è bagle o non è bagle? AIUTO!

[bakshi88]

Salve a tutti!
Il virus che mi sono appena beccato sembra corrispondere per grandi linee a quello che in alcuni vostri articoli ho visto descritto sotto il nome "Bagle":
-l'infezione è avvenuta senza dubbio tramite p2p
-mi ha immediatamente fatto sparire dalla barra di notifica le icone dell'antivirus (avira) e del firewall (sygate), e da quel momento no sono più riuscito a riavviare i due programmi in questione
-non mi fa avviare il sistema (windows xp) in modalità provvisoria
-finora mi ha impedito l'installazione di 4 diversi antivirus (avira, avg, avast e kaspersky)

Ho notato inoltre che dalla barra delle applicazioni è scomparsa l'icona del "controllo volume" e il computer è completamente silenzioso. Mi viene il dubbio che questo sia opera dello stesso virus, dato che, al momento dell'avvio di windows, l'icona-volume è presente al solito posto e la periferica audio funziona normalmente, ma dopo alcuni istanti la stessa icona scompare e se entro in "pannello di controllo"-->"suoni e altre periferiche audio" noto che non viene più rilevata alcuna periferica per la riproduzione dei suoni. La stessa cosa accade ad ogni avvio del sistema: per i primi 20-30 secondi l'audio è presente, poi è come se sopraggiungesse qualcosa ad "occultare" la periferica e all'improvviso cala il silenzio. Non so se sono riuscito a spiegarmi su questo punto...

Ho già provato a seguire la procedura consigliata da Ste_95 nel suo articolo, ma ho incontrato diversi problemi che provo ad elencare:
-nella lista dei processi del task manager non è presente l'hldrrr.exe di cui si parla nell'articolo, come potete vedere
-il programma Gmer, dopo alcuni istanti dal suo avvio, si chiude da solo e non c'è modo di fargli portare a termine la scansione. Questa è la schermata che ottengo un attimo prima che il programma si chiuda:
-se provo ad avviare Avenger ottengo soltanto un messaggio di errore che mi dice "C:\...avenger.exe non è un'applicazione Win32 valida".

A questo punto non so più cosa fare, spero solo che qualcuno abbia capito di che problema si tratti e chiedo scusa se mi sono dilungato troppo. Ciao

[Amantide]

Scarica FindyKill (by Chiquitine29)ed installalo (è in francese però è di facile comprensione).
Una volta installato chiudi tutte le applicazioni attive e disconnettiti dal internet, poi clicca sull'icona di FindyKill e nella finestra dos che si aprirà scrivi 1 e premi Invio. Attendi il termine della scansione e posta qui il log che trovi in C:\FindyKill.txt

[bakshi88]

eccoti il log
http://www.zshare.net/download/52383873d43eb883/

----------------- FindyKill V4.707 ------------------

* User: Utente Principale - STEFANO
* Executed from : H:\Programmi\FindyKill
* Update on 06/12/08 by Chiquitine29
* Start at 15:10:45 the 07/12/2008
* Windows XP - Internet Explorer 7.0.5730.13

((((((((((((((((( *** Searching *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\Programmi\CDBurnerXP\NMSAccessU.exe
H:\WINDOWS\system32\nvsvc32.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\Explorer.EXE
H:\WINDOWS\system32\RUNDLL32.EXE
H:\Programmi\Google\Gmail Notifier\gnotify.exe
H:\WINDOWS\RTHDCPL.EXE
H:\Programmi\Firefox Ultimate Optimizer\Firefox Ultimate Optimizer.exe
H:\Programmi\Winamp\winampa.exe
H:\Programmi\QuickTime\qttask.exe
H:\Programmi\File comuni\InstallShield\UpdateService\issch.exe
H:\Programmi\HP\HP Software Update\HPWuSchd2.exe
H:\Programmi\RocketDock\RocketDock.exe
H:\WINDOWS\system32\ctfmon.exe
H:\Programmi\Yod'm 3D\Yodm3D.exe
H:\documents and settings\utente principale\impostazioni locali\dati applicazioni\eaweims.exe
H:\Programmi\Logitech\SetPoint\SetPoint.exe
H:\Programmi\Internet Explorer\IEXPLORE.EXE
H:\Programmi\WinFlip\WinFlip.exe
H:\Programmi\File comuni\Logishrd\KHAL2\KHALMNPR.EXE
H:\Programmi\HP\Digital Imaging\bin\hpqSTE08.exe
H:\Programmi\HP\Digital Imaging\Smart Web Printing\hpswp_clipbook.exe
H:\Programmi\HP\Digital Imaging\bin\hpqbam08.exe
H:\Programmi\HP\Digital Imaging\bin\hpqgpc01.exe
H:\WINDOWS\system32\NOTEPAD.EXE

