Liberarmi dei popup

[CLEO2000]

ho fatto la rimozione...ecco il log

http://wikisend.com/download/358556/Hit ... 8_2117.log

[CLEO2000]

Purtroppo ci sono ancora le pubblicità

[FDACCC]

Per quanto mi riguarda, abbiamo effettuato il possibile.

[CLEO2000]

Grazie di tutto FDACCC ho comunque imparato tante cose. Se risolvo diversamente ti faro' sapere

[nikyanas]

ComboFix 15-03-09.01 - Administrator 09/03/15 22.09.25.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.39.1040.18.953.189 [GMT 1:00]
Eseguito da: c:\documents and settings\Administrator\Documenti\Downloads\ComboFix.exe
.
ATTENZIONE - QUESTO PC NON HA LA CONSOLE DI RIPRISTINO DI EMERGENZA INSTALLATA !!
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\BigLoading.gif
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_AutoYScaleDown.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_AutoYScaleUp.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_Cancel.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_cashier.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_ChartSettings.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_CrosshairDown.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_CrosshairUp.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_DemoMode.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_downarrow_red.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_Help.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_Help2.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_MoveDown.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_MoveUp.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_OK.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_RateAlerts.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_RealMode.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_Search.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_SetupIndicators.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_SwitchToCandleStick.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_SwitchToFun.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_SwitchToLine.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_SwitchToReal.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_ZoomIn.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_ZoomOut.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\but_ZoomReset.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\challenge_loading.gif
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_ABNAMRO.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_AboutWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_ArrowDown.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_ArrowUp.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_Barclays.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BigBell.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BigBellSelected.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BigFavorite.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BigFavoriteSelected.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BuySellSeparator.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_BuySellWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierDepositWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper1.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper1s.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper2.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper2s.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper3.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierMainWallpaper3s.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierUploadDocRegulation.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CashierUploadDocRegulationNoBonus.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_ChallengeStandings_Wallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_ChartToolbar.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_CommonwealthBank.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_Error.PNG
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_GuaranteedStop.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_IBB.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_InstrumentScreenLeftWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_InstrumentScreenRightWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_LoginWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList0.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList1.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList2.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList3.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList4.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList5.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList6.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList7.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyIconsImageList8.bmp
