\drivers\PCTDMDefrag.sys [2011-02-04 108056]
R3 PCTDSMon;PCTDSMon;c:\windows\system32\drivers\PCTDSMon.sys [2011-02-04 127256]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [2009-12-30 27064]
R3 SandraAgentSrv;SiSoftware Deployment Agent Service;c:\programmi\SiSoftware\SiSoftware Sandra Professional Home 2011.SP1a\RpcAgentSrv.exe [2009-08-09 93848]
R3 SASENUM;SASENUM;c:\programmi\SUPERAntiSpyware\SASENUM.SYS [2009-05-26 7408]
R3 SwitchBoard;SwitchBoard;c:\programmi\File comuni\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
R3 XDva343;XDva343;c:\windows\system32\XDva343.sys [x]
S0 pxscan;pxscan;c:\windows\System32\drivers\pxscan.sys [2010-01-06 22024]
S0 pxsec;pxsec;c:\windows\System32\drivers\pxsec.sys [2010-01-06 27656]
S0 tdrpman147;Acronis Try&Decide and Restore Points filter (build 147);c:\windows\system32\DRIVERS\tdrpm147.sys [2009-06-12 971232]
S0 ViBus;ViBus;c:\windows\system32\DRIVERS\ViBus.sys [2008-04-03 16896]
S0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\DRIVERS\ViPrt.sys [2008-04-03 53248]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2009-10-01 108792]
S1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2009-10-01 96408]
S1 is-6O6IHdrv;is-6O6IHdrv;c:\windows\system32\DRIVERS\05165413.sys [2008-07-08 148496]
S1 SASDIFSV;SASDIFSV;c:\programmi\SUPERAntiSpyware\SASDIFSV.SYS [2009-05-26 9968]
S1 SASKUTIL;SASKUTIL;c:\programmi\SUPERAntiSpyware\SASKUTIL.sys [2009-09-02 74480]
S2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe [2008-04-14 14336]
S2 Apache2.2;Apache2.2;c:\xampp\apache\bin\httpd.exe [2009-12-19 29416]
S2 ekrn;ESET Service;c:\programmi\ESET\ESET NOD32 Antivirus\ekrn.exe [2009-10-01 735960]
S2 Fabs;FABS - Helping agent for MAGIX media database;c:\programmi\File comuni\MAGIX Services\Database\bin\FABS.exe [2009-08-27 1253376]
S2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\Drivers\LBeepKE.sys [2010-08-24 10448]
S2 nlsX86cc;NLS Service;c:\windows\system32\NLSSRV32.EXE [2010-06-11 65856]
S2 ousbehci;OrangeWare USB Enhanced Host Controller Service;c:\windows\system32\Drivers\ousbehci.sys [2005-07-15 45696]
S2 PCToolsSSDMonitorSvc;PC Tools Startup and Shutdown Monitor service;c:\programmi\File comuni\PC Tools\sMonitor\StartManSvc.exe [2011-02-16 632800]
S2 thdudf;TOSHIBA UDF2.5 Reader File System Driver;c:\windows\system32\DRIVERS\thdudf.sys [2006-11-11 66944]
S2 TomTomHOMEService;TomTomHOMEService;c:\documents and settings\Administrator\Desktop\Programmi\TomTom HOME 2\TomTomHOMEService.exe [2010-12-10 92008]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\programmi\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2010-11-30 1483072]
S3 ft1kEnum;usb Card Device 1000;c:\windows\system32\DRIVERS\ic1kenum.sys [2011-02-06 8832]
S3 ousb2hub;OrangeWare USB 2.0 Root Hub Support;c:\windows\system32\DRIVERS\ousb2hub.sys [2005-07-15 56960]
S3 Reader_1000;USB SmartCard Reader Device 1000 ;c:\windows\system32\DRIVERS\usbic1k.sys [2011-02-06 9856]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\programmi\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys [2010-10-07 10064]
S3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\DRIVERS\vcsvad.sys [2008-12-26 17792]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
Akamai    REG_MULTI_SZ       Akamai
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
Contenuto della cartella 'Scheduled Tasks'
.
2011-04-02 c:\windows\Tasks\AdobeAAMUpdater-1.0-COMPUTER-A04070-Administrator.job
- c:\programmi\File comuni\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2010-09-16 14:04]
.
2011-03-30 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\programmi\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34]
.
