Pc Lento Sia Con I Programmi Che Con La Connessione [Risolto]

francocamoli · January 28, 2013

Salve a tutto lo staff.

Scrivo perché da alcuni giorni ho due problemi col pc fisso.

Da premettere, per capire meglio i miei problemi, che il pc è un assemblato CDC a cui, dato che si era bruciata la scheda madre, ho fatto sostituire nel mese di giugno l’hard disk(cambiato perché il tecnico non trovava una scheda madre compatibile), scheda madre, scheda video, ram aumentata, quindi l’ho anche potenziato, sempre nei limiti del budget.

Il tecnico in poche parole mi ha lasciato il vecchio hard disk(due partizioni) con tutti i vecchi files (non formattato tanto fa funzione da hard disk esterno) ed il nuovo di 500 GIGA in due partizioni.

Ho reinstallato tutti i programmi che mi servivano, ecc., i driver aggiornati ed il modem (D-LINK DSL G624T), al quale sono collegati in wireless anche altri due pc notebook.

Giorni fa, per installare un programma dal web, ho commesso forse qualche errore ed ho effettuato il ripristino di sistema, ma al ripristino non mi funzionava un altro programma, quindi sono ritornato al punto precedente, ma, da quel momento in poi, all’accensione del pc, la barra delle applicazioni prima compare, poi scompare ed al suo preciso posto rimane una macchia nera per circa 90 secondi, poi ricompare di nuovo e va tutto bene.

Ho notato però che la connessione internet andava a singhiozzi (cavo di rete scollegato) e la velocità era a 10 e non a 100 Mbps; per un paio di giorni mi sono connesso (ed anche gli altri pc) con un altro modem prestatomi da un amico ed andava tutto bene (velocità indicata 100 Mbps), poi quando ho rimesso il mio è ritornato tutto come prima ed addirittura non riuscivo ad entrare nella pagina di configurazione. Dopo vari tentativi, sono riuscito ad aggiornare il firmware del modem che va un pò meglio, ma sempre a 10 Mbps.

In definitiva ad oggi si connette ad internet (non segna più cavo scollegato), ma lentissimo a caricare le pagine ed addirittura si imballa anche con i programmi; combofix e Hijacktis li ho scaricati da un altro pc e poi li ho passati con la chiavetta. All’accensione ed alla chiusura non ho problemi, tranne per il discorso della barra applicazioni. Allego file con le informazioni sul pc e sistema operativo, il log di combofix e quello di Hijacktis sperando che mi possiate dare qualche informazione; grazie Francesco

hijackthis.log

ComboFix.txt

SISTEMA.docx

francocamoli · January 31, 2013

Salve a tutto lo staff.

Scrivo perché da alcuni giorni ho due problemi col pc fisso.

Da premettere, per capire meglio i miei problemi, che il pc è un assemblato CDC a cui, dato che si era bruciata la scheda madre, ho fatto sostituire nel mese di giugno l’hard disk(cambiato perché il tecnico non trovava una scheda madre compatibile), scheda madre, scheda video, ram aumentata, quindi l’ho anche potenziato, sempre nei limiti del budget.

Il tecnico in poche parole mi ha lasciato il vecchio hard disk(due partizioni) con tutti i vecchi files (non formattato tanto fa funzione da hard disk esterno) ed il nuovo di 500 GIGA in due partizioni.

Ho reinstallato tutti i programmi che mi servivano, ecc., i driver aggiornati ed il modem (D-LINK DSL G624T), al quale sono collegati in wireless anche altri due pc notebook.

Giorni fa, per installare un programma dal web, ho commesso forse qualche errore ed ho effettuato il ripristino di sistema, ma al ripristino non mi funzionava un altro programma, quindi sono ritornato al punto precedente, ma, da quel momento in poi, all’accensione del pc, la barra delle applicazioni prima compare, poi scompare ed al suo preciso posto rimane una macchia nera per circa 90 secondi, poi ricompare di nuovo e va tutto bene.

Ho notato però che la connessione internet andava a singhiozzi (cavo di rete scollegato) e la velocità era a 10 e non a 100 Mbps; per un paio di giorni mi sono connesso (ed anche gli altri pc) con un altro modem prestatomi da un amico ed andava tutto bene (velocità indicata 100 Mbps), poi quando ho rimesso il mio è ritornato tutto come prima ed addirittura non riuscivo ad entrare nella pagina di configurazione. Dopo vari tentativi, sono riuscito ad aggiornare il firmware del modem che va un pò meglio, ma sempre a 10 Mbps.

In definitiva ad oggi si connette ad internet (non segna più cavo scollegato), ma lentissimo a caricare le pagine ed addirittura si imballa anche con i programmi; combofix e Hijacktis li ho scaricati da un altro pc e poi li ho passati con la chiavetta. All’accensione ed alla chiusura non ho problemi, tranne per il discorso della barra applicazioni. Allego file con le informazioni sul pc e sistema operativo, il log di combofix e quello di Hijacktis sperando che mi possiate dare qualche informazione; grazie Francesco

Non mi risponde nessuno ?, aspetto ancora notizie, grazie.

francocamoli · January 31, 2013

Non mi risponde nessuno ??, sto ancora aspettando notizie, grazie.

francocamoli · February 12, 2013

Grazie delle risposte che mi avete fornito, Francesco

Mr 4011 · February 12, 2013

Ciao francocamoli

Devo domandarti scusa se non ho visto il tuo post

Fammi sapere se ancora necessiti di aiuto, :anna: :ciao:

francocamoli · February 13, 2013

Si, ancora ho problemi, specialmente con la connessione; il pc si imballa sia su internet che sui programmi (non sempre), mi segnala la connessione a 10 Mbps e la barra delle applicazioni all'inizio sparisce sempre per circa 90 sec e poi riappare.

Riallego file recenti con le informazioni sul pc e sistema operativo, il log di combofix e quello di Hijacktis; grazie Francesco.

SISTEMA.txt

ComboFix.txt

hijackthis.log

Mr 4011 · February 13, 2013

Ok!! Andiamo

Purtroppo, non ricordo di averti chiesto qualche tool, Mah!!