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyLeftWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_MainLobbyRightWallpaper.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\img_RateUs.png
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\InvestSmallBtns.ssk
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\InvestSoft.ssk
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Languages\it\Images\Loading.gif
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\configuration.xml
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InstrumentsInfo.xml
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoft.log
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoft.log.1
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoft.log.2
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoft.log.3
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoft.log.4
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoftProject.exe
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\InvestSoftProject.jdbg
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\log4delphi.log
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AboutGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AboutGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AdjustmentGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AdjustmentGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AlertsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AlertsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AMLWarningGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\AMLWarningGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\BuySellGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\BuySellGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierAddressVerificationGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierAddressVerificationGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierBonusAccountGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierBonusAccountGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierChangePasswordGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierChangePasswordGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierDepositGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierDepositGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierEmailVerificationGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierEmailVerificationGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistration_ASIC_GUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistration_ASIC_GUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistration_FSA_GUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistration_FSA_GUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistrationGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierFullRegistrationGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierGUIbrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierHistoryGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierHistoryGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierMainGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierMainGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierPhoneVerificationGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierPhoneVerificationGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierQuestionnaireGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierQuestionnaireGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierReportsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierReportsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierSnapshotGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierSnapshotGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierUploadDocsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierUploadDocsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierWithdrawGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CashierWithdrawGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeCreateGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeCreateGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeHelpGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeHelpGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeInviteGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeInviteGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeStandingsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChallengeStandingsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChartGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ChartGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ClosePositionGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ClosePositionGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\Countries.xml
