impossibile visualizzare pc del gruppo di lavoro

[antopc]

Salve a tutti.
premetto che ho appena terminato di disinfettare il notebook dal bagle win32.
ora è pulito (allego x sicurezza log di hijack-this).
ho riavviato, con i preziosi consigli trovati sui vostri post, il servizio zero configuration che non mi faceva avviare la connessione wifi.
adesso pero non riesco ad accedere alle risorse sulla rete interna, un HD di rete ed un altro pc con cui condivido cartelle.
mi appare il messaggio "...impossibile accedere a workgroup. l'utente potrebbe non disporre... L'elenco dei server per questo gruppo di lavoro non è attualmente disponibile"
ho paura che ci possa essere ancora qualche file di registro relativo le condivisioni, rimasto corrotto.
ma naturalmente non so come procedere.
aspetto fiducioso un vostro supporto.
grazie

[Amantide]

E il log di Hijackthis che dovevi allegare?

Scarica il ComboFix da qui ed esegui la scansione seguendo queste istruzioni (giù in fondo). Al termine della scansione verrà creato il file di report C:\combofix.txt, copia qui il suo contenuto.

[antopc]

mi dice estensione txt non permessa...
come faccio ad allegare, copio i log qui?
grazie

[ste_95]

mi dice estensione txt non permessa...
come faccio ad allegare, copio i log qui?
grazie

Segui queste regole.

[antopc]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:06, on 2008-11-08
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Toshiba\Toshiba Applet\thotkey.exe
C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\WINDOWS\system32\TDispVol.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\DVDRAMSV.exe
C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
C:\Programmi\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxdiserv.exe
C:\WINDOWS\system32\lxdicoms.exe
C:\Programmi\McAfee\SiteAdvisor\McSACore.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
C:\Programmi\TOSHIBA\Tvs\TvsTray.exe
C:\Programmi\Synaptics\SynTP\Toshiba.exe
C:\Programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Programmi\Lexmark 3500-4500 Series\lxdimon.exe
C:\Programmi\Lexmark 3500-4500 Series\lxdiamon.exe
C:\Programmi\Trust\Trust R-series Mouse And Keyboard\MouseDrv.exe
C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\RAMASST.exe
C:\PROGRA~1\Webshots\Webshots.scr
C:\Programmi\File comuni\Ahead\Lib\NMIndexStoreSvr.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll
O2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar1.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Programmi\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O3 - Toolbar: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O4 - HKLM\..\Run: [THotkey] C:\Programmi\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TDispVol] TDispVol.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Tvs] C:\Programmi\TOSHIBA\Tvs\TvsTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [lxdimon.exe] "C:\Programmi\Lexmark 3500-4500 Series\lxdimon.exe"
O4 - HKLM\..\Run: [lxdiamon] "C:\Programmi\Lexmark 3500-4500 Series\lxdiamon.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Programmi\\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [WireLessMouse] C:\Programmi\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe MouseDrv.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [AVP] "C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Webshots.lnk = C:\Programmi\Webshots\Launcher.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: Aggiungi al banner Blocco pubblicità - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Statistiche sulla protezione del traffico Web - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 3450760883
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-l ... cfscan.cab
O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Programmi\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Programmi\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\system32\DVDRAMSV.exe
O23 - Service: EPGService - Hauppauge Computer Works - C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Keyboard And Mouse Communication Service (KMWDSERVICE) - UASSOFT.COM - C:\Programmi\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe
O23 - Service: lxdiCATSCustConnectService - Lexmark International, Inc. - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe
O23 - Service: lxdi_device - - C:\WINDOWS\system32\lxdicoms.exe
O23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Programmi\McAfee\SiteAdvisor\McSACore.exe
O23 - Service: OneCare Firewall (msfwsvc) - Unknown owner - C:\Programmi\Microsoft Windows OneCare Live\Firewall\msfwsvc.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: OneCare AntiSpyware and AntiVirus (OneCareMP) - Unknown owner - C:\Programmi\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Programmi\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 10672 bytes

ecco i file...


ho provato, anche da mod. provv.
qualche altra info:
- se pingo l'ip, le risposte sono ok, dai due pc.
- il pc con xp home (quello che non riesco piu a condividere) non viene visto nel gruppo di lavoro (quello di default "workgroup") e lui non apre proprio il gruppo di lavoro (da sempre lo stesso messaggio "impossibile accedere...).
- le cartelle condivise del pc col problema (xp home) non sono piu accessibili dall' altro pc, anche se avevo lasciato i collegamenti che andavano sempre ok (prima della pulizia del win32 beagle)
- internet ok senza problemi
- look lan parte e vede tutti gli IP collegati sulla rete
- anche la stampante di rete (wireless) non va piu, dice errore di collegamento alla stampante.
spero abbiate consigli da darmi x rendere nuovamente visibile questo pc fantasma .
grazie

[Amantide]

Scarica FindyKill ed installalo (è in francese però è di facile comprensione).
Una volta installato chiudi tutte le applicazioni attive e disconnettiti dal internet, poi clicca sull'icona di FindyKill e nella finestra dos che si aprirà scrivi 2 e premi Invio. Attendi il termine della scansione e posta qui il log che trovi in C:\FindyKill.txt
Magari FindyKill riuscirà a trova e ripristinare qualche servizio disabilitato che ci è sfuggito.

