ho seguito vs indicazioni vi mando risultati sophos:
Area: Windows registry
Description: Hidden registry key
Location: \HKEY_USERS\S-1-5-21-1960408961-1767777339-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cgi/bWFyemkuZG9j_=?ID=IoGSorPqzrOETxr2JC2aAswvpuYSplOlQPm3dMOrLzuandAct_View=1andR_Folder=aW5ib3g=andmsgID=73andBody=2andfilename=bWFyemkuZG9j_=
Removable: No
Notes: (no more detail available)

---

Area: Windows registry
Description: Hidden registry value
Location: \HKEY_USERS\S-1-5-21-1960408961-1767777339-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count\HRZR_EHACVQY:uggc://nevnaan.yvoreb.vg/frnepu/nova/ygenpr_arj?vq=104&ct=1&dv=2007-08-25-01:47:11&yv=-1&jh=1&jy=0&as=0&zy=-1&pg=-1&jo=10&ay=-1&vc=151.75.176.49&z=q5821ns57771588508p5s9r1qqs83s7n&et=7&fd=7&hp=uggc:3N:2S:2Ssbehz.jrovfynaq.arg:2Ss15:2Spbzr-pbasvthener-ny-zrtyvb-nq-njner-hygvzn-irefvbar-639.ugzy
Removable: No
Notes: (type 3, length 16) "_\x04 \x02 "

---

Area: Local hard drives
Description: Unknown hidden file
Location: C:\Documents and Settings\paolo\Impostazioni locali\Dati applicazioni\zfquhlekvb.exe
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)

---

Area: Local hard drives
Description: Unknown hidden file
Location: C:\Documents and Settings\paolo\Impostazioni locali\Dati applicazioni\zfquhlekvb.dat
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available) Area: Local hard drives
Description: Unknown hidden file
Location: C:\Documents and Settings\paolo\Impostazioni locali\Dati applicazioni\zfquhlekvb_navps.dat
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)

segue risultati sophos:
Area: Local hard drives
Description: Unknown hidden file
Location: C:\Documents and Settings\paolo\Impostazioni locali\Dati applicazioni\zfquhlekvb_navps.dat
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)
Area: Local hard drives
Description: Unknown hidden file
Location: C:\WINDOWS\Prefetch\ZFQUHLEKVB.EXE-090AA548.pf
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)
Area: Local hard drives
Description: Unknown hidden file
Location: C:\Documents and Settings\paolo\Impostazioni locali\Dati applicazioni\zfquhlekvb_nav.dat
Removable: Yes (but clean up not recommended for this file)
Notes: (no more detail available)