Esecuzione automatica di Esplora risorse

[nucleolo]

Ciao, ho Win98 e da qualche tempo in avvio mi si apre in automatico la finestra di esplora risorse, per essere più precisi mi va direttamente su c:
Ho fatto una ricerca qui sul forum, ed ho provato le soluzioni proposte. Dunque niente virus, spyware adaware o simili.
Ho controllato il registro e contiene 2 prog in esecuzione automatica, e per certo non sono loro a provocare l'apertira di esplora risorse. Sotto la cartella /Run invece ho il prog. di gestione della tastiera avanzata e quindi lo assolviamo, poi ho AdslTaskBar, che mi permette di vedere i parametri della connessione. La cosa strana è che accanto ad AdslTaskBar appare la scritta rundll32.exe stmctrl.dll,TaskBar. Che c'entra il rundll con la taskbar? Non parte già da solo per i fatti suoi?
Bò non so più cosa fare, consigli?

[crazy.cat]

Microsoft "Run a DLL as an App". RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
---------
stmctrl.dll
Telecom Italia ADSL State monitor for Access Media FastRate USB 100 Modem. This application monitoring the state of ADSL line and modem functionality.
----------
Praticamente il RUNDLL32 ti carica la stmctrl.dll in memoria per monitorare lo stato della tua connessione.
----------
Scaricati hijackthis
http://209.133.47.200/~merijn/files/HijackThis.exe
http://www.spywareinfo.com/~merijn/files/HijackThis.exe
http://home.datacomm.ch/winozz/hijackthis.zip
(ci sono dei problemi per lo scarico in questo momento)
fai la scansione e ti salvi il log della scansione in un file di testo e poi posti il contenuto qui e vediamo se mi viene qualche idea perché al momento non saprei che dirti.

Benvenuto nel forum.

[nucleolo]

Ciao, grazie per il benvenuto!

Questo è il log:
Logfile of HijackThis v1.97.5
Scan saved at 17.30.20, on 22/06/04
Platform: Windows 98 Gold (Win9x 4.10.1998)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSYSTEMKERNEL32.DLL
C:WINDOWSSYSTEMMSGSRV32.EXE
C:WINDOWSSYSTEMMPREXE.EXE
C:WINDOWSSYSTEMmmtask.tsk
C:WINDOWSEXPLORER.EXE
C:WINDOWSSYSTEMRNAAPP.EXE
C:WINDOWSSYSTEMTAPISRV.EXE
C:PROGRAMMILOGITECHITOUCHITOUCH.EXE
C:WINDOWSRUNDLL32.EXE
C:PROGRAMMIFINEPIXVIEWERQUICKDCF.EXE
C:WINDOWSSYSTEMW98EJECT.EXE
C:PROGRAMMIINTERNET EXPLORERIEXPLORE.EXE
C:WINDOWSSYSTEMPSTORES.EXE
C:WINDOWSDESKTOPHIJACKTHIS.EXE