--------------- [ Infected files / folders ] ----------------


»»»» Presence Files in H:


»»»» Presence Files in H:\WINDOWS


»»»» Presence Files in H:\WINDOWS\Prefetch

Found ! - H:\WINDOWS\prefetch\129468.EXE-00252DE2.pf
Found ! - H:\WINDOWS\prefetch\137328.EXE-1CC66166.pf
Found ! - H:\WINDOWS\prefetch\141468.EXE-1F504D13.pf
Found ! - H:\WINDOWS\prefetch\14770906.EXE-28D631A6.pf
Found ! - H:\WINDOWS\prefetch\14780156.EXE-2064E46D.pf
Found ! - H:\WINDOWS\prefetch\14817484.EXE-0FC407A1.pf
Found ! - H:\WINDOWS\prefetch\158234.EXE-0309CC4A.pf
Found ! - H:\WINDOWS\prefetch\166953.EXE-3AA5AA62.pf
Found ! - H:\WINDOWS\prefetch\176546.EXE-17763FC1.pf
Found ! - H:\WINDOWS\prefetch\187218.EXE-30297B0F.pf
Found ! - H:\WINDOWS\prefetch\188468.EXE-252512C2.pf
Found ! - H:\WINDOWS\prefetch\196921.EXE-2CA55D31.pf
Found ! - H:\WINDOWS\prefetch\3903906.EXE-2673BE41.pf
Found ! - H:\WINDOWS\prefetch\3906906.EXE-15DBA4FD.pf
Found ! - H:\WINDOWS\prefetch\3924921.EXE-356FB7B9.pf
Found ! - H:\WINDOWS\prefetch\3936437.EXE-242D6CAE.pf
Found ! - H:\WINDOWS\prefetch\3948671.EXE-00B035E9.pf
Found ! - H:\WINDOWS\prefetch\FLEC006.EXE-3B15CB2E.pf
Found ! - H:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Found ! - H:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf
Found ! - H:\WINDOWS\Prefetch\KEYGEN.EXE-344A0610.pf
Found ! - H:\WINDOWS\Prefetch\KEYGEN.EXE-344A0610.pf

»»»» Presence Files in H:\WINDOWS\system32

Found ! [07/12/2008 12.16] - H:\WINDOWS\system32\mdelk.exe
Found ! [07/12/2008 12.16] - H:\WINDOWS\system32\wintems.exe
Found ! [07/12/2008 14.17] - H:\WINDOWS\system32\ban_list.txt

