![]() |
| |||||||
|
![]() |
| | Thread Tools |
|
#1
| |||
| |||
| Ciao a tutti. Il mio PC è stato un rallentamento molto molto nel corso degli ultimi quattro settimane o così. Si prende ora quasi 15 minuti solo per riavviare e quando io sto usando il disco fisso del PC suoni incredibilmente occupato. Io uso AVG Free Edition, S & D, Ad-Aware & SUPERAntiSpyware abbastanza regolarmente. Si prega di avere un occhiata quando hai tempo. Allego il log richiesto per voi, 1. SUPERAntiSpyware registro. SUPERAntiSpyware Scan Entra http://www.superantispyware.com Generata 11/04/2008 alle 03:20 PM Applicazione Versione: 4/21/1004 Core Regole Database Version: 3622 Trace Regole Database Version: 1606 Tipo di scansione: Scansione completa Totale Scan Time: 01:30:19 Memoria oggetti scanditi: 339 Memoria minacce rilevate: 0 Registro di oggetti scanditi: 6045 Registro di minacce rilevate: 0 File oggetti scanditi: 58429 File minacce rilevate: 27 Adware.Tracking Cookie C: \ Documents and Settings \ Marco \ Cookies \ mark@networksolutions.112.2o 7 [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@avgtechnologies.112.2o7 [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ burstnet [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio Adtech @ [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ doppio marchio @ [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@admse013.adbureau [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ specificclick [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ sys-servizio [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ tribalfusion [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@haynet.adbureau [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@media.adrevolver [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@ad.yieldmanager [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ revsci [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio Mediaplex @ [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio AdRevolver @ [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ adcentriconline [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@media.adrevolver [3]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@uk.sitestat [4]. Txt C: \ Documents and Settings \ Marco \ Cookies \ @ marchio pubblicità [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ apmebf [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@bs.serving-sys [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ 2o7 [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@uk.sitestat [3]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ adecn [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ tacoda [1]. Txt C: \ Documents and Settings \ Marco \ Cookies \ marchio @ atdmt [2]. Txt C: \ Documents and Settings \ Marco \ Cookies \ mark@adopt.euroclick [1]. Txt 2. Malwarebytes' Anti-Malware log. Malwarebytes' Anti-Malware 1,30 Database versione: 1363 5/1/2600 Windows Service Pack 3 04/11/2008 18:31:42 mbam-log-2008-11-04 (18-31-42). txt Tipo di scansione: Quick Scan Oggetti scandita: 66723 Tempo trascorso: 13 minuti (s), 1 secondo (s) Processi di memoria infetti: 0 Moduli di memoria infetti: 0 Chiavi di registro infetti: 2 Valori del registro infetti: 1 I dati del Registro di oggetti infetti: 0 Cartelle infette: 0 File infetti: 1 Processi di memoria infetti: (N. oggetti dannosi individuati) Moduli di memoria infetti: (N. oggetti dannosi individuati) Chiavi di registro infette: HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ Stats \ (3ba4271e-5c1e-48e2-b432-d8bf420dd31d) (Rogue.DeusCleaner) -> quarantena ed eliminato con successo. HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ Curre ntVersion \ Ext \ Stats \ (1a26f07f-0d60-4835-91cf-1e1766a0ec56) (Trojan.Agent) -> quarantena ed eliminato con successo. Valori del registro infetti: HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ SharedDLLs \ C: \ WINDOWS \ system32 \ _RegTLB. dll (Trojan.Agent) -> quarantena ed eliminato con successo. I dati del Registro di oggetti infetti: (N. oggetti dannosi individuati) Cartelle infette: (N. oggetti dannosi individuati) I file infetti: C: \ WINDOWS \ system32 \ _RegTLB.dll (Trojan.Agent) -> quarantena ed eliminato con successo. 3. Log HijackThis Logfile di Trend Micro HijackThis v2.0.2 Scan salvato in 18:56:10, a 05/11/2008 Piattaforma: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe C: \ WINDOWS \ system32 \ brsvc01a.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ brss01a.exe C: \ WINDOWS \ Explorer.EXE C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AOLacsd.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ WINDOWS \ system32 \ UStorSrv.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe C: \ WINDOWS \ system32 \ VTTimer.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ WINDOWS \ system32 \ ctfmon.exe C: \ WINDOWS \ system32 \ Wuauclt.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Packard Bell O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ deploy \ jqs \ cioè \ jqs_plugin.dll O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'SERVIZIO LOCALE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 3 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 3 \ Office11 \ REFIEBAR.DLL O9 - Extra pulsante: Web Entrata - (B4E30F61-16D9-11D3-85D1-005004229569) - C: \ WINDOWS \ system32 \ shdocvw.dll O9 - Extra pulsante: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll O9 - Extra pulsante: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra pulsante: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O14 - IERESET.INF: START_PAGE_URL = file: / / C: \ APPS \ IE \ offline \ uk.htm Ø15 - Trusted Zone: http://download.windowsupdate.com Ø16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab Ø16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 Ø18 - Protocollo: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll Ø20 - AppInit_DLLs: avgrsstx.dll Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AOLacsd.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe O23 - Service: AVG Free8 Watchdog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C: \ WINDOWS \ system32 \ brsvc01a.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: SmartLinkService (SLService) - Sconosciuto proprietario - slserv.exe (file mancanti) O23 - Service: UStorage Server Service - Oti - C: \ WINDOWS \ system32 \ UStorSrv.exe -- Fine del file - 7014 bytes Grazie ragazzi in anticipo, Ho piena fiducia, Muco. |
|
#2
| |||
| |||
| Eseguire il Kaspersky Online Scanner In Microsoft Windows Vista, È necessario aprire il browser Web utilizzando il Esegui come amministratore comando. Dal desktop fare clic sull'icona a destra per aprire il browser e scegliere Esegui come amministratore.
Quando la scansione viene effettuata, nel Scansione è completa finestra, qualsiasi infezione viene visualizzato. Non vi è alcuna opzione per pulire / disinfettare, tuttavia, abbiamo bisogno di analizzare le informazioni in merito alla relazione. Per ottenere la relazione: Clicca su: Salva rapporto come
![]() Copia e incolla il Kaspersky Online Scanner Relazione nella prossima risposta. Nota per gli utenti di Internet Explorer 7: Se, in qualsiasi momento avete problemi di visualizzazione del pulsante di accettare la licenza, fare clic su Zoom strumento trova in basso a destra della finestra di Internet Explorer e impostare lo zoom al 75%. Una volta che la licenza è stata accettata, ripristinare al 100%. |
|
#3
| |||
| |||
| Una volta Ef ha guidato attraverso la pulizia vostro comp dare un'occhiata qui http://www.computer-juice.com/forums...-malware-9243/ |
|
#4
| |||
| |||
| Hi evilfantasy e grazie per il vostro tempo. Abbiamo però un problema. Kaspersky Online Scanner non verrà completata la scansione. Ho eseguito 3 volte e il più lungo che ha funzionato per 23 minuti ed è stato completato il 7% della scansione! Archivi scannerizzata .................................... 4817 Minaccia nomi ..................................... 2 Oggetti infetti .................................. 1 Oggetti sospetti ................................ 12 Durata della scansione ........................... 00:23:31 Non è possibile ottenere una scansione relazione sia! Ogni volta che ho provato, però, ho visto un Java Console schermo pop in vista, questo è rilevante? Tutto il resto ho potuto provare? Slime |
|
#5
| |||
| |||
| Scaricare casuale il sistema di strumento di informazione (RSIT) dal casuale / random da e salvarlo sul desktop.
