Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Portatile attaccato da rootkit e trojan insieme

Portatile attaccato da rootkit e trojan insieme Opzioni
Topic Precedente · Topic Sucessivo
spcicato
Inviato: Sunday, June 07, 2009 2:45:28 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Ciao gentili forummisti.
Ho un portatile IBM con Sistema Operativo XP Professional, service pack 3, 512 MB di Ram e Avira antivirus. Ho una connessione adsl.
Giorni fa si è inserito un programma che mi ha disattivato il firewall.
Ho provato la scansione con Hijackthis, ma sia in modalità normale che in provvisoria non partiva. E qualsiasi programma si comportava in tal modo. Quando riavviavo, il pc non si accendeva. Ho risolto in parte con Combofix anche se l' ho dovuto attivare 2 volte di fila perchè si bloccava. Il suddetto programma mi ha eliminato 3 rootkit ed un trojan che creava il file sdra64.exe in C:\Windows\system32.
Ieri mentre navigavo in cerca di soluzioni si è attivata l' applicazione della stampante benchè non ce l' abbia:confused:
Ho staccato la connessione e sono andato in gestione periferiche per avere qualche informazione. Il sistema ha rilevato che la scheda di rete \Device\TCP (numero ecc.) è disconnessa dalla rete e la configurazione della scheda di rete è stata rilasciata Se la scheda di rete non è disconnessa ciò potrebbe essere dovuto ad un suo malfunzionamento. Ho controllato i parametri DNS durante la connessione e tutto è regolare.
Vi allego la scansione con Combofix.

ComboFix 09-06-04.09 - mionome 05/06/2009 18.38.09.10 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.502.161 [GMT 2:00]
Eseguito da: c:\documents and settings\mionome\Desktop\ComboFix.ua.exe
AV: Avira AntiVir PersonalEdition *On-access scanning enabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
* Resident AV is active


ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
c:\programmi\Microsoft Common
c:\windows\system32\drivers\gxvxcredrxvucnoeydwysjkcvjdkkafdalhim.sys
c:\windows\system32\drivers\IBM_0657_A9G_TP.MRK
c:\windows\system32\gxvxcfolwsefjklytavuhiyuupkmyyasotjro.dll
c:\windows\system32\gxvxcotetdixmihdjxtnsmlqboynbaodxwxwk.dll
c:\windows\system32\sdra64.exe
c:\windows\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job

.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Service_GXVXCSERV.SYS


((((((((((((((((((((((((( Files Creati Da 2009-05-05 al 2009-06-05 )))))))))))))))))))))))))))))))))))
.

2009-06-05 15:51 . 2009-06-05 15:51 -------- d-----w- c:\documents and settings\mionome\Pavark
2009-06-05 15:51 . 2009-06-05 15:51 23552 ----a-w- c:\windows\system32\drivers\phooks.sys
2009-06-05 15:25 . 2009-06-05 15:25 1884405 ----a-w- c:\programmi\SmitfraudFix.exe
2009-06-05 15:21 . 2009-06-05 15:22 -------- d-----w- c:\windows\BDOSCAN8
2009-06-05 12:13 . 2009-06-05 12:13 -------- d-----w- c:\programmi\AntiRootkit
2009-06-05 12:10 . 2009-05-26 11:20 40160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-06-05 12:10 . 2009-06-05 12:10 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2009-06-05 12:10 . 2009-06-05 12:10 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2009-06-05 12:10 . 2009-05-26 11:19 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-06-05 12:08 . 2009-06-05 12:08 311591 ----a-w- c:\programmi\AntiRootkit.zip
2009-06-05 12:01 . 2009-06-05 12:01 3371384 ----a-w- c:\programmi\mbam-setup.exe
2009-06-02 14:11 . 2009-06-02 14:11 -------- d-----w- c:\windows\system32\Adobe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-05 16:35 . 2007-01-04 10:08 3216 ----a-w- c:\windows\system32\encobject.dat
2009-06-04 11:13 . 2006-01-27 17:43 76970 ----a-w- c:\windows\system32\perfc010.dat
2009-06-04 11:13 . 2006-01-27 17:43 454368 ----a-w- c:\windows\system32\perfh010.dat
2009-05-31 11:05 . 2006-11-16 16:51 5427 ----a-w- c:\windows\system32\EGATHDRV.SYS
2009-02-23 19:15 . 2009-02-23 19:15 318369 ----a-w- c:\programmi\HiJackThis.zip
2008-12-18 22:19 . 2008-12-18 22:19 22058104 ------w- c:\programmi\antivir_workstation_winu_en_h.exe
2008-09-08 23:35 . 2008-09-08 23:35 2811211 ------w- c:\programmi\Eraser57Setup.zip
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"WMPNSCFG"="c:\programmi\Windows Media Player\WMPNSCFG.exe" [2006-11-02 204288]
"updateMgr"="c:\programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" [2006-03-30 313472]
"MSMSGS"="c:\programmi\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Tucan"="c:\programmi\AntiRootkit\PAVARK.exe" [2009-06-05 744853]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TVT Scheduler Proxy"="c:\programmi\File comuni\Lenovo\Scheduler\scheduler_proxy.exe" [2007-07-10 540672]
"TPKMAPHELPER"="c:\programmi\ThinkPad\Utilities\TpKmapAp.exe" [2006-06-02 856064]
"TPHOTKEY"="c:\progra~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe" [2006-07-25 94208]
"SunJavaUpdateSched"="c:\programmi\Java\jre6\bin\jusched.exe" [2008-12-16 136600]
"SoundMAXPnP"="c:\programmi\Analog Devices\Core\smax4pnp.exe" [2005-05-20 925696]
"PWRMGRTR"="c:\progra~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL" [2006-05-25 151552]
"PDService.exe"="c:\programmi\Lenovo\SafeGuard PrivateDisk\pdservice.exe" [2006-03-13 41472]
"LPManager"="c:\progra~1\THINKV~1\PrdCtr\LPMGR.exe" [2006-07-04 110592]
"ISUSScheduler"="c:\programmi\File comuni\InstallShield\UpdateService\issch.exe" [2004-07-27 81920]
"ISUSPM Startup"="c:\progra~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-07-27 221184]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2006-07-25 94208]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2006-07-25 118784]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2006-07-25 77824]
"EZEJMNAP"="c:\progra~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe" [2006-02-23 237568]
"DLA"="c:\windows\System32\DLA\DLACTRLW.EXE" [2006-02-02 122940]
"DiskeeperSystray"="c:\programmi\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-05-18 196696]
"cssauth"="c:\programmi\Lenovo\Client Security Solution\cssauth.exe" [2006-07-14 2341632]
"BLOG"="c:\progra~1\ThinkPad\UTILIT~1\BatLogEx.DLL" [2006-05-25 208896]
"AwaySch"="c:\programmi\Lenovo\AwayTask\AwaySch.EXE" [2006-08-16 69632]
"avgnt"="c:\programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-06-12 266497]
"AMSG"="c:\progra~1\THINKV~1\AMSG\amsg.exe" [2005-11-14 487424]
"ACWLIcon"="c:\programmi\ThinkPad\ConnectUtilities\ACWLIcon.exe" [2006-08-25 110592]
"ACTray"="c:\programmi\ThinkPad\ConnectUtilities\ACTray.exe" [2006-08-25 409600]
"TrackPointSrv"="tp4serv.exe" - c:\windows\system32\tp4serv.exe [2005-07-12 94208]
"TP4EX"="tp4ex.exe" - c:\windows\system32\TP4EX.exe [2005-10-17 65536]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2006-11-16 24576]
Microsoft Office.lnk - c:\programmi\Microsoft Office\Office10\OSA.EXE [2001-2-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\AwayNotify]
2006-08-16 17:07 49152 ------w- c:\programmi\Lenovo\AwayTask\AwayNotify.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
2005-07-05 14:45 28672 -c----w- c:\windows\system32\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [25/02/2009 20.25.59 28544]
R0 phooks;phooks;c:\windows\system32\drivers\phooks.sys [05/06/2009 17.51.08 23552]
R1 TPPWRIF;TPPWRIF;c:\windows\system32\drivers\TPPWRIF.SYS [16/11/2006 18.30.53 4442]
R2 DbgMsg;Debug Message;c:\windows\system32\drivers\DbgMsg.sys [28/03/2007 17.32.19 18240]
R2 PrivateDisk;PrivateDisk;c:\programmi\Lenovo\SafeGuard PrivateDisk\privatediskm.sys [13/03/2006 17.05.54 58368]
R2 smi2;smi2;c:\programmi\SMI2\smi2.sys [14/07/2006 16.55.12 3968]
R3 Tp4Track;PS/2 TrackPoint Driver;c:\windows\system32\drivers\tp4track.sys [17/11/2006 2.23.07 13840]
S3 MosIrUsb;MosIrUsb.sys;c:\windows\system32\drivers\MosIrUsb.sys [02/08/2004 17.16.34 48128]
.
Contenuto della cartella 'Scheduled Tasks'

2009-06-04 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-06-05 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 16:04]

2009-06-05 c:\windows\Tasks\PMTask.job
- c:\progra~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE [2006-11-16 16:13]
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

HKLM-Run-Picasa Media Detector - c:\programmi\Picasa2\PicasaMediaDetector.exe
SafeBoot-procexp90.Sys


.
------- Scansione supplementare -------
.
uStart Page = hxxp://p2pforum.it/
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\Office10\EXCEL.EXE/3000
IE: Invia a periferica &Bluetooth... - c:\programmi\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-06-05 18:41
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-4259151014-186399029-1429193781-1005\Software\Microsoft\SystemCertificates\AddressBook*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'winlogon.exe'(1292)
c:\windows\system32\tvt_gina.dll
c:\programmi\Lenovo\Client Security Solution\css_gina_plugin.dll
c:\programmi\Lenovo\Client Security Solution\css_wait_bar.dll
c:\programmi\Lenovo\Client Security Solution\cssuserdatadispatcher.dll
c:\programmi\Lenovo\Client Security Solution\csswait.dll
c:\programmi\File comuni\Lenovo\tvt_banner.dll
c:\programmi\Lenovo\Client Security Solution\cssdlgpwentry.dll
c:\programmi\Lenovo\Client Security Solution\dlganswerprompt.dll
c:\programmi\Lenovo\Client Security Solution\tvttsp.dll
c:\programmi\Lenovo\Client Security Solution\tcsrpc.dll
c:\programmi\File comuni\Lenovo\tvt_res.dll
c:\programmi\Lenovo\AwayTask\AwayNotify.dll
.
Ora fine scansione: 2009-06-05 18.42.35
ComboFix-quarantined-files.txt 2009-06-05 16:42

Pre-Run: 35.912.671.232 byte disponibili
Post-Run: 35.899.682.816 byte disponibili

164 --- E O F --- 2009-03-18 13:29

Spero di esservi stato di aiuto con queste informazioni e ringrazio chi mi risponderà.
Torna in alto
 
Sponsor
Inviato: Sunday, June 07, 2009 2:45:28 PM

 
Torna in alto
 
enigmista63
Inviato: Sunday, June 07, 2009 5:08:16 PM

Rank: AiutAmico

Iscritto dal : 4/28/2007
Posts: 1,976
Ciao putroppo a questo rootkit sono associati altri malware vedi immagine:
Torna in alto
 
spcicato
Inviato: Sunday, June 07, 2009 9:43:09 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Grazie Enigmista, ma che devo fare?
Torna in alto
 
r16
Inviato: Sunday, June 07, 2009 9:47:41 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Scarica ed installa MalwareBytes:
clicca qui per il download : http://www.aiutamici.com/software?id=80346
Prima di fare la scansione AGGIORNALO. (è molto importante)
Esegui una scansione completa del sistema.
Posta il log.
Torna in alto
 
spcicato
Inviato: Sunday, June 07, 2009 10:37:11 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Grazie r16. Ecco il log di Malwarebytes

Malwarebytes' Anti-Malware 1.37
Versione del database: 2243
Windows 5.1.2600 Service Pack 3

07/06/2009 21.49.23
mbam-log-2009-06-07 (21-49-23).txt

Tipo di scansione: Scansione completa (C:\|D:\|R:\|)
Elementi scansionati: 136454
Tempo trascorso: 33 minute(s), 52 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 0
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 0

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
(Nessun elemento malevolo rilevato)

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
(Nessun elemento malevolo rilevato)
Torna in alto
 
r16
Inviato: Sunday, June 07, 2009 11:17:58 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Posta un log di HJT:
http://www.aiutaamici.com/software?ID=11175
Torna in alto
 
enigmista63
Inviato: Monday, June 08, 2009 12:40:00 AM

Rank: AiutAmico

Iscritto dal : 4/28/2007
Posts: 1,976
Ciao,purtroppo le nuove varianti rootkit non sono ancora state rilevate da molti software di protezione,solo 5 al momento riconoscono le minacce,uno di questi e' PREVX da cui ho preso la notizia che ti ho allegato,quindi puo' succedere che le scansioni che farai non rilevano nulla,e sinceramente non so quando saranno in grado di rilevare e debellare la minaccia,se e' ancora presente nel pc,PREVX e' in grado di rimuoverla,ma mi sembra eccessivo acquistare una licenza per debellare un virus,da quello che dicono gli sviluppatori PREVX anche la versione FREE e' in grado di rilevarla,ma poi devi rimuovere tutte le infezioni manualmente, esegui i consigli di R16 speriamo riesca a risolvere i problema.
Torna in alto
 
r16
Inviato: Monday, June 08, 2009 12:43:32 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
In teoria il rootkit, è stato eliminato da Combofix:
c:\windows\system32\drivers\gxvxcredrxvucnoeydwysjkcvjdkkafdalhim.sys
Però se una scansione con Prevx free, può aiutare a rilevare se ci sono "rimasugli" conviene farla.
Poi per l'eventuale eliminazione dei file infetti rilevati, un modo per eliminarli lo si trova.
http://free.prevx.com/

Vorrei sapere come funziona il pc, e quali problemi riscontri.
Torna in alto
 
spcicato
Inviato: Wednesday, June 10, 2009 10:55:52 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Grazie Enigmista63 e r16 e scusatemi se rispondo solo ora, ma un virus vero e proprio mi ha messo a terra in questi ultimi giorni.
Il pc sembra migliorato, la navigazione va bene, ma qualche stranezza la noto ancora.
Per esempio dalla scansione con Hijackthis non vedo alcune applicazioni tipo index.dat suite che ho aggiunto al portatile e prima apparivano nel log. Inoltre sempre nel log non appare la sequenza DNS di numeri della mia connessione adsl. E' normale?
Poi c' è un aumento della memoria allocata durante la navigazione, con picchi a 800000 kb mai avuti e la memoria fisica disponibile molto più bassa della cache di sistema.Think
Adesso scansiono con Prevx.
Ciao e a presto

Ecco il log allegato
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22.17.34, on 10/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\IPSSVC.EXE
C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Programmi\ThinkPad\Bluetooth Software\bin\btwdins.exe
C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
c:\programmi\lenovo\system update\suservice.exe
C:\Programmi\File comuni\Lenovo\tvt_reg_monitor_svc.exe
C:\WINDOWS\system32\TpKmpSVC.exe
C:\Programmi\Lenovo\Rescue and Recovery\rrservice.exe
C:\Programmi\File comuni\Lenovo\Scheduler\tvtsched.exe
C:\Programmi\Lenovo\Rescue and Recovery\ADM\IUService.exe
C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
C:\Programmi\File comuni\Lenovo\Logger\logmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\ThinkPad\ConnectUtilities\SvcGuiHlpr.exe
C:\Programmi\Lenovo\Client Security Solution\cssauth.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Diskeeper Corporation\Diskeeper\DkIcon.exe
C:\Programmi\Lenovo\Client Security Solution\tvtpwm_tray.exe
C:\Programmi\File comuni\Lenovo\Scheduler\scheduler_proxy.exe
C:\WINDOWS\system32\tp4serv.exe
C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
C:\Programmi\Java\jre6\bin\jusched.exe
C:\Programmi\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\Lenovo\PkgMgr\HOTKEY\TPONSCR.exe
C:\Programmi\Lenovo\SafeGuard PrivateDisk\pdservice.exe
C:\Programmi\Lenovo\PkgMgr\HOTKEY_1\TpScrex.exe
C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\hkcmd.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
C:\WINDOWS\System32\DLA\DLACTRLW.EXE
C:\Programmi\Lenovo\AwayTask\AwaySch.EXE
C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\PROGRA~1\THINKV~1\AMSG\amsg.exe
C:\Programmi\ThinkPad\ConnectUtilities\ACWLIcon.exe
C:\Programmi\ThinkPad\ConnectUtilities\ACTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Windows Media Player\WMPNSCFG.exe
C:\Programmi\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aiutamici.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\System32\DLA\DLASHX_W.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: ThinkVantage Password Manager - {F040E541-A427-4CF7-85D8-75E3E0F476C5} - C:\Programmi\Lenovo\Client Security Solution\tvtpwm_ie_com.dll
O4 - HKLM\..\Run: [TVT Scheduler Proxy] C:\Programmi\File comuni\Lenovo\Scheduler\scheduler_proxy.exe
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [TPKMAPHELPER] C:\Programmi\ThinkPad\Utilities\TpKmapAp.exe -helper
O4 - HKLM\..\Run: [TPHOTKEY] C:\PROGRA~1\Lenovo\PkgMgr\HOTKEY\TPHKMGR.exe
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Programmi\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [PWRMGRTR] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor
O4 - HKLM\..\Run: [PDService.exe] "C:\Programmi\Lenovo\SafeGuard PrivateDisk\pdservice.exe"
O4 - HKLM\..\Run: [LPManager] C:\PROGRA~1\THINKV~1\PrdCtr\LPMGR.exe
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [DLA] C:\WINDOWS\System32\DLA\DLACTRLW.EXE
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Programmi\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [cssauth] "C:\Programmi\Lenovo\Client Security Solution\cssauth.exe" silent
O4 - HKLM\..\Run: [BLOG] rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog
O4 - HKLM\..\Run: [AwaySch] C:\Programmi\Lenovo\AwayTask\AwaySch.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Programmi\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [AMSG] C:\PROGRA~1\THINKV~1\AMSG\amsg.exe
O4 - HKLM\..\Run: [ACWLIcon] C:\Programmi\ThinkPad\ConnectUtilities\ACWLIcon.exe
O4 - HKLM\..\Run: [ACTray] C:\Programmi\ThinkPad\ConnectUtilities\ACTray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Programmi\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Programmi\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a periferica &Bluetooth... - C:\Programmi\ThinkPad\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.lenovo.com/welcome/thinkpad
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - http://download.boulder.ibm.com/ibmdl/pub/pc/pccbbs/bp_pc/acpir.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1167387531215
O20 - Winlogon Notify: !SASWinLogon - C:\Programmi\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: AwayNotify - C:\Programmi\Lenovo\AwayTask\AwayNotify.dll
O23 - Service: Ac Profile Manager Service (AcPrfMgrSvc) - Unknown owner - C:\Programmi\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe
O23 - Service: Access Connections Main Service (AcSvc) - Lenovo - C:\Programmi\ThinkPad\ConnectUtilities\AcSvc.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Programmi\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmi\ThinkPad\Bluetooth Software\bin\btwdins.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Programmi\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Unknown owner - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IPS Core Service (IPSSVC) - Lenovo Group Limited - C:\WINDOWS\system32\IPSSVC.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: IBM PSA Access Driver Control (PsaSrv) - Unknown owner - C:\WINDOWS\system32\PsaSrv.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Programmi\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: System Update (SUService) - Lenovo Group Limited - c:\programmi\lenovo\system update\suservice.exe
O23 - Service: ThinkVantage Registry Monitor Service - Unknown owner - C:\Programmi\File comuni\Lenovo\tvt_reg_monitor_svc.exe
O23 - Service: IBM KCU Service (TpKmpSVC) - Unknown owner - C:\WINDOWS\system32\TpKmpSVC.exe
O23 - Service: TVT Backup Service - Lenovo Group Limited - C:\Programmi\Lenovo\Rescue and Recovery\rrservice.exe
O23 - Service: TVT Scheduler - Lenovo Group Limited - C:\Programmi\File comuni\Lenovo\Scheduler\tvtsched.exe
O23 - Service: tvtnetwk - Unknown owner - C:\Programmi\Lenovo\Rescue and Recovery\ADM\IUService.exe

--
End of file - 11372 bytes
Torna in alto
 
r16
Inviato: Wednesday, June 10, 2009 11:15:53 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Postami il log di Prevx.
Proviamo ad "alleggerire" il pc.
Disattiva il ripristino configurazione di sistema, e tienilo disattivato, fino alla soluzione del problema http://guide.aiutamici.com/guide?C1=7&C2=68&ID=80121
Avvia hijackthis, metti la spunta alle voci che andrò ad elencarti e con tutte le applicazioni chiuse e disconnesso da Internet,premi su fix checked
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [EZEJMNAP] C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Programmi\Diskeeper Corporation\Diskeeper\DkIcon.exe"
O4 - HKCU\..\Run: [WMPNSCFG] C:\Programmi\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Programmi\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - Global Startup: Digital Line Detect.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O16 - DPF: {2DAD3559-2923-4935-AD49-B673D2539944} (IASRunner Class) - http://download.boulder.ibm.com/ibmdl/pub/pc/pccbbs/bp_pc/acpir.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scanner/sources/en/scan8/oscan8.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_si te.cab?1167387531215

Trova e cancella i file in rosso:(Sono cartelle e file che non ti servono più)
c:\programmi\SmitfraudFix.exe
c:\windows\BDOSCAN8
c:\documents and settings\mionome\Pavark
c:\programmi\AntiRootkit
c:\programmi\AntiRootkit.zip

Dai una pulita (registro compreso)con CCleaner http://www.aiutaamici.com/software?ID=11223
Riavvia il pc.
*********************************************************************************
Poi:
Start\Esegui\copia e incolla la stringa %temp% clicca su Ok, svuota la cartella temp. (non eliminare la cartella)
Poi:
Provvedi a svuotare del suo contenuto la cartella Prefetch :
clicca su Risorse del Computer
clicca su Disco locale C:
cerca, all’interno delle cartelle che saranno visualizzate la cartella Windows, aprila ed, al suo interno, cerca la cartella Prefetch, la apri ed elimina tutte le voci conservate al suo interno ( non eliminare la cartella)
SVUOTA IL CESTINO
Poi:
Lancia Hijackthis e pulisci gli ADS in questo modo:(esclusivamente, su partizioni in NTFS):
clicca sulla voce Open the misc tool section
clicca su Open ads spy
togli la spunta alla voce Quick scan (windows base folder only)
clicca su Scan
se venissero rilevati ADS, spunta tutte le caselline e clicca su Remove selected
Vediamo se il pc và meglio.
Torna in alto
 
spcicato
Inviato: Thursday, June 11, 2009 12:13:22 AM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Ecco il log di Prevx
Grazie

