[GabboX]

I am using Win Xp.A few days ago I was infected by the /trojan/malware) Guard Online (similar to dr. Guard stuff..)
I spent two days to remove it, thanks to the safe mode.
I managed to remove it, but now, whenever I switch on my computer, after two minutes it goes on blue screen, saying it has an error.
So (always in Safe mode) I run Super antispyware, Malwarebites' Antimalware..and they seemed to have removed everything (Guard Online stuff seems gone forever) but when I come to the Normal mode, the blue screen still appears (after two minutes).
Could you please help me? It's important, thanks.

Edited by GabboX, 12 October 2011 - 02:07 PM.

[Advertisements]

Hi lets have a look at the system shall we

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply



THEN

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Select All Users
• Under the Custom Scan box paste this in
  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  C:\Windows\assembly\tmp\U /s
  CREATERESTOREPOINT
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

[Essexboy]

Hi lets have a look at the system shall we

Download aswMBR.exe ( 1.8mb ) to your desktop.
Double click the aswMBR.exe to run it Click the "Scan" button to start scan



On completion of the scan click save log, save it to your desktop and post in your next reply



THEN

Download OTL to your Desktop

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
• Select All Users
• Under the Custom Scan box paste this in
  netsvcs
  %SYSTEMDRIVE%\*.exe
  /md5start
  explorer.exe
  winlogon.exe
  Userinit.exe
  svchost.exe
  /md5stop
  C:\Windows\assembly\tmp\U /s
  CREATERESTOREPOINT
• Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
• Post both logs

[GabboX]

Ok, thanks, I'll do this soon, but can I do the scan in Safe Mode?
Cause I don't have time to do it in normal mode, cause after just two minutes (or less) i get the blue screen.

[Essexboy]

Yes they will work just as happily in safe mode

[GabboX]

Ok, I did them.
Here is the first (aswMBR.txt):

aswMBR version 0.9.8.986 Copyright© 2011 AVAST Software
Run date: 2011-10-13 22:49:46
-----------------------------
22:49:46.296 OS Version: Windows 5.1.2600 Service Pack 3
22:49:46.296 Number of processors: 1 586 0x401
22:49:46.296 ComputerName: SN111236160311 UserName: Administrator
22:49:46.468 Initialize success
22:53:32.593 AVAST engine defs: 11101301
22:56:34.453 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
22:56:34.468 Disk 0 Vendor: ST3160023AS 3.00 Size: 152627MB BusType: 3
22:56:34.484 Device \Driver\atapi -> DriverStartIo 8ae0531b
22:56:36.500 Disk 0 MBR read successfully
22:56:36.500 Disk 0 MBR scan
22:56:36.531 Disk 0 MBR:Alureon-G [Rtk]
22:56:36.546 Disk 0 TDL4@MBR code has been found
22:56:36.562 Disk 0 Windows XP default MBR code found via API
22:56:36.578 Disk 0 MBR hidden
22:56:36.593 Disk 0 MBR [TDL4] **ROOTKIT**
22:56:36.609 Disk 0 trace - called modules:
22:56:36.625 ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8ae054d0]<<
22:56:36.640 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8aeb6400]
22:56:39.421 3 CLASSPNP.SYS[f7547fd7] -> nt!IofCallDriver -> \Device\00000097[0x8af119e8]
22:56:39.593 5 ACPI.sys[f743e620] -> nt!IofCallDriver -> [0x8aec4940]
22:56:39.750 \Driver\atapi[0x8ae24f38] -> IRP_MJ_CREATE -> 0x8ae054d0
22:56:40.046 AVAST engine scan C:\WINDOWS
22:56:48.093 AVAST engine scan C:\WINDOWS\system32
22:58:45.171 AVAST engine scan C:\WINDOWS\system32\drivers
22:58:57.109 AVAST engine scan D:\Documents and Settings\Administrator.SN111236160311.000
22:59:19.031 AVAST engine scan D:\Documents and Settings\All Users
23:01:07.500 Scan finished successfully
23:01:19.187 Disk 0 MBR has been saved successfully to "D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\MBR.dat"
23:01:19.234 The log file has been saved successfully to "D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\aswMBR.txt"

I've attached the second file (OTL.txt)and the third file (EXTRAS.txt).
Tell me if you can see them properly. Thank you.

OTL logfile created on: 13/10/2011 23.03.54 - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\geekstogo
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 2,61 Gb Available Physical Memory | 86,98% Memory free
5,85 Gb Paging File | 5,63 Gb Available in Paging File | 96,24% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi
Drive C: | 37,80 Gb Total Space | 11,98 Gb Free Space | 31,69% Space Free | Partition Type: NTFS
Drive D: | 111,24 Gb Total Space | 1,10 Gb Free Space | 0,99% Space Free | Partition Type: NTFS

Computer Name: SN111236160311 | User Name: Administrator | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/10/13 22.48.46 | 000,582,656 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\geekstogo\OTL.exe
PRC - [2011/08/12 01.38.07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programmi\SUPERAntiSpyware\SASCore.exe
PRC - [2011/04/27 15.39.26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Programmi\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2008/04/13 19.14.18 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\ping.exe
PRC - [2008/04/13 19.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe


========== Modules (No Company Name) ==========

MOD - [2011/06/06 12.55.32 | 000,301,056 | ---- | M] () -- C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\PDFShell.ITA
MOD - [2010/03/31 23.30.12 | 000,473,704 | ---- | M] () -- C:\Programmi\NVIDIA Corporation\nView\nvShell.dll
MOD - [2009/03/06 19.05.40 | 000,066,512 | ---- | M] () -- C:\Programmi\File comuni\SmartCom\DragnDropCopyHook.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Utilità di pianificazione di LiveUpdate automatico)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011/08/12 01.38.07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Programmi\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011/07/07 19.31.08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Programmi\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/06/15 17.33.20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Programmi\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2011/04/27 15.39.26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programmi\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2010/05/01 15.28.56 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010/01/15 14.49.20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Programmi\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/08/31 22.14.58 | 001,823,744 | ---- | M] (UASSOFT.COM) [Auto | Stopped] -- C:\Programmi\Keyboard & Mouse Driver\KMWDSrv.exe -- (KMWDSERVICE)
SRV - [2008/11/04 01.06.28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\File comuni\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/03/14 02.26.14 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) [Auto | Stopped] -- C:\Programmi\Nuance\PDF Professional 5\PDFProFiltSrv.exe -- (PDFProFiltSrv)
SRV - [2007/04/27 07.40.00 | 000,206,400 | ---- | M] (SafeNet, Inc) [Auto | Stopped] -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer)
SRV - [2007/04/27 01.00.04 | 000,316,992 | ---- | M] (SafeNet, Inc.) [Auto | Stopped] -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer)
SRV - [2006/10/26 14.03.08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/05/11 13.52.00 | 000,061,440 | ---- | M] (Cyberlink) [Auto | Stopped] -- C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2005/05/11 13.50.34 | 000,110,672 | ---- | M] () [Auto | Stopped] -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2005/05/11 13.50.14 | 000,221,266 | ---- | M] () [Auto | Stopped] -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2005/01/07 12.01.52 | 000,049,152 | ---- | M] () [Auto | Stopped] -- c:\APPS\HIDSERVICE\HidService.exe -- (GenericHidService)
SRV - [2004/02/26 09.52.00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Stopped] -- C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2003/07/02 17.40.08 | 000,045,056 | ---- | M] ( ) [Auto | Stopped] -- C:\WINDOWS\System32\slserv.exe -- (SLService)


========== Driver Services (SafeList) ==========

DRV - [2011/10/13 22.13.48 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKsl7c56f231.sys -- (MpKsl7c56f231)
DRV - [2011/10/13 22.07.57 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKsla3e3fb33.sys -- (MpKsla3e3fb33)
DRV - [2011/10/13 21.56.13 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKslcf7f2608.sys -- (MpKslcf7f2608)
DRV - [2011/10/13 21.50.36 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKsla26de2b0.sys -- (MpKsla26de2b0)
DRV - [2011/10/13 19.00.25 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKsldd266de3.sys -- (MpKsldd266de3)
DRV - [2011/10/12 21.48.55 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKslcb999ccb.sys -- (MpKslcb999ccb)
DRV - [2011/10/12 21.10.26 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Stopped] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{0FD71311-0E05-49BE-98F3-47077968DF76}\MpKsl0e9e6206.sys -- (MpKsl0e9e6206)
DRV - [2011/07/22 18.27.02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Programmi\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 23.55.22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Stopped] -- C:\Programmi\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009/11/19 01.24.26 | 000,095,232 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009/08/05 22.48.42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/04/29 23.37.26 | 000,025,088 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2009/04/29 23.37.26 | 000,025,088 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFilter)
DRV - [2009/03/03 15.32.48 | 000,027,008 | ---- | M] (Icera Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nokiappo.sys -- (nokiappo)
DRV - [2009/03/03 15.32.48 | 000,019,072 | ---- | M] (Icera Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nokiacpo.sys -- (nokiacpo)
DRV - [2008/12/18 09.19.18 | 000,067,528 | ---- | M] (Aladdin Knowledge Systems Ltd.) [File_System | Auto | Stopped] -- C:\WINDOWS\system32\drivers\eugssxp.sys -- (eugss)
DRV - [2008/12/18 09.13.18 | 000,025,680 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | System | Stopped] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
DRV - [2008/07/11 07.05.00 | 000,092,712 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2008/07/11 07.05.00 | 000,037,088 | ---- | M] (SafeNet, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (SNTNLUSB)
DRV - [2007/10/22 08.55.46 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\DgivEcp.sys -- (DgiVecp)
DRV - [2006/09/18 15.12.36 | 000,020,269 | ---- | M] (USB Smart Card Reader) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EMVSCARD.sys -- (EMVSCARD)
DRV - [2006/01/12 21.46.28 | 000,252,928 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2005/08/22 11.02.02 | 000,043,968 | ---- | M] (Eutron) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\eusk3usb.sys -- (eusk3usb)
DRV - [2005/06/29 14.35.10 | 003,173,888 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/01/07 17.07.16 | 000,145,920 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2004/08/03 22.41.40 | 000,013,776 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RecAgent.sys -- (RecAgent)
DRV - [2003/12/31 11.58.46 | 000,069,504 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnic51.sys -- (RTL8023)
DRV - [2003/08/20 17.34.50 | 000,548,952 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slntamr.sys -- (Slntamr)
DRV - [2003/07/16 12.30.26 | 000,221,736 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5)
DRV - [2003/07/02 16.26.36 | 001,301,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm)
DRV - [2003/07/02 16.24.36 | 000,086,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal)
DRV - [2003/07/02 16.12.52 | 000,039,348 | ---- | M] (Vireo Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup)
DRV - [2003/07/02 15.57.10 | 000,167,384 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax)
DRV - [2002/10/24 02.00.00 | 000,017,080 | R--- | M] (Micropi Elettronica) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\CPUSB.sys -- (CPUSB)
DRV - [1997/05/30 00.00.00 | 000,021,824 | ---- | M] (Micropi Elettronica - Italia) [Kernel | Auto | Stopped] -- C:\WINDOWS\System32\drivers\CPWNT.SYS -- (cpwnt)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========



IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-2487860481-4207145581-1689497151-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Programmi\McAfee\SiteAdvisor\npmcffplg32.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programmi\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Programmi\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programmi\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2088: C:\Programmi\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2146: C:\Programmi\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1069: C:\Programmi\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programmi\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Programmi\McAfee\SiteAdvisor


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Programmi\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Programmi\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Programmi\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Programmi\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programmi\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Programmi\Microsoft\Office Live\npOLW.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Programmi\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