|
|
#6
| |||
| |||
| Ok, che sembrava andare un po 'meglio. Log, come richiesto, Logfile casuale del sistema di strumento di informazione 1,04 (scritto da casuale / random) Gestito da Marco a 2008-11-06 17:05:19 Microsoft Windows XP Home Edition Service Pack 3 Sistema di unità C: dispone di 60 GB (84%) libera di 71 GB Totale RAM: 191 MB (16% gratuito) Logfile di Trend Micro HijackThis v2.0.2 Scan salvato in 17:06:26, a 06/11/2008 Piattaforma: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Processi in esecuzione: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Program Files \ Windows Defender \ MsMpEng.exe C: \ WINDOWS \ System32 \ svchost.exe C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe C: \ WINDOWS \ system32 \ brsvc01a.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ brss01a.exe C: \ WINDOWS \ Explorer.EXE C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AOLacsd.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe C: \ WINDOWS \ system32 \ UStorSrv.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgrsx.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe C: \ WINDOWS \ system32 \ VTTimer.exe C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe C: \ Program Files \ Windows Defender \ MSASCui.exe C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe C: \ WINDOWS \ system32 \ ctfmon.exe c: \ diari \ loto organizzatore 6 \ organizzare \ org6.exe C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE c: \ diari \ loto organizzatore 6 \ organizzare \ org6.exe C: \ WINDOWS \ system32 \ svchost.exe C: \ Documents and Settings \ Marco \ Desktop \ RSIT.exe C: \ Program Files \ Trend Micro \ HijackThis \ Mark.exe R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/ R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Packard Bell O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: Java (tm) Plug-In SSV Helper - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll O2 - BHO: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - (E7E6F031-17CE-4C07-BC86-EABFE594F69C) - C: \ Program Files \ Java \ jre6 \ lib \ deploy \ jqs \ cioè \ jqs_plugin.dll O3 - Toolbar: AVG Security Toolbar - (A057A204-BACC-4D26-9990-79A187E2698E) - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe O4 - HKLM \ .. \ Run: [AVG8_TRAY] C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe O4 - HKLM \ .. \ Run: [Windows Defender] "C: \ Program Files \ Windows Defender \ MSASCui.exe"-hide O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe" O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'SERVIZIO LOCALE') O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'NETWORK SERVICE') O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'SYSTEM') O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User 'Default user') O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe O8 - Extra contesto voce di menu: E & sporta in Microsoft Excel - res: / / C: \ PROGRA ~ 1 \ micros ~ 3 \ Office11 \ EXCEL.EXE/3000 O9 - Extra pulsante: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ micros ~ 3 \ Office11 \ REFIEBAR.DLL O9 - Extra pulsante: Web Entrata - (B4E30F61-16D9-11D3-85D1-005004229569) - C: \ WINDOWS \ system32 \ shdocvw.dll O9 - Extra pulsante: Real.com - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - C: \ WINDOWS \ system32 \ Shdocvw.dll O9 - Extra pulsante: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O9 - Extra pulsante: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra 'Tools' menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe O9 - Extra pulsante: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O14 - IERESET.INF: START_PAGE_URL = file: / / C: \ APPS \ IE \ offline \ uk.htm Ø15 - Trusted Zone: http://download.windowsupdate.com Ø16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) -- http://www.eset.eu/buxus/docs/OnlineScanner.cab Ø16 - DPF: (B1E2B96C-12FE-45E2-BEF1-44A219113CDD) (SABScanProcesses Class) -- http://www.superadblocker.com/activex/sabspx.cab O17 - HKLM \ System \ CCS \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ .. \ (0737344F-6C02-4327-BCC5-C875D83CE9A1): NameServer = 192.168.0.1 Ø18 - Protocollo: linkscanner - (F274614C-63F8-47D5-A4D1-FBDDE494F8D1) - C: \ Program Files \ AVG \ AVG8 \ avgpp.dll Ø20 - AppInit_DLLs: avgrsstx.dll Ø20 - Winlogon Notify:! SASWinLogon - C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AOLacsd.exe O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe O23 - Service: AVG Free8 Watchdog (avg8wd) - AVG Technologies CZ, sro - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C: \ WINDOWS \ system32 \ brsvc01a.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe O23 - Service: SmartLinkService (SLService) - Sconosciuto proprietario - slserv.exe (file mancanti) O23 - Service: UStorage Server Service - Oti - C: \ WINDOWS \ system32 \ UStorSrv.exe -- Fine del file - 7153 bytes ====== ====== Cartella Operazioni pianificate C: \ WINDOWS \ compiti \ MP Scheduled Scan.job ====== ====== Registro discarica [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3)] Adobe PDF Reader Link Helper - C: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll [2006-12-18 59032] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0)] AVG Safe Search - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll [2008-08-29 455960] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (53707962-6F74-2D53-2644-206D7942484F)] Spybot-S & D IE Protection - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll [2008-09-15 1562960] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (761497BB-D6F0-462C-B6EB-D4DAF1D92D43)] Java (tm) Plug-In SSV Helper - C: \ Program Files \ Java \ jre6 \ bin \ ssv.dll [2008-11-04 