Prevx Scan Log - Version v3.0.1.65
Log Generated: 10/6/2009 23:41, Type: 0,1
Windows XP Professional Service Pack 3 (Build 2600) 32bit|1040
Some non-malicious files are not included in this log.
Heuristics Settings: Age: 1, Pop: 1, Heu: 2 (Dir: 1)
Last Scan: Wed 2009-06-10 23:32:12 ora solare Europa occidentale. Number of Scans: 2. Last Scan Duration: 43 seconds.
[U] (ACTIVE) c:\windows\system32\ieui.dll [PX5: D0F6CF36001F9714C22802861E743B00CD0093F8]
[U] (ACTIVE) c:\windows\system32\xmllite.dll [PX5: 511C1794000148AFDC44018DF680F7004980584C]
[U] (ACTIVE) c:\windows\system32\usp10.dll [PX5: 0BFC1F8200FC4183320D06E3A9BA7B008BD06BF9]
[U] c:\programmi\superantispyware\saskutil.sys [PX5: 73F3B006F0232FC31CE9015BA6E9C200AA4F1C87]
[U] c:\programmi\superantispyware\sasenum.sys [PX5: 82393A45F0ED8C5D1CBD00DCD39A27004A39A362]
[U] c:\windows\fonts\vgasys.fon [PX5: 374F9840007DD045208100F3EB9384005BB87D9B]
[U] c:\programmi\file comuni\lenovo\tvt_version.dll [PX5: 99E1508F00DBCF0F0B2506C9B6E5C30025AF2CF6]
[U] c:\windows\system32\netevent.dll [PX5: 40A7EA6000F98BF2AEBC031EC1E5AE00A6AACB4C]
[U] c:\programmi\avira\antivir personaledition classic\rctext.dll [PX5: 071F6FDD0103F80051FB018E33789B009A64C1E8]
[U] c:\programmi\avira\antivir personaledition classic\avwsc.exe [PX5: C7306FEAD0B1FB442ECE034E1C8B8400356620D6]
[U] c:\windows\system32\msxml3r.dll [PX5: 5AF97DCB004CC690CA9B00301541D000F7051926]
[U] c:\windows\system32\tvt_gina_api.dll [PX5: 9332DA9D0091704B5004045AF809CB00851979E4]
[U] c:\programmi\java\jre6\bin\awt.dll [PX5: 6FC7DA6A00B7012F402B11566071EF00B10AC898]
[U] c:\programmi\java\jre6\bin\dcpr.dll [PX5: F3578CDE00466B7430F902AA420905007314E4A1]
[U] c:\programmi\java\jre6\bin\deploy.dll [PX5: D829C8BD00667131306E017981A0B300C83BB53F]
[U] c:\programmi\java\jre6\bin\client\jvm.dll [PX5: 2786860F006611D90071243C9C4B9D0072C71482]
[U] c:\programmi\java\jre6\bin\fontmanager.dll [PX5: 867F763C00253CF230F3059007F69100777D9309]
[U] c:\programmi\java\jre6\bin\hpi.dll [PX5: 8FF02783004820BF3EEC009725351300A172BDF6]
[U] c:\programmi\java\jre6\bin\java.dll [PX5: 45C3209200B910B8F081011146C0A20022468D6D]
[U] c:\programmi\java\jre6\bin\java.exe [PX5: AC00CF8A98272C5C354D0282D60CB1002F9C8CF6]
[U] c:\programmi\java\jre6\bin\jp2native.dll [PX5: 6301B74200C1B83520990093BA7B8400EAE62896]
[U] c:\programmi\java\jre6\bin\jpeg.dll [PX5: F61B0A6F00005E13400D02E5D01AFA0053417285]
[U] c:\programmi\java\jre6\bin\net.dll [PX5: A4A50E1A005469DC30E3017F9B839500457DCDA5]
[U] c:\programmi\java\jre6\bin\nio.dll [PX5: 6945ED0A004791B8508800ABE6348200573D595F]
[U] c:\programmi\java\jre6\bin\verify.dll [PX5: 9199A94800FAA83B7C8500CD1B301F000AAFB180]
[U] c:\programmi\java\jre6\bin\zip.dll [PX5: C09726D600E193C6B89500A8B3FD7000BAA4299C]
[U] c:\programmi\internet explorer\ieproxy.dll [PX5: 34FDA5BC00E33FFA64210444AC259B00288399D3]
[U] c:\windows\system32\ieapfltr.dll [PX5: 2AA8E66700D45015DA0405BA0AC2BD004B331862]
[U] c:\windows\system32\jscript.dll [PX5: 8AAF6CF50023B1A5D02607A91E63D000D10A3E80]
[U] c:\windows\system32\imgutil.dll [PX5: CAF7E19500E00DD38E9300C38F63CD008472484B]
[U] c:\windows\system32\pngfilt.dll [PX5: 2C88A35000FB99D2AE01007B83E1F90030AD0C82]
[U] c:\windows\system32\mshtmled.dll [PX5: F0E26E42004027E54A9807F0B82C78009A69B75D]
[U] c:\windows\system32\ddrawex.dll [PX5: D62AB767009747026A140017291DEA00CF71AE05]
[U] c:\windows\system32\macromed\flash\flash9e.ocx [PX5: AA50605E8053E5C995BF2DADCB08AB00B373231F]
[U] c:\windows\system32\vbscript.dll [PX5: BFA0B1AD00E4830790DA067CA4BAE10010D1723E]
[U] c:\windows\system32\dxtrans.dll [PX5: 3165F68C005E859446A8030505EB7B00E53BBBD8]
[U] c:\windows\system32\dxtmsft.dll [PX5: 631A868A00D480EF4C6705FA7A754B005827D13F]
[U] c:\windows\system32\iepeers.dll [PX5: 203CA2AC005F4E41EC6702AB4F31CE001E77FBDD]
[U] c:\programmi\internet explorer\custsat.dll [PX5: 4BE7EAAB0029E5D784000049585386007432663A]
[U] c:\programmi\index.dat suite\idsuite.exe [PX5: 6A0D5AB8002CEB92B0F1097275B75400E1088411]
[U] c:\programmi\microsoft office\office10\outllib.dll [PX5: 56429F050871AF6D1428619CB8AD080068E58E60]
[G] (ACTIVE) c:\programmi\superantispyware\deupx.dll [PX5: 2108B5C400931B2D80120598DC7A110085824418]
[G] (ACTIVE) c:\programmi\superantispyware\sasseh.dll [PX5: D019759F00C2D91B308701D83CF5A400155A0562]
[G] (ACTIVE) c:\programmi\superantispyware\sasctxmn.dll [PX5: CECCAB09000923FAF004003875F09900C99E9126]
[G] (ACTIVE) c:\windows\system32\drprov.dll [PX5: 89B05BA400A6D21F388300BA87CCCF0071EEB8F6]
[G] (ACTIVE) c:\programmi\lenovo\safeguard privatedisk\pdshell0410.dll [PX5: F10F738700D81D84146D00ECB2272E00565A0730]
[G] (ACTIVE) c:\programmi\lenovo\safeguard privatedisk\pdshell.dll [PX5: 8CD591A200E120A634EC005F302F1600468DD115]
[G] (ACTIVE) c:\windows\system32\ntlanman.dll [PX5: 9CC253FC00583DE9ACBC00C4FECB77008FDDE406]
[G] (ACTIVE) c:\windows\system32\davclnt.dll [PX5: A962084F0067018764C0006CE62BFE002167E5D3]
[G] (ACTIVE) c:\programmi\eraser\erasext.dll [PX5: 71B8480D00F3195C606603D7DB84F10071E9DD08]
[G] (ACTIVE) c:\windows\system32\xmlprovi.dll [PX5: C0137EBC00DD5A42C4D5005A2E7575000CEA1F66]
[G] (ACTIVE) c:\windows\system32\netui0.dll [PX5: 4555176600BF8DF6409F01E0599C810088147455]
[G] (ACTIVE) c:\programmi\malwarebytes' anti-malware\mbamext.dll [PX5: 2636393D103EDB42251701B5D563E600F23C2578]
[G] (ACTIVE) c:\windows\system32\eraser.dll [PX5: 2B6A39EB0016AEC2005807B7404C4000B69613F4]
[G] (ACTIVE) c:\windows\system32\shdoclc.dll [PX5: C5AE1F2F0024C961A44F0877DE811700A23B28BB]
[G] (ACTIVE) c:\windows\system32\netui1.dll [PX5: 6BB9930500D0F90EC0BA038251212B00372F3347]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\shlext.dll [PX5: FE997410012EA45B016301F2644AFF002A9A53D4]
[G] (ACTIVE) c:\windows\system32\mui\0010\hhctrlui.dll [PX5: BA28999700DF7F81607B01C7951F4A005B77C7B8]
[G] (ACTIVE) c:\windows\system32\igfxress.dll [PX5: C9B16CF6002BE698F06216D818819900BC0189DB]
[G] (ACTIVE) c:\documents and settings\mionome\dati applicazioni\superantispyware.com\superantispyware\sddlls\uirepair.dll [PX5: DC56B71D00070D77CCDF0199DBA47700ADF0B16E]
[G] (ACTIVE) c:\windows\system32\hhctrl.ocx [PX5: B854757400731230521A08CCA37E7900E5DA71A9]
[G] (ACTIVE) c:\windows\system32\ntdll.dll [PX5: 490F683C006E3FB11AE50B0B9F728800FC1975C1]
[G] (ACTIVE) c:\windows\system32\smss.exe [PX5: FB45C9580064EFA6C69B00AD18ED030059F6B39B]
[G] (ACTIVE) c:\windows\system32\comdlg32.dll [PX5: A9241E4200D223D04A440478464A410020B92150]
[G] (ACTIVE) c:\windows\system32\gdi32.dll [PX5: 5040FD9D00CC2C26602C04ED747E7A00DE1BA07A]
[G] (ACTIVE) c:\windows\system32\imagehlp.dll [PX5: E0EC5CAB0066DD3B342C025E6B2639005054F18F]
[G] (ACTIVE) c:\windows\system32\kernel32.dll [PX5: 74382DCB004F949AC6A00F0AF3F4F1002EB295A9]
[G] (ACTIVE) c:\windows\system32\ole32.dll [PX5: 8C38473E00863731A4D713E8E1EB56002957DA50]
[G] (ACTIVE) c:\windows\system32\oleaut32.dll [PX5: 562389F100939B5B6CB5087362AE530080541A4F]
[G] (ACTIVE) c:\windows\system32\rpcrt4.dll [PX5: 11F723A000F4669BECB4084950903A0057AD45EE]
[G] (ACTIVE) c:\windows\system32\urlmon.dll [PX5: 1830714000B5A583B4D8114BB2FE140036679107]
[G] (ACTIVE) c:\windows\system32\user32.dll [PX5: 8D2FE23500FE1927D8C008C5B8637500651D4C2C]
[G] (ACTIVE) c:\windows\system32\version.dll [PX5: 72DD0533003F26F04A6F00F9C3C0BF0021938452]
[G] (ACTIVE) c:\windows\system32\wininet.dll [PX5: 5501E6E600D89D2F9C060C6E6D5FC50032BD4EDA]
[G] (ACTIVE) c:\windows\system32\wldap32.dll [PX5: 4FAF0CCF005A3487A41A02DEA0C6E600D4A134BA]
[G] (ACTIVE) c:\windows\system32\comctl32.dll [PX5: 4F0A2D1A00E7D4E26C3A0997943FEB000329CD14]
[GP] (ACTIVE) c:\windows\system32\shlwapi.dll [PX5: 576A118E00D6F40F3CC807BA0889E100DE680372]
[G] (ACTIVE) c:\windows\system32\msvcrt.dll [PX5: 6786FBCD00A604243CC605978A362F0047479516]
[G] (ACTIVE) c:\windows\system32\mpr.dll [PX5: 7E26821800AF617DEA1E00393C441F008910575D]
[G] (ACTIVE) c:\windows\system32\secur32.dll [PX5: 5D63756C00A9AA1ADC79006544A9AE00619CEEF7]
[G] (ACTIVE) c:\windows\system32\shdocvw.dll [PX5: 3AD563BC000FEBCAE0031621E82892007791C9DF]
[G] (ACTIVE) c:\windows\system32\iertutil.dll [PX5: 6946C4A20009ACA216050494706B560017AA3411]
[G] (ACTIVE) c:\windows\system32\normaliz.dll [PX5: E3FC1A7000BA1C775C420052AC60C600F74EBAFC]
[G] (ACTIVE) c:\windows\system32\apphelp.dll [PX5: 7DD420CF00F6748FEC9D0116E0C40B00C00681B2]
[G] (ACTIVE) c:\windows\system32\userenv.dll [PX5: 274E3C2F0024BF1B2E530B5A3AB5EA005966585D]
[G] (ACTIVE) c:\windows\system32\cryptui.dll [PX5: FC12AF700069F9D2FE0607E01D89BF009FFEAA01]
[G] (ACTIVE) c:\windows\system32\msasn1.dll [PX5: 171DDD460018FDFEE099001A630D9400DF589454]
[G] (ACTIVE) c:\windows\system32\netapi32.dll [PX5: 7462A9A40068AC15264705268CA7AC00B2D0EEE7]
[G] (ACTIVE) c:\windows\system32\wintrust.dll [PX5: BBF3FE7400DC07F9B27E02AF374E86001CB2C26D]
[G] (ACTIVE) c:\windows\system32\csrss.exe [PX5: 7E2C457100B8DB47182600665DD0AE005A93CA97]
[G] (ACTIVE) c:\windows\system32\csrsrv.dll [PX5: 0E9D22D000D50DA27ED10041A4CA360072502193]
[G] (ACTIVE) c:\windows\system32\basesrv.dll [PX5: DCDCEC17002BFF57CEE000864E966200A98AE204]
[G] (ACTIVE) c:\windows\system32\winsrv.dll [PX5: BC9D81C9004F7D727C180406A252F7004E16F2BF]
[G] (ACTIVE) c:\windows\system32\winlogon.exe [PX5: 38B01C05009EAAB8CA1307D21BFA8500D5209A80]
[G] (ACTIVE) c:\windows\system32\authz.dll [PX5: 643161B900676DC7F465009F20FAD4003F802E04]
[G] (ACTIVE) c:\windows\system32\nddeapi.dll [PX5: E3CC6FCF000B040D48CD0002111984006B169FA5]
[G] (ACTIVE) c:\windows\system32\profmap.dll [PX5: 0F402C6F00D880896C3600CA3A46D50037176D54]
[G] (ACTIVE) c:\windows\system32\psapi.dll [PX5: E35D9B0B00FEA8935A5E00283FFF700020BDE028]
[G] (ACTIVE) c:\windows\system32\regapi.dll [PX5: 6B204D3500E5B3DBC2230058FCF24300FAEFC21A]
[G] (ACTIVE) c:\windows\system32\setupapi.dll [PX5: A5C89CD9001856B348A00F7F17668400445A4D3A]
[G] (ACTIVE) c:\windows\system32\winsta.dll [PX5: 3F914A3A00E0D736D2B700CB4D57A000351EE079]
[G] (ACTIVE) c:\windows\system32\ws2_32.dll [PX5: 3BB2796F00A10256423801F2C684DE0049FC67E2]
[G] (ACTIVE) c:\windows\system32\ws2help.dll [PX5: 2F03D11F003A101D4E4C00E172F606004F41078C]
[G] (ACTIVE) c:\windows\system32\imm32.dll [PX5: 1DD43B55004334A8AE2F014DB680150012DE5AAA]
[G] (ACTIVE) c:\windows\system32\msctfime.ime [PX5: 7067BC94004780DCB40902EBE043D700A615E886]
[G] (ACTIVE) c:\windows\system32\msgina.dll [PX5: 23935CBF00B404A2462E0FE2C0CB7E004CA3B2A2]
[G] (ACTIVE) c:\windows\system32\odbc32.dll [PX5: EF73221700267D3DD05803C7ECF13C00D009DECD]
[G] (ACTIVE) c:\windows\system32\sxs.dll [PX5: 713555D00016AF6EE8430A4532698B00B2B0D6FB]
[G] (ACTIVE) c:\windows\system32\odbcint.dll [PX5: 39D4A2AD00248E14806101AEBBE29A00FD9EFA81]
[G] (ACTIVE) c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll [PX5: D7B3752300A22AAC168F10E8A4E5E500A9029F11]
[G] (ACTIVE) c:\windows\system32\sfc.dll [PX5: 9B3DB624004DA8C7149A004526F09B00E5C80068]
[G] (ACTIVE) c:\windows\system32\sfc_os.dll [PX5: 5B46691300DAE27326CC02CA0CDC6C008E400438]
[G] (ACTIVE) c:\windows\system32\ncobjapi.dll [PX5: 1C74616800B64F358E8100815E99CC0098673985]
[G] (ACTIVE) c:\windows\system32\msvcp60.dll [PX5: AA21CEE700C12E8E50900683114B4B0004C88863]
[G] (ACTIVE) c:\windows\system32\scesrv.dll [PX5: 767E00540005E759005F055D41E6A70089C6748E]
[G] (ACTIVE) c:\windows\system32\umpnpmgr.dll [PX5: 2B3CB7DA00CD9457E83C01BA0719BB00F5193AD9]
[G] (ACTIVE) c:\windows\system32\shimeng.dll [PX5: 1C9AA7B7007DD654FEFC00788B6C1800612ED17B]
[G] (ACTIVE) c:\windows\system32\lsasrv.dll [PX5: 49DDAA230034694C32000B27B76F150015D1141E]
[G] (ACTIVE) c:\windows\apppatch\acadproc.dll [PX5: C8E9D54D00745F789AE800142F4B3D00FFC4FAE0]
[G] (ACTIVE) c:\windows\system32\ntdsapi.dll [PX5: 69419B890000E2FA06B101585F18620000097791]
[G] (ACTIVE) c:\windows\system32\dnsapi.dll [PX5: AAB816C7003C4D3542E702845D4F1A00ADA0B52F]
[G] (ACTIVE) c:\windows\system32\samlib.dll [PX5: 8D01FD2500585BE6FAB30073BDEFF800B80FA751]
[G] (ACTIVE) c:\windows\system32\samsrv.dll [PX5: CC0CD197007F92B78E5606A339F1E200AD2F5EDA]
[G] (ACTIVE) c:\windows\system32\cryptdll.dll [PX5: 6568164A00471B5082A80086BAA40B0093D07D2E]
[G] (ACTIVE) c:\windows\system32\winmm.dll [PX5: 978C27FA008570E1BA4602C184808000715F7906]
[G] (ACTIVE) c:\windows\apppatch\acgenral.dll [PX5: 4D65F25E00FF9793461B1C7DEBB460009BA7A0FC]
[G] (ACTIVE) c:\windows\system32\msacm32.dll [PX5: 080EB6CD004E00D518E10174AB0E1E006A4BC771]
[G] (ACTIVE) c:\windows\system32\uxtheme.dll [PX5: E5D7F2E800824B405A3603AE38D2F600B9CC76D6]
[G] (ACTIVE) c:\windows\system32\schannel.dll [PX5: F4C0CC2500944D8936B3021322767A001C7539B3]
[G] (ACTIVE) c:\windows\system32\msprivs.dll [PX5: 10CAD90A00073085BC3600D4B298BF0006BB0264]
[G] (ACTIVE) c:\windows\system32\msctf.dll [PX5: F0E2572800A034F38CF204E021343F00261B5B7D]
[G] (ACTIVE) c:\windows\system32\kerberos.dll [PX5: 5970FBC700BE1D0D9228045EA02DB500B2998B02]
[G] (ACTIVE) c:\windows\system32\msv1_0.dll [PX5: 9A88E7E7008A58EA065402F6DD6A1C000FA35A1D]
[G] (ACTIVE) c:\windows\system32\iphlpapi.dll [PX5: 24772E090078A26F766401E3B6F17D00CC3B3674]
[G] (ACTIVE) c:\windows\system32\netlogon.dll [PX5: F9A106A6001D9AF036A706354A2C1D00D42CE57B]
[G] (ACTIVE) c:\windows\system32\wdigest.dll [PX5: 4387A20000361F60C00C00B7E4253900EB383ED7]
[G] (ACTIVE) c:\windows\system32\rsaenh.dll [PX5: 47100BA200180DA62E1F0385EB4B3E0076D11132]
[G] (ACTIVE) c:\windows\system32\wtsapi32.dll [PX5: 6C158B26004CDD7F48CB0056162141006D84B503]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\css_gina_plugin.dll [PX5: 5E5F37C500FBBE579B6021975A2807004199A71F]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\css_wait_bar.dll [PX5: 3D86C5D700F6AEA09B690D852676A800605305C1]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\cssuserdatadispatcher.dll [PX5: B147E85600A44BD51B6B04356E096E0027C48432]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\csswait.dll [PX5: 37737CCD0084206BBB521CC29C9EFA00975CB923]
[G] (ACTIVE) c:\programmi\file comuni\lenovo\tvt_banner.dll [PX5: E314BBA60075AFEC6BE10ABF702A0100096AC402]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\cssdlgpwentry.dll [PX5: 2C071C4200E3358C4BAA108C1AE97E00FC586F65]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\dlganswerprompt.dll [PX5: 5E7A39D40091B41ECB8A10B6F9C3AB00BDC9120F]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tvttsp.dll [PX5: 33846AA90072DF644B2205DF852F0F006D13ADF4]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tcsrpc.dll [PX5: 322B34850001B6DB2B870ABA4571A800F84F9D8D]
[G] (ACTIVE) c:\windows\system32\msvcr71.dll [PX5: 3FEE1145002F2EB8504E05ED76DA9100776D97E7]
[G] (ACTIVE) c:\windows\system32\mfc71.dll [PX5: 6CC9C2640078308D309410C7EE8D9E0004FCAA75]
[G] (ACTIVE) c:\windows\system32\mfc71ita.dll [PX5: 8C47BF9900C00236F0DE00B45623C60074094F00]
[G] (ACTIVE) c:\windows\system32\ntmarta.dll [PX5: CAEC3300005C7928D46401D2530266003B89D601]
[G] (ACTIVE) c:\programmi\file comuni\lenovo\tvt_res.dll [PX5: 3929F79500C0F1F09B148558F19F7300B1ACB27A]
[G] (ACTIVE) c:\windows\system32\xpsp2res.dll [PX5: C51367FA002C624034732D6118710400C99F098E]
[G] (ACTIVE) c:\windows\system32\eventlog.dll [PX5: 1729B0A200BA2375DC74007BBE4EA800967FCDB1]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\pfmgrapi.dll [PX5: FF5403F200EA2497D0220D60FB6D03004FE0E468]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\traceapi.dll [PX5: A8912F85007F2C27F0C50501AACA88008C22A92F]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\psregapi.dll [PX5: F81E0CEF0053F5D160D60547F3D4CA00253EB0BA]
[G] (ACTIVE) c:\windows\system32\oleacc.dll [PX5: 81D38A4800E8D21B7EF202F4F2585B00DE902D48]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\dbengine.dll [PX5: 5E6EFBD80048DB30507A05C6C4AC1D00551C3966]
[G] (ACTIVE) c:\windows\system32\wsock32.dll [PX5: CE653C69007169C960BA00D23FB0BD00EEC48F49]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\libeay32.dll [PX5: 016FD0D800A9F03EA01E10A7B13E3100898EC3A4]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\intstngs.dll [PX5: D7C1978E0097AD245084057E826E050085BC53DA]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\murocapi.dll [PX5: 1A015AD300848BD830ED0991A355A200BC29DF3C]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\s24mudll.dll [PX5: 634416A500E9D57F60280121C39C7C00C929C57A]
[G] (ACTIVE) c:\windows\system32\clbcatq.dll [PX5: 15FCF1DF004402F39C04073EB1C251005C38F195]
[G] (ACTIVE) c:\windows\system32\comres.dll [PX5: 98DADC0600EB0B1EE8B90C7CE8FD78003677F052]
[G] (ACTIVE) c:\programmi\file comuni\system\ado\msado15.dll [PX5: EC97BB300063FF8B3046088411E0FC00D038F536]
[G] (ACTIVE) c:\windows\system32\msdart.dll [PX5: C38F4F6100DB3974502F02E825730200CC2B557E]
[G] (ACTIVE) c:\programmi\file comuni\system\ole db\oledb32.dll [PX5: 9C9C731A00621A3E7024072AEE281A008709F13C]
[G] (ACTIVE) c:\programmi\file comuni\system\ole db\oledb32r.dll [PX5: A910B98800DA0A9A20FA012DDDE82A00952DDBB9]
[G] (ACTIVE) c:\programmi\intel\wireless\bin\iwmsprov.dll [PX5: D7C57B660095C73FD09B011EA207D8001A9C2507]
[G] (ACTIVE) c:\programmi\file comuni\system\ole db\msdasql.dll [PX5: E13341CF00B0D68CD0EB0430EC7D5E008502C7B3]
[G] (ACTIVE) c:\programmi\file comuni\system\ole db\msdatl3.dll [PX5: FBE59C52006623ED70DF018B88D1DE009CF3D53D]
[G] (ACTIVE) c:\programmi\file comuni\system\ole db\msdasqlr.dll [PX5: 3464295C009D427A40E600E3F1BFF80056231FBD]
[G] (ACTIVE) c:\windows\system32\mswstr10.dll [PX5: 459B944E2011C44B7B64090918997700398B49D9]
[G] (ACTIVE) c:\windows\system32\colbact.dll [PX5: 1896B8D8005F3CB2EC9C00A6EB4925007251BD5E]
[G] (ACTIVE) c:\windows\system32\mtxclu.dll [PX5: A9EB14E800E4F1DB049F0148F759CE006B69348E]
[G] (ACTIVE) c:\windows\system32\clusapi.dll [PX5: EFDC38D70034534BE4A9009BD1249B003AFDD116]
[G] (ACTIVE) c:\windows\system32\resutils.dll [PX5: A0D62CBC0056FF5CE622001F93C5B40099E19AB9]
[G] (ACTIVE) c:\windows\system32\comsvcs.dll [PX5: 44834FC100A7749556F3131B0E1A1200CCE0005B]
[G] (ACTIVE) c:\windows\system32\odbcjt32.dll [PX5: FA0CEC951FE6C856403104BA12FF1800E6763D6D]
