Punto informatico Network
Login Esegui login | Non sei registrato? Iscriviti ora (è gratuito!)
Username: Password:
  • Annuncio Pubblicitario

dialer o non dialer ??

Un virus si è intromesso nel tuo computer? Vuoi navigare in tutta sicurezza? Sono sicure le transazione online? Come impedire a malintenzionati di intromettersi nel tuo pc? Come proteggere i tuoi dati? Qui trovi le risposte a queste ed altre domande

Re: dialer o non dialer ??

Messaggioda Malla » lun mar 09, 2009 3:23 pm

3° parte

c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base584c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base585c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base586c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base587c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base588c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base589c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base590c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base591c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base592c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base593c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base594c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base595c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base596c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base597c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base598c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base599c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base600c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base601c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base602c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base603c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base604c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base605c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base606c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base607c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base608c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base609c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base610c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base611c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base612c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base613c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base614c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base615c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base616c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base617c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base618c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base619c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base620c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base621c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base622c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base623c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base624c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base625c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base626c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base627c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base628c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base629c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base630c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base631c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base632c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base633c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base634c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base635c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base636c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base637c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base638c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base639c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base640c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base641c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base642c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base643c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base644c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base645c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base646c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base647c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base648c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base649c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base650c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base651c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base652c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base653c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\base999.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\black.lst
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ca001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ca002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ca003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\chuka.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\daily-ec.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\daily-ex.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\daily.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\dailyc.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\eicar.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\engine.cfg
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\engine.dt
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext001c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext002c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext003c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext004.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext004c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext005.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext005c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext006.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext006c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext007.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext007c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext008.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext008c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext009.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext009c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext010c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext011c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext012c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext013c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext014c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext015c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext016c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext017c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext018c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext019c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext020c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext021c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext022c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext023c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext024c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext025c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext026c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext027c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext028c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext029c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext030c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext031c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext032c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext033c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext034c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext035c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext036c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext037c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext038c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext039c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext040c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext041c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext042c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext043c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext044c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext045c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext046c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext047c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext048c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext049c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext050c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext051c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext052c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext053c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext054c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext055c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext056c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext057c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext058c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext059c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext060c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext061c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext062c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext063c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext064c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext065c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext066c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext067c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext068c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext069c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext070c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext071c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext072c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext073c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext074c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext075c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext076c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext077c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext078c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext079c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext080c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext081c.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ext999.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\fa.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\fa001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen004.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen005.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen006.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\gen999.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\kavset.xml
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\kernel.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krn001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krn002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krn003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krn004.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krn005.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krndos.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnengn.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnexe.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnexe32.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krngen.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnjava.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnmacro.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnun001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnun002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnun003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\krnun004.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\mail.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\ocr.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\sfdb.dat
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\smart.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp000.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp001.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp002.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp003.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp004.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp005.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp006.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp007.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp008.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp009.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp010.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp011.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp012.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp013.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp014.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp015.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp016.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp017.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp018.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp019.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp020.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp021.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp022.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp023.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp024.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp025.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp026.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp027.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp028.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp029.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp030.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp031.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp032.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp033.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp034.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp035.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp036.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp037.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp038.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp039.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp040.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp041.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp042.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\unp043.avc
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\bases\verdicts.ini
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\data\master.xml
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\engine\data\updcfg.xml
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\packages\kos-bin-winnt-engine.jar
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\packages\kos-bin-winnt-redist.jar
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\packages\kos-bin-winnt.jar
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\packages\kos-extras.jar
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\product.conf
c:\documents and settings\Paolo\Impostazioni locali\temp\jkos-Paolo\update.conf