[antopc]

----------------- FindyKill V4.095 ------------------

* User : Antonio Vrenna - ANTONIO-CASA
* Emplacement : C:\Programmi\FindyKill
* Outils Mis a jours le 07/11/08 par Chiquitine29
* Suppression effectuée à 16:17:22 le 2008-11-08
* Windows XP - Internet Explorer 7.0.5730.11


((((((((((((((( *** Suppression *** ))))))))))))))))))


--------------- [ Processus actifs ] ----------------


C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LogonUI.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\userinit.exe

--------------- [ Fichiers/Dossiers infectieux ] ----------------


»»»» Suppression des fichiers dans C:


»»»» Suppression des fichiers dans C:\WINDOWS


»»»» Suppression des fichiers dans C:\WINDOWS\Prefetch

Supprimé ! - C:\WINDOWS\prefetch\WINTEMS.EXE-10953139.pf

»»»» Suppression des fichiers dans C:\WINDOWS\system32


»»»» Suppression des fichiers dans C:\WINDOWS\system32\drivers


»»»» Suppression des fichiers dans C:\Documents and Settings\Antonio Vrenna\Dati applicazioni


»»»» Suppression des fichiers dans C:\DOCUME~1\ANTONI~1\IMPOST~1\Temp


»»»» Suppression des fichiers dans C:\Documents and Settings\Antonio Vrenna\Local Settings\Temporary Internet Files\Content.IE5


--------------- [ Registre / Clés infectieuses ] ----------------


--------------- [ Etat / Redémarage des services ] ----------------


+- Services : [ Auto=2 / Demande=3 / Désactivé=4 ]

Ndisuio - Type de démarrage = 3

EapHost - Type de démarrage = 2

Ip6Fw - Type de démarrage = 2

SharedAccess - Type de démarrage = 2

wuauserv - Type de démarrage = 2

wscsvc - Type de démarrage = 2


--------------- [ Nettoyage des supports amovibles ] ----------------

+- Informations :

C: - Unit… fissa


+- Suppression des fichiers :


--------------- [ Registre / Moutpoint2 ] ----------------


-> Recherche négative.


--------------- [ Recherche Cracks / Keygen ] ----------------

C:\Documents and Settings\Antonio Vrenna\Documenti\Downloads\Programs\CLONEdvd\Keygen
C:\Documents and Settings\Antonio Vrenna\Documenti\Downloads\Programs\CLONEdvd\SlySoft.CloneDVD.v2.9.1.5.Multilangages.Incl-Keygen.rar
C:\Documents and Settings\Antonio Vrenna\Documenti\Downloads\Programs\CLONEdvd\Keygen\KeyMaker.exe
C:\Documents and Settings\Antonio Vrenna\Documenti\File ricevuti\Office.2003.Genuine.Advantage.Patcher-CLoNY\kEyGeN.exe

---------------- ! Fin du rapport ! ------------------

ECCO FATTO
adesso come procedo??
se puo esseri utile ho anche combofix.
grazie dell' aiuto

PS. non so se puo essere utile, magari voi del forum potete avvisare gli utenti, senza andare contro le regole comuni; l'icona di findkill è uguale a quella del programma che mi ha infettato il pc.
se mi autorizzi ti do il nome, altrimenti no probl.
ciao

[Amantide]

ECCO FATTO
adesso come procedo??
se puo esseri utile ho anche combofix.

No, basta Findykill, serviva per ripristinare le impostazioni di alcuni servizi compromessi da Bagle.
Ora riavvia il pc e vedi come va.

PS. non so se puo essere utile, magari voi del forum potete avvisare gli utenti, senza andare contro le regole comuni; l'icona di findkill è uguale a quella del programma che mi ha infettato il pc.
se mi autorizzi ti do il nome, altrimenti no probl.
ciao

Carica per favore il file su www.mediafire.com e mandami il link tramite MP.

[antopc]

NIENTE...
accesso non consentito al gruppo.
Ho messo ip statico, ma se lo pingo da altro pc non viene visto.
Se pingo da pc con il problema, tutto negativo. non vedo ne atri pc, ne hd di rete, ne vanno le stampe con la stampante wifi.
Ho messo anche cavo e sono entrato con scheda di rete ethernet, chissa era la wifi il probl. Nulla di fatto.
Ho disattivato firewall di windows ed ho aperto tutte le opzioni del firewall di kasperaky
PRATICAMENTE è ESCLUSO DALLA RETE DOMESTICA.
bel dilemma .
hai altre opzioni da darmi?
thank u
ps. il prog citato nella precedente veniva da p2p, per cui se puo interessare posso inviarti il nome al quale fanno riferimento solo due file e ambedue sono corrotti.

[Amantide]

Sai cosa... postami anche il log di Combofix, così forse riusciamo a vedere se sono state apportate altre modifiche al registro.

EDIT:
Per quanto riguarda i file infetti, fa niente.

[antopc]

ComboFix 08-10-19.04 - Antonio Vrenna 2008-10-21 12:55:59.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1040.18.649 [GMT 2:00]
* Creato nuovo punto di ripristino

ATENÇÃO - ESTA MAQUINA NAO TEM A CONSOLE DE RECUPERAÇÃO INSTALADA !!
.