[G] (ACTIVE) c:\windows\system32\odbcji32.dll [PX5: 1B7B1CE01F8ED770E0DA00746136F70005E0CA73]
[G] (ACTIVE) c:\windows\system32\msjter40.dll [PX5: 79DF543D20FA5B19EBCD00EC8B2C6C00918826C1]
[G] (ACTIVE) c:\windows\system32\msjint40.dll [PX5: A40EADE5207C5386CB6D022DDDE82A009E17555D]
[G] (ACTIVE) c:\windows\system32\msjet40.dll [PX5: FE8CACDD18C8860824F017DEAA3E2400EBCBCB7A]
[G] (ACTIVE) c:\windows\system32\odbccp32.dll [PX5: 2E91D824004385E1A0A501862F7C5800EE3D4C99]
[G] (ACTIVE) c:\windows\system32\netcfgx.dll [PX5: E18F844600CD212F9E8109C147D51400258E0E9A]
[G] (ACTIVE) c:\programmi\file comuni\system\msadc\msadce.dll [PX5: 740DDF14004DBAD010B3055C408141009E65BD15]
[G] (ACTIVE) c:\programmi\file comuni\system\msadc\msadcer.dll [PX5: 77C3CD8500E4F41350BC00BB15DC2800B48B256E]
[G] (ACTIVE) c:\windows\system32\icaapi.dll [PX5: 854A7140005CCAE92CC1008DAB5E1600967BAC21]
[G] (ACTIVE) c:\windows\system32\mstlsapi.dll [PX5: 1FDF2ECE00566674C665015D4343B7009F67587E]
[G] (ACTIVE) c:\windows\system32\activeds.dll [PX5: 0D73259D00DC016AF47A02BD2C239E00191AFCE5]
[G] (ACTIVE) c:\windows\system32\adsldpc.dll [PX5: 2A7F0E040008FCEE30D50231EE1630004262704F]
[G] (ACTIVE) c:\windows\system32\atl.dll [PX5: 357BD57500B0B091E6D600D9FBC34C0036D5E702]
[G] (ACTIVE) c:\windows\system32\rtutils.dll [PX5: F9B8224300F34E57AC8300EE0FFA3000F5CFE48E]
[G] (ACTIVE) c:\windows\system32\wmi.dll [PX5: EEC3E00D0018DA22163F00F942A73D00521421C1]
[G] (ACTIVE) c:\windows\system32\eapolqec.dll [PX5: 3755D5060093573C7A6A006CBB8D7000AC208F93]
[G] (ACTIVE) c:\windows\system32\qutil.dll [PX5: C7A9796F00CCD9F42C88016B387700003BA60A5B]
[G] (ACTIVE) c:\windows\system32\dot3api.dll [PX5: 0F30A0DC003719F366F4000A5C661A0033093F8D]
[G] (ACTIVE) c:\windows\system32\esent.dll [PX5: 91DCA05F007729B0AAFA1082F45464008F044772]
[G] (ACTIVE) c:\windows\system32\hnetcfg.dll [PX5: F713C38700FD77104A6B055D5FAF3E006317D673]
[G] (ACTIVE) c:\windows\system32\mprapi.dll [PX5: AD7830DD00DC05C1548501D46231C100DDB1AFA7]
[G] (ACTIVE) c:\windows\system32\rasapi32.dll [PX5: AA8193BD006AA0579EC20327E3F9F30087FD2DB4]
[G] (ACTIVE) c:\windows\system32\rasman.dll [PX5: 77194E7400E5FB53F01C00AE34FFD9000A4CB783]
[G] (ACTIVE) c:\windows\system32\tapi32.dll [PX5: C36F2E8700D12E04C6C302810580430078DCA789]
[G] (ACTIVE) c:\windows\system32\winscard.dll [PX5: FC942A4B0038778B846A011ECBF6F300077F2035]
[G] (ACTIVE) c:\windows\system32\msidle.dll [PX5: F5E2BB25004ED55B1AA200D8C3344B00DD6DA31D]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\msvcr71.dll [PX5: 3FEE1145002F2EB8504E05ED76DA9100776D97E7]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\msvcp71.dll [PX5: F133D4F000B92F08A0E107FD67B66E0015498C05]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\schedr.dll [PX5: E2462AE401FEA7C01FB700E761817C00449ED7B9]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\avevtlog.dll [PX5: E4999D070107A0F8D11B01A88AF70D00E46ADB02]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\sqlite3.dll [PX5: C028A8800040DCC9302C050FDBBC76001DFC5407]
[G] (ACTIVE) c:\windows\system32\prochlp.dll [PX5: 583F7A9C00B38905507901E1CCD0A200CD1E12EE]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\aclocsettings.dll [PX5: 41E04D2500C4F7D4809D024B66419100EC4D29F0]
[G] (ACTIVE) c:\windows\system32\msvcp71.dll [PX5: F133D4F000B92F08A0E107FD67B66E0015498C05]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acprfmgr.dll [PX5: B75F6B4500161DDF40C3026BE74D41003D437570]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\accrypthlpr.dll [PX5: 7FE5044400A32655807E077E69AABE009DAC4A5F]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\achelper.dll [PX5: 9EDE54B90089AD9E30D001B982C65A00A6BC1379]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acon.dll [PX5: 59799BE800E09ECC70B108B5C51B330084B4FDFC]
[G] (ACTIVE) c:\windows\system32\cfgmgr32.dll [PX5: 0F8DCBAF001D4D84423D0050939AA30034E94947]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acturinsupport.dll [PX5: B44E5D2100BF2AD31E470081BF2D570084E8AD13]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccguard.dll [PX5: FD16253F01001A87412D035FB0D3E8003BD97831]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\guardmsg.dll [PX5: E109318C01DC670FB5080068C0EE39001AFA9DB7]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\mfc71u.dll [PX5: 037598C700D68B82FC2F0F8DECC9D10082E94C28]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\cclib.dll [PX5: 17ACDE3301AF7B3B7116025F2CA25F00EB4DFD85]
[G] (ACTIVE) c:\windows\system32\hid.dll [PX5: 7AB544F700315C2F526300FEBB2684000672D1F7]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\dklib.dll [PX5: CFEF86664E11A95D20470370B6847700CC15BCD9]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\tab.dll [PX5: 5E909BA900B428FA6054019A07C9400025D7D6DF]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\msvcr71.dll [PX5: 3FEE1145002F2EB8504E05ED76DA9100776D97E7]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\getfatextents.dll [PX5: 6786E049004C060B7067002DDDE82A006AC9F296]
[G] (ACTIVE) c:\windows\system32\pdh.dll [PX5: A94958AE0025C9435EE704D9DE505F00D1923E2F]
[G] (ACTIVE) c:\windows\system32\odbcbcp.dll [PX5: 892A6EFF006840EC609200BEE506EA00C95CE674]
[G] (ACTIVE) c:\windows\system32\certcli.dll [PX5: 0ABE262A00259892009B031021A16100C0D18937]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\1040\dkres.dll [PX5: 93DDF0160041380D406E0B2DDDE82A003D59408B]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccgrdrc.dll [PX5: A253A2EA01B670A74F2600E96F9AFD0018ECB8B2]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\avipc.dll [PX5: 1D9A633A0191AE09215E013A325AB300C26116FB]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\avpref.dll [PX5: A35F45C701B8E20197C2009D4FEC220096A67B25]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\smtplib.dll [PX5: 875FB297016B68E5716800C6F106B600C50FD755]
[G] (ACTIVE) c:\windows\system32\wbem\wbemprox.dll [PX5: DDD411AE00AE907F4A450018BBC4C70070D63DA1]
[G] (ACTIVE) c:\windows\system32\wbem\wbemcomn.dll [PX5: 90BB2A00003E7DAB464A03A1AA30CA00B7BE2BAA]
[G] (ACTIVE) c:\windows\system32\strmfilt.dll [PX5: 0662EE8400AC29082840012FF16992003F2B7E69]
[G] (ACTIVE) c:\windows\system32\httpapi.dll [PX5: 560DED7E0077024C608800CF67DBD4002471D10A]
[G] (ACTIVE) c:\programmi\java\jre6\bin\msvcr71.dll [PX5: 3FEE1145002F2EB8504E05ED76DA9100776D97E7]
[G] (ACTIVE) c:\programmi\file comuni\microsoft shared\vs7debug\1040\mdmui.dll [PX5: 2998F71B0054707760E1002DBABFEB007BD15900]
[G] (ACTIVE) c:\programmi\file comuni\microsoft shared\vs7debug\pdm.dll [PX5: 3CF5645700DB859FC00A02A3B1E1D600D7688D97]
[G] (ACTIVE) c:\windows\system32\credui.dll [PX5: 57E295F90039577A82D4026AB3E3C800532521FD]
[G] (ACTIVE) c:\windows\system32\dot3dlg.dll [PX5: C5D6F04C000F161A24E700DE440E5B004E209E31]
[G] (ACTIVE) c:\windows\system32\netshell.dll [PX5: 5920261800C75B3A26991AA49781ED00FD71087F]
[G] (ACTIVE) c:\windows\system32\onex.dll [PX5: 2BE54E070054CAD936C10254CDA5B000F874B012]
[G] (ACTIVE) c:\windows\system32\eappcfg.dll [PX5: D04B08F0005150ACF07A01DA3DDA0500AD0BA71D]
[G] (ACTIVE) c:\windows\system32\eappprxy.dll [PX5: 5091209C00B60D41A063005B1D6C48009F0953D6]
[G] (ACTIVE) c:\windows\system32\wzcsapi.dll [PX5: 626ACAA5007EAF39CEFC00F785D62400BD9EE315]
[G] (ACTIVE) c:\programmi\file comuni\microsoft shared\vs7debug\msdbg2.dll [PX5: 9F1BDCBE00FE47FFB09F029EF85AC300BF776FF4]
[G] (ACTIVE) c:\windows\system32\ipsecsvc.dll [PX5: 3232DDAC006BAB6FD23F0261AFA98D00202300FF]
[G] (ACTIVE) c:\windows\system32\oakley.dll [PX5: 4C81D371004972C4248C04767CAA8500205A4216]
[G] (ACTIVE) c:\windows\system32\winipsec.dll [PX5: CFB55AEA008182E47EAA00A44BC788000E40678C]
[G] (ACTIVE) c:\windows\system32\pstorsvc.dll [PX5: 22C386090028D02F860B006EFCACC1009F19E17C]
[G] (ACTIVE) c:\windows\system32\psbase.dll [PX5: E172641E00AE2F5580B301D5E9B97900DDED954D]
[G] (ACTIVE) c:\windows\system32\dssenh.dll [PX5: 852136D500ADC2641E2C02C25D98CE00E20035FE]
[G] (ACTIVE) c:\windows\system32\powrprof.dll [PX5: 47CD29DB00778E26447100327527F900E21B3CB0]
[G] (ACTIVE) c:\windows\system32\mscoree.dll [PX5: 2FF012BA00BB752D4E8504215026F6009A6054D1]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\msvcr71.dll [PX5: 3FEE1145002F2EB8504E05ED76DA9100776D97E7]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\mscorwks.dll [PX5: 43D5E03F00BFAAD2601C26EA2A0194008FF90ECC]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\fusion.dll [PX5: 2123929800EC6BF8507B04CB6847AA005FCEF14A]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v2.0.50727\perfcounter.dll [PX5: 074C3C2908B7AE705CCE01BBF8F445003D0B42AF]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll [PX5: E65D52060042C450B08520DCA2642C00328CC46F]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\avgio.dll [PX5: 192B2C4B01BADD4FE52501C1544ACD0039E655AA]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\mscorsn.dll [PX5: 17792AC6001E46E4309501ADD189730029C88BC1]
[G] (ACTIVE) c:\windows\system32\fltlib.dll [PX5: 334123980040A5CE42C50091659A8900E2FF9A52]
[G] (ACTIVE) c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_73afb2f1\mscorlib.dll [PX5: 1AC1473600DC885BC09E333E09587200BF90ABCE]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aecore.dll [PX5: 74E4359E7762D19DC1B302A30779A600D1FE3180]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aevdf.dll [PX5: BB371BC874A19A00A10F01DA58C0BA00C00B3D43]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aescript.dll [PX5: 9E8F7FDA792CBA97F18A05367308260048DDCAA9]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aescn.dll [PX5: DF54DCFF7347DE21F1D20179DBECC900FC8D212F]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aerdl.dll [PX5: 77AC0D37750439F0B1B9067478853300ADAFDF39]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aepack.dll [PX5: B7AD15D5778FD5F9211306412372EE0045014F44]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\unacev2.dll [PX5: 39713B85000FE97F2E4301648CD84300C500ABB1]
[G] (ACTIVE) c:\windows\assembly\gac\mscorlib.resources\1.0.5000.0_it_b77a5c561934e089\mscorlib.resources.dll [PX5: B5D8BEF70040EEEC8087036C5DCC450094693B48]
[G] (ACTIVE) c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\msvcr80.dll [PX5: 4B6AF860005E2DB6B4260971351F230010BD1760]
[G] (ACTIVE) c:\windows\assembly\gac\system.serviceprocess\1.0.5000.0__b03f5f7f11d50a3a\system.serviceprocess.dll [PX5: 041E1BE3002971C1F01101B74D19680047A9E179]
[G] (ACTIVE) c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll [PX5: 4DA3EA4A003CBC77D0DB1288759A96005E9C967B]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\mscorjit.dll [PX5: 2F4601B300158762D00C041754821C006CBBBB16]
[G] (ACTIVE) c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_048e68e3\system.dll [PX5: 39518C6C00ED472800BF1E65413D8C0007BE2115]
[G] (ACTIVE) c:\programmi\lenovo\system update\tvsuservicecommon.dll [PX5: 614811AC3889D312B576008BA840D000F0B29BD5]
[G] (ACTIVE) c:\programmi\diskeeper corporation\diskeeper\dktabprovider.dll [PX5: 0B7C7EEF5E1FD8FB6065017C28D6F600FB1E94F1]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aeoffice.dll [PX5: 1FE694DB7B662C1B01C60395C2768C00C9CE8522]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aeheur.dll [PX5: 8228F2F8770699ABE1821A4A03E5B200868F254B]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aehelp.dll [PX5: 21A5510976C58E21D1E6016864074E0084300078]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aegen.dll [PX5: 03F725D27417471B512A05AC8FEBD9003AD64702]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v2.0.50727\mscorwks.dll [PX5: CF433B660005682CBA375814C8DECC00564205E0]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aeemu.dll [PX5: 9512BD83748EE606010B067179C2FF008879FDB3]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\aebb.dll [PX5: 18BC3638723DD02ED18F001F1F716A00015AC3D5]
[G] (ACTIVE) c:\programmi\lenovo\rescue and recovery\rr_res.dll [PX5: 92E0789A004893E4906F17583FA3C20043C8422E]
[G] (ACTIVE) c:\windows\system32\mfc71u.dll [PX5: 037598C700D68B82FC2F0F8DECC9D10082E94C28]
[G] (ACTIVE) c:\programmi\lenovo\rescue and recovery\pui.dll [PX5: 970D73D700CE1CADB08F08234D649B0062F34616]
[G] (ACTIVE) c:\programmi\lenovo\rescue and recovery\ui.dll [PX5: 13B02362001CD8D77035022414C9410046C0A53A]
[G] (ACTIVE) c:\programmi\lenovo\rescue and recovery\cdrecord.dll [PX5: 049BFB230067703D201102BA4A9072008225B040]
[G] (ACTIVE) c:\programmi\lenovo\rescue and recovery\zlib.dll [PX5: D2CE6BBC003AF64BD40000FA1E72A40093BB3A3C]
[G] (ACTIVE) c:\windows\system32\sensapi.dll [PX5: 98E3F7D700E71D181C6C0033011978003E0D282E]
[G] (ACTIVE) c:\windows\system32\winhttp.dll [PX5: 67ED58D300BC635A687905931B10E900AAF235CB]
[G] (ACTIVE) c:\windows\system32\msxml3.dll [PX5: DE8EF42C000D874CE47C10B82C506B00CECFF0D2]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v2.0.50727\corperfmonext.dll [PX5: 9756E8D60879BF228ECB0149D1790000EA965E28]
[G] (ACTIVE) c:\windows\system32\cabinet.dll [PX5: 6B05D36F006B49D9EC6F009789851600A9D665FB]
[G] (ACTIVE) c:\windows\system32\mspatcha.dll [PX5: 082417FC003C31E4749D001F964017002A684FB5]
[G] (ACTIVE) c:\windows\system32\wuaueng.dll [PX5: 96A8FDF31820FD8A9E1D1B88260572006ACE6A58]
[G] (ACTIVE) c:\windows\system32\vssapi.dll [PX5: 5ECFC33700FBE356924C064F9AECB100B7719F72]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acsvchlpr.dll [PX5: 8EE2CBCC0059A983905F0695D69DD900355133C6]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acadaptersinfo.dll [PX5: E7FEC01500E371F970F001FFA1BAD400CEC99C94]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\anca.dll [PX5: EB4CC87500C16B3E401401720DA3DD00B2E09AD6]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\anc.dll [PX5: 51599F1700AA6DB6E0A50098765D94004FEF2D27]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acsvcstub.dll [PX5: 161FB54B00AF0417C05401D218F15F0057877C7A]
[G] (ACTIVE) c:\windows\system32\msi.dll [PX5: 5E723F4A008F80A262032B270B9C1B00BA5944F5]
[G] (ACTIVE) c:\windows\system32\wups2.dll [PX5: C42F62EC18C4806CAA68006E7A0A2200A2691D5B]
[G] (ACTIVE) c:\windows\system32\wbem\wbemcore.dll [PX5: A85F293B0031F3451CD3084F3A0E430098DF8AE6]
[G] (ACTIVE) c:\windows\system32\wbem\esscli.dll [PX5: 78BF373B00E95E55C86603126A367700F7A43F1E]
[G] (ACTIVE) c:\windows\system32\wbem\fastprox.dll [PX5: 27574A9B007FF819346107870FA1D000330365BA]
[G] (ACTIVE) c:\windows\system32\wbem\wbemsvc.dll [PX5: 64FE7A4100757EBFAAF7001203AB0C00753610BF]
[G] (ACTIVE) c:\windows\microsoft.net\framework\v1.1.4322\diasymreader.dll [PX5: 0C27C0D300EE9AA8000208C8426E4900C633E1C7]
[G] (ACTIVE) c:\windows\system32\wbem\wmiutils.dll [PX5: AC3DED5D001A43638077015F4C53C000FE3A7268]
[G] (ACTIVE) c:\windows\system32\wbem\repdrvfs.dll [PX5: 969DCDCE005E2F4CB8F20269B73C8700168EFBCB]
[G] (ACTIVE) c:\windows\assembly\gac\system.serviceprocess.resources\1.0.5000.0_it_b03f5f7f11d50a3a\system.serviceprocess.resources.dll [PX5: F10A515900EB52C0A0D100202C008400E12FA1B2]
[G] (ACTIVE) c:\windows\system32\traffic.dll [PX5: AE0C2A5200F668ED7A56003B43DDFF0009AD94AC]
[G] (ACTIVE) c:\windows\system32\spoolss.dll [PX5: 7D74C5B80083DB872630017C46871B0088FF7ECE]
[G] (ACTIVE) c:\windows\system32\wbem\wmiprvsd.dll [PX5: 37FA0B510035E61AACFC065320E6BD0019FB2BC3]
[G] (ACTIVE) c:\windows\system32\wbem\wbemess.dll [PX5: A3B80C19002C4D2E2E690435AA58330058594C4B]
[G] (ACTIVE) c:\programmi\file comuni\lenovo\logger\logmon.exe [PX5: B008A263007B3780569C00BCEB709A00CF9B759D]
[G] (ACTIVE) c:\windows\system32\winrnr.dll [PX5: 41D0CEB60004FECC421A00697B818200CFEEC440]
[G] (ACTIVE) c:\windows\system32\rasadhlp.dll [PX5: AF995D430035502F1E80003B3C2E0700C3F1D82B]
[G] (ACTIVE) c:\windows\system32\localspl.dll [PX5: F7F37B6000116B4D443505C2D00055002F4AD286]
[G] (ACTIVE) c:\windows\system32\cnbjmon.dll [PX5: AC0A61BF00C13C76C238009F710B75006122DBA9]
[G] (ACTIVE) c:\windows\system32\pjlmon.dll [PX5: B89593A60027901C3C3900D39AA4C900E74DCF08]
[G] (ACTIVE) c:\windows\system32\bthcrp.dll [PX5: B7F09E9D009D2702C00401AA9B009700A17BD895]
[G] (ACTIVE) c:\windows\system32\widcommsdk.dll [PX5: 40CCDCEF00F012FFD02208AACA72B300DA4483B4]
[G] (ACTIVE) c:\windows\system32\wbem\ncprov.dll [PX5: 5ED0A826001AC1BDB84000B6919D3F00E9097AD4]
[G] (ACTIVE) c:\windows\system32\wbtapi.dll [PX5: CAABFE103DBEF834009B09E7FA11E40029895469]
[G] (ACTIVE) c:\windows\system32\mfc42.dll [PX5: FD5A337B00529124B0D80F421E827900F4777BE8]
[G] (ACTIVE) c:\windows\system32\mfc42loc.dll [PX5: 50EC1EAC0042F609E0B8000596D265006CAB3F5E]
[G] (ACTIVE) c:\windows\system32\tcpmon.dll [PX5: E45C6E2F002C2E3FB4D700587ACBD300A8381876]
[G] (ACTIVE) c:\windows\system32\usbmon.dll [PX5: 971C113D0090645242A2001FC9FD440095F73A2D]
[G] (ACTIVE) c:\windows\system32\win32spl.dll [PX5: 126D0FEE00ED582D92B5016F932ACB00A56B9613]
[G] (ACTIVE) c:\windows\system32\netrap.dll [PX5: F8F41D8C002000852E2C00B32DAB9200950EF9F1]
[G] (ACTIVE) c:\windows\system32\inetpp.dll [PX5: 0759BCEE009D287026D101E2A2A51D0088E9C74E]
[G] (ACTIVE) c:\windows\system32\utildll.dll [PX5: 1D523D80001DF1C066F30000C6A46100D1C3CF87]
[G] (ACTIVE) c:\windows\system32\loadperf.dll [PX5: 27E71D310093970786FD012901E883008E89B8C2]
[G] (ACTIVE) c:\windows\system32\wbem\wmiapres.dll [PX5: 8F5E47B900ECFDB61C680000008D930004BC8429]
[G] (ACTIVE) c:\programmi\lenovo\awaytask\awaydb.dll [PX5: C9A3FA7A00A294B700210228B9169000F5D31E72]
[G] (ACTIVE) c:\windows\system32\wbem\wmiprov.dll [PX5: 9B1CF820002ECF0D369202FEE7BA6A0017D737EE]
[G] (ACTIVE) c:\windows\system32\rastapi.dll [PX5: 70213FCA0083DE05E42C009838627A009B490E72]
[G] (ACTIVE) c:\windows\system32\unimdm.tsp [PX5: 3D45BFD900DD810D2CC90361DB79240028C9D137]
[G] (ACTIVE) c:\windows\system32\uniplat.dll [PX5: C7F0DE5B009D7920361E002562779F0019669DF2]
[G] (ACTIVE) c:\windows\system32\unimdmat.dll [PX5: F13BBCA400081F963ABA01C99A07C300B6C0A26C]
[G] (ACTIVE) c:\windows\system32\modemui.dll [PX5: C597C9B100D1F70C5E8B02B42B1605002F038AC8]