c:\documents and settings\Paolo\Impostazioni locali\temp\jupdate1.5.0.xml
c:\documents and settings\Paolo\Impostazioni locali\temp\jusched.log
c:\documents and settings\Paolo\Impostazioni locali\temp\Korean.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\+Xx9pzYygFNtW74zUPRyLrFPZtw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\0uIuGfeKYgwBBeQ8dqoU3Z2FAPiI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\1GHS4STmyna40kh1ArjimaX14KI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\2Esb3G0tcZ0vIMFVcj6yvKhmDDk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\2EslL4Sq32F8l8y2+fvDG7kqFux8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\2FGJuce5qWQeTU5toKO8vvArvEF8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\2FTPQCRmNtSVbA16TN3FP2wgC9Sc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\2FY9nvlKdlG2rTqHvqJq60o91z44=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\37TR2F3YwjU6fFz5I1B7VUOAMwkY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\3Ccachedsoap id=22-15302628622 2F3E
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\3Ccachedsoap id=22-179991927222 2F3E
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\3Ccachedsoap id=22167908504322 2F3E
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\3Ccachedsoap id=22189882631722 2F3E
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\3GPeAM9S5VzDgbCYX6Yj5egnDGw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\47Vj+2SBYFr2UyXK5z5h2YlCCCo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\495YxECpHasHgliUWQrJ6lM2FYO0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\4U8pQbTmrj2vojj8Y1J1INs3iwg=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\5cqpCpOsMXEAieRZelrFpw5SAwc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\5zCGR4QNToq5rkH35Mp2Y7bXU9s=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\6MKjJUU45w78jKiAErAqF8kq2Fqg=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\75JyvJWalpZHZBCrpC5MhWOIjuU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\7pFFNjhNknkz2F6u1N9mUxQ6+fng=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\85zOxUg3z6AqnFsvbBTDtv4Ahi0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\8aN3iDPwBzSipADwhyAzKpaLBi8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\8DcOYIAr0hSWM+z38W+GLh6AvSI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\8iZuVPFGuWZQ2DdHYKKhIozL2JM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\9AlbHjA8lY12Tk4ldejZ+h+OOkA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\9lumaNVg8aRnyikluKT7Ov5QZCE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\aEf9NvQjxPoknYAlZzQv2F4glREk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\aG4AnFqDa2TNMYwIBzQ4P5SL8DI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\aGlrqTGz1XQViF2F73lSLOcXK6m4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ajAsJCWCIBi2n57rDoGtxYL5sRA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\AlUl0laMNT2FgrHdq6AfM6k4elGE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\b0wCgMjlC2FNAIlj1m8W8zXV7aug=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\bamh3rYOohTi7EI2NSAr8H3J8Y8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\bcD2FBSSPVUXVyGNRvW6I4oUzyH4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\BfrebdkX+yYyxsSPgL963HmG1yY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\bpqhfL5Ak4m2Fyqv8FI+U0Mz07SY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\BrU3nJ4WHTsHuAtmz1lnNmxy4X4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\CIzdDE0dYkBAjAuj7WiSxbUjTqU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ctMpcz4ENu02Lffg1oroLljdUtY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\D0Noo3ig9UMpoZy9KfI7DXOfoOo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\DAlVBMYeJULhPVAS4g2FnYVGr0vw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\dAzxbOgWJ0qi5LQalXfcYZyUhFw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\dEG67Igi43gBODC3XZ3cMHMldqQ=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\dk3koSvFqXZdJjkZGKkLGBcs3UE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\dUC1pMMhs8tzQ3IMoFdymoTAO2FE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\e2ehG1Mb6U87KXg2Tmwb2FBCZfHM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\EcuwfON5t2F2CcKABvZwLaCxcXbc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\eDTci2GUe9QrhV1bej6fgFIgQdI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\F8ti32FOjax2FOCGiJ9apeJ9ZyERI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\FiNyNMBbbqdkpI2FfaIcv+Vru9QA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\FMmGO8BN8x6pcsdKD1IRWvOL2FBE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\GQiiaInp5+Rj72F70fjA3W6VngHI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\gvJsKY44Npnq5U6t76Kjhc2Zcp0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\GvSen5ZOhTFqqYO2L2FA+18lSDjI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\hgkGlPBSOr1Y8NqauVPEjnqu1WI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\HuFySSJwrvbhZQ2FZz2CZII23cuY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\i33g+g3D9GOYLWtO0WLddYqrJtQ=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\Iff+QS866RhE9ZfH1o5eYRUTkjU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\Ig5B74wDUosXOM22Fy3PW8rzQjvo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\iKi4w2FpZbMb1UqoqnBeO63Nak7s=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\JlLb5ZYLnxRXgOc3dOA39ohLPps=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\jMED2hAB9WWjdKQWJxMlp3AZAH4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\jvBXzMKwGmhRxRxuXkl7+PCSNrU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\JZu8J+ZLqrJVu2FWGAlYmGA0+l+g=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\K0TJeMoeotjVOgyoE3ekoUQbeRs=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\kVknbzMX3qbV5ezil2FKW2cMdzGA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\kY3z5P2xiLiXkhXr8+YzDMSGOPI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\LaJCDTxGtehz0D1hf5KVvoaehxA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ld6D0M8VwPZ2Fi1QPH+GTDJvSwv8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\LR2FzJgICMwRoWB1umhsr10n1nzw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\lzUYsBvIBYblcxN923y6SndXEVE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\M2FEk6qUuswpYaeKwd9+Mj7zqb7w=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\mH1ZAGak2F2FLHU4qFP71pf2F4x8HE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\MHpNDMDmDXaNE9ELuS3q6DRvdfI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\n42ExCY45hQyzyZ39AC7aZmP3j8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\no+CYGiH3g6j9pB3NwvWIpXo6Zo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\NquG7X2TbHeVRAYiWlXqpx8bSTs=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\NurEpPRaLTchgdl2VY8LPhen4LQ=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\nw1XD9E7fZy9fS0hD7ZngJ2ZROk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\nwjj4kYzcT6lAxzlKAS8nQJWBms=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\o7FDuFnhKRGK+MhUsoW5vkcLCs4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\otK8zOM2kJxEjbEksg6bpLUvGho=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\pdBFvD1wSvf3NYI92nvUQVhJ0PY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\PfVZC9e12FEbmzrqsTmRuRGMvHjU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\PqBbfkuGZPOlsCey8iwimwfpRZw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\PRfs5VzLZhy7hhrlFAaMQoSBLDU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\PWF6FC1KHdE5O2FPEkWWR1OcBsls=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\qf28Z2Hp1X8M+FIfk8aFCz3j4o4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\qGf7n+0tDDpI9jHVrtNQtCZrWKk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\Qq7vW5Z4ARAzw3A3hc8Cj131ilA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\qTA1JVfVhZjalajylAv3SgAqSeI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\rGVfRXI5Ch8v6btC2IUMaODBEzM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\RjZ4gPGaItHIGQvfWVf93to8Wqw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\rrt8cBKURPeXRtiD459Uv+t3m2FU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\S+c8gyL8O5ZxTtEamXVEcWNlWPg=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\SB54XxrZGUyinw3Nj7uy1IyKCng=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\SLBl5SxNSlJc+1d1oeixR2aAqVs=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\SwRyPHcURzEY612M8yz00ufVI6s=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\SwtqC1WrbdoQTafMYZcBHwUUQ+s=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\t7ISkUrNGI0VGsG0gFDY8mFO2IY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\TC73FGAuKVNbxaMSx4BWFG1OXRM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\tD0uRHCIM92F5vvefeKN0eqaPmv0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\TkA16wde2FeZauqn1Ap+2Fpp6Hjmw=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\tSMP1Bo8yduuriYJAJ+v98RBXEQ=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\TWyuDuGnh2FfQynaHN6Bd3YrMSbY=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\u6mbBHzZStLGuH9xzRaD6tDSrf8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ubzoMyP816jbJWA07yjxENEUwng=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\UDA1S23atgaNxk6UAjFveFQO4B8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\UkKBiuw4GitLd05C+IlvVV6DMc0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\vIdcOSlGLYaM5qvpCrgVwQ52bOM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\vjQfDm8LXt96+a9sBgTIwNiZ9hA=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\vn9xeZgMIeXgzIQzN4nY+7NeOSk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\VOiCOo9yjYbP2JvqMKdXagPp+6o=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\vPAnN251WARcT9Ik35rj+DnW820=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\W2VI72FySIGryRYtTn1x54yLDp2U=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\wHvDQp4XOdVPzFV9vlUGD6yjYSM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\WkSrPxTcHuSPzvpl9luYr8ilwZM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\WLLhv99mhLozE24Py3mb3PfxVsU=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\WR5fRTALMKuJdNYhGdrnd6HE2FI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\wUOrvaoLVuxezeXarhKFKjBvrf8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\X26Ld9GtvA9POajj9J18w9RkQiI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\x9ao2FkbqdYHS6FXSflRlZxnxbUc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\X9hg5G8Mva2FRgtpMx4LLyPwCErg=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\XDgtDtkM3ZjDRkLrE79Ucs0AZOI=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\xkTG2i9IYDH7dqjeKUjfZ3exbLo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\XUWrl2ji3rml7ilyco+2mGivlNM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\XuYV7yyhPlO2MNa64lmn2FNBT62g=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\XwCey4zBKwgMbUaF45dnDYTK22Fc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\XxmvswULPLiyGftq97M6BG16G00=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\y2FcvqvvhplJkFtgeaEKd4Grjha0=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\y8EJGMv+PDWjSHxiwS01K1YXk5Q=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\yCnK3efk2l97lckt1n2FKqlii7y8=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\yiIBaoEtnzRp21hl+HFzSpVtTCo=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\yN9dMUxbNl7GI4msPIIIj9Wa4yE=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\yPP6fiq8GM2FTDP6Tpgvsvhxc3W4=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ysqi0puM01upoXLDKi9EMrK7ujk=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZcePpZxd64ZVKS7WbRAQPlX0iQg=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZI1ZY4LrulgtILUCuB9CxpJV95g=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZLAgRfr7X1Zs3sh1f766jWz1MBQ=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\zNqiDzj83m6FtSRi5aagPsRhGkc=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZsxKyFuhM1oK0g3ZFhhHEkoEI6Y=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZTbE6J8kl20dzoFo9bmIlpOOF90=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\Zx1Z9BIHVXrguDv9hJ2Fa6yNHeaM=
c:\documents and settings\Paolo\Impostazioni locali\temp\MessengerCache\ZxAxoagqjocbdgH5ew5XJ12bFaU=
c:\documents and settings\Paolo\Impostazioni locali\temp\Norwegian.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Polish.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Portuguese(Brazil).bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Portuguese.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\r1041128814.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r1084718123.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r1256343138.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r1779259578.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r1820234343.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r1884316438.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2195395643.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2296071248.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2320156160.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2413700947.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2680107574.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2800501982.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2825976331.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2923901266.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r2937084588.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r3165713550.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r3282391647.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r332352452.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r3324710828.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r3455606741.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r3978185273.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r4009374743.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r4029320460.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r4238592210.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r4276777237.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r647959513.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r746222800.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r945837091.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\r967257973.exe
c:\documents and settings\Paolo\Impostazioni locali\temp\Russian.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\SimChin.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Spanish.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\SWEDISH.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Thai.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\TradChin.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\Turkish.bin
c:\documents and settings\Paolo\Impostazioni locali\temp\TWAIN.LOG
c:\documents and settings\Paolo\Impostazioni locali\temp\Twain001.Mtx
c:\documents and settings\Paolo\Impostazioni locali\temp\Twunk001.MTX
c:\documents and settings\Paolo\Impostazioni locali\temp\Twunk002.MTX
c:\documents and settings\Paolo\Impostazioni locali\temp\VBE\MSForms.exd
c:\documents and settings\Paolo\Impostazioni locali\temp\VBE\RefEdit.exd
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn feed 0
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn update
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.msn.mymsn.btn upgrade status
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn feed 0
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn feed 1
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn feed 2
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.windowslive.addbtn.btn upgrade status
c:\documents and settings\Paolo\Impostazioni locali\temp\WLTB Custom Button Feeds\microsoft.windowslive.news.btn upgrade status