((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\flec006.exe
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\156-215_-_Check_Point_Security_Administration_NGX_(156-215.1)_Practice_Test_Questions_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\3aline_Screensaver_1.8.7.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\3DMark06_Basic_Edition_Build_1.0.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\9A0-043 Practice Exam Testing Engine Software 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\ABC_Amber_Barca_Converter_4.01.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Activity & Expense Tracker Plus (OS X) 1.7.9.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\AddressBook 7.0 Release 9.02.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\AdsGone Popup Killer ad Blocker 2007 7.0.8 build 1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Advanced Data Export 3.4.9.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Advanced_Find_and_Replace_3.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Adventures_of_Sherlock_Holmes_Secret_of_the_Silver_Earring_demo.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Alice_In_Wonderland_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Allacs 1.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\AllFeeds 2.3.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Annivrem 1.02 [Crack].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Antarez Arena 1.1..zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Aranker_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Architect_and_Contractor_2.0_[Patch].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Astraware_Mahjongg_2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\AudioManage 2.10.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\BigPatience_4.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Calnique_Custom_Calendar_3.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Change Attributes 1.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Cincinnati_Traffic_2_2.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Classic_Menu_for_PowerPoint_2007_3.00_[With_Crack].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Combat Mission Barbarossa to Berlin demo.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Command_&_Conquer_Generals_-_War_of_the_Pits_map.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\CommuniCrypt Mail 1.16.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\CompositeLab_Pro_1.002.003.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Dead_Disk_Doctor_1.26.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Desktop_Pool_1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Desktop_Snowman_Screensaver_1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Digital Document Encryptor 2007.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Doc_to_Image_Converter_2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\DPGTree_2.1_[Patch].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\EarthWatcher 1.1.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Easy_Genetics_2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\EDGE_Diagrammer_5.07_build_1825.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Email ProGen 2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Evidence_Eliminator_5.057.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\EzLink_NG_2005.10.21_(Crack).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\File Attribute Stripper 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\File_Monitor_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Folder Backup 1.0.2139.17715.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\General_SQL_Parser_.NET_1.9.1_(Key+Serial).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\GloopIt 1.8.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Gnucleus_2.0.2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Gold Calculator Gold Edition 3.21.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Heart_Doctor_1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Heavy_Metal_-_FAKK_2_1.02a_patch.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Hiroshige_Art_Collection_Screensaver_(Patch).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Hotmail_Plus_Reader_for_Media_Center.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\I'm A Nut Screensaver 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Instant_Billing_1.10_[Key].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Intocartoon_Base_Edition_2.1_Cracked.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Jack Nicklaus 4 demo.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Jason DVD Video to DivX Converter 5.00.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Kaspersky.Anti-Hacker.1.7.130.Keys.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\LEADTOOLS ePrint Professional 5.0 [Patch].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Leio Video Capture 2.01.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Leithauser Research EBook Reader - Pride and Prejudice 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Lexisgoo_English_Dictionary_2.7_build_27906.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\LingvoSoft Learning PhraseBook 2007 German - Spanish 2.1.04.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\LingvoSoft Talking Picture Dictionary 2007 English - Estonian 1.1.17.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Malta Chat 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Metal Slug Anthology Countdown 1.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Microsoft_70-219_Exam.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\MITCalc 1.40.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Money_Discoverer_2.40.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\MP3_Torpedo_5.3.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\My Web Gallery 1.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\MyCafeCup_2.2233.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\NGM 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Nicepods_Conversion_Table_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\NOD32 v2.51.26 (instalação PT-Br e crack) by m4teus.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\On_Time_2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\OneNote_Password_10.1.6805_[Patch].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\OpenRemind 1.0.7 Build 1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Outlook Express Protector 2.04 [With Crack].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\PC_Activity_Monitor_Net_(PC_Acme_Net)_6.4.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\PDF_Viewer_.NET_2.2.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Personator_3.02.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\picture-shark_1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\PlayLister_2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\PowerDVD 8.0.1531.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Project_Browser+_4.3.95_[Patch].zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\PromptPal_1.5.5.2_(Patch).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Pumpkin_MovieBrain_4.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Rack Designer 2.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Rap~N~R&B radio 1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\RocketReader_Vocab_American_Edition_1.4_Patch.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SaveHollywood 1.6.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SCR Builder 3.3.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Serial.y.Keygen.para.BitDefender.9.Internet.Security.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\ShowFont - Windows Font Lister 1.12.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SilentMail_1.3.25.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SimCopter_demo.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SinoTraveler 1.00.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SL-Logon_1.00.0005.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Smack Macro Recorder 1.06.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SmarThumb my.zip 2.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SMSSend_2.1_Standard_2.1.5.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SoftCollection_Transparent_Analog_Clock_1.21.042.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Speed Bid for eBay 1.4.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SQL_Stripes_Enterprise_2.0_Build_196_Beta.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Sunbelt Kerio Personal Firewall 4.40.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\SWFKit_2.