[G] (ACTIVE) c:\windows\system32\kmddsp.tsp [PX5: 900DB96500872B808232000FD8D3F7002B6FE098]
[G] (ACTIVE) c:\windows\system32\ndptsp.tsp [PX5: 4CE09DFA0020D959E0C100B477E2F100FDAA7D32]
[G] (ACTIVE) c:\windows\system32\ipconf.tsp [PX5: F8CEBAB4006414FA44B900F4A8ED7F008403CD71]
[G] (ACTIVE) c:\windows\system32\h323.tsp [PX5: 6DCC5526007AD89E107A04A1457FDC003EA789AE]
[G] (ACTIVE) c:\windows\system32\hidphone.tsp [PX5: 821EA24B00C1441976DD00A764C7AC00A85C281E]
[G] (ACTIVE) c:\windows\system32\ntlsapi.dll [PX5: F1D0A44F006C52E520B8003B3C2E0700A5D093EA]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\aclocmigrator.dll [PX5: D5825331009C2653C0B401C23B92BF0014DB7991]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\thinqcon.dll [PX5: B60527AE00B25CD6704901D8773913001A2D96AD]
[G] (ACTIVE) c:\windows\system32\rasqec.dll [PX5: 3E2E3EFB007BFCF7F2FB003152A63F0019A4AC2F]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acgolan.dll [PX5: 5B235CCE001EC38C20A903828256A9000E4B5F47]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\svcguihlpr.exe [PX5: 0AE842F9004901BB809A01AACB19E8003834862B]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acguihlpr.dll [PX5: E54A84120036F44B308E0E84974EE800920553A6]
[G] (ACTIVE) c:\windows\system32\msimg32.dll [PX5: 25F0CF4400FBAF01125100CC1C82B700F868C905]
[G] (ACTIVE) c:\windows\system32\rasdlg.dll [PX5: B19514EC00F1CC1C4E610A2C5D96C900DB9EEE5A]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\res\it\guihlprres.dll [PX5: 2C48025C001472BC6E5300E8BB37A4007F284CF7]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\res\it\svchlprres.dll [PX5: 401D471F00A16B1A7201007798C1870017AD9042]
[G] (ACTIVE) c:\windows\system32\wdmaud.drv [PX5: 49BE13F700CFB9ED5C2500DA53C34B005C35FEBB]
[G] (ACTIVE) c:\windows\system32\msacm32.drv [PX5: F8EB7CDA00A2596F522700876A3BC9005F29A42B]
[G] (ACTIVE) c:\windows\system32\midimap.dll [PX5: C932A298002D88084A000079BA6DCB001CD61712]
[G] (ACTIVE) c:\windows\system32\browseui.dll [PX5: F792BF8E0002533AA4770FCA84DCA600E655036B]
[G] (ACTIVE) c:\windows\system32\oledlg.dll [PX5: E390E71B00606745E85301646E826B001CB6AD89]
[G] (ACTIVE) c:\windows\system32\themeui.dll [PX5: ECA32DB100FCED1CF4BB05B20510E40018102672]
[G] (ACTIVE) c:\windows\system32\msimtf.dll [PX5: 3A0A982C003286DD6E98027D7884AC00FB320294]
[G] (ACTIVE) c:\windows\system32\actxprxy.dll [PX5: 31AF9F5E0039EE54803601F681F7E700D2F2DBEF]
[G] (ACTIVE) c:\windows\system32\linkinfo.dll [PX5: 6FEAFA9C005DD1A14E4500A7AB34AE00D05E37AC]
[G] (ACTIVE) c:\windows\system32\ntshrui.dll [PX5: F959802D002AA3A138E5028649815A0083AB1AC6]
[G] (ACTIVE) c:\programmi\adobe\acrobat 7.0\activex\pdfshell.dll [PX5: 066EC4DE00858605B060015F10D3790055C4D630]
[G] (ACTIVE) c:\windows\system32\ieframe.dll [PX5: 1B65A05100803F74925D5CDF2E87F60093DC333A]
[G] (ACTIVE) c:\programmi\lenovo\safeguard privatedisk\pdlib.dll [PX5: B28389D8004FADC500650E84B0F5E6000E9BB6A6]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tvtpwm_tray.exe [PX5: 54897E3700E812447BA30C3E92DF5600642FC158]
[G] (ACTIVE) c:\windows\system32\webcheck.dll [PX5: 2B157D1E00AFC4C590FE0345C862BF00C3C9AEE2]
[G] (ACTIVE) c:\programmi\lenovo\safeguard privatedisk\pdlib0410.dll [PX5: 0A91CFCA000D36F280AB132D8801F900C9D8A81B]
[G] (ACTIVE) c:\windows\system32\stobject.dll [PX5: 45963CB7003D6544DE84014DA54C1A002C52614B]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tvtpwm_windows_hook.dll [PX5: C8B647B600FEC9FB5BA9096A8D5F3300538FB6E9]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tvt_passwordmanager.dll [PX5: D4827D74006916864B841DB1C8110800B226B861]
[G] (ACTIVE) c:\programmi\lenovo\client security solution\tvtpwm_keyboard_hook.dll [PX5: 141A7187006259F3DB4C0943FD1AFA00C0956A78]
[G] (ACTIVE) c:\windows\system32\batmeter.dll [PX5: 945E3F540037700272AC00CA94CB2900B0DF9171]
[G] (ACTIVE) c:\windows\system32\wpdshserviceobj.dll [PX5: 7176B495005E12B50A520234E7E1AF00FB8DD268]
[G] (ACTIVE) c:\windows\system32\upnp.dll [PX5: E144CA6900A38FFD0AC00202E8E8690034DAB1D4]
[G] (ACTIVE) c:\windows\system32\tp4uires.dll [PX5: 699FE5F7004211DBF08401944A43D700EECC15A0]
[G] (ACTIVE) c:\windows\system32\ssdpapi.dll [PX5: BC5D352100D64581882B006103745600376CC802]
[G] (ACTIVE) c:\windows\system32\mlang.dll [PX5: 6E13A09800C70FA5F25108E1CB865E001459364F]
[G] (ACTIVE) c:\windows\system32\portabledevicetypes.dll [PX5: 79585FF4007031758CF802904E46EE00DF2F75D4]
[G] (ACTIVE) c:\windows\system32\portabledeviceapi.dll [PX5: 413BE4C6002C530256CD0467F46CFA0079ACDAE6]
[G] (ACTIVE) c:\windows\system32\olepro32.dll [PX5: 3475635D00ECFCBA4C70019CC1096E001CBB343F]
[G] (ACTIVE) c:\programmi\lenovo\pkgmgr\hotkey\tponscr.exe [PX5: 558C6B29002333F8305E01C0D4DE4600B5386B85]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\res\it\trayres.dll [PX5: B7912C6600A16B1A24010040145D45003C08AAEF]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\res\it\iconres.dll [PX5: EB8F8DCD00D32EBF5042012DDDE82A0097F86A84]
[G] (ACTIVE) c:\programmi\thinkvantage\amsg\ahlprunl.dll [PX5: 313130F8004F0387F07401EFAD524400A828F26B]
[G] (ACTIVE) c:\programmi\thinkvantage\amsg\acppollingengine.dll [PX5: 271978DC008DFB59C07502670A8389009358D0C1]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccgen.dll [PX5: A0A6A92401CE36CA216C04AC8F483E00600DB702]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccgenrc.dll [PX5: D85F799B0187ECF1454900DA1218E900012CCFFD]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccupdate.dll [PX5: 973EDB9C01526883B1290119AB2922009DB20F23]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccupdrc.dll [PX5: 110C11A8013254923144005EE5986A00AE375FBE]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\cclic.dll [PX5: 6A623A0F012A03CDD1F000219044290019BF39DC]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\cclicrc.dll [PX5: 4AE5446F01439927178900FE4FFE83008FCC27FC]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\ccmsg.dll [PX5: 1A3A755C01F877C26158020312C16E0021599483]
[G] (ACTIVE) c:\programmi\lenovo\awaytask\awayapi.dll [PX5: 47C5612F00A730E6E008003A9A6B64006EBB1AC6]
[G] (ACTIVE) c:\windows\system32\msutb.dll [PX5: 8F03A42C007E95A5FCD702BAD6A1F500B46493BF]
[G] (ACTIVE) c:\programmi\lenovo\pkgmgr\hotkey_1\tpscrex.exe [PX5: EDFF6D170094EA93504D01C167CF4A0052B3EB13]
[G] (ACTIVE) c:\windows\system32\oemdspif.dll [PX5: 09B74B96001448E6E0C300F88F7CC10091DF8AF6]
[G] (ACTIVE) c:\programmi\lenovo\pkgmgr\hotkey\tpfnf7.dll [PX5: 809C108A00B706B8301E0386869E3C001E83E89C]
[G] (ACTIVE) c:\programmi\analog devices\core\smwdmif.dll [PX5: BE6EB7AA0055D07970480437E3EC84003E8DA3CE]
[G] (ACTIVE) c:\windows\system32\mfc42u.dll [PX5: 74A4697B00B6ECC7FB5E0E2428CECF00BE23B318]
[G] (ACTIVE) c:\windows\system32\ddraw.dll [PX5: A31A3BE400BCCD84447A043780B00B00C403B621]
[G] (ACTIVE) c:\programmi\lenovo\safeguard privatedisk\pdservice0410.dll [PX5: F471B83F002185897C8900B5657E7100CBB6A5BB]
[G] (ACTIVE) c:\programmi\thinkvantage\prdctr\it\lpresmgr.dll [PX5: B4B9854000FE9C7FE02F00413D1A7900E6EBB9AD]
[G] (ACTIVE) c:\windows\system32\hccutils.dll [PX5: 9DF9719F0012592F203201095910E600C084F21F]
[G] (ACTIVE) c:\programmi\thinkpad\utilities\it\pwrmgrrt.dll [PX5: 55F4011A004910CDA06F002DDDE82A0090EEAB31]
[G] (ACTIVE) c:\programmi\thinkpad\utilities\pwrmgrif.dll [PX5: AC30939800200CDC20190189A7EFBD009B3C2A78]
[G] (ACTIVE) c:\windows\system32\igfxsrvc.dll [PX5: 216DA07700C959A0F0BF002DDDE82A00BD284E36]
[G] (ACTIVE) c:\windows\system32\igfxres.dll [PX5: C9B16CF6002BE698606202D818819900279F05CE]
[G] (ACTIVE) c:\windows\system32\dlaapi_w.dll [PX5: 4CD7BFC33CCA5A6AF0800061EC6CF90031A9C931]
[G] (ACTIVE) c:\windows\system32\dla\dlacresw.dll [PX5: F61C6A1740A6403CC05F09C2B4817D00D9EC416B]
[G] (ACTIVE) c:\program files\digital line detect\dlg.exe [PX5: 9FC6998F007F1123602C0031FFA699007938BEAC]
[G] (ACTIVE) c:\program files\digital line detect\bvrpdiag.dll [PX5: 5145468100F1AD0260DB0021EABB7F00DBA2B067]
[G] (ACTIVE) c:\windows\system32\shfolder.dll [PX5: D7C4D1810078CAFA6257006B0FCBCA007DD6FB27]
[G] (ACTIVE) c:\windows\system32\mdmxsdk.dll [PX5: 6242B90E00A3EBE3500C01F4337E9B00DE0A7B9A]
[G] (ACTIVE) c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.5581_x-ww_dfbc4fc4\gdiplus.dll [PX5: 8D49CA8B0045989150E01A3D8ECF5200FFFD914A]
[G] (ACTIVE) c:\windows\system32\msls31.dll [PX5: 06578F3600BE0A1C62E3026806CB9A00A1DAF899]
[G] (ACTIVE) c:\windows\system32\mshtml.dll [PX5: A66D7BE800204520DA9136CD2D05A400BE77624A]
[G] (ACTIVE) c:\windows\system32\dciman32.dll [PX5: 4624E87D0067BA2C22B100023FA0080095742985]
[G] (ACTIVE) c:\programmi\thinkpad\utilities\it\ezmapres.dll [PX5: 926CC2F5003AD5B2E0F800B2917D6E0090EF0D4E]
[G] (ACTIVE) c:\windows\system32\advpack.dll [PX5: 6AFB0846001811DCE8EF01A45C4CD4006091BE4A]
[G] (ACTIVE) c:\windows\system32\duser.dll [PX5: 23B132AD000B879AA41304E37D44DE00667DDED0]
[G] (ACTIVE) c:\windows\system32\sti.dll [PX5: 4B255A1C0056575F0EDD01BE167FE4003DA9F5FF]
[G] (ACTIVE) c:\windows\system32\wuaucpl.cpl [PX5: 5BC9525C1882B33F42BE0377DB07C0000DBA11FB]
[G] (ACTIVE) c:\windows\system32\mstask.dll [PX5: F794151C001D82A848EA04DDAB61E800D304FD8D]
[G] (ACTIVE) c:\windows\system32\browselc.dll [PX5: FC0AA3D9000AF28B0C07019A1B617D0085F90223]
[G] (ACTIVE) c:\windows\system32\dsound.dll [PX5: AEE5783B00543A279CBE058D26DF2F009B0DE828]
[G] (ACTIVE) c:\windows\system32\ksuser.dll [PX5: F27991830060F88210DA00662F541100B79BCD14]
[G] (ACTIVE) c:\windows\system32\mscms.dll [PX5: 35E0CEA200497CAF221B011739894D00B44B29E2]
[G] (ACTIVE) c:\programmi\windows media player\wmpnssci.dll [PX5: 935C50760044A91F067B0356F18E5800F348F169]
[G] (ACTIVE) c:\windows\system32\wuauclt.exe [PX5: 84E432BC180DA03EC8AE001EFB581900EB96F5B8]
[G] (ACTIVE) c:\windows\system32\wucltui.dll [PX5: F30CBD881889C2ADF0E6042AF42051003FFB5A8B]
[G] (ACTIVE) c:\windows\system32\mucltui.dll [PX5: 33D63AFF685931E1198D041F6E815000CF9B26FA]
[G] (ACTIVE) c:\windows\system32\wzcdlg.dll [PX5: 64EACF0000F75E1CDCD305D38DB1C500FC7B10D7]
[G] (ACTIVE) c:\windows\system32\desk.cpl [PX5: 6CC649C2006EFFFA1CD3026BD8199C006F1D90FE]
[T] (ACTIVE) c:\programmi\file comuni\installshield\updateservice\_ispmres.dll [PX5: 1D1136CD00797225E054052DDDE82A00B2B0C8E2]
[G] (ACTIVE) c:\programmi\lenovo\pkgmgr\hotkey\virtfn_0.dll [PX5: 52A6822C00A6228150A300F05C916600EFD3D89D]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\lpac4.dll [PX5: 2B46656B0005ECA7A03700B0F0ABD2005C049792]
[G] (ACTIVE) c:\programmi\thinkpad\connectutilities\acbcon.dll [PX5: 366838AB00E5639CA0EA00CFBFAF9500E8CD2FF6]
[G] (ACTIVE) c:\programmi\lenovo\pkgmgr\hotkey\virtfn_1.dll [PX5: A448C9B7009A97335099002DDDE82A007920770D]
[G] (ACTIVE) c:\programmi\thinkpad\prdctrsp\it\lpmiscr.dll [PX5: 55F4011A004910CD606F002DDDE82A00A036C312]
[G] (ACTIVE) c:\programmi\thinkpad\utilities\npddif.dll [PX5: 7E1165E10023AABCE09F0050971454005D2E6E36]
[G] (ACTIVE) c:\windows\system32\msisip.dll [PX5: C67ECC6300AA958B3C8400DAA86E04008F03C01F]
[G] (ACTIVE) c:\programmi\lenovo\rnr_tpc.dll [PX5: 3AF40EBA00BB09B780C3089E7FE1F300F36E7B2B]
[G] (ACTIVE) c:\programmi\file comuni\microsoft shared\office10\1040\msointl.dll [PX5: 77C04B0A00DF5417B01E12D982F30900BEF5DF02]
[G] (ACTIVE) c:\programmi\avira\antivir personaledition classic\msgclient.dll [PX5: CBBC912501F551BF35AE00023A8ED700E4429614]
[G] (ACTIVE) c:\windows\system32\sysdm.cpl [PX5: D5C5406900CB0651A2B8043E04067C006EB3FD4F]
[G] (ACTIVE) c:\documents and settings\mionome\impostazioni locali\temp\pxinstall125.exe [PX5: 0418016438820A3D308843C335276F009ED2440C]
[G] (ACTIVE) c:\windows\system32\ieapfltr.dat [PX5: 4D34BBA8C04296CC773225E823C13D0086F70D2E]
[GP] c:\programmi\hijackthis\hijackthis.exe [PX5: 44C120F738065514211C067B4ABA7A00E4635499]
[G] c:\programmi\superantispyware\saswinlo.dll [PX5: 8FF1FEFA00F39B437059057BD4279100FA8B971E]
[G] c:\programmi\superantispyware\bootsafe.exe [PX5: 4B081EDB3858FBD8DDF0016A76889100CDF1FF8B]
[G] c:\programmi\superantispyware\runsas.exe [PX5: FD0841DC280A9F68BB2200364D078F005AD15CC3]
[G] c:\programmi\superantispyware\superantispyware.exe [PX5: 03ABFECFF031C00DEC5A1B50D7028F00F169741F]
[G] c:\windows\system32\drivers\siint5.dll [PX5: AF524B003D8D42390F6200ED41EA3400B79BCD14]
[G] c:\windows\system32\drivers\hidbth.sys [PX5: C468F04A80AB923164CD0019D9EDE700A52A370D]
[G] c:\windows\system32\drivers\smbali.sys [PX5: 12482C94000568C617170054DB39780005417B03]
[G] c:\windows\system32\drivers\usb8023x.sys [PX5: 3E77E626002C4E4732F6001737A36500BD2ED064]
[G] c:\windows\system32\drivers\hidir.sys [PX5: 385910E500491C2A4B2500B2238855006E25FC7E]
[G] c:\windows\system32\drivers\pxsec.sys [PX5: 449EE65D0816D5746CFC004B8A039C005B1D0006]
[G] c:\windows\system32\drivers\adv11nt5.dll [PX5: 58C143E4BF59236B0E0B00C59499E000B79BCD14]
[G] c:\windows\system32\drivers\rndismpx.sys [PX5: 120F9F0E8086D832779500950845710052090A7D]
[G] c:\windows\system32\drivers\adv09nt5.dll [PX5: 9AD87CF17F15D57C0E24009CF6F77300B79BCD14]
[G] c:\windows\system32\drivers\adv08nt5.dll [PX5: 3401CA303F43096C0C4D007CEFDEDA00B79BCD14]
[G] c:\windows\system32\drivers\adv07nt5.dll [PX5: 543580EE3FE9D8490E62007237BC3800B79BCD14]
[G] c:\windows\system32\drivers\adv05nt5.dll [PX5: 832FB9491F5FAE6F0E850064C747A300B79BCD14]
[G] c:\windows\system32\drivers\adv02nt5.dll [PX5: 8EB38BE07FDDC0120F9E000AA4799100B79BCD14]
[G] c:\windows\system32\drivers\pxscan.sys [PX5: CF322FCA08A3C93D56F800E77649BD00AEA6F0AF]
[G] c:\windows\system32\drivers\cmdide.sys [PX5: 1090D35F00826C091A0300BA9B616000882568E7]
[G] c:\windows\system32\drivers\cd20xrnt.sys [PX5: 585C4579008238981E0B00FA57DBFC004069176C]
[G] c:\windows\system32\drivers\adv01nt5.dll [PX5: F9F8AA129FE59D6310B9000675F47000AFA55726]
[G] c:\windows\bdoscandel.exe [PX5: 65CB6D9C003C12EFD09800C1D7EA160028AA89FE]
[G] c:\windows\system32\msgsvc.dll [PX5: 63763A5600DCC9F884E9005965633B00BD607054]
[G] c:\windows\hh.exe [PX5: 5C7B8E3D00D52EE22AA1001DD3E7A500CD297098]
[G] c:\windows\system32\ieudinit.exe [PX5: E787562D00728720360A0021165ED300E3CD6FE6]
[G] c:\windows\system32\format.com [PX5: 59B9367100A7F67D74C700F808956B00F2AE49DC]
[G] c:\windows\system32\regsvr32.exe [PX5: FBA2407E0086912530FD002A160A7200D400A641]
[G] c:\windows\system32\drivers\gagp30kx.sys [PX5: 642F878C801E7D44B50600016FDC9C0046817CE7]
[G] c:\windows\system32\drivers\atv02nt5.dll [PX5: 5BD533455F4160A82CFF00A4A8007800C90EC409]
[G] c:\programmi\file comuni\microsoft shared\grphflt\bmpimp32.flt [PX5: 1A22B5E7804F487BD32A005FCBB6ED00B9739C50]
[G] c:\programmi\eraser\unins000.exe [PX5: D08D2DF29252D50828BF019196317C00351A2096]
[G] c:\windows\system32\drivers\ati1pdxx.sys [PX5: E991404B0FFD6FF82F7000461A312B002816CEC0]
[G] c:\windows\system32\drivers\diskdump.sys [PX5: 6D7A5F848072A37B37EB00C342763700A71B4DD2]
[G] c:\windows\system32\cryptext.dll [PX5: 477321C4008C11D3D4C900DD326D8F00551BF5EB]
[G] c:\windows\system32\drivers\ati1mdxx.sys [PX5: 9A0348305FAB82F42D270060B8503E0045CF641B]
[G] c:\windows\system32\mshta.exe [PX5: 718367AA002A4EB4B2EB00A2C177ED00FAF63606]
[G] c:\windows\system32\shscrap.dll [PX5: FCEFC951004ACC126CE400FA44F7720084A9A405]
[G] c:\windows\system32\drivers\dac960nt.sys [PX5: 4A76D57C80C85C4939AF009F3428130045C96C9B]
[G] c:\windows\system32\docprop2.dll [PX5: 7B70224D00CFF51EBC180040D6CE3400A89E3B02]
[G] c:\windows\system32\drivers\cpqarray.sys [PX5: 83BD9FEC80CF65303A83008B3639D70054F0FDB8]
[G] c:\windows\system32\drivers\ch7xxnt5.dll [PX5: 1877C3E83F7739BB3CA900D0716192001008BDB3]
[G] c:\windows\system32\shmgrate.exe [PX5: 16D90AEB009C16D4B07100FE5B2A6100AA2074F3]
[G] c:\windows\system32\drivers\watv10nt.sys [PX5: BC7A9CF57F55E4C36384008A4A3A0700A414BF9F]
[G] c:\windows\system32\drivers\dpti2o.sys [PX5: 1646100FE09545F24E5D003D74376C00785BB51E]
[G] c:\windows\system32\drivers\stream.sys [PX5: FDEA7CEA00E734D3C1DE0004BF4241007DE59088]
[G] c:\windows\system32\drivers\cbidf2k.sys [PX5: 7B8DA5F780B7DA7536FE00ABA71B6C00B12776D7]
[G] c:\windows\system32\drivers\bthusb.sys [PX5: 44B073E300227E634AF300C25065D300C03386E0]
[G] c:\windows\system32\drivers\bthenum.sys [PX5: 67DA124780F37F2D4207001BE7C4FB00803D6E14]
[G] c:\windows\system32\drivers\atv06nt5.dll [PX5: 888D1ADB3FC69D2E37A100D692E2AF00E7E99F4F]
[G] c:\windows\system32\drivers\avgntmgr.sys [PX5: 860E793240F8A8E457CF00E1E5D45100C2961F00]
[G] c:\windows\system32\drivers\wadv11nt.sys [PX5: 3270838B9F1CA4BC2ECD00F52065DC007F926E55]
[G] c:\windows\system32\drivers\atinttxx.sys [PX5: 4D021E9A00CC1BA9364D00987AB05B00A6802140]
[G] c:\windows\system32\drivers\btport.sys [PX5: 30952E16DBA9E5E476C200BBCC2A20002BC38D3C]
[G] c:\windows\system32\wuaueng.dll.mui [PX5: B9C5CF06180C35D44C8C0098805A0400651FBC0D]
[G] c:\windows\system32\drivers\atinpdxx.sys [PX5: 56DABC9E00199F9D38D000631CEE050045090A25]
[G] c:\windows\system32\drivers\uagp35.sys [PX5: 9D095C07801C22E3AE6600D63D61E600782D745D]
[G] c:\windows\system32\drivers\atinmdxx.sys [PX5: F01147EA00BE7AB736CC00E44C302A00BEEA352D]
[G] c:\windows\system32\tsbyuv.dll [PX5: 86646A040019522320A100B4BB4D900094B11477]
[G] c:\windows\system32\tssoft32.acm [PX5: 9DB260C30072F5C620530046E6B0DC000EF1898D]
[G] c:\windows\system32\drivers\atv10nt5.dll [PX5: 6457C5C27FB7E99A43C90031A6140C00C4CB20D4]
[G] c:\windows\system32\utilman.exe [PX5: C6139573005C0FE1C43100A2BB056500EC6E20C8]
[G] c:\windows\system32\drivers\atv01nt5.dll [PX5: B74263E9BFCD367D524B004543B06200552DEB99]
[G] c:\windows\system32\drivers\tdpipe.sys [PX5: 3FCBC6C1086354332FFD003DE3512D00E0553E49]
[G] c:\windows\system32\msrle32.dll [PX5: 8412FD8F008293D12C2D0048B9FD2B00A6E801D2]
[G] c:\windows\system32\drivers\atv04nt5.dll [PX5: 07D448377F87BC2B63B200F2C6320A00331C6870]
[G] c:\windows\system32\drivers\ati1ttxx.sys [PX5: 9031E7695FDBA0F15365004FF9F694004110881D]
[G] c:\windows\system32\drivers\atinsnxx.sys [PX5: B12DD4A0005F1C4B7090009378B5920090FEE997]
[G] c:\windows\system32\rdpsnd.dll [PX5: 4AB96D75005C882C4E8E00528EC32E00E948AB71]
[G] c:\windows\system32\drivers\ati1snxx.sys [PX5: B555A9DCFFB1FA6F666D00BC1653D600EE3B9E3F]