.
((((((((((((((((((((((((( Files Creati Da 2009-02-09 al 2009-03-09 )))))))))))))))))))))))))))))))))))
.

2009-03-07 14:27 . 2009-03-07 14:27 54,156 --ah----- c:\windows\QTFont.qfn
2009-03-07 14:27 . 2009-03-07 14:27 1,409 --a------ c:\windows\QTFont.for
2009-02-17 19:56 . 2009-02-17 19:56 <DIR> d-------- c:\programmi\Malwarebytes' Anti-Malware
2009-02-17 19:56 . 2009-02-17 19:56 <DIR> d-------- c:\documents and settings\Paolo\Dati applicazioni\Malwarebytes
2009-02-17 19:56 . 2009-02-17 19:56 <DIR> d-------- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2009-02-17 19:56 . 2009-01-04 18:38 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys
2009-02-17 19:56 . 2009-01-04 18:38 15,504 --a------ c:\windows\system32\drivers\mbam.sys
2009-02-17 19:53 . 2009-02-17 19:53 <DIR> d-------- c:\programmi\CCleaner
2009-02-11 12:19 . 2009-02-11 12:19 <DIR> d-------- c:\programmi\Direct MIDI to MP3 Converter

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-09 10:01 14,348 ----a-w c:\windows\system32\nerocheck.exe
2009-03-09 09:53 --------- d-----w c:\programmi\Mozilla Thunderbird
2009-03-08 21:32 --------- d-----w c:\documents and settings\Papa\Dati applicazioni\Skype
2009-03-08 16:40 --------- d-----w c:\documents and settings\Papa\Dati applicazioni\skypePM
2009-03-08 11:50 --------- d-----w c:\documents and settings\Ivan\Dati applicazioni\Skype
2009-03-08 11:29 --------- d-----w c:\documents and settings\Ivan\Dati applicazioni\skypePM
2009-03-08 00:09 --------- d-----w c:\documents and settings\Paolo\Dati applicazioni\Skype
2009-03-07 23:00 --------- d-----w c:\documents and settings\Paolo\Dati applicazioni\skypePM
2009-02-26 13:37 --------- d-----w c:\documents and settings\Mamma\Dati applicazioni\Skype
2009-02-26 13:23 --------- d-----w c:\documents and settings\Mamma\Dati applicazioni\skypePM
2009-02-24 11:49 --------- d-----w c:\programmi\File comuni\Symantec Shared
2009-02-16 10:48 --------- d-----w c:\programmi\Google
2009-02-16 10:37 --------- d---a-w c:\documents and settings\All Users\Dati applicazioni\TEMP
2009-02-16 10:35 --------- d-----w c:\programmi\metal gear solid
2009-02-16 10:32 --------- d--h--w c:\programmi\InstallShield Installation Information
2009-01-30 16:11 --------- d-----w c:\documents and settings\All Users\Dati applicazioni\nView_Profiles
2009-01-29 11:43 --------- d-----w c:\programmi\File comuni\Skype
2009-01-29 11:43 --------- d-----w c:\documents and settings\All Users\Dati applicazioni\Skype
2009-01-27 18:13 --------- d-----w c:\documents and settings\All Users\Dati applicazioni\Symantec
2009-01-24 21:01 --------- d-----w c:\programmi\Norton Internet Security
2009-01-24 21:00 806 ----a-w c:\windows\system32\drivers\SYMEVENT.INF
2009-01-24 21:00 60,808 ----a-w c:\windows\system32\S32EVNT1.DLL
2009-01-24 21:00 124,464 ----a-w c:\windows\system32\drivers\SYMEVENT.SYS
2009-01-24 21:00 10,635 ----a-w c:\windows\system32\drivers\SYMEVENT.CAT
2009-01-24 21:00 --------- d-----w c:\programmi\Symantec
2009-01-24 20:58 64,512 ----a-w c:\windows\system32\dllcache\ctfmon.exe
2009-01-24 20:58 64,512 ----a-w c:\windows\system32\ctfmon.exe
2008-12-12 17:28 3,088,384 ----a-w c:\windows\system32\dllcache\mshtml.dll
2008-12-11 11:57 333,184 ----a-w c:\windows\system32\dllcache\srv.sys
1993-02-10 12:39 67,855,914 ----a-w c:\programmi\Microsoft Office.rar
.