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\The DA Toolbar 4.5.145.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Thinksquared_MailPal_(Windows).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\ThinLinc_1.6.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Thumbs_5.41_Serial.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\TIFNY 5.03.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\TimeCalc.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Travel Dictionary Swedish HPC 2.7.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Turtle 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\U-Upload_Cart_1.3.1.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Unreal_Tournament_2003_-_Pipeth_skin.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\USAsoft_DVD_Video_Cell_Phone_Converter_5.1_(KeyGen).zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\WAPControl.NET 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Waterfalls and Ancient Gods Screensaver 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\WebChat - Communicator 1.2.27.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Widi Recognition 2.70.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\WildSnake_Pinball_Christmas_Tree_1.31.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Word To Your Font 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\WordRight Realtime Spelling Assistant 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Xe847 Pro Plugin for Photoshop 1.0.zip
C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\m\shared\Yeam's_Froogle_Uploader_1.5.zip
C:\InfoSat.txt
C:\WINDOWS\system32\drivers\downld
C:\WINDOWS\system32\drivers\downld\100312.exe
C:\WINDOWS\system32\drivers\downld\1004156.exe
C:\WINDOWS\system32\drivers\downld\102515.exe
C:\WINDOWS\system32\drivers\downld\104421.exe
C:\WINDOWS\system32\drivers\downld\105968.exe
C:\WINDOWS\system32\drivers\downld\106343.exe
C:\WINDOWS\system32\drivers\downld\107281.exe
C:\WINDOWS\system32\drivers\downld\107593.exe
C:\WINDOWS\system32\drivers\downld\108578.exe
C:\WINDOWS\system32\drivers\downld\108906.exe
C:\WINDOWS\system32\drivers\downld\109703.exe
C:\WINDOWS\system32\drivers\downld\110015.exe
C:\WINDOWS\system32\drivers\downld\110265.exe
C:\WINDOWS\system32\drivers\downld\110578.exe
C:\WINDOWS\system32\drivers\downld\111265.exe
C:\WINDOWS\system32\drivers\downld\111359.exe
C:\WINDOWS\system32\drivers\downld\114109.exe
C:\WINDOWS\system32\drivers\downld\114640.exe
C:\WINDOWS\system32\drivers\downld\116703.exe
C:\WINDOWS\system32\drivers\downld\117125.exe
C:\WINDOWS\system32\drivers\downld\118875.exe
C:\WINDOWS\system32\drivers\downld\119093.exe
C:\WINDOWS\system32\drivers\downld\119343.exe
C:\WINDOWS\system32\drivers\downld\119750.exe
C:\WINDOWS\system32\drivers\downld\119953.exe
C:\WINDOWS\system32\drivers\downld\120250.exe
C:\WINDOWS\system32\drivers\downld\120468.exe
C:\WINDOWS\system32\drivers\downld\120984.exe
C:\WINDOWS\system32\drivers\downld\121031.exe
C:\WINDOWS\system32\drivers\downld\122031.exe
C:\WINDOWS\system32\drivers\downld\122640.exe
C:\WINDOWS\system32\drivers\downld\122812.exe
C:\WINDOWS\system32\drivers\downld\123640.exe
C:\WINDOWS\system32\drivers\downld\124890.exe
C:\WINDOWS\system32\drivers\downld\125343.exe
C:\WINDOWS\system32\drivers\downld\127515.exe
C:\WINDOWS\system32\drivers\downld\128218.exe
C:\WINDOWS\system32\drivers\downld\128937.exe
C:\WINDOWS\system32\drivers\downld\1295687.exe
C:\WINDOWS\system32\drivers\downld\130421.exe
C:\WINDOWS\system32\drivers\downld\132500.exe
C:\WINDOWS\system32\drivers\downld\132718.exe
C:\WINDOWS\system32\drivers\downld\133359.exe
C:\WINDOWS\system32\drivers\downld\135203.exe
C:\WINDOWS\system32\drivers\downld\136562.exe
C:\WINDOWS\system32\drivers\downld\137000.exe
C:\WINDOWS\system32\drivers\downld\137687.exe
C:\WINDOWS\system32\drivers\downld\138328.exe
C:\WINDOWS\system32\drivers\downld\138875.exe
C:\WINDOWS\system32\drivers\downld\139171.exe
C:\WINDOWS\system32\drivers\downld\139890.exe
C:\WINDOWS\system32\drivers\downld\141500.exe
C:\WINDOWS\system32\drivers\downld\142468.exe
C:\WINDOWS\system32\drivers\downld\143140.exe
C:\WINDOWS\system32\drivers\downld\143296.exe
C:\WINDOWS\system32\drivers\downld\143812.exe
C:\WINDOWS\system32\drivers\downld\144812.exe
C:\WINDOWS\system32\drivers\downld\145718.exe
C:\WINDOWS\system32\drivers\downld\146703.exe
C:\WINDOWS\system32\drivers\downld\147531.exe
C:\WINDOWS\system32\drivers\downld\148343.exe
C:\WINDOWS\system32\drivers\downld\149031.exe
C:\WINDOWS\system32\drivers\downld\149531.exe
C:\WINDOWS\system32\drivers\downld\149765.exe
C:\WINDOWS\system32\drivers\downld\1516937.exe
C:\WINDOWS\system32\drivers\downld\152828.exe
C:\WINDOWS\system32\drivers\downld\156687.exe
C:\WINDOWS\system32\drivers\downld\159343.exe
C:\WINDOWS\system32\drivers\downld\164218.exe
C:\WINDOWS\system32\drivers\downld\165046.exe
C:\WINDOWS\system32\drivers\downld\172140.exe
C:\WINDOWS\system32\drivers\downld\175328.exe
C:\WINDOWS\system32\drivers\downld\175578.exe
C:\WINDOWS\system32\drivers\downld\181937.exe
C:\WINDOWS\system32\drivers\downld\185437.exe
C:\WINDOWS\system32\drivers\downld\186875.exe
C:\WINDOWS\system32\drivers\downld\192265.exe
C:\WINDOWS\system32\drivers\downld\192546.exe
C:\WINDOWS\system32\drivers\downld\199234.exe
C:\WINDOWS\system32\drivers\downld\200515.exe
C:\WINDOWS\system32\drivers\downld\207640.exe
C:\WINDOWS\system32\drivers\downld\210468.exe
C:\WINDOWS\system32\drivers\downld\216875.exe
C:\WINDOWS\system32\drivers\downld\217578.exe
C:\WINDOWS\system32\drivers\downld\221953.exe
C:\WINDOWS\system32\drivers\downld\223390.exe
C:\WINDOWS\system32\drivers\downld\227468.exe
C:\WINDOWS\system32\drivers\downld\232312.exe
C:\WINDOWS\system32\drivers\downld\237187.exe
C:\WINDOWS\system32\drivers\downld\239281.exe
C:\WINDOWS\system32\drivers\downld\241234.exe
C:\WINDOWS\system32\drivers\downld\280218.exe
C:\WINDOWS\system32\drivers\downld\280765.exe
C:\WINDOWS\system32\drivers\downld\284234.exe
C:\WINDOWS\system32\drivers\downld\287343.exe
C:\WINDOWS\system32\drivers\downld\292562.exe
C:\WINDOWS\system32\drivers\downld\293812.exe
C:\WINDOWS\system32\drivers\downld\300125.exe
C:\WINDOWS\system32\drivers\downld\304000.exe
C:\WINDOWS\system32\drivers\downld\308015.exe
C:\WINDOWS\system32\drivers\downld\310453.exe
C:\WINDOWS\system32\drivers\downld\313046.exe
C:\WINDOWS\system32\drivers\downld\317109.exe
C:\WINDOWS\system32\drivers\downld\319843.exe
C:\WINDOWS\system32\drivers\downld\329203.exe
C:\WINDOWS\system32\drivers\downld\330375.exe
C:\WINDOWS\system32\drivers\downld\337828.exe
C:\WINDOWS\system32\drivers\downld\344906.exe
C:\WINDOWS\system32\drivers\downld\348093.exe
C:\WINDOWS\system32\drivers\downld\358640.exe
C:\WINDOWS\system32\drivers\downld\361875.exe
C:\WINDOWS\system32\drivers\downld\370625.exe
C:\WINDOWS\system32\drivers\downld\370812.exe
C:\WINDOWS\system32\drivers\downld\381687.exe
C:\WINDOWS\system32\drivers\downld\436500.exe
C:\WINDOWS\system32\drivers\downld\446281.exe
C:\WINDOWS\system32\drivers\downld\5014875.exe
C:\WINDOWS\system32\drivers\downld\5039906.exe
C:\WINDOWS\system32\drivers\downld\5041125.exe
C:\WINDOWS\system32\drivers\downld\5076343.exe
C:\WINDOWS\system32\drivers\downld\5080875.exe
C:\WINDOWS\system32\drivers\downld\5088578.exe
C:\WINDOWS\system32\drivers\downld\5093843.exe
C:\WINDOWS\system32\drivers\downld\5097984.exe
C:\WINDOWS\system32\drivers\downld\5158640.exe
C:\WINDOWS\system32\drivers\downld\5174890.exe
C:\WINDOWS\system32\drivers\downld\622046.exe
C:\WINDOWS\system32\drivers\downld\7059500.exe
C:\WINDOWS\system32\drivers\downld\7080031.exe
C:\WINDOWS\system32\drivers\downld\7081171.exe
C:\WINDOWS\system32\drivers\downld\7100046.exe
C:\WINDOWS\system32\drivers\downld\7104328.exe
C:\WINDOWS\system32\drivers\downld\7189125.exe
C:\WINDOWS\system32\drivers\downld\7192687.exe
C:\WINDOWS\system32\drivers\downld\7200515.exe
C:\WINDOWS\system32\drivers\downld\7203234.exe
C:\WINDOWS\system32\drivers\downld\7276687.exe
C:\WINDOWS\system32\drivers\downld\7289484.exe
C:\WINDOWS\system32\drivers\downld\7313437.exe
C:\WINDOWS\system32\drivers\downld\87406.exe
C:\WINDOWS\system32\drivers\downld\88859.exe
C:\WINDOWS\system32\drivers\downld\89375.exe
C:\WINDOWS\system32\drivers\downld\935531.exe
C:\WINDOWS\system32\drivers\downld\947890.exe
C:\WINDOWS\system32\drivers\downld\948734.exe
C:\WINDOWS\system32\drivers\downld\957343.exe
C:\WINDOWS\system32\drivers\downld\962687.exe
C:\WINDOWS\system32\drivers\downld\965421.exe
C:\WINDOWS\system32\drivers\downld\969531.exe
C:\WINDOWS\system32\drivers\downld\972281.exe
C:\WINDOWS\system32\drivers\downld\99078.exe
C:\WINDOWS\system32\drivers\downld\99593.exe
C:\WINDOWS\system32\mdelk.exe
C:\WINDOWS\system32\wintems.exe