320920] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (A057A204-BACC-4D26-9990-79A187E2698E)] AVG Security Toolbar - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL [2008-07-18 2055960] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (DBC80044-A445-435b-BC74-9C25C1C588A9)] Java (tm) Plug-In 2 SSV Helper - C: \ Program Files \ Java \ jre6 \ bin \ jp2ssv.dll [2008-11-04 34816] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ Browser Helper Objects \ (E7E6F031-17CE-4C07-BC86-EABFE594F69C)] JQSIEStartDetectorImpl Classe - C: \ Program Files \ Java \ jre6 \ lib \ deploy \ jqs \ cioè \ jqs_plugin.dll [2008-11-04 73728] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Internet Explorer \ Toolbar] (A057A204-BACC-4D26-9990-79A187E2698E) - AVG Security Toolbar - C: \ PROGRA ~ 1 \ AVG \ AVG8 \ AVGTOO ~ 1.DLL [2008-07-18 2055960] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Run] "VTTimer" = C: \ WINDOWS \ system32 \ VTTimer.exe [2004-03-26 49152] "AVG8_TRAY" = C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgtray.exe [2008-09-30 1234712] "Windows Defender" = C: \ Program Files \ Windows Defender \ MSASCui.exe [2006-11-03 866584] "SunJavaUpdateSched" = C: \ Program Files \ Java \ jre6 \ bin \ jusched.exe [2008-11-04 136600] [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run] "SUPERAntiSpyware" = C: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe [2008-09-03 1576176] "ctfmon.exe" = C: \ WINDOWS \ system32 \ ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe [2008-04-14 15360] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ MSMSGS] C: \ Program Files \ Messenger \ msmsgs.exe [2008-04-14 1695232] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ NeroCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe [2001-07-09 155648] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ PCMService] c: \ Apps \ PowerCinema \ PCMService.exe [2004-10-08 81920] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ QuickTime Task] C: \ Program Files \ QuickTime \ qttask.exe [2006-06-01 282624] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ SoundMan] C: \ WINDOWS \ SOUNDMAN.EXE [2004-02-26 65024] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupreg \ TkBellExe] C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe [2004-11-16 180269] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupfolder \ C: ^ Documents and Settings ^ All Users ^ Menu Avvio ^ Programmi ^ ^ avvio di Adobe Reader Speed Launch.lnk] C: \ PROGRA ~ 1 \ Adobe \ ACROBA ~ 2.0 \ Reader \ READER ~ 1.EXE [2008-04-23 29696] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Shared Tools \ msconfig \ startupfolder \ C: Documents and Settings ^ ^ ^ Marco Start Menu Avvio ^ Programmi ^ ^ Lotus Organizer EasyClip.lnk] C: \ diari \ LOTUSO ~ 1 \ organizzare \ EASYCL ~ 1.EXE [1999-09-15 229432] C: \ Documents and Settings \ All Users \ Menu Avvio \ Programmi \ Startup Adobe Reader Speed Launch.lnk - C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Windows] "AppInit_DLLs" = "avgrsstx.dll" [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon \ Notify \! SASWinLogon] C: \ Program Files \ SUPERAntiSpyware \ SASWINLO.dll [2008-07-23 352256] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ ShellServiceObjectDelayLoad] WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll [2006-10-18 133632] [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Explorer \ ShellExecuteHooks] "(091EB208-39DD-417D-A5DD-7E2C2D8FB9CB)" = C: \ PROGRA ~ 1 \ WIFD1F ~ 1 \ MpShHook.dll [2006-11-03 83224] "(5AE067D3-9AFB-48E0-853A-EBB7F4A000DA)" = C: \ Program Files \ SUPERAntiSpyware \ SASSEH.DLL [2008-05-13 77824] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ Lsa] "pacchetti di autenticazione" = msv1_0 C: \ WINDOWS \ system32 \ geebx.dll [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Minimal \ aawservice] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Minimal \ WinDefend] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Network \ aawservice] [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ Contro l \ SafeBoot \ Network \ WinDefend] [HKEY_LOCAL_MACHINE \ Software \ Microsoft \ Windows \ Curr entVersion \ Policies \ System] "dontdisplaylastusername" = 0 "LegalNoticeCaption" = "LegalNoticeText" = "shutdownwithoutlogon" = 1 "undockwithoutlogon" = 1 [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Policies \ Explorer] "NoDriveTypeAutoRun" = 145 [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servizi es \ sharedaccess \ parameters \ firewallpolicy \ profilo standard \ authorizedapplications \ list] "% windir% \ system32 \ sessmgr.exe" = "% windir% \ system32 \ sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019" "C: \ Program Files \ Abacast \ Abaclient.exe" = "C: \ Program Files \ Abacast \ Abaclient.exe: *: Enabled: Abaclient" "C: \ Program Files \ Real \ RealPlayer \ realplay.exe" = "C: \ Program Files \ Real \ RealPlayer \ realplay.exe: *: Enabled: Realp strato" "C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE" = "C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE: *: Enabled: Internet Explorer" "C: \ Program Files \ Mozilla Firefox \ firefox.exe" = "C: \ Program Files \ Mozilla Firefox \ firefox.exe: *: Enabled: Mozilla Firefox" "C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ lsupdatemanager.exe" = "C: \ Program Files \ Lavasoft \ Ad-Aware 2007 \ lsupdatemanager.exe: *: Enabled: Ad-Aware Update Manager" "C: \ Program Files \ Grisoft \ AVG7 \ avginet.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avginet.exe: *: Enabled: avginet.e xe" "C: \ Program Files \ Grisoft \ AVG7 \ avgamsvr.