[G] c:\windows\system32\msg711.acm [PX5: 98836843004ECD5624170012D62AF300ADA7FDE1]
[G] c:\windows\system32\drivers\bthprint.sys [PX5: 15F50C358083D21A8E0C007F137244008C573A12]
[G] c:\windows\system32\drivers\crusoe.sys [PX5: DD5C92A700A171379F24001BB46BB900BADA5B7C]
[G] c:\windows\system32\drivers\wacompen.sys [PX5: BD7D24B780B23628379400D942852C00086B47B3]
[G] c:\windows\system32\drivers\bthmodem.sys [PX5: C7B309490098C8E694F000B44D666B00097E910F]
[G] c:\windows\system32\drivers\avgntdd.sys [PX5: 68B55A7E409894D2B18600CBD7217000EDEC2287]
[G] c:\windows\system32\drivers\wadv09nt.sys [PX5: 5DB73A5C5FAB7A1D2EB000A4DD02C800BA660E95]
[G] c:\windows\system32\drivers\wadv08nt.sys [PX5: 4CF103A01F6123B62CFA0037B0C1FD00836A25AA]
[G] c:\windows\system32\drivers\wadv07nt.sys [PX5: 1E0FE3D21FE339D22E2B008596227200617F8D26]
[G] c:\windows\system32\drivers\vchnt5.dll [PX5: 03C121663D6461E42CC400D8205B69009A774FD9]
[G] c:\windows\system32\imaadp32.acm [PX5: 0599459600EB3B4A408A0088E5AFC900F46AE7F7]
[G] c:\windows\system32\drivers\slwdmsup.sys [PX5: 16863D5CB8EACC283314005DED01E500658864AF]
[G] c:\windows\system32\msyuv.dll [PX5: 155A5CEB00DB9BE5420C00F9DB325D0030E04543]
[G] c:\windows\system32\drivers\recagent.sys [PX5: 8230DA32D0FF3CCB359200458A49D1005077BCC7]
[G] c:\windows\system32\drivers\tunmp.sys [PX5: CBD0AEE30035D6A5300B00CF5C41910059532CD5]
[G] c:\windows\system32\drivers\mutohpen.sys [PX5: F0516BDE807DC7ED312D00118D1A3F00F3D76BCF]
[G] c:\windows\system32\drivers\sffp_sd.sys [PX5: 2962F907000470602BFC005958959E005F3F9EDD]
[G] c:\windows\system32\oobe\msoobe.exe [PX5: 519BE5280065BF1D72560037D7F9320013E74422]
[G] c:\windows\system32\drivers\usbintel.sys [PX5: 46A2709400A8B9863E99007B5ED70B00A3584D07]
[G] c:\windows\system32\msgsm32.acm [PX5: 7715C6930008610D4E5300A5AC1D5400348AB758]
[G] c:\windows\system32\drivers\sffp_mmc.sys [PX5: 0D9613CE000C9FDF284300164391810062DCB727]
[G] c:\windows\system32\drivers\sffdisk.sys [PX5: BCD0F07C80BDA6002E68000865B1AD002DF173D8]
[G] c:\windows\system32\drivers\atinxbxx.sys [PX5: D3D6841600E9C8A17C9D00EE54392C008BFD8C61]
[G] c:\windows\system32\drivers\viaide.sys [PX5: 763F36E3001A65E115B100F2DCFD2A00B7136772]
[G] c:\windows\system32\msadp32.acm [PX5: CD5B425B003A7B4A3AD600CBC478F100F8C238A0]
[G] c:\windows\system32\drivers\symc810.sys [PX5: 726B03B580033B4F3FF70050993647004EA53D5F]
[G] c:\windows\system32\drivers\toside.sys [PX5: 660069178081BD481391002BE0F151008E41C9CB]
[G] c:\windows\system32\drivers\perc2hib.sys [PX5: 280C41CF809F7F2E153800F3159B7600EC8E5F7E]
[G] c:\windows\system32\drivers\atinraxx.sys [PX5: FEA5AA1600EC2AE1CC0900185C854A00422223CC]
[G] c:\windows\system32\drivers\serenum.sys [PX5: 8F9437AF80598D773D59000B93D44F00C050B469]
[G] c:\windows\system32\drivers\p3.sys [PX5: BBAD548C80B89633B6F100DD557C7000C631B8C7]
[G] c:\windows\system32\drivers\sfloppy.sys [PX5: 7E9124058071CAC72C6F00EC709F9800B81B6135]
[G] c:\windows\system32\drivers\mspqm.sys [PX5: E79874108063B1F513260078C414AC00D0AB678F]
[G] c:\windows\system32\drivers\mbamswissarmy.sys [PX5: 980187E6E004A2499C37002917ED4200476D887B]
[G] c:\windows\system32\drivers\mspclock.sys [PX5: E3D3244C00A7CE72157A001337247B008F8E8497]
[G] c:\windows\system32\drivers\rfcomm.sys [PX5: 0E12D86100621870E7AC00D7154E22001793DABF]
[G] c:\windows\system32\drivers\nwlnkflt.sys [PX5: A826BA3A803B83AE30C000488911C200DC3CA878]
[G] c:\windows\system32\drivers\mouhid.sys [PX5: 2301F35080287EAB2F80000FDBBFFD00349EAF96]
[G] c:\windows\system32\drivers\irenum.sys [PX5: EFF123FF009559F82C9800EF91504100B6FCDE09]
[G] c:\windows\system32\drivers\ati1xbxx.sys [PX5: 50BEFAA40FC66AE3731C0014DEE71F00327B8872]
[G] c:\windows\system32\drivers\mskssrv.sys [PX5: 1206502B8070367E1DC0005B0E279D003A9EE63B]
[G] c:\windows\system32\drivers\hidusb.sys [PX5: 0884A76A809785C2288500710D0CA8002206DE99]
[G] c:\windows\system32\drivers\watv06nt.sys [PX5: D04CA646FF640CF256F2007383ABD9003A191E15]
[G] c:\windows\system32\drivers\atmlane.sys [PX5: 0680DC6000035655DA6F006BFFA72D00CBE1BD17]
[G] c:\windows\system32\sclgntfy.dll [PX5: 6B220F1300B5B4E054840092B745C8009F1931F2]
[G] c:\windows\system32\tree.com [PX5: 0426C348006AF7FF3248003E203A1100AC4BD090]
[G] c:\windows\system32\drivers\parvdm.sys [PX5: D78233F200E873FD1B40001BF0D2FD00501E1542]
[G] c:\windows\system32\drivers\ini910u.sys [PX5: C7702821802D11853E090094CBC4E400E259EFF7]
[G] c:\windows\system32\drivers\intelide.sys [PX5: 13577194803FCB8815F90068ABEFAF00C12B737B]
[G] c:\windows\system32\drivers\sparrow.sys [PX5: 34EF085980E9566F4AC800ACA767DA00AD03B518]
[G] c:\windows\system32\perfproc.dll [PX5: 2DA4D07A005D11688C8100DC81BCC800E0638A3D]
[G] c:\windows\system32\drivers\secdrv.sys [PX5: 84A9A7CB006F9ECC508100883E7135006D51A95C]
[G] c:\windows\system32\drivers\mraid35x.sys [PX5: C698A15680F72A6A43410027AE857800E03AD3D3]
[G] c:\windows\system32\drivers\ati1xsxx.sys [PX5: 725DA013AF89D09387CF00DFF7253B006BDDF179]
[G] c:\windows\system32\drivers\i2omp.sys [PX5: 53DD5A928056D71F48AC00DEF5424100542EC81C]
[G] c:\windows\system32\drivers\ati1raxx.sys [PX5: D7E83838CFFBCC21778E006C6ECA69008610B277]
[G] c:\windows\system32\wucltui.dll.mui [PX5: 97A4DC2818F2D0838C5F00AAF08DD700D2154793]
[G] c:\windows\system32\drivers\ati1tuxx.sys [PX5: 6F56F7AF6FA57A868E0B00B0DBF03B006604A40C]
[G] c:\windows\system32\more.com [PX5: 7CB0A39500912B7542E2005C7E1CE100D631C015]
[G] c:\windows\system32\alrsvc.dll [PX5: BE3BD313006B4BCF443B00EEDAAA6A002F416071]
[G] c:\windows\system32\rcimlby.exe [PX5: B1B2EA5C00C4E8218CF9005304D1CF00A813D2C0]
[G] c:\windows\system32\drivers\amdk7.sys [PX5: 0601E31D004CB085A3E4003936D92B003527EE17]
[G] c:\windows\system32\drivers\amdk6.sys [PX5: D629DD7080980835A10200E8789C9F00E10700A9]
[G] c:\windows\system32\drivers\sonydcam.sys [PX5: 7C98490200F27A6F636900C11EF4E300DD4774BE]
[G] c:\programmi\outlook express\wab.exe [PX5: 18732DE300814DFFB49D004825D9CA00AA211618]
[G] c:\windows\system32\drivers\flpydisk.sys [PX5: 60E1171000EEA79E50BF00391F7EE0003B4C37EA]
[G] c:\windows\system32\drivers\ipinip.sys [PX5: 9655BFAF8030F62E513A00C352D24800CFB42084]
[G] c:\windows\system32\wmpshell.dll [PX5: A257F2F40064E0C786EE01FC6369D9002CF4EA3F]
[G] c:\windows\system32\drivers\mtlmnt5.sys [PX5: FE91AA0DDE37188CEE5701B0C30E4C00F5593D00]
[G] c:\windows\system32\drivers\mbam.sys [PX5: 14052C179834FA4B4A900016A99D6D00696E70D9]
[G] c:\windows\system32\drivers\hidparse.sys [PX5: 202AE5AF805FDB4161470039E900C000FE5D1DA2]
[G] c:\programmi\file comuni\microsoft shared\grphflt\pictim32.flt [PX5: 55D8C2B8807552990333018219988B0031600759]
[G] c:\windows\slrundll.exe [PX5: 220B58C8621C1633808300BE70965D0040462F05]
[G] c:\windows\system32\mprdim.dll [PX5: 02C1833600CF08BCD0CC00E21F0CF800336A7457]
[G] c:\windows\system32\drivers\atinbtxx.sys [PX5: 734A4454007FFA55E29F00FF52B7680047F5F3B1]
[G] c:\windows\twain_32.dll [PX5: 0C16E67F00444172C6D40019D3036E0039555207]
[G] c:\windows\system32\drivers\ati1btxx.sys [PX5: 9CA86B132F837EAADD9A003E210F24004C5E2C40]
[G] c:\windows\system32\wuapi.dll.mui [PX5: 8F5493101832893C6C0E00E294D026004100167F]
[G] c:\programmi\microsoft office\office10\outlook.exe [PX5: 1998C28D08E18FD8C48C002DDDE82A0025374C86]
[G] c:\programmi\outlook express\setup50.exe [PX5: 75820F86002F8D14206B013110FA45004F9B4393]
[G] c:\windows\system32\drivers\arp1394.sys [PX5: 7E81EB6A803135EBEDB20074BBAF54000B42EB7B]
[G] c:\windows\system32\msvidc32.dll [PX5: CE4E524C0073A8EC64FF00E1300C68000D8D97A8]
[G] c:\windows\system32\drivers\irbus.sys [PX5: F2826D6200C57828B62F004A2636B3005BFDCEA1]
[G] c:\windows\system32\drivers\hidclass.sys [PX5: 58962C52003149AD90AA00A3D0DBC5000F414D33]
[G] c:\windows\system32\drivers\mqac.sys [PX5: EAEA039A80F16E11699801DE4E83680080DEFF6E]
[G] c:\windows\system32\drivers\sdbus.sys [PX5: 12F9511E8033D35E354601CEF3B0FF0072197919]
[G] c:\windows\system32\kmsvc.dll [PX5: 0C30BB5300C36258F0610065C58DEC00FB2EA39B]
[G] c:\windows\system32\digest.dll [PX5: 43035D8E00DDA7D50CEB01BD39791E005EC0CDB3]
[G] c:\windows\system32\msapsspc.dll [PX5: D9AC8D2E00C42D7E50DD015449868A00F8726BFC]
[G] c:\windows\system32\eapsvc.dll [PX5: 761AB97E003BCB628476001EE114150007D55153]
[G] c:\windows\system32\drivers\usbstor.sys [PX5: ABA065AC00509344675C00C0C2499A00F9776F56]
[G] c:\windows\system32\twext.dll [PX5: 35523657002D19D2E2DD008769F96C00BC7CFE58]
[G] c:\windows\system32\iyuv_32.dll [PX5: 800FC557000F6953BA8B00D2FABD9200224114E4]
[G] c:\windows\system32\progman.exe [PX5: ED50A395001B1BAFACFC01B82CBC6300F06E471F]
[G] c:\windows\system32\drivers\usb8023.sys [PX5: 3E77E626002C4E4732F6001737A36500DF1D4C45]
[G] c:\windows\system32\dot3gpclnt.dll [PX5: 652A019D009865A09C6700A5E73BD700FA947982]
[G] c:\windows\system32\drivers\sym_u3.sys [PX5: F7063075E0AC6E5A777A00060D477100337B9826]
[G] c:\windows\system32\drivers\tape.sys [PX5: 1278B1EF80B32A683A3F0096934CD200CD93C3A7]
[G] c:\windows\system32\drivers\sym_hi.sys [PX5: 71BB2597E0A078A96ED200558FFED400800CEC2F]
[G] c:\windows\system32\drivers\perc2.sys [PX5: A43AD585A01480D56AE700F494050400D8326688]
[G] c:\windows\system32\drivers\symc8xx.sys [PX5: A176C643801C41297FB00031AC7E6200A76AF5F8]
[G] c:\windows\system32\drivers\tdtcp.sys [PX5: 8942980688A6EF76558200032BC6D800DD26DD28]
[G] c:\windows\system32\drivers\usbcamd2.sys [PX5: 2C68E76080C0840A6439007754862A00AB77FF15]
[G] c:\windows\system32\drivers\rndismp.sys [PX5: 120F9F0E8086D8327795009508457100EA4A9887]
[G] c:\windows\system32\drivers\usbvideo.sys [PX5: FA7006EB805F52DBDCF201809943FE006A5457D5]
[G] c:\windows\system32\rdpclip.exe [PX5: DBBC6411009AF4A4F6E6004A66FE4E0009AC4F42]
[G] c:\windows\system32\clipsrv.exe [PX5: A0D6A62000FC51CC827400A5E85505007AD9F9A0]
[G] c:\windows\system32\drivers\nwlnkfwd.sys [PX5: B9B73139006979BB7FBC0031EA7E320032D237D0]
[G] c:\windows\system32\drivers\ultra.sys [PX5: 41CE68A780B045778F98006DDDA3600052A1B522]
[G] c:\programmi\outlook express\msimn.exe [PX5: 8D29DC5E00B66EAEEC1A0098F08022008D62385B]
[G] c:\windows\system32\drivers\hpn.sys [PX5: E3E88DDE608451A865E100EA998B2E0037855B2B]
[G] c:\windows\system32\drivers\fdc.sys [PX5: 030113CC009ED3836B77000B64308F00665FD179]
[G] c:\windows\system32\drivers\ql10wnt.sys [PX5: 7595631F80DF50C381F200FF279FAF00F5EF7B24]
[G] c:\programmi\file comuni\microsoft shared\grphflt\wpgimp32.flt [PX5: 905DC0BF8097672A179502F27F53EB00F3EA4F01]
[G] c:\windows\system32\drivers\viaagp.sys [PX5: D6E79603001AC593A55800BA66876F00A4E86821]
[G] c:\windows\system32\drivers\nmnt.sys [PX5: 4F6E51DE803D5E299DD30090E390240049FFAF2D]
[G] c:\windows\system32\drivers\usbcamd.sys [PX5: 2C68E76000C0840A6439007754862A00090E71FE]
[G] c:\windows\system32\drivers\sisagp.sys [PX5: 67D98FA600CA352AA02400A357FF240007CD1A59]
[G] c:\windows\system32\drivers\ql1240.sys [PX5: F2BAC8600017931F9E4B00F553CCA000C43C7732]
[G] c:\windows\system32\drivers\ql1080.sys [PX5: A82C642380AE2BE59DA700943B27FD00DC447A6B]
[G] c:\windows\system32\drivers\ql1280.sys [PX5: 0A6F8C92806C6174BFD3001253C5130062859538]
[G] c:\windows\system32\drivers\ql12160.sys [PX5: 36C6F79E008C7970B15D0042B56E550063C1516E]
[G] c:\windows\system32\odbcad32.exe [PX5: 34705F4000E9D72D8056002DDDE82A006E9F297F]
[G] c:\windows\system32\drivers\mosirusb.sys [PX5: CCF8C72100EE1D06BCAA00903F19D20072063549]
[G] c:\windows\system32\drivers\ipfltdrv.sys [PX5: E130718C809C039180F700DA0AC8EE00F2B31814]
[G] c:\windows\system32\drivers\ip6fw.sys [PX5: 93047826004370A18F5A0004B987DC008A8F55C7]
[G] c:\windows\system32\upnphost.dll [PX5: AD96031F00A3DB11D82A02876B84A10033E3C1E1]
[G] c:\windows\system32\drivers\tmcomm.sys [PX5: 33F0242D1062C69B2B8602E526CA1D0013B3A7EC]
[G] c:\windows\system32\rasauto.dll [PX5: 2881AE4800C81E315A980140CAE221004CAF38BD]
[G] c:\windows\system32\mmcshext.dll [PX5: DFD85BD5007DEDD1F0D0003358698000DE0E8AD5]
[G] c:\windows\system32\drivers\slnt7554.sys [PX5: 7E3AB854FF177A8EF97F01B5C9799B0044CD1C46]
[G] c:\windows\system32\rdpwsx.dll [PX5: D3BE4945884F68D4543F012785E3EC004DEB3106]
[G] c:\windows\system32\ie4uinit.exe [PX5: F764EB4C006B753B140901425FEA5D00B7778398]
[G] c:\windows\system32\drivers\hsfbs2s2.sys [PX5: AF892C8C80AD05195B84032B43A9B8008B0F4B6A]
[G] c:\windows\system32\drivers\mf.sys [PX5: 3D97E98E00A086C1F9650053183C0E004DCD4DB3]
[G] c:\windows\system32\drivers\ntmtlfax.sys [PX5: F44616B18898348BC05502B7489AC100042E0B8E]
[G] c:\windows\system32\drivers\nwlnkipx.sys [PX5: B455E8AE00B6DCC159C401E18C4FD600E4472A6B]
[G] c:\windows\system32\drivers\scsiport.sys [PX5: 5DC8AF70801E084478BD01B28E7A760029179ED8]
[G] c:\windows\system32\drivers\wudfrd.sys [PX5: 938378B8001690D3445C01DE64563A001F0572DD]
[G] c:\windows\system32\drivers\slnthal.sys [PX5: 4125157DC0CA9DDC747D01DF9E13BE000301B563]
[G] c:\windows\system32\drivers\tcpip6.sys [PX5: D4E30D4B407CD59972E20360C1250500064EC71A]
[G] c:\windows\notepad.exe [PX5: FA18F51F0094FF11128201400A0F9A007F3BF690]
[G] c:\programmi\eraser\verify.exe [PX5: 1BF53F55000BA9C220630361F6F5B200DF937B29]
[G] c:\windows\system32\fdeploy.dll [PX5: D9DFD7F400E7AF6B2AC70118C47893004130DE56]
[G] c:\windows\system32\drivers\nwrdr.sys [PX5: 1CC957CA005466707FF2024CA9B3BA00D89CE518]
[G] c:\windows\system32\mstsc.exe [PX5: 206F5C3000AC91D6584F0A837C7C59004E5B3178]
[G] c:\windows\system32\iedkcs32.dll [PX5: 2349508700A76C9BDE4E05A7A82E0700E46EFC56]
[G] c:\windows\system32\magnify.exe [PX5: 33EC9B660076E05F1E9601635E5A01006EC6C58A]
[G] c:\windows\system32\drivers\btwusb.sys [PX5: D5B550F0382D513E07F4011974651B00A655824A]
[G] c:\programmi\file comuni\microsoft shared\grphflt\epsimp32.flt [PX5: 5BF32337808C68F099B2062F0E984D002C7BE2A9]
[G] c:\windows\system32\usmt\migwiz.exe [PX5: 8E16AC0700D631AFC8A3039B3B684F0018EB39C9]
[G] c:\windows\system32\drivers\bthpan.sys [PX5: 5BE273B80025E0C98B4301B3B287960093A3D165]
[G] c:\windows\system32\drivers\udfs.sys [PX5: 988B7E82003617020237016FD9022800564BB7C4]
[G] c:\windows\system32\drivers\bridge.sys [PX5: 5952BE348035D33F17AC01C9641C24008927A6E8]
[G] c:\windows\system32\msnsspc.dll [PX5: 02C8034600EE765770E304A317C063002E01CFEE]
[G] c:\windows\system32\drivers\atinxsxx.sys [PX5: CEDD5F03008A5FA5F8E5006BA33674000902F33E]
[G] c:\windows\system32\spider.exe [PX5: 939474F9009972213A3E08A1DAEB49000139CFB4]
[G] c:\windows\system32\drivers\atintuxx.sys [PX5: 9CDDA52F00E9E7A81E4101F1C5DBF60019525D37]
[G] c:\windows\system32\drivers\ati1rvxx.sys [PX5: 791DC4AAAF43CE30F814008CD5B52900B5EE141F]
[G] c:\windows\system32\drivers\atinrvxx.sys [PX5: B2CFA5AF0036DB7A9A1C01285BA8AA00C6DEC091]
[G] c:\programmi\superantispyware\sasdifsv.sys [PX5: 5B249F33F0DA27A126C3009A83659000D49FB4E2]
[G] c:\windows\system32\drivers\sr.sys [PX5: 4D90659E00D8A4771F1A013E6E421F00E7B670E1]
[G] c:\windows\system32\drivers\mtxparhm.sys [PX5: 58EEB961806700F0E8150672FF705700E15F3A2C]
[G] c:\windows\system32\restore\rstrui.exe [PX5: 1A0B3C59000EC472DCA60574F928F500AB46F8BA]
[G] c:\windows\system32\microsoft.managementconsole.dll [PX5: F33B901100E23444D070026436120F006D885548]
[G] c:\windows\system32\rsvpsp.dll [PX5: 33F96BFF00DFBAF46A9901E930F304001F47B9D9]
[G] c:\windows\system32\drivers\nic1394.sys [PX5: 6A6B604D8063736BF1A600F2F0678F005B5068A6]
[G] c:\windows\system32\gptext.dll [PX5: 80AE2EBF0014C485124603B429E0A4009EB0F4CB]
[G] c:\windows\system32\dot3svc.dll [PX5: 8661343E00232BE1083F02185D47F800E94E3C4E]
[G] c:\windows\system32\mobsync.exe [PX5: 8D99B02700CB46B7320C020A24EABF00D18BD92C]
[G] c:\windows\system32\sndrec32.exe [PX5: F565AD6100829EAD06FB0280842493002AA79F20]
[G] c:\windows\system32\osk.exe [PX5: 26587C10003F814F4E8B03D4BA13D20058B6F00B]
[G] c:\windows\system32\dskquota.dll [PX5: 4A27CAC90003BFCF6E38018212FA48001F72838A]
[G] c:\windows\system32\sl_anet.acm [PX5: 3DA8D952002B67BF508D01A57E615F00081D79C8]
[G] c:\windows\system32\iccvid.dll [PX5: 8C6E3355006B8FCB3AE30139214C920052426304]
[G] c:\windows\system32\drivers\dac2w2k.sys [PX5: 2988280A8061B19BBDB80278B0C05C0011F9526A]
[G] c:\windows\system32\msieftp.dll [PX5: CD815B71007771B8D6BC03E854DB7B007FE9B3EC]
[G] c:\windows\system32\cleanmgr.exe [PX5: 87A10DB700389E7FFE100005A3F02200794B94D8]
[G] c:\windows\system32\tlntsvr.exe [PX5: 9B9ED72E00824DEE242A010FD6E80000766A0267]
[G] c:\windows\system32\drivers\btwdndis.sys [PX5: B4B3C5EB04614AB0469102F7616DA000B77BBCB6]
[G] c:\windows\system32\drivers\wudfpf.sys [PX5: 0CF32E7D00C942692FB1016FE6CD6B005D0F67E4]
[G] c:\windows\system32\drivers\parport.sys [PX5: F776B5288062C95539840181DB20C800EFED740E]
[G] c:\windows\system32\msg723.acm [PX5: 11020CC8008FB79ED00601EAD6C03900AA679A83]
[G] c:\windows\system32\drivers\bthport.sys [PX5: ADE8AA1880E8EAFB2908044988134B00DB62096D]
[G] c:\windows\system32\wscui.cpl [PX5: FE2276CD00A6EF27448C02D18FF67C006C6E4AB9]
[G] c:\windows\system32\qmgr.dll [PX5: F3855F4A00EE33DF3E4C06A7206A8F00CD0437C7]
[G] c:\windows\system32\netdde.exe [PX5: 56C5C48900C79A35BAD30180B0E27000541C9728]
[G] c:\windows\system32\drivers\ati2mtaa.sys [PX5: 0FF8649100F26F76FEF504C73380B900C47D5F6A]
[G] c:\windows\system32\drivers\e100b325.sys [PX5: F259B54600607D05CCFA011F853F800065DB7A06]
[G] c:\windows\system32\tourstart.exe [PX5: A10D7C97007AE77D4C8205932D0D34009AE30107]
[G] c:\windows\system32\ntbackup.exe [PX5: 1CCA901E003EE690A26B12529D4ED5008A2B7CFC]
[G] c:\windows\system32\aaclient.dll [PX5: 0EF29BC60005077314D50260C184900035B0DC81]
[G] c:\programmi\windows nt\accessori\wordpad.exe [PX5: 3601AAF600874F32543903B2B3F54E00B6FB1D95]
[G] c:\windows\system32\drivers\slntamr.sys [PX5: 2D73A613FED6C4502D2F0603BB1BA000441F5C5B]
[G] c:\windows\system32\shimgvw.dll [PX5: 9C7B98830081A0C9B60F06FC301981000F99F4E0]
[G] c:\windows\system32\cmd.exe [PX5: CF4AF87F0057067414080606F4B6C600DEC39A19]
[G] c:\windows\system32\iprtrmgr.dll [PX5: 8178FC9100EE0E15B47F02996C441F004DA436C5]
[G] c:\programmi\file comuni\microsoft shared\grphflt\png32.flt [PX5: D8CEC01B80295FA22BAE032D94E9A900DE9D0159]