Hosts file not found
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Guida per l'accesso a Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CNisExtBho Class) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
O2 - BHO: (CNavExtBho Class) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll File not found
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programmi\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (ZeonIEEventHelper Class) - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programmi\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Nuance PDF) - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O4 - HKLM..\Run: [3170 Scan2PC] C:\WINDOWS\Twain_32\Samsung\CLX3170\Scan2pc.exe ()
O4 - HKLM..\Run: [Adobe ARM] C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AzMixerSel] C:\Programmi\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [bit4id store register] C:\WINDOWS\System32\bit4cnsp.dll (bit4id srl (http://www.bit4id.com))
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows ® Server 2003 DDK provider)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programmi\File comuni\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [KMCONFIG] C:\Programmi\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe File not found
O4 - HKLM..\Run: [MSC] c:\Programmi\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Nuance PDF Professional 5-reminder] C:\Programmi\Nuance\PDF Professional 5\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /installquiet File not found
O4 - HKLM..\Run: [PCMService] c:\Apps\Powercinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PDF5 Registry Controller] C:\Programmi\Nuance\PDF Professional 5\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Programmi\Nuance\PDF Professional 5\PdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSLEmptyCache] C:\WINDOWS\system32\SSLEmptyCache.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe" File not found
O4 - HKLM..\Run: [TkBellExe] C:\Programmi\File comuni\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Programmi\File comuni\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)
O4 - HKU\S-1-5-19..\Run: [Configura il mio PC] C:\Apps\SMP\PCSETUP.exe (NEC Computers International)
O4 - HKU\S-1-5-20..\Run: [Configura il mio PC] C:\Apps\SMP\PCSETUP.exe (NEC Computers International)
O4 - HKU\S-1-5-21-2487860481-4207145581-1689497151-500..\Run: [Configura il mio PC] C:\Apps\SMP\PCSETUP.exe (NEC Computers International)
O4 - HKU\S-1-5-21-2487860481-4207145581-1689497151-500..\Run: [SUPERAntiSpyware] C:\Programmi\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: D:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk = C:\Programmi\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: D:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Tasto di scelta rapida per l'avvio di AutoCAD LT.lnk = C:\Programmi\File comuni\Autodesk Shared\acstart17.exe (Autodesk, Inc)
O4 - Startup: D:\Documents and Settings\Ignazio.SN111236160311\Menu Avvio\Programmi\Esecuzione automatica\Registration-Studio 7.lnk = File not found
O4 - Startup: D:\Documents and Settings\ignazio.SN111236160311.002\Menu Avvio\Programmi\Esecuzione automatica\Registrazioni Seagate.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2487860481-4207145581-1689497151-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {4D054067-DE3A-48F9-B19B-BCD229B9AE8D} http://www.samsungdp...X/DrPrinter.cab (PrinterHelpEtcActiveX Control)
O16 - DPF: {877E14A6-0ACF-4509-8CF3-E4A0F4ED46F4} http://supportsiss.l...onents/pdlc.cab (Postazione di Lavoro del Cittadino 3.0)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_15)
O16 - DPF: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F026B2A-18BC-41FA-9D3B-4855C93656BA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A5FC410-9131-47A3-BC0E-370304AE95BF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6519A8C1-B342-4041-866B-71B438D02F86}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\dssrequest - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programmi\File comuni\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programmi\File comuni\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\sacore - No CLSID value found
O18 - Protocol\Filter\application/x-internet-signup {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programmi\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll ()
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\File comuni\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Programmi\SUPERAntiSpyware\SASWINLO.DLL) - C:\Programmi\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Pagina iniziale corrente) - About:Home
O24 - Desktop WallPaper: C:\APPS\DESKTOP\BG800IT.bmp
O24 - Desktop BackupWallPaper: C:\APPS\DESKTOP\BG800IT.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programmi\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

CREATERESTOREPOINT
Error creating restore point.