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.it/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page_bak = http://www.google.it/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O1 - Hosts: 212.33.69.3 js1.hitbox.com
O1 - Hosts: 212.33.69.3 stats.hitbox.com
O1 - Hosts: 212.33.69.3 pagead2.googlesyndication.com
O1 - Hosts: 212.33.69.3 m1.nedstatbasic.net
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:PROGRAMMIADOBEACROBAT 5.0READERACTIVEXACROIEHELPER.OCX
O3 - Toolbar: (no name) - {31D1CA78-F919-4198-8DA5-AB6F44E4AB28} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSYSTEMMSDXM.OCX
O4 - HKLM..Run: [zBrowser Launcher] C:ProgrammiLogitechiTouchiTouch.exe
O4 - HKLM..Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
O4 - Startup: Exif Launcher.lnk = C:ProgrammiFinePixViewerQuickDCF.exe
O4 - Startup: w98Eject.lnk = C:WINDOWSSystemw98eject.exe
O9 - Extra button: SEARCH (HKLM)
O9 - Extra button: ENTERTAINMENT (HKLM)
O9 - Extra button: PILLS (HKLM)
O9 - Extra button: SECURITY (HKLM)
O9 - Extra button: SEARCH (HKLM)
O9 - Extra button: Descargas (HKLM)
O16 - DPF: Win32 Classes -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shoc ... wflash.cab
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... mv9VCM.CAB
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.1_01) -
O16 - DPF: {CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_01) -
O16 - DPF: {0000000A-0000-0010-8000-00AA00389B71} - http://download.microsoft.com/download/ ... wmavax.CAB
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/C ... 2663541667
O16 - DPF: {F5192746-22D6-41BD-9D2D-1E75D14FBD3C} - http://216.65.38.226/crack.CAB
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/Shar ... /cabsa.cab
O16 - DPF: {F5D98C43-DB16-11CF-8ECA-0000C0FD59C7} (ActiveCGM Control) - http://ecozero.liguriainrete.it/cartoweb/acgm7/Acgm.cab
O16 - DPF: {C606BA60-AB76-48B6-96A7-2C4D5C386F70} (PreQualifier Class) - http://help.virgilio.it/pctester/files/ ... reQual.cab
O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.hostance.net/dialer/1014061.exe
O16 - DPF: {B91AEDBE-93DF-4017-8BB3-F1C300C0EC51} - http://activation.reallusion.com/crazytalk_he/setup.exe
O16 - DPF: {584719E2-015C-438F-A012-0085270F8E63} (NCSProgressBarEx Class) - http://www.cartografia.regione.lombardi ... nostro/ncs.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} (DialerWeb Class) - http://212.145.159.194/251065/dialercab ... endada.cab

Quelli segnati 04 li riconosco sono ok... non so cosa sia C:WINDOWSSYSTEMPSTORES.EXE Ora scappo al lavoro ciao!

[crazy.cat]

Cosa sono questi? Non ho trovato notizie precise in giro.
O4 - Startup: w98Eject.lnk = C:WINDOWSSystemw98eject.exe
O4 - HKLM..Run: [zBrowser Launcher] C:ProgrammiLogitechiTouchiTouch.exe

Queste voci sono eliminabili,gli metti il flag e poi premi Fix

O16 - DPF: {DB893839-10F0-4AF9-92FA-B23528F530AF} - http://deposito.hostance.net/dialer/1014061.exe
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} (DialerWeb Class) - http://212.145.159.194/251065/dialercab ... endada.cab
O1 - Hosts: 212.33.69.3 js1.hitbox.com
O1 - Hosts: 212.33.69.3 stats.hitbox.com
O1 - Hosts: 212.33.69.3 pagead2.googlesyndication.com
O1 - Hosts: 212.33.69.3 m1.nedstatbasic.net

pstores.exe
Description: Microsoft Protected Storage Server, in Win95/98/ME, or Protected Storage Service, in WinNT/2000/XP. Protected Storage, in the form of PSTORES, was introduced with Internet Explorer 4. It is invoked by Microsoft Internet programs, such as Outlook Express and Internet Explorer, to securely store a variety of secure and confidential data into the registry, such as Outlook Express passwords, SSL certificates, auto-complete fields, such as usernames and passwords to enter web sites, and so forth, and web forms data.

Non so però di preciso perché ti apra esplora risorse.

[nucleolo]

Allora la prima delle due voci è il driver del lettore mp3 per poter usare la porta usb.
La seconda sono i driver per la gestione dei tasti extra programmabili della tastiera.
Proverò ad eliminare ciò che mi hai indicato. Grazie!

[nucleolo]

Ho provato ad eliminare ciò che hai detto, nulla da fare... è proprio un mistero...

[nucleolo]

Ho trovato questo prog, questo è il log:

CWShredder v1.49.1 scan only report

Windows 98 (4.10.1998 )
Windows dir: C:WINDOWS
Windows system dir: C:WINDOWSsystem
AppData folder: C:WINDOWSApplication Data
Username: Massimino

Found Hosts file: C:WINDOWShosts (25 bytes, -)
Found CWS.Control (if filesize is over 50k) file: C:WINDOWScontrol.exe (2179 bytes, A)
Registry value: DefaultPrefix (should be http://) [] http://
Registry value: WWW Prefix (should be http://) [www] http://
Registry value: Mosaic Prefix (should be http://) [mosaic] http://
Registry value: Home Prefix (should be http://) [home] http://
Found Win.ini file: C:WINDOWSwin.ini (7431 bytes, A)
Found System.ini file: C:WINDOWSsystem.ini (2218 bytes, A)
Found line in System.ini: shell=Explorer.exe

- END OF REPORT -

Guarda l'ultima linea: in system.ini viene chiamato explorer? è quello che lo apre all'avvio? come mai viene riportato in questo log? volevo provare a non farlo caricare, si metteva un asterisco per evitare di caricare una riga?

