ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system\oeminfo.ini
.
((((((((((((((((((((((((( Files Creati Da 2010-09-02 al 2010-10-02 )))))))))))))))))))))))))))))))))))
.
2010-10-02 12:18 . 2010-04-29 13:39 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-10-02 12:18 . 2010-10-02 12:18 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Malwarebytes
2010-10-02 12:18 . 2010-10-02 12:18 -------- d-----w- c:\programmi\Malwarebytes' Anti-Malware
2010-10-02 12:18 . 2010-04-29 13:39 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-10-01 06:03 . 2008-08-12 14:21 188416 ----a-w- c:\windows\system32\igfxres.dll
2010-09-30 21:49 . 2010-09-30 21:58 -------- d-----w- c:\windows\ehome
2010-09-30 21:49 . 2010-09-30 21:49 -------- d-----w- c:\windows\NLDRV
2010-09-30 20:57 . 2008-04-14 03:00 13192 -c--a-w- c:\windows\system32\dllcache\tdasync.sys
2010-09-30 20:56 . 2008-04-14 03:00 221696 -c--a-w- c:\windows\system32\dllcache\seo.dll
2010-09-30 20:55 . 2008-04-14 03:00 20992 -c--a-w- c:\windows\system32\dllcache\permchk.dll
2010-09-30 20:55 . 2008-04-14 03:00 31744 -c--a-w- c:\windows\system32\dllcache\pagecnt.dll
2010-09-30 20:55 . 2008-04-14 03:00 45056 -c--a-w- c:\windows\system32\dllcache\nsepm.dll
2010-09-30 20:55 . 2008-04-14 03:00 53760 -c--a-w- c:\windows\system32\dllcache\nextlink.dll
2010-09-30 20:55 . 2008-04-14 03:00 119808 -c--a-w- c:\windows\system32\dllcache\mtstocom.exe
2010-09-30 20:52 . 2008-04-14 03:00 7168 -c--a-w- c:\windows\system32\dllcache\isapips.dll
2010-09-30 20:51 . 2008-04-14 03:00 128512 -c--a-w- c:\windows\system32\dllcache\ftpsv251.dll
2010-09-30 20:50 . 2008-04-14 03:00 42496 -c--a-w- c:\windows\system32\dllcache\davcdata.exe
2010-09-30 20:50 . 2008-04-14 03:00 19456 -c--a-w- c:\windows\system32\dllcache\cprofile.exe
2010-09-30 20:50 . 2008-04-14 03:00 20480 -c--a-w- c:\windows\system32\dllcache\counters.dll
2010-09-30 20:50 . 2008-04-14 03:00 57344 -c--a-w- c:\windows\system32\dllcache\convlog.exe
2010-09-30 20:50 . 2008-04-14 03:00 33792 -c--a-w- c:\windows\system32\dllcache\controt.dll
2010-09-30 20:50 . 2008-04-14 03:00 24064 -c--a-w- c:\windows\system32\dllcache\compfilt.dll
2010-09-30 20:50 . 2008-04-14 03:00 16384 -c--a-w- c:\windows\system32\dllcache\chgport.exe
2010-09-30 20:50 . 2008-04-14 03:00 14848 -c--a-w- c:\windows\system32\dllcache\chgusr.exe
2010-09-30 20:50 . 2008-04-14 03:00 9728 -c--a-w- c:\windows\system32\dllcache\change.exe
2010-09-30 20:50 . 2008-04-14 03:00 13824 -c--a-w- c:\windows\system32\dllcache\chglogon.exe
2010-09-30 20:48 . 2008-04-14 03:00 19456 -c--a-w- c:\windows\system32\dllcache\agt0404.dll
2010-09-30 20:48 . 2008-04-14 03:00 19456 -c--a-w- c:\windows\system32\dllcache\agt0401.dll
2010-09-30 20:48 . 2008-04-14 03:00 50176 -c--a-w- c:\windows\system32\dllcache\adrot.dll
2010-09-30 20:48 . 2008-04-14 03:00 6144 -c--a-w- c:\windows\system32\dllcache\admxprox.dll
2010-09-30 20:48 . 2008-04-14 03:00 29696 -c--a-w- c:\windows\system32\dllcache\admexs.dll
2010-09-30 20:48 . 2008-04-14 03:00 7168 -c--a-w- c:\windows\system32\dllcache\wamregps.dll
2010-09-30 20:48 . 2003-04-14 19:04 16384 -c--a-w- c:\windows\system32\dllcache\tcptsat.dll
2010-09-30 20:48 . 2003-03-24 13:52 32827 -c--a-w- c:\windows\system32\dllcache\tcptest.exe
2010-09-30 20:48 . 2008-04-14 03:00 8192 -c--a-w- c:\windows\system32\dllcache\staxmem.dll
2010-09-30 20:48 . 2008-04-14 03:00 2134528 -c--a-w- c:\windows\system32\dllcache\smtpsnap.dll
2010-09-30 20:48 . 2008-04-14 03:00 189952 -c--a-w- c:\windows\system32\dllcache\smtpadm.dll
2010-09-30 20:48 . 2003-03-24 13:52 16437 -c--a-w- c:\windows\system32\dllcache\shtml.exe
2010-09-30 20:48 . 2003-03-24 13:52 20536 -c--a-w- c:\windows\system32\dllcache\shtml.dll
2010-09-30 20:37 . 2008-04-14 03:00 16384 -c--a-w- c:\windows\system32\dllcache\isignup.exe