OTL by Oldtimer

Scarica OTL sul desktop.
Fare doppio clic sull'icona per eseguirlo. Assicurarsi che tutte le finestre siano chiuse per farlo funzionare senza interruzioni.
Quando appare la schermata, portarsi in alto, sotto la voce Output modificare in minimal output.
Seleziona le caselle accanto a LOP e Purity Check.
Sotto, in Custom Scans/Fixes incolla questo script

netsvcs

%SYSTEMDRIVE%\*.exe

/md5start

explorer.exe

winlogon.exe

Userinit.exe

svchost.exe

services.exe

/md5stop

%systemroot%\*. /rp /s

%systemdrive%\$Recycle.Bin|@;true;true;true /fp

DRIVES

CREATERESTOREPOINT

Fare clic sul pulsante Run Scan. Non modificare le impostazioni se non diversamente detto di farlo. La scansione Durerà un po' di minuti, abbi pazienza.
Al termine della scansione, si apriranno due file di testo. OTL.Txt e Extras.Txt. Questi vengono salvati nella stessa posizione di OTL.
Copia (Edit-> Seleziona tutto, Modifica-> Copia), il contenuto di questi file, uno alla volta, e postali nella risposta successiva.
Potrebbero essere necessari due post per adattarli entrambi.

Scarica aswMBR.exe e salvalo sul tuo desktop.

Doppio click sua swMBR.exe per avviare il tool. (Vista/Windows 7 - click destro, Esegui come amministratore)
Click Scan
Al termine della scansione clicca su Save log salvalo sul tuo desktop, e postalo nella tua prossima risposta.
Attenzione: non eseguire nessun fix.
Noterete anche un altro file creato sul desktop denominatoMBR.dat. Tasto destro del mouse al file e selezionare Invia a> file compresso (zip) . Allega anche il file compresso nella tua prossima risposta .

francocamoli · February 14, 2013

Ho eseguito tutto per come mi è stato chiesto, allego e posto i log.

OTL logfile created on: 14/02/2013 17.43.52 - Run 1

OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Franco\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy

3,25 Gb Total Physical Memory | 2,30 Gb Available Physical Memory | 70,92% Memory free

5,09 Gb Paging File | 4,14 Gb Available in Paging File | 81,37% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi

Drive C: | 319,27 Gb Total Space | 277,33 Gb Free Space | 86,86% Space Free | Partition Type: NTFS

Drive E: | 146,48 Gb Total Space | 140,97 Gb Free Space | 96,23% Space Free | Partition Type: NTFS

Drive F: | 45,23 Gb Total Space | 12,00 Gb Free Space | 26,53% Space Free | Partition Type: NTFS

Drive G: | 107,42 Gb Total Space | 89,77 Gb Free Space | 83,57% Space Free | Partition Type: NTFS

Computer Name: PRIVATO-1595252 | User Name: Franco | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Franco\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Programmi\Java\jre7\bin\jqs.exe (Oracle Corporation)

PRC - C:\Programmi\Google\Chrome\Application\chrome.exe (Google Inc.)

PRC - C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)

PRC - C:\Programmi\COMODO\COMODO Internet Security\cfp.exe (COMODO)

PRC - C:\Programmi\AVAST Software\Avast\AvastUI.exe (AVAST Software)

PRC - C:\Programmi\AVAST Software\Avast\AvastSvc.exe (AVAST Software)

PRC - C:\Programmi\ABBYY FineReader 11\NetworkLicenseServer.exe (ABBYY)

PRC - C:\Programmi\File comuni\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

PRC - C:\WINDOWS\system32\KaraokeSer.exe (VIA Technologies, Inc.)

PRC - C:\Programmi\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)

PRC - C:\Programmi\File comuni\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)

PRC - C:\Programmi\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)

PRC - C:\Programmi\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)

PRC - C:\Programmi\D-Link\DWL-G122_DWA-110\AirGCFG.exe (D-Link Corp.)

PRC - C:\Programmi\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Wireless Service)

PRC - C:\Programmi\GIGABYTE\Common\RaRegistry.exe (Ralink Technology, Corp.)

PRC - C:\WINDOWS\system32\ANIWConnService.exe ()

PRC - C:\Programmi\File comuni\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\Programmi\D-Link\AirPlus G\AirGCFG.exe (D-Link)

PRC - C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe (Nero AG)

PRC - C:\Programmi\TextBridge Pro 9.0\Bin\InstantAccess.exe ()

PRC - C:\Programmi\TextBridge Pro 9.0\Bin\Ereg\Remind32.exe ()

========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\PepperFlash\11.6.602.167\pepflashplayer.dll ()

MOD - C:\Programmi\AVAST Software\Avast\defs\13021400\algo.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\e143370f0583abe015d8e3d2d536185e\System.Web.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\ba12e418b906593b7c9c18f971f36bf9\System.Windows.Forms.ni.dll ()

MOD - C:\WINDOWS\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()

MOD - C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll ()

MOD - C:\Programmi\Google\Chrome\Application\24.0.1312.57\ppgooglenaclpluginchrome.dll ()

MOD - C:\Programmi\Google\Chrome\Application\24.0.1312.57\pdf.dll ()

MOD - C:\Programmi\Google\Chrome\Application\24.0.1312.57\libglesv2.dll ()

MOD - C:\Programmi\Google\Chrome\Application\24.0.1312.57\libegl.dll ()

MOD - C:\Programmi\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\96b7a0136e9e72e8f4eb0230c20766d2\System.Configuration.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Accessibility\cbee94ec6a0fe649e3b4643cea6e1259\Accessibility.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\fe025743210c22bea2f009e1612c38bf\System.Xml.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7782f356a838c403b4a8e9c80df5a577\System.Drawing.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aeac298c43c77d8860db8e7634d9f2eb\System.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\eab2340ead8e1a84bdf1a87868659979\mscorlib.ni.dll ()

MOD - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\PDFShell.ITA ()

MOD - C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll ()

MOD - C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\AxInterop.WBOCXLib.dll ()

MOD - C:\Programmi\DeviceVM\Browser Configuration Utility\sqlite3.dll ()

MOD - C:\WINDOWS\system32\ANIWConnService.exe ()

MOD - C:\WINDOWS\system32\wlanapp.dll ()

MOD - C:\WINDOWS\system32\ANIOApi.dll ()

MOD - C:\Programmi\D-Link\DWL-G122_DWA-110\ANIOApi.dll ()

MOD - C:\WINDOWS\system32\AQCKGen.dll ()

MOD - C:\WINDOWS\system32\msdmo.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\tb99reghigh.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\InstantAccess.exe ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\Tbmhook.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\ExcelAccess.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\WordAccess.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\IAResEng.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\collaborate.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\OfficeAccess.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\MSAppAccess.dll ()

MOD - C:\Programmi\TextBridge Pro 9.0\Bin\Ereg\Remind32.exe ()

========== Services (SafeList) ==========

SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)

SRV - (JavaQuickStarterService) -- C:\Programmi\Java\jre7\bin\jqs.exe (Oracle Corporation)

SRV - (MozillaMaintenance) -- C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)

SRV - (cmdAgent) -- C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)

SRV - (avast! Antivirus) -- C:\Programmi\AVAST Software\Avast\AvastSvc.exe (AVAST Software)

SRV - (FLEXnet Licensing Service) -- C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)

SRV - (ABBYY.Licensing.FineReader.Professional.11.0) -- C:\Programmi\ABBYY FineReader 11\NetworkLicenseServer.exe (ABBYY)

SRV - (Autodesk Content Service) -- C:\Programmi\Autodesk\Content Service\Connect.Service.ContentService.exe (Autodesk, Inc.)

