www.MegaLab.it

da **Sabbb** » mer dic 01, 2010 3:06 pm

fdac ,neanche io voglio andare OT, e le critiche non centrano,ma se tu scrivi Contributo nel senso di aiuto al problema è naturale che io rispondo:perché il mio era un aiuto per cosa? [boh]

Cumunque ,buon proseguimento [ciao]

da **Berga95** » mer dic 01, 2010 3:24 pm

Il mio contributo potrebbe essere che, se non riesce a masterizzare l'ISO, di provare con l'exe di avira, che provvede a masterizzare il tutto con due clic... è scaricabile da qui: http://row.avira.com/it/support/downloa ... porto.html
È l'exe da 81000 kB circa [;)]

http://www.MegaLab.it/3591/avira-antivir-rescue-system

da **hashcat** » mer dic 01, 2010 6:20 pm

Berga95 ha scritto:Il mio contributo potrebbe essere che, se non riesce a masterizzare l'ISO, di provare con l'exe di avira, che provvede a masterizzare il tutto con due clic... è scaricabile da qui: http://row.avira.com/it/support/downloa ... porto.html
È l'exe da 81000 kB circa
http://www.MegaLab.it/3591/avira-antivir-rescue-system

Non so se è già stato detto ma per masterizzare i file iso potrebbe usare Imgburn:
http://download.imgburn.com/SetupImgBurn_2.5.2.0.exe
Semplice guida all'uso:
http://www.youtube.com/watch?v=tWgY1o5d8EE

da **Delfino81** » mer dic 01, 2010 8:59 pm

ciao a tutti..infatti credo che per masterizzare in ISO più cartelle...-come nn ho mai fatto prima- probabile che salto uno step
e che così ho già bruciato più cd (ma sto provvedendo a farmelo mast al max per dom.),comunque seguo con interesse tutti i Vs cosigli anche perché mi dà più soddisfazione risolvere il problema che dover fare un format c: .Inoltre non ho mai ricaricato tutti i driver del pc e non avendo il cd d'installazione originale nè driver salvati dovrei prendermeli 1 a 1 tutti quanti...ma a mali estremi e avendole provate tutte le soluzioni possibili,mi cimenterò a fare anche questo se avro i giusti suggerimenti da seguire scrupolosamente...Quindi stasera mi rimetto al lavoro e step a step seguirò le altre alternative che ho a disp, per aggiornarvi se migliora/risolve la questione( ma sempre in ore serali)...comunque mi dà qualche errore su win32 come anche su Combofix...per esempio ogni volta che si accende il pc mi dà l'errore :
Impossibile trovare il file c:\ComboFix\CF14053.cfxxe Verificare che il percorso o il nome del file siano corretti...(nota che l'icona è caricato sul desktop)
Dopodichè clicco su ok e si avvia il desktop e S.O...questo è un errore che come sapete non dovrebbe esseci...strano,qualcuno saprebbe perché...? Non ci giurerei ma credo che sia per install Nero come per antivirus escono problemi + legati a windows
che per malware...forse perché ne ho già rimossi una ventina sia con tool che manualmente

da **Sabbb** » mer dic 01, 2010 9:08 pm

[quote="Delfino81" comunque seguo con interesse tutti i Vs cosigli anche perché mi dà più soddisfazione risolvere il problema che dover fare un format c:. Inoltre non ho mai ricaricato tutti i driver del pc e non avendo il cd d'installazione originale nè driver salvati dovrei prendermeli 1 a 1 tutti quanti [/quote] Se è per i driver nulla di più semplice:ci sono programmi apposta,tipo Drive Max per fare il backup e restore

comunque mi dà qualche errore su win32 come anche su Combofix...per esempio ogni volta che si accende il pc mi dà l'errore

La sfera di cristallo non ce l'ho,ma vedo che ci ho azzeccato stavolta ,e aggiungo che ci sono buone possibilità che te li ritrovi (i messaggi suddetti) anche a pc bonificato,per il semplice fatto che non avevi una sola infezione.Il pc in questione stava bello e inguaiato.Ops,ho detto stava?

da **FDAC** » mer dic 01, 2010 9:12 pm

Ciao Delfino.
Prova in modalità normale a eseguire queste operazioni: al limite, se proprio non riesci, falle in modalità provvisoria, ma prima prova in modalità normale.

Iniziamo:

Scarica OTC by OldTimer: http://oldtimer.geekstogo.com/OTC.exe
● posiziona il tool sul Desktop
● doppio click per eseguirlo
● clicca su CleanUp
● ti chiederà di riavviare il sistema
● clicca Yes

Vai in C: e elimina
la cartella Qoobox
il file Combofix

Adesso:
Scarica Combofix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
e posizionalo sul Desktop, se non funziona rinominalo

Start - Esegui e digita: notepad.exe
● clicca Ok
● copia le righe qui sotto, senza saltarne nessuna:

Codice: Seleziona tutto: File:: c:\windows\system32\unacev2.dll c:\windows\system32\dllcache\moviemk.exe c:\windows\system32\drivers\70532552.sys c:\windows\system32\drivers\7053255.sys c:\windows\system32\drivers\70532551.sys c:\windows\system32\drivers\pxkbf.sys Driver:: pxkbf 70532551.sys 7053255.sys 70532552.sys RegLock:: [HKEY_LOCAL_MACHINE\software\Microsoft\WBEM\PROVIDERS\Logging] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\Secure] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0000B11000063D11C8EF00054038389C] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0A777F49BCECBB049BEAE74EC58E16CA] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\142CF7AB0C28806409E6CB54044BD4A9] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20204020CBCB0E94FBF413C1ACE4A5F6] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\21B0747772942D115BEF0006799C897E] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\482EBB0A8BD7FF44A87DDED1D227F343] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\6BC47400D0E93D110848000CF43A92AA] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\CEB9794B854D9284BA787B0A326D941C] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\InstallProperties] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\InstallProperties] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\InstallProperties] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\20CC412817268CD48BDD779933542046\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\InstallProperties] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\Features] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\InstallProperties] [HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\EB79C053C7D38EE4AB9A00CB3B5D2472\Features]

● le incolli all'interno dell'editor di testo Notepad
● clicca in alto su File
● nel menù che vedi scegli Salva con nome
● controlla che in alto, dove c'è scritto Salva in, sia selezionato Desktop
● in Nome file se trovi selezionato .txt lo cancelli, e scrivi CFScript.txt
● clicca Salva
● adesso, sul Desktop, trovi il file di testo
● con il tasto sinistro del mouse, lo trascini sopra l'icona di Combofix, lo rilasci, e parte la scansione di Combofix
● non toccare più ne' mouse ne' tastiera, finche' non è finita
● se il sistema non si riavvia da solo, riavvialo tu
● a questo punta allega il log di Combofix con il tag MEMO

Aspetto tue notizie.
Ciao e buona notte :)

da **Uomo_Senza_Sonno** » mer dic 01, 2010 9:20 pm

Se nemmeno lo script proposto risolve, ti conviene percorrere la strada dei rescue disk, in questo modo se trovano infezioni non c'è possibilità alcuna di impedirne la rimozione.

In seguito, fai questo controllo, forse anche inutile ma eseguilo lo stesso: scarica mbr.exe ed esegui un controllo, in modalità provvisoria, dello stato dell'mbr digitando da esegui C:\mbr.exe -f, poi posta il log generato che troverai sempre in C:\

Ho come il sospetto che ci sia qualcosa che di nascosto da qualche parte... [uhm]

@FDAC

lo script, è meglio se lo inserisci nel tag memo, così almeno viene tutto più ordinato

da **Sabbb** » mer dic 01, 2010 9:29 pm

Uomo_Senza_Sonno ha scritto:Se nemmeno lo script proposto risolve, ti conviene percorrere la strada dei rescue disk, in questo modo se trovano infezioni non c'è possibilità alcuna di impedirne la rimozione.

Ragazzi,l'ultima "nota" e poi lascio definitivamente questa discussione (non voglio essere ecessivamente invadente,non per latro [;)]

) "Può anche darsi" che si riescono a togliere tutte le infezioni ,ma i danni che sono stati fatti dai virus e quant'altro chi e come si aggiustano? Chissà cosa è stato modificato e in che modo:se sono stati cancellati file chiavi ecc. Messo caso che la rimozione virus riesce,e poi? Detto questo in bocca al lupo.

da **Uomo_Senza_Sonno** » mer dic 01, 2010 9:39 pm

Sabbb ha scritto:Ragazzi,l'ultima "nota" e poi lascio definitivamente questa discussione (non voglio essere ecessivamente invadente,non per latro ) "Può anche darsi" che si riescono a togliere tutte le infezioni ,ma i danni che sono stati fatti dai virus e quant'altro chi e come si aggiustano? Chissà cosa è stato modificato e in che modo:se sono stati cancellati file chiavi ecc. Messo caso che la rimozione virus riesce,e poi?

Certamente una formattazione sarebbe la soluzione che ti permette di risolvere (in certi casi) alla radice. Ma visto che

Delfino81 ha scritto:comunque seguo con interesse tutti i Vs cosigli anche perché mi dà più soddisfazione risolvere il problema che dover fare un format c:

perché non provare per vedere fino a che punto si può arrivare? La formattazione, meglio tenerla come ultima spiaggia [;)]

da **Delfino81** » mer dic 01, 2010 9:50 pm

ok FDAC tra qualche minuto post il log,di buono c è che Combofix ha lavorato stavolta e senza errori...per quanto dice sabbb
condivido la sua opinione ma anche se la più veloce preferirei assicurarmi di non avere altre soluzioni,se ci sono chiavi o impostazioni di windows, bloccate o danneggiate proverei a scaricare dei tool dalla rete "free",oppure di procurarmelo da altre fonti...il modo per ripristinare al meglio tutto..

da **FDAC** » mer dic 01, 2010 9:52 pm

Aspetto il log.

da **FDAC** » mer dic 01, 2010 9:54 pm

Prova in modalità normale a eseguire queste operazioni: al limite, se proprio non riesci, falle in modalità provvisoria, ma prima prova in modalità normale.

Iniziamo:

Scarica OTC by OldTimer: http://oldtimer.geekstogo.com/OTC.exe
● posiziona il tool sul Desktop
● doppio click per eseguirlo
● clicca su CleanUp
● ti chiederà di riavviare il sistema
● clicca Yes

Vai in C: e elimina
la cartella Qoobox
il file Combofix

Adesso:
Scarica Combofix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
e posizionalo sul Desktop, se non funziona rinominalo

Start - Esegui e digita: notepad.exe
● clicca Ok
● copia le righe qui sotto, senza saltarne nessuna:

File::
c:\windows\system32\unacev2.dll
c:\windows\system32\dllcache\moviemk.exe
c:\windows\system32\drivers\70532552.sys
c:\windows\system32\drivers\7053255.sys
c:\windows\system32\drivers\70532551.sys
c:\windows\system32\drivers\pxkbf.sys

Driver::
pxkbf
70532551.sys
7053255.sys
70532552.sys

RegLock::
[HKEY_LOCAL_MACHINE\software\Microsoft\WBEM\PROVIDERS\Logging]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\Secure]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0000B11000063D11C8EF00054038389C]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0A777F49BCECBB049BEAE74EC58E16CA]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\142CF7AB0C28806409E6CB54044BD4A9]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20204020CBCB0E94FBF413C1ACE4A5F6]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\21B0747772942D115BEF0006799C897E]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\482EBB0A8BD7FF44A87DDED1D227F343]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\6BC47400D0E93D110848000CF43A92AA]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\CEB9794B854D9284BA787B0A326D941C]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\20CC412817268CD48BDD779933542046\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\EB79C053C7D38EE4AB9A00CB3B5D2472\Features]

● le incolli all'interno dell'editor di testo Notepad
● clicca in alto su File
● nel menù che vedi scegli Salva con nome
● controlla che in alto, dove c'è scritto Salva in, sia selezionato Desktop
● in Nome file se trovi selezionato .txt lo cancelli, e scrivi CFScript.txt
● clicca Salva
● adesso, sul Desktop, trovi il file di testo
● con il tasto sinistro del mouse, lo trascini sopra l'icona di Combofix, lo rilasci, e parte la scansione di Combofix
● non toccare più ne' mouse ne' tastiera, finche' non è finita
● se il sistema non si riavvia da solo, riavvialo tu
● a questo punta allega il log di Combofix con il tag MEMO

Aspetto tue notizie.

da **Delfino81** » mer dic 01, 2010 10:06 pm

Ecco il log FDAC

ComboFix 10-11-30.09 - Proprietario 01/12/2010 21.29.58.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.39.1040.18.1279.953 [GMT 1:00]
Eseguito da: c:\documents and settings\Proprietario\Desktop\ComboFix.exe
Opzioni usate :: c:\documents and settings\Proprietario\Desktop\CFScript.txt

FILE ::
"c:\windows\system32\dllcache\moviemk.exe"
"c:\windows\system32\drivers\7053255.sys"
"c:\windows\system32\drivers\70532551.sys"
"c:\windows\system32\drivers\70532552.sys"
"c:\windows\system32\drivers\pxkbf.sys"
"c:\windows\system32\unacev2.dll"
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))

poi cercavo di post il log con la mia codiv. tra 2 pc...non và più...
e poi quando ero in risorse di rete è partita un'installazione di windows installer...e ho lasciato continuare...

A proposito...cercavo di post il log con la mia condivisione tra 2 pc...Non và più..
e quando èsono andato in risorse di rete mi è partita da sola un'installazione di windows installer...perché..?
.

c:\windows\system32\dllcache\moviemk.exe
c:\windows\system32\drivers\7053255.sys
c:\windows\system32\drivers\70532551.sys
c:\windows\system32\drivers\70532552.sys

.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_70532551
-------\Legacy_70532552
-------\Legacy_setup_9.0.0.722_28.11.2010_16-17drv
-------\Service_70532551
-------\Service_70532552
-------\Service_setup_9.0.0.722_28.11.2010_16-17drv

((((((((((((((((((((((((( Files Creati Da 2010-11-01 al 2010-12-01 )))))))))))))))))))))))))))))))))))
.

2010-11-28 16:31 . 2010-12-01 20:14 -------- d-----w- c:\programmi\Emsisoft Anti-Malware
2010-11-28 14:22 . 2010-11-28 14:23 -------- d-----w- c:\documents and settings\Administrator.ROSA
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\documents and settings\Proprietario\Dati applicazioni\Malwarebytes
2010-11-27 20:50 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-11-27 20:50 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-27 20:32 . 2010-11-27 20:32 -------- d-----w- C:\Nuova cartella
2010-11-27 18:57 . 2005-05-04 13:45 2890240 ----a-w- c:\windows\system32\msi.dll
2010-11-27 18:57 . 2005-05-04 13:45 884736 ----a-w- c:\windows\system32\msimsg.dll
2010-11-27 18:57 . 2005-05-04 13:45 78848 ----a-w- c:\windows\system32\msiexec.exe
2010-11-27 18:57 . 2005-05-04 13:45 271360 ----a-w- c:\windows\system32\msihnd.dll
2010-11-27 18:57 . 2005-05-04 13:45 15360 ----a-w- c:\windows\system32\msisip.dll
2010-11-27 18:39 . 2010-11-27 18:40 -------- d-----w- c:\programmi\Cobian Backup 10
2010-11-27 18:36 . 2010-11-27 18:36 -------- d-----w- c:\documents and settings\Proprietario\Dati applicazioni\Comodo
2010-11-27 18:33 . 2010-11-27 18:33 -------- d-----w- c:\programmi\Comodo
2010-11-27 12:00 . 2010-11-27 12:00 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Avg7
2010-11-19 18:49 . 2010-11-27 11:56 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-11-19 18:48 . 2010-11-19 18:48 -------- d-----w- c:\programmi\Hitman Pro 3.5
2010-11-19 18:47 . 2010-11-19 18:48 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Hitman Pro
2010-11-18 18:31 . 2010-11-18 23:17 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\PCPitstop
2010-11-18 18:31 . 2010-11-27 12:40 -------- d-----w- c:\programmi\PCPitstop
2010-11-17 19:09 . 2010-11-17 19:09 12552 ----a-w- c:\windows\system32\drivers\hddirect.sys
2010-11-15 21:10 . 2010-11-15 21:10 -------- d-----w- C:\$AVG
2010-11-13 22:10 . 2010-11-13 22:10 -------- d-----w- c:\programmi\CCleaner
2010-11-13 21:40 . 2010-11-13 22:08 -------- d-----w- c:\documents and settings\Proprietario\Impostazioni locali\Dati applicazioni\Temp
2010-11-13 21:39 . 2010-11-15 23:36 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Alwil Software
2010-11-13 21:39 . 2010-11-13 21:39 -------- d-----w- c:\programmi\Alwil Software
2010-11-13 19:29 . 2010-11-13 19:29 -------- d-----w- c:\documents and settings\Proprietario\DoctorWeb
2010-11-13 18:59 . 2009-06-25 08:44 730112 ----a-w- c:\windows\system32\lsasrv.dll
2010-11-13 18:59 . 2009-06-22 11:34 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2010-11-13 18:07 . 2010-11-28 22:11 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-11-13 18:04 . 2009-06-21 22:05 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2010-11-13 18:02 . 2008-06-14 17:59 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-11-13 18:01 . 2009-11-21 16:38 470528 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-11-13 18:00 . 2010-06-14 14:30 743936 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-11-11 18:30 . 2008-05-01 14:31 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2010-11-11 18:29 . 2010-02-12 10:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-11-11 18:23 . 2009-06-05 07:42 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2010-11-11 18:20 . 2008-04-21 21:26 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-11-11 18:16 . 2010-11-28 23:20 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\MFAData
2010-11-11 18:11 . 2010-11-11 18:11 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Google
2010-11-11 18:06 . 2010-11-11 18:06 -------- d-----w- c:\documents and settings\LocalService\Impostazioni locali\Dati applicazioni\Google

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Motive SmartBridge"="c:\progra~1\ALICET~1\SMARTB~1\MotiveSB.exe" [2006-04-21 438359]
"Cobian Backup 10 Interface"="c:\programmi\Cobian Backup 10\cbInterface.exe" [2010-09-23 3154432]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Suite"="regedit -s" [X]

c:\documents and settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\
setup_9.0.0.722_28.11.2010_16-17.lnk - c:\documents and settings\Proprietario\Documenti\Remover antivirus\Virus Removal Tool\setup_9.0.0.722_28.11.2010_16-17\startup.exe [2010-11-28 72208]

c:\documents and settings\Administrator.ROSA\Menu Avvio\Programmi\Esecuzione automatica\
ddrive.js [2002-8-16 1611]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Alice ti aiuta.lnk - c:\programmi\Alice ti aiuta\bin\matcli.exe [2002-1-1 217088]
Avvio veloce di Adobe Reader.lnk - c:\programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Office.lnk - c:\programmi\Microsoft Office\Office\OSA9.EXE [1999-2-18 65588]

c:\documents and settings\Default User\Menu Avvio\Programmi\Esecuzione automatica\
ddrive.js [2002-8-16 1611]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegedit"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HDDirect.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1600:TCP"= 1600:TCP:xmxxf

R1 StarPortLite;StarPort Storage Controller (Lite);c:\windows\system32\drivers\StarPortLite.sys [01/01/2002 0.05.50 85760]
R2 ComodoBackupService;ComodoBackupService;c:\programmi\Comodo\BackUp\CmdBkSvc.exe [27/11/2010 19.33.36 1023488]
R2 PPPoEService;PPPoE Service;c:\progra~1\Alice\ALICEE~1\app\pppoeservice.exe [01/01/2002 0.14.30 49152]
S2 epydlcdkv;Universal Windows;c:\windows\system32\svchost.exe -k netsvcs [17/09/2002 0.47.21 14336]
S2 gupdate;Servizio di Google Update (gupdate);c:\programmi\Google\Update\GoogleUpdate.exe [17/09/2003 2.52.17 135664]
S3 HDDirect;Hard Disk Direct Control;c:\windows\system32\drivers\hddirect.sys [17/11/2010 20.09.45 12552]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [06/08/2006 18.00.34 717296]
S4 Win32 USB2.0 Driver;Win32 USB2.0 Driver; [x]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
epydlcdkv
.
Contenuto della cartella 'Scheduled Tasks'