========== Files/Folders - Created Within 30 Days ==========

[2011/10/13 22.48.06 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\geekstogo
[2011/10/13 22.33.47 | 001,916,416 | ---- | C] (AVAST Software) -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\aswMBR.exe
[2011/10/13 22.25.11 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\IECompatCache
[2011/10/13 19.25.56 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Documenti\Downloads
[2011/10/12 22.10.49 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Recent
[2011/10/12 22.09.54 | 000,000,000 | ---D | C] -- C:\Programmi\CCleaner
[2011/10/12 22.09.50 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Avvio\Programmi\Google Chrome
[2011/10/12 22.08.44 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\Google
[2011/10/12 21.26.47 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\SUPERAntiSpyware.com
[2011/10/12 21.26.11 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
[2011/10/12 20.16.06 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes' Anti-Malware
[2011/10/12 20.16.00 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/10/12 20.16.00 | 000,000,000 | ---D | C] -- C:\Programmi\Malwarebytes' Anti-Malware
[2011/10/11 13.02.57 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Malwarebytes
[2011/10/11 13.02.45 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
[2011/10/11 13.02.23 | 009,852,544 | ---- | C] (Malwarebytes Corporation ) -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\exp.exe.exe
[2011/10/11 13.01.58 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Zeon
[2011/10/09 12.54.25 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\Temp
[2011/10/09 12.54.25 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\Adobe
[2011/10/09 12.54.25 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Adobe
[2011/10/09 12.53.42 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\PrivacIE
[2011/10/09 12.51.32 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Cookies
[2011/10/09 12.51.32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Macromedia
[2011/10/09 12.51.32 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Identities
[2011/10/09 12.51.31 | 000,000,000 | --SD | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Microsoft
[2011/10/09 12.51.31 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni
[2011/10/09 12.51.31 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Documenti\Musica
[2011/10/09 12.51.31 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Documenti\Immagini
[2011/10/09 12.51.31 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Documenti
[2011/10/09 12.51.31 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop
[2011/10/09 12.51.31 | 000,000,000 | -HSD | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\IETldCache
[2011/10/09 12.51.31 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Symantec
[2011/10/09 12.51.31 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Real
[2011/10/09 12.51.31 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\ApplicationHistory
[2011/10/09 12.51.30 | 000,000,000 | RH-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\SendTo
[2011/10/09 12.51.30 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Preferiti
[2011/10/09 12.51.30 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio
[2011/10/09 12.51.30 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio\Programmi\Esecuzione automatica
[2011/10/09 12.51.30 | 000,000,000 | R--D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio\Programmi\Accessori
[2011/10/09 12.51.30 | 000,000,000 | -H-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Risorse di stampa
[2011/10/09 12.51.30 | 000,000,000 | -H-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Risorse di rete
[2011/10/09 12.51.30 | 000,000,000 | -H-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Modelli
[2011/10/09 12.51.30 | 000,000,000 | -H-D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali
[2011/10/09 12.51.30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\PowerCinema
[2011/10/09 12.51.30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\Microsoft Help
[2011/10/09 12.51.30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\Microsoft
[2011/10/09 12.51.30 | 000,000,000 | ---D | C] -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\{3248F0A6-6813-11D6-A77B-00B0D0150020}
[2011/10/08 09.06.36 | 000,000,000 | ---D | C] -- C:\Programmi\SUPERAntiSpyware
[2011/10/07 23.33.21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
[2011/10/07 23.33.21 | 000,000,000 | ---D | C] -- C:\Programmi\Spybot - Search & Destroy
[2010/05/01 11.47.53 | 000,018,944 | ---- | C] ( ) -- C:\WINDOWS\System32\Implode.dll
[2010/04/30 19.21.49 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[1980/01/01 00.00.00 | 001,301,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[1980/01/01 00.00.00 | 000,548,952 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slntamr.sys
[1980/01/01 00.00.00 | 000,221,736 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[1980/01/01 00.00.00 | 000,167,384 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[1980/01/01 00.00.00 | 000,086,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnthal.sys
[1980/01/01 00.00.00 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS\System32\slserv.exe
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/10/13 23.01.19 | 000,000,512 | ---- | M] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\MBR.dat
[2011/10/13 22.33.43 | 001,916,416 | ---- | M] (AVAST Software) -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\aswMBR.exe
[2011/10/13 22.32.02 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/10/13 22.26.47 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/10/13 22.14.47 | 000,276,202 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011/10/13 22.14.07 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/10/12 22.09.55 | 000,000,575 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/10/12 22.09.50 | 000,001,668 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/10/12 21.50.55 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/10/12 21.26.15 | 000,001,531 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/10/12 20.16.08 | 000,000,649 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/10/12 20.02.41 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2011/10/11 12.58.42 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/10/09 17.44.12 | 009,852,544 | ---- | M] (Malwarebytes Corporation ) -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\exp.exe.exe
[2011/10/09 13.00.06 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2011/10/08 00.13.31 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/10/08 00.09.03 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2011/09/22 15.36.19 | 000,010,813 | ---- | M] () -- C:\WINDOWS\System32\QuickTime.qtp
[2011/09/14 12.49.05 | 000,001,603 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/10/13 23.01.19 | 000,000,512 | ---- | C] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Desktop\MBR.dat
[2011/10/12 22.09.55 | 000,000,575 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/10/12 22.09.50 | 000,001,668 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/10/12 21.26.15 | 000,001,531 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/10/12 20.16.08 | 000,000,649 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/10/09 13.00.06 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2011/10/09 13.00.06 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2011/10/09 12.51.34 | 000,000,141 | ---- | C] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Impostazioni locali\Dati applicazioni\fusioncache.dat
[2011/10/09 12.51.33 | 000,001,506 | ---- | C] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio\Programmi\Assistenza remota.lnk
[2011/10/09 12.51.32 | 000,000,654 | ---- | C] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio\Programmi\Internet Explorer.lnk
[2011/10/09 12.51.32 | 000,000,625 | ---- | C] () -- D:\Documents and Settings\Administrator.SN111236160311.000\Menu Avvio\Programmi\Outlook Express.lnk
[2011/09/14 12.49.05 | 000,001,804 | ---- | C] () -- D:\Documents and Settings\All Users\Menu Avvio\Programmi\Adobe Reader X.lnk
[2011/09/14 12.49.05 | 000,001,603 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Adobe Reader X.lnk
[2011/06/20 15.29.14 | 021,022,914 | ---- | C] () -- C:\Programmi\vlc-1.1.10-win32.exe
[2010/12/08 11.42.07 | 000,014,849 | ---- | C] () -- C:\WINDOWS\CJ1_10.ini
[2010/12/07 19.53.11 | 000,327,680 | ---- | C] () -- C:\WINDOWS\eSINLD.dll
[2010/12/07 19.53.09 | 000,020,480 | ---- | C] () -- C:\WINDOWS\eSINLDLG.dll
[2010/12/06 13.06.20 | 000,303,104 | R--- | C] () -- C:\WINDOWS\System32\eST3snm.dll
[2010/11/22 18.39.51 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\RT2573.dll
[2010/11/22 18.39.48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\GTW32N50.dll
[2010/11/04 20.34.26 | 000,059,916 | ---- | C] () -- C:\WINDOWS\System32\bit4cnsp-uninst.exe
[2010/10/28 19.56.48 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2010/10/23 13.06.08 | 000,000,530 | ---- | C] () -- C:\WINDOWS\System32\tx14_ic.ini
[2010/08/27 20.21.24 | 001,757,222 | ---- | C] () -- C:\WINDOWS\System32\dbcmdb32.dll
[2010/08/27 20.21.24 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\DBCDBF32.DLL
[2010/08/27 20.21.24 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\dbcmem32.dll
[2010/08/27 20.21.24 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\dbcgeo32.dll
[2010/08/27 20.21.24 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\Skeylink.dll
[2010/08/02 18.24.06 | 000,000,392 | ---- | C] () -- C:\WINDOWS\System32\winsusrm.dll
[2010/08/02 18.24.06 | 000,000,344 | ---- | C] () -- C:\WINDOWS\System32\winsusrx.dll
[2010/07/29 19.24.21 | 000,000,024 | ---- | C] () -- C:\WINDOWS\mc4hvac.ini
[2010/07/29 18.42.56 | 000,000,037 | ---- | C] () -- C:\WINDOWS\acltdrv.ini
[2010/07/29 18.42.45 | 000,000,039 | ---- | C] () -- C:\WINDOWS\progman.ini
[2010/07/29 18.28.13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MTSTACK.INI
[2010/07/29 18.28.11 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\MTSTACK.EXE
[2010/07/15 18.36.48 | 001,765,376 | R--- | C] () -- C:\WINDOWS\System32\TKernel.dll
[2010/07/15 18.36.47 | 001,851,392 | R--- | C] () -- C:\WINDOWS\System32\TKXSBase.dll
[2010/07/15 18.36.46 | 000,290,816 | R--- | C] () -- C:\WINDOWS\System32\TKXDESTEP.dll
[2010/07/15 18.36.46 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\TKXCAF.dll
[2010/07/15 18.36.46 | 000,054,272 | R--- | C] () -- C:\WINDOWS\System32\TKXDEIGES.dll
[2010/07/15 18.36.45 | 002,885,120 | R--- | C] () -- C:\WINDOWS\System32\TKV3d.dll
[2010/07/15 18.36.45 | 000,567,296 | R--- | C] () -- C:\WINDOWS\System32\TKVRML.dll
[2010/07/15 18.36.44 | 000,901,120 | R--- | C] () -- C:\WINDOWS\System32\TKV2d.dll
[2010/07/15 18.36.43 | 001,568,768 | R--- | C] () -- C:\WINDOWS\System32\TKTopAlgo.dll
[2010/07/15 18.36.42 | 000,909,312 | R--- | C] () -- C:\WINDOWS\System32\TKShapeSchema.dll
[2010/07/15 18.36.41 | 001,519,616 | R--- | C] () -- C:\WINDOWS\System32\TKShHealing.dll
[2010/07/15 18.36.40 | 001,097,728 | R--- | C] () -- C:\WINDOWS\System32\TKService.dll
[2010/07/15 18.36.40 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\TKSTL.dll
[2010/07/15 18.36.39 | 001,830,912 | R--- | C] () -- C:\WINDOWS\System32\TKSTEPBase.dll
[2010/07/15 18.36.38 | 001,974,272 | R--- | C] () -- C:\WINDOWS\System32\TKSTEP.dll
[2010/07/15 18.36.38 | 000,589,824 | R--- | C] () -- C:\WINDOWS\System32\TKSTEP209.dll
[2010/07/15 18.36.38 | 000,491,520 | R--- | C] () -- C:\WINDOWS\System32\TKSTEPAttr.dll
[2010/07/15 18.36.37 | 000,925,696 | R--- | C] () -- C:\WINDOWS\System32\TKPShape.dll
[2010/07/15 18.36.37 | 000,237,568 | R--- | C] () -- C:\WINDOWS\System32\TKPrim.dll
[2010/07/15 18.36.36 | 000,761,856 | R--- | C] () -- C:\WINDOWS\System32\TKOffset.dll
[2010/07/15 18.36.36 | 000,602,112 | R--- | C] () -- C:\WINDOWS\System32\TKOpenGl.dll
[2010/07/15 18.36.35 | 001,142,784 | R--- | C] () -- C:\WINDOWS\System32\TKMath.dll
[2010/07/15 18.36.35 | 000,454,656 | R--- | C] () -- C:\WINDOWS\System32\TKMesh.dll
[2010/07/15 18.36.35 | 000,307,200 | R--- | C] () -- C:\WINDOWS\System32\TKMeshVS.dll
[2010/07/15 18.36.34 | 002,543,616 | R--- | C] () -- C:\WINDOWS\System32\TKIGES.dll
[2010/07/15 18.36.34 | 000,835,584 | R--- | C] () -- C:\WINDOWS\System32\TKLCAF.dll
[2010/07/15 18.36.33 | 000,794,624 | R--- | C] () -- C:\WINDOWS\System32\TKHLR.dll
[2010/07/15 18.36.32 | 003,448,832 | R--- | C] () -- C:\WINDOWS\System32\TKGeomBase.dll
[2010/07/15 18.36.31 | 003,072,000 | R--- | C] () -- C:\WINDOWS\System32\TKGeomAlgo.dll
[2010/07/15 18.36.30 | 000,827,392 | R--- | C] () -- C:\WINDOWS\System32\TKG3d.dll
[2010/07/15 18.36.29 | 001,576,960 | R--- | C] () -- C:\WINDOWS\System32\TKFillet.dll
[2010/07/15 18.36.29 | 000,364,544 | R--- | C] () -- C:\WINDOWS\System32\TKG2d.dll
[2010/07/15 18.36.28 | 000,294,912 | R--- | C] () -- C:\WINDOWS\System32\TKCDF.dll
[2010/07/15 18.36.28 | 000,245,760 | R--- | C] () -- C:\WINDOWS\System32\TKCAF.dll
[2010/07/15 18.36.26 | 002,502,656 | R--- | C] () -- C:\WINDOWS\System32\TKBool.dll
[2010/07/15 18.36.24 | 000,606,208 | R--- | C] () -- C:\WINDOWS\System32\TKBRep.dll
[2010/07/15 18.36.23 | 001,249,280 | R--- | C] () -- C:\WINDOWS\System32\TKBO.dll
[2010/07/15 18.36.22 | 000,376,832 | R--- | C] () -- C:\WINDOWS\System32\PTKernel.dll
[2010/06/26 13.23.04 | 000,060,984 | ---- | C] () -- D:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\FontCache3.0.0.0.dat
[2010/05/25 19.19.18 | 000,906,784 | ---- | C] () -- C:\WINDOWS\System32\Owl52f.dll
[2010/05/25 19.19.17 | 000,297,680 | ---- | C] () -- C:\WINDOWS\System32\Bocof.dll
[2010/05/22 14.46.06 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2010/05/22 13.02.18 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/05/08 11.14.43 | 002,183,470 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010/05/04 22.23.19 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WinInit.ini
[2010/05/02 14.48.09 | 000,001,364 | ---- | C] () -- C:\WINDOWS\LMAAG2DD.ini
[2010/05/01 19.05.40 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2010/05/01 19.05.33 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\SamFaxPort.dll
[2010/05/01 19.05.28 | 000,000,116 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2010/05/01 19.05.23 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2010/05/01 19.04.06 | 000,479,232 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2010/05/01 19.03.08 | 000,022,723 | ---- | C] () -- C:\WINDOWS\System32\sst1cl3.dll
[2010/05/01 18.59.56 | 000,110,592 | R--- | C] () -- C:\WINDOWS\WiaInst.exe
[2010/05/01 18.59.54 | 000,138,240 | R--- | C] () -- C:\WINDOWS\System32\SaXPUIEx.dll
[2010/05/01 18.59.53 | 000,116,736 | R--- | C] () -- C:\WINDOWS\System32\SaXPIPH.dll
[2010/05/01 18.59.53 | 000,087,040 | R--- | C] () -- C:\WINDOWS\System32\SaXPSTI.dll
[2010/05/01 18.59.52 | 000,139,776 | R--- | C] () -- C:\WINDOWS\System32\SaXPEH.dll
[2010/05/01 18.59.51 | 000,138,752 | R--- | C] () -- C:\WINDOWS\System32\SaXPWIA.dll
[2010/05/01 18.12.26 | 000,015,516 | R--- | C] () -- C:\WINDOWS\CJ2_10.ini
[2010/05/01 18.12.26 | 000,000,037 | R--- | C] () -- C:\WINDOWS\V_eS205SC.ini
[2010/05/01 18.08.37 | 000,274,432 | ---- | C] () -- C:\WINDOWS\System32\ESTsnmp.dll
[2010/05/01 18.08.06 | 000,024,576 | ---- | C] () -- C:\WINDOWS\SPortLG.dll
[2010/05/01 18.08.05 | 000,286,720 | R--- | C] () -- C:\WINDOWS\eSTsnmp.dll
[2010/05/01 17.29.23 | 000,017,072 | ---- | C] () -- C:\WINDOWS\System32\serv.dll
[2010/05/01 16.54.34 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\acdbres.dll
[2010/05/01 15.10.50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2010/05/01 15.10.44 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010/05/01 15.10.44 | 000,197,982 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010/05/01 15.10.44 | 000,000,003 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010/05/01 11.55.09 | 000,000,548 | ---- | C] () -- C:\WINDOWS\EvvivaRG.ini
[2010/05/01 11.55.05 | 000,000,600 | ---- | C] () -- C:\WINDOWS\NEXTRG.INI
[2010/05/01 11.54.16 | 000,000,264 | ---- | C] () -- C:\WINDOWS\FinsonLiveUpdate.ini
[2010/04/30 20.08.56 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2010/04/30 19.49.26 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2010/04/30 19.49.07 | 000,000,424 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/04/30 19.45.26 | 000,000,604 | ---- | C] () -- C:\WINDOWS\System32\SETUPPC.INI
[2010/04/30 19.38.23 | 000,007,585 | ---- | C] () -- C:\WINDOWS\HDReg.ini
[2010/04/30 19.29.48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/04/30 19.21.49 | 000,475,136 | ---- | C] () -- C:\WINDOWS\System32\SLLights.dll
[2010/04/30 19.21.49 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\slmh.exe
[2010/04/30 19.21.49 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\minirec.exe
[2010/04/30 19.21.49 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\amr_cpl.dll
[2010/04/30 19.21.49 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\SLMOHServ.dll
[2010/04/30 19.21.49 | 000,061,440 | ---- | C] () -- C:\WINDOWS\SmCfg.exe
[2009/11/24 15.58.10 | 000,000,213 | ---- | C] () -- C:\WINDOWS\V_eSWIA.ini
[2009/11/24 15.57.27 | 000,000,254 | ---- | C] () -- C:\WINDOWS\V_eSTRS.ini
[2009/11/24 15.57.04 | 000,000,248 | ---- | C] () -- C:\WINDOWS\V_eSFD.ini
[2009/11/24 15.54.51 | 000,000,251 | ---- | C] () -- C:\WINDOWS\V_eSABV.ini
[2009/10/15 14.51.26 | 000,270,336 | ---- | C] () -- C:\WINDOWS\System32\eSABLD.dll
[2009/10/09 13.45.02 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\eSABLDLG.dll
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_RS.ini
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_FD.ini
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_AB.ini
[2009/08/30 19.15.48 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\eSTsnv3.dll
[2009/08/26 18.45.52 | 000,001,577 | ---- | C] () -- C:\WINDOWS\System32\eSABLD.bin
[2008/10/02 14.29.58 | 000,000,244 | ---- | C] () -- C:\WINDOWS\System32\SSLEmptyCache.ini
[2008/10/02 14.29.56 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\SSLEmptyCache.exe
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_RS.ini
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_FD.ini
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_AB.ini
[2007/03/12 18.49.21 | 000,000,085 | -HS- | C] () -- D:\Documents and Settings\All Users\Dati applicazioni\.zreglib
[2006/06/16 18.41.00 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ClearLogonCredentials.dll
[2005/10/21 15.28.56 | 000,005,968 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/05/12 14.24.00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/09/03 12.11.59 | 000,000,825 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/09/03 11.59.47 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/09/03 11.52.31 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/09/03 11.46.42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/09/03 11.45.07 | 000,575,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/09/03 11.37.03 | 000,490,164 | ---- | C] () -- C:\WINDOWS\System32\perfh010.dat
[2004/09/03 11.37.03 | 000,300,212 | ---- | C] () -- C:\WINDOWS\System32\perfi010.dat
[2004/09/03 11.37.03 | 000,084,926 | ---- | C] () -- C:\WINDOWS\System32\perfc010.dat
[2004/09/03 11.37.03 | 000,034,004 | ---- | C] () -- C:\WINDOWS\System32\perfd010.dat
[2004/09/03 11.36.44 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/09/03 11.36.41 | 000,441,996 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/09/03 11.36.41 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/09/03 11.36.41 | 000,071,932 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/09/03 11.36.41 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/09/03 11.36.40 | 000,004,541 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/09/03 11.36.38 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/09/03 11.36.36 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/09/03 11.36.28 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/09/03 11.36.28 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/09/03 11.36.20 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/09/03 11.36.12 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/04/01 11.49.16 | 000,005,360 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[1980/01/01 00.00.00 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\slextspk.dll
[1980/01/01 00.00.00 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\SLGen.dll
[1980/01/01 00.00.00 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\coinst.dll
[1980/01/01 00.00.00 | 000,024,576 | ---- | C] () -- C:\WINDOWS\slrundll.exe