2010-09-30 20:32 . 2008-04-14 03:00 39936 -c--a-w- c:\windows\system32\dllcache\snmpthrd.dll
2010-09-30 20:32 . 2008-04-14 03:00 39936 ----a-w- c:\windows\system32\wbem\snmpthrd.dll
2010-09-30 20:32 . 2008-04-14 03:00 259072 -c--a-w- c:\windows\system32\dllcache\snmpcl.dll
2010-09-30 20:32 . 2008-04-14 03:00 259072 ----a-w- c:\windows\system32\wbem\snmpcl.dll
2010-09-30 20:32 . 2008-04-14 03:00 92672 -c--a-w- c:\windows\system32\dllcache\policman.dll
2010-09-30 20:32 . 2008-04-14 03:00 92672 ----a-w- c:\windows\system32\wbem\policman.dll
2010-09-30 20:32 . 2008-04-14 03:00 368640 -c--a-w- c:\windows\system32\dllcache\wmic.exe
2010-09-30 20:32 . 2008-04-14 03:00 368640 ----a-w- c:\windows\system32\wbem\wmic.exe
2010-09-30 20:15 . 2008-04-14 03:00 24661 -c--a-w- c:\windows\system32\dllcache\spxcoins.dll
2010-09-30 20:15 . 2008-04-14 03:00 24661 ----a-w- c:\windows\system32\spxcoins.dll
2010-09-30 20:15 . 2008-04-14 03:00 13312 -c--a-w- c:\windows\system32\dllcache\irclass.dll
2010-09-30 20:15 . 2008-04-14 03:00 13312 ----a-w- c:\windows\system32\irclass.dll
2010-09-30 19:39 . 2008-04-14 03:00 8261 -c--a-w- c:\windows\system32\dllcache\zoneoc.dll
2010-09-30 19:39 . 2008-04-14 03:00 339456 -c--a-w- c:\windows\system32\dllcache\zipfldr.dll
2010-09-30 19:39 . 2008-04-14 03:00 339456 ----a-w- c:\windows\system32\zipfldr.dll
2010-09-30 19:37 . 2008-04-14 03:00 9216 -c--a-w- c:\windows\system32\dllcache\scrnsave.scr
2010-09-30 19:36 . 2008-04-14 03:00 7680 -c--a-w- c:\windows\system32\dllcache\mll_mtf.dll
2010-09-30 19:35 . 2008-04-14 03:00 8704 -c--a-w- c:\windows\system32\dllcache\dciman32.dll
2010-09-27 16:25 . 2010-09-28 08:25 -------- d-----w- c:\windows\system32\NtmsData
2010-09-27 05:53 . 2010-09-27 05:53 -------- d-----w- c:\programmi\File comuni\PCSuite
2010-09-27 05:52 . 2010-09-27 05:53 -------- d-----w- c:\programmi\File comuni\Nokia
2010-09-27 05:48 . 2008-08-26 08:26 18816 ----a-w- c:\windows\system32\drivers\pccsmcfd.sys
2010-09-27 05:47 . 2010-09-27 05:48 -------- d-----w- c:\programmi\PC Connectivity Solution
2010-09-27 05:43 . 2010-09-27 05:40 36453152 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Nokia_PC_Suite_ita.exe
2010-09-27 05:42 . 2010-09-27 05:42 95232 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\pcswpcsi.exe
2010-09-27 05:42 . 2010-09-27 05:42 61440 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstPCSFEMsi.exe
2010-09-27 05:42 . 2010-09-27 05:42 8192 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstCCD.exe
2010-09-27 05:42 . 2010-09-27 05:42 10240 ----a-w- c:\documents and settings\All Users\Dati applicazioni\Installations\{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}\Installer\CommonCustomActions\UninstPCS.exe
2010-09-26 19:19 . 2010-09-26 19:19 95024 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2010-09-26 11:42 . 2010-08-12 12:16 2979848 -c--a-w- c:\documents and settings\All Users\Dati applicazioni\{ECC164E0-3133-4C70-A831-F08DB2940F70}\Ad-AwareInstall.exe
2010-09-26 11:01 . 2010-09-26 11:42 -------- dc-h--w- c:\documents and settings\All Users\Dati applicazioni\{ECC164E0-3133-4C70-A831-F08DB2940F70}
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
9999-02-08 08:32 . 2009-02-06 10:34 -------- d-----w- c:\programmi\Synaptics
9999-02-08 08:32 . 2009-02-06 10:30 -------- d-----w- c:\programmi\Realtek
9999-02-08 08:32 . 2009-02-06 08:52 -------- d-----w- c:\programmi\Servizi in linea
9999-02-08 08:31 . 2009-02-06 08:56 -------- d-----w- c:\programmi\microsoft frontpage
9999-02-08 08:31 . 2009-02-06 10:20 -------- d-----w- c:\programmi\Java
9999-02-08 08:31 . 2009-02-06 10:21 -------- d-----w- c:\programmi\Intel
9999-02-08 08:31 . 2009-02-06 11:11 -------- d-----w- c:\programmi\Google
9999-02-08 08:30 . 2009-02-06 10:19 -------- d-----w- c:\programmi\File comuni\Java