2010-12-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2003-09-17 01:51]

2010-12-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2003-09-17 01:51]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
mStart Page = hxxp://it6.hpwis.com/
uInternet Settings,ProxyOverride = 127.0.0.1;localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Google Sidewiki... - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

AddRemove-{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarManager_AC0049E063DE2AEA.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-01 21:49
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\Features]
@DACL=(02 0000)
"_F4381_System"="y''5C`+$g(KD@efDe`c_z''5C`+$g(KD@efDe`c_"
"_F4385_lineservices"="92Cm?6,wf(~&8efDe`c_PXnt@3*vf(r`7efDe`c_\02_F4381_System"
"_F4389_help"="RXnt@3*vf(r`7efDe`c_SXnt@3*vf(r`7efDe`c_,gH.[lmkf(`%(L[U]z)5\02_F4381_System"
"_F12094_Shared"="-fCo)=Lnf(E4*L[xeX)y"
"IE5.5_Dependency"="x$vuPlf0q@2a1_`&]uX]"
"MERGE_MODULES"=""
"SYSTEM_MM"="_'B@&~,wu9`+ID@.clc,\02MERGE_MODULES"
"DEBUG_MM"="\02MERGE_MODULES"
"Minimal_Install"="&6$2g7@^L9`1oPe-?m)Dh20cMsbJV?l9z,cKkVxHhP,d^l)(k@Cb`,O!.5e=r@URMF*n_8hL[wIMa8[LrXse-m=O]8DJ*VcJ1^LHibMU`PO}t@~9aWlizH*f]91WpR=YQ=+p&&2`-[c0ewcC-!pL[=36%CR5$X9D58wyFF~LTAio]paX'{)&^}H^ZnZt5@k?X~3=6SW*k12FXC5$0=0HqncP_mM%iA1Echww^9p(WRTUW+haW(S`*c{o8@GEV%VK6-6ZOXXY,v&,L=+j]U2+)UCk!pqOya%Bp8E{hwB&jdK^@XjP[a-^l=O&j@Va0cCsh'?HLVsH)@F+GDjzT`{xDeMzjK8ez@j8?$h^emAM(`Wu.BN{)=ttfBn7Lqhm4Ex6230&.=3WL'Xdcx+s7W]T9$098=uc0D%68^.w?udPbnZ7i9RfO4VG'zZ`8jRXwe{{89`Pcvm{ceWplAv!&swMa=Dco84^Cb963P2EGaI2CAI(r]6xIZ-w)8_E)oiM-?,{xOa$BP$X6*BY.R3km@L%WJ50M~Kdi^gZwbA-F9]gf{oVvJb?.^,LE06+'?8[ROX-CJ1VBX(7s-$K~@h*B^s%{Yww`Jf?p-9%AAK_X+9S_?2oHXioL2-X39gy254(0G[%*-dB9&e2H@IZ4Q[LF?%Jw'-DVjhul9mF)Kk7y167GZ)b++Ivb8Fv[P(+Nisy[[tSavB3r@y]J32fK4fRPRh7{)@-l9.sM0C_4MoPpuyW?Dv-.?qgq3Y?'gQW'3O6v{7dq8}Gb`0D2~?WJ3_-U2U3z9apN+td6MqABvT~WZY3594HihAf-[WK!{.7U%I5a?RBwSSUXzI(LRG.jOE[a=5CNEl6l2TjW)Y[YeW2)?9u`udIB$9ml9GQrA349?f})8jXy@-'fZXUPRXi+Awi7AVNxpl@$-G$eh&Lz=+NV*0g=~@0$.%y[I=quello?hW=DwAv&80EL39.k%D'@.=O_hRcL'v~{[L0unWn?'y7!$GGrRU$q=5A8e0q9c??8f`_SfXnZfsOZAvI9[$Im2nSo{N.'WmTGCH~?Zt4G)MTT31C+yyK~3Z{@LF5Z%aR@C9rC?x6*=8E=65O6CwaNKg6UCmocPX(9V*Anxr_iUFl@AuAx-Du=X]%jk,MrTK4~66eo5~@?[RK,GkfUXp-W!_!*A@KAp$wGmXkH}`m]4XYo_^g=mj92E*kIWLdq`_NbXf'?OH!6pNs9+]mQVRCk6{v8oFN76b6?EQ6f1G?C46`9?AXdVr{&(NPA6rV,8hb@jej`4ekrJV(V*9[RHuZ9B{joRs`yj'$%@bRqaBf=aCJgopDG(uf0R~q]U{4=Bq2T^TAGW6qEXT`(~NLAUYe(,aTa_8{Mv2!q5O7A~DUp_}f0YSoFyA3hhxq9xb^t7T3aKUkhDt2GNpK9zsMGtO}_Tr4j{wn_`h(@}SL%7`%YeU`ZVysn}h!9moAt,K+Xv(!tSYS).bRAzBfUr2!BP`Ds__JNbrC@+lOnn5W)6JFZ5gwc?Z=@^BB8rmyycnahGy3S]X1Aymq*[p(UlZuJv9@]Mvx8aeTz.zN?n(B3oGkg^96A&_BKM55o%XFw]g.1?H.9y(]zRg9}QNrxchLh-mE9.ygn=9mGl![TimF]5qP@1(k8d7LR@Q(]J2[vdCdA*'J_d3iky*Vd]n7tM&[A@501cXV,{8WqKIZHBnV9OTv-JCRHEQ&oe(&i8e$=9PT{Z[fZ{G6NMBy!QNc=tc9?&gj=GnZ%&S?Bj'+9AHa~nQGEm68Hgt^EYGW?slP+IArkV4hb*mgP?Jx?G]_N-~X+3=EXn$FI_Hr8fWguZ*C-yWcwaI+3chg945KJhT[?@.$0IvPjKf29zCdY8Nrt)^AKeIhbAmo98W2PqC4l[WtD(X-h+4m9(4O,_Zi-ePtE%Tux3JT@)aNS2(z$BPlHR@SOY$g8?lhxHq?'XOP??HNnMk_=!A$=*fvld+0XyVUGiAd?E&nu'}(lKzKWZ)(r0T]='M&jZnQ&&i@s)6.qg_a9Mc%pp4,o2''o,t-%zIA9^NbbAX`Ue9Fkq8FH`(6@HX0mtJ.yV+6No?tH6La=]-A$2EFhRfm2+_,e7Iz9u,-rGY,kt5?3ny={l+c=BJqp(jkf2`pbH'yaPsG@,s~,zM~_k1)8@yIX~eo=(0@,w~tYtDGy0YJ$oIUA`VoRMXS[eK4^{*Pf(b7A]pp?5u`D3bWbW6f.+b{@t*MFBK%@By[?&&SE7.^8Pu&uvvZH1z*}_KJ-TOn9`JiQ?LQ&y0*VaU3TM07?DHL]$Uc.`f{`P{&C%W[8IMd%[^94$y`vY)3tp&Z@`*NQPV3]1aE}bgLE)+Z8=!XpvHv)Nga7q'a]$Z7@,l)^?LowmP7@fw.9(fz9my[ZHT^{ZLtEsqKgP$N?T3C&VbjgIB``@GTMyGVAMvpe+El2s.RdO*mfXp2@K2b.g{'dBHu.'b9VZqf(g6u.Q(31aRw.'b9VZqf(g6u.Q(31aR67k)4s6tf(JR`qF-Q9q.=3&5,B^pf(V%eqFgkW_B7YK?{]tuf(^?eqFgkW_BB3&5,B^pf(V%eqFgkW_Bn^gPBBXtf(Cyn.Q2tAE!&}EZ3m9lf()xcqFJOfBte3aV+5Lyf(C5Def%06$%RC,h.~8wf(x7fqF,Y?r2ychI(5Lyf(C5Def%06$%q+jjF4iyf(s&Aef%06$%kwgD19iyf(t)Aef%06$%A3={H4iyf(s&Aef%06$%(=Y8nB{vf(kbq.QrWeLdxchI(5Lyf(C5Def%06$%81-z%Z}tf(Cyn.Q2tAE!dtsdk^E3Y81WVSO~ly*v',km4SQm,@JVFq'JTKj(O+)klkXH3?]Bj3eG'hGM~61RDGu?WAZ^Ms`W'+paY*ef*pSi)?u4zSpA^dJ%}10Ac}dn0Ako]Al{X%O,s`E+%6sML=9Qfj7U1T+Q`E~KwW_'Y@I!Thi.V09!kP(PT~uc*?^3@2,SI^I[hWi9RHB[4@x25*JGO,p^4zykPX+UWAmUnq95FTJaIxp4^`70S?H,V5.U0iNFF+-8!Gd-x8RaSUu3wlFw57gW&lka`A'2b!fu8!`=sph9`2}_59'KHGNMEV_.&03`pyd-h9[4scLR07q&C?G3di8iCA&%i@eOGhq(Y~!PehLTf9N]HLF^TQ89&S6N^F}C193ey8b+25jo-}Yroi5zf(nT=efDe`c_r.BF^O_P!AJ53i,x(my@DJdG2*4)g([fAef_HaqQCJdG2*4)g([fAef_HaqQBJdG2*4)g([fAef_HaqQAJdG2*4)g([fAef_HaqQ[IdG2*4)g([fAef_HaqQ]IdG2*4)g([fAef_HaqQYIdG2*4)g([fAef_HaqQZIdG2*4)g([fAef_HaqQ9xi[T1stf(Cyn.Q2tAE!b}i[T1stf(Cyn.Q2tAE!~HdG2*4)g([fAef_HaqQ3TTU`P(Ie?3`Rf%G5T&,L}[8*H0E==G5NlD[VdhHc}HEBr8gk?-j=NwATVH%2HJ=+Xm*.91{%gZ?_ci=8ZvuYanP}=NolF^1pGXAw~54TOkXM9nvqU49w.V]Xh`!v0^k}=Z9U'$yo't42T=&70CLX??(xl=P+_*W5b+BfL6$c=v7}_@)wW'VBD$PrPnb2=h&xmjk_U1U'C`&K4APQ=Bh.HrAm+x?6%NFq1Rxs?iIKGOwO.MyVE$4wBE`'@FOMkvGdX`'NjHTr?PZ(AIHpjtSvh7U5f)zW`jKV9y7t'MY(&PE%Bl%QjPSs=qJgjBO[IK*_'s_L^yo*@]ih3[ljOc@c6E.)fi5y82v}%ZJ^@yKklZXrnRMc=SSlz[btNy!KrT]jI{jf(=1&L[-81-]]4Rc[Mx~f(~j=efBq{id6a?LxGCWj=@{}PqDdLC30r4_jvENWAm7F&habMuxmRr8IZU5G9WLi_D=Yx0)9(%-kW*wf(}!8ef6`OP[Aqp6JBDvf(r`7ef6`OP[GXnt@3*vf(r`7efDe`c_@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2haDWlh[]Tvf(sc7efDe`c_QXnt@3*vf(r`7efDe`c_XXnt@3*vf(r`7efDe`c_vo1!gU0AC=KF?1[,I=%ZTC}EDG}*u9i@iQy![KQha4mW@4+yTADyqO5S7dV*sW2yRiWG!9f=`0Fnuu,mR}TRb]Bw==ub.9(@FzqOz`3FNR[i898hU+s2R-LCfxy1XFv{6=HcY,?}y2I%KNJH4['HK@xqkkW1mg6xy')k'?=S0AW'cai$wXi8ZEUs5]`sl8htOB*NdqPU-GH-Mn$hu=2m^xsC@&eQ0Nt'zAKGw=HweHk?a&FVgvKBH@x8&@BM$h'nv,u.0}$fSP7O_AOXxbpahc%tTQ$GYIW^i=2wr&^}bep!Smz1-.+]5@=Px[Z@vKA41-_EMA{JTA)=ieJHuNxkGdJdhA^+u9l{!x`FKh?0wx6wvMGy%@,e0-FfJLzw2k_$aqoDP9BzTy8+@nI`R@!]%6MY2?*A($,7]v-K.AX45bqt2@hv-K)jd@Oe(X,?sJq_3?zOM9CWR]mKyIdG2*4)g([fAef_HaqQ.reE%tHJQAuP{~`*'n1aE4`gR7}a4?^y~271prnnud$mD{$,G@rk6f?hDg-@FFLw+t)B_9T1gzv'^b`mLDrz*vyqL9L*O,c+I^NS3QVLN^[Dg96n9pUaajyF9&Fj8_Uu.AD[d68ab5+a[+*n_JKz$=$P?oo43a7$GGLqZe1`7A)zHb*u2k9o%T]F&BLTI@ykoQtYUDP%QzJ9u0a}n9.8=Lq.pdAMuJFL@,~Bd9LBzCd)lcu67'=mO)}?H9,$7nU`m~=%sK2US^wx0A`W3$+NPUI2Yjt*9kI+g?P(Z.M6xa@gbymU0gr7v@$2bvUy0)CHt~lVMrRRT?djdz^_!5aIGlZ%(j.{69nth)]Zk*E_ib72Y?!lf({jeqFYK{3k)0~0`xhkf(7)dqFgkW_B$ReZR@_kf(1rcqFgkW_BrrUgDcxYZ8WY-?SRlc(&jc72Y?!lf({jeqFYK{3kpn`_lFGqf(uV(!!eqK50Ya72Y?!lf({jeqFYK{3k+0~0`xhkf(7)dqFgkW_B&O])t}wmf(+?'!!cF5I6ob72Y?!lf({jeqFYK{3khc72Y?!lf({jeqFYK{3klc72Y?!lf({jeqFYK{3kgb72Y?!lf({jeqFYK{3k[a72Y?!lf({jeqFYK{3kra72Y?!lf({jeqFYK{3kza72Y?!lf({jeqFYK{3k`n]vpzi&g(]x@efOyH&$-b72Y?!lf({jeqFYK{3kBb72Y?!lf({jeqFYK{3kkb72Y?!lf({jeqFYK{3klFrT`_AWG)i2CefPB7^,7c72Y?!lf({jeqFYK{3kOr?-!.I7o=qFT9&3+^u+`c72Y?!lf({jeqFYK{3kSIu-GWx2795b!bV^0RzH!0~0`xhkf(7)dqFgkW_BlFrT`exOA+i2CefPB7^,HSlr1~Kyc8*]].9Ro.GF^a72Y?!lf({jeqFYK{3k`a72Y?!lf({jeqFYK{3kla72Y?!lf({jeqFYK{3kpa72Y?!lf({jeqFYK{3kaoT6N%@gp94)1M%5sRc30b72Y?!lf({jeqFYK{3k{N])t}wmf(+?'!!cF5I6(ReZR@_kf(1rcqFgkW_BXb72Y?!lf({jeqFYK{3k*ReZR@_kf(1rcqFgkW_Bcb72Y?!lf({jeqFYK{3k,O])t}wmf(+?'!!cF5I6mb72Y?!lf({jeqFYK{3ksb72Y?!lf({jeqFYK{3k~b72Y?!lf({jeqFYK{3k(c72Y?!lf({jeqFYK{3k%?+]?]b(+A'c]FUV,{ZRgAWBJbnCM?`T8nbcjs7`1c72Y?!lf({jeqFYK{3kVQFSznMek8UH}a.xfss.lFrT`b]SD*i2CefPB7^,?c72Y?!lf({jeqFYK{3ksN]7AVRpM@gh_M[ejWm,Ac72Y?!lf({jeqFYK{3k`P1Ut.C0]=])f{`Ih)nSCc72Y?!lf({jeqFYK{3kEc72Y?!lf({jeqFYK{3kIc72Y?!lf({jeqFYK{3kQc72Y?!lf({jeqFYK{3kLW!c'ANyf(Yn9efDe`c_tjl?w7%Ge8GOCH*`a39-Oa72Y?!lf({jeqFYK{3k}.~0`xhkf(7)dqFgkW_BSa72Y?!lf({jeqFYK{3kUa72Y?!lf({jeqFYK{3k%0~0`xhkf(7)dqFgkW_BD)RfaKH$^A[gOk!$j._!ba72Y?!lf({jeqFYK{3kda72Y?!lf({jeqFYK{3kha72Y?!lf({jeqFYK{3k3)lCy$3i0?t+[I8'aw_W}a72Y?!lf({jeqFYK{3kf16$SuJQ[8~-bYIir}7$Vb72Y?!lf({jeqFYK{3k1?sAjF.zs9-zl{t5EwjCZb72Y?!lf({jeqFYK{3k]b72Y?!lf({jeqFYK{3kfK{YNS^`k@CkYb*CA&${yb72Y?!lf({jeqFYK{3k*c72Y?!lf({jeqFYK{3kkEBHz7{h4=8^rs4b^[cF,c72Y?!lf({jeqFYK{3k-0~0`xhkf(7)dqFgkW_B3c72Y?!lf({jeqFYK{3k5c72Y?!lf({jeqFYK{3k9O])t}wmf(+?'!!cF5I6(MzwNF.c@AOd0vO6sSsgqL=mR~.j*?OZ&N!U]Ul_Oc72Y?!lf({jeqFYK{3kub72Y?!lf({jeqFYK{3kta72Y?!lf({jeqFYK{3kRbB@uxP{YAQ,Fk.`@!mX?yvC*F%bs8HzPH4aHokoWys?gsKp*A~HgYG6Q.gFMY.UrdE8U9yvDxAn5&IuQ@*@hiEJO9kt%Ju@h(}%A{$t!RmD?9w9mbua.^,]=aJObH6oq9WbBcck*ej3Vwdz85YRJ@h,ofv^.dA2,qmp3?,wf(mhq.QrWeLdubos?8awf(mhq.QrWeLd$c72Y?!lf({jeqFYK{3kB=zA*Dj'A9fhx+6+LI8Z+)=G){CPl?9d]$+a!'EB,0ksYmUCh?XDCcuA(4Ye(!.EBlD$A@kTPZ2)ILlA'X^AGsV?@9uD@R?qBInv4..CUDew`@pZh,Qb%`F=}kxRXc~14?-0m`6h%iqgm]%!xd(=u9)VOSV!j{dlNO,Kk~1*2=Yo*wWzVSy^pJ^PHziwWAFn}yOw84M.c]GES92{r?~)zVh8uVl[t.8R'j%Z3?OrQn_!XUPaMI[MPvn{r@,}C0LZhVGxalazUZI{_@AZ.if0yN0g1L$5+`6Xy={S)1@?oA*ySud['q8ED=3L,~L5WXYBq,%Puya&aA51$ret7C@%~.uJwOO-n9ZUCu!7LC6NcJJDhCQ(_9L5@Hqlabg1&D1jEpAl==Z1!+kzex$a3)0?DkF_c@EMRC12puzB{Ec3!dgee=SQ+{cdti6[sYdd*i)%C@zs@SCxb`.CYcUvm~]e^87QZd)GO7e'*'sQXD@28AH[@IC?O.r.=g_-..%zq97VE41{qg*UdL$^u+}=7=xTe!(tPCfW\02MERGE_MODULES"
"TaskLauncher"="1x98Jv22H@0~VD9T1QTr.K20*aG,w8y0b)KsA90PxctE9q2~G=8(BOg.TMWxIL%g['wTi8$14RYI+AXmrO=W,J[X+=)&KyPUahOm.%-d8UZ'5@MnG!Z6yZz.6}dWu?FbD9z5+,J)boNxF)&=G49Uf9&t=fD%(*HT48M9)=R_^@UeB&!u1-'XurzUW3U-q?p{7trSz?kla5vrE$EZz8}d*r$[coy({b+!.O8BJ?tr**7pAj1)wR&2zl~QI=Ewc..'NQ%q5MD?)6-[u@KbLU1A{mH0T^{Z0GjnF=Hy8OQBMuvLV!D$8nYEw9Wk[eJH7N)0!~f+9H2aM?f&D&ef30gS\02Minimal_Install"
"Calendar"="?_@fgerxf(E,9efDe`c_pZnG*MIxf(+G8efDe`c__!ujaPGxf(+G8efDe`c_Hv]P[47wf($-8efDe`c_0qp6JBDvf(r`7efDe`c_-qp6JBDvf(r`7efDe`c_*qp6JBDvf(r`7efDe`c_2,?LHJBwf($-8efDe`c_@JdG2*4)g([fAef_HaqQ?JdG2*4)g([fAef_HaqQNIdG2*4)g([fAef_HaqQ,qp6JBDvf(r`7efDe`c_RIdG2*4)g([fAef_HaqQQIdG2*4)g([fAef_HaqQIIdG2*4)g([fAef_HaqQOIdG2*4)g([fAef_HaqQJIdG2*4)g([fAef_HaqQLIdG2*4)g([fAef_HaqQPIdG2*4)g([fAef_HaqQMIdG2*4)g([fAef_HaqQKIdG2*4)g([fAef_HaqQ\02Minimal_Install"
"CalendarShared"="oMAot+Uvf(tf7efDe`c_fg6*&!lxf(XN30(tw2ha@7X?{i^!g(D*@efDe`c_?7X?{i^!g(D*@efDe`c_77X?{i^!g(D*@efDe`c_e^D{xo=!g(?v?efDe`c_W^uL?32B{?!Hfwf?cSS+1C6eC~xtf(PBDefDe`c_'mT]jI{jf(=1&L[-81-]wB^6o*-=w9H%Q`CjbZ)oWIdG2*4)g([fAef_HaqQVIdG2*4)g([fAef_HaqQSIdG2*4)g([fAef_HaqQUIdG2*4)g([fAef_HaqQTIdG2*4)g([fAef_HaqQ\02Minimal_Install"
"CalendarWCD"="eg6*&!lxf(XN30(tw2ha\02Minimal_Install"
"Claim_Graphic_Extensions"="lta['WiU(9My7rXPi2Gouz=_ap'aA9gLoktAx3Sq+Ryprj[e{9Pg?6U4~H{*5ewe?$'Zf@(eWdaBuZZe4E{'oom-l=lah1VZ+p[A+xn_A=]pR=a7MIvGKgzeTsM~1$n?n9LlE*_8nFHt6Ac,z}!z0AfR)lKw=,aHe)bVk317s?*4o3YAwRrnfTku5UruO=s@n$po]0sd]HbJ^z%i1?UI_&PGmgeo&QGw7J[[P93mk=Ywu(a=zf1t(EW-Y=LML^EicFabRxO}mg6{i8}FP}WsB6{yVLt.?ZHO3?AH?'f[(_kCbX~jz5vG-=^01Fay*--=~J1kgTem^?nkl06--(bF0ace`N3Z4A*@bJu1iL.Z1,5d$4bTg@n$uuq??Nm&k)*5B.=lL?dtE-gtg&1'?pcMAdQh~?WNvR8l_]@p\02Minimal_Install"
"DirectX"=""
"IE5.5"=""
"Typical_Install"="eOy@[.MtN?8Z~D=skFss+PbRd_Rc`@){sPL.~Ee*3(jEkY}w&@vY]2rOyio`82)n*-hAA==6GjT~,Rr-S`UM(fGYD?CCECz%=!`)1@)XV@3]k8YQ.rY+M=ILe$*I&SdIU?N(V)c_.o]B9Wc?VgG}7A&CBr=6xxPCz0~.&RZLi?O*9^y~!utoY$UA-zj@p927bPeHu@oXvf17{kNtD=j^!D-cB(YQSkeoqD^pQAt?~YuFGOHh)72z%-w(o?fV^Bl=bLYQ{X^oci9TE?kCtxWD=1YJ\02MERGE_MODULES"
"Custom_Install"="\02MERGE_MODULES"
"Custom_Setup_SBS"="\02Custom_Install"
"Custom_Setup_TEMP"="\02Custom_Install"
"Never_Install"="NnJ]1^ovf((6(L[+AFYbF1Op,Btvf(,F(L[+AFYb\02MERGE_MODULES"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="00102-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c209.msi"
"AuthorizedCDFPrefix"=""
"Comments"="Microsoft Picture It! Photo 2002"
"Contact"=""
"DisplayVersion"="6.0.0.0000"
"HelpLink"=expand:"http://www.microsoft.com/italy/"
"HelpTelephone"=" "
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{C769A271-7E1C-48F9-B331-474600DD4C06}"
"Publisher"="Microsoft"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{C769A271-7E1C-48F9-B331-474600DD4C06}"
"URLInfoAbout"="http://www.microsoft.com/italy/ms.htm"
"URLUpdateInfo"="http://go.microsoft.com/fwlink/?linkid=3641&clcid=0x410"
"VersionMajor"=dword:00000006
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:06000000
"Language"=dword:00000410
"DisplayName"="Microsoft Picture It! Photo 2002"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\Features]
@DACL=(02 0000)
"SoleFeature"="Ik]?4)TL19(qkzR1y0kI])Ob4dQ3p=9aaeOebj0(&,8ngYRNw?Tio7B1Xtnae^``U+A~[98,pZhJXEZ4K?h+(t3Sl8eX*A^GqqTH2s}OLXZ%y@p*3OM=ZHroE}ND*S@[y8d[rIaw,*[_[A3}&nlfH@OO*3mc8IdlW?gT9,999=wEr%@n-{Q_A@HI]be4*AtT*1z10CME.X_@S^=)R@~W}V^(h}Cx_CK-y8Qil9Ypm1SY}!'o^2+22W!9O=GJg`6~G3EM'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y=3&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B83&5,B^pf(V%eqFgkW_B67k)4s6tf(JR`qF-Q9q.,Nk(@OPzF?URs{=6-.T`G5)*ix!pQ@tkHV5f'^,TdAPug,_!l9jA+v&&CSFaKK=7{a[Kn?9Tg2AMx)wvN]`dh~jPm?hI`wz]1&TP"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="none"
"LocalPackage"="c:\\WINDOWS\\Installer\\377bd.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="2.70"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"=""
"InstallSource"="c:\\DOCUME~1\\PROPRI~1\\IMPOST~1\\Temp\\VIES5BB5\\UM\\"
"ModifyPath"=expand:"MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}"
"Publisher"="VERITAS Software"
"Readme"=""
"Size"=""
"EstimatedSize"=dword:00000856
"UninstallString"=expand:"MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000002
"VersionMinor"=dword:00000046
"WindowsInstaller"=dword:00000001
"Version"=dword:02460000
"Language"=dword:00000410
"DisplayName"="RecordNow Update Manager"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\Features]
@DACL=(02 0000)
"CORE"="'VZP-5y0L?SGHDH*O&'BU,c,nJ(th80MHJC^{^~b[2aqL,2uN9%=.0dv@dGTk@+GNr`fH?&a7cH=I]2ENh(*cu'8&@(0M8t6X=t0}wnrik7gp@[GWagjuU+CZz&?PL}a?AvNDRk?i=joeXYV2K=sG?TJMZk*17bG7gkK*(R4N@`u6c(%d^{_Wci=Y,,HR9EMYs$bd%C^qQX2peihC9etnOHm@0w9@'SxK^p$n=s*-@uJzW1-P{9'g6Tw7?UKyl]0mHLsR'8UxglIC=V0IP)Gi(uIn]Q-*}(pF9i0NFi!!sFxBMLlbl)'8Ao}D%kIOCa``tO'b{](W?qc.-e-E?ZI8HDu!3oOe9RWEGPxHg!Q(cA~s[,V2AkY&Jt0+KVHV_[2Lx8uV9P?JX8sDlI_q&7R`1(AS940risAj[zo(R8cX'=XY?1VkxZq2O]7q},ReXRm4?o5'zYh0Q0e)^GmK%]6a8%[.H+4lqwOk)D1(7LRW9KFaI+@I)y0CFG$0D+!g(3?!!!_GX=bBbxH8x=!g(3?!!!_GX=b83&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B=3&5,B^pf(V%eqFgkW_B'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y7YK?{]tuf(^?eqFgkW_B"
"CORE_HKCU"="\02CORE"
"EIWA"="4tC3GMW8L95HTjm3$+8[i9@4tL5LN9YU04HOe[pU7{{[_MBHEA]y&u]tWA(R0_W6q0b7S?3YB@fC-0U-6M37FDQ9V@2c25J@m2gkugpG*[$&{=?fB`(UokJM5F7R%Vh0J=m7FgEib$dn3?gw]Mm&M=&GQy)C3dRZD2%yUC5XO=DuYJ-VHUJDt,^1PV!&9@29eLj&c%tXmIzCQV,n-A?me0T*Rio]1nzlLypQL9Xf5Fk@=*$Iqy7.qk0`C9K}-SgEtmtFnb-pY.IcFAk!34[?KOTJS6q4L3s~8=XW%YO%'I1Pk`9@wB%U~9bNE65l)NIz=~9YGy$)}9)(?gGBv_,Njr3.NaAgk@88_=(RK6+1p-JTF{P'a=5'ZN-?g~_Hxo-Ehn*`*9f}cmYeVkpi5pdBahteV?w.*?5A9$cyWX*oYgd6P9c@mVxp_A&-ci]6!V?9o?pOt.J_!R3(DUP[.k]*d@B2v7`ENnH'Kqatn_%NW9M6.~0)QuKt3tQ^7y&qp80G}4-Iq2'Wsx96s!zkN=ZuL,qXE1un3B=JP*N$8?8U,p?{)u?IvFz0-SOcR9AW=DfaZJ0Q{5'c!p'zp8i5Bt+$'%!sJyjC*}8t}9{qLp$R$}SMF_]EJW8HE=$-FVR{E3E?)+Q8%Hpxj8Z@eTT9=F&&93Ye1)7ZJ9e0A8N)GCyPM%THB-n7Z@-r17-L_a(+lX6^$yyRz8[j)bdM!kk^.7.IH*w4P@u`3Bx4=C2&YCzmQzHEf=0[u1ZqNJO!eDP&1bc-e@?Y-8MR0Gd2Si*goE'a@9z)-.-kl_'ARI3[`07OEA]NmXi,Zep=`rh7vt'hNA2kujW-=S@G^D!?SkHlo@26),j'a`LB1QFgVD*'k=]Iv0)V.iX-RB%f*OwKT=1nDMK*eIAI-ty}fY'r-9~lj_C^@~0r(7gaNATY.A3-A~BxP..V%i6KpDp)W?aAX_6[Vrg2}(i(HFc)!=[dib8cLASWq't{!8{by=dxsjhF{(~lK=luP@9)S=.IW7xkDFe3'8(?8Zp~~@kM0@UmqgoWK[TPT`Q?(=a2p,ksw-9@I^V}N&0}a@CoWXGl]$j^GX5krmRIW9Qh{q$JkYU,v[4x=9d3(9QW~A&T[F~kl9o@)SIK99()+?+Q7v[d2Sra%`'1s@r0Z8'eh{8M]Yw-]L@j6=9Lwv*4EK9IDdAn0'D?e@Pc7RBGxyRLC?Lo2eTacA=tLkh)Qc[&S2BYx$WCP@-@-li%q~3jZqNDf!qS}9(q!Xi3Wulx2Xj,A5I5QA{6z[By5g%]iA0!XK%`w8D6W%X[Ev=XzSw6R9s9P?`ph9QD9Halytl4*OrvP=SQ4w!u&,J2QiAVhS?Sy9}^,b1~K]4[6F}NN($I5=HO's=Rn!&fxhvdbm~@Q9~(1U7b*Vx9QqGeo'6,j=cDhQzd@J?3jd~LdA*8t8L&WI(1EQvUxOUgkk-'j?Jz(r8V++Hp,f_OOvAD@?]tU!Jv}D+=t*%yi~57Y8vBgKT69XYMP,ylA6.+*=qf9*]?~D56h{S},{.Ci=}@eAdH=*MmZgR[tXgv=@Y]^b@[O3*6Xdh)US]*6Ar'{veTY{gB,Stm$rqgo=FRjE,1%)h_Rx34cBkrD9ePf{$(=gm.(`kQPt4XA?4O3yU[RAMTbz1fcj@zZ90?gIna]=g4"