.
((((((((((((((((((((((((( Files Creati Da 2008-09-21 al 2008-10-21 )))))))))))))))))))))))))))))))))))
.

2008-10-20 22:31 . 2007-11-27 22:56 116,416 --a------ C:\WINDOWS\system32\drivers\msfwhlpr.sys
2008-10-20 22:31 . 2007-11-27 22:56 91,328 --a------ C:\WINDOWS\system32\drivers\msfwdrv.sys
2008-10-20 22:30 . 2008-05-15 16:15 53,168 --a------ C:\WINDOWS\system32\drivers\MpFilter.sys
2008-10-20 22:20 . 2008-10-20 22:45 <DIR> d-------- C:\Programmi\Microsoft Windows OneCare Live
2008-10-20 21:17 . 2008-10-20 21:17 <DIR> d-------- C:\WINDOWS\McAfee.com
2008-10-20 21:01 . 2008-10-20 22:31 <DIR> d-------- C:\WINDOWS\LastGood
2008-10-20 20:55 . 2008-10-20 20:55 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Kaspersky Lab Setup Files
2008-10-20 20:27 . 2008-10-21 13:01 13,531,168 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-10-20 20:27 . 2008-07-08 14:54 148,496 --a------ C:\WINDOWS\system32\drivers\65315505.sys
2008-10-20 20:27 . 2008-10-21 12:53 141,884 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-10-20 14:53 . 2008-10-20 20:58 <DIR> d-------- C:\Programmi\Alwil Software
2008-10-20 14:37 . 2008-10-20 15:27 298,104 --a------ C:\WINDOWS\system32\imon.dll
2008-10-20 14:22 . 2008-10-20 14:22 <DIR> d-------- C:\WINDOWS\DriversIntel
2008-10-20 14:22 . 2008-08-28 23:34 3,632,384 --a------ C:\WINDOWS\system32\drivers\NETw5x32.sys
2008-10-20 14:22 . 2008-06-20 10:33 2,756,608 --a------ C:\WINDOWS\system32\NETw5r32.dll
2008-10-20 14:22 . 2008-06-20 10:32 663,552 --a------ C:\WINDOWS\system32\NETw5c32.dll
2008-10-20 12:59 . 2008-10-20 12:59 0 --a------ C:\WINDOWS\system32\mapisvc.inf
2008-10-19 22:15 . 2006-03-24 05:05 839,688 --------- C:\WINDOWS\system32\drivers\winfilse.exe
2008-10-19 20:49 . 2008-10-19 20:49 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\MemeoCommon
2008-10-19 20:01 . 2008-10-20 12:02 <DIR> d-------- C:\Programmi\MioNet
2008-10-19 16:29 . 2008-10-20 18:41 <DIR> d-------- C:\Documents and Settings\LocalService\Dati applicazioni\SACore
2008-10-18 22:20 . 2008-09-08 12:41 333,824 -----c--- C:\WINDOWS\system32\dllcache\srv.sys
2008-10-18 22:18 . 2008-08-14 15:22 2,192,896 -----c--- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2008-10-18 22:18 . 2008-08-14 15:22 2,148,864 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2008-10-18 22:18 . 2008-08-14 15:22 2,069,760 -----c--- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2008-10-18 22:18 . 2008-08-14 15:22 2,027,520 -----c--- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2008-10-18 22:18 . 2008-09-15 17:24 1,846,400 -----c--- C:\WINDOWS\system32\dllcache\win32k.sys
2008-10-18 22:15 . 2008-10-18 22:15 <DIR> d-------- C:\Programmi\File comuni\McAfee
2008-10-18 22:13 . 2008-10-18 22:59 <DIR> d-------- C:\Programmi\McAfee