»»»» Presence Files in H:\WINDOWS\system32\drivers

Found ! [07/12/2008 12.15] - H:\WINDOWS\system32\drivers\srosa.sys
Found ! [07/12/2008 12.15] - H:\WINDOWS\system32\drivers\srosa2.sys
Found ! [04/02/2004 04.09] - H:\WINDOWS\system32\drivers\winfilse.exe
Found ! [07/12/2008 12.18] - "H:\WINDOWS\system32\drivers\downld"
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\124750.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\125250.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\125750.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\126546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\128562.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\129343.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\129468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\130578.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\130687.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\131468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\135250.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\137328.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\138625.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\139593.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\139843.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\141468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\143250.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\144421.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\144546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\145453.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\145718.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\146390.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14743921.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14746187.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14755015.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14756328.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14763312.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14770906.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14780156.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14781546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14783125.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14785843.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14790765.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14817484.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14825921.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14829000.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14830171.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14833031.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\148406.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14867906.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14877296.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\14901453.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\149109.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\149625.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\153031.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\155031.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\155812.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\158234.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\159500.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\159781.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\160578.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\161812.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\164406.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\166953.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\167218.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\168546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\173468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\176546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\176703.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\178015.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\179734.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\180390.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\180843.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\182468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\182500.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\182937.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\184875.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\185515.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\186531.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\187218.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\187546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\188828.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\189031.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\189265.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\190265.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\191640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\191921.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\194375.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\199140.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\200265.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\204734.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\206281.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\208531.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\211156.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\215953.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\222468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\226250.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\226484.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\227359.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\227718.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\228859.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\229859.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\233812.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\235984.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\236875.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\239265.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\240359.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\240859.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\242890.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\243718.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\250640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\252125.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\252640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\253640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\256015.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\256312.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\257296.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\261125.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\261796.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\265562.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\268187.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\268750.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\269296.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\276703.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\277203.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\283171.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\283640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\285125.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\291078.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\291140.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\292468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\298984.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\300953.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\301406.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\306250.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\309640.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\325359.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\338906.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\341937.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\343375.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\356203.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3899890.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3906906.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3916234.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3917468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3924921.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3936437.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3938234.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3940796.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3943500.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3950796.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\3989312.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\4014312.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\4017562.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\4048593.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\4056500.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\4066484.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\585984.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\597156.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\598546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\619593.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\627328.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\630546.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\633984.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\636312.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\639031.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\643828.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\670531.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\679562.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\683000.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\684468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\687140.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\718406.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\729468.exe
Found ! [07/12/2008 12.18] - H:\WINDOWS\system32\drivers\downld\760453.exe

»»»» Presence Files in H:\Documents and Settings\Utente Principale\Dati applicazioni

Found ! [07/12/2008 12.16] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\flec006.exe"
Found ! [07/12/2008 12.17] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\list.oct"
Found ! [07/12/2008 12.17] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\data.oct"
Found ! [07/12/2008 12.17] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\srvlist.oct"
Found ! [07/12/2008 12.17] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared"
Found ! [06/12/2008 16.49] - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m"

»»»» Presence Files in H:\DOCUME~1\UTENTE~1\IMPOST~1\Temp


»»»» Presence Files in H:\Documents and Settings\Utente Principale\Local Settings\Temporary Internet Files\Content.IE5

Found ! [25/10/2008 12.11] - H:\Documents and Settings\Utente Principale\Documenti\Musica\Depeche Mode - 1990 - Violator\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Large.jpg
Found ! [25/10/2008 12.11] - H:\Documents and Settings\Utente Principale\Documenti\Musica\Depeche Mode - 1990 - Violator\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Small.jpg
Found ! [05/10/2008 19.22] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Dati applicazioni\Microsoft\Media Player\Cache copertina\LocalMLS\{10BAA14C-9999-4202-A678-4D82547B64E1}.jpg
Found ! [13/07/2008 13.01] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Dati applicazioni\Microsoft\Media Player\Cache copertina\LocalMLS\{BA2F4F24-5DDE-43E8-9546-49ED6B640797}.jpg
Found ! [06/12/2008 16.49] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[1].jpg
Found ! [06/12/2008 18.25] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[2].jpg
Found ! [07/12/2008 00.18] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[3].jpg
Found ! [06/12/2008 16.49] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[1].jpg
Found ! [06/12/2008 18.24] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[2].jpg
Found ! [07/12/2008 10.18] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[3].jpg
Found ! [06/12/2008 18.25] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[1].jpg
Found ! [06/12/2008 19.07] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[2].jpg
Found ! [07/12/2008 00.31] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[3].jpg
Found ! [06/12/2008 23.10] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[1].jpg
Found ! [07/12/2008 11.21] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[2].jpg
Found ! [07/12/2008 12.16] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[3].jpg
Found ! [07/12/2008 00.32] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\mxd[1].jpg
Found ! [06/12/2008 18.25] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64[1].jpg
Found ! [06/12/2008 23.10] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64[2].jpg
Found ! [07/12/2008 00.31] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_1[1].jpg
Found ! [07/12/2008 11.20] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_1[2].jpg
Found ! [06/12/2008 16.49] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_2[1].jpg
Found ! [06/12/2008 16.49] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[1].jpg
Found ! [06/12/2008 18.24] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[2].jpg
Found ! [07/12/2008 10.18] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[3].jpg
Found ! [07/12/2008 12.16] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[4].jpg
Found ! [06/12/2008 19.07] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[1].jpg
Found ! [06/12/2008 19.08] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[2].jpg
Found ! [07/12/2008 00.32] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[3].jpg
Found ! [07/12/2008 11.21] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[4].jpg
Found ! [07/12/2008 12.16] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[5].jpg
Found ! [07/12/2008 00.17] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_1[1].jpg
Found ! [07/12/2008 00.18] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_2[1].jpg
Found ! [06/12/2008 23.10] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_3[1].jpg
Found ! [06/12/2008 23.11] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64[1].jpg
Found ! [06/12/2008 19.06] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_1[1].jpg
Found ! [07/12/2008 00.32] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[1].jpg
Found ! [07/12/2008 11.20] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[2].jpg
Found ! [07/12/2008 11.21] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[3].jpg
Found ! [07/12/2008 00.17] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_3[1].jpg
Found ! [06/12/2008 18.25] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\mxd[1].jpg
Found ! [07/12/2008 12.17] - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\mxd[2].jpg