[crazy.cat]

Ho la stessa chiave in un pc con win98.
Prova a postare qui il contenuto del win.ini e del system.ini e vediamo loro cosa chiamano all'avvio.
Mi sembra anche a me che ci volesse * per non far caricare la riga.

[nucleolo]

Allora ho provato a non far caricare la riga (per la cronaca si usa il punto e virgola) ma nulla...

Ecco il win.ini:

[windows]
NullPort=None
device=Canon i250,CJPDRV50,USBPRN01

[Desktop]
Wallpaper=(None)
TileWallpaper=1
WallpaperStyle=0
Pattern=(None)

[intl]
iCountry=39
ICurrDigits=0
iCurrency=2
iDate=1
iDigits=2
iLZero=1
iMeasure=0
iNegCurr=9
iTime=1
iTLZero=0
s1159=
s2359=
sCountry=Italy
sCurrency=L.
sDate=/
sDecimal=,
sLanguage=ita
sList=;
sLongDate=dddd d MMMM y
sShortDate=dd/MM/yy
sThousand=.
sTime=.

[Fonts]

[FontSubstitutes]
Helv=MS Sans Serif
Tms Rmn=MS Serif
Times=Times New Roman
MS Shell Dlg 2=MS Sans Serif
Helvetica=Arial
MS Shell Dlg=MS Sans Serif

[Compatibility]
_3DPC=0x00400000
_BNOTES=0x224000
_LNOTES=0x00100000
ACAD=0x8000
ACT!=0x400004
ACROBAT=0x04000000
AD=0x10000000
ADW30=0x10000000
ALARMMGR=0x0040000
ALDSETUP=0x00400000
AMIPRINT=0x04000000
AMIPRO=0x04000010
APORIA=0x0100
APPROACH=0x0004
BALER=0x08000000
BMAPP=0x0004
CASMONEY=0x00200000
CAVOIDE=0x00200000
CCMAIL=0x00200000
CCMCWFY=0x80
CHARISMA=0x2000
CONFIG=0x00400000
CORELDRW=0x48000
CORELPNT=0x08000000
COSTAR=0x0004
CP=0x0040
CROSSTIE=0x00000400
DARCH=0x80
DESIGNER=0x00002000
DIRECTOR=0x00800000
DPLANNER=0x00200000
DRAW=0x2000
DS40=0x8000
DTWIN20=0x00000400
EAP=0x0004
ED=0x00010000
EXCEL=0x1000
EXPASTRO=0x04000000
EXTYPWND=0x00200000
FAXVIEW=0x04000000
FAXWORKS=0x00000400
FH4=0x00E08000
FLW2=0x8000
FMPRO=0x00200000
FREEHAND=0x8000
FULLTEXT=0x20000000
GIFTMAKE=0x20000000
GUIDE=0x1000
HDW=0x04800000
HGW=0x8000
HGW2EXE=0x8000
HGW3EXE=0x8000
HJDRAW=0x00400000
IDAPICFG=0x00400000
IDRAW=0x04008000
ILLUSTRATOR=0x8000
IMPROV2=0x00000000
INFOCENT=0x04000000
INSIGHT=0x00000400
INSTAL1=0x00400000
INSTALL=0x00400000
INTERMIS=0x10000000
IS20INST=0x00000000
IVIHEALT=0x00400000
JEOPARDY=0x00200000
JW=0x00000000
KALOAD2=0x00400000
KEYCAD=0x8000
LE_ADMIN=0x00400000
LUI=0x20000000
MAILSPL=0x10000000
MAKER=0x00200000
MAPS1=0x04008022
MATH=0x00000001
MAVIS=0x00200000
MCOURIER=0x0800
MFWIN20=0x02000000
MILESV3=0x1000
MILESV40=0x4
MOZART=0x40000000
MSARTIST=0x00100000
MSBHUMAN=0x4
MSREMIND=0x10000000
MVIEWER2=0x40200000
MYINV=0x00200000
MYST=0x08000000
NAFTA1=0x4008022
NBAMW4V4=0x04000000
NETSET2=0x0100
NOTES=0x200000
NOTSHELL=0x0001
OPERATOR=0x02000000
OUTPOST=0x00000000
OWLAPP=0x00400000
PACKRAT=0x0800
PAINTER=0x00000000
PAWC8DC3=0x00400000
PAWIN=0x4
PEACHW=0x04800004
PIXIE=0x0040
PLANIT=0x0004
PLANNER=0x2000
PLUS=0x1000
PM4=0xA000
PM5APP=0x8000
PP4=0x00000000
PR2=0x2000
PRINTHLP=0x0004
QAPLUSW=0x0004
QLIIFAX=0x00400000
QUAKE=0x80
QW=0x08000000
RELAY=0x20000000
REM=0x8022
RR2CD=0x00200000
RX=0x00000400
RXL=0x00000400
SETUP=0x00000000
SIDEKICK=0x0004
SLEEPER=0x10000000
SPCB=0x04008000
SPORTJEP=0x00200000
SPWIN20=0x00400000
ST2=0x4008022
STRAUSS=0x40000000
STRAV=0x40000000
SCHUBERT=0x40000000
SSBWIN=0x00200000
SWCWIN=0x00800004
TCVWIN=0x00200000
TCW=0x00400000
TCWIN=0x0004
TERRAIN=0x00400000
TISETUP=0x00200000
TL6=0x08000000
TME=0x0100
TMSWIN=0x20000000
TMTWIN=0x00200000
TMTWINCD=0x00200000
TOUCHUP=0x00400000
TURBOTAX=0x00080000
VB=0x0200
VEWINFIL=0x00400000
VISIO=0x00000004
VISIOHM=0x00000004
VISION=0x0040
W4GL=0x4000
W4GLR=0x4000
WGW=0x00440000
WIN2WRS=0x1210
WINCIM=0x4
WINLINK=0x20000000
WINPHONE=0x0004
WINSIM=0x2000
WINTACH=0x00200000
WORDSCAN=0x02200000
WPWINFIL=0x00000006
WPWIN60=0x00000400
WPWIN61=0x02000400
WSETUP=0x00200000
XPRESS=0x00000008
ZETA01=0x00400000
ZIFFBOOK=0x00200000
NOTIFIER=0x400000
HGPROG30=0x9481