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CreateUserGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\CreateUserGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\DontShowAgainGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\DontShowAgainGUIbrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\EquityWarningGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\EquityWarningGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\FavoritesSetupGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\FavoritesSetupGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ForgotPasswordGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ForgotPasswordGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsADXGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsADXGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsAligatorGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsAligatorGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsBollingerGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsBollingerGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsEnvelopesGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsEnvelopesGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsMACDOsMAGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsMACDOsMAGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsMovingAverageGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsMovingAverageGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsParabolicSARGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsParabolicSARGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsPeriodGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsPeriodGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsStochasticGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IndicatorsStochasticGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\InstrumentScreenGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\InstrumentScreenGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\InvestSoft.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\InvestSoftBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IsRealGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\IsRealGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LinkMessageDlgGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LinkMessageDlgGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LiveChatGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LiveChatGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LoginGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\LoginGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\MainLobbyGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\MainLobbyGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\Nationalities.xml
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ProcessingGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ProcessingGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ProcessingSmallGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\ProcessingSmallGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateAlertGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateAlertGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateAlertSetupGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateAlertSetupGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateUsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\RateUsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\SettingsGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\SettingsGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\UploadFileGUI.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Main\SIL\UploadFileGUIBrand.sil
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Update\500w.exe
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Update\500z.exe
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Update\product.ico
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Update\ResourceChange.exe
c:\documents and settings\Administrator\Impostazioni locali\Dati applicazioni\Plus500\Update\uninstall.ico
c:\documents and settings\All Users\Dati applicazioni\ma-config.com
c:\documents and settings\All Users\Dati applicazioni\ma-config.com\Logs\activex.txt
c:\documents and settings\All Users\Dati applicazioni\ma-config.com\Logs\maconfservice.txt
c:\documents and settings\All Users\Dati applicazioni\ma-config.com\mcbase.db
c:\documents and settings\All Users\Dati applicazioni\ma-config.com\Temp\mc_66.tmp
c:\programmi\ma-config.com
c:\programmi\ma-config.com\config.xml
c:\programmi\ma-config.com\CPUID\cpuidsdk.dll
c:\programmi\ma-config.com\Drivers\driverhardwarev2.sys
c:\programmi\ma-config.com\Drivers\driverhardwarev2ia64.sys
c:\programmi\ma-config.com\Drivers\driverhardwarev2x64.cat
c:\programmi\ma-config.com\Drivers\driverhardwarev2x64.sys