--------------- [ Registry / Startup ] ----------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
RocketDock="H:\Programmi\RocketDock\RocketDock.exe"
ctfmon.exe=H:\WINDOWS\system32\ctfmon.exe
Yodm3D=H:\Programmi\Yod'm 3D\Yodm3D.exe
Google Update="H:\Documents and Settings\Utente Principale\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" /c
Uniblue RegistryBooster 2009=H:\Programmi\RegistryBooster\RegistryBooster.exe /S
sTabLauncher=H:\Programmi\sTabLauncher\sTabLauncher.exe
Transparent TaskBar=H:\Programmi\Transparent TaskBar\Transparent TaskBar.EXE -auto_restore
VoipStunt="H:\Programmi\VoipStunt\VoipStunt.exe" -nosplash -minimized
eaweims="h:\documents and settings\utente principale\impostazioni locali\dati applicazioni\eaweims.exe" eaweims

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\run]
NvCplDaemon=RUNDLL32.EXE H:\WINDOWS\system32\NvCpl.dll,NvStartup
nwiz=nwiz.exe /install
NvMediaCenter=RUNDLL32.EXE H:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
SunJavaUpdateSched="H:\Programmi\Java\jre1.6.0_07\bin\jusched.exe"
{0228e555-4f9c-4e35-a3ec-b109a192b4c2}=H:\Programmi\Google\Gmail Notifier\gnotify.exe
Kernel and Hardware Abstraction Layer=KHALMNPR.EXE
SkyTel=SkyTel.EXE
RTHDCPL=RTHDCPL.EXE
Alcmtr=ALCMTR.EXE
GrooveMonitor="H:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
FirefoxUltimateOptimizer="H:\Programmi\Firefox Ultimate Optimizer\Firefox Ultimate Optimizer.exe"
CloneCDTray="H:\Programmi\CloneCD\CloneCDTray.exe" /s
SMSTray=H:\Programmi\Samsung\EmoDio\SMSTray.exe
TkBellExe="H:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
3DNADesktop="H:\Programmi\3DNA\Resources\3dnasys.exe" -open
WinampAgent=H:\Programmi\Winamp\winampa.exe
GuidaTVMonitor=H:\Programmi\GuidaTV\GuidaTVMonitor.exe
QuickTime Task="H:\Programmi\QuickTime\qttask.exe" -atboottime
Sccs=H:\Documents and Settings\Utente Principale\sccs.
Css=H:\Documents and Settings\Utente Principale\css.exe
SSBkgdUpdate=H:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
ISUSPM Startup=H:\PROGRA~1\FILECO~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
ISUSScheduler="H:\Programmi\File comuni\InstallShield\UpdateService\issch.exe" -start
HP Software Update=H:\Programmi\HP\HP Software Update\HPWuSchd2.exe
hpqSRMon=H:\Programmi\HP\Digital Imaging\bin\hpqSRMon.exe
Adobe Reader Speed Launcher="H:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
XMS7 StartUp=H:\Programmi\XMS7\XMS7.exe -min
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL=
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI=
NoChange=1
Installed=1
<NO NAME>=
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS=
Installed=1
<NO NAME>=