2009-06-18 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-583907252-842925246-1177238915-500.job
- c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2008-10-09 17:23]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://mystart.incredimail.com/
uDefault_Search_URL = hxxp://www.google.com/ie
uInternet Settings,ProxyServer = http=;ftp=;https=;
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: &Download by Orbit - c:\programmi\Orbitdownloader\orbitmxt.dll/201
IE: &Grab video by Orbit - c:\programmi\Orbitdownloader\orbitmxt.dll/204
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: Aggiungi a PDF esistente - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Aggiungi destinazione link a PDF esistente - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Append the content of the link to existing PDF file - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Append the content of the selected links to existing PDF file - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppendSelLinks.HTML
IE: Append to existing PDF file - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIEAppend.HTML
IE: Capture Web Page - c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Megamedia\Megakey\CaptureWebPage.htm
IE: Converti destinazione link in Adobe PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Converti in Adobe PDF - c:\programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Create PDF file - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF file from the content of the link - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECapture.HTML
IE: Create PDF files from the selected links - c:\programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll/ZeonIECaptureSelLinks.HTML
IE: Do&wnload selected by Orbit - c:\programmi\Orbitdownloader\orbitmxt.dll/203
IE: Down&load all by Orbit - c:\programmi\Orbitdownloader\orbitmxt.dll/202
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Fetch to Megaupload - c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Megamedia\Megakey\MegaUpload.htm
IE: Scarica con Mipony - file://c:\programmi\MiPony\Browser\IEContext.htm
LSP: c:\documents and settings\All Users\Dati applicazioni\Megamedia\Megakey\msadm.dll
FF - ProfilePath - c:\documents and settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\ln9e66g5.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Cerca
FF - prefs.js: browser.startup.homepage - hxxp://mystart.incredimail.com/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar_fs_IM2_TEST&search=
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
.
**************************************************************************
.
disk not found C:\
.
please note that you need administrator rights to perform deep scan
scansione processi nascosti ...
.
scansione entrate autostart nascoste ...
.
Scansione files nascosti ...
.
Scansione completata con successo
Files nascosti:
.
**************************************************************************
.
[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\npggsvc]
"ImagePath"="c:\windows\system32\GameMon.des -service"
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_USERS\S-1-5-21-583907252-842925246-1177238915-500\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID]
@Denied: (Full) (LocalSystem)
.
[HKEY_USERS\S-1-5-21-583907252-842925246-1177238915-500\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{87118821-B996-BE12-BBCA-B6BDF39E5A17}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"abpnmffeooajilkcafhegojfckkhekkbkg"=hex:6a,61,6d,6d,6c,66,70,62,6c,70,69,68,
   6f,64,6e,6b,66,62,64,67,00,00
"pafncffijobobldilcdhknhghadjfdoo"=hex:6a,61,6d,6d,6c,66,70,62,6c,70,69,68,6f,
   64,6e,6b,66,62,64,67,00,00
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{07A774A0-6047-11D1-BA20-006097D2898E}]
@DACL=(02 0000)
@="Logagent Class"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{AEE3E4A8-EF01-4024-A0F1-809D9B096E14}]
@DACL=(02 0000)
@="Windows Media Player Encoder Helper Class"
.
[HKEY_LOCAL_MACHINE\software\ESET\ESET Security\CurrentVersion\Info]
@Denied: (2) (LocalSystem)
"AppDataDir"="c:\\Documents and Settings\\All Users\\Dati applicazioni\\ESET\\ESET NOD32 Antivirus\\"
"DataDir"="ESET\\ESET NOD32 Antivirus\\"
"EditionName"=" "
"InstallDir"="c:\\Programmi\\ESET\\ESET NOD32 Antivirus\\"
"LanguageId"=dword:00000410
"PackageTag"=dword:6090e758
"ProductBase"=dword:00000000
"ProductCode"="{AC0A97B5-991D-4761-B4E9-B6F9811B6A38}"
"ProductName"="ESET NOD32 Antivirus"
"ProductType"="eav"
"ProductVersion"="4.0.468.1"
"UniqueId"="0003DDCE4B12D900"
"ScannerBuild"=dword:0000167c
"ScannerVersionId"=dword:0000117a
"ScannerVersion"="Open window for status."