c:\programmi\ma-config.com\Drivers\matos9x.vxd
c:\programmi\ma-config.com\HardwareDetection.ocx
c:\programmi\ma-config.com\Langues\LangueMC_en.dll
c:\programmi\ma-config.com\Langues\LangueMC_fr.dll
c:\programmi\ma-config.com\ma-config.html
c:\programmi\ma-config.com\maconfservice.exe
c:\programmi\ma-config.com\MCBCL.dll
c:\programmi\ma-config.com\mcnoyau.dll
c:\programmi\ma-config.com\mcrypt.dll
c:\programmi\ma-config.com\mcsettings.exe
c:\programmi\ma-config.com\nphardwaredetection.dll
c:\programmi\ma-config.com\sqlite3.dll
c:\programmi\stab
c:\programmi\stab\BrowerWatchCH.dll
c:\programmi\stab\BrowerWatchFF.dll
c:\programmi\stab\BrowserAction.dll
c:\programmi\stab\CmdShell.exe
c:\programmi\stab\conf
c:\programmi\stab\HPNotify.exe
c:\programmi\stab\IeWatchDog.dll
c:\programmi\stab\msvcp110.dll
c:\programmi\stab\msvcr110.dll
c:\programmi\stab\skin\about.png
c:\programmi\stab\skin\about_bk.png
c:\programmi\stab\skin\btn.png
c:\programmi\stab\skin\btn_apply.png
c:\programmi\stab\skin\close.png
c:\programmi\stab\skin\conf.xml
c:\programmi\stab\skin\conf_back.png
c:\programmi\stab\skin\input_bk.png
c:\programmi\stab\skin\logo.png
c:\programmi\stab\skin\main.xml
c:\programmi\stab\skin\radio_1.png
c:\programmi\stab\skin\radio_2.png
c:\programmi\stab\skin\rigth_arrow.png
c:\programmi\stab\skin\settings.png
c:\programmi\stab\uninstall.exe
c:\programmi\WinRAR\Leggimi.Txt
c:\programmi\WinRAR\Leggimi_1a.Txt
c:\programmi\WinRAR\Licenza.Txt
c:\programmi\WinRAR\NoteTecniche.Txt
c:\programmi\WinRAR\Ordin.htm
c:\programmi\WinRAR\Ordina.htm
c:\programmi\WinRAR\SorgUnRAR.Txt
c:\windows\$msi31uninstall_kb893803v2$
c:\windows\$msi31uninstall_kb893803v2$\msi.dll
c:\windows\$msi31uninstall_kb893803v2$\msiexec.exe
c:\windows\$msi31uninstall_kb893803v2$\msihnd.dll
c:\windows\$msi31uninstall_kb893803v2$\msimsg.dll
c:\windows\$msi31uninstall_kb893803v2$\msisip.dll
c:\windows\$msi31uninstall_kb893803v2$\reg00013
c:\windows\$msi31uninstall_kb893803v2$\reg00014
c:\windows\$msi31uninstall_kb893803v2$\reg00015
c:\windows\$msi31uninstall_kb893803v2$\reg00016
c:\windows\$msi31uninstall_kb893803v2$\reg00017
c:\windows\$msi31uninstall_kb893803v2$\reg00018
c:\windows\$msi31uninstall_kb893803v2$\reg00019
c:\windows\$msi31uninstall_kb893803v2$\reg00020
c:\windows\$msi31uninstall_kb893803v2$\reg00021
c:\windows\$msi31uninstall_kb893803v2$\reg00022
c:\windows\$msi31uninstall_kb893803v2$\reg00023
c:\windows\$msi31uninstall_kb893803v2$\reg00024
c:\windows\$msi31uninstall_kb893803v2$\reg00025
c:\windows\$msi31uninstall_kb893803v2$\reg00026
c:\windows\$msi31uninstall_kb893803v2$\reg00027
c:\windows\$msi31uninstall_kb893803v2$\reg00028
c:\windows\$msi31uninstall_kb893803v2$\reg00029
c:\windows\$msi31uninstall_kb893803v2$\reg00030
c:\windows\$msi31uninstall_kb893803v2$\reg00031
c:\windows\$msi31uninstall_kb893803v2$\reg00032
c:\windows\$msi31uninstall_kb893803v2$\reg00033
c:\windows\$msi31uninstall_kb893803v2$\reg00034
c:\windows\$msi31uninstall_kb893803v2$\reg00035
c:\windows\$msi31uninstall_kb893803v2$\reg00036
c:\windows\$msi31uninstall_kb893803v2$\reg00037
c:\windows\$msi31uninstall_kb893803v2$\reg00038
c:\windows\$msi31uninstall_kb893803v2$\reg00039
c:\windows\$msi31uninstall_kb893803v2$\reg00040
c:\windows\$msi31uninstall_kb893803v2$\reg00041
c:\windows\$msi31uninstall_kb893803v2$\reg00042
c:\windows\$msi31uninstall_kb893803v2$\reg00043
c:\windows\$msi31uninstall_kb893803v2$\reg00044
c:\windows\$msi31uninstall_kb893803v2$\reg00045
c:\windows\$msi31uninstall_kb893803v2$\reg00046
c:\windows\$msi31uninstall_kb893803v2$\reg00047
c:\windows\$msi31uninstall_kb893803v2$\reg00048
c:\windows\$msi31uninstall_kb893803v2$\reg00051
c:\windows\$msi31uninstall_kb893803v2$\reg00052
c:\windows\$msi31uninstall_kb893803v2$\reg00053
c:\windows\$msi31uninstall_kb893803v2$\reg00054
c:\windows\$msi31uninstall_kb893803v2$\reg00055
c:\windows\$msi31uninstall_kb893803v2$\reg00056
c:\windows\$msi31uninstall_kb893803v2$\reg00057
c:\windows\$msi31uninstall_kb893803v2$\reg00058
c:\windows\$msi31uninstall_kb893803v2$\reg00059
c:\windows\$msi31uninstall_kb893803v2$\reg00060
c:\windows\$msi31uninstall_kb893803v2$\reg00061
c:\windows\$msi31uninstall_kb893803v2$\reg00062
c:\windows\$msi31uninstall_kb893803v2$\reg00063
c:\windows\$msi31uninstall_kb893803v2$\reg00064
c:\windows\$msi31uninstall_kb893803v2$\reg00065
c:\windows\$msi31uninstall_kb893803v2$\reg00066
c:\windows\$msi31uninstall_kb893803v2$\reg00067
c:\windows\$msi31uninstall_kb893803v2$\reg00068
c:\windows\$msi31uninstall_kb893803v2$\reg00069
c:\windows\$msi31uninstall_kb893803v2$\reg00070
c:\windows\$msi31uninstall_kb893803v2$\reg00071
c:\windows\$msi31uninstall_kb893803v2$\reg00072
c:\windows\$msi31uninstall_kb893803v2$\reg00073
c:\windows\$msi31uninstall_kb893803v2$\reg00074
c:\windows\$msi31uninstall_kb893803v2$\reg00075
c:\windows\$msi31uninstall_kb893803v2$\reg00076