========== LOP Check ==========

[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Administrator.BDM\Dati applicazioni\Autodesk
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Administrator.BDM.000\Dati applicazioni\Autodesk
[2010/04/24 12.02.35 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Administrator.SN111236160311\Dati applicazioni\Zeon
[2011/10/11 13.01.58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Administrator.SN111236160311.000\Dati applicazioni\Zeon
[2011/02/14 19.06.14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Aermec
[2008/02/18 19.44.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Autodesk
[2008/12/24 13.42.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\AVerTV
[2009/12/29 20.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\clp
[2009/12/28 12.13.12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Common Toolkit Suite
[2008/12/30 13.17.09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Downloaded Installations
[2007/03/12 18.49.36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Elaborate Bytes
[2010/05/01 17.08.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Electro Graphics
[2009/07/21 18.11.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Installations
[2010/03/12 19.27.03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Lombardia Integrata
[2009/03/21 14.41.24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\mc4 software
[2009/11/14 14.27.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Mc4Software
[2008/12/30 11.25.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Nokia
[2008/05/18 18.27.31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Nuance
[2008/12/30 13.22.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\PC Suite
[2007/01/05 19.03.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Pinnacle
[2007/01/05 18.37.21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Pinnacle Studio
[2008/05/18 18.34.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\ScanSoft
[2009/12/02 19.56.44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\SDProget
[2008/02/29 01.49.36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\SmartSound Software Inc
[2009/06/19 19.47.38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Startup Manager
[2010/05/07 20.49.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\TEMP
[2005/11/24 22.22.01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Ulead Systems
[2008/05/18 18.25.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\zeon
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM\Dati applicazioni\Autodesk
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.000\Dati applicazioni\Autodesk
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.001\Dati applicazioni\Autodesk
[2008/02/16 21.16.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.002\Dati applicazioni\Autodesk
[2008/02/26 20.30.40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.002\Dati applicazioni\AVG7
[2008/02/02 19.19.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.002\Dati applicazioni\Electro Graphics
[2008/02/05 19.46.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.002\Dati applicazioni\Uniblue
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.003\Dati applicazioni\Autodesk
[2008/03/02 10.16.17 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.003\Dati applicazioni\AVG7
[2008/02/29 18.48.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.BDM.003\Dati applicazioni\Electro Graphics
[2007/04/25 11.36.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.SN111236160311\Dati applicazioni\Autodesk
[2008/02/02 09.49.40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.SN111236160311\Dati applicazioni\AVG7
[2007/07/19 20.19.48 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.SN111236160311\Dati applicazioni\Electro Graphics
[2007/05/22 19.45.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.SN111236160311\Dati applicazioni\FUJIFILM
[2007/05/24 21.40.02 | 000,000,000 | ---D | M] -- D:\Documents and Settings\Ignazio.SN111236160311\Dati applicazioni\InterVideo
[2008/03/03 20.21.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Autodesk
[2010/01/02 13.43.58 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\AVGTOOLBAR
[2009/11/13 22.23.11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\avidemux
[2008/12/29 15.00.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Datalayer
[2008/10/26 18.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Electro Graphics
[2010/03/11 21.01.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\EurekaLog
[2009/12/28 02.17.11 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Fighters
[2008/03/10 22.26.51 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Leadertech
[2010/03/12 19.27.03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Lombardia Integrata
[2009/03/21 14.28.20 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Mc4Software
[2008/12/30 13.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Nokia
[2008/05/18 16.05.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\OfficeUpdate12
[2008/12/30 13.22.45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\PC Suite
[2009/09/09 17.52.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\SDProget
[2008/12/24 11.31.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\SmarThru4
[2008/03/17 21.59.34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Template
[2008/03/03 23.07.38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Ulead Systems
[2008/05/18 18.33.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.000\Dati applicazioni\Zeon
[2010/05/01 11.42.09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Autodesk
[2010/05/01 17.22.34 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Electro Graphics
[2010/10/11 21.07.45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\EurekaLog
[2010/05/17 18.16.29 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Leadertech
[2010/11/04 20.40.25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Lombardia Integrata
[2010/05/01 15.53.27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Mc4Software
[2010/06/12 15.41.47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\ScanSoft
[2010/05/01 17.46.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\SDProget
[2010/05/01 19.06.08 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\SmarThru4
[2010/05/01 17.52.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Ulead Systems
[2010/06/06 23.21.16 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.002\Dati applicazioni\Zeon
[2011/05/10 18.37.16 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Autodesk
[2011/10/09 12.46.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\AYkVOtPySiDoGHs
[2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B22oobF4pm5sJdE
[2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B555sWJ7dELgTqY
[2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\coobF33pm
[2011/10/11 16.34.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\cqwrtS35689w
[2011/10/11 16.34.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dBy1v2n4mW7E8Tq
[2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DjUUCekIBzPNx1u
[2011/10/09 12.46.19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DLgXjCkBzNx1v2b
[2011/10/08 15.25.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DQ6E8R9YwUeOtPy
[2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dR9TqUeIrPyAuDo
[2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DUUUCekIBzPNx1u
[2011/10/09 13.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\E4578qwrtu
[2011/10/08 12.50.37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\g6W8R9TwUeItPND
[2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gCCCwkUVrlOtx0
[2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GJJJ7dEK8gRqh
[2011/10/08 15.18.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gkVlx0c2b3n5Q6
[2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gqqqYCekIBrOyA
[2011/10/08 15.56.42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GXjClBzPNcA1D2n
[2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\hsJf9TqYeIrzNx0
[2011/10/07 23.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\IddEEggZ9hYwkVe
[2011/10/09 12.46.21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\kvDD3onG4am6sKL
[2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LA11uvS2obFpm5Q
[2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\lqqhYCCwkVrl
[2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LuuuvS2obF3mGsJ
[2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\mSoF4pm5sQ7dK8R
[2011/10/08 15.18.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NhXjClBzy1iDnFa
[2011/10/07 23.22.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NVVrrzO0vS2oFsJ
[2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\OlBx0c1b3n4Q6
[2011/10/08 15.31.07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\oTZZqjYCekIrzNx
[2011/10/09 12.58.45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\owjjUVelOBtP0Si
[2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\qbbF4ppmGsQJ
[2011/10/08 12.49.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RcvnmWETYeIrOyA
[2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmHH5sQJ7dL8RZY
[2011/10/09 13.13.27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmmHHssJ7dE8gZh
[2011/10/08 15.18.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RxxA1uvS2ob4pGs
[2011/10/09 13.06.12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rXXwjUlOB
[2011/04/28 22.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\ScanSoft
[2011/09/16 17.58.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SDProget
[2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0cS2bDpG
[2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0uS2iDpn
[2011/10/09 12.58.40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\suipadfhjlz
[2011/10/08 12.49.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\t3n5Q6W8R9TwU
[2011/08/03 21.50.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Ulead Systems
[2011/10/07 23.21.47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\uVItPyAiD
[2011/10/09 13.06.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\UXVB0134679qerx
[2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\vFFF4pmH5sW7dLg
[2011/10/11 16.34.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\yDFHJgYVN0235dg
[2011/02/15 17.42.24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Zeon
[2011/10/09 12.58.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\zWETYIOASFG9jIy
[2009/12/29 20.05.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService\Dati applicazioni\AVGTOOLBAR
[2007/02/24 10.06.50 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService.NT AUTHORITY.003\Dati applicazioni\AVG7
[2008/02/02 14.44.25 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService.NT AUTHORITY.007\Dati applicazioni\AVG7
[2008/02/29 01.52.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService.NT AUTHORITY.008\Dati applicazioni\AVG7
[2010/01/02 17.08.31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\LocalService.NT AUTHORITY.010\Dati applicazioni\SACore
[2011/10/13 22.32.02 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========



========== Custom Scans ==========


< %SYSTEMDRIVE%\*.exe >


< MD5 for: EXPLORER.EXE >
[2004/08/19 14.00.00 | 001,034,752 | ---- | M] (Microsoft Corporation) MD5=178D42BD8FC34A9837417A6CE1D6BB7B -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
[2008/04/13 19.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\explorer.exe
[2008/04/13 19.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2008/04/14 04.14.07 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=70D7F99D95615C3C278367756287DB71 -- C:\WINDOWS\SoftwareDistribution\Download\073a8e9684d59d4923c2eb2e44aa36af\explorer.exe

< MD5 for: SVCHOST.EXE >
[2004/08/19 14.00.00 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=73955B04F209D8A1C633867841267A96 -- C:\WINDOWS\$NtServicePackUninstall$\svchost.exe
[2008/04/13 19.14.22 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\ServicePackFiles\i386\svchost.exe
[2008/04/14 04.14.21 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\SoftwareDistribution\Download\073a8e9684d59d4923c2eb2e44aa36af\svchost.exe
[2008/04/13 19.14.22 | 000,014,336 | ---- | M] (Microsoft Corporation) MD5=BB8363ABEC09AA2F9B363484E282117C -- C:\WINDOWS\system32\svchost.exe

< MD5 for: USERINIT.EXE >
[2004/08/19 14.00.00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=C1E7FE19F98A877BF8F941BF48148695 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
[2008/04/13 19.14.24 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008/04/14 04.14.22 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\SoftwareDistribution\Download\073a8e9684d59d4923c2eb2e44aa36af\userinit.exe
[2008/04/13 19.14.24 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=DF69726907357C3ADD243F48902B0331 -- C:\WINDOWS\system32\userinit.exe

< MD5 for: WINLOGON.EXE >
[2004/08/19 14.00.00 | 000,504,832 | ---- | M] (Microsoft Corporation) MD5=4166454E2BCFCC20D1B8A5AC9FEAB243 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008/04/13 19.14.26 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008/04/14 04.14.24 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\SoftwareDistribution\Download\073a8e9684d59d4923c2eb2e44aa36af\winlogon.exe
[2008/04/13 19.14.26 | 000,510,464 | ---- | M] (Microsoft Corporation) MD5=9259170D29B5A256735FCB8B80280857 -- C:\WINDOWS\system32\winlogon.exe

< C:\Windows\assembly\tmp\U /s >

========== Alternate Data Streams ==========

@Alternate Data Stream - 119 bytes -> D:\Documents and Settings\All Users\Dati applicazioni\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> D:\Documents and Settings\All Users\Dati applicazioni\TEMP:A8ADE5D8

< End of report >

Attached Files

•  OTL.Txt   144.46KB   105 downloads
•  Extras.Txt   58.16KB   201 downloads

[Essexboy]

OK lets now get to work

Re-Run aswMBR

Click Scan

On completion of the scanClick the Fix Button



Save the log as before and post in your next reply

Then reboot to normal mode

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

  :OTL
  O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
  O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
  [2011/10/09 12.46.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\AYkVOtPySiDoGHs
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B22oobF4pm5sJdE
  [2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B555sWJ7dELgTqY
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\coobF33pm
  [2011/10/11 16.34.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\cqwrtS35689w
  [2011/10/11 16.34.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dBy1v2n4mW7E8Tq
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DjUUCekIBzPNx1u
  [2011/10/09 12.46.19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DLgXjCkBzNx1v2b
  [2011/10/08 15.25.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DQ6E8R9YwUeOtPy
  [2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dR9TqUeIrPyAuDo
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DUUUCekIBzPNx1u
  [2011/10/09 13.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\E4578qwrtu
  [2011/10/08 12.50.37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\g6W8R9TwUeItPND
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gCCCwkUVrlOtx0
  [2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GJJJ7dEK8gRqh
  [2011/10/08 15.18.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gkVlx0c2b3n5Q6
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gqqqYCekIBrOyA
  [2011/10/08 15.56.42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GXjClBzPNcA1D2n
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\hsJf9TqYeIrzNx0
  [2011/10/07 23.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\IddEEggZ9hYwkVe
  [2011/10/09 12.46.21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\kvDD3onG4am6sKL
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LA11uvS2obFpm5Q
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\lqqhYCCwkVrl
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LuuuvS2obF3mGsJ
  [2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\mSoF4pm5sQ7dK8R
  [2011/10/08 15.18.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NhXjClBzy1iDnFa
  [2011/10/07 23.22.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NVVrrzO0vS2oFsJ
  [2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\OlBx0c1b3n4Q6
  [2011/10/08 15.31.07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\oTZZqjYCekIrzNx
  [2011/10/09 12.58.45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\owjjUVelOBtP0Si
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\qbbF4ppmGsQJ
  [2011/10/08 12.49.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RcvnmWETYeIrOyA
  [2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmHH5sQJ7dL8RZY
  [2011/10/09 13.13.27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmmHHssJ7dE8gZh
  [2011/10/08 15.18.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RxxA1uvS2ob4pGs
  [2011/10/09 13.06.12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rXXwjUlOB
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0cS2bDpG
  [2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0uS2iDpn
  [2011/10/09 12.58.40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\suipadfhjlz
  [2011/10/08 12.49.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\t3n5Q6W8R9TwU
  [2011/10/07 23.21.47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\uVItPyAiD
  [2011/10/09 13.06.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\UXVB0134679qerx
  [2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\vFFF4pmH5sW7dLg
  [2011/10/11 16.34.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\yDFHJgYVN0235dg
  [2011/10/09 12.58.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\zWETYIOASFG9jIy
  
  :Files
  ipconfig /flushdns /c
  
  :Commands
  [purity]
  [resethosts]
  [emptytemp]
  [EMPTYFLASH]
  [CREATERESTOREPOINT]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[GabboX]

Ok, I'm gonna do it, but I am afraid than when I'll switch to Normal Mode I'll still have blue screen (and have to do again fix and a scan..whatever I'll try).

Edited by GabboX, 14 October 2011 - 03:42 AM.

[GabboX]

Ok, this is what happened.

I did the scan and then "Fix". After five passages, though, the tool seemed stuck on "veryfing disinfection". It was really stuck for more than 30 minutes and my computer on the whole was stuck, like crashed. So I had to switch the computer off . Coming again to the safe mode, I re-did the scan, but it now doesn't give me the possibility to click "Fix" anymore.

I rebooted in Normal mode and now the blue screen has disappeared. So what Am I supposed to do now? To do the scan and then Fix in Normal mode? Maybe in Normal mode I can fix. Or is it unnecessary since the blue screen has disappeared? Thanks.

[Essexboy]

No I still need you to run the OTL fix, the aswMBR fix was to stop the blue screens. So could you run the fix please and post the latest aswMBR log

[GabboX]

So can I skip to the second step? (but I'm not sure Mbr fixed all on the whole, I switched the computer while fixing..)