9999-02-08 08:28 . 2010-10-02 11:22 -------- d-----w- c:\documents and settings\Administrator\Dati applicazioni\Windows Desktop Search
9999-02-08 08:28 . 2009-06-04 09:42 -------- d-----w- c:\documents and settings\Default User\Dati applicazioni\Windows Desktop Search
9999-02-08 08:28 . 2010-10-02 11:22 -------- d-----w- c:\documents and settings\Administrator\Dati applicazioni\InstallShield
9999-02-08 08:28 . 2009-06-04 09:42 -------- d-----w- c:\documents and settings\Default User\Dati applicazioni\InstallShield
9999-02-08 08:28 . 2009-02-06 11:10 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\SiteAdvisor
9999-02-08 08:27 . 2009-02-06 10:36 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\Atheros
2010-10-01 12:22 . 2010-09-30 20:40 87333 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2010-10-01 06:07 . 2009-06-05 22:26 -------- d-----w- c:\programmi\Symantec AntiVirus
2010-10-01 06:07 . 2009-06-26 12:15 12 ----a-w- c:\windows\bthservsdp.dat
2010-10-01 06:05 . 2009-02-06 08:34 8178 ----a-w- c:\windows\system32\perfc010.dat
2010-10-01 06:05 . 2009-02-06 08:34 26244 ----a-w- c:\windows\system32\perfh010.dat
2010-09-30 20:33 . 2009-02-06 08:51 23700 ----a-w- c:\windows\system32\emptyregdb.dat
2010-09-30 18:41 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c09.tmp
2010-09-30 18:40 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6ab0.tmp
2010-09-30 18:39 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP63bb.tmp
2010-09-30 18:38 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP62ff.tmp
2010-09-30 13:42 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP58bf.tmp
2010-09-30 13:41 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP5ee8.tmp
2010-09-30 13:39 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP62c1.tmp
2010-09-30 13:38 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6282.tmp
2010-09-30 13:37 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP634d.tmp
2010-09-30 13:24 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP567c.tmp
2010-09-30 07:49 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP5a16.tmp
2010-09-30 07:47 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP61e6.tmp
2010-09-30 07:46 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP632f.tmp
2010-09-30 07:42 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6179.tmp
2010-09-30 07:41 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP610b.tmp
2010-09-29 13:59 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP594b.tmp
2010-09-29 13:55 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6e1b.tmp
2010-09-29 13:47 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c76.tmp
2010-09-29 13:44 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c57.tmp
2010-09-29 13:40 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6cf2.tmp
2010-09-29 13:37 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6fa2.tmp
2010-09-29 13:33 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6b2d.tmp
2010-09-29 13:29 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6d02.tmp
2010-09-29 13:26 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6bc9.tmp
2010-09-29 13:22 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6cd3.tmp
2010-09-29 13:20 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7947.tmp
2010-09-29 13:18 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP8e74.tmp
2010-09-29 13:17 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7ce0.tmp
2010-09-29 13:16 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7a7f.tmp
2010-09-29 13:15 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6f15.tmp
2010-09-29 13:14 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7b0c.tmp
2010-09-29 13:12 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7946.tmp