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-20 20:42 --------- d-----w C:\Programmi\File comuni\Wise Installation Wizard
2008-10-20 15:00 --------- d-----w C:\Programmi\TOSHIBA
2008-10-20 10:09 --------- d-----w C:\Programmi\File comuni\Apple
2008-10-19 23:04 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\FaxCtr
2008-10-19 20:16 --------- d-----w C:\Programmi\eMule
2008-10-19 18:46 --------- d--h--w C:\Programmi\InstallShield Installation Information
2008-10-19 18:30 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\uTorrent
2008-10-18 20:15 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\SiteAdvisor
2008-10-18 20:15 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\McAfee
2008-09-15 15:24 1,846,400 ----a-w C:\WINDOWS\system32\win32k.sys
2008-09-14 21:32 --------- d-----w C:\Programmi\TuneUp Utilities 2008
2008-09-14 21:31 --------- d-----w C:\Programmi\Atmosphere Lite
2008-09-14 21:19 --------- d-----w C:\Programmi\Uniblue
2008-09-14 21:19 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\Uniblue
2008-09-14 10:32 --------- d-----w C:\Programmi\QuickTime
2008-09-14 10:32 --------- d-----w C:\Programmi\Bonjour
2008-09-14 10:22 --------- d-----w C:\Programmi\Safari
2008-09-13 13:28 354,560 ----a-w C:\WINDOWS\system32\TuneUpDefragService.exe
2008-09-12 14:35 --------- d-----w C:\Programmi\Innovative Solutions
2008-09-12 14:30 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\TuneUp Software
2008-09-12 14:30 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\TuneUp Software
2008-09-12 14:25 --------- d-----w C:\Programmi\Hot Dogs Hot Gals
2008-09-12 14:15 --------- d-----w C:\Programmi\CCleaner
2008-09-11 21:37 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Lavasoft
2008-09-08 10:41 333,824 ----a-w C:\WINDOWS\system32\drivers\srv.sys
2008-09-06 12:21 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\Nokia
2008-09-06 12:18 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\PC Suite
2008-09-06 12:18 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\PC Suite
2008-09-06 11:22 --------- d-----w C:\Programmi\PC Connectivity Solution
2008-09-06 11:22 --------- d-----w C:\Programmi\Nokia
2008-09-06 11:22 --------- d-----w C:\Programmi\File comuni\PCSuite
2008-09-06 11:22 --------- d-----w C:\Programmi\File comuni\Nokia
2008-09-06 11:22 --------- d-----w C:\Programmi\DIFX
2008-09-06 11:21 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Installations
2008-08-29 08:18 87,336 ----a-w C:\WINDOWS\system32\dns-sd.exe
2008-08-29 07:53 61,440 ----a-w C:\WINDOWS\system32\dnssd.dll
2008-08-27 22:20 --------- d-----w C:\Programmi\Network Stumbler
2008-08-27 19:22 --------- d-----w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\Ahead
2008-08-27 19:22 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\Ahead
2008-08-27 19:08 --------- d-----w C:\Programmi\Look@LAN
2008-08-26 07:57 826,368 ----a-w C:\WINDOWS\system32\wininet.dll
2008-08-25 22:59 --------- d-----w C:\Programmi\Java
2008-08-14 13:22 2,148,864 ----a-w C:\WINDOWS\system32\ntoskrnl.exe
2008-08-14 13:22 2,027,520 ----a-w C:\WINDOWS\system32\ntkrnlpa.exe
2008-03-13 23:04 32 -c--a-w C:\Documents and Settings\All Users\Dati applicazioni\ezsid.dat
2007-12-29 13:14 918 -c--a-w C:\Documents and Settings\Antonio Vrenna\Dati applicazioni\filterclsid.dat
2007-01-11 13:07 58,032,562 ----a-w C:\Programmi\Samsung_PC_Studio_311_FKB.exe
2008-05-23 21:21 32,768 --sha-w C:\WINDOWS\system32\config\systemprofile\Impostazioni locali\Cronologia\History.IE5\MSHist012008052320080524\index.dat
.