[Essexboy]

Aye move to this bit now, for your ease of mind run another quick scan with aswMBR once OTL has run and post that log also


Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  

  :OTL
  O2 - BHO: (no name) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - No CLSID value found.
  O2 - BHO: (no name) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - No CLSID value found.
  [2011/10/09 12.46.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\AYkVOtPySiDoGHs
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B22oobF4pm5sJdE
  [2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\B555sWJ7dELgTqY
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\coobF33pm
  [2011/10/11 16.34.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\cqwrtS35689w
  [2011/10/11 16.34.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dBy1v2n4mW7E8Tq
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DjUUCekIBzPNx1u
  [2011/10/09 12.46.19 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DLgXjCkBzNx1v2b
  [2011/10/08 15.25.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DQ6E8R9YwUeOtPy
  [2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\dR9TqUeIrPyAuDo
  [2011/10/08 15.37.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\DUUUCekIBzPNx1u
  [2011/10/09 13.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\E4578qwrtu
  [2011/10/08 12.50.37 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\g6W8R9TwUeItPND
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gCCCwkUVrlOtx0
  [2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GJJJ7dEK8gRqh
  [2011/10/08 15.18.53 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gkVlx0c2b3n5Q6
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\gqqqYCekIBrOyA
  [2011/10/08 15.56.42 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\GXjClBzPNcA1D2n
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\hsJf9TqYeIrzNx0
  [2011/10/07 23.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\IddEEggZ9hYwkVe
  [2011/10/09 12.46.21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\kvDD3onG4am6sKL
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LA11uvS2obFpm5Q
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\lqqhYCCwkVrl
  [2011/10/08 15.44.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\LuuuvS2obF3mGsJ
  [2011/10/08 15.25.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\mSoF4pm5sQ7dK8R
  [2011/10/08 15.18.54 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NhXjClBzy1iDnFa
  [2011/10/07 23.22.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\NVVrrzO0vS2oFsJ
  [2011/10/08 15.31.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\OlBx0c1b3n4Q6
  [2011/10/08 15.31.07 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\oTZZqjYCekIrzNx
  [2011/10/09 12.58.45 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\owjjUVelOBtP0Si
  [2011/10/08 15.50.46 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\qbbF4ppmGsQJ
  [2011/10/08 12.49.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RcvnmWETYeIrOyA
  [2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmHH5sQJ7dL8RZY
  [2011/10/09 13.13.27 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rmmHHssJ7dE8gZh
  [2011/10/08 15.18.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\RxxA1uvS2ob4pGs
  [2011/10/09 13.06.12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\rXXwjUlOB
  [2011/10/09 13.19.22 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0cS2bDpG
  [2011/10/09 13.13.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SNNtxPP0uS2iDpn
  [2011/10/09 12.58.40 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\suipadfhjlz
  [2011/10/08 12.49.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\t3n5Q6W8R9TwU
  [2011/10/07 23.21.47 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\uVItPyAiD
  [2011/10/09 13.06.05 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\UXVB0134679qerx
  [2011/10/08 15.56.43 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\vFFF4pmH5sW7dLg
  [2011/10/11 16.34.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\yDFHJgYVN0235dg
  [2011/10/09 12.58.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\zWETYIOASFG9jIy
  
  :Files
  ipconfig /flushdns /c
  
  :Commands
  [purity]
  [resethosts]
  [emptytemp]
  [EMPTYFLASH]
  [CREATERESTOREPOINT]
  [Reboot]

• Then click the Run Fix button at the top
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[GabboX]

This are the logs from OTL. Now I'm gonna do MBR quick scan and post that log too.

OTL logfile created on: 14/10/2011 23.10.57 - Run 1
OTL by OldTimer - Version 3.2.29.1 Folder = D:\Documents and Settings\ignazio.SN111236160311.003\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy

3,00 Gb Total Physical Memory | 2,27 Gb Available Physical Memory | 75,80% Memory free
5,84 Gb Paging File | 5,11 Gb Available in Paging File | 87,53% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi
Drive C: | 37,80 Gb Total Space | 8,82 Gb Free Space | 23,35% Space Free | Partition Type: NTFS
Drive D: | 111,24 Gb Total Space | 1,30 Gb Free Space | 1,17% Space Free | Partition Type: NTFS
Drive F: | 1,92 Gb Total Space | 0,25 Gb Free Space | 12,82% Space Free | Partition Type: FAT
Drive G: | 372,61 Gb Total Space | 43,51 Gb Free Space | 11,68% Space Free | Partition Type: NTFS

Computer Name: SN111236160311 | User Name: ignazio | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/10/14 11.40.50 | 000,582,656 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\OTL.exe
PRC - [2011/09/14 21.04.59 | 004,611,456 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programmi\SUPERAntiSpyware\SUPERAntiSpyware.exe
PRC - [2011/08/12 01.38.07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programmi\SUPERAntiSpyware\SASCore.exe
PRC - [2011/06/15 17.33.20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft\BingBar\SeaPort.EXE
PRC - [2011/06/15 15.16.48 | 000,997,920 | ---- | M] (Microsoft Corporation) -- C:\Programmi\Microsoft Security Client\msseces.exe
PRC - [2011/06/06 12.55.28 | 000,937,920 | ---- | M] (Adobe Systems Incorporated) -- C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
PRC - [2011/04/27 15.39.26 | 000,011,736 | ---- | M] (Microsoft Corporation) -- c:\Programmi\Microsoft Security Client\Antimalware\MsMpEng.exe
PRC - [2010/04/30 19.44.23 | 000,180,269 | ---- | M] (RealNetworks, Inc.) -- C:\Programmi\File comuni\Real\Update_OB\realsched.exe
PRC - [2010/01/15 14.49.20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Programmi\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/09/22 11.51.56 | 000,339,968 | ---- | M] (UASSOFT.COM) -- C:\Programmi\Keyboard & Mouse Driver\KMProcess.exe
PRC - [2009/09/22 11.45.58 | 000,391,168 | ---- | M] (UASSOFT.COM) -- C:\Programmi\Keyboard & Mouse Driver\KMCONFIG.exe
PRC - [2009/08/31 22.14.58 | 001,823,744 | ---- | M] (UASSOFT.COM) -- C:\Programmi\Keyboard & Mouse Driver\KMWDSrv.exe
PRC - [2009/03/06 19.05.40 | 001,958,552 | ---- | M] (SmartCom) -- C:\Programmi\Nokia\Nokia Internet Modem\Wellphone2.exe
PRC - [2008/10/02 14.29.56 | 000,032,768 | ---- | M] () -- C:\WINDOWS\system32\SSLEmptyCache.exe
PRC - [2008/08/11 09.49.51 | 000,524,288 | ---- | M] () -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
PRC - [2008/08/07 08.58.04 | 000,495,616 | ---- | M] () -- C:\WINDOWS\twain_32\Samsung\CLX3170\Scan2Pc.exe
PRC - [2008/05/30 01.22.38 | 000,212,992 | ---- | M] (UASSOFT.COM) -- C:\Programmi\Keyboard & Mouse Driver\StartAutorun.exe
PRC - [2008/04/13 19.14.08 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008/03/14 02.26.20 | 000,795,936 | ---- | M] (Nuance Communications, Inc.) -- C:\Programmi\Nuance\PDF Professional 5\PdfPro5Hook.exe
PRC - [2008/03/14 02.26.14 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) -- C:\Programmi\Nuance\PDF Professional 5\PDFProFiltSrv.exe
PRC - [2007/04/27 07.40.00 | 000,206,400 | ---- | M] (SafeNet, Inc) -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
PRC - [2007/04/27 01.00.04 | 000,316,992 | ---- | M] (SafeNet, Inc.) -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
PRC - [2006/10/09 11.28.56 | 000,139,264 | ---- | M] (Nero AG) -- C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
PRC - [2006/10/09 11.22.58 | 000,884,736 | ---- | M] (Nero AG) -- C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
PRC - [2005/05/11 13.52.04 | 000,737,381 | ---- | M] (Cyberlink) -- C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
PRC - [2005/05/11 13.52.00 | 000,061,440 | ---- | M] (Cyberlink) -- C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
PRC - [2005/05/11 13.50.34 | 000,110,672 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe
PRC - [2005/05/11 13.50.14 | 000,221,266 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
PRC - [2005/05/11 13.48.02 | 000,127,118 | ---- | M] (CyberLink Corp.) -- C:\APPS\Powercinema\PCMService.exe
PRC - [2005/02/16 16.15.20 | 000,081,920 | ---- | M] (InstallShield Software Corporation) -- C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
PRC - [2005/01/07 12.01.52 | 000,049,152 | ---- | M] () -- c:\APPS\HIDSERVICE\HidService.exe
PRC - [2004/11/26 11.43.34 | 000,090,112 | ---- | M] (Ulead Systems, Inc.) -- C:\Programmi\File comuni\Ulead Systems\AutoDetector\Monitor.exe
PRC - [2004/02/26 09.52.00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) -- C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe
PRC - [2003/07/02 17.40.08 | 000,045,056 | ---- | M] ( ) -- C:\WINDOWS\system32\slserv.exe


========== Modules (No Company Name) ==========

MOD - [2011/10/14 23.04.05 | 000,052,736 | ---- | M] () -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10007.dll
MOD - [2011/10/14 23.04.04 | 000,063,488 | ---- | M] () -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10006.dll
MOD - [2011/10/12 21.27.05 | 000,117,760 | ---- | M] () -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\UIREPAIR.DLL
MOD - [2011/10/12 21.27.03 | 000,052,224 | ---- | M] () -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com\SUPERAntiSpyware\SDDLLS\SD10005.dll
MOD - [2011/08/11 13.30.21 | 000,998,400 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Management\6e563a58e6fc0117070d5b8fd59e4e1b\System.Management.ni.dll
MOD - [2011/08/11 10.57.35 | 001,840,640 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web.Services\a2392c995b1bb6b63079091259222357\System.Web.Services.ni.dll
MOD - [2011/08/11 10.57.31 | 011,800,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\40893760431f8f0dcce3e18630e45b23\System.Web.ni.dll
MOD - [2011/08/11 10.57.10 | 006,616,576 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Data\db2d84e279807592a680ef4135e9fe9a\System.Data.ni.dll
MOD - [2011/08/11 10.55.49 | 012,430,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d00cc387e462e4c3cdcd112b137cac87\System.Windows.Forms.ni.dll
MOD - [2011/08/11 10.54.04 | 001,587,200 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Drawing\7ed09623172a292eaee51e2e3bcaf784\System.Drawing.ni.dll
MOD - [2011/08/11 10.50.24 | 005,450,752 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\10154dcad2d62f226af2fd4211460a4b\System.Xml.ni.dll
MOD - [2011/08/11 10.49.54 | 000,971,264 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\77df2cd21a5b85a1605b335aa9ad9d44\System.Configuration.ni.dll
MOD - [2011/08/11 10.49.20 | 007,950,848 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\e6c79e1d71b0c9000afd7e5e439b5c54\System.ni.dll
MOD - [2011/08/11 10.48.15 | 002,933,248 | ---- | M] () -- C:\WINDOWS\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
MOD - [2011/06/15 21.42.20 | 011,490,816 | ---- | M] () -- C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\0309936a8e1672d39b9cf14463ce69f9\mscorlib.ni.dll
MOD - [2011/06/06 12.55.32 | 000,301,056 | ---- | M] () -- C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\PDFShell.ITA
MOD - [2010/05/01 17.44.51 | 000,307,200 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_it_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010/05/01 17.44.50 | 000,204,800 | ---- | M] () -- C:\WINDOWS\assembly\GAC_MSIL\System.resources\2.0.0.0_it_b77a5c561934e089\System.resources.dll
MOD - [2009/03/06 19.05.40 | 000,066,512 | ---- | M] () -- C:\Programmi\File comuni\SmartCom\DragnDropCopyHook.dll
MOD - [2009/03/06 19.05.28 | 000,543,184 | ---- | M] () -- C:\Programmi\Nokia\Nokia Internet Modem\WellphoneLib.dll
MOD - [2009/03/06 19.05.18 | 002,099,664 | ---- | M] () -- C:\Programmi\Nokia\Nokia Internet Modem\Smartcom.dll
MOD - [2008/10/02 14.29.56 | 000,032,768 | ---- | M] () -- C:\WINDOWS\system32\SSLEmptyCache.exe
MOD - [2008/08/11 09.49.51 | 000,524,288 | ---- | M] () -- C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
MOD - [2008/08/07 08.58.04 | 000,495,616 | ---- | M] () -- C:\WINDOWS\twain_32\Samsung\CLX3170\Scan2Pc.exe
MOD - [2008/06/26 04.46.07 | 001,384,520 | ---- | M] () -- C:\WINDOWS\twain_32\Samsung\CLX3170\SSOle.dll
MOD - [2008/06/26 04.45.14 | 000,367,104 | ---- | M] () -- C:\WINDOWS\twain_32\Samsung\CLX3170\NetModule.dll
MOD - [2008/06/26 04.45.06 | 000,155,648 | ---- | M] () -- C:\WINDOWS\twain_32\Samsung\CLX3170\IMFilter.dll
MOD - [2008/06/16 09.06.10 | 000,053,248 | ---- | M] () -- C:\Programmi\Keyboard & Mouse Driver\MouseHook.dll
MOD - [2008/04/13 19.13.44 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2007/12/27 16.38.58 | 000,094,208 | ---- | M] () -- C:\WINDOWS\system32\SamFaxPort.dll
MOD - [2007/08/14 03.01.17 | 000,022,723 | ---- | M] () -- C:\WINDOWS\system32\sst1cl3.dll
MOD - [2007/03/29 12.17.42 | 000,106,496 | ---- | M] () -- C:\Programmi\Keyboard & Mouse Driver\keydll.dll
MOD - [2005/05/11 13.50.34 | 000,110,672 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe
MOD - [2005/05/11 13.50.14 | 000,221,266 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
MOD - [2005/05/11 13.49.26 | 000,061,522 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLSchMgr.dll
MOD - [2005/05/11 13.49.24 | 000,184,408 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLCapEngine.dll
MOD - [2005/05/11 13.49.24 | 000,028,672 | ---- | M] () -- c:\APPS\Powercinema\Kernel\TV\CLCapSvcps.dll
MOD - [2005/05/11 13.47.40 | 000,229,458 | ---- | M] () -- c:\APPS\Powercinema\Kernel\HomeNetWorking\CLNetMedia.dll
MOD - [2005/01/07 12.01.52 | 000,049,152 | ---- | M] () -- c:\APPS\HIDSERVICE\HidService.exe
MOD - [2004/07/26 17.11.50 | 000,028,672 | ---- | M] () -- C:\Programmi\File comuni\Ulead Systems\AutoDetector\DetMethod.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] -- -- (Utilità di pianificazione di LiveUpdate automatico)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011/08/12 01.38.07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Programmi\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011/07/07 19.31.08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Programmi\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011/06/15 17.33.20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programmi\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2011/04/27 15.39.26 | 000,011,736 | ---- | M] (Microsoft Corporation) [Auto | Running] -- c:\Programmi\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc)
SRV - [2010/05/01 15.28.56 | 000,085,096 | ---- | M] (Autodesk) [On_Demand | Stopped] -- C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2010/01/15 14.49.20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Programmi\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009/08/31 22.14.58 | 001,823,744 | ---- | M] (UASSOFT.COM) [Auto | Running] -- C:\Programmi\Keyboard & Mouse Driver\KMWDSrv.exe -- (KMWDSERVICE)
SRV - [2008/11/04 01.06.28 | 000,441,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\File comuni\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2008/03/14 02.26.14 | 000,144,672 | ---- | M] (Nuance Communications, Inc.) [Auto | Running] -- C:\Programmi\Nuance\PDF Professional 5\PDFProFiltSrv.exe -- (PDFProFiltSrv)
SRV - [2007/04/27 07.40.00 | 000,206,400 | ---- | M] (SafeNet, Inc) [Auto | Running] -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe -- (SentinelProtectionServer)
SRV - [2007/04/27 01.00.04 | 000,316,992 | ---- | M] (SafeNet, Inc.) [Auto | Running] -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe -- (SentinelKeysServer)
SRV - [2006/10/26 14.03.08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/05/11 13.52.00 | 000,061,440 | ---- | M] (Cyberlink) [Auto | Running] -- C:\Programmi\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe -- (CyberLink Media Library Service)
SRV - [2005/05/11 13.50.34 | 000,110,672 | ---- | M] () [Auto | Running] -- c:\APPS\Powercinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)
SRV - [2005/05/11 13.50.14 | 000,221,266 | ---- | M] () [Auto | Running] -- c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)
SRV - [2005/01/07 12.01.52 | 000,049,152 | ---- | M] () [Auto | Running] -- c:\APPS\HIDSERVICE\HidService.exe -- (GenericHidService)
SRV - [2004/02/26 09.52.00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Auto | Running] -- C:\Programmi\File comuni\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
SRV - [2003/07/02 17.40.08 | 000,045,056 | ---- | M] ( ) [Auto | Running] -- C:\WINDOWS\System32\slserv.exe -- (SLService)