SRV - (ServUpdater) -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe (ServiceUpd)

SRV - (KaraokeService) -- C:\WINDOWS\system32\KaraokeSer.exe (VIA Technologies, Inc.)

SRV - (AODService) -- C:\Programmi\AMD\OverDrive\AODAssist.exe ()

SRV - (osppsvc) -- C:\Programmi\File comuni\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)

SRV - (ose) -- C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)

SRV - (BCUService) -- C:\Programmi\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)

SRV - (ANIWZCSdService) -- C:\Programmi\ANI\ANIWZCS2 Service\ANIWZCSdS.exe (Wireless Service)

SRV - (RalinkRegistryWriter) -- C:\Programmi\GIGABYTE\Common\RaRegistry.exe (Ralink Technology, Corp.)

SRV - (ANIWConnService) -- C:\WINDOWS\system32\ANIWConnService.exe ()

SRV - (ABBYY.Licensing.FineReader.Sprint.9.0) -- C:\Programmi\File comuni\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe (ABBYY)

========== Driver Services (SafeList) ==========

DRV - (WDICA) -- File not found

DRV - (SBRE) -- C:\WINDOWS\system32\drivers\SBREdrv.sys File not found

DRV - (PDRFRAME) -- File not found

DRV - (PDRELI) -- File not found

DRV - (PDFRAME) -- File not found

DRV - (PDCOMP) -- File not found

DRV - (PCIDump) -- File not found

DRV - (MSI_MSIBIOS_010507) -- C:\Programmi\MSI\Live Update 5\msibios32_100507.sys File not found

DRV - (lbrtfdc) -- File not found

DRV - (InCDRm) -- system32\drivers\InCDRm.sys File not found

DRV - (InCDPass) -- system32\drivers\InCDPass.sys File not found

DRV - (InCDFs) -- system32\drivers\InCDFs.sys File not found

DRV - (i2omgmt) -- File not found

DRV - (Changer) -- File not found

DRV - (catchme) -- C:\DOCUME~1\Franco\IMPOST~1\Temp\catchme.sys File not found

DRV - (hitmanpro37) -- C:\WINDOWS\system32\drivers\hitmanpro37.sys ()

DRV - (Inspect) -- C:\WINDOWS\system32\drivers\inspect.sys (COMODO)

DRV - (cmdHlp) -- C:\WINDOWS\system32\drivers\cmdhlp.sys (COMODO)

DRV - (cmdGuard) -- C:\WINDOWS\system32\drivers\cmdGuard.sys (COMODO)

DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)

DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)

DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)

DRV - (AswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)

DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)

DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)

DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)

DRV - (cpuz135) -- C:\Programmi\CPUID\PC Wizard 2012\pcwiz_x32.sys (CPUID)

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (AtiHDAudioService) -- C:\WINDOWS\system32\drivers\AtihdXP3.sys (Advanced Micro Devices)

DRV - (L1c) -- C:\WINDOWS\system32\drivers\l1c51x86.sys (Atheros Communications, Inc.)

DRV - (LPCFilter) -- C:\WINDOWS\system32\drivers\LPCFilter.sys (COMPAL ELECTRONIC INC.)

DRV - (usbfilter) -- C:\WINDOWS\system32\drivers\usbfilter.sys (Advanced Micro Devices)

DRV - (VIAHdAudAddService) -- C:\WINDOWS\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)

DRV - (MxEFUF) -- C:\WINDOWS\system32\drivers\MxEFUF32.sys (Matrox Graphics Inc.)

DRV - (NTIOLib_1_0_4) -- C:\Programmi\MSI\Live Update 5\NTIOLib.sys (MSI)

DRV - (RTHDMIAzAudService) -- C:\WINDOWS\system32\drivers\RtKHDMI.sys (Realtek Semiconductor Corp.)

DRV - (Tcpip6) -- C:\WINDOWS\system32\drivers\tcpip6.sys (Microsoft Corporation)

DRV - (Revoflt) -- C:\WINDOWS\system32\drivers\revoflt.sys (VS Revo Group)

DRV - (RT73) -- C:\WINDOWS\system32\drivers\Dr71WU.sys (Ralink Technology, Corp.)

DRV - (Scutum50) -- C:\WINDOWS\system32\drivers\Scutum50.sys (Printing Communications Assoc., Inc. (PCAUSA))

DRV - (ANIO) -- C:\WINDOWS\system32\ANIO.sys ()

DRV - (irsir) -- C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)

DRV - (cpwnt) -- C:\WINDOWS\System32\drivers\Cpwnt.sys (Micropi Elettronica - Italia)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.chatzum.com/?q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://it.yahoo.com?fr=fp-comodo

IE - HKCU\..\SearchScopes,DefaultScope = {7AD10805-A73A-4661-ACD6-FE1C2F6AFC8D}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC

IE - HKCU\..\SearchScopes\{0D741E73-458B-45ac-AC2F-309287CF2572}: "URL" = http://www.google.com/cse?cx=partner-pub-3794288947762788%3A4067623346&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A4067623346

IE - HKCU\..\SearchScopes\{0F59851B-DE3E-45f1-A4F4-CC315CF57911}: "URL" = http://www.bing.com/search?q={searchTerms}&form=SPLBR2&pc=SPLH

IE - HKCU\..\SearchScopes\{7AD10805-A73A-4661-ACD6-FE1C2F6AFC8D}: "URL" = http://it.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=STDVM

IE - HKCU\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = http://search.chatzum.com/?q={SearchTerms}

IE - HKCU\..\SearchScopes\{B4251155-7D25-4dbe-8868-EA6FF830C8BD}: "URL" = http://search.chatzum.com/?q={searchTerms}

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"

FF - prefs.js..browser.search.param.yahoo-fr: "chrf-comodo"

FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "chrf-comodo"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.search.useDBForOrder: true

FF - prefs.js..browser.startup.homepage: "http://www.google.it/ig?hl=it"'>http://www.google.it/ig?hl=it"

FF - prefs.js..extensions.enabledAddons: %7B20a82645-c095-46ed-80e3-08825760534b%7D:0.0.0