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avgamsvr.exe: *: Enabled: avgamsvr. Exe" "C: \ Program Files \ Grisoft \ AVG7 \ avgcc.exe" = "C: \ Program Files \ Grisoft \ AVG7 \ avgcc.exe: *: Enabled: avgcc.exe" "% windir% \ Network Diagnostic \ xpnetdiag.exe" = "% windir% \ Network Diagnostic \ xpnetdiag.exe: *: Enabled: @ xpsp3res.dll, -20000" "C: \ Program Files \ NetMeeting \ conf.exe" = "C: \ Program Files \ NetMeeting \ conf.exe: *: Enabled: Windows ® NetMeeting ®" "C: \ Program Files \ AVG \ AVG8 \ avgemc.exe" = "C: \ Program Files \ AVG \ AVG8 \ avgemc.exe: *: Enabled: avgemc.exe" "C: \ Program Files \ AVG \ AVG8 \ avgupd.exe" = "C: \ Program Files \ AVG \ AVG8 \ avgupd.exe: *: Enabled: avgupd.exe" [HKEY_LOCAL_MACHINE \ SYSTEM \ CurrentControlSet \ servizi es \ sharedaccess \ parameters \ firewallpolicy \ domainpr ofilo \ authorizedapplications \ list] "% windir% \ system32 \ sessmgr.exe" = "% windir% \ system32 \ sessmgr.exe: *: Enabled: @ Xpsp2res.dll, -22019" "% windir% \ Network Diagnostic \ xpnetdiag.exe" = "% windir% \ Network Diagnostic \ xpnetdiag.exe: *: Enabled: @ xpsp3res.dll, -20000" File associazioni ====== ====== . js - aperto - "C: \ Program Files \ Macromedia \ Dreamweaver MX \ Dreamweaver.exe" "% 1" ====== Elenco dei file e le cartelle create negli ultimi mesi 1 ====== 2008-11-06 17:05:19 D ---- ---- C: \ rsit 2008-11-05 13:07:01 D ---- ---- C: \ Program Files \ Trend Micro 2008-11-04 18:45:20 Un ---- ---- C: \ WINDOWS \ system32 \ deploytk.dll 2008-11-04 18:45:19 Un ---- ---- C: \ WINDOWS \ system32 \ javaws.exe 2008-11-04 18:45:18 Un ---- ---- C: \ WINDOWS \ system32 \ javaw.exe 2008-11-04 18:45:16 Un ---- ---- C: \ WINDOWS \ system32 \ java.exe 2008-11-04 18:43:23 D ---- ---- C: \ Program Files \ Java 2008-11-04 16:13:33 D ---- ---- C: \ Documents and Settings \ Marco \ Dati applicazioni \ Malwarebytes 2008-11-04 16:13:00 D ---- ---- C: \ Program Files \ Malwarebytes' Anti-Malware 2008-11-04 16:13:00 D ---- ---- C: \ Documents and Settings \ All Users \ Dati applicazioni \ Malwarebytes 2008-10-24 02:01:55 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB958644 $ 2008-10-15 02:12:03 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB956803 $ 2008-10-15 02:11:57 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB956391 $ 2008-10-15 02:11:47 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB957095 $ 2008-10-15 02:07:21 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB954211 $ 2008-10-15 02:05:57 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB956841 $ 2008-10-10 02:01:15 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951978 $ 2008-10-09 02:08:22 D ---- ---- C: \ WINDOWS \ prefetch 2008-10-08 18:20:46 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB952954 $ 2008-10-08 18:20:38 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB952287 $ 2008-10-08 18:20:03 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951748 $ 2008-10-08 18:18:50 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951698 $ 2008-10-08 18:17:30 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951376 $-v2 2008-10-08 18:16:20 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951376 $ 2008-10-08 18:15:35 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB951066 $ 2008-10-08 18:15:14 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB950974 $ 2008-10-08 18:15:02 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB950762 $ 2008-10-08 18:14:49 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB946648 $ 2008-10-08 18:14:34 HDC ---- ---- C: \ WINDOWS \ $ NtUninstallKB938464 $ 2008-10-08 18:04:31 D ---- ---- C: \ WINDOWS \ system32 \ scripting 2008-10-08 18:04:30 D ---- ---- C: \ WINDOWS \ l2schemas 2008-10-08 18:04:28 D ---- ---- C: \ WINDOWS \ system32 \ it 2008-10-08 18:04:28 D ---- ---- C: \ WINDOWS \ system32 \ bits 2008-10-08 17:59:16 D ---- ---- C: \ WINDOWS \ ServicePackFiles 2008-10-08 17:48:52 HDC ---- ---- C: \ WINDOWS \ $ NtServicePackUninstall $ 2008-10-08 17:48:40 D ---- ---- C: \ WINDOWS \ EHome ====== Elenco dei file e le cartelle modificate negli ultimi mesi 1 ====== 2008-11-06 17:06:25 D ---- ---- C: \ WINDOWS \ Temp 2008-11-06 15:44:29 D ---- ---- C: \ WINDOWS 2008-11-05 18:48:26 SD ---- ---- C: \ WINDOWS \ Tasks 2008-11-05 18:43:04 Un ---- ---- C: \ WINDOWS \ SchedLgU.txt 2008-11-05 18:10:11 D ---- ---- C: \ Program Files \ Sage Payroll07-08 2008-11-05 18:10:11 Un ---- ---- C: \ WINDOWS \ Payroll.INI 2008-11-05 18:08:47 Un ---- ---- C: \ WINDOWS \ SGREP32.INI 2008-11-05 13:38:52 HD ---- ---- C: \ $ $ AVG8.VAULT 2008-11-05 13:07:01 AD ---- ---- C: \ Program Files 2008-11-05 12:48:10 D ---- ---- C: \ Documents and Settings \ All Users \ Dati applicazioni \ Spybot - Search & Destroy 2008-11-05 12:47:38 D ---- ---- C: \ WINDOWS \ Debug 2008-11-04 18:46:40 SHD ---- ---- C: \ WINDOWS \ Installer 2008-11-04 18:46:24 SHD ---- ---- C: \ Config.Msi 2008-11-04 18:45:22 D ---- ---- C: \ WINDOWS \ system32 2008-11-04 16:13:04 D ---- ---- C: \ WINDOWS \ system32 \ drivers 2008-11-04 13:50:38 D ---- ---- C: \ WINDOWS \ system32 \ Catroot2 2008-11-03 14:00:33 Un ---- ---- C: \ WINDOWS \ system32 \ PerfStringBackup.INI 2008-10-31 18:42:10 Un ---- ---- C: \ WINDOWS \ nero.INI 2008-10-30 12:10:38 D ---- ---- C: \ Program Files \ Mozilla Firefox 2008-10-24 02:02:42 HD ---- ---- C: \ WINDOWS \ inf 2008-10-24 02:02:02 ---- ---- RSHD C: \ WINDOWS \ system32 \ dllcache 2008-10-24 02:00:45 D ---- ---- C: \ WINDOWS \ $ $ hf_mig 2008-10-17 16:57:24 Un ---- ---- C: \ WINDOWS \ BRWMARK.INI 2008-10-15 16:34:24 Un ---- ---- C: \ WINDOWS \ system32 \ Netapi32.dll 2008-10-15 02:18:58 D ---- ---- C: \ Program Files \ Internet Explorer 2008-10-09 02:07:07 D ---- ---- C: \ WINDOWS \ system32 \ Setup 2008-10-09 02:07:07 