"FEAT_EIWA_HKCU"="S4pwA!-+P9%U]kUnnuiO\02EIWA"
"ERO"="XuEaqhwvT9l{RJ0vX*XM4U'x?)]1c==e^!w}(!'uNbB'8MkUBAYaeMca1u}B{bsso)'Y1AYsydQoH(hYr?[c$-%Ko=1R_Z_(UJjzw^3M0w2C?=bsrvf2~SETIVm1tFk9f9f2KM5fIcd^su*lqXSg_?RjZe=TYi[-gbu@BwgI[@NvxyA__@=G'qHXE*%5W?gSGboq*?]eh2rzpMT_2=Z6!SnU3^_qj=IQVGcEe8t,vIaRF@=*o3j=W~USf@Irt$PNpg-w[!HCBx[h_AoZwvzDiOi2lkP_-WgH79D0zqtB~9%g"
"FEAT_ERO_HKCU"="CMfZN&m4z@'EDHc*M?AQS4pwA!-+P9%U]kUnnuiO\02ERO"
"MSINFO"="@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2ha"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\InstallProperties]
@DACL=(02 0000)
"LocalPackage"="c:\\WINDOWS\\Installer\\19c20d.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="2001"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{02040202-5D65-445A-B3B4-3DCE72BA0C6C}"
"NoRepair"=dword:00000001
"Publisher"="Microsoft Encarta"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{02040202-5D65-445A-B3B4-3DCE72BA0C6C}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:000007d1
"VersionMinor"=dword:000007d1
"WindowsInstaller"=dword:00000001
"Version"=dword:d1000000
"Language"=dword:00000410
"DisplayName"="Atlante mondiale Microsoft Encarta 2001"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\20CC412817268CD48BDD779933542046\Features]
@DACL=(02 0000)
"SoleFeature"="`@mNRvpIK=yTkzRB's)+}P{ZE-6Rt=3K^CU%`2Gwz5}jyuFOUA1S}@W=sU'WvdO*&^=wZ?6yAWjVR$NtvECYIJ9ei9?sh{!S0QaBu@SZO!'T89}D21w(O!&lnHQ2^rs)B@,3M'a}HJ=mz2(X@oJ0j8yE=dpU}a6(%7%XW$S`X=KEnIB%jg9{5&.kaH&r-?.xT`.20kzrs52tyO,Zj@m&1xv?[?hP+tyB%x$3P?O~[O).t*HL8fr].}d^p?LBU9D{o8($C)-''jP8+=vv(z.kC`Do@qL3+QmYt=C[C~nC0M)@12^riv?i`?6'4e=sF?t`.`^Y'sBd(?qKtOV?5nWjV}9U?cklL=TWz^CWgk3bDgo%yB&~z9P]WmI7Y.HY-dI_E_0l7=r-TGM~7pO_[}BD]U7b0?7vy}QlRBQ_C]-[?xd9+@{?0xdE8'^eS]NWK9Dao?PaZ&*&CzL]Cb%p_4a~bA{7UmBpG$p9f7)&RwOb6=MAtsmBbq0N,Nk(@OPzF?URs{=6-.T`&x$&z{At4?u)?[`P+G*s$[}kVo3h`AA^Xni5NnA-v%3Qf'=nf(9K)L[lj+'(=3&5,B^pf(V%eqFgkW_B83&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y67k)4s6tf(JR`qF-Q9q.A7k)4s6tf(JR`qF-Q9q.dbKx-lbmf(Gn,L[[Q~con=-.B]*OwW=j1$R-G-siAc4Ma^pEE'?58NS^)&i,J5E`6Vo6mh8_vNCQF55xIy,XV3_eW[@0?&K'9l!`tvQWp+!UM,ASDJd&*ys@@*HNQrmE@)@veePESwldqR^+CP7u-_8,)cy9FjI+9=kg9!cD1(@,j9kH}}y&9G,o_%P^PR@ZB]JqiSVIOo$JOks)4]@OWm@b,sGUU'W5Dhz3my9wjY'4C@C.^}7g$-6*47AHtBn]B3h_H7ArYV4-(Z96l]OSl~&]E6YpabQ[dw9X(^0I$yr8I3$[?Z==p59(=z3b%c?,ExDyf7g1sI=hJ(OBTf['{0TMVZaM}1=^S=CXceiBCA{El`HoaO@~7[xZ}D[($8Di@UTLcQ@][%hS}cry'_Xj[rAtkX9LeNpQ^CSSyml~!T0x_D=6jwo$`pyx7k]B%rOcMX9@c}m*ykL{5xYf4n47=Z=Hfn-25,{TfIhw'kn.zI?HjnM[ONYbUVEy*vSDbd9@Ad4=+WuwuW?gT9,999=wEr%@n-{Q_"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\Features]
@DACL=(02 0000)
"Help"="2JdG2*4)g([fAef_HaqQ1JdG2*4)g([fAef_HaqQ3JdG2*4)g([fAef_HaqQ7IdG2*4)g([fAef_HaqQC$Qk,HF)g(bxAef_HaqQB$Qk,HF)g(bxAef_HaqQ5IdG2*4)g([fAef_HaqQ6IdG2*4)g([fAef_HaqQ9IdG2*4)g([fAef_HaqQ.IdG2*4)g([fAef_HaqQ-IdG2*4)g([fAef_HaqQ%IdG2*4)g([fAef_HaqQ&IdG2*4)g([fAef_HaqQ'IdG2*4)g([fAef_HaqQ0IdG2*4)g([fAef_HaqQ3IdG2*4)g([fAef_HaqQ2IdG2*4)g([fAef_HaqQ1IdG2*4)g([fAef_HaqQ4IdG2*4)g([fAef_HaqQEJdG2*4)g([fAef_HaqQ"
"Language"="~IdG2*4)g([fAef_HaqQ$JdG2*4)g([fAef_HaqQ}IdG2*4)g([fAef_HaqQ!JdG2*4)g([fAef_HaqQxIdG2*4)g([fAef_HaqQwIdG2*4)g([fAef_HaqQuIdG2*4)g([fAef_HaqQrIdG2*4)g([fAef_HaqQzIdG2*4)g([fAef_HaqQvIdG2*4)g([fAef_HaqQ{IdG2*4)g([fAef_HaqQtIdG2*4)g([fAef_HaqQsIdG2*4)g([fAef_HaqQFJdG2*4)g([fAef_HaqQGJdG2*4)g([fAef_HaqQyIdG2*4)g([fAef_HaqQHJdG2*4)g([fAef_HaqQ"
"WksCore"="0.rxy&Pvf(r`7efDe`c_1.rxy&Pvf(r`7efDe`c_F=PS3b'wf(1R(L[+AFYb?`kGq)Dwf($-8efDe`c_piGhY]yyf(]Z30(tw2habwjyakIzf(tg=efDe`c_[4Rc[Mx~f(~j=efBq{id87X?{i^!g(D*@efDe`c_97X?{i^!g(D*@efDe`c_=7X?{i^!g(D*@efDe`c_5=dsaidGg?]U@EXNPh60GXnt@3*vf(r`7efDe`c_"
"Shell"="AC6eC~xtf(PBDefDe`c_HXnt@3*vf(r`7efDe`c_P@eTvh6xf(P230(tw2ha"
"Database"="&('5C`+$g(KD@efDe`c_'('5C`+$g(KD@efDe`c_)('5C`+$g(KD@efDe`c_"
"SSDB"=",C6eC~xtf(PBDefDe`c_5xRkPm%yf(YQ30(tw2ha6xRkPm%yf(YQ30(tw2ha"
"TaskLauncher"="Gdh_vCdvf(ui7efDe`c_LXqkDADMb9jmUpjT-+kqIdh_vCdvf(ui7efDe`c_}5&Zb{~xf(YQ30(tw2ha4JdG2*4)g([fAef_HaqQ6JdG2*4)g([fAef_HaqQ5JdG2*4)g([fAef_HaqQbXnt@3*vf(r`7efDe`c_b51=0rcQc8'8uWP!CDjj"
"WizardDlls"="YXnt@3*vf(r`7efDe`c_[Xnt@3*vf(r`7efDe`c_]Xnt@3*vf(r`7efDe`c_^Xnt@3*vf(r`7efDe`c_!G+JSXfvf(ui7efDe`c_Q@eTvh6xf(P230(tw2ha37X?{i^!g(D*@efDe`c_X07x$+]%g(b,AefDe`c_"
"WizardsTemplates"="+JdG2*4)g([fAef_HaqQ*JdG2*4)g([fAef_HaqQ-JdG2*4)g([fAef_HaqQ,JdG2*4)g([fAef_HaqQ0JdG2*4)g([fAef_HaqQ.JdG2*4)g([fAef_HaqQ"
"_F4411_Calendar_Migrate"="[yOHx[Rwf(Aw(L[+AFYba%yw@3`zf(d-*L[+AFYb"
"Calendar"="?_@fgerxf(E,9efDe`c_pZnG*MIxf(+G8efDe`c__!ujaPGxf(+G8efDe`c_Hv]P[47wf($-8efDe`c_0qp6JBDvf(r`7efDe`c_-qp6JBDvf(r`7efDe`c_*qp6JBDvf(r`7efDe`c_2,?LHJBwf($-8efDe`c_@JdG2*4)g([fAef_HaqQ?JdG2*4)g([fAef_HaqQNIdG2*4)g([fAef_HaqQ,qp6JBDvf(r`7efDe`c_RIdG2*4)g([fAef_HaqQQIdG2*4)g([fAef_HaqQIIdG2*4)g([fAef_HaqQOIdG2*4)g([fAef_HaqQJIdG2*4)g([fAef_HaqQLIdG2*4)g([fAef_HaqQPIdG2*4)g([fAef_HaqQMIdG2*4)g([fAef_HaqQKIdG2*4)g([fAef_HaqQ"
"CalendarWCD"="eg6*&!lxf(XN30(tw2ha"
"Works_Cal_Shared"="oMAot+Uvf(tf7efDe`c_fg6*&!lxf(XN30(tw2ha@7X?{i^!g(D*@efDe`c_?7X?{i^!g(D*@efDe`c_77X?{i^!g(D*@efDe`c_e^D{xo=!g(?v?efDe`c_W^uL?32B{?!Hfwf?cSS+1C6eC~xtf(PBDefDe`c_'mT]jI{jf(=1&L[-81-]wB^6o*-=w9H%Q`CjbZ)oWIdG2*4)g([fAef_HaqQVIdG2*4)g([fAef_HaqQSIdG2*4)g([fAef_HaqQUIdG2*4)g([fAef_HaqQTIdG2*4)g([fAef_HaqQ]4Rc[Mx~f(~j=efBq{id"
"Scrapbook"="9xE64Io!g(F1@efDe`c_8xE64Io!g(F1@efDe`c_Nm5970c4i@o3pyWB[CG&g.sgh)o$B=SrErN9()go[{x%JM6$g(MJ@efDe`c_[$.m!L6+j8QtBnz[r2KB"
"WP"="jXnt@3*vf(r`7efDe`c_tMAot+Uvf(tf7efDe`c_!n7JcjZzf(yv=efDe`c_%h1}5kkzf(%2?efDe`c_"
"Quill"="lXnt@3*vf(r`7efDe`c_mXnt@3*vf(r`7efDe`c_vMAot+Uvf(tf7efDe`c_\02WP"
"Imaging"="PpgF.6A!g(@y?efDe`c_QpgF.6A!g(@y?efDe`c_"
"Imaging_LeadTools"="c6E.)fi5y82v}%ZJ^@yK_'s_L^yo*@]ih3[ljOc@%Bl%QjPSs=qJgjBO[IK*5f)zW`jKV9y7t'MY(&PENjHTr?PZ(AIHpjtSvh7UVE$4wBE`'@FOMkvGdX`'6%NFq1Rxs?iIKGOwO.My'C`&K4APQ=Bh.HrAm+x?BD$PrPnb2=h&xmjk_U1U5b+BfL6$c=v7}_@)wW'V2T=&70CLX??(xl=P+_*WXh`!v0^k}=Z9U'$yo't4w~54TOkXM9nvqU49w.V]8ZvuYanP}=NolF^1pGXA2HJ=+Xm*.91{%gZ?_ci=c}HEBr8gk?-j=NwATVH%L}[8*H0E==G5NlD[VdhH3TTU`P(Ie?3`Rf%G5T&,"
"Themes"="!j`tIc$!g(9p?efDe`c_&JdG2*4)g([fAef_HaqQ"
"IE55_Install"="`PZF_6T1a8KAil*5s]hY5LC%P&6Zj9(hDnCu8[uz"
"AnswerWizard"="8IdG2*4)g([fAef_HaqQ&h1}5kkzf(%2?efDe`c_,}Yroi5zf(nT=efDe`c_"
"OnlineManual"=")IdG2*4)g([fAef_HaqQ(IdG2*4)g([fAef_HaqQD$Qk,HF)g(bxAef_HaqQ*IdG2*4)g([fAef_HaqQ"
"QuickTours"="AQyq+h{vf(yu7efDe`c_BQyq+h{vf(yu7efDe`c_"
"ReadMe"="!IdG2*4)g([fAef_HaqQ"
"FirstRun"="DJdG2*4)g([fAef_HaqQCJdG2*4)g([fAef_HaqQBJdG2*4)g([fAef_HaqQAJdG2*4)g([fAef_HaqQ[IdG2*4)g([fAef_HaqQ]IdG2*4)g([fAef_HaqQYIdG2*4)g([fAef_HaqQZIdG2*4)g([fAef_HaqQbiRc330wf(!*8efDe`c_XIdG2*4)g([fAef_HaqQ"
"AutoCorrect"="T24fx-z'dAo6TxbWUU`k(R%?txSGn@Ib1s74cD&S_X0Nle[(g(0UBefOyH&$T24fx-z'dAo6TxbWUU`k(R%?txSGn@Ib1s74cD&Sem)ZLfX(g(0UBefOyH&$"
"Grammar"="tstkJ[=wf()qr.QHog{AwstkJ[=wf()qr.QHog{A7rT]jI{jf(=1&L[-81-]9rT]jI{jf(=1&L[-81-]"
"ProofSer"="%JdG2*4)g([fAef_HaqQqWzNuQF!g(C'@efDe`c_"
"Spelling"="KrT]jI{jf(=1&L[-81-],qmp3?,wf(mhq.QrWeLdubos?8awf(mhq.QrWeLdGrT]jI{jf(=1&L[-81-]IrT]jI{jf(=1&L[-81-]"
"Thesaurus"="QrT]jI{jf(=1&L[-81-]'stkJ[=wf()qr.QHog{A(stkJ[=wf()qr.QHog{AO(cRmSikf()p*L[~4q&_OrT]jI{jf(=1&L[-81-]"
"Tasks_Min"="mQ'+Xvp5C=_QCMGzVHkwdIdG2*4)g([fAef_HaqQ{@Vba?G2'=!k3vmslh(2?WXdeL]7^92Zm$z4hAVIMnJ@C?B&m?@T,+xMg0WPNOL(P!Qzf(tg=efDe`c_jV&+khs$g(OP@efDe`c_+BdncKKxf(+G8efDe`c_Po55h$^xf(4`8efDe`c_Do55h$^xf(4`8efDe`c_Co55h$^xf(4`8efDe`c_nIdG2*4)g([fAef_HaqQlIdG2*4)g([fAef_HaqQjIdG2*4)g([fAef_HaqQhIdG2*4)g([fAef_HaqQr-j@O[_*g(%!Cef_HaqQeIdG2*4)g([fAef_HaqQiIdG2*4)g([fAef_HaqQqIdG2*4)g([fAef_HaqQpIdG2*4)g([fAef_HaqQoIdG2*4)g([fAef_HaqQLOL(P!Qzf(tg=efDe`c_mIdG2*4)g([fAef_HaqQkIdG2*4)g([fAef_HaqQgIdG2*4)g([fAef_HaqQEOL(P!Qzf(tg=efDe`c_"
"Tasks_Basic"="^ZOjk!C9eA__[q9e3bCw%t02x1[)[AjF'^QQJCUx%~v6ntj_l?`DR!Y-!GflcIdG2*4)g([fAef_HaqQbIdG2*4)g([fAef_HaqQ`IdG2*4)g([fAef_HaqQ^IdG2*4)g([fAef_HaqQ"
"AddressBook"="gAwnaaAxf(Q530(tw2hahAwnaaAxf(Q530(tw2haBm4tK0qyf(c.=efDe`c_I*^Nk$czf(zy=efDe`c_Rwl7d]izf($.?efDe`c_"
"_F13308_WAB"="~5&Zb{~xf(YQ30(tw2ha!6&Zb{~xf(YQ30(tw2ha"
"System"="IXnt@3*vf(r`7efDe`c__iRc330wf(!*8efDe`c_`iRc330wf(!*8efDe`c_aiRc330wf(!*8efDe`c_y'P37!k!g(E-@efDe`c_y''5C`+$g(KD@efDe`c_z''5C`+$g(KD@efDe`c_Y4,ZYW$$g(H7@efDe`c_XXnt@3*vf(r`7efDe`c_QXnt@3*vf(r`7efDe`c_=3&5,B^pf(V%eqFgkW_BDWlh[]Tvf(sc7efDe`c_B3&5,B^pf(V%eqFgkW_B"
"commoncontrols"="LXnt@3*vf(r`7efDe`c_\02System"
"lineservices"="OXnt@3*vf(r`7efDe`c_92Cm?6,wf(~&8efDe`c_PXnt@3*vf(r`7efDe`c_\02System"
"help_sys"="\02System"
"WebUpdate"="~sPN%2iJOA5,[d2NtDxo'JdG2*4)g([fAef_HaqQB0wGq)Cb79ew8[-Q[p&9(JdG2*4)g([fAef_HaqQIJdG2*4)g([fAef_HaqQ"
"_F6534_CAG_ClipGallery"=""
"_F6536_CAG_Standard"=""
"_F6538_CAG_Works"=""
"ShoeBox"="oumbJ.$zZ@75PHyRNY(K?BL0e'K1d@ia'AF'Yn4Fg=n`VHq2,?Rqh@[gV9z?yit79O-pF?@&}B]AJCubsB{r5!yZD=$eVj0~(Ib)C?G3di8iCA&%i@eOGhq(bn-5t!!Ch=N0G$u~!GBRu.'b9VZqf(g6u.Q(31aRw.'b9VZqf(g6u.Q(31aRNVWz?4H7&=hHi^e3.kT?q~]q3JEut?IpzH)tSFT'S3bTdDY)a@!)]O*nqy_+=Hn1UBHJj=~6gYEl^}(50Os8=b%t7?kA~0i2tj4G.-Q0tzkGZ9~)`CRm6x`We3aV+5Lyf(C5Def%06$%RC,h.~8wf(x7fqF,Y?r2ychI(5Lyf(C5Def%06$%q+jjF4iyf(s&Aef%06$%kwgD19iyf(t)Aef%06$%A3={H4iyf(s&Aef%06$%(=Y8nB{vf(kbq.QrWeLdxchI(5Lyf(C5Def%06$%81-z%Z}tf(Cyn.Q2tAE!"
"Shoebox_Max"="7FnXk`]H6@x.9eWqkA)t\02ShoeBox"
"Converters_Min"="7q@V?zzhbA-G*GwF7uo.S,-z%Z}tf(Cyn.Q2tAE!@Y-z%Z}tf(Cyn.Q2tAE!r&pvh[rxf(D)9efDe`c_q&pvh[rxf(D)9efDe`c_@8[*5Arvf(wo7efDe`c_"
"Converters_Basic"="c!)Q2Y](,9$q!vy)yG?TSr,z%Z}tf(Cyn.Q2tAE!ir,z%Z}tf(Cyn.Q2tAE!9s,z%Z}tf(Cyn.Q2tAE!&Y-z%Z}tf(Cyn.Q2tAE![Ee^AL$tf(Cyn.Q2tAE!7vT]jI{jf(=1&L[-81-]!Y{~Fdj{f(kw,0(EJrk@5vT]jI{jf(=1&L[-81-]+`cM^6[rj@.y0WgKfuHr`I&XGh4NE9op}nJ.'2Ndd9yqm~-O1A4HG]Yhm`NE"
"Converters_Max"="cfbgi6u`t=o]^30@03C_"
"EquationEditor"="buAzs!vtf(Cyn.Q2tAE!FyAzs!vtf(Cyn.Q2tAE!"
"GraphicFilters_Min"="b}i[T1stf(Cyn.Q2tAE!w}i[T1stf(Cyn.Q2tAE!O{i[T1stf(Cyn.Q2tAE!9xi[T1stf(Cyn.Q2tAE!"
"GraphicFilters_Basic"="gyi[T1stf(Cyn.Q2tAE!~HdG2*4)g([fAef_HaqQ]qT]jI{jf(=1&L[-81-]yqT]jI{jf(=1&L[-81-]"
"MSDraw"="4g-cflYxf(3]8efDe`c_{HdG2*4)g([fAef_HaqQ6g-cflYxf(3]8efDe`c_5g-cflYxf(3]8efDe`c_}HdG2*4)g([fAef_HaqQ"
"MSInfo"="@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2ha"
"NoteIt"="~X{~Fdj{f(kw,0(EJrk@}X{~Fdj{f(kw,0(EJrk@"
"WordArt"="{X{~Fdj{f(kw,0(EJrk@K}PU+=k%g(FfAef^*}-RzX{~Fdj{f(kw,0(EJrk@"
"Shared"="-fCo)=Lnf(E4*L[xeX)y"
"_F14067_CustomAction_MSM"="kfh5BaGzf(c**L[+AFYb"
"FUD"="cA%Ty(UQz9H72WWQE*6-"
"Fonts"="Qa72Y?!lf({jeqFYK{3kva72Y?!lf({jeqFYK{3kbc72Y?!lf({jeqFYK{3kLW!c'ANyf(Yn9efDe`c_KW!c'ANyf(Yn9efDe`c_gb72Y?!lf({jeqFYK{3k[a72Y?!lf({jeqFYK{3kra72Y?!lf({jeqFYK{3kta72Y?!lf({jeqFYK{3kza72Y?!lf({jeqFYK{3kib72Y?!lf({jeqFYK{3k!b72Y?!lf({jeqFYK{3k'b72Y?!lf({jeqFYK{3k)b72Y?!lf({jeqFYK{3k`n]vpzi&g(]x@efOyH&$-b72Y?!lf({jeqFYK{3k2b72Y?!lf({jeqFYK{3k4b72Y?!lf({jeqFYK{3k@b72Y?!lf({jeqFYK{3kBb72Y?!lf({jeqFYK{3k)0~0`xhkf(7)dqFgkW_Bkb72Y?!lf({jeqFYK{3k$c72Y?!lf({jeqFYK{3klFrT`_AWG)i2CefPB7^,7c72Y?!lf({jeqFYK{3k9c72Y?!lf({jeqFYK{3kKc72Y?!lf({jeqFYK{3krrUgDcxYZ8WY-?SRlc(&$ReZR@_kf(1rcqFgkW_B`c72Y?!lf({jeqFYK{3k20~0`xhkf(7)dqFgkW_Bjc72Y?!lf({jeqFYK{3k"
"_F11860_MDAC_Archive"="d(3qxGpxf(XN30(tw2ha\02Calendar"
"IE55"="NnJ]1^ovf((6(L[+AFYbF1Op,Btvf(,F(L[+AFYb\02IE55_Install"
"Shoebox_Never"="8mjF_J75&?z9bvb1NXWU!k$DgrPlp=1]k(jr61G3dOVw5,2fQ9(7S)c8{`m.\02ShoeBox"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="00102-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c201.msi"
"AuthorizedCDFPrefix"=""
"Comments"="Installazione di Microsoft Works 6.0."
"Contact"=""
"DisplayVersion"="06.00.0000"
"HelpLink"=expand:"http://www.microsoft.com/italy/support/"
"HelpTelephone"=" "
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{79F0EB92-9920-11D4-AFFA-00C04F443448}"
"Publisher"="Microsoft Corporation"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{79F0EB92-9920-11D4-AFFA-00C04F443448}"
"URLInfoAbout"="http://www.microsoft.com"
"URLUpdateInfo"="http://www.microsoft.com/italy/ms.htm"
"VersionMajor"=dword:00000006
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:06000000
"Language"=dword:00000410
"DisplayName"="Microsoft Works 6.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\Features]
@DACL=(02 0000)
"Typical"="%UOQhc0&*@vBu!gQnNt61?.LDgP}l9Q(M^%f?_qr_k,PwJuz^=87nWo[kL'Zba~}P(&fc=@bu0MzXhd@%)Ix3!{77?,o*80T4BpsVE5q`cP,o9rEI&nfCotMLZcWP8V!BA)7Gwf]`Scdus0wy6^6o8QmwsO6*&{%jmPX^)%0b=]J{y*An(dwlzOxqCpnAA1%L$R8+y}Gg`'e8(J,k=4(?.ujGG'K*TO'&B-L2@LI_YE4xSJ%RvyQzsNET9}8vivZ82w`0,X2KJH.g(cM!!!FxVSZL@gdis&rWAek+-T(HRpxWP%P.S[pq=.(bbQ9VVEr'.i$2`'85Aw$lt^QmP@z,gH.[lmkf(`%(L[U]z)5"
"ARX"="\02Typical"
"Data_EUR_ARX"="%UOQhc0&*@vBu!gQnNt61cW[7Q(=I@@nH@%9VgxQ=w`mGK8b5?lefn?xY),EVg%Use]Mg9B%]X*8iTVF6te?k~R(@@LdU$]^.bTNFDOOte[AaA2.~sVdd!N2W!L?&taWt=~P-&B24`Nws(+UR-xjo=}`W5dHkKLrvuc~fkV5m9K]`]5JH?]p\02ARX"
"Resource_0809_ARX"="H.wa+5WGu8pXBQkbLh]5OrRiWcB1{9Ce,(?_MK~=NKP4o.TJd9F,NrW+suTX\02Data_EUR_ARX"
"ExeArx_"="fDHF017Ck9fqJL9-26vBD_m}r1*XBAl(.lyf^M`LZflL^!=6X?6@&1zAW+J,^0kFNw,S_=A1a7iiw`IZkj!u1T_VD@g^-x377knGf^YcH9E+_@z[CnJkmM!e)+T{s&8&!@mDOHIRbCf.3Zzd6wH&m8oBN]=+j@5WdFTwqYYSk@z~NL^^Wb{u940=X='LQ?14_)k7u}DIR^tXoU7Wt@i!Z]E.f$T*PZBYkvFW-@_n}24Z!'+2+wbWoRBpM@[f!Z'oYJd*`NN2RToe}8Ke.AgRDetfX,Wmt9Hq!AmF!sq,~yEYxzBIL24%@?0HMR8LK+forJIx[P7Gi9oEa7qvn79+-nd+lj`[q@mvgzYUN5.OHnh?-4]Up8Z{J%*yoESP)(ef!y'`d8Mcx}5=B2)@\02Resource_0809_ARX"
"Complete"=""
"CD_EUR"="8TO7ADTbf?}__ONt'FQ_r7jv!(7rC=K5]]v7j]iVdLN?gX+k^8`^FHJWo9J[O.[m0rBj,9cDNvGg2A!-\02Complete"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="55063-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c211.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="9.00.17.0200"
"HelpLink"=expand:"http://www.Microsoft.com/support"
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"="c:\\Programmi\\Microsoft AutoRoute\\"
"ModifyPath"=expand:"MsiExec.exe /I{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}"
"NoRepair"=dword:00000001
"Publisher"="Microsoft"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000009
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:09000011
"Language"=dword:00000410
"DisplayName"="Microsoft AutoRoute 2002"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\EB79C053C7D38EE4AB9A00CB3B5D2472\Features]
@DACL=(02 0000)
"WebPublFiles"="]aZF&kXsf(lf*L[_GKba}gbvW,Qmf(G'*L[H+8]b_}IuVaZtf(Cyn.Q2tAE!_{@h=i,nf(R8(L[JO9}X_}M^V8Xqf(Rp)L[_GKbahlT]jI{jf(=1&L[-81-][qFvyQP~f(8Hw.QdFt.0)VWe6E%wf(S5YX%43_cm"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'explorer.exe'(3092)
c:\progra~1\ALICET~1\SMARTB~1\SBHook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\programmi\Nokia\Nokia PC Suite 6\phonebrowser.dll
c:\programmi\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\programmi\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_ita.nlr
c:\programmi\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\wscntfy.exe
c:\programmi\Alice ti aiuta\bin\mpbtn.exe
.
**************************************************************************
.
Ora fine scansione: 2010-12-01 21:57:08 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2010-12-01 20:57

Pre-Run: 13.948.968.960 byte disponibili
Post-Run: 16.185.708.544 byte disponibili

- - End Of File - - 479B5D2AB1135C908CAB033BCFE3B4F7

da **FDAC** » mer dic 01, 2010 10:09 pm

Scarica Avenger: http://swandog46.geekstogo.com/avenger.zip
● scompattalo in una sua cartella non temporanea e non sul Desktop
● avvia Avenger
● clicca OK
● inserisci queste righe nel riquadro bianco, con un semplice copia e incolla:

Registry keys to delete:
[HKEY_LOCAL_MACHINE\software\Microsoft\WBEM\PROVIDERS\Logging]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\Secure]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0000B11000063D11C8EF00054038389C]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\0A777F49BCECBB049BEAE74EC58E16CA]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\142CF7AB0C28806409E6CB54044BD4A9]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\20204020CBCB0E94FBF413C1ACE4A5F6]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\21B0747772942D115BEF0006799C897E]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\482EBB0A8BD7FF44A87DDED1D227F343]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\6BC47400D0E93D110848000CF43A92AA]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\CEB9794B854D9284BA787B0A326D941C]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\20CC412817268CD48BDD779933542046\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\Features]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\InstallProperties]
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\EB79C053C7D38EE4AB9A00CB3B5D2472\Features]

● togli la spunta da Scan for Rootkit
● clicca su Execute e aspetta qualche minuto
● rispondi Yes alla richiesta Are you sure you want to execute the current script?
● rispondi Yes alla successiva richiesta: First step completed --- The Avenger has been successfully set up to run on next boot. Reboot now?
● il sistema dovrebbe riavviarsi; se così non fosse, riavvialo tu
Al termine dell'operazione:
● vai in Disco Locale C:, cerca il log dal nome avenger.txt ed allegalo

Nota:
● la nuova versione di Avenger ha un problema che si presenta abbastanza di frequente, quando tenti di eseguire lo script ottieni questo messaggio di errore:
Error: invalid script. Avalid script must begin with a command directive.
Aborting execution!
In questo caso prova a cancellare e riscrivere la prima riga dello script e poi a rieseguirlo

da **Delfino81** » mer dic 01, 2010 10:10 pm

Scusami ci ho scritto sopra..

