e per finire...
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\background.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\background.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\background_pause.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\background_pause.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\bonus_text.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_clear.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_clear.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_menu.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_menu.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_ok.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_ok.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_pause.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_pause.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_restart.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_restart.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_shuffle.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_shuffle.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_skip.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_skip.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_submit.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\button_submit.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\click_to_continue.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_double.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_double.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_joker.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_joker.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal1.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal2.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal2.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal3.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_normal3.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_reveal.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_reveal.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_slot.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_slot.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_slot_mask.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_time.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_time.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_triple.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\coal_triple.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\door_loop.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\bonus_appear_spark.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\coal_spark_glow1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\coal_spark_glow2.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\coal_spark1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\coal_spark2.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\coal_spark3.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\score_glow.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\score_star.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\effects\score_star.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_2_3.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_2_3.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_joker.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_joker.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_reveal.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_reveal.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_time.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_light_time.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_open.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\furnace_open.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\gui\button_glow_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\gui\button_no.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\gui\button_no.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\gui\button_yes.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\gui\button_yes.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_anagrams.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_anagrams.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_blink.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_classic6.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_classic6.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_replace.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\hud_replace.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\anagrams.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\anagrams.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\classic6.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\classic6.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\replace.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\levelend\replace.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_icons_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_lid.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_lid.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_nails.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_nails.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_speck_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_spiral1.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_spiral1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_spiral2.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lid_spiral2.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lose_background.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lose_background.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lose_text.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\lose_text.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_go_deluxe.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_go_deluxe.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_help.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_help.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_resume.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_resume.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_sound.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\menu_sound.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_new_slot.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_button.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_button.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_left.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_left.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_right.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_scroll_right.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_sel_slot.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_slot.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_slot_border_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\queue_slot_fill_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\speaker_off.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\speaker_on.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\speaker_on.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\timer.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\1_bar.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\background1.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\background2.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\background3.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\flag_blue.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\flag_blue.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\flagpole.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train_dark.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train_dark.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train_glow.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train2.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\mini_train2.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\opponent.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\opponent.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\opponent_shadow.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\opponent_shadow.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\perron1.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\perron1.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\smoke.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\smoke.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\station.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\station.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\train.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\train.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\train_shadow.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\train_shadow.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\wheel.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\train\wheel.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\wheel.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\wheel.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\win_background.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\win_background.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\win_text.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\gamescene\win_text.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\loadingscene\background.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\loadingscene\loadingbar_full.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\loadingscene\play_.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\loadingscene\splash_button.jpg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\images\loadingscene\url_splash.png
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\default.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\dialogs.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\dynamic.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\gamesettings.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\letterfreqs.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\names.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\resources.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\properties\text.xml
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\bonus_coal_appears.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\bonus_coal_is_used.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\button.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\button_clicked_in_dialog.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\checkbox_check.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\checkbox_off.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\checkbox_on.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\checkbox_uncheck.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\coal_reaches_furnace_fire.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\coin_appears_at_the_end_of_a_level.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\coin_deducted_(construction_cost).ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\coin_reaches_the_coin_counter.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\correct_word_submitted_3_letters.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\correct_word_submitted_4_letters.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\correct_word_submitted_5_letters.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\correct_word_submitted_6_or_7_letters.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\dialog_closes.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\dialog_opens.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\furnace_door_closed.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\furnace_door_opened.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\furnace_wheel_turns.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\hint_dialog_closed.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\hint_dialog_opens.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Game_Over.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Highscore_Reached.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Level_Lost.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Level_Won.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Map_Section_Cleared.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\JINGLE_Trophy_Unlocked.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\key_is_pressed_in_dialog.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letter_is_cancelled.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letter_is_typed.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letter_is_typed_unavailable.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letter_reaches_the_word_list.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letter_revealed_(after_using_reveal_bonus_coal).ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\letters_are_shuffled.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\map_screen_item_appears_variation_1.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\map_screen_item_appears_variation_2.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\map_screen_item_appears_variation_3.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\mapsection_to_mapsection_scroll.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\mission_or_level_starts.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\opponent_train_passes_your_train.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\opponent_train_stops_(extra_time_bonus).ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\opponents_train_starts_moving_again.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\pause.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\pawn_arrives_at_next_station.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\pawn_moves_to_next_station_LOOP.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\placeholder.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\score_counter.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\screen_transition_(map_to_game_and_back).ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_1.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_2.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_3.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_4.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_5.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_6.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\slider_7.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\statistics_stars.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\stop_game.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\successful word submitted.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\tick.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\ticket_appears_on_map_scene.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\ticket_is_closed_on_map_scene.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\ticket_is_opened_on_map_scene.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\track_construction_finished.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\track_is_bought_(construction)_LOOP.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_0.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_1.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_2.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_3.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_4.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_5.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_move_6.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\train_stops_moving.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\trophy_moves_to_its_position.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\trophy_unlocked_star_explosion.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\turbo_appears.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\turbo_bonus_coal_is_used.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\unpause.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\wrong_button_clicked.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\wrong_word_already_made_this_word.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\wrong_word_submitted.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\you_pass_opponents_train.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\zylom_logo_anim.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\media\sound\zylom_tune.ogg
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\test
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\textexpress2\it-IT\textexpress2.dll
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\ZylomDeluxeInstaller\_version.bin
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\ZylomDeluxeInstaller\ZylomDeluxeInstaller.dll
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\ZylomExtension\_version.bin
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\ZylomExtension\HardwareTest.exe
C:\Documents and Settings\All Users\Dati applicazioni\Zylom\ZylomGamesPlayer\zylom\ZylomExtension\ZylomExtension.dll
C:\Programmi\prmzbfd
C:\Programmi\prmzbfd\SmartInfo.dll
C:\WINDOWS\system32\enqjgbir.exe
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_LREDBOOO
-------\Service_lredbooo
((((((((((((((((((((((((( Files Creati Da 2008-08-09 al 2008-09-09 )))))))))))))))))))))))))))))))))))
.