D ---- ---- C: \ WINDOWS \ AppPatch 2008-10-09 02:07:06 D ---- ---- C: \ WINDOWS \ system32 \ wbem 2008-10-09 02:07:05 RSD ---- ---- C: \ WINDOWS \ Fonts 2008-10-09 02:06:20 D ---- ---- C: \ WINDOWS \ security 2008-10-08 18:21:26 D ---- ---- C: \ WINDOWS \ system32 \ CatRoot 2008-10-08 18:14:52 D ---- ---- C: \ Program Files \ Messenger 2008-10-08 18:05:20 D ---- ---- C: \ WINDOWS \ WinSxS 2008-10-08 18:05:00 D ---- ---- C: \ WINDOWS \ rete diagnostici 2008-10-08 18:05:00 D ---- ---- C: \ WINDOWS \ ime 2008-10-08 18:04:59 D ---- ---- C: \ WINDOWS \ Help 2008-10-08 18:04:33 D ---- ---- C: \ WINDOWS \ system32 \ usmt 2008-10-08 18:04:33 D ---- ---- C: \ WINDOWS \ system32 \ en-US 2008-10-08 18:04:28 D ---- ---- C: \ WINDOWS \ PeerNet 2008-10-08 18:04:27 D ---- ---- C: \ Program Files \ Movie Maker 2008-10-08 17:59:09 D ---- ---- C: \ WINDOWS \ system32 \ Restore 2008-10-08 17:59:09 D ---- ---- C: \ WINDOWS \ system32 \ NPP 2008-10-08 17:59:06 D ---- ---- C: \ WINDOWS \ msagent 2008-10-08 17:59:03 D ---- ---- C: \ WINDOWS \ srchasst 2008-10-08 17:58:57 D ---- ---- C: \ Program Files \ NetMeeting 2008-10-08 17:58:55 D ---- ---- C: \ WINDOWS \ system32 \ Com 2008-10-08 17:58:52 D ---- ---- C: \ Program Files \ Windows Media Player 2008-10-08 17:58:51 D ---- ---- C: \ Program Files \ Windows NT 2008-10-08 17:58:50 D ---- ---- C: \ Program Files \ Outlook Express 2008-10-08 17:58:46 D ---- ---- C: \ Program Files \ Common Files \ System 2008-10-08 17:58:28 D ---- ---- C: \ WINDOWS \ system32 \ Configurazione guidata 2008-10-08 17:58:22 D ---- ---- C: \ WINDOWS \ system 2008-10-08 17:53:47 D ---- ---- C: \ WINDOWS \ system32 \ ReinstallBackups 2008-10-08 17:17:41 RASH ---- ---- C: \ boot.ini 2008-10-08 17:17:40 Un ---- ---- C: \ WINDOWS \ win.ini 2008-10-08 17:17:39 Un ---- ---- C: \ WINDOWS \ SYSTEM.INI 2008-10-07 19:19:40 Un ---- ---- C: \ WINDOWS \ system32 \ Mrt.exe ====== Elenco dei conducenti (R = Corsa S = Arrestato, boot = 0, 1 = sistema, 2 = Auto, 3 = domanda, 4 = disabili )====== R1 AmdK7; processore AMD K7 Driver; C: \ WINDOWS \ system32 \ drivers \ Amdk7.sys [2008-04-13 37760] R1 AvgLdx86; AVG Free AVI Loader Driver x86; C: \ WINDOWS \ System32 \ Drivers \ avgldx86.sys [2008-08-29 97928] R1 AvgMfx86; AVG Free Il mini-accesso Scanner Driver x86; C: \ WINDOWS \ System32 \ Drivers \ avgmfx86.sys [2008-07-18 26824] R1 SASDIFSV; SASDIFSV; \? \ C: \ Program Files \ SUPERAntiSpyware \ SASDIFSV.SYS [] R1 SASKUTIL; SASKUTIL; \? \ C: \ Program Files \ SUPERAntiSpyware \ SASKUTIL.sys [] R2 AvgTdiX; Free8 AVG Network Redirector; C: \ WINDOWS \ System32 \ Drivers \ avgtdix.sys [2008-07-18 76040] R2 BrPar; BrPar; C: \ WINDOWS \ System32 \ drivers \ BrPar.sys [2000-07-24 19537] R3 ALCXSENS; Servizio di WDM 3D Audio Driver C: \ WINDOWS \ system32 \ drivers \ ALCXSENS.SYS [2004-02-24 400384] R3 ALCXWDM; Servizio per Realtek AC97 Audio (WDM); C: \ WINDOWS \ system32 \ drivers \ ALCXWDM.SYS [2004-02-27 611820] R3 RTL8139; Realtek RTL8139 (A / B / C) a base PCI Fast Ethernet Adapter NT Driver; C: \ WINDOWS \ system32 \ drivers \ RTL8139.SYS [2004-08-03 20992] R3 SASENUM; SASENUM; \? \ C: \ Program Files \ SUPERAntiSpyware \ SASENUM.SYS [] R3 usbehci; Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C: \ WINDOWS \ system32 \ drivers \ Usbehci.sys [2008-04-13 30208] R3 usbhub; USB2 Enabled Hub; C: \ WINDOWS \ system32 \ drivers \ Usbhub.sys [2008-04-13 59520] R3 usbuhci; Microsoft USB Universal Host Controller Miniport Driver; C: \ WINDOWS \ system32 \ drivers \ usbuhci.sys [2008-04-13 20608] R3 viagfx; viagfx; C: \ WINDOWS \ system32 \ drivers \ vtmini.sys [2004-05-05 142976] R3 wanatw; WAN Miniport (ATW); C: \ WINDOWS \ system32 \ drivers \ wanatw4.sys [2003-01-10 33588] S1 kbdhid; Tastiera HID driver; C: \ WINDOWS \ system32 \ drivers \ kbdhid.sys [2008-04-13 14592] S3 FETND5BV; VIA Rhine-Family Fast Ethernet Adapter Driver Service; C: \ WINDOWS \ system32 \ drivers \ fetnd5bv.sys [2004-12-16 42496] S3 FETNDISB; VIA Reno Famiglia Fast Ethernet Adapter Driver Service; C: \ WINDOWS \ system32 \ drivers \ fetnd5b.sys [2003-11-11 41984] S3 HidUsb; Microsoft HID Driver Classe C: \ WINDOWS \ system32 \ drivers \ hidusb.sys [2008-04-13 10368] S3 MODEMCSA; Unimodem Streaming filtro; C: \ WINDOWS \ system32 \ drivers \ MODEMCSA.sys [2001-08-17 16128] S3 mouhid; HID Mouse Driver; C: \ WINDOWS \ system32 \ drivers \ mouhid.sys [2001-08-17 12160] S3 Mtlmnt5; Mtlmnt5; C: \ WINDOWS \ system32 \ drivers \ Mtlmnt5.sys [2003-02-16 210128] S3 Mtlstrm; Mtlstrm; C: \ WINDOWS \ system32 \ drivers \ Mtlstrm.sys [2003-02-16 1293192] S3 NtMtlFax; NtMtlFax; C: \ WINDOWS \ system32 \ drivers \ NtMtlFax.sys [2003-02-05 162136] S3 SABProcEnum; SABProcEnum; \? \ C: \ Program Files \ Internet Explorer \ SABProcEnum.sys [] S3 Slntamr; SMARTLINK AMR_PCI Driver; C: \ WINDOWS \ system32 \ drivers \ slntamr.sys [2003-02-16 516616] S3 SlNtHal; SlNtHal; C: \ WINDOWS \ system32 \ drivers \ Slnthal.sys [2003-02-16 85520] S3 SlWdmSup; SlWdmSup; C: \ WINDOWS \ system32 \ drivers \ SlWdmSup.sys [2003-01-17 39348] S3 usbccgp; Microsoft Driver USB generico Capogruppo; C: \ WINDOWS \ system32 \ drivers \ usbccgp.sys [2008-04-13 32128] S3 usbohci; Microsoft USB Open Host Controller Miniport Driver; C: \ WINDOWS \ system32 \ drivers \ usbohci.sys [2008-04-13 17152] S3 USBSTOR; USB Mass Storage Driver; C: \ WINDOWS \ system32 \ drivers \ Usbstor.sys [2008-04-13 26368] S3 WudfPf; Windows Driver Foundation - User-mode Driver Framework Platform Driver; C: \ WINDOWS \ system32 \ drivers \ WudfPf.sys [2006-09-28 77568] S3 WudfRd; Windows Driver Foundation - User-mode Driver Framework Reflector; C: \ WINDOWS \ system32 \ drivers \ wudfrd.sys [2006-09-28 