((((((((((((((((((((((((((((( SnapShot@2009-02-23_21.51.09,50 )))))))))))))))))))))))))))))))))))))))))
.
- 2007-10-25 16:42:45 8,489,472 ----a-w c:\windows\system32\dllcache\shell32.dll
+ 2008-07-03 13:02:42 8,489,984 ----a-w c:\windows\system32\dllcache\shell32.dll
- 2007-10-25 16:42:45 8,489,472 ----a-w c:\windows\system32\shell32.dll
+ 2008-07-03 13:02:42 8,489,984 ----a-w c:\windows\system32\shell32.dll
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SmpcSys"="c:\apps\SMP\SmpSys .exe" [2009-03-09 14348]
"MsnMsgr"="c:\programmi\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5674352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-09-07 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-09-07 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-09-07 455168]
"ehTray"="c:\windows\ehome\ehtray.exe" [2005-08-17 64512]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-04-27 7573504]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-04-27 86016]
"SunJavaUpdateSched"="c:\programmi\Java\jre1.5.0_04\bin\jusched.exe" [2009-03-09 14348]
"Vade Retro Outlook Express"="c:\progra~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" [2004-10-04 310272]
"DetectorApp"="c:\programmi\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe" [2009-03-09 14348]
"ccApp"="c:\programmi\File comuni\Symantec Shared\ccApp.exe" [2006-12-14 52840]
"URLLSTCK.exe"="c:\programmi\Norton Internet Security\UrlLstCk.exe" [2008-11-26 14348]
"EPSON Stylus CX3200"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2002-07-01 74752]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2006-11-08 98304]
"NeroCheck"="c:\windows\system32\\NeroCheck.exe" [2009-03-09 14348]
"DAEMON Tools-1033"="c:\programmi\D-Tools\daemon.exe" [2004-08-22 81920]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"Symantec PIF AlertEng"="c:\programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"RTHDCPL"="RTHDCPL.EXE" [2006-05-18 c:\windows\RTHDCPL.exe]
"SkyTel"="SkyTel.EXE" [2006-05-16 c:\windows\SkyTel.exe]
"nwiz"="nwiz.exe" [2006-04-27 c:\windows\system32\nwiz.exe]
"SMSERIAL"="sm56hlpr.exe" [2005-10-18 c:\windows\sm56hlpr.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2009-01-24 64512]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Alice ti aiuta.lnk - c:\programmi\Alice ti aiuta\bin\matcli.exe [2007-02-07 212992]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.dvacm"= c:\progra~1\FILECO~1\ULEADS~1\Vio\Dvacm.acm
"msacm.mpegacm"= mpegacm.acm
"msacm.ulmp3acm"= ulmp3acm.acm

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Messenger\\msmsgs.exe"=
"c:\\Programmi\\MSN Messenger\\msnmsgr.exe"=
"c:\\Programmi\\MSN Messenger\\livecall.exe"=
"c:\\Programmi\\uTorrent\\uTorrent.exe"=
"c:\\APPS\\skype\\phone\\Skype.exe"=

R2 Utilità di pianificazione di LiveUpdate automatico;Utilità di pianificazione di LiveUpdate automatico;c:\programmi\Symantec\LiveUpdate\AluSchedulerSvc.exe [2007-02-07 100032]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\programmi\File comuni\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2007-05-07 106808]

--- Altri Servizi/Drivers In Memoria ---

*NewlyCreated* - COMHOST
.
Contenuto della cartella 'Scheduled Tasks'

2009-03-08 c:\windows\Tasks\Configura il mio PC.job
- c:\apps\SMP\PCSETUP.EXE [2005-11-17 10:03]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
uSearchURL,(Default) = hxxp://g.msn.it/0SEITIT/SAOS01?FORM=TOOLBR
IE: &Windows Live Search - c:\programmi\Windows Live Toolbar\msntb.dll/search.htm
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: Apri in nuova scheda in primo piano - c:\programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/230?2136a39ba29e47f5bcc465549a6751c2
IE: Apri in nuova scheda in secondo piano - c:\programmi\Windows Live Toolbar\Components\it-it\msntabres.dll.mui/229?2136a39ba29e47f5bcc465549a6751c2
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {84BC1D1E-3326-415B-B243-F761D5D411AF} = 85.37.17.42 85.38.28.87
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-03-09 11:05:41
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_USERS\S-1-5-21-2556242944-3672913713-2755169201-1005\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{A3E4DBFF-6C51-7FC5-A83E-6FE9BB677E7E}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"oancdpcnhllecondjllodfeghplaae"=hex:64,61,6f,6d,67,6b,67,6e,00,e0
"oajbdjnfljnhjjicmadnhaegbhkcak"=hex:6a,61,6f,6d,6c,69,61,64,63,6d,6b,62,64,6f,
6f,6d,6d,61,67,63,00,fd
"naddfmfajkhhbeabjcecneapgomm"=hex:6a,61,6f,6d,6c,69,61,64,63,6d,6b,62,64,6f,
6f,6d,6d,61,67,63,00,fd

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
Ora fine scansione: 2009-03-09 11.07.51
ComboFix-quarantined-files.txt 2009-03-09 10:07:16
ComboFix2.txt 2009-02-23 20:52:59

Pre-Run: 92.621.062.144 byte disponibili
Post-Run: 92,941,275,136 byte disponibili

1497 --- E O F --- 2009-03-08 23:04:20
Avatar utente
Malla
Neo Iscritto
Neo Iscritto
 
Messaggi: 11
Iscritto il: mar feb 17, 2009 12:07 pm

Re: dialer o non dialer ??