2008-09-09 21:05 . 2008-09-09 21:05 90,112 --a------ C:\WINDOWS\system32\alsjmlot.exe
2008-09-07 21:59 . 2008-09-07 21:59 <DIR> d-------- C:\Documents and Settings\IO\Dati applicazioni\Malwarebytes
2008-09-07 21:58 . 2008-09-07 21:59 <DIR> d-------- C:\Programmi\Malwarebytes' Anti-Malware
2008-09-07 21:58 . 2008-09-07 21:58 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2008-09-07 21:58 . 2008-09-02 00:16 38,528 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-09-07 21:58 . 2008-09-02 00:16 17,200 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-09-07 13:05 . 2008-09-07 13:05 90,112 --a------ C:\WINDOWS\system32\zatijclo.exe
2008-08-18 00:03 . 2008-08-18 00:03 <DIR> d-------- C:\Programmi\Microsoft Silverlight
2008-08-17 02:04 . 2008-08-17 02:04 <DIR> d-------- C:\Documents and Settings\All Users\Dati applicazioni\GameHouse
2008-08-10 06:03 . 2008-08-10 06:03 <DIR> d-------- C:\Programmi\iPod
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-07 20:00 --------- d-----w C:\Documents and Settings\All Users\Dati applicazioni\avg7
2008-08-22 17:39 --------- d-----w C:\Programmi\eMule
2008-08-18 02:01 --------- d-----w C:\Documents and Settings\IO\Dati applicazioni\Skype
2008-08-10 04:03 --------- d-----w C:\Programmi\iTunes
2008-07-29 16:20 --------- d-----w C:\Programmi\Activision
2008-07-29 10:27 --------- d-----w C:\Programmi\Java
2008-07-21 14:23 --------- d-----w C:\Programmi\QuickTime
2008-07-10 07:35 32,000 ----a-w C:\WINDOWS\system32\drivers\usbaapl.sys
2008-07-09 19:08 --------- d-----w C:\Documents and Settings\IO\Dati applicazioni\U3
2008-06-16 17:18 0 ----a-w C:\Programmi\temp01
2008-05-31 11:03 18,320 ----a-w C:\Documents and Settings\IO\Dati applicazioni\GDIPFONTCACHEV1.DAT
2007-02-13 23:29 32 ----a-r C:\Documents and Settings\All Users\hash.dat
2006-05-03 09:06 163,328 --sh--r C:\WINDOWS\system32\flvDX.dll
2007-02-21 10:47 31,232 --sh--r C:\WINDOWS\system32\msfDX.dll
2007-12-17 12:43 27,648 --sh--w C:\WINDOWS\system32\Smab0.dll
.