[G] c:\windows\system32\drivers\rdpwd.sys [PX5: DECD2AFD8815523621B402D8A9AF870061A5ECED]
[G] c:\windows\system32\drivers\dmboot.sys [PX5: 917F15200042015F36C20C3622393800E215D423]
[G] c:\windows\system32\drivers\ati2mtag.sys [PX5: C185A3E2009B7986B4DD0A998E71E7009CCDF019]
[G] c:\windows\system32\appmgmts.dll [PX5: 1DA92FA300BC093EAC8A02234001000031650932]
[G] c:\programmi\eraser\boot\eboot.exe [PX5: EE565134B18D55DCA666156ED3F80F00EE5FC5EB]
[G] c:\windows\system32\xmlprov.dll [PX5: 5E9092B200C8BFE2F8D301F8E0698400891E9836]
[G] c:\programmi\file comuni\microsoft shared\web folders\msonsext.dll [PX5: 4C7C6E6900057CA880F9136E5CFE40002052808A]
[G] c:\windows\system32\drivers\rmcast.sys [PX5: 21049E93803BC45319AC033F5C8921009305ED5B]
[G] c:\windows\system32\wscript.exe [PX5: CE0E9EB100A54CB560AF0200882A3D0036934A94]
[G] c:\programmi\lenovo\system update\tvsu.exe [PX5: 01443E9538368177F50809BA3E8FB00041E32DA7]
[G] c:\windows\system32\qagentrt.dll [PX5: 5D41EE3F00491BA97CDE043D738C9C00FE5097FD]
[G] c:\programmi\file comuni\microsoft shared\grphflt\gifimp32.flt [PX5: 46D64618801D5766630903F3CBA7640069CEF45B]
[G] c:\programmi\mbam-setup.exe [PX5: 14A6205A784CA605716533F157FE7E007A1E4861]
[G] c:\programmi\thinkpad\utilities\batlogex.dll [PX5: 01066031001AD48F306F03CF59BE1B00FB57CCF8]
[G] c:\windows\system32\drivers\hsfcxts2.sys [PX5: B01E5EF200315B7474880AC61620FE005A82CE5F]
[G] c:\windows\system32\logon.scr [PX5: EB950522006933485E7103A2253C2100C8524E94]
[G] c:\windows\system32\iac25_32.ax [PX5: D062C8E7003B5A390C1703C014BB970080E1B3D7]
[G] c:\windows\system32\msh261.drv [PX5: 94D28CC600CD37C0F015027A0F650D005E3511D0]
[G] c:\programmi\file comuni\microsoft shared\speech\sapi.cpl [PX5: DB2959BA00207EB970E802F212FC7100D566DA41]
[G] c:\programmi\superantispyware.exe [PX5: 875AA342207E5BF5C29E6164D10A9B00DA68F955]
[G] c:\windows\system32\drivers\mtlstrm.sys [PX5: 5C03650C006804A7FAD51340E559B800B2F2DF69]
[G] c:\windows\system32\drivers\s3gnbm.sys [PX5: 61E69E1D00FCADE18C3D02DB5DBD000075CEE0EF]
[G] c:\windows\system32\ir32_32.dll [PX5: 48C6FD2800CF7D770AB40340E9EE0B00336C0935]
[G] c:\windows\system32\l3codeca.acm [PX5: BD6FA9CA00B4F05D702C042DD7B42E0055A9F388]
[G] c:\windows\system32\drivers\nv4_mini.sys [PX5: 917F7FE8C02DB936F3411C8AC739AB0032E68CB2]
[G] c:\windows\system32\msaud32.acm [PX5: C38F33CC0026C9E080B10460DFC46F00324366AA]
[G] c:\windows\system32\mpg4c32.dll [PX5: 9EEA4E7700E5529D8682067E5AD5E300A3EF639A]
[G] c:\windows\system32\ir50_32.dll [PX5: 8FA030FE0030B5D3865F0B4087D042005E6D038C]
[G] c:\windows\system32\ir41_32.ax [PX5: 88C1844600D60C2BF2960C06110E8900B38394ED]
[G] c:\windows\system32\msh263.drv [PX5: 4DA8C64B0012490690050452F5E54A0066110948]
[G] c:\programmi\malwarebytes' anti-malware\unins000.exe [PX5: 57C587C410E2A48B914D0AA72B9B4000F1F86DD1]
[G] c:\programmi\avira\antivir personaledition classic\avcenter.exe [PX5: E9DF24320176A1FB719405F1A23641001D0F15C1]
[G] c:\windows\system32\drivers\g400m.sys [PX5: A846760380899C8AEBB104964CE9AC00C526A55B]
[G] c:\windows\system32\accwiz.exe [PX5: AAFC747C00F3F849E60702DA3117EF00FB7F4682]
[G] c:\windows\network diagnostic\xpnetdiag.exe [PX5: 316B099D00042E5F84FB08EFB197E400B8631058]
[G] c:\programmi\movie maker\moviemk.exe [PX5: 2D688E9500FAE99A4EB336E8ADA45B0074D5718D]
[G] c:\programmi\windows nt\pinball\pinball.exe [PX5: 132EB8F200E473C5564E04A5A0555A008C717ADA]
[G] c:\programmi\index.dat suite\unins000.exe [PX5: 7CABF2D34364C3719DCF0A561A0FFB007CA5CD72]
[G] c:\windows\system32\ntmssvc.dll [PX5: 9BD718160075421FACE2060654EEA1008964EEC9]
[G] c:\windows\system32\logonui.exe [PX5: 1342C7E300DFE871DEC607CB179E3F007FC683A5]
[G] c:\windows\system32\drivers\hsfdpsp2.sys [PX5: 8779C2C980FAE868E48B0FB35EB4640037393C0C]
[G] c:\programmi\prevx\prevx.exe [PX5: 0418016438820A3D308843C335276F009ED2440C]
[G] c:\documents and settings\mionome\impostazioni locali\temp\pxinstall703.exe [PX5: 0418016438820A3D308843C335276F009ED2440C]
[G] c:\windows\system32\drivers\acpi.sys [PX5: 6EB7D7240014C2CFE06D029EF0BB7000367BA569]
[G] c:\windows\system32\drivers\acpiec.sys [PX5: F21BE3DC800E8A0A2F3C009238A73C008905B399]
[G] c:\windows\system32\drivers\atapi.sys [PX5: 7EFDCA54002458B979D801FAFEE1BA00D9C1C0F3]
[G] c:\windows\system32\drivers\cdfs.sys [PX5: 32BC87EC00259579F9BB00FE0592C600D2487863]
[G] c:\windows\system32\drivers\compbatt.sys [PX5: B9F195C100B82BC2285F0085378DFB002E8BBEC1]
[G] c:\windows\system32\drivers\battc.sys [PX5: 8D88B13A800A80F93737004B28807500B26AD2B4]
[G] c:\windows\system32\drivers\disk.sys [PX5: BABEC76A00F1DE6C8E6B006300D7C000C740F7FB]
[G] c:\windows\system32\drivers\classpnp.sys [PX5: DABB94D3808B9CD2C1E700433F343C002A376870]
[G] c:\windows\system32\drivers\dlacdbhm.sys [PX5: E7B40A271C39633316B600010BB071009E2E55EE]
[G] c:\windows\system32\drivers\dlartl_n.sys [PX5: 26DF9D919CFB31DA58DD00261A9CB500483C1398]
[G] c:\windows\system32\drivers\dmio.sys [PX5: 33A7916180B2EE7E5AC702A49AA6DC00B72C11AE]
[G] c:\windows\system32\drivers\dmload.sys [PX5: FC216AA0003B46A9171D00359F9C1600E909FEB4]
[G] c:\windows\system32\drivers\drvmcdb.sys [PX5: 75B1295680330FB15D8A017482F36C00FB07E4C9]
[G] c:\windows\system32\drivers\drvnddm.sys [PX5: 073C8C5560320A2D9E5900D122BA430012CDD1A3]
[G] c:\windows\system32\drivers\fastfat.sys [PX5: F0856C7A80397A29311C02813B3DA50014641845]
[G] c:\windows\system32\drivers\fltmgr.sys [PX5: D4102B44002D99F7FBD9017938FF2E006FE1A407]
[G] c:\windows\system32\drivers\ftdisk.sys [PX5: D543638280F1FAF5EBA30154BD3E7700D3ED2EEC]
[G] c:\windows\system32\drivers\iastor.sys [PX5: FCAEF79700DD69A157CA0D202F4E0800426D2F1F]
[G] c:\windows\system32\drivers\isapnp.sys [PX5: 058FA73D8024005F9213009604518D00AF3569F0]
[G] c:\windows\system32\drivers\ksecdd.sys [PX5: E4281EC0805FE5A768F601501D293C0073A2B968]
[G] c:\windows\system32\drivers\mountmgr.sys [PX5: F625E60D80ACD1DFA5CD0007C352D300C526628E]
[G] c:\windows\system32\drivers\mrxdav.sys [PX5: 86A7BD6A80472829C1AA02C410774F00921E43D8]
[G] c:\windows\system32\drivers\tdi.sys [PX5: 336A5FFA806BA4D04A25002F94650D00FA2EE7F1]
[G] c:\windows\system32\drivers\ndis.sys [PX5: 66FD69E280C0307CC99502059A6E1F00A3DC5047]
[G] c:\windows\system32\drivers\mrxsmb.sys [PX5: 24D415A780CEFA02F2BA06AE34390000BAECA386]
[G] c:\windows\system32\drivers\rdbss.sys [PX5: DDFA4CB7805D697DAE6F022E35C3740009720658]
[G] c:\windows\system32\drivers\msfs.sys [PX5: 075BA4B3803111464A9700E6E20263002BA4C5C1]
[G] c:\windows\system32\drivers\mup.sys [PX5: 82B83CA280B2FE349BD401F92F115C0088A9D676]
[G] c:\windows\system32\drivers\netbios.sys [PX5: 23DB0EFF80B83ECF873100DB571168001F4F3EBE]
[G] c:\windows\system32\drivers\npfs.sys [PX5: B43BD59880189C23783E008E44C90300668CF774]
[G] c:\windows\system32\drivers\ntfs.sys [PX5: 68B8CB9A00DB8C31C6650828ECB5D000D907D29A]
[G] c:\windows\system32\drivers\partmgr.sys [PX5: 08883A9F007E19614D7C0086612781001871B4FA]
[G] c:\windows\system32\drivers\pavboot.sys [PX5: 07A94E9A805CB7726F2D00EBEE4CB500A3EEF877]
[G] c:\windows\system32\drivers\pci.sys [PX5: 70ABBFD580C14EBE0C2401AA543AE4001A16E1B4]
[G] c:\windows\system32\drivers\pciide.sys [PX5: 826808EE00CFD8500D55002AE8E7E200B79BCD14]
[G] c:\windows\system32\drivers\pciidex.sys [PX5: DD4713DB80668128615F00A6F0879B00ABFB7BA6]
[G] c:\windows\system32\drivers\pcmcia.sys [PX5: E57DBA648058975ED677010270809800E9F49C06]
[G] c:\windows\system32\drivers\phooks.sys [PX5: 0F17EAD9005EF4A15CBD00779EA29B008260A460]
[G] c:\windows\system32\drivers\pxhelp20.sys [PX5: F64C1972906D218E8ED00047FEE8F000F2E58FF6]
[G] c:\windows\system32\drivers\srv.sys [PX5: DF17B993808FD02718F5050A355CBF00DBE6CD38]
[G] c:\windows\system32\drivers\volsnap.sys [PX5: AC3AFD0E80294768D03200EE1153E4006B5D9064]
[G] c:\windows\system32\drivers\intelppm.sys [PX5: 39699AD400D9AE559E810028B2FB85003644F71E]
[G] c:\windows\system32\drivers\videoprt.sys [PX5: 377F3A12008678163F89010948A33F00D705246B]
[G] c:\windows\system32\drivers\hdaudbus.sys [PX5: 73D184090042DDE5345C02650DBE220005836311]
[G] c:\windows\system32\drivers\ialmnt5.sys [PX5: 9B02DE487C422096DBCC11405D2B3C006CE5B2CB]
[G] c:\windows\system32\drivers\b57xp32.sys [PX5: C516446F00EE995E52A80249541DE400217B11C5]
[G] c:\windows\system32\drivers\usbuhci.sys [PX5: D81BB1DF80EA1657507400BDA6BF3A004BB3ED37]
[G] c:\windows\system32\drivers\usbport.sys [PX5: 2DE2E261000BE51B321102D489119600D037C29D]
[G] c:\windows\system32\drivers\usbehci.sys [PX5: B7CF4A1F000610EE76A700C59AB11800317C3739]
[G] c:\windows\system32\drivers\i8042prt.sys [PX5: DA98A4B800100080D05600D07A196E00140B5B3E]
[G] c:\windows\system32\drivers\kbdclass.sys [PX5: 294697E800A9284062B000EC87665B008A489905]
[G] c:\windows\system32\drivers\tp4track.sys [PX5: 3E271E8310B5738836F300290A154800198B25FF]
[G] c:\windows\system32\drivers\netw3x32.sys [PX5: A7445F5180862CD616E51ABDE4B63A00A0469AA3]
[G] c:\windows\system32\drivers\mouclass.sys [PX5: 3C924CE100C24F275C2F002C47B75600AA6A8EB5]
[G] c:\windows\system32\drivers\cmbatt.sys [PX5: 91BBA2548094CF733605005E75072E0038B3B8ED]
[G] c:\windows\system32\drivers\ibmpmdrv.sys [PX5: D5F3353B80C8F9B027BD005D68EECD00A5458C70]
[G] c:\windows\system32\drivers\imapi.sys [PX5: 3B4CF15D80843BB7A4700016353E4C009D72AA2C]
[G] c:\windows\system32\drivers\iviaspi.sys [PX5: F63EE4064496B232528300016B9F0E00A53AD6FA]
[G] c:\windows\system32\drivers\cdrom.sys [PX5: C199071200DE4547F6A400CF6EE9C000D563E181]
[G] c:\windows\system32\drivers\redbook.sys [PX5: B8EFDA0A00279C0DE4A3008649095C009FF36655]
[G] c:\windows\system32\drivers\ks.sys [PX5: 87503DB3004DD623274B02500D0F0100F925AF13]
[G] c:\windows\system32\drivers\btkrnl.sys [PX5: 5F4F09EBEA58B7F5FD7D0C8B8FFAA700C4F6C8CD]
[G] c:\windows\system32\drivers\tvtpktfilter.sys [PX5: 5ADDA79F00DC75C445F100B867965E00A9D05F75]
[G] c:\windows\system32\drivers\audstub.sys [PX5: C910D030000E35B30CDC00441BDEF300B79BCD14]
[G] c:\windows\system32\drivers\rasirda.sys [PX5: 8CCCA2B7808E55A34CD8006092BBF6006631AD45]
[G] c:\windows\system32\drivers\rasl2tp.sys [PX5: 04361C2480BC21BEC86000FE8376D300F6D5AE51]
[G] c:\windows\system32\drivers\ndistapi.sys [PX5: C3A695B380E30CC02755009BF4479D00BD860124]
[G] c:\windows\system32\drivers\ndiswan.sys [PX5: 8EBDB6FD80F9F2E2651A01DE3D64ED007AF52054]
[G] c:\windows\system32\drivers\raspppoe.sys [PX5: A8F2C94800B2E031A21A00F0EC682E00315F4F25]
[G] c:\windows\system32\drivers\raspptp.sys [PX5: B1A119FE00E7C604BDD8000AFFA89E000AC425E1]
[G] c:\windows\system32\drivers\psched.sys [PX5: C7C1320E008655110E77011715C66E007F5FF524]
[G] c:\windows\system32\drivers\msgpc.sys [PX5: A6DC8C520088C979894600B57B2B1A003DB240E9]
[G] c:\windows\system32\drivers\ptilink.sys [PX5: F96F182D805891FA452B007EBD870E004C25BA07]
[G] c:\windows\system32\drivers\raspti.sys [PX5: 506F10F380FEE57C406900BE351741009F00F0DE]
[G] c:\windows\system32\drivers\rdpdr.sys [PX5: 82D5CECB80D432D9FE04025BA4D770006B8DDA66]
[G] c:\windows\system32\drivers\termdd.sys [PX5: A51ACDC18840AF6D9F64006193DC6900F22BC047]
[G] c:\windows\system32\drivers\psadd.sys [PX5: 432AFD4780F2889E5384007E87433E0017A0D147]
[G] c:\windows\system32\drivers\swenum.sys [PX5: FDB253C8004ADC8E110200CB82EF3C007DFF1D3C]
[G] c:\windows\system32\drivers\update.sys [PX5: 355F58320023AEC7DF8C05CE3C3D20001B8BA7AA]
[G] c:\windows\system32\drivers\mssmbios.sys [PX5: C55BF06D80F019CA3C16000D43776900152A33A1]
[G] c:\windows\system32\drivers\btaudio.sys [PX5: 13684EC95D85169E023005D60FD57800B7579C32]
[G] c:\windows\system32\drivers\portcls.sys [PX5: 4063DAA88063A56E3A31026918DD9D00E5A06C42]
[G] c:\windows\system32\drivers\drmk.sys [PX5: 73B664550055CFD9EB9800CC44976A00817D1F0B]
[G] c:\windows\system32\drivers\ndproxy.sys [PX5: 0529FE4980554C459E7D0017155F0300464A72C9]
[G] c:\windows\system32\drivers\usbhub.sys [PX5: 028A9D718013183EE8C20091B9A9DF00B4FA14E0]
[G] c:\windows\system32\drivers\usbd.sys [PX5: F328D8568037A02F12FA00A0B0E095005A1BACA9]
[G] c:\windows\system32\drivers\adihdaud.sys [PX5: D77E2694002CBD38B0DA026D141C32003766D298]
[G] c:\windows\system32\drivers\aeaudio.sys [PX5: 67D302428097FAC86E100176EC7C9F008AC20AF5]
[G] c:\windows\system32\drivers\hsxhwazl.sys [PX5: 4F1F3C8C00058049F01102B9E484E200A4005137]
[G] c:\windows\system32\drivers\hsx_dpv.sys [PX5: B79C23160043EE274ACC0EC81474180019456423]
[G] c:\windows\system32\drivers\hsx_cnxt.sys [PX5: 26B070E4002D7FA03ACB0A03AB87F6005E669655]
[G] c:\windows\system32\drivers\modem.sys [PX5: F22F2ACE0067686F7617004AA04CD4002C03341F]
[G] c:\windows\system32\drivers\i2omgmt.sys [PX5: F7BFCB2B80806536211A0049A4346B000C717EF5]
[G] c:\windows\system32\drivers\cdaudio.sys [PX5: 7D0D30B9001A5352491B006D9C79D000079079B1]
[G] c:\windows\system32\drivers\fs_rec.sys [PX5: 2E3179C900CB71741FBA004F645EEB00865149D3]
[G] c:\windows\system32\drivers\null.sys [PX5: 7047032880E19D2B0B4300F23A496700B79BCD14]
[G] c:\windows\system32\drivers\beep.sys [PX5: F62FA4F780D77A5110B2005CD7507900637E04C1]
[G] c:\windows\system32\drivers\vga.sys [PX5: 14B18202007EA0B752C8003693833D008EAD2108]
[G] c:\windows\system32\drivers\mnmdd.sys [PX5: 33A41DEC8064684210700001C4EA1400320E2D4F]
[G] c:\windows\system32\drivers\rdpcdd.sys [PX5: 14FCFAAE80A686EB103300CFAE183900CB624D74]
[G] c:\windows\system32\drivers\rasacd.sys [PX5: EF519CA180B540A42200002C4F06E3005372DD33]
[G] c:\windows\system32\drivers\ipsec.sys [PX5: 79A0224700FAFF4326830149CF7DA0000DFE2E8B]
[G] c:\windows\system32\drivers\tcpip.sys [PX5: 7425FFD4801F976C845E057FA12DE300FB2DB5ED]
[G] c:\windows\system32\drivers\afd.sys [PX5: D0DAC555003648FC1D6402AEB1A30300B6AA81C4]
[G] c:\windows\system32\drivers\ipnat.sys [PX5: 1F7F2BD10003DE0655BE02D5B028F400DFB3DD71]
[G] c:\windows\system32\drivers\serial.sys [PX5: 00865C28000F2474011F01FA05202500CFE019CE]
[G] c:\windows\system32\drivers\processr.sys [PX5: BB2A3C640003321C9C3A006C7B5F3B00FA5196EC]
[G] c:\windows\system32\drivers\tsmapip.sys [PX5: A56EA69B005A815E1C4C003B3C2E070061447F2C]
[G] c:\windows\system32\drivers\tppwrif.sys [PX5: 0B03459F5A2CE65311AE0046CA251F002CD55326]
[G] c:\windows\system32\drivers\tphkdrv.sys [PX5: A8C01D5823D331DC450E0011C1CD10003EE987D3]
[G] c:\windows\system32\drivers\tdsmapi.sys [PX5: 459029B37FD94FDF2481009F63338E00B5C3C960]
[G] c:\windows\system32\drivers\ssmdrv.sys [PX5: 9DFE8017C052ACA56EB900980E18520079AEADB0]
[G] c:\windows\system32\drivers\smapint.sys [PX5: C98DB341002AED4D3A7F009FC6132A00CBE6D206]
[G] c:\windows\system32\drivers\ibmbldid.sys [PX5: 5A196B5B80F5824917EB0018E6FD8800A70A5B85]
[G] c:\windows\system32\drivers\fips.sys [PX5: 744A974780158591AEE700FCB47CB0008EB81D94]
[G] c:\windows\system32\drivers\avipbb.sys [PX5: 1CE3C4D840973638258A01E4C3EEF5001983B698]
[G] c:\programmi\avira\antivir personaledition classic\avgio.sys [PX5: 9E7183A14012359F2ECF00C7B7B630002CC224EB]
[G] c:\windows\system32\drivers\anc.sys [PX5: DDC4412300AC296D2D8300C1CA588300BC5601D0]
[G] c:\windows\system32\drivers\wanarp.sys [PX5: D61BDDFF00BF41D487E5002B87E949000AB1F829]
[G] c:\windows\system32\autochk.exe [PX5: 2C2391C300F62E745A7B091CADAC9C008319D482]
[G] c:\windows\system32\advapi32.dll [PX5: 86608087003C2F776E2A0AC296447500A0303468]
[G] c:\windows\system32\shell32.dll [PX5: 549254A1005065E58E5581179BB94B000484F8BE]
[G] c:\windows\system32\ntvdm.exe [PX5: 634107A90012DE386E3C06242FF6B200A2CB8734]
[G] c:\windows\system32\crypt32.dll [PX5: EEC9C1AE00438F913434098A41A95200D0FDCC23]
[G] c:\windows\system32\drivers\dxapi.sys [PX5: D0E069F50027643C29470029619BD400B7B7054A]
[G] c:\windows\system32\watchdog.sys [PX5: A5490EC7005C2AF84570001E79455E00E3F49155]
[G] c:\windows\system32\win32k.sys [PX5: C016EB0500FC63662EB61C25120D90003E6D1F6B]
[G] c:\windows\system32\drivers\dxg.sys [PX5: 44B3ED82006E893D169701DEBB322F00F12E58E5]
[G] c:\windows\system32\drivers\dxgthk.sys [PX5: 0164AB8900598A330DE900E4FEF37900B79BCD14]
[G] c:\windows\fonts\vgafix.fon [PX5: 91E18BC7F0A0037314FB006B55157F001FC9364C]
[G] c:\windows\system32\shsvcs.dll [PX5: 9FEDCE6F00A15CFA100D02B62AC38B00786C0F56]
[G] c:\windows\system32\services.exe [PX5: 161D62DA0066FD4CAA5C016C25DE390077C0BD96]
[G] c:\windows\system32\lsass.exe [PX5: 9D3A61F200AF6D2D3445003B3C2E07005990B7B6]
[G] c:\windows\system32\tvt_gina.dll [PX5: B1AA5A37007013DCD047086DB0CB34004E01C770]
[G] c:\windows\system32\w32time.dll [PX5: D79D23FF0093269AB4D302EFFA2B90009FAD9DE2]
[G] c:\windows\system32\scecli.dll [PX5: FCF3A69C00CE9DE8DE570212E35009008F022AA8]
[G] c:\windows\system32\winspool.drv [PX5: 3F00B5AD002731653E3C025309A753002ACE34E8]
[G] c:\windows\system32\dla\dladresn.sys [PX5: 6630E183C0C24817091200192F703E00B79BCD14]
[G] c:\windows\system32\dla\dlaifs_m.sys [PX5: F594C1617C9839A0523201DDA896F700372D36A1]
[G] c:\windows\system32\dla\dlaopiom.sys [PX5: DCC500875C986CB73983008CB5938000FAD82EEA]
[G] c:\windows\system32\dla\dlapoolm.sys [PX5: 9F9D02B6DC9475B9185500BDAAEFC200A1E6FE88]
[G] c:\windows\system32\ibmpmsvc.exe [PX5: 4DDA8CD6363371A02030018C22C6DB006AD63595]
[G] c:\windows\system32\dla\dlaboiom.sys [PX5: 36278F811C96C41464F00050722AC700CF9968E0]
[G] c:\windows\system32\dla\dlaudfam.sys [PX5: 3947A74B7C6FEADB700E01E6A4DD8F007A2C9ADF]
[G] c:\windows\system32\dla\dlaudf_m.sys [PX5: 9105CA61FCCDC7CD53010138678FCD00B0EDD443]
[G] c:\windows\system32\svchost.exe [PX5: 8BCD8342005527D0384D00B1B67183008C6ED59A]
[G] c:\windows\system32\rpcss.dll [PX5: 497A601F00503EBB18FB06D1E181DD00D5B6CA5A]
[G] c:\windows\system32\drivers\aegisp.sys [PX5: 07386CF0AB284C0E53B300F223CB46008C82410D]
[G] c:\windows\system32\drivers\irda.sys [PX5: 6E9CFA0F80CAB40C582701B8BD9C2A00A3251492]
[G] c:\windows\system32\drivers\netbt.sys [PX5: 10240F6500B6E3837C9E02C94F390000DA1650D3]
[G] c:\windows\system32\drivers\s24trans.sys [PX5: F64A1ED500D2BA703174002164AD5A001B6916DC]
[G] c:\programmi\intel\wireless\bin\evteng.exe [PX5: B4ED013A004F1A98A08106544008CA00F16FA80C]
[G] c:\windows\resources\themes\luna\luna.msstyles [PX5: E4CCC02190544BDDF0653FFB772E820099381570]