ComboFix 10-11-30.09 - Proprietario 01/12/2010 21.29.58.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.39.1040.18.1279.953 [GMT 1:00]
Eseguito da: c:\documents and settings\Proprietario\Desktop\ComboFix.exe
Opzioni usate :: c:\documents and settings\Proprietario\Desktop\CFScript.txt

FILE ::
"c:\windows\system32\dllcache\moviemk.exe"
"c:\windows\system32\drivers\7053255.sys"
"c:\windows\system32\drivers\70532551.sys"
"c:\windows\system32\drivers\70532552.sys"
"c:\windows\system32\drivers\pxkbf.sys"
"c:\windows\system32\unacev2.dll"
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\dllcache\moviemk.exe
c:\windows\system32\drivers\7053255.sys
c:\windows\system32\drivers\70532551.sys
c:\windows\system32\drivers\70532552.sys

.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_70532551
-------\Legacy_70532552
-------\Legacy_setup_9.0.0.722_28.11.2010_16-17drv
-------\Service_70532551
-------\Service_70532552
-------\Service_setup_9.0.0.722_28.11.2010_16-17drv

((((((((((((((((((((((((( Files Creati Da 2010-11-01 al 2010-12-01 )))))))))))))))))))))))))))))))))))
.

2010-11-28 16:31 . 2010-12-01 20:14 -------- d-----w- c:\programmi\Emsisoft Anti-Malware
2010-11-28 14:22 . 2010-11-28 14:23 -------- d-----w- c:\documents and settings\Administrator.ROSA
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\documents and settings\Proprietario\Dati applicazioni\Malwarebytes
2010-11-27 20:50 . 2010-04-29 14:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2010-11-27 20:50 . 2010-11-27 20:50 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-11-27 20:50 . 2010-04-29 14:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-11-27 20:32 . 2010-11-27 20:32 -------- d-----w- C:\Nuova cartella
2010-11-27 18:57 . 2005-05-04 13:45 2890240 ----a-w- c:\windows\system32\msi.dll
2010-11-27 18:57 . 2005-05-04 13:45 884736 ----a-w- c:\windows\system32\msimsg.dll
2010-11-27 18:57 . 2005-05-04 13:45 78848 ----a-w- c:\windows\system32\msiexec.exe
2010-11-27 18:57 . 2005-05-04 13:45 271360 ----a-w- c:\windows\system32\msihnd.dll
2010-11-27 18:57 . 2005-05-04 13:45 15360 ----a-w- c:\windows\system32\msisip.dll
2010-11-27 18:39 . 2010-11-27 18:40 -------- d-----w- c:\programmi\Cobian Backup 10
2010-11-27 18:36 . 2010-11-27 18:36 -------- d-----w- c:\documents and settings\Proprietario\Dati applicazioni\Comodo
2010-11-27 18:33 . 2010-11-27 18:33 -------- d-----w- c:\programmi\Comodo
2010-11-27 12:00 . 2010-11-27 12:00 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Avg7
2010-11-19 18:49 . 2010-11-27 11:56 16968 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2010-11-19 18:48 . 2010-11-19 18:48 -------- d-----w- c:\programmi\Hitman Pro 3.5
2010-11-19 18:47 . 2010-11-19 18:48 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Hitman Pro
2010-11-18 18:31 . 2010-11-18 23:17 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\PCPitstop
2010-11-18 18:31 . 2010-11-27 12:40 -------- d-----w- c:\programmi\PCPitstop
2010-11-17 19:09 . 2010-11-17 19:09 12552 ----a-w- c:\windows\system32\drivers\hddirect.sys
2010-11-15 21:10 . 2010-11-15 21:10 -------- d-----w- C:\$AVG
2010-11-13 22:10 . 2010-11-13 22:10 -------- d-----w- c:\programmi\CCleaner
2010-11-13 21:40 . 2010-11-13 22:08 -------- d-----w- c:\documents and settings\Proprietario\Impostazioni locali\Dati applicazioni\Temp
2010-11-13 21:39 . 2010-11-15 23:36 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Alwil Software
2010-11-13 21:39 . 2010-11-13 21:39 -------- d-----w- c:\programmi\Alwil Software
2010-11-13 19:29 . 2010-11-13 19:29 -------- d-----w- c:\documents and settings\Proprietario\DoctorWeb
2010-11-13 18:59 . 2009-06-25 08:44 730112 ----a-w- c:\windows\system32\lsasrv.dll
2010-11-13 18:59 . 2009-06-22 11:34 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2010-11-13 18:07 . 2010-11-28 22:11 -------- d-----w- c:\windows\system32\CatRoot_bak
2010-11-13 18:04 . 2009-06-21 22:05 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2010-11-13 18:02 . 2008-06-14 17:59 272768 -c----w- c:\windows\system32\dllcache\bthport.sys
2010-11-13 18:01 . 2009-11-21 16:38 470528 -c----w- c:\windows\system32\dllcache\aclayers.dll
2010-11-13 18:00 . 2010-06-14 14:30 743936 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2010-11-11 18:30 . 2008-05-01 14:31 331776 -c----w- c:\windows\system32\dllcache\msadce.dll
2010-11-11 18:29 . 2010-02-12 10:03 293376 ----a-w- c:\windows\system32\browserchoice.exe
2010-11-11 18:23 . 2009-06-05 07:42 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2010-11-11 18:20 . 2008-04-21 21:26 219136 -c----w- c:\windows\system32\dllcache\wordpad.exe
2010-11-11 18:16 . 2010-11-28 23:20 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\MFAData
2010-11-11 18:11 . 2010-11-11 18:11 -------- d-----w- c:\documents and settings\NetworkService\Impostazioni locali\Dati applicazioni\Google
2010-11-11 18:06 . 2010-11-11 18:06 -------- d-----w- c:\documents and settings\LocalService\Impostazioni locali\Dati applicazioni\Google

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Motive SmartBridge"="c:\progra~1\ALICET~1\SMARTB~1\MotiveSB.exe" [2006-04-21 438359]
"Cobian Backup 10 Interface"="c:\programmi\Cobian Backup 10\cbInterface.exe" [2010-09-23 3154432]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2004-08-19 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Suite"="regedit -s" [X]

c:\documents and settings\Proprietario\Menu Avvio\Programmi\Esecuzione automatica\
setup_9.0.0.722_28.11.2010_16-17.lnk - c:\documents and settings\Proprietario\Documenti\Remover antivirus\Virus Removal Tool\setup_9.0.0.722_28.11.2010_16-17\startup.exe [2010-11-28 72208]

c:\documents and settings\Administrator.ROSA\Menu Avvio\Programmi\Esecuzione automatica\
ddrive.js [2002-8-16 1611]

c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Alice ti aiuta.lnk - c:\programmi\Alice ti aiuta\bin\matcli.exe [2002-1-1 217088]
Avvio veloce di Adobe Reader.lnk - c:\programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2004-12-14 29696]
Microsoft Office.lnk - c:\programmi\Microsoft Office\Office\OSA9.EXE [1999-2-18 65588]

c:\documents and settings\Default User\Menu Avvio\Programmi\Esecuzione automatica\
ddrive.js [2002-8-16 1611]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegedit"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HDDirect.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"1600:TCP"= 1600:TCP:xmxxf

R1 StarPortLite;StarPort Storage Controller (Lite);c:\windows\system32\drivers\StarPortLite.sys [01/01/2002 0.05.50 85760]
R2 ComodoBackupService;ComodoBackupService;c:\programmi\Comodo\BackUp\CmdBkSvc.exe [27/11/2010 19.33.36 1023488]
R2 PPPoEService;PPPoE Service;c:\progra~1\Alice\ALICEE~1\app\pppoeservice.exe [01/01/2002 0.14.30 49152]
S2 epydlcdkv;Universal Windows;c:\windows\system32\svchost.exe -k netsvcs [17/09/2002 0.47.21 14336]
S2 gupdate;Servizio di Google Update (gupdate);c:\programmi\Google\Update\GoogleUpdate.exe [17/09/2003 2.52.17 135664]
S3 HDDirect;Hard Disk Direct Control;c:\windows\system32\drivers\hddirect.sys [17/11/2010 20.09.45 12552]
S4 sptd;sptd;c:\windows\system32\drivers\sptd.sys [06/08/2006 18.00.34 717296]
S4 Win32 USB2.0 Driver;Win32 USB2.0 Driver; [x]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
epydlcdkv
.
Contenuto della cartella 'Scheduled Tasks'

2010-12-01 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2003-09-17 01:51]

2010-12-01 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2003-09-17 01:51]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.it/
mStart Page = hxxp://it6.hpwis.com/
uInternet Settings,ProxyOverride = 127.0.0.1;localhost
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Google Sidewiki... - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
.
- - - - CHIAVI ORFANE RIMOSSE - - - -

AddRemove-{2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\Google\Google Toolbar\Component\GoogleToolbarManager_AC0049E063DE2AEA.exe