((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 15360]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="C:\Programmi\File comuni\Ahead\Lib\NMBgMonitor.exe" [2007-01-15 147456]
"swg"="C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-04-06 68856]
"MsnMsgr"="C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"THotkey"="C:\Programmi\Toshiba\Toshiba Applet\thotkey.exe" [2006-08-25 356352]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-11-28 98304]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-11-28 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-11-28 118784]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2006-03-02 761948]
"Tvs"="C:\Programmi\TOSHIBA\Tvs\TvsTray.exe" [2006-02-02 73728]
"SmoothView"="C:\Programmi\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe" [2005-05-12 118784]
"HPDJ Taskbar Utility"="C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb05.exe" [2002-06-21 188416]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"QuickTime Task"="C:\Programmi\QuickTime\QTTask.exe" [2008-09-06 413696]
"lxdimon.exe"="C:\Programmi\Lexmark 3500-4500 Series\lxdimon.exe" [2007-05-07 435120]
"lxdiamon"="C:\Programmi\Lexmark 3500-4500 Series\lxdiamon.exe" [2007-03-05 20480]
"FaxCenterServer"="C:\Programmi\\Lexmark Fax Solutions\fm3032.exe" [2007-05-07 312240]
"WireLessMouse"="C:\Programmi\Trust\Trust R-series Mouse And Keyboard\StartAutorun.exe" [2007-03-06 212992]
"NeroFilterCheck"="C:\Programmi\File comuni\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"Adobe Reader Speed Launcher"="C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 39792]
"OneCareUI"="C:\Programmi\Microsoft Windows OneCare Live\winssnotify.exe" [2008-10-21 67112]
"TDispVol"="TDispVol.exe" [2005-09-16 C:\WINDOWS\system32\TDispVol.exe]
"RTHDCPL"="RTHDCPL.EXE" [2005-12-10 C:\WINDOWS\RTHDCPL.exe]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce]
"GrpConv"="grpconv -o" [X]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 15360]

C:\Documents and Settings\Antonio Vrenna\Menu Avvio\Programmi\Esecuzione automatica\
Webshots.lnk - C:\Programmi\Webshots\Launcher.exe [2007-03-30 45056]

C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
RAMASST.lnk - C:\WINDOWS\system32\RAMASST.exe [2007-03-09 155648]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^AutoStart IR.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^BlueSoleil.lnk]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^Bluetooth Monitor.lnk]
backup=C:\WINDOWS\pss\Bluetooth Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Avvio^Programmi^Esecuzione automatica^WD Anywhere Backup Launcher.lnk]
path=C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\WD Anywhere Backup Launcher.lnk
backup=C:\WINDOWS\pss\WD Anywhere Backup Launcher.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RoxWatchTray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
--a------ 2008-04-01 16:06 1747904 C:\Programmi\SlySoft\AnyDVD\AnyDVDtray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
--a------ 2008-03-21 10:30 486856 C:\Programmi\DAEMON Tools Lite\daemon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DriverMax]
--a------ 2008-10-02 13:41 5344088 C:\Programmi\Innovative Solutions\DriverMax\devices.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EPGServiceTool]
--a------ 2007-08-01 05:26 675840 C:\PROGRA~1\WinTV\EPG Services\System\EPGClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nokia.PCSync]
--a------ 2008-06-17 16:00 1249280 C:\Programmi\Nokia\Nokia PC Suite 7\PcSync2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Veoh]
--a------ 2008-09-26 19:14 3660848 C:\Programmi\Veoh Networks\Veoh\VeohClient.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HCWemmon]
--a------ 2007-03-29 22:22 61440 C:\WINDOWS\HCWemmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"winss"=2 (0x2)
"RoxWatch"=2 (0x2)
"RoxMediaDB"=3 (0x3)
"iPod Service"=3 (0x3)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"C:\\Programmi\\uTorrent\\utorrent.exe"=
"C:\\Programmi\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Programmi\\File comuni\\Ahead\\Nero Web\\SetupX.exe"=
"C:\\Programmi\\Look@LAN\\LookAtLan.exe"=
"C:\\Programmi\\Look@LAN\\LookAtHost.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\WINDOWS\\system32\\lxdicoms.exe"=
"C:\\Programmi\\Lexmark 3500-4500 Series\\lxdimon.exe"=
"C:\\Programmi\\Lexmark 3500-4500 Series\\lxdiamon.exe"=
"C:\\Programmi\\Lexmark 3500-4500 Series\\App4R.exe"=
"C:\\WINDOWS\\system32\\lxdicfg.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdipswx.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxditime.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdijswx.exe"=
"C:\\WINDOWS\\system32\\lxdiih.exe"=
"C:\\WINDOWS\\system32\\spool\\drivers\\w32x86\\3\\lxdiwbgw.exe"=
"C:\\Programmi\\Bonjour\\mDNSResponder.exe"=
"C:\\Programmi\\Veoh Networks\\Veoh\\VeohClient.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Documents and Settings\\All Users\\Dati applicazioni\\Kaspersky Lab Setup Files\\Kaspersky Anti-Virus 2009\\italian\\setup.exe"=