[G] c:\programmi\intel\wireless\bin\s24evmon.exe [PX5: 6CD606F900BAA67150990EA6A2A098004ABB23F1]
[G] c:\windows\system32\drivers\ndisuio.sys [PX5: 2EA05445002F5FBA39F20007FCC82A00618DCF3E]
[G] c:\windows\system32\dhcpcsvc.dll [PX5: E7F12C7D0071C261F0F501D644C43A00D9227B6C]
[G] c:\windows\system32\dnsrslvr.dll [PX5: 434AC1060073225CB2C700DEBBD51700380C5DC9]
[G] c:\windows\system32\lmhsvc.dll [PX5: 2BB0C08000D2B835363F0073007278005291BFB2]
[G] c:\windows\system32\termsrv.dll [PX5: A8DEA925009D35E588FB049F5DB7E600253D37EB]
[G] c:\windows\system32\wzcsvc.dll [PX5: 06825795002DAAAF623407425B91DD0050D8C8E5]
[G] c:\windows\system32\irmon.dll [PX5: CFB0207200C35997745A00176AC4E100E6315853]
[G] c:\windows\system32\mswsock.dll [PX5: AC74B86E009C7B5EC64F030145DC7500E2D50B37]
[G] c:\windows\system32\wshirda.dll [PX5: 52EDA683008D07A62013003B3C2E070029FB1005]
[G] c:\windows\system32\rastls.dll [PX5: 6DFABB1600B02B604CBB02646517D9009475F43E]
[G] c:\windows\system32\raschap.dll [PX5: 06AE071600B5078F38B4017E09C4C500826A3408]
[G] c:\windows\system32\schedsvc.dll [PX5: 82BEDC11009EA1EBF8E702F14D895100535186DD]
[G] c:\windows\system32\spoolsv.exe [PX5: 1520C98400AFB573E240000320EF83008CEE3983]
[G] c:\windows\system32\audiosrv.dll [PX5: 2ADC693F000122A1A6A80046049AA900396CFCE8]
[G] c:\programmi\avira\antivir personaledition classic\sched.exe [PX5: AB8ED87E010A3A5B0DE20105AC451D004FD09A13]
[G] c:\windows\system32\wkssvc.dll [PX5: C9523DD5000A8629045E02F45C185400924460FB]
[G] c:\windows\system32\webclnt.dll [PX5: 1B7FF047002E91B00A8201DD633D08007B75799E]
[G] c:\windows\system32\drivers\dbgmsg.sys [PX5: CEAE4DE4404A349C475600A31DBC8B00AC475337]
[G] c:\windows\system32\drivers\procdd.sys [PX5: 44CDE92900F8B1BB140D00DF3363F6008F30FB74]
[G] c:\windows\system32\ipssvc.exe [PX5: 67CD0EB300190931206B01295F6293004DB86EF6]
[G] c:\programmi\thinkpad\connectutilities\acprfmgrsvc.exe [PX5: 9A4BFABB00E91EB7C0360023E8623C00E93E80E0]
[G] c:\programmi\avira\antivir personaledition classic\avguard.exe [PX5: 87A4DC6F010FA0CB4FDB02E2FA80BA00336555A0]
[G] c:\programmi\thinkpad\bluetooth software\bin\btwdins.exe [PX5: 1865A9403700DA041055040FBB53E000FEC31A0F]
[G] c:\programmi\diskeeper corporation\diskeeper\dkservice.exe [PX5: D53437F56CFBC44A80D6095B4BCC250075894C24]
[G] c:\windows\system32\cryptsvc.dll [PX5: 6BBD8BDD00C862BDF455008851C14F00CA5896ED]
[G] c:\windows\system32\egathdrv.sys [PX5: D5CFFD2A33C76776155A0003E11A5800BA00F0AF]
[G] c:\windows\system32\dmserver.dll [PX5: 0DBE740100A9EF1F5E7A00F612FB860038049F6A]
[G] c:\windows\system32\drivers\http.sys [PX5: EA3626FB80ABE84E0A0C04584B61880071DF8746]
[G] c:\windows\system32\ersvc.dll [PX5: 916D9D08006257925A3B005E227B8B0077B79450]
[G] c:\windows\pchealth\helpctr\binaries\pchsvc.dll [PX5: B3E753E500B66075961900686E029E00CA5FB11D]
[G] c:\windows\system32\es.dll [PX5: 1F07CD8E00350363E0BD03C156BEB100ABEDC314]
[G] c:\windows\system32\w3ssl.dll [PX5: 1B47620A0063B9CA3E7600F37C712E008C357215]
[G] c:\programmi\java\jre6\bin\jqs.exe [PX5: AC88018398630B1955DE0269EA21F200F904B269]
[G] c:\windows\system32\srvsvc.dll [PX5: A03044B2003569CA7AD801B4B96A0D00FF416F2C]
[G] c:\programmi\file comuni\microsoft shared\vs7debug\mdm.exe [PX5: 2E5BA9D3480CBAE9EA2A04C9F6D7FB00F945EC88]
[G] c:\windows\system32\wshtcpip.dll [PX5: 0E8392C2007FA0864C7A00B083F227002983472A]
[G] c:\windows\system32\drivers\mdmxsdk.sys [PX5: 508718DA00F4230831A1005444D92900F3A75FB9]
[G] c:\windows\system32\netman.dll [PX5: 9F9F5033001B10AF065B03F37169A6000407564D]
[G] c:\windows\system32\drivers\pmemnt.sys [PX5: 76AB7E4A64A4703B1B6A003B74AD0500954DCEAA]
[G] c:\programmi\lenovo\safeguard privatedisk\privatediskm.sys [PX5: 93EC1E4800D7DD2CE4CD005CD0B9A000D39EFEA1]
[G] c:\programmi\intel\wireless\bin\regsrvc.exe [PX5: 99A8F3E600E14E93009F05D5DA52C6007B69C669]
[G] c:\windows\system32\regsvc.dll [PX5: FEED09AF0006E648EA530010BC0F88001EF96CA4]
[G] c:\windows\system32\seclogon.dll [PX5: 1BBD6F6F006032A84A84008952AB3A0072C5649C]
[G] c:\programmi\smi2\smi2.sys [PX5: 497F4B598075321D0FC5007B4513A100B79BCD14]
[G] c:\windows\system32\sens.dll [PX5: DA76E1FC00DE985D9A8800DB33C47B000274EA9B]
[G] c:\programmi\lenovo\system update\suservice.exe [PX5: 668CD98C003CBFAB34150014A6646C00FCBDD280]
[G] c:\windows\system32\srsvc.dll [PX5: 5ABB48E80027248E9E3402F4E6245D009ED5E6DA]
[G] c:\windows\system32\ssdpsrv.dll [PX5: D868E9A90017D36C181301493D0E60009216186A]
[G] c:\windows\system32\netfxperf.dll [PX5: 1A2876B000187B0F80C400FED64B1900FAFC4C7F]
[G] c:\programmi\avira\antivir personaledition classic\avgntflt.sys [PX5: A02427CF4057DAD3CB63006855908300C0855B24]
[G] c:\programmi\file comuni\lenovo\tvt_reg_monitor_svc.exe [PX5: 73CE38B2006DD1099BFA095E49652F0040D11EEA]
[G] c:\windows\system32\tpkmpsvc.exe [PX5: 0979D06A0002F0A98087007D68B9B30039CF6E3B]
[G] c:\windows\system32\trkwks.dll [PX5: A6C6B637009719D760420196005E00009AA5147B]
[G] c:\programmi\lenovo\rescue and recovery\rrservice.exe [PX5: A78B513D00F8A45B20581EC866237E00FF30FC54]
[G] c:\windows\system32\cryptnet.dll [PX5: C04B486400BF6809FCE9004F9A8F1B00D617746C]
[G] c:\windows\system32\cscdll.dll [PX5: 2767F10000928D21901A017F5A449B0088DACDC8]
[G] c:\windows\system32\dimsntfy.dll [PX5: 2470B378001C91CB4C03008EE7068F0000438978]
[G] c:\windows\system32\wlnotify.dll [PX5: 232FA25900E9B57A6CDA01AE6033C900DCE4D272]
[G] c:\windows\system32\wgalogon.dll [PX5: F67BBC0828AD960C14A7041F7DAE5D0094367C4B]
[G] c:\windows\microsoft.net\framework\v2.0.50727\aspnet_perf.dll [PX5: D02390E008FB20CA826900411A055A001971C16C]
[G] c:\windows\system32\drivers\tvtfilter.sys [PX5: AAC0D182000FA755311C00F7A28609004A00996A]
[G] c:\programmi\lenovo\rescue and recovery\adm\iuservice.exe [PX5: 769F318F0035591CB0BC007D765F1700FB95F678]
[G] c:\programmi\file comuni\lenovo\scheduler\tvtsched.exe [PX5: ADD918AA00F7B37F309E1180CDF6CC00554B12F9]
[G] c:\windows\system32\wuauserv.dll [PX5: C647219E009F69E51A2F00AA1DD8A100C84786DA]
[G] c:\windows\microsoft.net\framework\v1.1.4322\aspnet_isapi.dll [PX5: 68F54D71008E0F61F0FF0363D9DC6C000D0BDC3D]
[G] c:\windows\system32\wbem\wmisvc.dll [PX5: F036779C00A1BB8438D102F0FC341800DEEE4E44]
[G] c:\programmi\thinkpad\connectutilities\acsvc.exe [PX5: A36B514100945A8190AD022FB930AF00BAA5FC81]
[G] c:\windows\system32\browser.dll [PX5: 07D9B993003324FF30C601BBE56DAF00DD3C8573]
[G] c:\windows\system32\ipnathlp.dll [PX5: 35D99049004785F9121705BB5432EA00EDDBC8A1]
[G] c:\windows\system32\wscsvc.dll [PX5: 4F59397900A4CE923C41010C4180A300CE5CD134]
[G] c:\windows\system32\perfdisk.dll [PX5: B721040900B9D8F96A890007305EA3004E0F7E98]
[G] c:\windows\system32\query.dll [PX5: 4886929900EB19B2F6C6150614460F00D0235086]
[G] c:\windows\system32\perfnet.dll [PX5: C9B315E100E3507F489A00EDC098DA007B949765]
[G] c:\windows\system32\perfos.dll [PX5: 84F88C1C0072BC30684A004D4A6D9D00D2086876]
[G] c:\windows\system32\pschdprf.dll [PX5: 97EFC9380023303D2A47003B039D1D00DDDB7BB0]
[G] c:\windows\system32\rasctrs.dll [PX5: 7739120B00CC7ADA3009003B3C2E07005FC958D7]
[G] c:\windows\system32\rsvpperf.dll [PX5: 69F59F8D00EFCBBC26D2003B3C2E0700359D8A51]
[G] c:\windows\system32\tapiperf.dll [PX5: 7C742326004C5B9F168200ECB51F3C00E66DDA71]
[G] c:\windows\system32\perfctrs.dll [PX5: 7431C08900C67791A04700BCA1F8A6005BDA7EE8]
[G] c:\windows\system32\perfts.dll [PX5: 153910E100E1BEF730B0004AEAD2430037D7E003]
[G] c:\windows\system32\wbem\wmiaprpl.dll [PX5: 5AC61C1E006E8C935ABB014CCDD99D0093AF5D78]
[G] c:\windows\system32\wbem\wmiapsrv.exe [PX5: F0811A6000996F52EED70198F51E95008DAE8A1B]
[G] c:\windows\system32\tapisrv.dll [PX5: FE7A89CE007F2EFBD08A035428B198005899695E]
[G] c:\windows\system32\alg.exe [PX5: 11685EE000A84BB2AEC2005EDE65FA003292E932]
[G] c:\windows\system32\rasmans.dll [PX5: E6519DB700C4CA47D81F021838A8E9003E9D48C4]
[G] c:\windows\system32\rasppp.dll [PX5: 443808BF00F2CF7C3885035FDFBC4F008C596DBB]
[G] c:\programmi\java\jre6\bin\regutils.dll [PX5: FD4DB1430097A5A600AA0486B1735E001B1E0468]
[G] c:\windows\system32\cscui.dll [PX5: B9B40B530054D6DF1AE505FB897263000F4665F1]
[G] c:\windows\system32\drivers\wdmaud.sys [PX5: E126BB778045B8DA444001D16C1BB100FFD9144B]
[G] c:\windows\system32\drivers\sysaudio.sys [PX5: 2926AFDF803A44F7ED6500393AED6500DE71464F]
[G] c:\windows\system32\drivers\splitter.sys [PX5: 249A00638095166C184E008C6AC358001B15C957]
[G] c:\windows\system32\drivers\aec.sys [PX5: E884BE24008C5EEB2D92028B46462900B520927C]
[G] c:\programmi\lenovo\awaytask\awaynotify.dll [PX5: A7364245007D007EC027002598C9930024F4FAAC]
[G] c:\windows\system32\drivers\swmidi.sys [PX5: 2892580B00DCE1F2DD42008A125D7D002F2F9BB3]
[G] c:\windows\system32\drivers\dmusic.sys [PX5: 64B493018066E6FACEE6008D21636D0042F7754A]
[G] c:\windows\system32\drivers\kmixer.sys [PX5: 1C3250A68067C4B7A11302D8512D9900630738EA]
[G] c:\windows\system32\ogaverify.exe [PX5: 25BDBD3E68D68325114908508A2D8400FD712FEF]
[G] c:\windows\system32\drivers\drmkaud.sys [PX5: E77F06BC803B27C80BA600EB22B53D00B79BCD14]
[G] c:\windows\system32\userinit.exe [PX5: 1721439800B667846885004BBE2CC400616D6CE8]
[G] c:\programmi\lenovo\client security solution\cssauth.exe [PX5: E22B534F003BDC81BB73233A1ECD1E00D77A260C]
[G] c:\windows\explorer.exe [PX5: F9129005002B8BEED0F00FDC583A4200C8715D4C]
[G] c:\programmi\microsoft office\office10\msohev.dll [PX5: 131D104EA043137C350C01DA7538A900EA1A19DB]
[G] c:\windows\system32\mydocs.dll [PX5: F843A7AA00FE6D8764D20180D1DB9B0091287905]
[G] c:\windows\system32\imapi.exe [PX5: A27DFE9300347E794C9A0292036390002DD7D5EA]
[G] c:\programmi\diskeeper corporation\diskeeper\dkicon.exe [PX5: B056CC605830766800BB03DF876AD300FECAE681]
[G] c:\programmi\file comuni\lenovo\scheduler\scheduler_proxy.exe [PX5: 4A6BC4950079EC9F405C086CB96EB800CB771F20]
[G] c:\programmi\internet explorer\iexplore.exe [PX5: D0519300A8C3C667AC930990A6A5100012E5A659]
[G] c:\windows\system32\tp4serv.exe [PX5: 120D695200E43BA170D2010B9F100A0007EEEB09]
[G] c:\windows\system32\btncopy.dll [PX5: 82001E2600653562003C0186C77F17003D00DC36]
[G] c:\programmi\thinkpad\utilities\tpkmapap.exe [PX5: 73F376F900E0ABC610A60D5DA2ECBB00A9F05DF8]
[G] c:\programmi\lenovo\pkgmgr\hotkey\tphkmgr.exe [PX5: 41ED376F00D4338B70880122EE7477005CCDAF0E]
[G] c:\windows\system32\tp4ex.exe [PX5: 4221BD1900BE9E0D002C0111AF2A6500F2E2F173]
[G] c:\programmi\thinkpad\connectutilities\actray.exe [PX5: 4943C99B001970C240EB06A6249E7400D213FECC]
[G] c:\programmi\thinkpad\connectutilities\acwlicon.exe [PX5: E9D2BD6E00EAFC03B08401E76A2A8B0010AF5CAA]
[GP] c:\programmi\adobe\acrobat 7.0\reader\adobeupdatemanager.exe [PX5: B3BA1B1980C37A9AC8B904D89146B500731777D3]
[G] c:\programmi\thinkvantage\amsg\amsg.exe [PX5: 87D4F3E7003492257087078A35ADCF00FA0B0BDF]
[G] c:\programmi\avira\antivir personaledition classic\avgnt.exe [PX5: DC10F4170184C6E01118048C340EAC0079BC33AB]
[G] c:\programmi\lenovo\awaytask\awaysch.exe [PX5: 6BB84CEC00C5CC04107A016B6189CF0016FC964A]
[G] c:\windows\system32\rundll32.exe [PX5: 56D1F55C00BCA32982A2003396ABA600D2F1EA49]
[G] c:\windows\system32\firewall.cpl [PX5: 0A9D899900CC72BA3CFF01647BA824002CCDC09C]
[G] c:\windows\system32\ctfmon.exe [PX5: 54B9FA7600E5509F3C0D00C310E23300B1A739DF]
[G] c:\programmi\java\jre6\bin\jusched.exe [PX5: 5E4E6F6B98EFDFA115F102E6A8B0A600A53A3ED0]
[G] c:\programmi\ccleaner\ccleaner.exe [PX5: 1DE865C3F09458FD743215A5AEB5A800B37B2D4B]
[G] c:\programmi\analog devices\core\smax4pnp.exe [PX5: 396FA48A00D48EAE205C0E29B696F0000CDD2473]
[G] c:\windows\system32\igfxdev.dll [PX5: F9FDAB3600D3D3D5208802635E1D2700BB7114E6]
[G] c:\programmi\lenovo\safeguard privatedisk\pdservice.exe [PX5: 393C367E00655CC5A25B0055FFD76A006D50C4AE]
[G] c:\programmi\thinkvantage\prdctr\lpmgr.exe [PX5: 626BEF2E0086C807B0FB017A07CAFE003BE02939]
[T] c:\programmi\file comuni\installshield\updateservice\issch.exe [PX5: 24903BA800784A3F404E01944C9E350051FF236B]
[T] c:\programmi\file comuni\installshield\updateservice\isuspm.exe [PX5: F1BA7AC4004CA6EF603103A813097600C25381E8]
[G] c:\windows\system32\igfxtray.exe [PX5: 5DAF8D8100646119702801213DDAB8004DD977FF]
[G] c:\programmi\thinkpad\utilities\pwrmgrtr.dll [PX5: 6F86CFDE00062387507E02B089E6C500845F6AE5]
[G] c:\windows\system32\igfxpers.exe [PX5: 9545E7B500A7D7B4D05301CF5B218E0098E6F34D]
[G] c:\windows\system32\hkcmd.exe [PX5: 5C1188B20075DD4C305B01E3F8E04D00C426A036]
[G] c:\programmi\thinkpad\utilities\ezejmnap.exe [PX5: 0DF463FC00657059A08B03FA2090310098D4B303]
[G] c:\windows\system32\dla\dlactrlw.exe [PX5: 5138295C3C78848AE07F01A28ED34F00C3BB93B0]
[G] c:\windows\system32\drwtsn32.exe [PX5: 38A6F8C4002B6CDFB6AF005912C347007AB08727]
[G] c:\programmi\lenovo\client security solution\tvtpwm_ie_com.dll [PX5: CF895AFB00DD6313FBED0AB4B4200C00C314FCDC]
[G] c:\windows\system32\dla\dlashx_w.dll [PX5: 164C70AA3C85A256B0B3017E9230F30031BEB9EC]
[G] c:\programmi\java\jre6\bin\ssv.dll [PX5: F4477A109852F5E8E55F0492B87A5900CD4970E7]
[G] c:\programmi\java\jre6\bin\jp2ssv.dll [PX5: 3B34065200523E81884C006580EBFF00982B5D34]
[G] c:\programmi\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [PX5: 51B5E68F007E2D29200C01FA89A25F0073BC74B0]
[G] c:\windows\system32\drivers\abp480n5.sys [PX5: C1BD84230067F4EA5CEF003B6C801800F0A16602]
[G] c:\windows\system32\drivers\ac97intc.sys [PX5: 77465E23002EA7D5781E013110908000B18BA383]
[G] c:\windows\system32\drivers\adpu160m.sys [PX5: A646098B00C8A7478EF4012AC693E40053E6B855]
[G] c:\windows\system32\drivers\agp440.sys [PX5: 92796BB0806349F8A56F00F55D76CD005A64789A]
[G] c:\windows\system32\drivers\agpcpq.sys [PX5: 3C2A452B80CBBE67AF240060110ED70068FEC41D]
[G] c:\windows\system32\drivers\aha154x.sys [PX5: B5CCD41400024B8C3232007262F16400589648E4]
[G] c:\windows\system32\drivers\aic78u2.sys [PX5: 841F37AC80EF3F36D7BD000A10720200E4552005]
[G] c:\windows\system32\drivers\aic78xx.sys [PX5: 645E88DA8053B973DE9500E552F9DF00FDCB4867]
[G] c:\windows\system32\drivers\aliide.sys [PX5: BC6DDD5E808533E01498005CD48AF0000F761377]
[G] c:\windows\system32\drivers\alim1541.sys [PX5: 9F57E1E200726D99A7A3005976AF0500D3B95DEC]
[G] c:\windows\system32\drivers\amdagp.sys [PX5: E6EB08360057179FA86C00430CC301004CB71E2C]
[G] c:\windows\system32\drivers\amsint.sys [PX5: 983BFBAD005D94832FCE00E56154ED006EF2904F]
[G] c:\windows\system32\drivers\asc.sys [PX5: 57B586F580FE82A86794006034353E00FFEDC97A]
[G] c:\windows\system32\drivers\asc3350p.sys [PX5: AD3D9E1A803A53B9579300764BBA6D0023C757B9]
[G] c:\windows\system32\drivers\asc3550.sys [PX5: F329E1C6001CB2953AAF005BD8D557009377D482]
[G] c:\windows\system32\drivers\asyncmac.sys [PX5: 8BD45D2B002F3B40389D007E91CC5900FB93CEA1]
[G] c:\windows\system32\drivers\atmarpc.sys [PX5: C41A09F600246E0AEA81009B2DE4BF0010DB722C]
[G] c:\windows\system32\extmgr.dll [PX5: 68F94C9900F763A908F202C19CF9B000065172AB]
[G] c:\windows\system32\netsetup.cpl [PX5: F011C52100CA6EDF648A005BDB5B30005EFF9F1C]
[G] c:\windows\system32\wuaucpl.cpl.mui [PX5: 7FEF594F18EC485C6C2B00CD680CF3009C376044]
[G] c:\programmi\avira\antivir personaledition classic\avconfig.cpl [PX5: AAC5407401E9E37C11A001E93710970046DA2E33]
[G] c:\programmi\malwarebytes' anti-malware\mbam.exe [PX5: B7EB0A7910AC20CD956513C21CCFAC000888A24D]
[G] c:\windows\system32\mmc.exe [PX5: 944A367E007E2587982715CD595BC9009DFAE407]
[G] c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe [PX5: 700BB9B808038308846600EF74731100EEABDE2B]
[G] c:\windows\system32\cisvc.exe [PX5: 657A263A0003F85B1619004596EDB60095279A18]
[G] c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe [PX5: 6EFAD9B8005FFA1B128A0113E3634300FEFA54C7]
[G] c:\windows\system32\dllhost.exe [PX5: 05F9C63F00FB4D96142100811EF22800B4C083BD]
[G] c:\windows\system32\dmadmin.exe [PX5: 4DC63900005F631F703403FC17FDD1007BD300B3]
[G] c:\windows\system32\mnmsrvc.exe [PX5: FE1629F900D71BFC80AE005F190EAC009B77D626]
[G] c:\windows\system32\msdtc.exe [PX5: C4F7E9D800504622187B006A47ED3800B58BD582]
[G] c:\windows\system32\msiexec.exe [PX5: 247FE8950024726334560107FE07E9000FF64EAD]
[G] c:\windows\system32\sessmgr.exe [PX5: 4E2EE8040018B69A2C4A02603F6C7D00FFFBD083]
[G] c:\windows\system32\locator.exe [PX5: 71FDA11B00F74D3F26E60100761A4300042C0DD3]
[G] c:\windows\system32\rsvp.exe [PX5: 2057508700E163D906880231F30F2D00E5519440]
[G] c:\windows\system32\scardsvr.exe [PX5: D9CC6C2F002A2A517E4701B248357200613D60BD]
[G] c:\windows\system32\smlogsvc.exe [PX5: 5E57BF4E000D24826AC601BE77827C00266F318A]
[G] c:\windows\system32\ups.exe [PX5: E1E2C154000750CB4840003FB8388C0036EC748F]
[G] c:\windows\system32\vssvc.exe [PX5: C880CF090063B2507C510467CE785000EEAA4265]
[G] c:\windows\system32\mspaint.exe [PX5: E2C5468C00DE6E43484605477AA95800CBF4337E]
[G] c:\windows\system32\wiaservc.dll [PX5: EF0A69C700291B781A31058FF9F2BF00EFCE182E]
[G] c:\windows\system32\notepad.exe [PX5: FA18F51F0094FF11128201400A0F9A007F3BF690]
[G] c:\programmi\microsoft office\office10\osa.exe [PX5: 8210284EA0B722E4453301D7A215060004970604]
[G] c:\programmi\messenger\msmsgs.exe [PX5: 6404CD3400467CB2DEE5194C868B04006EE5C516]
[G] c:\windows\regedit.exe [PX5: C36D02E400D84AF85017024643E27600C92D33AF]
[G] c:\programmi\eraser\eraser.exe [PX5: 34F852D200CC8E3E307608BC698FFF007F1967B3]
[G] c:\programmi\windows media player\wmplayer.exe [PX5: 3F8CE510004F3C32FA0B00EFD191E5008BFCADF7]
[G] c:\windows\system32\zipfldr.dll [PX5: BF489D8F00DC10342E3B05F277D48C00FAD65B01]
[G] c:\windows\winhlp32.exe [PX5: 784815C600BE270F60D404F5E0AC1700FE934834]
[G] c:\programmi\windows media player\wmpnscfg.exe [PX5: 8A4D2751006034561EAE031E857CF50086864E78]
[G] c:\windows\system32\mucltui.dll.mui [PX5: 9A6FCD686873DCD86BA100FA3A732C00745762C1]
[G] c:\programmi\windows media player\wmpnetwk.exe [PX5: AF2881470070FC5204AF0EFACB168500F7ECD6E8]
[GP] c:\wwdc.exe [PX5: 86671D2020ACB085C889009E9F1A8100FD3FAFEF]
[GP] c:\programmi\prevxcsifree_it.exe [PX5: D55B27DB3800C1CA24DA0CC9F198DF007498C6A2]
[G] c:\documents and settings\mionome\impostazioni locali\temp\pxinstall500.exe [PX5: 0418016438820A3D308843C335276F009ED2440C]