========== Driver Services (SafeList) ==========

DRV - [2011/10/14 23.01.33 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{3CF3C087-5635-40BD-A101-8E2476805F9E}\MpKsl497d9eb5.sys -- (MpKsl497d9eb5)
DRV - [2011/10/14 22.37.54 | 000,028,752 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{3CF3C087-5635-40BD-A101-8E2476805F9E}\MpKslcab8c63f.sys -- (MpKslcab8c63f)
DRV - [2011/07/22 18.27.02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programmi\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011/07/12 23.55.22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programmi\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2009/11/19 01.24.26 | 000,095,232 | R--- | M] (ATI Research Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2009/08/05 22.48.42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009/04/29 23.37.26 | 000,025,088 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFILTERx86)
DRV - [2009/04/29 23.37.26 | 000,025,088 | ---- | M] (Windows ® Codename Longhorn DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\KMWDFILTER.sys -- (KMWDFilter)
DRV - [2009/03/03 15.32.48 | 000,027,008 | ---- | M] (Icera Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nokiappo.sys -- (nokiappo)
DRV - [2009/03/03 15.32.48 | 000,019,072 | ---- | M] (Icera Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nokiacpo.sys -- (nokiacpo)
DRV - [2008/12/18 09.19.18 | 000,067,528 | ---- | M] (Aladdin Knowledge Systems Ltd.) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\eugssxp.sys -- (eugss)
DRV - [2008/12/18 09.13.18 | 000,025,680 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\eusk2par.sys -- (eusk2par)
DRV - [2008/07/11 07.05.00 | 000,092,712 | ---- | M] (SafeNet, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2008/07/11 07.05.00 | 000,037,088 | ---- | M] (SafeNet, Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (SNTNLUSB)
DRV - [2007/10/22 08.55.46 | 000,041,984 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\DgivEcp.sys -- (DgiVecp)
DRV - [2006/09/18 15.12.36 | 000,020,269 | ---- | M] (USB Smart Card Reader) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\EMVSCARD.sys -- (EMVSCARD)
DRV - [2006/01/12 21.46.28 | 000,252,928 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2005/08/22 11.02.02 | 000,043,968 | ---- | M] (Eutron) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\eusk3usb.sys -- (eusk3usb)
DRV - [2005/06/29 14.35.10 | 003,173,888 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2005/01/07 17.07.16 | 000,145,920 | ---- | M] (Windows ® Server 2003 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\Hdaudio.sys -- (HdAudAddService)
DRV - [2004/08/03 22.41.40 | 000,013,776 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\RecAgent.sys -- (RecAgent)
DRV - [2003/12/31 11.58.46 | 000,069,504 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtlnic51.sys -- (RTL8023)
DRV - [2003/08/20 17.34.50 | 000,548,952 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slntamr.sys -- (Slntamr)
DRV - [2003/07/16 12.30.26 | 000,221,736 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5)
DRV - [2003/07/02 16.26.36 | 001,301,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm)
DRV - [2003/07/02 16.24.36 | 000,086,128 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal)
DRV - [2003/07/02 16.12.52 | 000,039,348 | ---- | M] (Vireo Software) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup)
DRV - [2003/07/02 15.57.10 | 000,167,384 | ---- | M] ( ) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax)
DRV - [2002/10/24 02.00.00 | 000,017,080 | R--- | M] (Micropi Elettronica) [Kernel | Auto | Stopped] -- C:\WINDOWS\system32\drivers\CPUSB.sys -- (CPUSB)
DRV - [1997/05/30 00.00.00 | 000,021,824 | ---- | M] (Micropi Elettronica - Italia) [Kernel | Auto | Running] -- C:\WINDOWS\System32\drivers\CPWNT.SYS -- (cpwnt)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
IE - HKCU\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - No CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Programmi\McAfee\SiteAdvisor\npmcffplg32.dll File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programmi\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Programmi\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programmi\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2088: C:\Programmi\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=1.0.2.2146: C:\Programmi\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1069: C:\Programmi\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programmi\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Programmi\McAfee\SiteAdvisor


========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\gcswf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Programmi\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U20 (Enabled) = C:\Programmi\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Programmi\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Programmi\Microsoft Silverlight\4.0.60531.0\npctrl.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: RealPlayer™ G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nppl3260.dll
CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nprpjplug.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Programmi\Windows Media Player\npdsplay.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Programmi\Microsoft\Office Live\npOLW.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Programmi\Google\Chrome\Application\14.0.835.202\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Programmi\Windows Media Player\npwmsdrm.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Programmi\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Programmi\Real\RealPlayer\Netscape6\nprjplug.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Programmi\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin

O1 HOSTS File: ([2011/10/14 22.56.30 | 000,000,098 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Guida per l'accesso a Windows Live) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (CNisExtBho Class) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Programmi\File comuni\Symantec Shared\AdBlocking\NISShExt.dll File not found
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.6406.1642\swg.dll (Google Inc.)
O2 - BHO: (CNavExtBho Class) - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programmi\Norton Internet Security\Norton AntiVirus\NavShExt.dll File not found
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programmi\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (ZeonIEEventHelper Class) - {DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programmi\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Nuance PDF) - {E3286BF1-E654-42FF-B4A6-5E111731DF6B} - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O4 - HKLM..\Run: [3170 Scan2PC] C:\WINDOWS\Twain_32\Samsung\CLX3170\Scan2pc.exe ()
O4 - HKLM..\Run: [Adobe ARM] C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [AzMixerSel] C:\Programmi\Realtek\InstallShield\AzMixerSel.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [bit4id store register] C:\WINDOWS\System32\bit4cnsp.dll (bit4id srl (http://www.bit4id.com))
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows ® Server 2003 DDK provider)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [ISUSPM Startup] C:\Programmi\File comuni\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [ISUSScheduler] C:\Programmi\File comuni\InstallShield\UpdateService\issch.exe (InstallShield Software Corporation)
O4 - HKLM..\Run: [KMCONFIG] C:\Programmi\Keyboard & Mouse Driver\StartAutorun.exe KMConfig.exe File not found
O4 - HKLM..\Run: [MSC] c:\Programmi\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [Nuance PDF Professional 5-reminder] C:\Programmi\Nuance\PDF Professional 5\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] nwiz.exe /installquiet File not found
O4 - HKLM..\Run: [PCMService] c:\Apps\Powercinema\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [PDF5 Registry Controller] C:\Programmi\Nuance\PDF Professional 5\RegistryController.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PDFHook] C:\Programmi\Nuance\PDF Professional 5\PdfPro5Hook.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [Samsung PanelMgr] C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SSLEmptyCache] C:\WINDOWS\system32\SSLEmptyCache.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre6\bin\jusched.exe" File not found
O4 - HKLM..\Run: [TkBellExe] C:\Programmi\File comuni\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [Ulead AutoDetector v2] C:\Programmi\File comuni\Ulead Systems\AutoDetector\Monitor.exe (Ulead Systems, Inc.)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [Nokia Internet Modem] C:\Programmi\Nokia\Nokia Internet Modem\WellPhone2.exe (SmartCom)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe File not found
O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Programmi\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: D:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\McAfee Security Scan Plus.lnk = C:\Programmi\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O4 - Startup: D:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Tasto di scelta rapida per l'avvio di AutoCAD LT.lnk = C:\Programmi\File comuni\Autodesk Shared\acstart17.exe (Autodesk, Inc)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: ODBC = D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\csrss.exe
O8 - Extra context menu item: Aggiungi a file PDF esistente - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Aggiungi il contenuto dei collegamenti selezionati al file PDF esistente - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Aggiungi il contenuto del collegamento al file PDF esistente - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Apri con Nuance PDF Converter 5.0 - C:\Programmi\Nuance\PDF Professional 5\cnvres_ita.dll (Nuance Communications, Inc.)
O8 - Extra context menu item: Crea file PDF - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Crea file PDF dai collegamenti selezionati - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Crea file PDF dal contenuto del collegamento - C:\Programmi\Nuance\PDF Professional 5\bin\ZeonIEFavClient.dll (Zeon Corporation)
O8 - Extra context menu item: Google Sidewiki... - C:\Programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll (Google Inc.)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macr...director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {4D054067-DE3A-48F9-B19B-BCD229B9AE8D} http://www.samsungdp...X/DrPrinter.cab (PrinterHelpEtcActiveX Control)
O16 - DPF: {877E14A6-0ACF-4509-8CF3-E4A0F4ED46F4} http://supportsiss.l...onents/pdlc.cab (Postazione di Lavoro del Cittadino 3.0)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_02)
O16 - DPF: {CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_15)
O16 - DPF: {CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.5.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.m...ash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.ad...Plus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1F026B2A-18BC-41FA-9D3B-4855C93656BA}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A5FC410-9131-47A3-BC0E-370304AE95BF}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6519A8C1-B342-4041-866B-71B438D02F86}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\dssrequest - No CLSID value found
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programmi\File comuni\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programmi\File comuni\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\sacore - No CLSID value found
O18 - Protocol\Filter\application/x-internet-signup {A173B69A-1F9B-4823-9FDA-412F641E65D6} - C:\Programmi\Tiscali\Tiscali Internet\dlls\tiscalifilter.dll ()
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\File comuni\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Programmi\SUPERAntiSpyware\SASWINLO.DLL) - C:\Programmi\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O24 - Desktop Components:0 (Pagina iniziale corrente) - About:Home
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programmi\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/10/14 11.40.51 | 000,582,656 | ---- | C] (OldTimer Tools) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\OTL.exe
[2011/10/14 11.40.34 | 001,916,416 | ---- | C] (AVAST Software) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\aswMBR.exe
[2011/10/14 11.40.21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Documenti\Downloads
[2011/10/12 22.09.54 | 000,000,000 | ---D | C] -- C:\Programmi\CCleaner
[2011/10/12 22.09.50 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Avvio\Programmi\Google Chrome
[2011/10/12 21.50.51 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SUPERAntiSpyware.com
[2011/10/12 21.26.11 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\SUPERAntiSpyware.com
[2011/10/12 20.16.06 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes' Anti-Malware
[2011/10/12 20.16.00 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2011/10/12 20.16.00 | 000,000,000 | ---D | C] -- C:\Programmi\Malwarebytes' Anti-Malware
[2011/10/11 16.35.04 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Malwarebytes
[2011/10/11 13.02.45 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
[2011/10/08 09.09.19 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\TESTI
[2011/10/08 09.06.36 | 000,000,000 | ---D | C] -- C:\Programmi\SUPERAntiSpyware
[2011/10/07 23.33.21 | 000,000,000 | ---D | C] -- D:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
[2011/10/07 23.33.21 | 000,000,000 | ---D | C] -- C:\Programmi\Spybot - Search & Destroy
[2011/10/07 23.29.27 | 007,909,184 | ---- | C] (McAfee Inc.) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\stinger10.2.0.310.exe
[2011/09/19 12.53.57 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\Facebook
[2011/09/17 13.24.11 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\MEDICINA 2011
[2011/09/16 15.51.45 | 000,000,000 | ---D | C] -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\ESAMI VARESE
[2010/05/01 11.47.53 | 000,018,944 | ---- | C] ( ) -- C:\WINDOWS\System32\Implode.dll
[2010/04/30 19.21.49 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\winddx.sys
[1980/01/01 00.00.00 | 001,301,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[1980/01/01 00.00.00 | 000,548,952 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slntamr.sys
[1980/01/01 00.00.00 | 000,221,736 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[1980/01/01 00.00.00 | 000,167,384 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[1980/01/01 00.00.00 | 000,086,128 | ---- | C] ( ) -- C:\WINDOWS\System32\drivers\slnthal.sys
[1980/01/01 00.00.00 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS\System32\slserv.exe
[2 D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\*.tmp files -> D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/10/14 23.06.35 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\tasks\MP Scheduled Scan.job
[2011/10/14 23.02.33 | 000,276,202 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011/10/14 23.01.28 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/10/14 23.01.07 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/10/14 23.01.01 | 3220,754,432 | -HS- | M] () -- C:\hiberfil.sys
[2011/10/14 22.56.30 | 000,000,098 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2011/10/14 22.49.15 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/10/14 22.10.14 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/10/14 21.46.27 | 000,072,704 | ---- | M] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/10/14 11.40.50 | 000,582,656 | ---- | M] (OldTimer Tools) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\OTL.exe
[2011/10/14 11.40.31 | 001,916,416 | ---- | M] (AVAST Software) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\aswMBR.exe
[2011/10/14 11.16.50 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/10/12 22.09.55 | 000,000,575 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/10/12 22.09.50 | 000,001,668 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/10/12 21.26.15 | 000,001,531 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/10/12 20.16.08 | 000,000,649 | ---- | M] () -- D:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/10/11 12.58.42 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/10/08 00.13.53 | 000,000,103 | ---- | M] () -- D:\Documents and Settings\ignazio.SN111236160311.003\default.pls
[2011/10/08 00.09.03 | 000,000,151 | ---- | M] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2011/10/07 23.29.56 | 007,909,184 | ---- | M] (McAfee Inc.) -- D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\stinger10.2.0.310.exe
[2011/09/22 15.36.19 | 000,010,813 | ---- | M] () -- C:\WINDOWS\System32\QuickTime.qtp
[2011/09/19 22.22.27 | 000,510,854 | ---- | M] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Documenti\Ryanair_com.mht
[2 D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\*.tmp files -> D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/10/14 11.35.39 | 3220,754,432 | -HS- | C] () -- C:\hiberfil.sys
[2011/10/14 11.16.50 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2011/10/12 22.09.55 | 000,000,575 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\CCleaner.lnk
[2011/10/12 22.09.50 | 000,001,668 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2011/10/12 21.26.15 | 000,001,531 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\SUPERAntiSpyware Free Edition.lnk
[2011/10/12 20.16.08 | 000,000,649 | ---- | C] () -- D:\Documents and Settings\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011/09/19 22.22.23 | 000,510,854 | ---- | C] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Documenti\Ryanair_com.mht
[2011/08/05 17.38.00 | 000,000,000 | ---- | C] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\{2D15FA5F-9426-4F7A-8328-27556455A395}
[2011/06/26 18.18.18 | 000,000,564 | ---- | C] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\FSCache.dat
[2011/06/20 15.29.14 | 021,022,914 | ---- | C] () -- C:\Programmi\vlc-1.1.10-win32.exe
[2011/03/12 22.46.40 | 000,072,704 | ---- | C] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/02/14 19.08.42 | 000,000,141 | ---- | C] () -- D:\Documents and Settings\ignazio.SN111236160311.003\Impostazioni locali\Dati applicazioni\fusioncache.dat
[2010/12/08 11.42.07 | 000,014,849 | ---- | C] () -- C:\WINDOWS\CJ1_10.ini
[2010/12/07 19.53.11 | 000,327,680 | ---- | C] () -- C:\WINDOWS\eSINLD.dll
[2010/12/07 19.53.09 | 000,020,480 | ---- | C] () -- C:\WINDOWS\eSINLDLG.dll
[2010/12/06 13.06.20 | 000,303,104 | R--- | C] () -- C:\WINDOWS\System32\eST3snm.dll
[2010/11/22 18.39.51 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\RT2573.dll
[2010/11/22 18.39.48 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\GTW32N50.dll
[2010/11/04 20.34.26 | 000,059,916 | ---- | C] () -- C:\WINDOWS\System32\bit4cnsp-uninst.exe
[2010/10/28 19.56.48 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2010/10/23 13.06.08 | 000,000,530 | ---- | C] () -- C:\WINDOWS\System32\tx14_ic.ini
[2010/08/27 20.21.24 | 001,757,222 | ---- | C] () -- C:\WINDOWS\System32\dbcmdb32.dll
[2010/08/27 20.21.24 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\DBCDBF32.DLL
[2010/08/27 20.21.24 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\dbcmem32.dll
[2010/08/27 20.21.24 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\dbcgeo32.dll
[2010/08/27 20.21.24 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\Skeylink.dll
[2010/08/02 18.24.06 | 000,000,392 | ---- | C] () -- C:\WINDOWS\System32\winsusrm.dll
[2010/08/02 18.24.06 | 000,000,344 | ---- | C] () -- C:\WINDOWS\System32\winsusrx.dll
[2010/07/29 19.24.21 | 000,000,024 | ---- | C] () -- C:\WINDOWS\mc4hvac.ini
[2010/07/29 18.42.56 | 000,000,037 | ---- | C] () -- C:\WINDOWS\acltdrv.ini
[2010/07/29 18.42.45 | 000,000,039 | ---- | C] () -- C:\WINDOWS\progman.ini
[2010/07/29 18.28.13 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MTSTACK.INI
[2010/07/29 18.28.11 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\MTSTACK.EXE
[2010/07/15 18.36.48 | 001,765,376 | R--- | C] () -- C:\WINDOWS\System32\TKernel.dll
[2010/07/15 18.36.47 | 001,851,392 | R--- | C] () -- C:\WINDOWS\System32\TKXSBase.dll
[2010/07/15 18.36.46 | 000,290,816 | R--- | C] () -- C:\WINDOWS\System32\TKXDESTEP.dll
[2010/07/15 18.36.46 | 000,262,144 | R--- | C] () -- C:\WINDOWS\System32\TKXCAF.dll
[2010/07/15 18.36.46 | 000,054,272 | R--- | C] () -- C:\WINDOWS\System32\TKXDEIGES.dll
[2010/07/15 18.36.45 | 002,885,120 | R--- | C] () -- C:\WINDOWS\System32\TKV3d.dll
[2010/07/15 18.36.45 | 000,567,296 | R--- | C] () -- C:\WINDOWS\System32\TKVRML.dll
[2010/07/15 18.36.44 | 000,901,120 | R--- | C] () -- C:\WINDOWS\System32\TKV2d.dll
[2010/07/15 18.36.43 | 001,568,768 | R--- | C] () -- C:\WINDOWS\System32\TKTopAlgo.dll
[2010/07/15 18.36.42 | 000,909,312 | R--- | C] () -- C:\WINDOWS\System32\TKShapeSchema.dll
[2010/07/15 18.36.41 | 001,519,616 | R--- | C] () -- C:\WINDOWS\System32\TKShHealing.dll
[2010/07/15 18.36.40 | 001,097,728 | R--- | C] () -- C:\WINDOWS\System32\TKService.dll
[2010/07/15 18.36.40 | 000,106,496 | R--- | C] () -- C:\WINDOWS\System32\TKSTL.dll
[2010/07/15 18.36.39 | 001,830,912 | R--- | C] () -- C:\WINDOWS\System32\TKSTEPBase.dll
[2010/07/15 18.36.38 | 001,974,272 | R--- | C] () -- C:\WINDOWS\System32\TKSTEP.dll
[2010/07/15 18.36.38 | 000,589,824 | R--- | C] () -- C:\WINDOWS\System32\TKSTEP209.dll
[2010/07/15 18.36.38 | 000,491,520 | R--- | C] () -- C:\WINDOWS\System32\TKSTEPAttr.dll
[2010/07/15 18.36.37 | 000,925,696 | R--- | C] () -- C:\WINDOWS\System32\TKPShape.dll
[2010/07/15 18.36.37 | 000,237,568 | R--- | C] () -- C:\WINDOWS\System32\TKPrim.dll
[2010/07/15 18.36.36 | 000,761,856 | R--- | C] () -- C:\WINDOWS\System32\TKOffset.dll
[2010/07/15 18.36.36 | 000,602,112 | R--- | C] () -- C:\WINDOWS\System32\TKOpenGl.dll
[2010/07/15 18.36.35 | 001,142,784 | R--- | C] () -- C:\WINDOWS\System32\TKMath.dll
[2010/07/15 18.36.35 | 000,454,656 | R--- | C] () -- C:\WINDOWS\System32\TKMesh.dll
[2010/07/15 18.36.35 | 000,307,200 | R--- | C] () -- C:\WINDOWS\System32\TKMeshVS.dll
[2010/07/15 18.36.34 | 002,543,616 | R--- | C] () -- C:\WINDOWS\System32\TKIGES.dll
[2010/07/15 18.36.34 | 000,835,584 | R--- | C] () -- C:\WINDOWS\System32\TKLCAF.dll
[2010/07/15 18.36.33 | 000,794,624 | R--- | C] () -- C:\WINDOWS\System32\TKHLR.dll
[2010/07/15 18.36.32 | 003,448,832 | R--- | C] () -- C:\WINDOWS\System32\TKGeomBase.dll
[2010/07/15 18.36.31 | 003,072,000 | R--- | C] () -- C:\WINDOWS\System32\TKGeomAlgo.dll
[2010/07/15 18.36.30 | 000,827,392 | R--- | C] () -- C:\WINDOWS\System32\TKG3d.dll
[2010/07/15 18.36.29 | 001,576,960 | R--- | C] () -- C:\WINDOWS\System32\TKFillet.dll
[2010/07/15 18.36.29 | 000,364,544 | R--- | C] () -- C:\WINDOWS\System32\TKG2d.dll
[2010/07/15 18.36.28 | 000,294,912 | R--- | C] () -- C:\WINDOWS\System32\TKCDF.dll
[2010/07/15 18.36.28 | 000,245,760 | R--- | C] () -- C:\WINDOWS\System32\TKCAF.dll
[2010/07/15 18.36.26 | 002,502,656 | R--- | C] () -- C:\WINDOWS\System32\TKBool.dll
[2010/07/15 18.36.24 | 000,606,208 | R--- | C] () -- C:\WINDOWS\System32\TKBRep.dll
[2010/07/15 18.36.23 | 001,249,280 | R--- | C] () -- C:\WINDOWS\System32\TKBO.dll
[2010/07/15 18.36.22 | 000,376,832 | R--- | C] () -- C:\WINDOWS\System32\PTKernel.dll
[2010/06/26 13.23.04 | 000,060,984 | ---- | C] () -- D:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\FontCache3.0.0.0.dat
[2010/05/25 19.19.18 | 000,906,784 | ---- | C] () -- C:\WINDOWS\System32\Owl52f.dll
[2010/05/25 19.19.17 | 000,297,680 | ---- | C] () -- C:\WINDOWS\System32\Bocof.dll
[2010/05/22 14.46.06 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2010/05/22 13.02.18 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/05/08 11.14.43 | 002,183,470 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010/05/04 22.23.19 | 000,000,010 | ---- | C] () -- C:\WINDOWS\WinInit.ini
[2010/05/02 14.48.09 | 000,001,364 | ---- | C] () -- C:\WINDOWS\LMAAG2DD.ini
[2010/05/01 19.05.40 | 000,172,032 | ---- | C] () -- C:\WINDOWS\System32\SecSNMP.dll
[2010/05/01 19.05.33 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\SamFaxPort.dll
[2010/05/01 19.05.28 | 000,000,116 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2010/05/01 19.05.23 | 000,023,040 | ---- | C] () -- C:\WINDOWS\System32\irisco32.dll
[2010/05/01 19.04.06 | 000,479,232 | ---- | C] () -- C:\WINDOWS\ssndii.exe
[2010/05/01 19.03.08 | 000,022,723 | ---- | C] () -- C:\WINDOWS\System32\sst1cl3.dll
[2010/05/01 18.59.56 | 000,110,592 | R--- | C] () -- C:\WINDOWS\WiaInst.exe
[2010/05/01 18.59.54 | 000,138,240 | R--- | C] () -- C:\WINDOWS\System32\SaXPUIEx.dll
[2010/05/01 18.59.53 | 000,116,736 | R--- | C] () -- C:\WINDOWS\System32\SaXPIPH.dll
[2010/05/01 18.59.53 | 000,087,040 | R--- | C] () -- C:\WINDOWS\System32\SaXPSTI.dll
[2010/05/01 18.59.52 | 000,139,776 | R--- | C] () -- C:\WINDOWS\System32\SaXPEH.dll
[2010/05/01 18.59.51 | 000,138,752 | R--- | C] () -- C:\WINDOWS\System32\SaXPWIA.dll
[2010/05/01 18.12.26 | 000,015,516 | R--- | C] () -- C:\WINDOWS\CJ2_10.ini
[2010/05/01 18.12.26 | 000,000,037 | R--- | C] () -- C:\WINDOWS\V_eS205SC.ini
[2010/05/01 18.08.37 | 000,274,432 | ---- | C] () -- C:\WINDOWS\System32\ESTsnmp.dll
[2010/05/01 18.08.06 | 000,024,576 | ---- | C] () -- C:\WINDOWS\SPortLG.dll
[2010/05/01 18.08.05 | 000,286,720 | R--- | C] () -- C:\WINDOWS\eSTsnmp.dll
[2010/05/01 17.29.23 | 000,017,072 | ---- | C] () -- C:\WINDOWS\System32\serv.dll
[2010/05/01 16.54.34 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\acdbres.dll
[2010/05/01 15.10.50 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2010/05/01 15.10.44 | 000,887,724 | R--- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2010/05/01 15.10.44 | 000,197,982 | R--- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2010/05/01 15.10.44 | 000,000,003 | R--- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2010/05/01 11.55.09 | 000,000,548 | ---- | C] () -- C:\WINDOWS\EvvivaRG.ini
[2010/05/01 11.55.05 | 000,000,600 | ---- | C] () -- C:\WINDOWS\NEXTRG.INI
[2010/05/01 11.54.16 | 000,000,264 | ---- | C] () -- C:\WINDOWS\FinsonLiveUpdate.ini
[2010/04/30 20.08.56 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2010/04/30 19.49.26 | 000,198,144 | ---- | C] () -- C:\WINDOWS\System32\_psisdecd.dll
[2010/04/30 19.49.07 | 000,000,424 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010/04/30 19.45.26 | 000,000,604 | ---- | C] () -- C:\WINDOWS\System32\SETUPPC.INI
[2010/04/30 19.38.23 | 000,007,585 | ---- | C] () -- C:\WINDOWS\HDReg.ini
[2010/04/30 19.29.48 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2010/04/30 19.21.49 | 000,475,136 | ---- | C] () -- C:\WINDOWS\System32\SLLights.dll
[2010/04/30 19.21.49 | 000,376,832 | ---- | C] () -- C:\WINDOWS\System32\slmh.exe
[2010/04/30 19.21.49 | 000,167,936 | ---- | C] () -- C:\WINDOWS\System32\minirec.exe
[2010/04/30 19.21.49 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\amr_cpl.dll
[2010/04/30 19.21.49 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\SLMOHServ.dll
[2010/04/30 19.21.49 | 000,061,440 | ---- | C] () -- C:\WINDOWS\SmCfg.exe
[2009/11/24 15.58.10 | 000,000,213 | ---- | C] () -- C:\WINDOWS\V_eSWIA.ini
[2009/11/24 15.57.27 | 000,000,254 | ---- | C] () -- C:\WINDOWS\V_eSTRS.ini
[2009/11/24 15.57.04 | 000,000,248 | ---- | C] () -- C:\WINDOWS\V_eSFD.ini
[2009/11/24 15.54.51 | 000,000,251 | ---- | C] () -- C:\WINDOWS\V_eSABV.ini
[2009/10/15 14.51.26 | 000,270,336 | ---- | C] () -- C:\WINDOWS\System32\eSABLD.dll
[2009/10/09 13.45.02 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\eSABLDLG.dll
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_RS.ini
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_FD.ini
[2009/09/10 19.59.10 | 000,003,990 | ---- | C] () -- C:\WINDOWS\COMM_AB.ini
[2009/08/30 19.15.48 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\eSTsnv3.dll
[2009/08/26 18.45.52 | 000,001,577 | ---- | C] () -- C:\WINDOWS\System32\eSABLD.bin
[2008/10/02 14.29.58 | 000,000,244 | ---- | C] () -- C:\WINDOWS\System32\SSLEmptyCache.ini
[2008/10/02 14.29.56 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\SSLEmptyCache.exe
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_RS.ini
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_FD.ini
[2008/01/15 21.13.38 | 000,000,422 | ---- | C] () -- C:\WINDOWS\APL_AB.ini
[2007/03/12 18.49.21 | 000,000,085 | -HS- | C] () -- D:\Documents and Settings\All Users\Dati applicazioni\.zreglib
[2006/06/16 18.41.00 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\ClearLogonCredentials.dll
[2005/10/21 15.28.56 | 000,005,968 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2005/05/12 14.24.00 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini
[2004/09/03 12.11.59 | 000,000,825 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2004/09/03 11.59.47 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2004/09/03 11.52.31 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2004/09/03 11.46.42 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2004/09/03 11.45.07 | 000,575,056 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2004/09/03 11.37.03 | 000,490,164 | ---- | C] () -- C:\WINDOWS\System32\perfh010.dat
[2004/09/03 11.37.03 | 000,300,212 | ---- | C] () -- C:\WINDOWS\System32\perfi010.dat
[2004/09/03 11.37.03 | 000,084,926 | ---- | C] () -- C:\WINDOWS\System32\perfc010.dat
[2004/09/03 11.37.03 | 000,034,004 | ---- | C] () -- C:\WINDOWS\System32\perfd010.dat
[2004/09/03 11.36.44 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004/09/03 11.36.41 | 000,441,996 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004/09/03 11.36.41 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004/09/03 11.36.41 | 000,071,932 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004/09/03 11.36.41 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004/09/03 11.36.40 | 000,004,541 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004/09/03 11.36.38 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004/09/03 11.36.36 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2004/09/03 11.36.28 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004/09/03 11.36.28 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004/09/03 11.36.20 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004/09/03 11.36.12 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2003/04/01 11.49.16 | 000,005,360 | ---- | C] () -- C:\WINDOWS\System32\OUTLPERF.INI
[1980/01/01 00.00.00 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\slextspk.dll
[1980/01/01 00.00.00 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\SLGen.dll
[1980/01/01 00.00.00 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\coinst.dll
[1980/01/01 00.00.00 | 000,024,576 | ---- | C] () -- C:\WINDOWS\slrundll.exe