R0 hotcore2;hotcore2;C:\WINDOWS\system32\drivers\hotcore2.sys [2006-10-02 30808]
R1 is-EKS6Qdrv;is-EKS6Qdrv;C:\WINDOWS\system32\DRIVERS\65315505.sys [2008-07-08 148496]
R2 EPGService;EPGService;C:\PROGRA~1\WinTV\EPG Services\System\EPGService.exe [2007-09-05 374272]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service;C:\Programmi\Trust\Trust R-series Mouse And Keyboard\KMWDSrv.exe [2007-02-28 208896]
R2 lxdi_device;lxdi_device;C:\WINDOWS\system32\lxdicoms.exe [2007-04-26 517040]
R2 lxdiCATSCustConnectService;lxdiCATSCustConnectService;C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\\lxdiserv.exe [2007-04-26 99248]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;C:\Programmi\McAfee\SiteAdvisor\McSACore.exe [2008-09-08 198944]
R2 OcHealthMon;Windows Live OneCare Health Monitor;C:\Programmi\Microsoft Windows OneCare Live\OcHealthMon.exe [2008-08-08 28200]
R2 UxTuneUp;TuneUp Theme Extension;C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
R3 NETw5x32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows XP 32 Bit;C:\WINDOWS\system32\DRIVERS\NETw5x32.sys [2008-08-28 3632384]
S3 NSNDIS5;NSNDIS5 NDIS Protocol Driver;C:\WINDOWS\system32\NSNDIS5.SYS [2004-03-24 17280]
S3 TuneUp.Defrag;TuneUp Drive Defrag Service;C:\WINDOWS\System32\TuneUpDefragService.exe [2008-09-13 354560]
S3 USB28xxBGA;WinTV HVR-900;C:\WINDOWS\system32\DRIVERS\emBDA.sys [2007-01-30 361728]
S3 USB28xxOEM;WinTV OEM Filter;C:\WINDOWS\system32\DRIVERS\emOEM.sys [2007-01-30 39680]
S3 usbscan;Driver scanner USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Driver archiviazione di massa USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{531d3f04-d444-11dc-b19b-0011674e265e}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{88af4af0-27dc-11dc-b110-0011672e5a69}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled.exe

*Newly Created Service* - PROCEXP90
.
Contenuto della cartella 'Scheduled Tasks'

2008-10-21 C:\WINDOWS\Tasks\Verifica e correzione automatica.job
- C:\Programmi\TuneUp Utilities 2008\OneClickStarter.exe [2008-04-21 12:05]
.
- - - - ORFÃOS REMOVIDOS - - - -

HKCU-Run-DriverMax - (no file)
HKLM-RunOnce-<NO NAME> - (no file)
MSConfigStartUp-AppleSyncNotifier - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
MSConfigStartUp-iTunesHelper - C:\Programmi\iTunes\iTunesHelper.exe


.
------- Supplementare di scansione -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.yahoo.it/
R1 -: HKCU-Internet Settings,ProxyOverride = *.local
O17 -: HKLM\CCS\Interface\{30AB54B0-287E-44F1-A8E5-2F2F46D1739F}: NameServer = 192.168.1.1
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-10-21 13:01:12
Windows 5.1.2600 Service Pack 3 NTFS

scansione processi nascosti ...

scansione entrate autostart nascoste ...

Scansione files nascosti ...

Scansione completata con successo
Files nascosti: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet003\Services\srosa]

.
Ora fine scansione: 2008-10-21 13:03:32
ComboFix-quarantined-files.txt 2008-10-21 11:03:28

Pre-Run: 64,244,457,472 byte disponibili
Post-Run: 64,325,472,256 byte disponibili

523 --- E O F --- 2008-10-21 10:56:13

leggendo un po in giro, vedo indicazioni sulla modiifca di "criteri di protezione" in "strumenti di amministrazione" nel pannello di controllo,
ma io in strumenti di amministrazione non ce l'ho "criteri di protezione"
sara qui l'intoppo?
o è cosi xckè è xp-home?

[Amantide]

E' strano ma Combofix ha rilevato una barcaccia di file infetti facenti parte di Bagle
O FindyFill ha fatto la cilecca, che mi sembra molto strano, oppure il Bagle si è rigenerato

Comunque, ho visto anche qualche altro file da rimuovere, ora controllo meglio il log.

[antopc]

rielaboro combofix, forse ho messo ilvecchio txt
allego subito

[Amantide]

Forse si

ComboFix 08-10-19.04 - Antonio Vrenna 2008-10-21 12:55:59.1 - NTFSx86

[antopc]

http://www.mediafire.com/file/ezhkciqki ... antopc.txt

spero sia ok...
fammi sapere
ho dovuto fare cosi xchè con log erano troppi caretteri

[Amantide]

Tutto regolare

Non so aiutarti nemmeno con "criteri di protezione" in "strumenti di amministrazione" perché mi trovo su XP Pro e quindi non ti so dire se su XP Home questa voce non ci sia veramente.

Hai provato a rifare daccapo L'Installazione guidata rete su entrambi pc?

[antopc]

l'installazione guidata di rete l'ho gia provata.
se trovi altre info in merito, rimettiti in coda al post.
appena trovo la soluzione chiudo io stesso il post.
GRAZIE DAVVERO X L'AIUTO.
10 E LODE AL VOSTRO INTERESSAMENTO ED AL FORUM