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-12-01 21:49
Windows 5.1.2600 Service Pack 2 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\Features]
@DACL=(02 0000)
"_F4381_System"="y''5C`+$g(KD@efDe`c_z''5C`+$g(KD@efDe`c_"
"_F4385_lineservices"="92Cm?6,wf(~&8efDe`c_PXnt@3*vf(r`7efDe`c_\02_F4381_System"
"_F4389_help"="RXnt@3*vf(r`7efDe`c_SXnt@3*vf(r`7efDe`c_,gH.[lmkf(`%(L[U]z)5\02_F4381_System"
"_F12094_Shared"="-fCo)=Lnf(E4*L[xeX)y"
"IE5.5_Dependency"="x$vuPlf0q@2a1_`&]uX]"
"MERGE_MODULES"=""
"SYSTEM_MM"="_'B@&~,wu9`+ID@.clc,\02MERGE_MODULES"
"DEBUG_MM"="\02MERGE_MODULES"
"Minimal_Install"="&6$2g7@^L9`1oPe-?m)Dh20cMsbJV?l9z,cKkVxHhP,d^l)(k@Cb`,O!.5e=r@URMF*n_8hL[wIMa8[LrXse-m=O]8DJ*VcJ1^LHibMU`PO}t@~9aWlizH*f]91WpR=YQ=+p&&2`-[c0ewcC-!pL[=36%CR5$X9D58wyFF~LTAio]paX'{)&^}H^ZnZt5@k?X~3=6SW*k12FXC5$0=0HqncP_mM%iA1Echww^9p(WRTUW+haW(S`*c{o8@GEV%VK6-6ZOXXY,v&,L=+j]U2+)UCk!pqOya%Bp8E{hwB&jdK^@XjP[a-^l=O&j@Va0cCsh'?HLVsH)@F+GDjzT`{xDeMzjK8ez@j8?$h^emAM(`Wu.BN{)=ttfBn7Lqhm4Ex6230&.=3WL'Xdcx+s7W]T9$098=uc0D%68^.w?udPbnZ7i9RfO4VG'zZ`8jRXwe{{89`Pcvm{ceWplAv!&swMa=Dco84^Cb963P2EGaI2CAI(r]6xIZ-w)8_E)oiM-?,{xOa$BP$X6*BY.R3km@L%WJ50M~Kdi^gZwbA-F9]gf{oVvJb?.^,LE06+'?8[ROX-CJ1VBX(7s-$K~@h*B^s%{Yww`Jf?p-9%AAK_X+9S_?2oHXioL2-X39gy254(0G[%*-dB9&e2H@IZ4Q[LF?%Jw'-DVjhul9mF)Kk7y167GZ)b++Ivb8Fv[P(+Nisy[[tSavB3r@y]J32fK4fRPRh7{)@-l9.sM0C_4MoPpuyW?Dv-.?qgq3Y?'gQW'3O6v{7dq8}Gb`0D2~?WJ3_-U2U3z9apN+td6MqABvT~WZY3594HihAf-[WK!{.7U%I5a?RBwSSUXzI(LRG.jOE[a=5CNEl6l2TjW)Y[YeW2)?9u`udIB$9ml9GQrA349?f})8jXy@-'fZXUPRXi+Awi7AVNxpl@$-G$eh&Lz=+NV*0g=~@0$.%y[I=quello?hW=DwAv&80EL39.k%D'@.=O_hRcL'v~{[L0unWn?'y7!$GGrRU$q=5A8e0q9c??8f`_SfXnZfsOZAvI9[$Im2nSo{N.'WmTGCH~?Zt4G)MTT31C+yyK~3Z{@LF5Z%aR@C9rC?x6*=8E=65O6CwaNKg6UCmocPX(9V*Anxr_iUFl@AuAx-Du=X]%jk,MrTK4~66eo5~@?[RK,GkfUXp-W!_!*A@KAp$wGmXkH}`m]4XYo_^g=mj92E*kIWLdq`_NbXf'?OH!6pNs9+]mQVRCk6{v8oFN76b6?EQ6f1G?C46`9?AXdVr{&(NPA6rV,8hb@jej`4ekrJV(V*9[RHuZ9B{joRs`yj'$%@bRqaBf=aCJgopDG(uf0R~q]U{4=Bq2T^TAGW6qEXT`(~NLAUYe(,aTa_8{Mv2!q5O7A~DUp_}f0YSoFyA3hhxq9xb^t7T3aKUkhDt2GNpK9zsMGtO}_Tr4j{wn_`h(@}SL%7`%YeU`ZVysn}h!9moAt,K+Xv(!tSYS).bRAzBfUr2!BP`Ds__JNbrC@+lOnn5W)6JFZ5gwc?Z=@^BB8rmyycnahGy3S]X1Aymq*[p(UlZuJv9@]Mvx8aeTz.zN?n(B3oGkg^96A&_BKM55o%XFw]g.1?H.9y(]zRg9}QNrxchLh-mE9.ygn=9mGl![TimF]5qP@1(k8d7LR@Q(]J2[vdCdA*'J_d3iky*Vd]n7tM&[A@501cXV,{8WqKIZHBnV9OTv-JCRHEQ&oe(&i8e$=9PT{Z[fZ{G6NMBy!QNc=tc9?&gj=GnZ%&S?Bj'+9AHa~nQGEm68Hgt^EYGW?slP+IArkV4hb*mgP?Jx?G]_N-~X+3=EXn$FI_Hr8fWguZ*C-yWcwaI+3chg945KJhT[?@.$0IvPjKf29zCdY8Nrt)^AKeIhbAmo98W2PqC4l[WtD(X-h+4m9(4O,_Zi-ePtE%Tux3JT@)aNS2(z$BPlHR@SOY$g8?lhxHq?'XOP??HNnMk_=!A$=*fvld+0XyVUGiAd?E&nu'}(lKzKWZ)(r0T]='M&jZnQ&&i@s)6.qg_a9Mc%pp4,o2''o,t-%zIA9^NbbAX`Ue9Fkq8FH`(6@HX0mtJ.yV+6No?tH6La=]-A$2EFhRfm2+_,e7Iz9u,-rGY,kt5?3ny={l+c=BJqp(jkf2`pbH'yaPsG@,s~,zM~_k1)8@yIX~eo=(0@,w~tYtDGy0YJ$oIUA`VoRMXS[eK4^{*Pf(b7A]pp?5u`D3bWbW6f.+b{@t*MFBK%@By[?&&SE7.^8Pu&uvvZH1z*}_KJ-TOn9`JiQ?LQ&y0*VaU3TM07?DHL]$Uc.`f{`P{&C%W[8IMd%[^94$y`vY)3tp&Z@`*NQPV3]1aE}bgLE)+Z8=!XpvHv)Nga7q'a]$Z7@,l)^?LowmP7@fw.9(fz9my[ZHT^{ZLtEsqKgP$N?T3C&VbjgIB``@GTMyGVAMvpe+El2s.RdO*mfXp2@K2b.g{'dBHu.'b9VZqf(g6u.Q(31aRw.'b9VZqf(g6u.Q(31aR67k)4s6tf(JR`qF-Q9q.=3&5,B^pf(V%eqFgkW_B7YK?{]tuf(^?eqFgkW_BB3&5,B^pf(V%eqFgkW_Bn^gPBBXtf(Cyn.Q2tAE!&}EZ3m9lf()xcqFJOfBte3aV+5Lyf(C5Def%06$%RC,h.~8wf(x7fqF,Y?r2ychI(5Lyf(C5Def%06$%q+jjF4iyf(s&Aef%06$%kwgD19iyf(t)Aef%06$%A3={H4iyf(s&Aef%06$%(=Y8nB{vf(kbq.QrWeLdxchI(5Lyf(C5Def%06$%81-z%Z}tf(Cyn.Q2tAE!dtsdk^E3Y81WVSO~ly*v',km4SQm,@JVFq'JTKj(O+)klkXH3?]Bj3eG'hGM~61RDGu?WAZ^Ms`W'+paY*ef*pSi)?u4zSpA^dJ%}10Ac}dn0Ako]Al{X%O,s`E+%6sML=9Qfj7U1T+Q`E~KwW_'Y@I!Thi.V09!kP(PT~uc*?^3@2,SI^I[hWi9RHB[4@x25*JGO,p^4zykPX+UWAmUnq95FTJaIxp4^`70S?H,V5.U0iNFF+-8!Gd-x8RaSUu3wlFw57gW&lka`A'2b!fu8!`=sph9`2}_59'KHGNMEV_.&03`pyd-h9[4scLR07q&C?G3di8iCA&%i@eOGhq(Y~!PehLTf9N]HLF^TQ89&S6N^F}C193ey8b+25jo-}Yroi5zf(nT=efDe`c_r.BF^O_P!AJ53i,x(my@DJdG2*4)g([fAef_HaqQCJdG2*4)g([fAef_HaqQBJdG2*4)g([fAef_HaqQAJdG2*4)g([fAef_HaqQ[IdG2*4)g([fAef_HaqQ]IdG2*4)g([fAef_HaqQYIdG2*4)g([fAef_HaqQZIdG2*4)g([fAef_HaqQ9xi[T1stf(Cyn.Q2tAE!b}i[T1stf(Cyn.Q2tAE!~HdG2*4)g([fAef_HaqQ3TTU`P(Ie?3`Rf%G5T&,L}[8*H0E==G5NlD[VdhHc}HEBr8gk?-j=NwATVH%2HJ=+Xm*.91{%gZ?_ci=8ZvuYanP}=NolF^1pGXAw~54TOkXM9nvqU49w.V]Xh`!v0^k}=Z9U'$yo't42T=&70CLX??(xl=P+_*W5b+BfL6$c=v7}_@)wW'VBD$PrPnb2=h&xmjk_U1U'C`&K4APQ=Bh.HrAm+x?6%NFq1Rxs?iIKGOwO.MyVE$4wBE`'@FOMkvGdX`'NjHTr?PZ(AIHpjtSvh7U5f)zW`jKV9y7t'MY(&PE%Bl%QjPSs=qJgjBO[IK*_'s_L^yo*@]ih3[ljOc@c6E.)fi5y82v}%ZJ^@yKklZXrnRMc=SSlz[btNy!KrT]jI{jf(=1&L[-81-]]4Rc[Mx~f(~j=efBq{id6a?LxGCWj=@{}PqDdLC30r4_jvENWAm7F&habMuxmRr8IZU5G9WLi_D=Yx0)9(%-kW*wf(}!8ef6`OP[Aqp6JBDvf(r`7ef6`OP[GXnt@3*vf(r`7efDe`c_@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2haDWlh[]Tvf(sc7efDe`c_QXnt@3*vf(r`7efDe`c_XXnt@3*vf(r`7efDe`c_vo1!gU0AC=KF?1[,I=%ZTC}EDG}*u9i@iQy![KQha4mW@4+yTADyqO5S7dV*sW2yRiWG!9f=`0Fnuu,mR}TRb]Bw==ub.9(@FzqOz`3FNR[i898hU+s2R-LCfxy1XFv{6=HcY,?}y2I%KNJH4['HK@xqkkW1mg6xy')k'?=S0AW'cai$wXi8ZEUs5]`sl8htOB*NdqPU-GH-Mn$hu=2m^xsC@&eQ0Nt'zAKGw=HweHk?a&FVgvKBH@x8&@BM$h'nv,u.0}$fSP7O_AOXxbpahc%tTQ$GYIW^i=2wr&^}bep!Smz1-.+]5@=Px[Z@vKA41-_EMA{JTA)=ieJHuNxkGdJdhA^+u9l{!x`FKh?0wx6wvMGy%@,e0-FfJLzw2k_$aqoDP9BzTy8+@nI`R@!]%6MY2?*A($,7]v-K.AX45bqt2@hv-K)jd@Oe(X,?sJq_3?zOM9CWR]mKyIdG2*4)g([fAef_HaqQ.reE%tHJQAuP{~`*'n1aE4`gR7}a4?^y~271prnnud$mD{$,G@rk6f?hDg-@FFLw+t)B_9T1gzv'^b`mLDrz*vyqL9L*O,c+I^NS3QVLN^[Dg96n9pUaajyF9&Fj8_Uu.AD[d68ab5+a[+*n_JKz$=$P?oo43a7$GGLqZe1`7A)zHb*u2k9o%T]F&BLTI@ykoQtYUDP%QzJ9u0a}n9.8=Lq.pdAMuJFL@,~Bd9LBzCd)lcu67'=mO)}?H9,$7nU`m~=%sK2US^wx0A`W3$+NPUI2Yjt*9kI+g?P(Z.M6xa@gbymU0gr7v@$2bvUy0)CHt~lVMrRRT?djdz^_!5aIGlZ%(j.{69nth)]Zk*E_ib72Y?!lf({jeqFYK{3k)0~0`xhkf(7)dqFgkW_B$ReZR@_kf(1rcqFgkW_BrrUgDcxYZ8WY-?SRlc(&jc72Y?!lf({jeqFYK{3kpn`_lFGqf(uV(!!eqK50Ya72Y?!lf({jeqFYK{3k+0~0`xhkf(7)dqFgkW_B&O])t}wmf(+?'!!cF5I6ob72Y?!lf({jeqFYK{3khc72Y?!lf({jeqFYK{3klc72Y?!lf({jeqFYK{3kgb72Y?!lf({jeqFYK{3k[a72Y?!lf({jeqFYK{3kra72Y?!lf({jeqFYK{3kza72Y?!lf({jeqFYK{3k`n]vpzi&g(]x@efOyH&$-b72Y?!lf({jeqFYK{3kBb72Y?!lf({jeqFYK{3kkb72Y?!lf({jeqFYK{3klFrT`_AWG)i2CefPB7^,7c72Y?!lf({jeqFYK{3kOr?-!.I7o=qFT9&3+^u+`c72Y?!lf({jeqFYK{3kSIu-GWx2795b!bV^0RzH!0~0`xhkf(7)dqFgkW_BlFrT`exOA+i2CefPB7^,HSlr1~Kyc8*]].9Ro.GF^a72Y?!lf({jeqFYK{3k`a72Y?!lf({jeqFYK{3kla72Y?!lf({jeqFYK{3kpa72Y?!lf({jeqFYK{3kaoT6N%@gp94)1M%5sRc30b72Y?!lf({jeqFYK{3k{N])t}wmf(+?'!!cF5I6(ReZR@_kf(1rcqFgkW_BXb72Y?!lf({jeqFYK{3k*ReZR@_kf(1rcqFgkW_Bcb72Y?!lf({jeqFYK{3k,O])t}wmf(+?'!!cF5I6mb72Y?!lf({jeqFYK{3ksb72Y?!lf({jeqFYK{3k~b72Y?!lf({jeqFYK{3k(c72Y?!lf({jeqFYK{3k%?+]?]b(+A'c]FUV,{ZRgAWBJbnCM?`T8nbcjs7`1c72Y?!lf({jeqFYK{3kVQFSznMek8UH}a.xfss.lFrT`b]SD*i2CefPB7^,?c72Y?!lf({jeqFYK{3ksN]7AVRpM@gh_M[ejWm,Ac72Y?!lf({jeqFYK{3k`P1Ut.C0]=])f{`Ih)nSCc72Y?!lf({jeqFYK{3kEc72Y?!lf({jeqFYK{3kIc72Y?!lf({jeqFYK{3kQc72Y?!lf({jeqFYK{3kLW!c'ANyf(Yn9efDe`c_tjl?w7%Ge8GOCH*`a39-Oa72Y?!lf({jeqFYK{3k}.~0`xhkf(7)dqFgkW_BSa72Y?!lf({jeqFYK{3kUa72Y?!lf({jeqFYK{3k%0~0`xhkf(7)dqFgkW_BD)RfaKH$^A[gOk!$j._!ba72Y?!lf({jeqFYK{3kda72Y?!lf({jeqFYK{3kha72Y?!lf({jeqFYK{3k3)lCy$3i0?t+[I8'aw_W}a72Y?!lf({jeqFYK{3kf16$SuJQ[8~-bYIir}7$Vb72Y?!lf({jeqFYK{3k1?sAjF.zs9-zl{t5EwjCZb72Y?!lf({jeqFYK{3k]b72Y?!lf({jeqFYK{3kfK{YNS^`k@CkYb*CA&${yb72Y?!lf({jeqFYK{3k*c72Y?!lf({jeqFYK{3kkEBHz7{h4=8^rs4b^[cF,c72Y?!lf({jeqFYK{3k-0~0`xhkf(7)dqFgkW_B3c72Y?!lf({jeqFYK{3k5c72Y?!lf({jeqFYK{3k9O])t}wmf(+?'!!cF5I6(MzwNF.c@AOd0vO6sSsgqL=mR~.j*?OZ&N!U]Ul_Oc72Y?!lf({jeqFYK{3kub72Y?!lf({jeqFYK{3kta72Y?!lf({jeqFYK{3kRbB@uxP{YAQ,Fk.`@!mX?yvC*F%bs8HzPH4aHokoWys?gsKp*A~HgYG6Q.gFMY.UrdE8U9yvDxAn5&IuQ@*@hiEJO9kt%Ju@h(}%A{$t!RmD?9w9mbua.^,]=aJObH6oq9WbBcck*ej3Vwdz85YRJ@h,ofv^.dA2,qmp3?,wf(mhq.QrWeLdubos?8awf(mhq.QrWeLd$c72Y?!lf({jeqFYK{3kB=zA*Dj'A9fhx+6+LI8Z+)=G){CPl?9d]$+a!'EB,0ksYmUCh?XDCcuA(4Ye(!.EBlD$A@kTPZ2)ILlA'X^AGsV?@9uD@R?qBInv4..CUDew`@pZh,Qb%`F=}kxRXc~14?-0m`6h%iqgm]%!xd(=u9)VOSV!j{dlNO,Kk~1*2=Yo*wWzVSy^pJ^PHziwWAFn}yOw84M.c]GES92{r?~)zVh8uVl[t.8R'j%Z3?OrQn_!XUPaMI[MPvn{r@,}C0LZhVGxalazUZI{_@AZ.if0yN0g1L$5+`6Xy={S)1@?oA*ySud['q8ED=3L,~L5WXYBq,%Puya&aA51$ret7C@%~.uJwOO-n9ZUCu!7LC6NcJJDhCQ(_9L5@Hqlabg1&D1jEpAl==Z1!+kzex$a3)0?DkF_c@EMRC12puzB{Ec3!dgee=SQ+{cdti6[sYdd*i)%C@zs@SCxb`.CYcUvm~]e^87QZd)GO7e'*'sQXD@28AH[@IC?O.r.=g_-..%zq97VE41{qg*UdL$^u+}=7=xTe!(tPCfW\02MERGE_MODULES"
"TaskLauncher"="1x98Jv22H@0~VD9T1QTr.K20*aG,w8y0b)KsA90PxctE9q2~G=8(BOg.TMWxIL%g['wTi8$14RYI+AXmrO=W,J[X+=)&KyPUahOm.%-d8UZ'5@MnG!Z6yZz.6}dWu?FbD9z5+,J)boNxF)&=G49Uf9&t=fD%(*HT48M9)=R_^@UeB&!u1-'XurzUW3U-q?p{7trSz?kla5vrE$EZz8}d*r$[coy({b+!.O8BJ?tr**7pAj1)wR&2zl~QI=Ewc..'NQ%q5MD?)6-[u@KbLU1A{mH0T^{Z0GjnF=Hy8OQBMuvLV!D$8nYEw9Wk[eJH7N)0!~f+9H2aM?f&D&ef30gS\02Minimal_Install"
"Calendar"="?_@fgerxf(E,9efDe`c_pZnG*MIxf(+G8efDe`c__!ujaPGxf(+G8efDe`c_Hv]P[47wf($-8efDe`c_0qp6JBDvf(r`7efDe`c_-qp6JBDvf(r`7efDe`c_*qp6JBDvf(r`7efDe`c_2,?LHJBwf($-8efDe`c_@JdG2*4)g([fAef_HaqQ?JdG2*4)g([fAef_HaqQNIdG2*4)g([fAef_HaqQ,qp6JBDvf(r`7efDe`c_RIdG2*4)g([fAef_HaqQQIdG2*4)g([fAef_HaqQIIdG2*4)g([fAef_HaqQOIdG2*4)g([fAef_HaqQJIdG2*4)g([fAef_HaqQLIdG2*4)g([fAef_HaqQPIdG2*4)g([fAef_HaqQMIdG2*4)g([fAef_HaqQKIdG2*4)g([fAef_HaqQ\02Minimal_Install"
"CalendarShared"="oMAot+Uvf(tf7efDe`c_fg6*&!lxf(XN30(tw2ha@7X?{i^!g(D*@efDe`c_?7X?{i^!g(D*@efDe`c_77X?{i^!g(D*@efDe`c_e^D{xo=!g(?v?efDe`c_W^uL?32B{?!Hfwf?cSS+1C6eC~xtf(PBDefDe`c_'mT]jI{jf(=1&L[-81-]wB^6o*-=w9H%Q`CjbZ)oWIdG2*4)g([fAef_HaqQVIdG2*4)g([fAef_HaqQSIdG2*4)g([fAef_HaqQUIdG2*4)g([fAef_HaqQTIdG2*4)g([fAef_HaqQ\02Minimal_Install"
"CalendarWCD"="eg6*&!lxf(XN30(tw2ha\02Minimal_Install"
"Claim_Graphic_Extensions"="lta['WiU(9My7rXPi2Gouz=_ap'aA9gLoktAx3Sq+Ryprj[e{9Pg?6U4~H{*5ewe?$'Zf@(eWdaBuZZe4E{'oom-l=lah1VZ+p[A+xn_A=]pR=a7MIvGKgzeTsM~1$n?n9LlE*_8nFHt6Ac,z}!z0AfR)lKw=,aHe)bVk317s?*4o3YAwRrnfTku5UruO=s@n$po]0sd]HbJ^z%i1?UI_&PGmgeo&QGw7J[[P93mk=Ywu(a=zf1t(EW-Y=LML^EicFabRxO}mg6{i8}FP}WsB6{yVLt.?ZHO3?AH?'f[(_kCbX~jz5vG-=^01Fay*--=~J1kgTem^?nkl06--(bF0ace`N3Z4A*@bJu1iL.Z1,5d$4bTg@n$uuq??Nm&k)*5B.=lL?dtE-gtg&1'?pcMAdQh~?WNvR8l_]@p\02Minimal_Install"
"DirectX"=""
"IE5.5"=""
"Typical_Install"="eOy@[.MtN?8Z~D=skFss+PbRd_Rc`@){sPL.~Ee*3(jEkY}w&@vY]2rOyio`82)n*-hAA==6GjT~,Rr-S`UM(fGYD?CCECz%=!`)1@)XV@3]k8YQ.rY+M=ILe$*I&SdIU?N(V)c_.o]B9Wc?VgG}7A&CBr=6xxPCz0~.&RZLi?O*9^y~!utoY$UA-zj@p927bPeHu@oXvf17{kNtD=j^!D-cB(YQSkeoqD^pQAt?~YuFGOHh)72z%-w(o?fV^Bl=bLYQ{X^oci9TE?kCtxWD=1YJ\02MERGE_MODULES"
"Custom_Install"="\02MERGE_MODULES"
"Custom_Setup_SBS"="\02Custom_Install"
"Custom_Setup_TEMP"="\02Custom_Install"
"Never_Install"="NnJ]1^ovf((6(L[+AFYbF1Op,Btvf(,F(L[+AFYb\02MERGE_MODULES"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\172A967CC1E79F843B13746400DDC460\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="00102-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c209.msi"
"AuthorizedCDFPrefix"=""
"Comments"="Microsoft Picture It! Photo 2002"
"Contact"=""
"DisplayVersion"="6.0.0.0000"
"HelpLink"=expand:"http://www.microsoft.com/italy/"
"HelpTelephone"=" "
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{C769A271-7E1C-48F9-B331-474600DD4C06}"
"Publisher"="Microsoft"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{C769A271-7E1C-48F9-B331-474600DD4C06}"
"URLInfoAbout"="http://www.microsoft.com/italy/ms.htm"
"URLUpdateInfo"="http://go.microsoft.com/fwlink/?linkid=3641&clcid=0x410"
"VersionMajor"=dword:00000006
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:06000000
"Language"=dword:00000410
"DisplayName"="Microsoft Picture It! Photo 2002"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\Features]
@DACL=(02 0000)
"SoleFeature"="Ik]?4)TL19(qkzR1y0kI])Ob4dQ3p=9aaeOebj0(&,8ngYRNw?Tio7B1Xtnae^``U+A~[98,pZhJXEZ4K?h+(t3Sl8eX*A^GqqTH2s}OLXZ%y@p*3OM=ZHroE}ND*S@[y8d[rIaw,*[_[A3}&nlfH@OO*3mc8IdlW?gT9,999=wEr%@n-{Q_A@HI]be4*AtT*1z10CME.X_@S^=)R@~W}V^(h}Cx_CK-y8Qil9Ypm1SY}!'o^2+22W!9O=GJg`6~G3EM'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y=3&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B83&5,B^pf(V%eqFgkW_B67k)4s6tf(JR`qF-Q9q.,Nk(@OPzF?URs{=6-.T`G5)*ix!pQ@tkHV5f'^,TdAPug,_!l9jA+v&&CSFaKK=7{a[Kn?9Tg2AMx)wvN]`dh~jPm?hI`wz]1&TP"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\19F4AD9090A22324BAC8B67C0490D63E\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="none"
"LocalPackage"="c:\\WINDOWS\\Installer\\377bd.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="2.70"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"=""
"InstallSource"="c:\\DOCUME~1\\PROPRI~1\\IMPOST~1\\Temp\\VIES5BB5\\UM\\"
"ModifyPath"=expand:"MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}"
"Publisher"="VERITAS Software"
"Readme"=""
"Size"=""
"EstimatedSize"=dword:00000856
"UninstallString"=expand:"MsiExec.exe /I{09DA4F91-2A09-4232-AB8C-6BC740096DE3}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000002
"VersionMinor"=dword:00000046
"WindowsInstaller"=dword:00000001
"Version"=dword:02460000
"Language"=dword:00000410
"DisplayName"="RecordNow Update Manager"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\Features]
@DACL=(02 0000)
"CORE"="'VZP-5y0L?SGHDH*O&'BU,c,nJ(th80MHJC^{^~b[2aqL,2uN9%=.0dv@dGTk@+GNr`fH?&a7cH=I]2ENh(*cu'8&@(0M8t6X=t0}wnrik7gp@[GWagjuU+CZz&?PL}a?AvNDRk?i=joeXYV2K=sG?TJMZk*17bG7gkK*(R4N@`u6c(%d^{_Wci=Y,,HR9EMYs$bd%C^qQX2peihC9etnOHm@0w9@'SxK^p$n=s*-@uJzW1-P{9'g6Tw7?UKyl]0mHLsR'8UxglIC=V0IP)Gi(uIn]Q-*}(pF9i0NFi!!sFxBMLlbl)'8Ao}D%kIOCa``tO'b{](W?qc.-e-E?ZI8HDu!3oOe9RWEGPxHg!Q(cA~s[,V2AkY&Jt0+KVHV_[2Lx8uV9P?JX8sDlI_q&7R`1(AS940risAj[zo(R8cX'=XY?1VkxZq2O]7q},ReXRm4?o5'zYh0Q0e)^GmK%]6a8%[.H+4lqwOk)D1(7LRW9KFaI+@I)y0CFG$0D+!g(3?!!!_GX=bBbxH8x=!g(3?!!!_GX=b83&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B=3&5,B^pf(V%eqFgkW_B'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y7YK?{]tuf(^?eqFgkW_B"
"CORE_HKCU"="\02CORE"
"EIWA"="4tC3GMW8L95HTjm3$+8[i9@4tL5LN9YU04HOe[pU7{{[_MBHEA]y&u]tWA(R0_W6q0b7S?3YB@fC-0U-6M37FDQ9V@2c25J@m2gkugpG*[$&{=?fB`(UokJM5F7R%Vh0J=m7FgEib$dn3?gw]Mm&M=&GQy)C3dRZD2%yUC5XO=DuYJ-VHUJDt,^1PV!&9@29eLj&c%tXmIzCQV,n-A?me0T*Rio]1nzlLypQL9Xf5Fk@=*$Iqy7.qk0`C9K}-SgEtmtFnb-pY.IcFAk!34[?KOTJS6q4L3s~8=XW%YO%'I1Pk`9@wB%U~9bNE65l)NIz=~9YGy$)}9)(?gGBv_,Njr3.NaAgk@88_=(RK6+1p-JTF{P'a=5'ZN-?g~_Hxo-Ehn*`*9f}cmYeVkpi5pdBahteV?w.*?5A9$cyWX*oYgd6P9c@mVxp_A&-ci]6!V?9o?pOt.J_!R3(DUP[.k]*d@B2v7`ENnH'Kqatn_%NW9M6.~0)QuKt3tQ^7y&qp80G}4-Iq2'Wsx96s!zkN=ZuL,qXE1un3B=JP*N$8?8U,p?{)u?IvFz0-SOcR9AW=DfaZJ0Q{5'c!p'zp8i5Bt+$'%!sJyjC*}8t}9{qLp$R$}SMF_]EJW8HE=$-FVR{E3E?)+Q8%Hpxj8Z@eTT9=F&&93Ye1)7ZJ9e0A8N)GCyPM%THB-n7Z@-r17-L_a(+lX6^$yyRz8[j)bdM!kk^.7.IH*w4P@u`3Bx4=C2&YCzmQzHEf=0[u1ZqNJO!eDP&1bc-e@?Y-8MR0Gd2Si*goE'a@9z)-.-kl_'ARI3[`07OEA]NmXi,Zep=`rh7vt'hNA2kujW-=S@G^D!?SkHlo@26),j'a`LB1QFgVD*'k=]Iv0)V.iX-RB%f*OwKT=1nDMK*eIAI-ty}fY'r-9~lj_C^@~0r(7gaNATY.A3-A~BxP..V%i6KpDp)W?aAX_6[Vrg2}(i(HFc)!=[dib8cLASWq't{!8{by=dxsjhF{(~lK=luP@9)S=.IW7xkDFe3'8(?8Zp~~@kM0@UmqgoWK[TPT`Q?(=a2p,ksw-9@I^V}N&0}a@CoWXGl]$j^GX5krmRIW9Qh{q$JkYU,v[4x=9d3(9QW~A&T[F~kl9o@)SIK99()+?+Q7v[d2Sra%`'1s@r0Z8'eh{8M]Yw-]L@j6=9Lwv*4EK9IDdAn0'D?e@Pc7RBGxyRLC?Lo2eTacA=tLkh)Qc[&S2BYx$WCP@-@-li%q~3jZqNDf!qS}9(q!Xi3Wulx2Xj,A5I5QA{6z[By5g%]iA0!XK%`w8D6W%X[Ev=XzSw6R9s9P?`ph9QD9Halytl4*OrvP=SQ4w!u&,J2QiAVhS?Sy9}^,b1~K]4[6F}NN($I5=HO's=Rn!&fxhvdbm~@Q9~(1U7b*Vx9QqGeo'6,j=cDhQzd@J?3jd~LdA*8t8L&WI(1EQvUxOUgkk-'j?Jz(r8V++Hp,f_OOvAD@?]tU!Jv}D+=t*%yi~57Y8vBgKT69XYMP,ylA6.+*=qf9*]?~D56h{S},{.Ci=}@eAdH=*MmZgR[tXgv=@Y]^b@[O3*6Xdh)US]*6Ar'{veTY{gB,Stm$rqgo=FRjE,1%)h_Rx34cBkrD9ePf{$(=gm.(`kQPt4XA?4O3yU[RAMTbz1fcj@zZ90?gIna]=g4"