========== LOP Check ==========

[2011/02/14 19.06.14 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Aermec
[2008/02/18 19.44.57 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Autodesk
[2008/12/24 13.42.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\AVerTV
[2009/12/29 20.06.04 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\clp
[2009/12/28 12.13.12 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Common Toolkit Suite
[2008/12/30 13.17.09 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Downloaded Installations
[2007/03/12 18.49.36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Elaborate Bytes
[2010/05/01 17.08.56 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Electro Graphics
[2009/07/21 18.11.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Installations
[2010/03/12 19.27.03 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Lombardia Integrata
[2009/03/21 14.41.24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\mc4 software
[2009/11/14 14.27.18 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Mc4Software
[2008/12/30 11.25.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Nokia
[2008/05/18 18.27.31 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Nuance
[2008/12/30 13.22.26 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\PC Suite
[2007/01/05 19.03.15 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Pinnacle
[2007/01/05 18.37.21 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Pinnacle Studio
[2008/05/18 18.34.55 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\ScanSoft
[2009/12/02 19.56.44 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\SDProget
[2008/02/29 01.49.36 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\SmartSound Software Inc
[2009/06/19 19.47.38 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Startup Manager
[2010/05/07 20.49.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\TEMP
[2005/11/24 22.22.01 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\Ulead Systems
[2008/05/18 18.25.32 | 000,000,000 | ---D | M] -- D:\Documents and Settings\All Users\Dati applicazioni\zeon
[2011/05/10 18.37.16 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Autodesk
[2011/04/28 22.22.28 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\ScanSoft
[2011/09/16 17.58.52 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\SDProget
[2011/08/03 21.50.41 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Ulead Systems
[2011/02/15 17.42.24 | 000,000,000 | ---D | M] -- D:\Documents and Settings\ignazio.SN111236160311.003\Dati applicazioni\Zeon
[2011/10/14 23.06.35 | 000,000,416 | -H-- | M] () -- C:\WINDOWS\Tasks\MP Scheduled Scan.job

========== Purity Check ==========



========== Alternate Data Streams ==========

@Alternate Data Stream - 119 bytes -> D:\Documents and Settings\All Users\Dati applicazioni\TEMP:DFC5A2B2
@Alternate Data Stream - 109 bytes -> D:\Documents and Settings\All Users\Dati applicazioni\TEMP:A8ADE5D8

< End of report >

Attached Files

•  OTL.Txt   119.81KB   124 downloads
•  Extras.Txt   56.03KB   228 downloads

[GabboX]

This is the log I got by aswMBR scan .

aswMBR version 0.9.8.986 Copyright© 2011 AVAST Software
Run date: 2011-10-14 23:19:01
-----------------------------
23:19:01.421 OS Version: Windows 5.1.2600 Service Pack 3
23:19:01.421 Number of processors: 1 586 0x401
23:19:01.421 ComputerName: SN111236160311 UserName: ignazio
23:19:01.718 Initialize success
23:20:27.390 AVAST engine defs: 11101401
23:22:22.328 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
23:22:22.328 Disk 0 Vendor: ST3160023AS 3.00 Size: 152627MB BusType: 3
23:22:24.328 Disk 0 MBR read successfully
23:22:24.343 Disk 0 MBR scan
23:22:24.375 Disk 0 Windows XP default MBR code
23:22:24.375 Disk 0 scanning sectors +312576705
23:22:24.421 Disk 0 scanning C:\WINDOWS\system32\drivers
23:22:41.328 Service scanning
23:22:41.656 Service MpKsl497d9eb5 D:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Microsoft Antimalware\Definition Updates\{3CF3C087-5635-40BD-A101-8E2476805F9E}\MpKsl497d9eb5.sys **LOCKED** 32
23:22:42.250 Modules scanning
23:22:46.796 Disk 0 trace - called modules:
23:22:46.812 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
23:22:46.812 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8aff1030]
23:22:47.156 3 CLASSPNP.SYS[f7547fd7] -> nt!IofCallDriver -> \Device\00000091[0x8afeff18]
23:22:47.156 5 ACPI.sys[f735e620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8aff1940]
23:22:47.343 AVAST engine scan C:\WINDOWS
23:22:57.921 AVAST engine scan C:\WINDOWS\system32
23:26:22.578 AVAST engine scan C:\WINDOWS\system32\drivers
23:26:43.375 AVAST engine scan D:\Documents and Settings\ignazio.SN111236160311.003
23:29:32.203 AVAST engine scan D:\Documents and Settings\All Users
23:35:17.484 Scan finished successfully
23:35:30.421 Disk 0 MBR has been saved successfully to "D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\MBR.dat"
23:35:30.421 The log file has been saved successfully to "D:\Documents and Settings\ignazio.SN111236160311.003\Desktop\aswMBR.txt"

Attached Files

•  aswMBR.txt   2.07KB   133 downloads

[Essexboy]

OK that now shows a clean MBR

What are your current problems ?

Please download Malwarebytes' Anti-Malware

Double Click mbam-setup.exe to install the application.

• Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.
• The scan may take some time to finish, so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.

[GabboX]

Ok, I'll do it. Huge thanks for your support.
Right now my pc seems ok
Listen, my dad noticed yesterday his antivirus blocked on scanning a particular file (now I don't remember which), and only yesterday some software weren't working.
Would you suggest me do a MBR scan? but I'm sure he has no malware.