Messaggioda Amantide » mar mar 10, 2009 2:03 pm

OK, intanto abbiamo svuotato la cartella Temp da tutti i file eseguibili infetti.

Ora abilita la visualizzazione dei file nascosti (apri una cartella qualsiasi, vai su Strumenti--> Opzioni cartella--> Visualizzazione e spunta Visualizza file e cartelle nascosti), vai su www.virustotal.com e fai il controllo di questo file c:\windows\system32\nerocheck.exe, vorrei assicurarmi che non sia stato infetto.

Fai anche la scansione con FindAWF, selezionando l'opzione 1 e posta qui il suo log.
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo

Re: dialer o non dialer ??

Messaggioda Malla » mar mar 10, 2009 8:04 pm

qui c'è il report di virus total...ha trovato qualcosa

Antivirus Versione Ultimo aggiornamento Risultato
a-squared 4.0.0.101 2009.03.10 Trojan-Downloader.Unruy.A!IK
AhnLab-V3 5.0.0.2 2009.03.10 -
AntiVir 7.9.0.107 2009.03.10 TR/Hijacker.Gen
Authentium 5.1.0.4 2009.03.10 W32/Backdoor2.BUDI
Avast 4.8.1335.0 2009.03.09 Win32:Dropper-AIJ
AVG 8.0.0.237 2009.03.10 -
BitDefender 7.2 2009.03.10 Trojan.Generic.371998
CAT-QuickHeal 10.00 2009.03.10 Backdoor.Agent.lbk
ClamAV 0.94.1 2009.03.10 -
Comodo 1043 2009.03.10 -
DrWeb 4.44.0.09170 2009.03.10 Trojan.Inject.3598
eSafe 7.0.17.0 2009.03.09 Suspicious File
eTrust-Vet 31.6.6388 2009.03.09 -
F-Prot 4.4.4.56 2009.03.10 W32/Backdoor2.BUDI
F-Secure 8.0.14470.0 2009.03.10 -
Fortinet 3.117.0.0 2009.03.10 -
GData 19 2009.03.10 Trojan.Generic.371998
Ikarus T3.1.1.45.0 2009.03.10 Trojan-Downloader.Unruy.A
K7AntiVirus 7.10.665 2009.03.10 -
Kaspersky 7.0.0.125 2009.03.10 -
McAfee 5549 2009.03.10 -
McAfee+Artemis 5549 2009.03.10 -
Microsoft 1.4405 2009.03.10 TrojanDownloader:Win32/Unruy.A
NOD32 3924 2009.03.10 -
Norman 6.00.06 2009.03.10 -
nProtect 2009.1.8.0 2009.03.10 -
Panda 10.0.0.10 2009.03.10 -
PCTools 4.4.2.0 2009.03.10 -
Prevx1 V2 2009.03.10 Medium Risk Malware
Rising 21.20.11.00 2009.03.10 -
SecureWeb-Gateway 6.7.6 2009.03.10 Trojan.Hijacker.Gen
Sophos 4.39.0 2009.03.10 -
Sunbelt 3.2.1858.2 2009.03.10 -
Symantec 1.4.4.12 2009.03.10 -
TheHacker 6.3.3.0.278 2009.03.10 -
TrendMicro 8.700.0.1004 2009.03.10 PAK_Generic.001
VBA32 3.12.10.1 2009.03.10 Backdoor.Win32.Agent.lbk
ViRobot 2009.3.10.1643 2009.03.10 -
VirusBuster 4.5.11.0 2009.03.10 -
Informazioni addizionali
File size: 14348 bytes
MD5...: 701267f2085975289491d0e52d2933f6
SHA1..: 946c46d180bc2689ecdc8c0e8127e5cad535eb1f
SHA256: 429b93439ebc338675402f8e19462967d94611e516b74ab4740424bb2c03601a
SHA512: a49d264ffe1557cfb145161b9417246b425a3b47d1140330a5863798500f92f5
cacdf53ff83260bf432c0e683b19c0c3c63e57490288c973fc17e0f3b56bfd80
ssdeep: 192:GNG6OBSMNP8WH7G4dQHBnp9CWhHusuyy+3bHiRLEloW7mrtBCXx5SxIflObV
oXN/:GI63MN8WQp3hOslJ1lV7UEjSWQ+nF