2010-09-29 13:11 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP7afc.tmp
2010-09-29 13:10 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c75.tmp
2010-09-29 13:09 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c66.tmp
2010-09-29 13:07 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6dcd.tmp
2010-09-29 13:06 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6d8e.tmp
2010-09-29 12:55 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6a72.tmp
2010-09-29 12:54 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6c27.tmp
2010-09-29 11:58 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP56da.tmp
2010-09-29 07:52 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP6040.tmp
2010-09-29 07:24 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP58fd.tmp
2010-09-28 11:56 . 2010-09-28 08:17 90112 ----a-w- c:\windows\DUMP5d04.tmp
2010-09-28 07:42 . 2010-09-28 07:23 90112 ----a-w- c:\windows\DUMP593b.tmp
2010-09-28 07:28 . 2010-09-28 07:23 90112 ----a-w- c:\windows\DUMP5b2f.tmp
2010-09-28 06:35 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP5880.tmp
2010-09-27 19:21 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6d21.tmp
2010-09-27 19:15 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP595d.tmp
2010-09-27 19:13 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP64e4.tmp
2010-09-27 18:30 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6c08.tmp
2010-09-27 18:28 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6820.tmp
2010-09-27 18:26 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6a15.tmp
2010-09-27 18:23 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6726.tmp
2010-09-27 18:22 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP693a.tmp
2010-09-27 18:19 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6a14.tmp
2010-09-27 18:17 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6c17.tmp
2010-09-27 18:14 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6d6f.tmp
2010-09-27 18:07 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP58be.tmp
2010-09-27 18:00 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6486.tmp
2010-09-27 17:58 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6745.tmp
2010-09-27 17:56 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6d50.tmp
2010-09-27 17:53 . 2010-09-27 17:52 90112 ----a-w- c:\windows\DUMP6c56.tmp
2010-09-27 17:50 . 2010-09-27 17:46 90112 ----a-w- c:\windows\DUMP690a.tmp
2010-09-27 17:49 . 2010-09-27 17:46 90112 ----a-w- c:\windows\DUMP6a43.tmp
2010-09-27 17:47 . 2010-09-27 17:46 90112 ----a-w- c:\windows\DUMP65ce.tmp
2010-09-27 17:44 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP6699.tmp
2010-09-27 17:42 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP64c4.tmp
2010-09-27 17:39 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP6419.tmp
2010-09-27 17:35 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP6939.tmp
2010-09-27 17:32 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP667a.tmp
2010-09-27 17:30 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP66e7.tmp
2010-09-27 17:26 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP5b10.tmp
2010-09-27 17:25 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP5cf4.tmp
2010-09-27 17:22 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP665b.tmp
2010-09-27 17:21 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP5bad.tmp
2010-09-27 17:20 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP5cb6.tmp
2010-09-27 17:18 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP59c8.tmp
2010-09-27 17:16 . 2010-09-27 17:15 90112 ----a-w- c:\windows\DUMP59b8.tmp
2010-09-27 16:43 . 2010-09-27 16:37 90112 ----a-w- c:\windows\DUMP6d31.tmp
2010-09-27 16:42 . 2010-09-27 16:37 90112 ----a-w- c:\windows\DUMP668a.tmp
.