End of Prevx Scan Log - http://www.prevx.com
Torna in alto
 
r16
Inviato: Thursday, June 11, 2009 12:23:07 AM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Non era questo che volevo, ma la colpa è mia.Brick wall
Volevo chiederti di postarmi i file infetti che ti segnalava Prevx.
In quel log non ci sono file infetti.
Comunque esegui le indicazioni che ho postato sopra.
Torna in alto
 
spcicato
Inviato: Friday, June 12, 2009 7:29:23 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Ciao r16 ho eliminato alcune chiavi, non tutte perchè il pc me lo hanno prestato, e la memoria sembra migliorata. Il problema che persiste riguarda lo schermo e le icone.
Mi spiego meglio. Quando torno indietro da una cartella per es. doc and sett., C, al rientro nel desktop le icone sono per qualche secondo bianche e lo schermo ha un piccolo sobbalzo.
Poi nella barra delle applicazioni a destra, quando clicco sulla freccia, sparisce come se si spezzasse l' indicatore della batteria e al suo posto appare una riga bianca.Sick
Ti ringazio ancora
Torna in alto
 
r16
Inviato: Saturday, June 13, 2009 12:06:44 AM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
Prova ad aggiornare i driver della scheda video.
Torna in alto
 
spcicato
Inviato: Saturday, June 13, 2009 4:37:07 PM
Rank: Newbie

Iscritto dal : 6/7/2009
Posts: 9
Io ho una scheda Intel. Ho letto sui motori di ricerca che per un portatile è meglio aggiornare direttamente dal sito del produttore. Nel mio caso Lenovo. Risponde a verità o devo aggiornare con windows?
Torna in alto
 
r16
Inviato: Saturday, June 13, 2009 5:46:06 PM
Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016
Ciao.
A dire la verità, non ho mai sentito che la Intel costruisca schede video.
Comunque a mio parere aggiorna i drivers direttamente dal sito del produttore.(della scheda video)
In questo forum esiste una sezione "Drivers" posta il quesito .
Di sicuro ti risponderanno meglio di me.
Torna in alto
 
Utenti presenti in questo topic
Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Portatile attaccato da rootkit e trojan insieme


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.