82944] ====== Elenco dei servizi (R = Corsa S = Arrestato, boot = 0, 1 = sistema, 2 = Auto, 3 = domanda, 4 = disabili )====== R2 aawservice; Lavasoft Ad-Aware Service; C: \ Program Files \ Lavasoft \ Ad-Aware \ aawservice.exe [2008-07-07 611664] R2 AOL ACS; AOL Connectivity Service; C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AOLacsd.exe [2004-02-25 1123440] R2 avg8emc; Free8 AVG E-mail Scanner; C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgemc.exe [2008-08-29 875288] R2 avg8wd; AVG Free8 watchdog; C: \ PROGRA ~ 1 \ AVG \ AVG8 \ avgwdsvc.exe [2008-08-29 231704] R2 Brother XP spl Service; BrSplService; C: \ WINDOWS \ system32 \ brsvc01a.exe [2003-08-28 57344] R2 JavaQuickStarterService; Java Quick Starter; C: \ Program Files \ Java \ jre6 \ bin \ jqs.exe [2008-11-04 152984] R2 UStorage Server Service; UStorage Server Service; C: \ WINDOWS \ system32 \ UStorSrv.exe [2006-02-17 139264] R2 WinDefend; Windows Defender; C: \ Program Files \ Windows Defender \ MsMpEng.exe [2006-11-03 13592] S2 Fax Fax; C: \ WINDOWS \ system32 \ fxssvc.exe [2008-04-14 267776] S2 SLService; SmartLinkService; slserv.exe [] S3 aspnet_state; ASP.NET membro Servizio; C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ aspne t_state.exe [2004-07-15 32768] S3 IDriverT; InstallDriver Table Manager; C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe [2005-04-03 69632] S3 OSE; Office Source Engine; C: \ Program Files \ Common Files \ Microsoft Shared \ Source Engine \ OSE.EXE [2003-07-28 89136] S3 WMPNetworkSvc, Windows Media Player di condivisione delle reti di servizio; C: \ Program Files \ Windows Media Player \ WMPNetwk.exe [2006-10-18 913408] S3 WudfSvc; Windows Driver Foundation - User-mode Driver quadro; C: \ WINDOWS \ system32 \ svchost.exe [2008-04-14 14336] EOF ----------------- ----------------- info.txt casuale di file di log del sistema di informazione strumento 1,04 2008-11-06 17:06:34 Disinstallare elenco ====== ====== -> "C: \ Program Files \ Common Files \ aolshare \ Allenatore \ AolCInUn.exe" lang = "en-uk" -> C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ ACS \ AcsUninstall.exe / c -> C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ AOLSPY ~ 1 \ UNWISE.EXE C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ AOL \ AOLSPY ~ 1 \ INSTALL.LOG -> C: \ PROGRA ~ 1 \ S3 \ S3 \ s3setvga.exe-s-fc: \ PROGRA ~ 1 \ S3 \ S3 \ S3.uns -> C: \ Program Files \ Common Files \ AOL \ Screensaver \ uninst_ygpss.exe -> C: \ Program Files \ Common Files \ aolshare \ Aolunins_uk.exe -> C: \ Program Files \ Common Files \ Real \ Update_OB \ r1puninst.exe RealNetworks | RealPlayer | 6,0 -> C: \ Program Files \ Common Files \ Real \ Update_OB \ r1puninst.exe RealNetworks | RealPlayer | 6,0 -> C: \ Program Files \ Learn2.com \ StRunner \ stuninst.exe -> C: \ Program Files \ Viewpoint \ Viewpoint Experience Technology \ mtsAxInstaller.exe / u -> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Sage \ Sage, Payroll e-Submissions Update \ Uninst.isu" -> C: \ WINDOWS \ IsUninst.exe-fc: \ WINDOWS \ orun32.isu -> C: \ WINDOWS \ system32 \ \ msiexec.exe / x (9541FED0-327F-4df0-8B96-EF57EF622F19) -> C: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 1 \ UNWISE.EX CE: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 1 \ Install.log -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (2637C347-11D6-9DAD -9EA2-00055D0CA761) \ Setup.exe "-uninstall -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ ct or.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (FB08F381-6533-4108 -B7DD-039E11FBC27E) \ setup.exe "RIMUOVI -> rundll32.exe setupapi.dll, DefaultUninstall InstallHinfSection 132 C: \ WINDOWS \ INF \ PCHealth.inf -> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Display' -> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Gamma2' -> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Info2' -> vtuninst.exe-reg 5 'HKLM \ Software \ S3 \ VT \ S3Uninst \ S3Overlay' Abacast Cliente -> C: \ PROGRA ~ 1 \ Abacast \ UNWISE.EXE C: \ PROGRA ~ 1 \ Abacast \ client.LOG Ad-Aware -> msiexec.exe / i (DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF) Adobe Flash Player 10 ActiveX -> C: \ WINDOWS \ system32 \ Macromed \ Flash \ uninstall_acti veX.exe Adobe Reader 7.1.0 -> msiexec.exe / i (AC76BA86-7AD7-1033-7B44-A71000000002) Ahead Nero Burning ROM -> C: \ Programmi \ Ahead \ Nero \ Uninstall \ UNNERO.exe / DISINSTALLAZIONE AVG Free 8.0 -> C: \ Program Files \ AVG \ AVG8 \ setup.exe / uninstall Aztech CNR2900 modem V.90 -> C: \ WINDOWS \ Modio \ SLAMR2KO \ Setup.exe / Rimuovi Brother HL-5040 -> "C: \ Program Files \ Brother \ BRHL5040 \ IsUninst.exe"-f "C: \ Program Files \ Brother \ BRHL5040 \ DeIsL1.isu"-cbruninst.dll Brother HL-6050 -> "C: \ Program Files \ Brother \ BRHL6050 \ IsUninst.exe"-f "C: \ Program Files \ Brother \ BRHL6050 \ DeIsL1.isu"-cbruninst.dll CCleaner (rimuovere solo )-->" C: \ Program Files \ CCleaner \ uninst.exe " ESET Online Scanner -> C: \ WINDOWS \ system32 \ OnlineScannerUninstaller.ex e HijackThis 2.0.2 -> "C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe" / uninstall Hotfix per Windows Internet Explorer 7 (KB947864 )-->" C: \ WINDOWS \ ie7updates \ KB947864-IE7 \ spuninst \ spuninst.exe " Hotfix per Windows Media Format 11 SDK (KB929399 )-->" C: \ WINDOWS \ $ NtUninstallKB929399 $ \ spuninst \ spunin st.exe " Hotfix per Windows Media Player 11 (KB939683 )-->" C: \ WINDOWS \ $ NtUninstallKB939683 $ \ spuninst \ spunin st.exe " Hotfix per Windows XP (KB952287 )-->" C: \ WINDOWS \ $ NtUninstallKB952287 $ \ spuninst \ spunin st.exe " Imation Disk Manager V un servizio -> C: \ DOCUME ~ 1 \ Marco \ LOCALS ~ 1 \ Temp \ Imation Disk Manager a.exe V-u Java (TM) 6 Update 10 -> msiexec.exe / x (26A24AE4-039D-4CA4-87B4-2F83216010FF) Lotus Organizer 6.0 -> C: \ WINDOWS \ ounin11.exe / T Organizzatore / 99,1 V / I "c: \ lotus \ organizzare \ orgnode.inf" / C "c: \ lotus \ Organizza \ cinstnod.ini" / O c: \ uninst.log / L IT / U Organizzatore Utente Macromedia Dreamweaver MX -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (8B4AB829 - DFD3-436D-B808-D9733D76C590) \ Setup.exe "-l0x9 mmUninstall Macromedia Extension Manager -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ Ct or.