[HKEY_CURRENT_USER\software\local appwizard-generated applications\DestComp]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\RocketDock]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\Samsung Media Studio]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\setup]
[HKEY_CURRENT_USER\software\local appwizard-generated applications\winfilse]

--------------- [ Registry / Infected keys ] ----------------


Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\bisoft
Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\DateTime4
Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\FFC
Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\FirtR
Found ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\MuleAppData
Found ! - HKEY_CURRENT_USER\Software\Local AppWizard-Generated Applications\winfilse
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\srosa
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SROSA
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SROSA
Found ! - HKEY_CURRENT_USER\Software\bisoft
Found ! - HKEY_CURRENT_USER\Software\DateTime4
Found ! - HKEY_CURRENT_USER\Software\FirtR
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_SK9OU0S
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sK9Ou0s
Found ! - HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sK9Ou0s

--------------- [ States / Services ] ----------------

Missing key : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot

- boot mode not available !!

Missing key : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

- boot mode not available !!

Missing key : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network

- boot mode not available !!



+- Services : [ Auto=2 / Request=3 / Disable=4 ]

/!\ Ndisuio - Type of startup = 4

EapHost - Type of startup = 3

/!\ Ip6Fw - Type of startup = 4

/!\ SharedAccess - Type of startup = 4

/!\ wuauserv - Type of startup = 4

/!\ wscsvc - Type of startup = 4



--------------- [ Searching in removable drives ] ----------------


+- Informations :

G: - Unit… CD-ROM

H: - Unit… fissa


+- Presence of files :



--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


------------------- ! End of report ! --------------------

[Amantide]

Decisamente Bagle

Ora riesegui il Findykill, però questa volta scegli opzione 2.

[bakshi88]

Terminata anche la fase 2!

Ed ecco il risultato della tosatura (nel caso ti servisse per capire se ha rimosso la bestia):

----------------- FindyKill V4.707 ------------------

* User : Utente Principale - STEFANO
* executed from : H:\Programmi\FindyKill
* Update on 06/12/08 par Chiquitine29
* Start at 18:30:00 the 07/12/2008
* Windows XP - Internet Explorer 7.0.5730.13


((((((((((((((( *** deleting *** ))))))))))))))))))


--------------- [ Active Processes ] ----------------


H:\WINDOWS\System32\smss.exe
H:\WINDOWS\system32\csrss.exe
H:\WINDOWS\system32\winlogon.exe
H:\WINDOWS\system32\services.exe
H:\WINDOWS\system32\lsass.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\System32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\svchost.exe
H:\WINDOWS\system32\LogonUI.EXE
H:\WINDOWS\system32\spoolsv.exe
H:\WINDOWS\system32\userinit.exe
H:\WINDOWS\system32\WgaTray.exe

--------------- [ Infected files / folders ] ----------------


»»»» Supression files in H:


»»»» Supression files in H:\WINDOWS


»»»» Supression files in H:\WINDOWS\Prefetch

Deleted ! - H:\WINDOWS\prefetch\129468.EXE-00252DE2.pf
Deleted ! - H:\WINDOWS\prefetch\137328.EXE-1CC66166.pf
Deleted ! - H:\WINDOWS\prefetch\141468.EXE-1F504D13.pf
Deleted ! - H:\WINDOWS\prefetch\14770906.EXE-28D631A6.pf
Deleted ! - H:\WINDOWS\prefetch\14780156.EXE-2064E46D.pf
Deleted ! - H:\WINDOWS\prefetch\14817484.EXE-0FC407A1.pf
Deleted ! - H:\WINDOWS\prefetch\158234.EXE-0309CC4A.pf
Deleted ! - H:\WINDOWS\prefetch\166953.EXE-3AA5AA62.pf
Deleted ! - H:\WINDOWS\prefetch\176546.EXE-17763FC1.pf
Deleted ! - H:\WINDOWS\prefetch\187218.EXE-30297B0F.pf
Deleted ! - H:\WINDOWS\prefetch\188468.EXE-252512C2.pf
Deleted ! - H:\WINDOWS\prefetch\196921.EXE-2CA55D31.pf
Deleted ! - H:\WINDOWS\prefetch\3903906.EXE-2673BE41.pf
Deleted ! - H:\WINDOWS\prefetch\3906906.EXE-15DBA4FD.pf
Deleted ! - H:\WINDOWS\prefetch\3924921.EXE-356FB7B9.pf
Deleted ! - H:\WINDOWS\prefetch\3936437.EXE-242D6CAE.pf
Deleted ! - H:\WINDOWS\prefetch\3948671.EXE-00B035E9.pf
Deleted ! - H:\WINDOWS\prefetch\FLEC006.EXE-3B15CB2E.pf
Deleted ! - H:\WINDOWS\prefetch\KEYGEN.EXE-344A0610.pf
Deleted ! - H:\WINDOWS\prefetch\MDELK.EXE-1D176F91.pf
Deleted ! - H:\WINDOWS\prefetch\WINTEMS.EXE-2A563F9B.pf