FF - prefs.js..extensions.enabledAddons: wrc%40avast.com:7.0.1474

FF - prefs.js..extensions.enabledAddons: %7B9AA46F4F-4DC7-4c06-97AF-5035170634FE%7D:5.1.1

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2

FF - prefs.js..keyword.URL: "http://it.search.yahoo.com/search?fr=ytff-comodo&p="

FF - prefs.js..network.proxy.type: 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw_1167637.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.13.2: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2: C:\Programmi\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/DownloadManager,version=1.1: C:\WINDOWS\ [2013/02/13 18.09.05 | 000,000,000 | ---D | M]

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programmi\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MI1933~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MI1933~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmi\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmi\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programmi\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Programmi\AVAST Software\Avast\WebRep\FF [2012/11/06 16.21.28 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Programmi\Mozilla Firefox\components [2013/02/07 10.14.13 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Programmi\Mozilla Firefox\plugins

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Programmi\Mozilla Thunderbird\components [2013/01/21 17.40.26 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Programmi\Mozilla Thunderbird\plugins

[2012/07/10 16.44.36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Extensions

[2013/02/07 11.02.46 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions

[2012/09/09 11.23.38 | 000,000,000 | ---D | M] (Foxdie (Graphite)) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions\FoxdieGraphite@tanjihay.com

[2013/02/07 11.02.46 | 000,000,000 | ---D | M] (LavaFox V2) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions\info@djzig.com

[2013/02/01 16.44.29 | 000,224,945 | ---- | M] () (No name found) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions\gophoto@gophoto.it.xpi

[2013/02/02 20.24.51 | 000,111,083 | ---- | M] () (No name found) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi

[2012/07/16 11.55.44 | 001,496,221 | ---- | M] () (No name found) -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\extensions\{ce951a80-a291-11df-981c-0800200c9a66}.xpi

[2012/07/23 11.49.29 | 000,001,867 | ---- | M] () -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\searchplugins\findeer.xml

[2012/07/11 18.06.29 | 000,000,641 | ---- | M] () -- C:\Documents and Settings\Franco\Dati applicazioni\Mozilla\Firefox\Profiles\smcqhl0i.default\searchplugins\search-web.xml

[2013/02/07 10.13.55 | 000,000,000 | ---D | M] (No name found) -- C:\Programmi\Mozilla Firefox\extensions

[2012/11/06 16.21.28 | 000,000,000 | ---D | M] (avast! WebRep) -- C:\PROGRAMMI\AVAST SOFTWARE\AVAST\WEBREP\FF

[2012/07/15 07.28.09 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION

[2013/02/07 10.14.13 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Programmi\mozilla firefox\components\browsercomps.dll

[2012/12/14 19.47.40 | 000,001,606 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\amazon-it.xml

[2012/09/07 10.56.51 | 000,002,465 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\bing.xml

[2012/12/14 19.47.40 | 000,000,957 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\eBay-it.xml

[2012/12/14 19.47.40 | 000,001,030 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\hoepli.xml

[2012/12/14 19.47.40 | 000,001,395 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\wikipedia-it.xml

[2012/12/14 19.47.40 | 000,001,166 | ---- | M] () -- C:\Programmi\mozilla firefox\searchplugins\yahoo-it.xml

========== Chrome ==========

CHR - homepage: http://www.google.it/ig

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}

CHR - homepage: http://www.google.it/ig

CHR - plugin: Shockwave Flash (Enabled) = C:\Programmi\Google\Chrome\Application\24.0.1312.57\PepperFlash\pepflashplayer.dll

CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Programmi\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programmi\Google\Chrome\Application\24.0.1312.57\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Programmi\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npdrmv2.dll

CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programmi\Windows Media Player\npdsplay.dll

CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npwmsdrm.dll

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MI1933~1\Office14\NPAUTHZ.DLL

CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MI1933~1\Office14\NPSPWRAP.DLL

CHR - plugin: Google Update (Enabled) = C:\Programmi\Google\Update\1.3.21.124\npGoogleUpdate3.dll

CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw_1167637.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll

CHR - plugin: Silverlight Plug-In (Enabled) = c:\Programmi\Microsoft Silverlight\5.1.10411.0\npctrl.dll

CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

CHR - Extension: Documenti Google = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\

CHR - Extension: Google Drive = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\

CHR - Extension: WOT = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp\1.4.9_0\

CHR - Extension: YouTube = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\

CHR - Extension: Instantanea pagina - Webpage Screenshot = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ckibcdccnfeookdmbahgiakhnjcddpki\7.3_0\

CHR - Extension: Ricerca Google = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\

CHR - Extension: avast! WebRep = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\

CHR - Extension: Google Traduttore per Google+ = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\jfppgkomfopklagggkjiaddgndkgopgl\1.1.7_0\

CHR - Extension: Orologio = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\mjocghlclkpgheifflemilcnblodjohg\1.16_0\

CHR - Extension: GoPhoto.it = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0\

CHR - Extension: Gmail = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

CHR - Extension: Yann Arthus-Bertrand = C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\plaekpceeonanmjojailaojkconcgofc\3_0\

O1 HOSTS File: ([2013/02/03 11.47.50 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1 localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (Java Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programmi\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programmi\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)

O2 - BHO: (Free Download Manager) - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Programmi\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)

O2 - BHO: (Java Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programmi\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.

O4 - HKLM..\Run: [Adobe ARM] C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [ANIWZCS2Service] C:\Programmi\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Wireless Service)

O4 - HKLM..\Run: [Autodesk Sync] C:\Programmi\Autodesk\Autodesk Sync\AdSync.exe (Autodesk, Inc.)

O4 - HKLM..\Run: [avast] C:\Programmi\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [bCU] C:\Programmi\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)

O4 - HKLM..\Run: [COMODO Internet Security] C:\Programmi\COMODO\COMODO Internet Security\cfp.exe (COMODO)

O4 - HKLM..\Run: [D-Link AirPlus G] C:\Programmi\D-Link\AirPlus G\AirGCFG.exe (D-Link)

O4 - HKLM..\Run: [D-Link D-Link Wireless G DWL-G122_DWA-110] C:\Programmi\D-Link\DWL-G122_DWA-110\AirGCFG.exe (D-Link Corp.)

O4 - HKLM..\Run: [EEventManager] C:\Programmi\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)

O4 - HKLM..\Run: [instantAccess] C:\Programmi\TextBridge Pro 9.0\Bin\InstantAccess.exe ()

O4 - HKLM..\Run: [startCCC] C:\Programmi\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKLM..\Run: [sunJavaUpdateSched] C:\Programmi\File comuni\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKCU..\Run: [bgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe (Nero AG)

O4 - HKCU..\Run: [D4FA186C7C3D35A290E347A94C5158F1409C0725._service_run] C:\Programmi\Google\Chrome\Application\chrome.exe (Google Inc.)