[Compatibility32]
CLWORKS=0x00A00000
MCAD=0x00600000
PHOTOSHP=0x00208000
PODW=0x00200000
SPSSWIN=0x00200000
TYPSTRY2=0x00200000
V32VM20=0x02000000
VISIO=0x00000000
VISIOHM=0x00000000
WINPHONE=0x00000004
WRDART32=0x00400000
SHELL=0x80000000
USTATION=0x80000000

[Compatibility95]
CHAOS OV=0x80000000
CONF=0x00000002
MSDEV=0x00000002
IMAGE32=0x80000000
INST32=0x80000000
AGENTSVR=0x00000002

[ModuleCompatibility]
ACEROOBE=0x0004
AIRNFM=0x0002
ALDNCD=0x0002
AMRES=0x0002
ATM=0x0002
ARCHANGEL=0x0002
CSNOV=0x0002
DEFDEMO=0x0002
DIBWND=0x0002
DIB=0x0002
DS=0x0001
EMLIB=0x0002
EMSAVE=0x0002
FH4=0x0002
GEDIT=0x0002
GEORGE=0x0002
GVBSETUP=0x0002
HRWCD=0x0002
ISLFAXPR=0x0002
KIDDESK=0x0002
KIDSTYPE=0x0000
KNPS=0x0002
LIONKING=0x0002
MAUI_DRV=0x0002
MGXWMF=0x0002
MEMMAP=0x0002
MSARTIST=0x0002
MSCRWRTR=0x0002
MSCUISTF=0x0001
MVIEWER2=0x0002
MWAVSCAN=0x0002
MYINV=0x0002
OLESVR=0x0002
PDOXWIN=0x0002
PLANIT=0x0002
PP3=0x0002
PP4=0x0002
PPPP=0x0002
PXDSRV2=0x0002
REVIEWRT=0x0002
ROULETTE=0x0002
RRIRJ=0x0002
RR1=0x0002
RR2CD=0x0002
STL_DLG=0x0002
TECO=0x0001
TER=0x0002
TLW0LOC=0x0002
TMSWIN=0x0002
USA=0x0002
VOICE=0x0002
WFXVIEW=0x0004
WINFORM=0x0002
WPWIN61=0x0002