"FEAT_EIWA_HKCU"="S4pwA!-+P9%U]kUnnuiO\02EIWA"
"ERO"="XuEaqhwvT9l{RJ0vX*XM4U'x?)]1c==e^!w}(!'uNbB'8MkUBAYaeMca1u}B{bsso)'Y1AYsydQoH(hYr?[c$-%Ko=1R_Z_(UJjzw^3M0w2C?=bsrvf2~SETIVm1tFk9f9f2KM5fIcd^su*lqXSg_?RjZe=TYi[-gbu@BwgI[@NvxyA__@=G'qHXE*%5W?gSGboq*?]eh2rzpMT_2=Z6!SnU3^_qj=IQVGcEe8t,vIaRF@=*o3j=W~USf@Irt$PNpg-w[!HCBx[h_AoZwvzDiOi2lkP_-WgH79D0zqtB~9%g"
"FEAT_ERO_HKCU"="CMfZN&m4z@'EDHc*M?AQS4pwA!-+P9%U]kUnnuiO\02ERO"
"MSINFO"="@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2ha"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\2020402056D5A5443B4BD3EC27ABC0C6\InstallProperties]
@DACL=(02 0000)
"LocalPackage"="c:\\WINDOWS\\Installer\\19c20d.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="2001"
"HelpLink"=""
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{02040202-5D65-445A-B3B4-3DCE72BA0C6C}"
"NoRepair"=dword:00000001
"Publisher"="Microsoft Encarta"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{02040202-5D65-445A-B3B4-3DCE72BA0C6C}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:000007d1
"VersionMinor"=dword:000007d1
"WindowsInstaller"=dword:00000001
"Version"=dword:d1000000
"Language"=dword:00000410
"DisplayName"="Atlante mondiale Microsoft Encarta 2001"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\20CC412817268CD48BDD779933542046\Features]
@DACL=(02 0000)
"SoleFeature"="`@mNRvpIK=yTkzRB's)+}P{ZE-6Rt=3K^CU%`2Gwz5}jyuFOUA1S}@W=sU'WvdO*&^=wZ?6yAWjVR$NtvECYIJ9ei9?sh{!S0QaBu@SZO!'T89}D21w(O!&lnHQ2^rs)B@,3M'a}HJ=mz2(X@oJ0j8yE=dpU}a6(%7%XW$S`X=KEnIB%jg9{5&.kaH&r-?.xT`.20kzrs52tyO,Zj@m&1xv?[?hP+tyB%x$3P?O~[O).t*HL8fr].}d^p?LBU9D{o8($C)-''jP8+=vv(z.kC`Do@qL3+QmYt=C[C~nC0M)@12^riv?i`?6'4e=sF?t`.`^Y'sBd(?qKtOV?5nWjV}9U?cklL=TWz^CWgk3bDgo%yB&~z9P]WmI7Y.HY-dI_E_0l7=r-TGM~7pO_[}BD]U7b0?7vy}QlRBQ_C]-[?xd9+@{?0xdE8'^eS]NWK9Dao?PaZ&*&CzL]Cb%p_4a~bA{7UmBpG$p9f7)&RwOb6=MAtsmBbq0N,Nk(@OPzF?URs{=6-.T`&x$&z{At4?u)?[`P+G*s$[}kVo3h`AA^Xni5NnA-v%3Qf'=nf(9K)L[lj+'(=3&5,B^pf(V%eqFgkW_B83&5,B^pf(V%eqFgkW_BB3&5,B^pf(V%eqFgkW_B'jY0(z7qf(fVbqFgkW_BhY,w=mgsf(YJ*L[lj+'(M5KDYSUnf(HA*L[xeX)y67k)4s6tf(JR`qF-Q9q.A7k)4s6tf(JR`qF-Q9q.dbKx-lbmf(Gn,L[[Q~con=-.B]*OwW=j1$R-G-siAc4Ma^pEE'?58NS^)&i,J5E`6Vo6mh8_vNCQF55xIy,XV3_eW[@0?&K'9l!`tvQWp+!UM,ASDJd&*ys@@*HNQrmE@)@veePESwldqR^+CP7u-_8,)cy9FjI+9=kg9!cD1(@,j9kH}}y&9G,o_%P^PR@ZB]JqiSVIOo$JOks)4]@OWm@b,sGUU'W5Dhz3my9wjY'4C@C.^}7g$-6*47AHtBn]B3h_H7ArYV4-(Z96l]OSl~&]E6YpabQ[dw9X(^0I$yr8I3$[?Z==p59(=z3b%c?,ExDyf7g1sI=hJ(OBTf['{0TMVZaM}1=^S=CXceiBCA{El`HoaO@~7[xZ}D[($8Di@UTLcQ@][%hS}cry'_Xj[rAtkX9LeNpQ^CSSyml~!T0x_D=6jwo$`pyx7k]B%rOcMX9@c}m*ykL{5xYf4n47=Z=Hfn-25,{TfIhw'kn.zI?HjnM[ONYbUVEy*vSDbd9@Ad4=+WuwuW?gT9,999=wEr%@n-{Q_"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\Features]
@DACL=(02 0000)
"Help"="2JdG2*4)g([fAef_HaqQ1JdG2*4)g([fAef_HaqQ3JdG2*4)g([fAef_HaqQ7IdG2*4)g([fAef_HaqQC$Qk,HF)g(bxAef_HaqQB$Qk,HF)g(bxAef_HaqQ5IdG2*4)g([fAef_HaqQ6IdG2*4)g([fAef_HaqQ9IdG2*4)g([fAef_HaqQ.IdG2*4)g([fAef_HaqQ-IdG2*4)g([fAef_HaqQ%IdG2*4)g([fAef_HaqQ&IdG2*4)g([fAef_HaqQ'IdG2*4)g([fAef_HaqQ0IdG2*4)g([fAef_HaqQ3IdG2*4)g([fAef_HaqQ2IdG2*4)g([fAef_HaqQ1IdG2*4)g([fAef_HaqQ4IdG2*4)g([fAef_HaqQEJdG2*4)g([fAef_HaqQ"
"Language"="~IdG2*4)g([fAef_HaqQ$JdG2*4)g([fAef_HaqQ}IdG2*4)g([fAef_HaqQ!JdG2*4)g([fAef_HaqQxIdG2*4)g([fAef_HaqQwIdG2*4)g([fAef_HaqQuIdG2*4)g([fAef_HaqQrIdG2*4)g([fAef_HaqQzIdG2*4)g([fAef_HaqQvIdG2*4)g([fAef_HaqQ{IdG2*4)g([fAef_HaqQtIdG2*4)g([fAef_HaqQsIdG2*4)g([fAef_HaqQFJdG2*4)g([fAef_HaqQGJdG2*4)g([fAef_HaqQyIdG2*4)g([fAef_HaqQHJdG2*4)g([fAef_HaqQ"
"WksCore"="0.rxy&Pvf(r`7efDe`c_1.rxy&Pvf(r`7efDe`c_F=PS3b'wf(1R(L[+AFYb?`kGq)Dwf($-8efDe`c_piGhY]yyf(]Z30(tw2habwjyakIzf(tg=efDe`c_[4Rc[Mx~f(~j=efBq{id87X?{i^!g(D*@efDe`c_97X?{i^!g(D*@efDe`c_=7X?{i^!g(D*@efDe`c_5=dsaidGg?]U@EXNPh60GXnt@3*vf(r`7efDe`c_"
"Shell"="AC6eC~xtf(PBDefDe`c_HXnt@3*vf(r`7efDe`c_P@eTvh6xf(P230(tw2ha"
"Database"="&('5C`+$g(KD@efDe`c_'('5C`+$g(KD@efDe`c_)('5C`+$g(KD@efDe`c_"
"SSDB"=",C6eC~xtf(PBDefDe`c_5xRkPm%yf(YQ30(tw2ha6xRkPm%yf(YQ30(tw2ha"
"TaskLauncher"="Gdh_vCdvf(ui7efDe`c_LXqkDADMb9jmUpjT-+kqIdh_vCdvf(ui7efDe`c_}5&Zb{~xf(YQ30(tw2ha4JdG2*4)g([fAef_HaqQ6JdG2*4)g([fAef_HaqQ5JdG2*4)g([fAef_HaqQbXnt@3*vf(r`7efDe`c_b51=0rcQc8'8uWP!CDjj"
"WizardDlls"="YXnt@3*vf(r`7efDe`c_[Xnt@3*vf(r`7efDe`c_]Xnt@3*vf(r`7efDe`c_^Xnt@3*vf(r`7efDe`c_!G+JSXfvf(ui7efDe`c_Q@eTvh6xf(P230(tw2ha37X?{i^!g(D*@efDe`c_X07x$+]%g(b,AefDe`c_"
"WizardsTemplates"="+JdG2*4)g([fAef_HaqQ*JdG2*4)g([fAef_HaqQ-JdG2*4)g([fAef_HaqQ,JdG2*4)g([fAef_HaqQ0JdG2*4)g([fAef_HaqQ.JdG2*4)g([fAef_HaqQ"
"_F4411_Calendar_Migrate"="[yOHx[Rwf(Aw(L[+AFYba%yw@3`zf(d-*L[+AFYb"
"Calendar"="?_@fgerxf(E,9efDe`c_pZnG*MIxf(+G8efDe`c__!ujaPGxf(+G8efDe`c_Hv]P[47wf($-8efDe`c_0qp6JBDvf(r`7efDe`c_-qp6JBDvf(r`7efDe`c_*qp6JBDvf(r`7efDe`c_2,?LHJBwf($-8efDe`c_@JdG2*4)g([fAef_HaqQ?JdG2*4)g([fAef_HaqQNIdG2*4)g([fAef_HaqQ,qp6JBDvf(r`7efDe`c_RIdG2*4)g([fAef_HaqQQIdG2*4)g([fAef_HaqQIIdG2*4)g([fAef_HaqQOIdG2*4)g([fAef_HaqQJIdG2*4)g([fAef_HaqQLIdG2*4)g([fAef_HaqQPIdG2*4)g([fAef_HaqQMIdG2*4)g([fAef_HaqQKIdG2*4)g([fAef_HaqQ"
"CalendarWCD"="eg6*&!lxf(XN30(tw2ha"
"Works_Cal_Shared"="oMAot+Uvf(tf7efDe`c_fg6*&!lxf(XN30(tw2ha@7X?{i^!g(D*@efDe`c_?7X?{i^!g(D*@efDe`c_77X?{i^!g(D*@efDe`c_e^D{xo=!g(?v?efDe`c_W^uL?32B{?!Hfwf?cSS+1C6eC~xtf(PBDefDe`c_'mT]jI{jf(=1&L[-81-]wB^6o*-=w9H%Q`CjbZ)oWIdG2*4)g([fAef_HaqQVIdG2*4)g([fAef_HaqQSIdG2*4)g([fAef_HaqQUIdG2*4)g([fAef_HaqQTIdG2*4)g([fAef_HaqQ]4Rc[Mx~f(~j=efBq{id"
"Scrapbook"="9xE64Io!g(F1@efDe`c_8xE64Io!g(F1@efDe`c_Nm5970c4i@o3pyWB[CG&g.sgh)o$B=SrErN9()go[{x%JM6$g(MJ@efDe`c_[$.m!L6+j8QtBnz[r2KB"
"WP"="jXnt@3*vf(r`7efDe`c_tMAot+Uvf(tf7efDe`c_!n7JcjZzf(yv=efDe`c_%h1}5kkzf(%2?efDe`c_"
"Quill"="lXnt@3*vf(r`7efDe`c_mXnt@3*vf(r`7efDe`c_vMAot+Uvf(tf7efDe`c_\02WP"
"Imaging"="PpgF.6A!g(@y?efDe`c_QpgF.6A!g(@y?efDe`c_"
"Imaging_LeadTools"="c6E.)fi5y82v}%ZJ^@yK_'s_L^yo*@]ih3[ljOc@%Bl%QjPSs=qJgjBO[IK*5f)zW`jKV9y7t'MY(&PENjHTr?PZ(AIHpjtSvh7UVE$4wBE`'@FOMkvGdX`'6%NFq1Rxs?iIKGOwO.My'C`&K4APQ=Bh.HrAm+x?BD$PrPnb2=h&xmjk_U1U5b+BfL6$c=v7}_@)wW'V2T=&70CLX??(xl=P+_*WXh`!v0^k}=Z9U'$yo't4w~54TOkXM9nvqU49w.V]8ZvuYanP}=NolF^1pGXA2HJ=+Xm*.91{%gZ?_ci=c}HEBr8gk?-j=NwATVH%L}[8*H0E==G5NlD[VdhH3TTU`P(Ie?3`Rf%G5T&,"
"Themes"="!j`tIc$!g(9p?efDe`c_&JdG2*4)g([fAef_HaqQ"
"IE55_Install"="`PZF_6T1a8KAil*5s]hY5LC%P&6Zj9(hDnCu8[uz"
"AnswerWizard"="8IdG2*4)g([fAef_HaqQ&h1}5kkzf(%2?efDe`c_,}Yroi5zf(nT=efDe`c_"
"OnlineManual"=")IdG2*4)g([fAef_HaqQ(IdG2*4)g([fAef_HaqQD$Qk,HF)g(bxAef_HaqQ*IdG2*4)g([fAef_HaqQ"
"QuickTours"="AQyq+h{vf(yu7efDe`c_BQyq+h{vf(yu7efDe`c_"
"ReadMe"="!IdG2*4)g([fAef_HaqQ"
"FirstRun"="DJdG2*4)g([fAef_HaqQCJdG2*4)g([fAef_HaqQBJdG2*4)g([fAef_HaqQAJdG2*4)g([fAef_HaqQ[IdG2*4)g([fAef_HaqQ]IdG2*4)g([fAef_HaqQYIdG2*4)g([fAef_HaqQZIdG2*4)g([fAef_HaqQbiRc330wf(!*8efDe`c_XIdG2*4)g([fAef_HaqQ"
"AutoCorrect"="T24fx-z'dAo6TxbWUU`k(R%?txSGn@Ib1s74cD&S_X0Nle[(g(0UBefOyH&$T24fx-z'dAo6TxbWUU`k(R%?txSGn@Ib1s74cD&Sem)ZLfX(g(0UBefOyH&$"
"Grammar"="tstkJ[=wf()qr.QHog{AwstkJ[=wf()qr.QHog{A7rT]jI{jf(=1&L[-81-]9rT]jI{jf(=1&L[-81-]"
"ProofSer"="%JdG2*4)g([fAef_HaqQqWzNuQF!g(C'@efDe`c_"
"Spelling"="KrT]jI{jf(=1&L[-81-],qmp3?,wf(mhq.QrWeLdubos?8awf(mhq.QrWeLdGrT]jI{jf(=1&L[-81-]IrT]jI{jf(=1&L[-81-]"
"Thesaurus"="QrT]jI{jf(=1&L[-81-]'stkJ[=wf()qr.QHog{A(stkJ[=wf()qr.QHog{AO(cRmSikf()p*L[~4q&_OrT]jI{jf(=1&L[-81-]"
"Tasks_Min"="mQ'+Xvp5C=_QCMGzVHkwdIdG2*4)g([fAef_HaqQ{@Vba?G2'=!k3vmslh(2?WXdeL]7^92Zm$z4hAVIMnJ@C?B&m?@T,+xMg0WPNOL(P!Qzf(tg=efDe`c_jV&+khs$g(OP@efDe`c_+BdncKKxf(+G8efDe`c_Po55h$^xf(4`8efDe`c_Do55h$^xf(4`8efDe`c_Co55h$^xf(4`8efDe`c_nIdG2*4)g([fAef_HaqQlIdG2*4)g([fAef_HaqQjIdG2*4)g([fAef_HaqQhIdG2*4)g([fAef_HaqQr-j@O[_*g(%!Cef_HaqQeIdG2*4)g([fAef_HaqQiIdG2*4)g([fAef_HaqQqIdG2*4)g([fAef_HaqQpIdG2*4)g([fAef_HaqQoIdG2*4)g([fAef_HaqQLOL(P!Qzf(tg=efDe`c_mIdG2*4)g([fAef_HaqQkIdG2*4)g([fAef_HaqQgIdG2*4)g([fAef_HaqQEOL(P!Qzf(tg=efDe`c_"
"Tasks_Basic"="^ZOjk!C9eA__[q9e3bCw%t02x1[)[AjF'^QQJCUx%~v6ntj_l?`DR!Y-!GflcIdG2*4)g([fAef_HaqQbIdG2*4)g([fAef_HaqQ`IdG2*4)g([fAef_HaqQ^IdG2*4)g([fAef_HaqQ"
"AddressBook"="gAwnaaAxf(Q530(tw2hahAwnaaAxf(Q530(tw2haBm4tK0qyf(c.=efDe`c_I*^Nk$czf(zy=efDe`c_Rwl7d]izf($.?efDe`c_"
"_F13308_WAB"="~5&Zb{~xf(YQ30(tw2ha!6&Zb{~xf(YQ30(tw2ha"
"System"="IXnt@3*vf(r`7efDe`c__iRc330wf(!*8efDe`c_`iRc330wf(!*8efDe`c_aiRc330wf(!*8efDe`c_y'P37!k!g(E-@efDe`c_y''5C`+$g(KD@efDe`c_z''5C`+$g(KD@efDe`c_Y4,ZYW$$g(H7@efDe`c_XXnt@3*vf(r`7efDe`c_QXnt@3*vf(r`7efDe`c_=3&5,B^pf(V%eqFgkW_BDWlh[]Tvf(sc7efDe`c_B3&5,B^pf(V%eqFgkW_B"
"commoncontrols"="LXnt@3*vf(r`7efDe`c_\02System"
"lineservices"="OXnt@3*vf(r`7efDe`c_92Cm?6,wf(~&8efDe`c_PXnt@3*vf(r`7efDe`c_\02System"
"help_sys"="\02System"
"WebUpdate"="~sPN%2iJOA5,[d2NtDxo'JdG2*4)g([fAef_HaqQB0wGq)Cb79ew8[-Q[p&9(JdG2*4)g([fAef_HaqQIJdG2*4)g([fAef_HaqQ"
"_F6534_CAG_ClipGallery"=""
"_F6536_CAG_Standard"=""
"_F6538_CAG_Works"=""
"ShoeBox"="oumbJ.$zZ@75PHyRNY(K?BL0e'K1d@ia'AF'Yn4Fg=n`VHq2,?Rqh@[gV9z?yit79O-pF?@&}B]AJCubsB{r5!yZD=$eVj0~(Ib)C?G3di8iCA&%i@eOGhq(bn-5t!!Ch=N0G$u~!GBRu.'b9VZqf(g6u.Q(31aRw.'b9VZqf(g6u.Q(31aRNVWz?4H7&=hHi^e3.kT?q~]q3JEut?IpzH)tSFT'S3bTdDY)a@!)]O*nqy_+=Hn1UBHJj=~6gYEl^}(50Os8=b%t7?kA~0i2tj4G.-Q0tzkGZ9~)`CRm6x`We3aV+5Lyf(C5Def%06$%RC,h.~8wf(x7fqF,Y?r2ychI(5Lyf(C5Def%06$%q+jjF4iyf(s&Aef%06$%kwgD19iyf(t)Aef%06$%A3={H4iyf(s&Aef%06$%(=Y8nB{vf(kbq.QrWeLdxchI(5Lyf(C5Def%06$%81-z%Z}tf(Cyn.Q2tAE!"
"Shoebox_Max"="7FnXk`]H6@x.9eWqkA)t\02ShoeBox"
"Converters_Min"="7q@V?zzhbA-G*GwF7uo.S,-z%Z}tf(Cyn.Q2tAE!@Y-z%Z}tf(Cyn.Q2tAE!r&pvh[rxf(D)9efDe`c_q&pvh[rxf(D)9efDe`c_@8[*5Arvf(wo7efDe`c_"
"Converters_Basic"="c!)Q2Y](,9$q!vy)yG?TSr,z%Z}tf(Cyn.Q2tAE!ir,z%Z}tf(Cyn.Q2tAE!9s,z%Z}tf(Cyn.Q2tAE!&Y-z%Z}tf(Cyn.Q2tAE![Ee^AL$tf(Cyn.Q2tAE!7vT]jI{jf(=1&L[-81-]!Y{~Fdj{f(kw,0(EJrk@5vT]jI{jf(=1&L[-81-]+`cM^6[rj@.y0WgKfuHr`I&XGh4NE9op}nJ.'2Ndd9yqm~-O1A4HG]Yhm`NE"
"Converters_Max"="cfbgi6u`t=o]^30@03C_"
"EquationEditor"="buAzs!vtf(Cyn.Q2tAE!FyAzs!vtf(Cyn.Q2tAE!"
"GraphicFilters_Min"="b}i[T1stf(Cyn.Q2tAE!w}i[T1stf(Cyn.Q2tAE!O{i[T1stf(Cyn.Q2tAE!9xi[T1stf(Cyn.Q2tAE!"
"GraphicFilters_Basic"="gyi[T1stf(Cyn.Q2tAE!~HdG2*4)g([fAef_HaqQ]qT]jI{jf(=1&L[-81-]yqT]jI{jf(=1&L[-81-]"
"MSDraw"="4g-cflYxf(3]8efDe`c_{HdG2*4)g([fAef_HaqQ6g-cflYxf(3]8efDe`c_5g-cflYxf(3]8efDe`c_}HdG2*4)g([fAef_HaqQ"
"MSInfo"="@IdG2*4)g([fAef_HaqQ=IdG2*4)g([fAef_HaqQ?IdG2*4)g([fAef_HaqQJ4fEfj]xf(WK30(tw2hay^L0&k7zf(pZ=efDe`c_K4fEfj]xf(WK30(tw2haL4fEfj]xf(WK30(tw2ha"
"NoteIt"="~X{~Fdj{f(kw,0(EJrk@}X{~Fdj{f(kw,0(EJrk@"
"WordArt"="{X{~Fdj{f(kw,0(EJrk@K}PU+=k%g(FfAef^*}-RzX{~Fdj{f(kw,0(EJrk@"
"Shared"="-fCo)=Lnf(E4*L[xeX)y"
"_F14067_CustomAction_MSM"="kfh5BaGzf(c**L[+AFYb"
"FUD"="cA%Ty(UQz9H72WWQE*6-"
"Fonts"="Qa72Y?!lf({jeqFYK{3kva72Y?!lf({jeqFYK{3kbc72Y?!lf({jeqFYK{3kLW!c'ANyf(Yn9efDe`c_KW!c'ANyf(Yn9efDe`c_gb72Y?!lf({jeqFYK{3k[a72Y?!lf({jeqFYK{3kra72Y?!lf({jeqFYK{3kta72Y?!lf({jeqFYK{3kza72Y?!lf({jeqFYK{3kib72Y?!lf({jeqFYK{3k!b72Y?!lf({jeqFYK{3k'b72Y?!lf({jeqFYK{3k)b72Y?!lf({jeqFYK{3k`n]vpzi&g(]x@efOyH&$-b72Y?!lf({jeqFYK{3k2b72Y?!lf({jeqFYK{3k4b72Y?!lf({jeqFYK{3k@b72Y?!lf({jeqFYK{3kBb72Y?!lf({jeqFYK{3k)0~0`xhkf(7)dqFgkW_Bkb72Y?!lf({jeqFYK{3k$c72Y?!lf({jeqFYK{3klFrT`_AWG)i2CefPB7^,7c72Y?!lf({jeqFYK{3k9c72Y?!lf({jeqFYK{3kKc72Y?!lf({jeqFYK{3krrUgDcxYZ8WY-?SRlc(&$ReZR@_kf(1rcqFgkW_B`c72Y?!lf({jeqFYK{3k20~0`xhkf(7)dqFgkW_Bjc72Y?!lf({jeqFYK{3k"
"_F11860_MDAC_Archive"="d(3qxGpxf(XN30(tw2ha\02Calendar"
"IE55"="NnJ]1^ovf((6(L[+AFYbF1Op,Btvf(,F(L[+AFYb\02IE55_Install"
"Shoebox_Never"="8mjF_J75&?z9bvb1NXWU!k$DgrPlp=1]k(jr61G3dOVw5,2fQ9(7S)c8{`m.\02ShoeBox"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\29BE0F9702994D11FAAF000CF4444384\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="00102-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c201.msi"
"AuthorizedCDFPrefix"=""
"Comments"="Installazione di Microsoft Works 6.0."
"Contact"=""
"DisplayVersion"="06.00.0000"
"HelpLink"=expand:"http://www.microsoft.com/italy/support/"
"HelpTelephone"=" "
"InstallDate"="20020101"
"InstallLocation"=""
"ModifyPath"=expand:"MsiExec.exe /I{79F0EB92-9920-11D4-AFFA-00C04F443448}"
"Publisher"="Microsoft Corporation"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{79F0EB92-9920-11D4-AFFA-00C04F443448}"
"URLInfoAbout"="http://www.microsoft.com"
"URLUpdateInfo"="http://www.microsoft.com/italy/ms.htm"
"VersionMajor"=dword:00000006
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:06000000
"Language"=dword:00000410
"DisplayName"="Microsoft Works 6.0"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\Features]
@DACL=(02 0000)
"Typical"="%UOQhc0&*@vBu!gQnNt61?.LDgP}l9Q(M^%f?_qr_k,PwJuz^=87nWo[kL'Zba~}P(&fc=@bu0MzXhd@%)Ix3!{77?,o*80T4BpsVE5q`cP,o9rEI&nfCotMLZcWP8V!BA)7Gwf]`Scdus0wy6^6o8QmwsO6*&{%jmPX^)%0b=]J{y*An(dwlzOxqCpnAA1%L$R8+y}Gg`'e8(J,k=4(?.ujGG'K*TO'&B-L2@LI_YE4xSJ%RvyQzsNET9}8vivZ82w`0,X2KJH.g(cM!!!FxVSZL@gdis&rWAek+-T(HRpxWP%P.S[pq=.(bbQ9VVEr'.i$2`'85Aw$lt^QmP@z,gH.[lmkf(`%(L[U]z)5"
"ARX"="\02Typical"
"Data_EUR_ARX"="%UOQhc0&*@vBu!gQnNt61cW[7Q(=I@@nH@%9VgxQ=w`mGK8b5?lefn?xY),EVg%Use]Mg9B%]X*8iTVF6te?k~R(@@LdU$]^.bTNFDOOte[AaA2.~sVdd!N2W!L?&taWt=~P-&B24`Nws(+UR-xjo=}`W5dHkKLrvuc~fkV5m9K]`]5JH?]p\02ARX"
"Resource_0809_ARX"="H.wa+5WGu8pXBQkbLh]5OrRiWcB1{9Ce,(?_MK~=NKP4o.TJd9F,NrW+suTX\02Data_EUR_ARX"
"ExeArx_"="fDHF017Ck9fqJL9-26vBD_m}r1*XBAl(.lyf^M`LZflL^!=6X?6@&1zAW+J,^0kFNw,S_=A1a7iiw`IZkj!u1T_VD@g^-x377knGf^YcH9E+_@z[CnJkmM!e)+T{s&8&!@mDOHIRbCf.3Zzd6wH&m8oBN]=+j@5WdFTwqYYSk@z~NL^^Wb{u940=X='LQ?14_)k7u}DIR^tXoU7Wt@i!Z]E.f$T*PZBYkvFW-@_n}24Z!'+2+wbWoRBpM@[f!Z'oYJd*`NN2RToe}8Ke.AgRDetfX,Wmt9Hq!AmF!sq,~yEYxzBIL24%@?0HMR8LK+forJIx[P7Gi9oEa7qvn79+-nd+lj`[q@mvgzYUN5.OHnh?-4]Up8Z{J%*yoESP)(ef!y'`d8Mcx}5=B2)@\02Resource_0809_ARX"
"Complete"=""
"CD_EUR"="8TO7ADTbf?}__ONt'FQ_r7jv!(7rC=K5]]v7j]iVdLN?gX+k^8`^FHJWo9J[O.[m0rBj,9cDNvGg2A!-\02Complete"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\A0CD2F7FE22CDA94DA739737905AE4B7\InstallProperties]
@DACL=(02 0000)
"RegOwner"="HP registered user"
"RegCompany"="HP"
"ProductID"="55063-OEM-0000007-00000"
"LocalPackage"="c:\\WINDOWS\\Installer\\19c211.msi"
"AuthorizedCDFPrefix"=""
"Comments"=""
"Contact"=""
"DisplayVersion"="9.00.17.0200"
"HelpLink"=expand:"http://www.Microsoft.com/support"
"HelpTelephone"=""
"InstallDate"="20020101"
"InstallLocation"="c:\\Programmi\\Microsoft AutoRoute\\"
"ModifyPath"=expand:"MsiExec.exe /I{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}"
"NoRepair"=dword:00000001
"Publisher"="Microsoft"
"Readme"=""
"Size"=""
"UninstallString"=expand:"MsiExec.exe /I{F7F2DC0A-C22E-49AD-AD37-797309A54E7B}"
"URLInfoAbout"=""
"URLUpdateInfo"=""
"VersionMajor"=dword:00000009
"VersionMinor"=dword:00000000
"WindowsInstaller"=dword:00000001
"Version"=dword:09000011
"Language"=dword:00000410
"DisplayName"="Microsoft AutoRoute 2002"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Products\EB79C053C7D38EE4AB9A00CB3B5D2472\Features]
@DACL=(02 0000)
"WebPublFiles"="]aZF&kXsf(lf*L[_GKba}gbvW,Qmf(G'*L[H+8]b_}IuVaZtf(Cyn.Q2tAE!_{@h=i,nf(R8(L[JO9}X_}M^V8Xqf(Rp)L[_GKbahlT]jI{jf(=1&L[-81-][qFvyQP~f(8Hw.QdFt.0)VWe6E%wf(S5YX%43_cm"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------