O4 - HKCU..\Run: [EPLTarget\P0000000000000000] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIHLE.EXE (SEIKO EPSON CORPORATION)

O4 - Startup: C:\Documents and Settings\Franco\Menu Avvio\Programmi\Esecuzione automatica\reminder-ScanSoft Product Registration.lnk = C:\Programmi\TextBridge Pro 9.0\Bin\Ereg\Remind32.exe ()

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8 - Extra context menu item: E&sporta in Microsoft Excel - C:\Programmi\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)

O8 - Extra context menu item: I&nvia a OneNote - C:\Programmi\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O8 - Extra context menu item: Scarica con Free Download Manager - C:\Programmi\Free Download Manager\dllink.htm ()

O8 - Extra context menu item: Scarica i video con Free Download Manager - C:\Programmi\Free Download Manager\dlfvideo.htm ()

O8 - Extra context menu item: Scarica selezionati con Free Download Manager - C:\Programmi\Free Download Manager\dlselected.htm ()

O8 - Extra context menu item: Scarica tutto con Free Download Manager - C:\Programmi\Free Download Manager\dlall.htm ()

O9 - Extra Button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programmi\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programmi\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1341934130734 (WUWebControl Class)

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1342021535171 (MUWebControl Class)

O16 - DPF: {B479199A-1242-4E3C-AD81-7F0DF801B4AE} http://download.microsoft.com/download/C/9/C/C9C3D86D-84AC-4AF0-8584-842756A66467/MicrosoftDownloadManager.cab (Microsoft Download Manager ActiveX control)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{842C711C-8A30-4013-ACC5-6B75DA3F6BD8}: NameServer = 212.216.112.112,212.216.176.62

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}: NameServer = 212.216.112.112,212.216.176.62

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\File comuni\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)

O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) - C:\WINDOWS\system32\guard32.dll (COMODO)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O24 - Desktop Components:0 (Pagina iniziale corrente) - About:Home

O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Colline.bmp

O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Colline.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2012/10/01 16.36.34 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]

O32 - AutoRun File - [2012/07/09 16.16.59 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2011/03/13 20.32.53 | 000,000,000 | ---D | M] - F:\autocad 2011 -- [ NTFS ]

O32 - AutoRun File - [2011/03/13 21.30.48 | 000,000,000 | ---D | M] - F:\Autodesk -- [ NTFS ]

O32 - AutoRun File - [2006/01/14 08.22.54 | 000,000,000 | ---- | M] () - F:\AUTOEXEC.BAT -- [ NTFS ]

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found

NetSvcs: Ias - File not found

NetSvcs: Iprip - File not found

NetSvcs: NWCWorkstation - File not found

NetSvcs: Nwsapagent - File not found

NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/02/14 17.41.33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Franco\Desktop\OTL.exe

[2013/02/14 17.06.50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\HitmanPro

[2013/02/08 20.25.47 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Franco\Recent

[2013/02/07 17.55.13 | 000,000,000 | -HSD | C] -- C:\RECYCLER

[2013/02/07 11.32.45 | 000,262,560 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe

[2013/02/07 11.32.45 | 000,143,872 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl

[2013/02/07 11.32.35 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe

[2013/02/07 11.32.35 | 000,174,496 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe

[2013/02/07 11.32.35 | 000,094,112 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll

[2013/02/07 10.13.54 | 000,000,000 | ---D | C] -- C:\Programmi\Mozilla Firefox

[2013/02/02 19.36.14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData

[2013/01/31 11.26.27 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump

[2013/01/30 18.01.36 | 000,000,000 | -H-D | C] -- C:\WINDOWS\System32\GroupPolicy

[2013/01/30 11.41.01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\D-Link

[2013/01/30 11.26.47 | 000,270,336 | ---- | C] (Wireless Service) -- C:\WINDOWS\System32\wnicapi.dll

[2013/01/30 11.25.01 | 000,479,360 | ---- | C] (Ralink Technology, Corp.) -- C:\WINDOWS\System32\Dr71WU98.sys

[2013/01/30 11.25.01 | 000,247,808 | ---- | C] (Ralink Technology Inc.) -- C:\WINDOWS\System32\rt25u98.sys

[2013/01/28 12.51.06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Dati applicazioni\Adobe

[2013/01/28 12.44.21 | 005,029,149 | R--- | C] (Swearware) -- C:\Documents and Settings\Franco\Desktop\ComboFix.exe

[2013/01/23 17.33.32 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Documenti\NeroVision

[2013/01/21 17.40.13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Smart Toolbar Remover

[2013/01/21 17.17.26 | 000,000,000 | ---D | C] -- C:\Config.Msi

[2013/01/21 17.04.06 | 000,011,832 | ---- | C] (Windows ® Codename Longhorn DDK provider) -- C:\WINDOWS\acpimof.dll

[2013/01/21 16.48.25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Autodesk, Inc

[2013/01/21 11.38.48 | 000,000,000 | ---D | C] -- C:\Programmi\Mozilla Thunderbird

[2013/01/19 12.09.32 | 000,000,000 | ---D | C] -- C:\Programmi\Smart PC Solutions

[2013/01/17 17.48.46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Dati applicazioni\ABBYY

[2013/01/17 17.36.34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\ABBYY FineReader 11

[2013/01/17 16.58.52 | 000,000,000 | ---D | C] -- C:\Programmi\ABBYY FineReader 11

[2013/01/17 16.56.17 | 000,000,000 | ---D | C] -- C:\Programmi\MSXML 6.0

[2013/01/17 12.52.49 | 000,000,000 | ---D | C] -- C:\Downloads

[2013/01/17 12.46.04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Dati applicazioni\Free Download Manager

[2013/01/17 12.46.02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Free Download Manager

[2013/01/17 12.45.52 | 000,000,000 | ---D | C] -- C:\Programmi\Free Download Manager

[2013/01/17 12.36.36 | 000,000,000 | ---D | C] -- C:\Temp

[2013/01/17 11.43.41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Google Chrome

[2013/01/17 11.40.16 | 000,000,000 | ---D | C] -- C:\Programmi\Google

[2013/01/16 11.53.38 | 000,000,000 | ---D | C] -- C:\Programmi\Gophoto.it

[2013/01/16 10.33.24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\Help

[2013/01/16 10.33.24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Franco\Dati applicazioni\Help

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2013/02/14 17.41.35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Franco\Desktop\OTL.exe

[2013/02/14 17.27.15 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job

[2013/02/14 17.21.08 | 000,000,356 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job