[TrueType]
FontSmoothing=1

[mci extensions]
mid=Sequencer
rmi=Sequencer
wav=waveaudio
avi=AVIVideo
cda=CDAudio
aif=MPEGVideo
aiff=MPEGVideo
aifc=MPEGVideo
au=MPEGVideo
m1v=MPEGVideo
mov=MPEGVideo
mp2=MPEGVideo
mpa=MPEGVideo
mpe=MPEGVideo
mpeg=MPEGVideo
mpg=MPEGVideo
qt=MPEGVideo
snd=MPEGVideo
dat=MPEGVideo
midi=Sequencer
asf=MPEGVideo2
asx=MPEGVideo2
ivf=MPEGVideo2
m3u=MPEGVideo
mp3=MPEGVideo
mpv2=MPEGVideo
mp2v=MPEGVideo
wax=MPEGVideo2
wvx=MPEGVideo2
wm=MPEGVideo2
wma=MPEGVideo2
wmv=MPEGVideo2
kar=Sequencer
ka2=Sequencer
lsf=MPEGVideo2
lsx=MPEGVideo2
wmx=MPEGVideo2
wmp=MPEGVideo2

[MCICompatibility]
QTWVideo=0x0001
MCIXSND=0x0001
GDAnim=0x0001

[mciavi]

[Desktop_Shell]
Current=Win

[Pscript.Drv]
ATMWorkaround=1

[Ports]
LPT1:=
LPT2:=
LPT3:=
COM1:=9600,n,8,1,x
COM2:=9600,n,8,1,x
COM3:=9600,n,8,1,x
COM4:=9600,n,8,1,x
FILE:=

[embedding]
Package=Package,Package,packager.exe,picture
midfile=Sequenza MIDI,Sequenza MIDI,C:WINDOWSmplayer.exe /mid,picture
SoundRec=Audio Wave,Audio Wave,C:WINDOWSsndrec32.exe,picture
PBrush=Paintbrush Picture,Paintbrush Picture,C:PROGRA~1ACCESS~1MSPAINT.EXE,picture
Paint.Picture=Immagine bitmap,Immagine bitmap,C:PROGRA~1ACCESS~1MSPAINT.EXE,picture
mplayer=Clip multimediali,Clip multimediali,C:WINDOWSmplayer.exe,picture
Wordpad.Document.1=Documento WordPad,Documento WordPad,C:PROGRA~1ACCESS~1WORDPAD.EXE,picture
Imaging.Document=Documento Imaging,Documento Imaging,C:WINDOWSKodakImg.Exe,picture
WangImage.Document=Documento Imaging,Documento Imaging,C:WINDOWSKodakImg.Exe,picture
avifile=Video clip,Video clip,C:WINDOWSmplayer.exe /avi,picture

[Extensions]
gra=C:PROGRA~1FILECO~1MICROS~1MSGRAPH5GRAPH5.EXE ^.gra

[Devices]
Canon i250=CJPDRV50,USBPRN01

[PrinterPorts]
Canon i250=CJPDRV50,USBPRN01,15,45

[Sounds]
SystemDefault=,



[Mail]
MAPI=1
MAPIX=1

[MCI Extensions.BAK]
asf=MPEGVideo2
asx=MPEGVideo2
ivf=MPEGVideo2
m3u=MPEGVideo
mp3=MPEGVideo
mpv2=MPEGVideo
mp2v=MPEGVideo
wax=MPEGVideo2
wvx=MPEGVideo2
wm=MPEGVideo2
wma=MPEGVideo2
wmv=MPEGVideo2
lsf=MPEGVideo2
lsx=MPEGVideo2
wmx=MPEGVideo2
wmp=MPEGVideo2

[CloneCD]