»»»» Supression files in H:\WINDOWS\system32

Deleted ! - H:\WINDOWS\system32\mdelk.exe
Deleted ! - H:\WINDOWS\system32\wintems.exe
Deleted ! - H:\WINDOWS\system32\ban_list.txt

»»»» Supression files in H:\WINDOWS\system32\drivers

Deleted ! - H:\WINDOWS\system32\drivers\srosa.sys
Deleted ! - H:\WINDOWS\system32\drivers\srosa2.sys
Deleted ! - H:\WINDOWS\system32\drivers\winfilse.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\124750.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\125250.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\125750.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\126546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\128562.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\129343.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\129468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\130578.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\130687.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\131468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\135250.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\137328.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\138625.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\139593.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\139843.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\141468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\143250.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\144421.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\144546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\145453.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\145718.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\146390.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14743921.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14746187.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14755015.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14756328.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14763312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14770906.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14780156.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14781546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14783125.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14785843.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14790765.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14817484.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14825921.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14829000.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14830171.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14833031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\148406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14867906.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14877296.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\14901453.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\149109.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\149625.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15160937.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15164343.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15174406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15175937.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15183578.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15193515.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15199281.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15201140.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15204312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15209468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15236875.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15248359.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15272921.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15276218.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\153031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15310031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15321125.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\15341406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\155031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\155812.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\158234.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\159500.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\159781.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\160578.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\161812.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\164406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\166953.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\167218.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\168546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\173468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\176546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\176703.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\178015.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\179734.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\180390.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\180843.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\182468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\182500.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\182937.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\184875.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\185515.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\186531.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\187218.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\187546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\188828.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\189031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\189265.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\190265.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\191640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\191921.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\194375.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\199140.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\200265.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\204734.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\206281.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\208531.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\211156.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\215953.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\222468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\226250.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\226484.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\227359.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\227718.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\228859.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\229859.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\233812.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\235984.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\236875.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\239265.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\240359.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\240859.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\242890.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\243718.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\250640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\252125.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\252640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\253640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\256015.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\256312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\257296.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\261125.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\261796.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\265562.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\268187.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\268750.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\269296.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\276703.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\277203.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\283171.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\283640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\285125.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\291078.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\291140.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\292468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\298984.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\300953.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\301406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\306250.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\309640.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\325359.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\338906.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\341937.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\343375.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\356203.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3899890.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3906906.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3916234.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3917468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3924921.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3936437.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3938234.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3940796.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3943500.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3950796.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\3989312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\4014312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\4017562.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\4048593.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\4056500.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\4066484.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\585984.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\597156.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\598546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\619593.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\627328.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\630546.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\633984.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\636312.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\639031.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\643828.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\670531.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\679562.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\683000.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\684468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\687140.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\718406.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\729468.exe
Deleted ! - H:\WINDOWS\system32\drivers\downld\760453.exe
Deleted ! - "H:\WINDOWS\system32\drivers\downld"

»»»» Supression files in H:\Documents and Settings\Utente Principale\Dati applicazioni

Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\flec006.exe"
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\list.oct"
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\data.oct"
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\srvlist.oct"
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\10Tec iGrid.NET 1.70.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\12 Games 1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\3D Cover Boxshot Designer 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\3DBeamFEM 1.1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\A4_Flash_Menu_Builder_2.14.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Access_Denied_XP_1.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Actual_Contacts_for_Outlook_2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Adriana Lima 33 Screensaver 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Adroit_Smart_Tabbed_Dialog_Control_2.5_[With_Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\AHHB_Power_Delete_1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Aimersoft DVD to Zune Converter 1.1.55.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Aimersoft PSP Video Converter 1.1.55.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\aliTalk 1.8.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Amazing Xrime Search Tool 1.4.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Angelina_Jolie_Screensaver_1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\AS HTML Tag Source Viewer 1.03.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\AudioAlchemy_MP3_Edition_2.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Auto Reply Robot Standard Edition 1.1.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Battlefield 1942 Jeep Races Map.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Battle_Isle_The_Andosia_War_1.44_to_2.08_patch.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\BigSpeed_File_Sharing_SDK_2.0_(Crack).zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Bird_Watcher_Professional_7.0_KeyGen.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Black Night 001.000.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Budget_Calendar_1.0k.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Carl's Jr. iTunes Remote Widget 1.36 Beta.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Cathedral_3D_Screensaver_1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Chemical Calculator 1.0.1.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Click_N_Speak_2007Q1_[Patch].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Collectorz.com_Music_Collector_7.1_Build_5.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\ConnectStorm Server 1.0.0a.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\CookWare_7.9.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Crystal_Modeler_1.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\CSDialUp_API_1.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Csound_Editor_1.4.149.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Cyberprinter_1.7.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Date Calculator 2.68.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Day Discoverer 1.1.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Digit Skinnable Clock 2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Dynamic DNS Client .NET Edition Desktop 2.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Electric_Bass_Companion_2.5.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\EMS SQL Management Studio for MySQL 1.0.0.6.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\EZ AVI TO WMV Converter 3.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\FASOFT_ParEQ_1.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Fighter Jets Screensaver.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Fitness_Assistant_1.99.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Flash Horizontal Menu Wizard 2.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Flex_FX_2.0.2_Serial.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Fung_Wan_Online_(Multi_Language)_1.25.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Gangland_demo.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Gas Prices in Ottawa 1.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\GMSE_Imaging_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\GPSeasyPC_1.0_[Key].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\GS Typing Tutor 2.98 Build 0712.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Haaa_Notepad_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Heroes_of_Might_and_Magic_2_Editor_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\IceTime 3.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Icon_Craft_4.14.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\IE_Toolbar_Builder_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\ImageX 3.7 [Patch].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Jumpwel_5.05.005.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Kaspersky.Internet.Security.v6.0.0.300.WinAll-TWK.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Lecture Recorder 4.4 (With Crack).zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\LingvoSoft_Learning_Voice_PhraseBook_2006_Albanian_Serbian_2.1.29_KeyGen.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\LinkAlertPC_2.50.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\MeshWorks for Rhino 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\messagingPeople_Client_Software_2.01.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Metronome HistoryMaker 1.5a [With Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Mokum Mail 6.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Morovia_Royal_Mail_RM4SCC_Fontware_3.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Moyea_Video_to_3GP_Converter_1.6.1.31_Serial.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\My_Reminders_1.0.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\NOD32.v2.50.45.Standard.Keygen.Serials.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\OEM Information Changer 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\OverCAD_Tabs_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\P2P_Doctor_2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\PCImmunity_1.1.4.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\PDF_to_DWG_Converter_1.97_Key.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Philadelphia Toolbar 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Pocket_Plan_3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\podcast_RSS_creator_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Population Clock 1.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Precision_Calculator_2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Presto_Transfer_Palm_1.7.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\PrioSet 1.0.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Professor_X_0.4.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Program Selector Pro 4.9.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Query Application 1.06.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Recipe Browser 1.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Recipe_Keeper_Plus_7.0_[Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\rising_screensaver_01_(Patch).zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\River Past Crazi Video for Walkman 2.7.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Secure_Disk_2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Shut_the_Box_1.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Slideshow 0.9.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Smilecam 3.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Snowflake Free 2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Sothink_DVD_to_iPod_Converter_2.5_Build_70208_[Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Spb_Mobile_DVD_1.1.0_build_110_(Key+Serial).zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\SuperCat_4.4_Crack.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\SuperCool_PIM_1.00_build_8_[Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\SWF_Text_1.0_[Serial].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Symantec_Mobile_Security_v4.00_Full_TrYama.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\SystemReport_1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Tank T-34 1.03.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\The Rasterbator 1.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\The_Elder_Scrolls_III_Morrowind_-_Zelda_Basement_mod.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\The_Small_Dogs_Screensaver_1.0_Key.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Throttled_0.2.6.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Time Flies 1.5.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Titan Backup Business 2.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\TomaWeb Color Codes 1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Tom_Clancy's_Ghost_Recon_War_of_Infamy_v2.2_Eastern_Front.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\TouchArt Sampler 017.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Trellian Webpage 1.05.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\U&I_Information_Management_System_3.1_[Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Uplus Sync 1.3.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\UTS_Diabetic_Kit.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Valentina_Office_Server_3.0_Cracked.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\ViewSourceWith 0.0.9.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Weight Tracker 6.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Windows Server 2003 Administration Tools Pack Final Build 3790.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\WinIVR_Interactive_Voice_Response_1.0.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Winter_In_Forest_3D_Screensaver_1.5.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Woodworking Projects for Everyone 2.0.002 [Crack].zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\X-develop Professional 1.2.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\XML_for_Script_2.1.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\XplorPlus_1.4.8.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\YACID 1.1.0.zip
Deleted ! - H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared\Yummi 1.0.zip
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m\shared"
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\m"
Deleted ! - "H:\Documents and Settings\Utente Principale\Dati applicazioni\inst.exe"