[2013/02/14 17.20.48 | 000,000,441 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.ics

[2013/02/14 17.20.43 | 000,003,284 | ---- | M] () -- C:\WINDOWS\System32\ANIWZCS{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}

[2013/02/14 17.20.32 | 000,000,007 | ---- | M] () -- C:\WINDOWS\System32\ANIWZCSUSERNAME{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}

[2013/02/14 17.18.33 | 000,001,126 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2013/02/14 17.18.20 | 000,030,616 | ---- | M] () -- C:\WINDOWS\System32\drivers\hitmanpro37.sys

[2013/02/14 17.18.17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2013/02/14 17.16.04 | 000,001,018 | ---- | M] () -- C:\WINDOWS\System32\.crusader

[2013/02/14 16.55.01 | 000,001,130 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2013/02/14 12.21.47 | 000,000,007 | ---- | M] () -- C:\WINDOWS\System32\ANIWZCSUSERNAME

[2013/02/13 18.06.28 | 000,379,240 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2013/02/13 18.00.45 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2013/02/13 17.53.55 | 000,546,418 | ---- | M] () -- C:\WINDOWS\System32\perfh010.dat

[2013/02/13 17.53.55 | 000,496,878 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2013/02/13 17.53.55 | 000,100,792 | ---- | M] () -- C:\WINDOWS\System32\perfc010.dat

[2013/02/13 17.53.55 | 000,085,362 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2013/02/13 17.37.49 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2013/02/08 20.22.58 | 000,000,654 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\CCleaner.lnk

[2013/02/08 12.28.53 | 000,697,712 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe

[2013/02/08 12.28.52 | 000,074,096 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl

[2013/02/07 11.32.24 | 000,094,112 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll

[2013/02/07 11.32.12 | 000,262,560 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe

[2013/02/07 11.32.12 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe

[2013/02/07 11.32.12 | 000,143,872 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl

[2013/02/07 11.32.10 | 000,174,496 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe

[2013/02/07 11.32.08 | 000,861,088 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\npDeployJava1.dll

[2013/02/07 11.32.08 | 000,782,240 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\deployJava1.dll

[2013/02/03 11.47.50 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2013/02/03 11.16.11 | 005,029,149 | R--- | M] (Swearware) -- C:\Documents and Settings\Franco\Desktop\ComboFix.exe

[2013/02/02 19.52.29 | 000,001,777 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk

[2013/01/30 18.04.12 | 000,000,452 | RHS- | M] () -- C:\Documents and Settings\Franco\ntuser.pol

[2013/01/30 17.51.26 | 000,000,211 | -HS- | M] () -- C:\boot.ini

[2013/01/30 11.41.01 | 000,001,682 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Wireless Connection Manager.lnk

[2013/01/30 11.29.18 | 000,000,258 | ---- | M] () -- C:\Documents and Settings\Franco\Dati applicazioni\ANICONFIG_{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}.ini

[2013/01/27 12.13.18 | 000,001,945 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Guida di rete EPSON SX235 Series.lnk

[2013/01/27 12.12.56 | 000,001,945 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Guida utente EPSON SX235 Series.lnk

[2013/01/27 12.01.24 | 000,000,665 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\EPSON Scan.lnk

[2013/01/26 04.55.42 | 000,552,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleaut32.dll

[2013/01/23 17.26.17 | 000,043,062 | ---- | M] () -- C:\Documents and Settings\Franco\Documenti\UserImages.bmp

[2013/01/22 16.56.55 | 000,233,472 | ---- | M] () -- C:\VC_RED.MSI

[2013/01/22 16.55.54 | 000,095,248 | ---- | M] (Microsoft Corporation) -- C:\install.res.1040.dll

[2013/01/22 11.41.57 | 000,000,821 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\HD ADeck.lnk

[2013/01/21 17.45.31 | 000,001,653 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\avast! Free Antivirus.lnk

[2013/01/21 17.45.30 | 000,002,933 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT

[2013/01/21 17.32.50 | 000,000,291 | ---- | M] () -- C:\Documents and Settings\Franco\Documenti\acad.err

[2013/01/21 17.04.07 | 000,001,612 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Live Update 5.lnk

[2013/01/19 12.09.33 | 000,000,979 | ---- | M] () -- C:\Documents and Settings\Franco\Desktop\Smart Toolbar Remover.lnk

[2013/01/18 12.00.57 | 000,002,435 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\ABBYY FineReader 11.lnk

[2013/01/17 12.46.02 | 000,000,714 | ---- | M] () -- C:\Documents and Settings\Franco\Desktop\Free Download Manager.lnk

[2013/01/16 10.29.16 | 003,797,292 | ---- | M] () -- C:\VC_RED.cab

[2013/01/16 10.25.16 | 000,002,207 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SlimDrivers.lnk

[2013/01/16 09.42.03 | 000,000,785 | ---- | M] () -- C:\Documents and Settings\Franco\Desktop\PC Wizard 2012.lnk

[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2013/02/14 17.16.04 | 000,001,018 | ---- | C] () -- C:\WINDOWS\System32\.crusader

[2013/02/14 17.08.20 | 000,030,616 | ---- | C] () -- C:\WINDOWS\System32\drivers\hitmanpro37.sys

[2013/02/13 17.56.54 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK

[2013/01/30 18.04.11 | 000,000,452 | RHS- | C] () -- C:\Documents and Settings\Franco\ntuser.pol

[2013/01/30 16.58.33 | 000,000,007 | ---- | C] () -- C:\WINDOWS\System32\ANIWZCSUSERNAME

[2013/01/30 11.41.01 | 000,001,682 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Wireless Connection Manager.lnk

[2013/01/30 11.28.09 | 000,000,258 | ---- | C] () -- C:\Documents and Settings\Franco\Dati applicazioni\ANICONFIG_{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}.ini

[2013/01/30 11.27.10 | 000,003,284 | ---- | C] () -- C:\WINDOWS\System32\ANIWZCS{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}

[2013/01/30 11.27.00 | 000,000,007 | ---- | C] () -- C:\WINDOWS\System32\ANIWZCSUSERNAME{EE51336A-80D1-4D62-B308-9B5C4EA5E67B}

[2013/01/30 11.26.58 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\ANIWConnService.exe

[2013/01/30 11.25.44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\ANIWPS.exe

[2013/01/30 11.25.43 | 000,733,184 | ---- | C] () -- C:\WINDOWS\System32\ANIOWPS.dll

[2013/01/30 11.25.01 | 000,002,048 | ---- | C] () -- C:\WINDOWS\System32\rt73.bin

[2013/01/23 17.26.17 | 000,043,062 | ---- | C] () -- C:\Documents and Settings\Franco\Documenti\UserImages.bmp