PEiD..: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
TrID..: File type identification
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x9f70
timedatestamp.....: 0x482b27dd (Wed May 14 17:56:45 2008)
machinetype.......: 0x14c (I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
UPX0 0x1000 0x6000 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
UPX1 0x7000 0x4000 0x3200 7.84 0d0fbb9406371702f9a017aa1bd19012
UPX2 0xb000 0x1000 0x200 2.13 cd05cddb240b300666f60ff3d17108aa

( 2 imports )
> KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, VirtualAlloc, VirtualFree, ExitProcess
> SHLWAPI.dll: StrStrA

( 0 exports )

packers (Kaspersky): PE_Patch.UPX, UPX
packers (Avast): UPX
packers (F-Prot): UPX
Prevx info: <a href='http://info.prevx.com/aboutprogramtext.asp?PX5=64E9F63A0C8E28A8384D0048364A7E00F3B5352A' target='_blank'>http://info.prevx.com/aboutprogramtext.asp?PX5=64E9F63A0C8E28A8384D0048364A7E00F3B5352A</a>
packers (Authentium): UPX


ATTENZIONE: VirusTotal è un servizio gratuito offerto da Hispasec Sistemas. Non esiste garanzia circa la disponibilità e la continuità di questo servizio. Nonostante il livello di identificazione conseguito da multipli motori antivirus sia molto superiore a quello offerto dal singolo prodotto, questi risultati NON garantiscono la sicurezza di un file. Attualmente, non esiste soluzione che offra certezza al 100% sull'identificazione di virus e malware.
Avatar utente
Malla
Neo Iscritto
Neo Iscritto
 
Messaggi: 11
Iscritto il: mar feb 17, 2009 12:07 pm


Re: dialer o non dialer ??

Messaggioda Amantide » mar mar 10, 2009 9:41 pm

Come avevo sospettato... anche ctfmon.exe che ti avevo chiesto di verificare prima, potrebbe essere sospettato.

Ora aspetto il log di FindAWF prima di darti le indicazioni sul da farsi.
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo

Re: dialer o non dialer ??

Messaggioda Malla » gio mar 12, 2009 11:49 am

scansione fatta con findawf ma non ha trovato nulla

Find AWF report by noahdfear ©2006
Version 1.40



bak folders found
~~~~~~~~~~~



Duplicate files of bak directory contents
~~~~~~~~~~~~~~~~~~~~~~~



end of report


invece sul file ctfmon non aveva trovato nulla
Avatar utente
Malla
Neo Iscritto
Neo Iscritto
 
Messaggi: 11
Iscritto il: mar feb 17, 2009 12:07 pm

Re: dialer o non dialer ??

Messaggioda Amantide » gio mar 12, 2009 1:10 pm

Intanto elimina il file c:\windows\system32\nerocheck.exe che è risultato essere infetto.
Puoi usare uno di questi programmi per rimuoverlo http://www.MegaLab.it/3656/cancellare-un-file-bloccato
Se vedi che il Nero abbia i problemi a funzionare, dovrai reinstallarlo.

Per sicurezza fai un'altra scansione completa con Malwarebytes aggiornato, ma questa volta dalla modalità provvisoria (si accede premendo F8 all'avvio).
...per volare alto, bisogna saper cadere...
Avatar utente
Amantide
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 8126
Iscritto il: lun feb 06, 2006 4:13 pm
Località: Abruzzo

Precedente

Torna a Sicurezza

Chi c’è in linea

Visitano il forum: Nessuno e 8 ospiti

Powered by phpBB © 2002, 2005, 2007, 2008 phpBB Group
Traduzione Italiana phpBB.it

megalab.it: testata telematica quotidiana registrata al Tribunale di Cosenza n. 22/09 del 13.08.2009, editore Master New Media S.r.l.; © Copyright 2008 Master New Media S.r.l. a socio unico - P.I. 02947530784. GRUPPO EDIZIONI MASTER Spa Tutti i diritti sono riservati. Per la pubblicità: Master Advertising