- - - - - - - > 'explorer.exe'(3092)
c:\progra~1\ALICET~1\SMARTB~1\SBHook.dll
c:\windows\system32\WPDShServiceObj.dll
c:\programmi\Nokia\Nokia PC Suite 6\phonebrowser.dll
c:\programmi\Nokia\Nokia PC Suite 6\PCSCM.dll
c:\programmi\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_ita.nlr
c:\programmi\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\windows\system32\wscntfy.exe
c:\programmi\Alice ti aiuta\bin\mpbtn.exe
.
**************************************************************************
.
Ora fine scansione: 2010-12-01 21:57:08 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2010-12-01 20:57

Pre-Run: 13.948.968.960 byte disponibili
Post-Run: 16.185.708.544 byte disponibili

- - End Of File - - 479B5D2AB1135C908CAB033BCFE3B4F7

da **Delfino81** » mer dic 01, 2010 10:13 pm

prima di passare al tuo ultimo intervento...provo a vedere se è migliorato qualcosa...

da **Delfino81** » mer dic 01, 2010 10:17 pm

quindi Registry keys to delete: non lo devo inserire..??

da **Delfino81** » mer dic 01, 2010 10:25 pm

Tra poco avrai il post di Avenger...oltre alla condivisione non più funzionante, mi chiede anche la licenza di office....

da **Delfino81** » mer dic 01, 2010 10:37 pm

Per l'errore che dicevi prima mi dà proprio quello,ma anche se cancello la 1 riga o le prime righe,mi dà sempre lo stesso...

da **Delfino81** » mer dic 01, 2010 11:23 pm

FDAC ha scritto:Carica questo file su VirusTotal:
C:\WINDOWS\system32\rundll32.exe
posta qui l'esito

Disinstalla:
Emsisoft Anti-Malware: è un programma che non ricopre la funzione di Antivirus, fra poco ne installleremo uno più valido.

Poi:

Rilancia Hijackthis:
● Do a System Scan Only
● spunta la casellina fianco di ogni singola voce che ti indicherò sotto
● una volta spuntate le voci:
● chiudi tutte le applicazioni aperte
● chiudi tutte le pagine del browser aperte
● in Hijackthis fixa le voci cliccando su Fix checked

Queste le voci da fixare:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://it6.hpwis.com/
O4 - HKLM\..\Run: [Cobian Backup 10 Interface] "C:\Programmi\Cobian Backup 10\cbInterface.exe" -service
O4 - HKUS\S-1-5-18\..\RunOnce: [Suite] regedit -s c:\windows\temp\adj_hp.reg (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [Suite] regedit -s c:\windows\temp\adj_hp.reg (User 'Default user')
O4 - S-1-5-18 Startup: setup_9.0.0.722_28.11.2010_16-17.lnk = C:\Documents and Settings\Proprietario\Desktop\Virus Removal Tool\setup_9.0.0.722_28.11.2010_16-17\startup.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: setup_9.0.0.722_28.11.2010_16-17.lnk = C:\Documents and Settings\Proprietario\Desktop\Virus Removal Tool\setup_9.0.0.722_28.11.2010_16-17\startup.exe (User 'Default user')
O4 - .DEFAULT User Startup: ddrive.js (User 'Default user')
O4 - Startup: setup_9.0.0.722_28.11.2010_16-17.lnk = C:\Documents and Settings\Proprietario\Desktop\Virus Removal Tool\setup_9.0.0.722_28.11.2010_16-17\startup.exe
O4 - Global Startup: Alice ti aiuta.lnk = C:\Programmi\Alice ti aiuta\bin\matcli.exe
O4 - Global Startup: Avvio veloce di Adobe Reader.lnk = C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Alice - {10134ABC-23D8-4962-AC7D-5AA7324E485E} - http://gw.aliceadsl.it/alice (file missing) (HKCU)
O9 - Extra button: Umail - {413BDB2C-99DE-4449-BD64-120D98E178ED} - http://www.umail.it (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=http://gw.aliceadsl.it/home
O16 - DPF: {6824D897-F7E1-4E41-B84B-B1D3FA4BF1BD} (PCPitstop AntiVirus) - http://utilities.pcpitstop.com/Extermin ... iVirus.dll
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = prova
O17 - HKLM\Software\..\Telephony: DomainName = prova
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = prova
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = prova
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = prova

Poi:

Scarica Pserv: http://p-nand-q.com/download/pserv_cpl/pserv-2.7.exe
● installa questo tool, seguendo i semplici passaggi proposti

Una volta installato:
● clicca su Start - Tutti i programmi
● lancia Services & Devices
● nell'elenco, individua questo servizio:
Servizio di Google Update
● tasto destro del mouse sul servizio in questione
● scegli Delete
● una volta rimosso il servizio riavvia il sistema

Fai sapere come va il PC, dopo tutte queste operazioni.
Buon lavoro, saluti.

Ho fatto tutto quello qui citato...ecco il log di HijackThis

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23.19.46, on 01/12/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Google\Update\GoogleUpdate.exe
C:\Programmi\Comodo\BackUp\CmdBkSvc.exe
C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\PROGRA~1\ALICET~1\SMARTB~1\MotiveSB.exe
C:\Documents and Settings\Proprietario\Desktop\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - d:\Reader\ActiveX\AcroIEHelper.ocx
O4 - HKLM\..\Run: [Motive SmartBridge] C:\PROGRA~1\ALICET~1\SMARTB~1\MotiveSB.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - .DEFAULT User Startup: ddrive.js (User 'Default user')
O8 - Extra context menu item: Google Sidewiki... - res://C:\Programmi\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll/cmsidewiki.html
O9 - Extra button: Organizzatore ricerche - {9455301C-CF6B-11D3-A266-00C04F689C50} - c:\Programmi\File comuni\Microsoft Shared\Reference 2001\EROProj.dll
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = prova
O17 - HKLM\Software\..\Telephony: DomainName = prova
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = prova
O17 - HKLM\System\CS3\Services\Tcpip\Parameters: Domain = prova
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: ComodoBackupService - COMODO - C:\Programmi\Comodo\BackUp\CmdBkSvc.exe
O23 - Service: PPPoE Service (PPPoEService) - Unknown owner - C:\PROGRA~1\Alice\ALICEE~1\app\pppoeservice.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O24 - Desktop Component 0: (no name) - http://mail.tiscali.it/cp/ps/Mail/ViewA ... &l=it&ai=1

--
End of file - 3302 bytes

Come dicevo prima ora la condivisione mi è saltata...e parte in automatico l'installaz di win installer per poi non a buon fine...qualcuno sà dirmi il perché di tutto questo...?

www.MegaLab.it

non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Re: non riesco più a installare l'antivirus

Chi c’è in linea