[DrawDib]
pnpdrvr.drv 1024x768x24(BGR 0)=37,5,5,5

[Compatibility Driver]
SPASDRVQ=0x000000

[AVI2MPG2]
left=100
top=50
batch=0
editFilters=0

[bbMPEG]
Batch=0

[DRHARDWIN]
Exhausted=2

[WinZip]
ZipFlags=2042648507

[Internet]
inet=1426076263

[IS5F]
DELETE=C:WINDOWSTEMP\_ISTMP0.DIR

[IOCR]

[Readiris]
Toolbar=1
SN60=436000302200002
Wizard=1
autoiswizard=1
Language=5

[spooler]
rd_cd=53D7FAC8


Il system.ini:

[boot]
system.drv=system.drv
drivers=mmsystem.dll power.drv
shell=Explorer.exe
user.exe=user.exe
gdi.exe=gdi.exe
sound.drv=mmsound.drv
dibeng.drv=dibeng.dll
comm.drv=comm.drv
mouse.drv=mouse.drv
keyboard.drv=keyboard.drv
oemfonts.fon=vga850.fon
*DisplayFallback=0
fixedfon.fon=vgafix.fon
fonts.fon=vgasys.fon
386Grabber=vgafull.3gr
display.drv=pnpdrvr.drv

[keyboard]
keyboard.dll=
oemansi.bin=xlat850.bin
subtype=
type=4

[boot.description]
system.drv=PC standard
keyboard.typ=Tastiera standard 101/102 tasti o Microsoft Natural Keyboard
mouse.drv=Mouse standard
aspect=100,96,96
display.drv=XPERT@WORK AGP 2X (English)

[386Enh]
ebios=*ebios
mouse=*vmouse, msmouse.vxd
device=*dynapage
device=*vcd
device=*vpd
device=*int13
woafont=app850.fon
PagingDrive=C:
ConservativeSwapfileUsage=1
device=*enable
keyboard=*vkd

[NonWindowsApp]
TTInitialSizes=4 5 6 7 8 9 10 11 12 13 14 15 16 18 20 22

[power.drv]

[drivers]
wavemapper=*.drv
MSACM.imaadpcm=*.acm
MSACM.msadpcm=*.acm
wave=mmsystem.dll
midi=mmsystem.dll

[iccvid.drv]

[mciseq.drv]

[mci]
cdaudio=mcicda.drv
sequencer=mciseq.drv
waveaudio=mciwave.drv
avivideo=mciavi.drv
videodisc=mcipionr.drv
vcr=mcivisca.drv
MPEGVideo=mciqtz.drv
MPEGVideo2=mciqtz.drv

[vcache]
CHUNKSIZE=0

[Password Lists]
MASSIMINO=C:WINDOWSMASSIMIN.PWL

[Norman Data Defense Systems]

[network]
SSID=1438668718


[MSNP32]

VIDC.YVU9=iyvu9_32.dll

[drivers32]
MSACM.msg711=msg711.acm
vidc.CVID=iccvid.dll
VIDC.IV31=ir32_32.dll
VIDC.IV32=ir32_32.dll
vidc.MSVC=msvidc32.dll
VIDC.MRLE=msrle32.dll
VIDC.IV50=ir50_32.dll
msacm.iac2=C:WINDOWSSYSTEMIAC25_32.AX
VIDC.YUY2=msyuv.dll
VIDC.UYVY=msyuv.dll
VIDC.YVYU=msyuv.dll
msacm.msaudio1=msaud32.acm
VIDC.WMV3=wmv9vcm.dll
msacm.sl_anet=sl_anet.acm
msacm.l3acm=C:WINDOWSSYSTEML3CODECA.ACM
MSACM.imaadpcm=imaadp32.acm
MSACM.msadpcm=msadp32.acm
MSACM.msgsm610=msgsm32.acm
MSACM.trspch=tssoft32.acm
msacm.voxacm160=vct3216.acm
vidc.DIVX=DivX.dll

[TTFontDimenCache]
0 4=2 4
0 5=3 5
0 6=4 6
0 7=4 7
0 8=5 8
0 9=5 9
0 10=6 10
0 11=7 11
0 12=7 12
0 13=8 13
0 14=8 14
0 15=9 15
0 16=10 16
0 18=11 18
0 20=12 20
0 22=13 22

Boh... il mistero si infittisce...