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (A5BA14E0 - 7384-11D4-BAE7-00409631A2C8) \ setup.exe "-l0x9 mmUninstall Macromedia Shockwave Player -> C: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 2 \ UNWISE.EX CE: \ WINDOWS \ system32 \ Macromed \ SHOCKW ~ 2 \ Install.log Malwarebytes' Anti-Malware -> "C: \ Program Files \ Malwarebytes' Anti-Malware \ unins000.exe" Microsoft. NET Framework 1.1 Hotfix (KB928366 )-->" C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ Agg ates \ Hotfix.exe "" C: \ WINDOWS \ Microsoft.NET \ Framework \ v1.1.4322 \ upda tes \ M928366 \ M928366Uninstall.msp " Microsoft. NET Framework 1.1 -> msiexec.exe / X (CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1) Microsoft. NET Framework 1.1 -> msiexec.exe / x (CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1) Microsoft Compression Client Pack 1.0 per Windows XP -> "C: \ WINDOWS \ $ NtUninstallMSCompPackV1 $ \ spuninst \ sp uninst.exe" Nomi di dominio di Microsoft internazionalizzato mitigazione API -> "C: \ WINDOWS \ $ NtServicePackUninstallIDNMitigationA PIs $ \ spuninst \ spuninst.exe" Microsoft National Language Support inferiore API -> "C: \ WINDOWS \ $ NtServicePackUninstallNLSDownlevelMa pping $ \ spuninst \ spuninst.exe" Microsoft Office 2003 Standard Edition -> msiexec.exe / i (91120409-6000-11D3-8CFE-0150048383C9) Microsoft User-Mode Driver Framework Feature Pack 1.0 -> "C: \ WINDOWS \ $ NtUninstallWudf01000 $ \ spuninst \ spuni nst.exe" Microsoft Visual C + + 2005 Redistributable -> msiexec.exe / x (7299052b-02a4-4627-81f2-1818da5d550d) Microsoft Works 7.0 -> msiexec.exe / i (764D06D8-D8DE-411E-A1C8-D9E9380F8A84) Microsoft WSE 2,0 SP3 Runtime -> msiexec.exe / x (F3CA9611-CD42-4562-ADAB-A554CF8E17F1) Mozilla Firefox (3.0.1) -> C: \ Program Files \ Mozilla Firefox \ uninstall \ helper.exe MSXML 4.0 SP2 (KB936181) -> msiexec.exe / i (C04E32E0-0416-434D-AFB9-6969D703A9EF) MSXML 6.0 Parser (KB933579) -> msiexec.exe / i (0A869A65-8C94-4F7C-A5C7-972D3C8CED9E) Packard Bell Infocentro -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ motore \ 6 \ INTEL3 ~ 1 \ ct or.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (B04AC0A3 - 7A0F-4E38-9DE7-FD1E4CE47D8C) \ setup.exe " Packard Bell Toolbar 1.0 -> "C: \ Program Files \ Dynamic Toolbar \ unins000.exe" QuickTime -> C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ Driver \ 11 \ INTEL3 ~ 1 \ IDriver.exe / M (C21D5524-A970-42FA-AC8A-59B8C7CDCA31) / l1033 Sage 50 Payroll -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ professioni ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ (AE4B057E-41EF-4DBA-A387-CC6A7666C5CD) \ Setup.exe "-l0x9-uninst-removeonly V11.00-Sage Account -> C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ Driver \ 7 \ INTEL3 ~ 1 \ I Driver.exe / M 9B4F367E (-94AD-40A4-8060-460CE4A98C45) Sage MIS 3,01 -> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Informer50 \ Uninst.isu" Sage, Payroll 07-08 -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ professioni ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Informazioni \ (CD9BCE06-1BB1-4D6F-AFDC-E2E50FA99543) \ Setup.exe "-l0x9-uninst-removeonly Sage Payroll -> C: \ WINDOWS \ IsUninst.exe-f "C: \ Program Files \ Sage Payroll \ UNINST80.ISU" Sage Payroll -> Rundll32 C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ strutture ~ 1 \ professioni ~ 1 \ RunTime \ 10 \ 50 \ Intel32 \ Ctor.dll, LaunchSetup "C: \ Program Files \ InstallShield Installation Information \ ( 09998BA7-A8D3-441c-8D35-D156C831D444) \ Setup.exe "-l0x9-uninst-removeonly Aggiornamento della protezione per Step by Step Interactive Training (KB898458 )-->" C: \ WINDOWS \ $ NtUninstallKB898458 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Step by Step Interactive Training (KB923723 )-->" C: \ WINDOWS \ $ NtUninstallKB923723 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB938127 )-->" C: \ WINDOWS \ ie7updates \ KB938127-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB942615 )-->" C: \ WINDOWS \ ie7updates \ KB942615-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB944533 )-->" C: \ WINDOWS \ ie7updates \ KB944533-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB950759 )-->" C: \ WINDOWS \ ie7updates \ KB950759-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB953838 )-->" C: \ WINDOWS \ ie7updates \ KB953838-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Internet Explorer 7 (KB956390 )-->" C: \ WINDOWS \ ie7updates \ KB956390-IE7 \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Media Player 11 (KB936782 )-->" C: \ WINDOWS \ $ NtUninstallKB936782_WMP11 $ \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows Media Player 11 (KB954154 )-->" C: \ WINDOWS \ $ NtUninstallKB954154_WM11 $ \ spuninst \ s puninst.exe " Aggiornamento della protezione per Windows XP (KB938464 )-->" C: \ WINDOWS \ $ NtUninstallKB938464 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB941569 )-->" C: \ WINDOWS \ $ NtUninstallKB941569 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB946648 )-->" C: \ WINDOWS \ $ NtUninstallKB946648 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB950760 )-->" C: \ WINDOWS \ $ NtUninstallKB950760 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB950762 )-->" C: \ WINDOWS \ $ NtUninstallKB950762 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB950974 )-->" C: \ WINDOWS \ $ NtUninstallKB950974 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB951066 )-->" C: \ WINDOWS \ $ NtUninstallKB951066 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB951376 )-->" C: \ WINDOWS \ $ NtUninstallKB951376 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB951376-v2 )-->" C: \ WINDOWS \ $ NtUninstallKB951376-v2 $ \ spuninst \ spuninst.exe " Aggiornamento della protezione per Windows XP (KB951698 )-->" C: \ WINDOWS \ $ NtUninstallKB951698 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB951748 )-->" C: \ WINDOWS \ $ NtUninstallKB951748 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB952954 )-->" C: \ WINDOWS \ $ NtUninstallKB952954 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB953839 )-->" C: \ WINDOWS \ $ NtUninstallKB953839 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB954211 )-->" C: \ WINDOWS \ $ NtUninstallKB954211 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB956391 )-->" C: \ WINDOWS \ $ NtUninstallKB956391 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB956803 )-->" C: \ WINDOWS \ $ NtUninstallKB956803 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB956841 )-->" C: \ WINDOWS \ $ NtUninstallKB956841 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB957095 )-->" C: \ WINDOWS \ $ NtUninstallKB957095 $ \ spuninst \ spunin st.exe " Aggiornamento della protezione per Windows XP (KB958644 )-->" C: \ WINDOWS \ $ NtUninstallKB958644 $ \ spuninst \ spunin st.exe " Sonic MyDVD -> msiexec.exe / i (21657574-BD54-48A2-9450-EB03B2C7FC29) Sonic RecordNow! -> Msiexec.exe / i (9541FED0-4DF0-327F-8B96-EF57EF622F19) Spybot - Search & Destroy 1.5.2.20 -> "C: \ WINDOWS \ unins000.exe" Spybot - Search & Destroy -> "C: \ Program Files \ Spybot - Search & Destroy \ unins001.exe" SUPERAntiSpyware Free Edition -> msiexec.exe / x (CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA) Aggiornamento per Windows XP (KB951072-v2 )-->" C: \ WINDOWS \ $ NtUninstallKB951072-v2 $ \ spuninst \ spuninst.exe " Aggiornamento per Windows XP (KB951978 )-->" C: \ WINDOWS \ $ NtUninstallKB951978 $ \ spuninst \ spunin st.exe " VIA Rhine-Family Fast Ethernet Adapter -> Rundll32.exe vuins32.dll, vuins32Ex $ $ Reno VIA Visual C + + 8,0 CRT -> msiexec.exe / i (B2395631-54D5-481E-B9A8-74B269546F40) Windows Defender Firme -> msiexec.exe / i (A5CC2A09-E9D3-49EC-923D-03874BBD4C2C) Windows Defender -> msiexec.exe / i (A06275F4-324B-4E85-95E6-87B2CD729401) Runtime formato Windows Media 11 -> "C: \ Program Files \ Windows Media Player \ wmsetsdk.exe" / UninstallAll Runtime formato Windows Media 11 -> "C: \ WINDOWS \ $ NtUninstallWMFDist11 $ \ spuninst \ spuni nst.exe" Windows Media Player 11 -> "C: \ Program Files \ Windows Media Player \ Setup_wm.exe" / Rimuovi Windows Media Player 11 -> "C: \ WINDOWS \ $ NtUninstallwmp11 $ \ spuninst \ spuninst. Exe" Windows XP Service Pack 3 -> "C: \ WINDOWS \ $ NtServicePackUninstall $ \ spuninst \ SPU ninst.exe" Centro informazioni di sicurezza ====== ====== AV: AVG Anti-Virus Free Variabili d'ambiente ====== ====== "ComSpec" =% SystemRoot% \ system32 \ cmd.exe "Path" =% SystemRoot% \ system32;% SystemRoot%; SystemR oot%% \ System32 \ Wbem; C: \ PROGRA ~ 1 \ COMUNE ~ 1 \ SONICS ~ 1 \ C: \ Program Files \ Common Files \ Sage SBD ; C: \ Program Files \ QuickTime \ QTSystem \ C: \ Program Files \ Common Files \ Sage SBD \ "windir" =% SystemRoot% "FP_NO_HOST_CHECK" = NO "OS" = Windows_NT "PROCESSOR_ARCHITECTURE" = x86 "PROCESSOR_LEVEL" = 6 "PROCESSOR_IDENTIFIER" = x86 Family 6 Model 8 Stepping 1, AuthenticAMD "PROCESSOR_REVISION" = 0801 "NUMBER_OF_PROCESSORS" = 1 "PATHEXT" =. COM;. EXE;. BAT;. CMD;. VBS;. VBE;. JS;. Jse;. WSF;. WSH "TEMP" =% SystemRoot% \ TEMP "TMP" =% SystemRoot% \ TEMP "CLASSPATH" =.; C: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip "QTJAVA" = C: \ Program Files \ QuickTime \ QTSystem \ QTJava.zip EOF ----------------- ----------------- In previsione, Muco. |
|
#7
| |||
| |||
| Mozilla Firefox (3.0.1) Siamo sul 3.0.3. Necessità di aggiornamento. Disinstallare Spybot - Search & Destroy 1.5.2.20. Lasciare le altre Spybot - Search & Destroy. ---------- Ti si spegne AVG prima di iniziare la scansione Kaspersky? |
|
#8
| |||
| |||
| Salve, Mozilla Firefox (3.0.1) Siamo sul 3.0.3. Necessità di aggiornamento. Fatto! Disinstallare Spybot - Search & Destroy 1.5.2.20. Fatto! Ti si spegne AVG prima di iniziare la scansione Kaspersky? No! Scusa, che è stato stupido di me. La fecondazione Kaspersky Scan ancora una volta, si repoert ritornare al più presto. Slime |
|
#9
| |||
| |||
| Speriamo che gli permetta di continuare e terminare. Basta non scaricare nulla, mentre il tuo AV è spento o aprire allegati di posta elettronica qualsiasi. |
|
#10
| |||
| |||
| Salve, può essere qui di essere stupido, ma non posso sembra girare AVG off! Eventuali suggerimenti? Muco. |
![]() |
|
| Segnalibri |
Threads simili | ||||
| Filo | Thread Starter | Forum | Risposte | Ultimo Post |
| Internet lenta velocità serate su cavo | kojowilliams | Reti, Modem & VoIP | 1 | 25 maggio 2009 14:18 |
| World's BIGGEST HardDrive | pete21 | Removable Media Drives & | 1 | 15 nov 2008 05:18 |
| Più lento e più lento | RB211 | Virus, Spyware e sicurezza | 47 | 24 apr 2008 06:21 |
| Più lunga del mondo che la frase non è solo sciocchezze | Mike0001 | Off Topic Discussione | 150 | 8 Mar 2008 04:55 |
| Sono esterni hardrives più lento di quello interno? | dubs89 | Removable Media Drives & | 3 | 29 dic 2007 14:05 |
| Thread Tools | |
| |