c:\windows\$msi31uninstall_kb893803v2$\reg00077
c:\windows\$msi31uninstall_kb893803v2$\reg00078
c:\windows\$msi31uninstall_kb893803v2$\reg00079
c:\windows\$msi31uninstall_kb893803v2$\reg00080
c:\windows\$msi31uninstall_kb893803v2$\reg00081
c:\windows\$msi31uninstall_kb893803v2$\reg00082
c:\windows\$msi31uninstall_kb893803v2$\reg00083
c:\windows\$msi31uninstall_kb893803v2$\reg00084
c:\windows\$msi31uninstall_kb893803v2$\reg00085
c:\windows\$msi31uninstall_kb893803v2$\reg00086
c:\windows\$msi31uninstall_kb893803v2$\reg00087
c:\windows\$msi31uninstall_kb893803v2$\reg00088
c:\windows\$msi31uninstall_kb893803v2$\reg00089
c:\windows\$msi31uninstall_kb893803v2$\reg00090
c:\windows\$msi31uninstall_kb893803v2$\reg00091
c:\windows\$msi31uninstall_kb893803v2$\reg00092
c:\windows\$msi31uninstall_kb893803v2$\reg00093
c:\windows\$msi31uninstall_kb893803v2$\reg00094
c:\windows\$msi31uninstall_kb893803v2$\reg00095
c:\windows\$msi31uninstall_kb893803v2$\reg00096
c:\windows\$msi31uninstall_kb893803v2$\reg00097
c:\windows\$msi31uninstall_kb893803v2$\reg00098
c:\windows\$msi31uninstall_kb893803v2$\reg00099
c:\windows\$msi31uninstall_kb893803v2$\reg00100
c:\windows\$msi31uninstall_kb893803v2$\reg00101
c:\windows\$msi31uninstall_kb893803v2$\reg00102
c:\windows\$msi31uninstall_kb893803v2$\reg00103
c:\windows\$msi31uninstall_kb893803v2$\reg00104
c:\windows\$msi31uninstall_kb893803v2$\reg00105
c:\windows\$msi31uninstall_kb893803v2$\reg00106
c:\windows\$msi31uninstall_kb893803v2$\reg00107
c:\windows\$msi31uninstall_kb893803v2$\reg00108
c:\windows\$msi31uninstall_kb893803v2$\reg00109
c:\windows\$msi31uninstall_kb893803v2$\reg00110
c:\windows\$msi31uninstall_kb893803v2$\reg00111
c:\windows\$msi31uninstall_kb893803v2$\reg00112
c:\windows\$msi31uninstall_kb893803v2$\reg00113
c:\windows\$msi31uninstall_kb893803v2$\reg00114
c:\windows\$msi31uninstall_kb893803v2$\reg00115
c:\windows\$msi31uninstall_kb893803v2$\reg00116
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.exe
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.inf
c:\windows\$msi31uninstall_kb893803v2$\spuninst\spuninst.txt
c:\windows\$msi31uninstall_kb893803v2$\spuninst\updspapi.dll
c:\windows\msdownld.tmp
.
.
((((((((((((((((((((((((((((((((((((((( Driver/Servizi )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_driverhardwarev2
-------\Legacy_maconfservice
-------\Legacy_driverhardwarev2
-------\Legacy_maconfservice
-------\Service_driverhardwarev2
-------\Service_maconfservice
-------\Service_driverhardwarev2
-------\Service_maconfservice
.
.
((((((((((((((((((((((((( Files Creati Da 2015-02-09 al 2015-03-09 )))))))))))))))))))))))))))))))))))
.
.
2015-03-09 20:11 . 2015-03-09 20:12 -------- d-----w- c:\programmi\eMule AdunanzA
2015-03-09 20:11 . 2015-03-09 20:11 -------- d-----w- c:\documents and settings\Administrator\Dati applicazioni\eMule AdunanzA
2015-03-09 19:49 . 2015-03-09 20:01 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\HitmanPro
2015-03-06 11:01 . 2015-03-06 11:01 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\kcanegdpjhncmlfajkmpdjeffbmpdodb
2015-03-06 11:00 . 2015-03-09 20:01 -------- d-----w- c:\documents and settings\All Users\Dati applicazioni\{a452afb3-538e-ae8a-a452-2afb3538becd}
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-03-09 20:04 . 2014-12-20 10:48 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-01-28 13:34 . 2014-10-29 09:58 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-01-28 13:34 . 2014-10-29 09:58 146432 ----a-w- c:\windows\system32\javacpl.cpl
2014-12-18 14:27 . 2014-12-18 14:27 82432 ----a-w- c:\documents and settings\Administrator\Dati applicazioni\Microsoft\MSXML2\msxml4r.dll
2014-12-18 14:27 . 2014-12-18 14:27 1275392 ----a-w- c:\documents and settings\Administrator\Dati applicazioni\Microsoft\MSXML2\msxml4.dll
2014-12-16 14:12 . 2014-12-16 14:12 44544 ----a-w- c:\documents and settings\Administrator\Dati applicazioni\Microsoft\MSXML2\msxml4a.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\programmi\Windows Sidebar\sidebar.exe" [2007-07-28 1230848]
"CCleaner Monitoring"="c:\programmi\CCleaner\CCleaner.exe" [2014-10-30 4826904]
"BitTorrent DNA"="c:\programmi\DNA\btdna.exe" [2009-08-11 321344]
"EPLTarget\P0000000000000000"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIILE.EXE" [2012-02-29 249440]
"EPLTarget\P0000000000000001"="c:\windows\System32\spool\DRIVERS\W32X86\3\E_FATIILE.EXE" [2012-02-29 249440]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-13 15360]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="c:\programmi\Analog Devices\Core\smax4pnp.exe" [2008-04-04 1044480]
"RemoteControl"="c:\programmi\CyberLink\PowerDVD\PDVDServ.exe" [2004-11-02 32768]
"Persistence"="c:\windows\system32\igfxpers.exe" [2009-03-13 142360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2009-03-13 141336]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2009-03-13 173592]