"FixId"=dword:00000007
"ei2"=hex(b):90,5e,74,b8,3a,7a,6a,b0
"ei1"=hex(b):00,1a,92,bb,92,be,00,00
"ei3"=hex(b):fb,8c,7c,4d,00,00,00,00
"ei4"=dword:00000002
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\System*]
"OODEFRAG12.00.00.01PROFESSIONAL"="4FB598A81C297AD6EE0812567CA44E64AC17A8865E4A138F4F09603F6B6CFA61DF5E03CDFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74CFEBC9E127BECC74C5D575E7D6A3B9808BA7FD869164D6794A2D97226D213B555BA7FD869164D6794533C1902A7B859338BB89CC266D665783264BF73002CFC4F0A9A6B5141C99AD61EFA18840C0C1B89425006EB64724B2CADCC87BE95C3711F211F5B02DB7D75F01CC31542A02291C9A0B71D295044162310F6B75AB0EC37D08C421DA5D757F6D67340AA88A16A11965E6B95FCC416024540473C9AEF73162F05F7FA86753B8EDA4F131A360E86D2E83855C97B2469B1CCAB19286AB353B7DD48A6DC84B6C20FA3DDCE47BFA94D7109EDD7354E117129CCC2B92F48A03BAB4F182AD294623BB02A527CB9AEF9C7ED95C148FA33F41453A57A6A2EC59F1163CD3A510FBA01A70FBCE3179C1D4CB72D04FB6EDC7BF96EFC11CAE2228A5F6D35F478DE6915613C287B4B0F41BDAE8C78186988C50C92CFD71A314B2C4FD01D5C35208ADC5295E260DEC8C79A53F36E7A6F5747C2DCF0BBF721ADC29363A79FF555827D07B3F4397FAE1E1B403633B645769C4F837D8E6958D8C55C40A85E2A85EBF658AB131890B0091353EE5348F44BF00EBADD8D26C355CA029CC095B1A4F068D42F325ADD6E825FF0B1872A52EB66F40815CAC3B96BB0D0ED7DC7B3A2AC8288FB062589E78D697987688B50B31152EEEA6067E80DB3101C9BECAB23F69169E24B5A32321D593B6E28A1A36C948F301C1A9172D827247CAE1E4E64143759B6DEAB1B2EFD277435ADAA789DBBDEC4048FFC91D386557764E28F76124EAFBAE2BB84290FA7743576F86A7C678E43C536307FBC1376269E97628BAF742B73A44687C3DDEF7DB7A302E5C332944833D613B911655DC2EF3C4DADB338F298D6B421A8DB030E6265FDBEDD9B925E6367F34BB825CF8218C8271C19AC42979A72C113D7C2D84F4FB835789ED687A069DACA7292B4B4F8B78EEC844C9DF28EC524D1A521F011B84E31EFDEB961F2D9FBCBBD027CB9415876E04BE5C234E4AB458D25C06664D2F6808D070516A9A7AFCFBD635501B317DEBEA33607CA22A6E35792A835DA20B95696D78863ECA1EEE8ACF787AD00A74BEB8CFDD5908B993951CC5C83B308A6D4CA59D7B453CBBF83F1EE85A6302B9D668572DE8510795614B18E598D534B05A66BA29B02951400165A85B574E28A1FE45594F2D37561922067153A518C55C6267364F51B4EFB60C956F69BD734F7BDB8A5ADB18598640F3BF7EEF212C02AFEBF421FFDDA820F63B8BD5A0EEA74228B4769095190327512370DBE3EC231A2C1D0D86B0CD4202710EC0D5CA97C568C22E7B5894DA2DE5B63DBF5BA980D056B29ACDFF4BF4E74F970E6E2BC4B8D748C1CE8C124"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
.
- - - - - - - > 'winlogon.exe'(2044)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\sfc_os.dll
c:\programmi\file comuni\logishrd\bluetooth\LBTWlgn.dll
c:\windows\system32\COMRes.dll
c:\windows\system32\cscui.dll
.
- - - - - - - > 'lsass.exe'(608)
c:\windows\system32\setupapi.dll
c:\windows\system32\scecli.dll
.
Ora fine scansione: 2011-04-02  19:24:55
ComboFix-quarantined-files.txt  2011-04-02 17:24
.
Pre-Run: 49'053'437'952 byte disponibili
Post-Run: 49'460'518'912 byte disponibili
.
- - End Of File - - E47796905802D4C7C54EA5D383F44A0F