»»»» Supression files in H:\DOCUME~1\UTENTE~1\IMPOST~1\Temp


»»»» Supression files in H:\Documents and Settings\Utente Principale\Local Settings\Temporary Internet Files\Content.IE5

Deleted ! - H:\Documents and Settings\Utente Principale\Documenti\Musica\Depeche Mode - 1990 - Violator\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Large.jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Documenti\Musica\Depeche Mode - 1990 - Violator\AlbumArt_{9863CB64-AE2A-4D74-BCF0-BF8C5FE241D2}_Small.jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Dati applicazioni\Microsoft\Media Player\Cache copertina\LocalMLS\{10BAA14C-9999-4202-A678-4D82547B64E1}.jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Dati applicazioni\Microsoft\Media Player\Cache copertina\LocalMLS\{BA2F4F24-5DDE-43E8-9546-49ED6B640797}.jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_1[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_2[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\b64_3[4].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\7AWT8L8Y\mxd[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_1[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_1[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_2[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\B67V49RL\b64_3[4].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[4].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[5].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64[6].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_1[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_2[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_3[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\UKXIXE7E\b64_3[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_1[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[2].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_2[3].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\b64_3[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\mxd[1].jpg
Deleted ! - H:\Documents and Settings\Utente Principale\Impostazioni locali\Temporary Internet Files\Content.IE5\Y13I4KHH\mxd[2].jpg

--------------- [ Registry / Infected keys ] ----------------

Deleted ! - HKEY_USERS\S-1-5-21-1547161642-746137067-725345543-1003\Software\Local AppWizard-Generated Applications\winfilse

--------------- [ States / Restarting of services ] ----------------

+- Safe boot mode restored !


+- Services : [ Auto=2 / Request=3 / Disable=4 ]

Ndisuio - Type of startup = 3

EapHost - Type of startup = 2

Ip6Fw - Type of startup = 2

SharedAccess - Type of startup = 2

wuauserv - Type of startup = 2

wscsvc - Type of startup = 2


--------------- [ Cleaning removable drives ] ----------------

+- Informations :

H: - Unit… fissa


+- deleting files :


--------------- [ Registry / Mountpoint2 ] ----------------


-> Not found !


--------------- [ Searching Cracks / Keygen ] ----------------

H:\Documents and Settings\Utente Principale\Documenti\Musica\Buzzcocks - Buzzcocks\Buzzcocks - 11 - Up for the Crack.mp3


---------------- ! End of report ! ------------------

Tra qualche minuto riposto per dirti se si è normalizzato tutto, intanto grazie mille!

[Amantide]

Il Bagle è stato rimosso completamente

[bakshi88]

perfetto, ho risolto!

Ma questo Findykill posso usarlo come antivirus per tutte le occasioni o è specifico per il Bagle?

[Amantide]

Findykill è il tool specifico per la rimozioni di Bagle

Come antivirus ti consiglio Avira e per tutte le occasioni - Malwarebyte's Antimalware.