[2013/01/21 17.26.26 | 000,000,291 | ---- | C] () -- C:\Documents and Settings\Franco\Documenti\acad.err

[2013/01/21 17.04.07 | 000,001,612 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Live Update 5.lnk

[2013/01/21 16.55.37 | 000,000,883 | ---- | C] () -- C:\Documents and Settings\Franco\Menu Avvio\Programmi\Esecuzione automatica\reminder-ScanSoft Product Registration.lnk

[2013/01/19 12.09.33 | 000,000,979 | ---- | C] () -- C:\Documents and Settings\Franco\Desktop\Smart Toolbar Remover.lnk

[2013/01/17 17.36.35 | 000,002,435 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\ABBYY FineReader 11.lnk

[2013/01/17 12.46.02 | 000,000,714 | ---- | C] () -- C:\Documents and Settings\Franco\Desktop\Free Download Manager.lnk

[2013/01/17 11.43.41 | 000,001,777 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk

[2013/01/17 11.40.21 | 000,001,130 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2013/01/17 11.40.20 | 000,001,126 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2013/01/16 09.42.03 | 000,000,785 | ---- | C] () -- C:\Documents and Settings\Franco\Desktop\PC Wizard 2012.lnk

[2012/12/27 19.10.25 | 000,004,608 | ---- | C] () -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2012/10/01 18.50.43 | 001,114,422 | ---- | C] () -- C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\WPFFontCache_v0400-S-1-5-21-606747145-1844237615-839522115-1003-0.dat

[2012/10/01 18.50.42 | 000,384,438 | ---- | C] () -- C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\WPFFontCache_v0400-System.dat

[2012/10/01 18.10.56 | 000,000,143 | ---- | C] () -- C:\Documents and Settings\All Users\Dati applicazioni\Microsoft.SqlServer.Compact.351.32.bc

[2012/07/25 09.13.22 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe

[2012/07/25 09.13.22 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe

[2012/07/25 09.13.22 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe

[2012/07/25 09.13.22 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe

[2012/07/25 09.13.22 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe

[2012/07/20 19.49.46 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.dll

[2012/07/20 19.49.46 | 000,001,191 | ---- | C] () -- C:\WINDOWS\System32\W32N55.INI

[2012/07/20 19.49.46 | 000,000,480 | ---- | C] () -- C:\WINDOWS\System32\DiagFunc.ini

[2012/07/20 19.48.51 | 000,013,931 | ---- | C] () -- C:\WINDOWS\System32\RaCoInst.dat

[2012/07/18 11.16.00 | 000,000,098 | ---- | C] () -- C:\Documents and Settings\Franco\default.pls

[2012/07/18 11.15.42 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini

[2012/07/17 16.37.04 | 000,315,392 | ---- | C] () -- C:\WINDOWS\System32\ANIOApi.dll

[2012/07/17 16.37.03 | 000,048,640 | ---- | C] () -- C:\WINDOWS\System32\ANIO64.sys

[2012/07/17 16.37.03 | 000,029,411 | ---- | C] () -- C:\WINDOWS\System32\ANIO.sys

[2012/07/17 16.33.25 | 000,258,048 | ---- | C] () -- C:\WINDOWS\System32\wlanapp.dll

[2012/07/17 16.33.25 | 000,217,088 | ---- | C] () -- C:\WINDOWS\System32\aIPH.dll

[2012/07/17 16.33.25 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\JJAKEn.dll

[2012/07/17 16.33.25 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\AQCKGen.dll

[2012/07/17 16.33.24 | 000,045,115 | ---- | C] () -- C:\WINDOWS\System32\ANICtl.dll

[2012/07/17 13.43.16 | 000,000,000 | ---- | C] () -- C:\WINDOWS\EEventManager.INI

[2012/07/16 17.27.03 | 000,000,179 | ---- | C] () -- C:\WINDOWS\maxlink.ini

[2012/07/16 17.26.48 | 000,012,126 | ---- | C] () -- C:\WINDOWS\System32\Pixpcz.dll

[2012/07/16 17.26.48 | 000,011,934 | ---- | C] () -- C:\WINDOWS\System32\Pixpnr.dll

[2012/07/16 17.26.48 | 000,004,528 | ---- | C] () -- C:\WINDOWS\System32\Setbrows.exe

[2012/07/16 16.26.13 | 000,100,864 | ---- | C] () -- C:\WINDOWS\System32\Dc50ip32.dll

[2012/07/16 16.26.13 | 000,065,864 | ---- | C] () -- C:\WINDOWS\System32\Digita.sys

[2012/07/16 16.26.13 | 000,007,808 | ---- | C] () -- C:\WINDOWS\System32\dc240u.sys

[2012/07/16 16.26.12 | 000,248,832 | ---- | C] () -- C:\WINDOWS\System32\ECircles.dll

[2012/07/16 16.26.12 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\SoyWeb.dll

[2012/07/16 16.26.12 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\ImgLibLead.dll

[2012/07/16 16.20.33 | 000,151,552 | R--- | C] () -- C:\WINDOWS\UnUSBDrv.exe

[2012/07/14 09.50.45 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012/07/13 19.17.38 | 000,024,500 | ---- | C] () -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\census.cache

[2012/07/13 19.17.37 | 000,000,000 | ---- | C] () -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\ars.cache

[2012/07/13 18.37.34 | 000,000,036 | ---- | C] () -- C:\Documents and Settings\Franco\Impostazioni locali\Dati applicazioni\housecall.guid.cache

[2012/07/11 18.32.03 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat

[2012/07/10 16.44.20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat

[2012/07/10 14.30.28 | 000,254,000 | ---- | C] ( ) -- C:\WINDOWS\System32\Audio3D.dll

[2012/07/10 14.30.28 | 000,254,000 | ---- | C] ( ) -- C:\WINDOWS\System32\A3D.dll

[2012/07/09 21.41.29 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI

[2012/07/09 21.40.14 | 000,379,240 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2012/07/09 19.50.30 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll

[2012/07/09 19.50.30 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe

[2012/07/09 16.33.01 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin

[2012/07/09 16.32.54 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat

[2012/07/09 16.32.54 | 000,618,823 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat

[2012/07/09 16.32.54 | 000,000,003 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat

[2012/07/09 16.19.16 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2012/07/09 16.14.00 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat

========== ZeroAccess Check ==========

[2012/07/09 16.31.39 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/13 18.13.52 | 001,499,136 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2009/02/09 11.51.43 | 000,473,600 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

"" = %systemroot%\system32\wbem\wbemess.dll -- [2008/04/13 18.13.58 | 000,273,920 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