"Adobe Reader Speed Launcher"="c:\programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 40048]
"EEventManager"="c:\programmi\Epson Software\Event Manager\EEventManager.exe" [2011-10-31 1058400]
"SunJavaUpdateSched"="c:\programmi\File comuni\Java\Java Update\jusched.exe" [2014-12-17 508800]
.
c:\documents and settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
BTTray.lnk - c:\programmi\WIDCOMM\Bluetooth Software\BTTray.exe [2008-3-31 576104]
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]
@=""
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Programmi\\DNA\\btdna.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Programmi\\Google\\Chrome\\Application\\chrome.exe"=
"c:\\Programmi\\Briscola\\BriscolaChiamata.exe"=
"c:\\Documents and Settings\\Administrator\\Desktop\\xdccMule\\mIRC.exe"=
"c:\\Programmi\\BitTorrent\\bittorrent.exe"=
"c:\\Programmi\\EPSON Software\\ECPrinterSetup\\ENPApp.exe"=
"c:\\Programmi\\EPSON Software\\Event Manager\\EEventManager.exe"=
"c:\\Programmi\\eMule AdunanzA\\eMule_AdnzA.exe"=
.
R0 SFAUDIO;Sonic Focus DSP Driver;c:\windows\system32\drivers\sfaudio.sys [28/03/08 9.14.02 24064]
R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;c:\programmi\File comuni\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [14/05/09 5.07.14 759048]
R2 EpsonScanSvc;Epson Scanner Service;c:\windows\system32\escsvc.exe [09/01/15 11.40.11 122000]
R2 MyEpson Portal Service;MyEpson Portal Service;c:\programmi\epson\MyEpson Portal\mepService.exe [22/09/14 11.37.34 703984]
S2 9bae4c61;SystemAide;c:\windows\system32\rundll32.exe [01/06/07 10.00.00 33280]
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-02-19 21:41 1084744 ----a-w- c:\programmi\Google\Chrome\Application\40.0.2214.115\Installer\chrmstp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{A509B1FF-37FF-4bFF-8CFF-4F3A747040FF}]
2009-03-08 02:32 128512 ----a-w- c:\windows\system32\advpack.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
2007-07-28 13:53 1230848 ----a-w- c:\programmi\Windows Sidebar\sidebar.exe
.
Contenuto della cartella 'Scheduled Tasks'
.
2015-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2014-10-28 23:18]
.
2015-03-09 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\programmi\Google\Update\GoogleUpdate.exe [2014-10-28 23:18]
.
2015-03-09 c:\windows\Tasks\User_Feed_Synchronization-{86C5C5B6-654B-4D12-86AE-BB52DB5BF55A}.job
- c:\windows\system32\msfeedssync.exe [2007-06-01 02:31]
.
.
------- Scansione supplementare -------
.
uStart Page = hxxp://www.google.com
uDefault_Search_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
uSearchAssistant = hxxp://www.google.com
IE: E&sporta in Microsoft Excel - c:\progra~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
IE: Invia a Bluetooth - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Invia a periferica &Bluetooth... - c:\programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
TCP: DhcpNameServer = 192.168.1.254 62.101.93.101 83.103.25.250
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2015-03-09 22:17
Windows 5.1.2600 Service Pack 3 NTFS
.
scansione processi nascosti ...
.
scansione entrate autostart nascoste ...
.
Scansione files nascosti ...
.
Scansione completata con successo
Files nascosti: 0
.
**************************************************************************
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_USERS\S-1-5-21-1659004503-515967899-725345543-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,69,fd,6a,40,85,54,0f,43,81,23,49,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,69,fd,6a,40,85,54,0f,43,81,23,49,\
.
[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\•€|ÿÿÿÿ"•€|þ»Ñw*]
"0140110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- Dlls caricate dai processi in esecuzione ---------------------
.
- - - - - - - > 'explorer.exe'(3908)
c:\windows\system32\WININET.dll
c:\windows\system32\btmmhook.dll
c:\windows\system32\webcheck.dll
.
------------------------ Altri processi in esecuzione ------------------------
.
c:\programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
c:\windows\System32\SCardSvr.exe
c:\programmi\Google\Update\1.3.26.9\GoogleCrashHandler.exe
c:\windows\system32\igfxsrvc.exe
c:\progra~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
c:\programmi\File comuni\EPSON\EBAPI\eEBSVC.exe
c:\windows\system32\agrsmsvc.exe
c:\programmi\Java\jre7\bin\jqs.exe
c:\windows\system32\wdfmgr.exe
c:\programmi\EPSON\MyEpson Portal\mep.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Ora fine scansione: 2015-03-09 22:18:50 - Il pc è stato riavviato
ComboFix-quarantined-files.txt 2015-03-09 21:18
.
Pre-Run: 104.947.945.472 byte disponibili
Post-Run: 104.811.126.784 byte disponibili
.
- - End Of File - - 13FF4BB0B96429485A284CB5F6D53CB5
828E02D5C4A4FBE53441EE9DBEE51F43