------- Sigcheck -------
[-] 2008-09-01 . 7109E7E75CC8BB2B3C05E03CD80AA446 . 1571840 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TOSHIBA Online Product Information"="c:\programmi\TOSHIBA\Toshiba Online Product Information\topi.exe" [2008-12-01 5562368]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"="c:\programmi\Synaptics\SynTP\SynTPEnh.exe" [2008-08-13 1024000]
"THotkey"="c:\programmi\Toshiba\Toshiba Applet\thotkey.exe" [2008-11-27 393216]
"Camera Assistant Software"="c:\programmi\Camera Assistant Software for Toshiba\traybar.exe" [2008-09-26 417792]
"GrooveMonitor"="c:\programmi\Microsoft Office\Office12\GrooveMonitor.exe" [2008-10-25 31072]
"ccApp"="c:\programmi\File comuni\Symantec Shared\ccApp.exe" [2004-04-22 66656]
"vptray"="c:\progra~1\SYMANT~1\VPTray.exe" [2004-04-22 124128]
"QuickTime Task"="c:\programmi\QuickTime\qttask.exe" [2009-05-26 413696]
"Ad-Watch"="c:\programmi\Lavasoft\Ad-Aware\AAWTray.exe" [2010-09-26 864624]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-06-20 35760]
"Adobe ARM"="c:\programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe" [2010-06-09 976832]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2008-08-12 135168]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-08-12 159744]
"Persistence"="c:\windows\system32\igfxpers.exe" [2008-08-12 131072]
"RTHDCPL"="RTHDCPL.EXE" [2008-09-11 16851456]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
"TOSHIBA Online Product Information"="c:\programmi\TOSHIBA\Toshiba Online Product Information\topi.exe" [2008-12-01 5562368]
c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
Bluetooth Monitor.lnk - c:\programmi\TOSHIBA\Bluetooth Monitor\BtMon2.exe [2009-6-26 92280]
hp psc 2000 Series.lnk - c:\programmi\Hewlett-Packard\Digital Imaging\bin\hpobnz08.exe [2003-4-6 323646]
hpoddt01.exe.lnk - c:\programmi\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2003-4-6 28672]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\programmi\Windows Desktop Search\MSNLNamespaceMgr.dll" [2009-05-24 304128]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3587:TCP"= 3587:TCP:Gruppi peer-to-peer Windows
"3540:UDP"= 3540:UDP:Peer Name Resolution Protocol (PNRP)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\IcmpSettings]
"AllowInboundEchoRequest"= 1 (0x1)
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [26/06/09 10.54.16 64288]
R3 FwLnk;FwLnk Driver;c:\windows\system32\drivers\FwLnk.sys [06/02/09 12.42.58 5888]
R3 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\programmi\Lavasoft\Ad-Aware\AAWService.exe [12/08/10 14.15.19 1355928]
R3 RSUSBSTOR;RTS5121.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RTS5121.sys [06/02/09 12.34.56 157696]
S2 Iprip;Listener RIP;c:\windows\System32\svchost.exe -k netsvcs [30/09/10 21.38.18 14336]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;c:\programmi\Lavasoft\Ad-Aware\kernexplorer.sys [12/08/10 14.15.19 15008]
S3 Rts516xIR;Realtek IR Driver;c:\windows\system32\DRIVERS\Rts516xIR.sys

c:\windows\system32\DRIVERS\Rts516xIR.sys
![Confuso [?]](http://www.megalab.it/forum/images/smilies/confused.gif)
S3 SavRoam;SAVRoam;c:\programmi\Symantec AntiVirus\SavRoam.exe [22/04/04 12.45.44 173288]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
p2psvc REG_MULTI_SZ p2psvc p2pimsvc p2pgasvc PNRPSvc
.
Contenuto della cartella 'Scheduled Tasks'
2010-09-28 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\programmi\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2010-08-12 19:19]
2010-02-08 c:\windows\Tasks\FRU Task 2003-04-06 08:52ewlett-Packard2003-04-06 08:52p psc 2170 series5E771253C1676EBED677BF361FDFC537825E15B8246028293.job
- c:\programmi\Hewlett-Packard\Digital Imaging\Bin\hpqfrucl.exe [2003-04-05 22:52]
.
.
------- Scansione supplementare -------
.
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} -
http://rover.ebay.com/rover/1/724-44559-9400-3/4.
**************************************************************************
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti:
**************************************************************************
.
Ora fine scansione: 2010-10-02 17:15:37
ComboFix-quarantined-files.txt 2010-10-02 15:15
Pre-Run: 141.325.168.640 byte disponibili
Post-Run: 141.388.492.800 byte disponibili
- - End Of File - - F91CED58B3C4A6832688F8AC9025707B