========== LOP Check ==========

[2012/12/02 16.57.30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Autodesk

[2012/07/14 17.54.04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\AVAST Software

[2012/07/24 11.12.10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\DriverGenius

[2012/07/17 13.24.37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\EPSON

[2012/07/10 19.28.28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\eSobi

[2012/07/14 10.44.20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\GFI Software

[2012/07/20 19.48.52 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Gigabyte Driver

[2013/02/14 17.16.02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\HitmanPro

[2012/07/10 14.48.00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\MAGIX

[2012/07/17 12.10.44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\UDL

[2012/07/14 10.45.05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Ad-Aware Antivirus

[2012/12/02 16.57.30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Autodesk

[2012/07/10 19.25.19 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

[2012/07/21 17.13.29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Easeware

[2013/02/07 17.38.29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Epson

[2012/07/10 19.28.28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\eSobi

[2013/01/18 17.30.40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Free Download Manager

[2012/07/10 19.27.29 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\MAGIX

[2012/08/30 10.50.49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\MSI

[2012/07/14 12.25.06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\OpenOffice.org

[2012/07/12 18.39.22 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Oracle

[2012/07/10 18.46.42 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\Thunderbird

[2012/07/22 16.54.54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Franco\Dati applicazioni\UpdateStar Drivers

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.exe >

< MD5 for: EXPLORER.EXE >

[2004/08/19 14.39.36 | 001,034,752 | ---- | M] (Microsoft Corporation) MD5=178D42BD8FC34A9837417A6CE1D6BB7B -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe

[2008/04/13 18.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\erdnt\cache\explorer.exe

[2008/04/13 18.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\explorer.exe

[2008/04/13 18.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe

< MD5 for: SERVICES.EXE >

[2009/02/09 12.22.49 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=26845F272435302E0F3322E660A24F7D -- C:\WINDOWS\erdnt\cache\services.exe

[2009/02/09 12.22.49 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=26845F272435302E0F3322E660A24F7D -- C:\WINDOWS\system32\dllcache\services.exe

[2009/02/09 12.22.49 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=26845F272435302E0F3322E660A24F7D -- C:\WINDOWS\system32\services.exe

[2009/02/09 12.14.45 | 000,111,104 | ---- | M] (Microsoft Corporation) MD5=C79FEAE2F68982259907AB52B0F2676F -- C:\WINDOWS\$hf_mig$\KB956572\SP3QFE\services.exe

[2008/04/13 18.14.20 | 000,109,056 | ---- | M] (Microsoft Corporation) MD5=DAC0440C89B1EA4E35684896D5BF856E -- C:\WINDOWS\$NtUninstallKB956572$\services.exe

[2008/04/13 18.14.20 | 000,109,056 | ---- | M] (Microsoft Corporation) MD5=DAC0440C89B1EA4E35684896D5BF856E -- C:\WINDOWS\ServicePackFiles\i386\services.exe

[2004/08/19 14.39.46 | 000,108,544 | ---- | M] (Microsoft Corporation) MD5=E77F6FA2A15390F1727F4C1C55B69DA6 -- C:\WINDOWS\$NtServicePackUninstall$\services.exe

< MD5 for: SVCHOST.EXE >

[2004/08/19 14.39.46 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=73955B04F209D8A1C633867841267A96 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe

[2008/04/13 18.14.22 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\erdnt\cache\svchost.exe

[2008/04/13 18.14.22 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe

[2008/04/13 18.14.22 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\system32\svchost.exe

< MD5 for: USERINIT.EXE >

[2004/08/19 14.39.46 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=C1E7FE19F98A877BF8F941BF48148695 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe

[2008/04/13 18.14.24 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\erdnt\cache\userinit.exe

[2008/04/13 18.14.24 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008/04/13 18.14.24 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >

[2004/08/19 14.39.46 | 000,504,832 | ---- | M] (Microsoft Corporation) MD5=4166454E2BCFCC20D1B8A5AC9FEAB243 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe

[2008/04/13 18.14.26 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\erdnt\cache\winlogon.exe

[2008/04/13 18.14.26 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2008/04/13 18.14.26 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\system32\winlogon.exe

< %systemroot%\*. /rp /s >

< %systemdrive%\$Recycle.Bin|@;true;true;true /fp >

========== Drive Information ==========

Physical Drives

---------------

Drive: \\\\.\\PHYSICALDRIVE0 - Fixed\thard disk media

Interface type: IDE

Media Type: Fixed\thard disk media

Model: ST500DM002-1BD142

Partitions: 2

Status: OK

Status Info: 0

Drive: \\\\.\\PHYSICALDRIVE1 - Fixed\thard disk media

Interface type: IDE

Media Type: Fixed\thard disk media

Model: Maxtor 6L160M0

Partitions: 2

Status: OK

Status Info: 0

Partitions

---------------

DeviceID: Disk #0, Partition #0

PartitionType: Installable File System

Bootable: True

BootPartition: True

PrimaryPartition: True

Size: 319,00GB

Starting Offset: 32256

Hidden sectors: 0

DeviceID: Disk #0, Partition #1

PartitionType: Extended w/Extended Int 13

Bootable: False

BootPartition: False

PrimaryPartition: False

Size: 146,00GB

Starting Offset: 342813219840

Hidden sectors: 0

DeviceID: Disk #1, Partition #0

PartitionType: Installable File System

Bootable: True

BootPartition: True

PrimaryPartition: True

Size: 45,00GB

Starting Offset: 32256

Hidden sectors: 0

DeviceID: Disk #1, Partition #1

PartitionType: Extended w/Extended Int 13

Bootable: False

BootPartition: False

PrimaryPartition: False

Size: 107,00GB

Starting Offset: 48570278400

Hidden sectors: 0

========== Hard Links - Junction Points - Mount Points - Symbolic Links ==========

[C:\WINDOWS\assembly\GAC_32\System.EnterpriseServices\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790 -> Junction

[C:\WINDOWS\assembly\GAC_MSIL\IEExecRemote\2.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e -> Junction

[C:\WINDOWS\Microsoft.NET\assembly\GAC_32\System.EnterpriseServices\v4.0_4.0.0.0__b03f5f7f11d50a3a] -> C:\WINDOWS\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_4.0.0.0_x-ww_29b51492 -> Junction

[C:\WINDOWS\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35] -> C:\WINDOWS\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5 -> Junction

========== Alternate Data Streams ==========

@Alternate Data Stream - 88 bytes -> C:\VC_RED.cab:SummaryInformation

@Alternate Data Stream - 88 bytes -> C:\install.res.1040.dll:SummaryInformation

< End of report >

OTL Extras logfile created on: 14/02/2013 17.43.52 - Run 1