((((((((((((((((((((((((((((( snapshot@2008-09-08_22.54.40.82 )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-20 18:02:28 163,328 ----a-w C:\WINDOWS\erdnt\subs\ERDNT.EXE
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 15360]
"EPSON Stylus C64 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2003-05-27 99840]
"Nokia.PCSync"="C:\Programmi\Nokia\Nokia PC Suite 6\PCSync2.exe" [2008-03-26 1232896]
"EPSON Stylus DX5000 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIBVE.EXE" [2006-09-22 139264]
"MntHlp"="C:\WINDOWS\system32\alsjmlot.exe" [2008-09-09 90112]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SynTPLpr"="C:\Programmi\Synaptics\SynTP\SynTPLpr.exe" [2004-05-07 98304]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2004-05-07 536576]
"ATIPTA"="C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2004-08-12 339968]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 155648]
"RemoteControl"="C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe" [2003-10-31 32768]
"SunJavaUpdateSched"="C:\Programmi\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"SNPSTD2"="C:\WINDOWS\vsnpstd2.exe" [2004-08-30 286720]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe" [2008-04-18 579584]
"ATICCC"="C:\Programmi\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-09-25 90112]
"EPSON Stylus C64 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE" [2003-05-27 99840]
"BtTray"="C:\Programmi\IVT Corporation\BlueSoleil\BtTray.exe" [2008-05-12 227840]
"AppleSyncNotifier"="C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe" [2008-07-10 116040]
"QuickTime Task"="C:\Programmi\QuickTime\QTTask.exe" [2008-05-27 413696]
"iTunesHelper"="C:\Programmi\iTunes\iTunesHelper.exe" [2008-07-30 289064]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-19 C:\WINDOWS\system32\bthprops.cpl]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-19 15360]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVGFRE~1\avgw.exe" [2007-10-25 219136]
"Picasa Media Detector"="C:\Programmi\Picasa2\PicasaMediaDetector.exe" [2007-10-23 443968]
"Nokia.PCSync"="C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe" [2008-03-26 1232896]
C:\Documents and Settings\IO\Menu Avvio\Programmi\Esecuzione automatica\
.security [2008-09-07 0]
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
.security [2008-09-07 0]
Avvio veloce di Adobe Reader.lnk - C:\Programmi\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 29696]
Microsoft Office.lnk - C:\Programmi\Microsoft Office\Office10\OSA.EXE [2001-02-13 83360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.I420"= i420vfw.dll
"vidc.yv12"= yv12vfw.dll
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\StubInstaller.exe"=
"C:\\Programmi\\Grisoft\\AVG Free\\avginet.exe"=
"C:\\Programmi\\eMule\\emule.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"C:\\Programmi\\Grisoft\\AVG Free\\avgamsvr.exe"=
"C:\\Programmi\\Grisoft\\AVG Free\\avgcc.exe"=
"C:\\WINDOWS\\system32\\dpnsvr.exe"=
"C:\\WINDOWS\\system32\\dxdiag.exe"=
"C:\\Programmi\\File comuni\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"C:\\Programmi\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\livecall.exe"=
"C:\\WINDOWS\\system32\\dpvsetup.exe"=
"C:\\Programmi\\Ubisoft\\Tom Clancy's Splinter Cell Chaos Theory\\Utils\\Detection\\detectionui_r.exe"=
"C:\\Programmi\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Programmi\\IVT Corporation\\BlueSoleil\\BlueSoleilCS.exe"=
"C:\\Programmi\\iTunes\\iTunes.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"14139:TCP"= 14139:TCP:Emule TCP
"60442:UDP"= 60442:UDP:Emule Udp
"18653:TCP"= 18653:TCP:Limewire2
R0 BtHidBus;Bluetooth HID Bus Service;C:\WINDOWS\system32\Drivers\BtHidBus.sys [2008-01-21 21512]
R2 BlueSoleilCS;BlueSoleilCS;C:\Programmi\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [2008-05-12 766464]
R2 BsMobileCS;BsMobileCS;C:\Programmi\IVT Corporation\BlueSoleil\BsMobileCS.exe [2008-05-08 143467]
R3 BsHelpCS;BsHelpCS;C:\Programmi\IVT Corporation\BlueSoleil\BsHelpCS.exe [2008-05-08 69735]
R3 CONAN;CONAN;C:\WINDOWS\system32\drivers\o2mmb.sys [2004-02-12 191092]
R3 IvtBtBUs;IVT Bluetooth Bus Service;C:\WINDOWS\system32\Drivers\IvtBtBus.sys [2008-01-21 26248]
S3 hamachi_oem;PlayLinc Adapter;C:\WINDOWS\system32\DRIVERS\gan_adapter.sys [2006-10-19 10664]
S3 MbxStby;MbxStby;C:\WINDOWS\system32\drivers\MbxStby.sys [2004-01-28 6100]
S3 snpstd2;Trust WB-3100P Portable Webcam;C:\WINDOWS\system32\DRIVERS\snpstd2.sys [2004-10-14 347264]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{bc70a2e1-b3c4-11dc-b7d1-0012f021459b}]
\Shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Recycled\ctfmon.exe
\Shell\Open(&0)\command - Recycled\ctfmon.exe
.
Contenuto della cartella 'Scheduled Tasks'
.
- - - - ORFÇOS REMOVIDOS - - - -
SSODL-SmartInfo-{20BD2632-F774-3EC8-F72D-0441A95977A9} - C:\Programmi\prmzbfd\SmartInfo.dll
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.netRootkit scan 2008-09-09 21:39:49
Windows 5.1.2600 Service Pack 2 NTFS
scansione processi nascosti ...
scansione entrate autostart nascoste ...
Scansione files nascosti ...
Scansione completata con successo
Files nascosti: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\rundll32.exe
C:\Programmi\ATI Technologies\ATI.ACE\CLI.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
C:\Programmi\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclIVTBTSrv.exe
C:\Programmi\File comuni\Nokia\MPAPI\MPAPI3s.exe
C:\Programmi\ATI Technologies\ATI.ACE\CLI.exe
C:\Programmi\ATI Technologies\ATI.ACE\CLI.exe
.
**************************************************************************
.
Ora fine scansione: 2008-09-09 21:44:24 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-09 19:44:18
ComboFix2.txt 2008-09-08 20:55:20
Pre-Run: 35,630,862,336 byte disponibili
Post-Run: 35,557,175,296 byte disponibili
1609 --- E O F --- 2008-08-17 01:09:21