ciao shel.. granzie, e questi sono i due log
otl.txt:
OTL logfile created on: 24.03.2014 11:58:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\valentina\Documenti\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000810 | Country: Svizzera | Language: ITS | Date Format: dd.MM.yyyy
1014.20 Mb Total Physical Memory | 130.13 Mb Available Physical Memory | 12.83% Memory free
2.38 Gb Paging File | 1.53 Gb Available in Paging File | 64.32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi
Drive C: | 149.04 Gb Total Space | 127.75 Gb Free Space | 85.71% Space Free | Partition Type: NTFS
Drive E: | 29.26 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: SABLONE | User Name: valentina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
========== Processes (SafeList) ========== PRC - C:\Documents and Settings\valentina\Documenti\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programmi\ExpressFiles\EFUpdater.exe ()
PRC - C:\Programmi\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Programmi\cacaoweb\cacaoweb.exe ()
PRC - C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Programmi\ESET\ESET Smart Security\ekrn.exe (ESET)
PRC - C:\Programmi\ESET\ESET Smart Security\egui.exe (ESET)
PRC - C:\Programmi\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
PRC - C:\WINDOWS\system32\PersistenceThread.exe (Intel Corporation)
PRC - C:\Programmi\Mobile Partner\Mobile Partner.exe ()
PRC - C:\Programmi\Option\Acer 3G Connection Manager\GtDetectSc.exe (OptionNV)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (SafeNet, Inc)
========== Modules (No Company Name) ========== MOD - c:\Documents and Settings\valentina\Impostazioni locali\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp8m1xpv.dll ()
MOD - C:\Programmi\ExpressFiles\EFUpdater.exe ()
MOD - C:\Programmi\Google\Chrome\Application\33.0.1750.154\ppgooglenaclpluginchrome.dll ()
MOD - C:\Programmi\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
MOD - C:\Programmi\Google\Chrome\Application\33.0.1750.154\ffmpegsumo.dll ()
MOD - C:\Programmi\Google\Chrome\Application\33.0.1750.154\chrome_elf.dll ()
MOD - C:\Programmi\cacaoweb\cacaoweb.exe ()
MOD - C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\wxmsw28uh_vc.dll ()
MOD - C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\libcef.dll ()
MOD - C:\Programmi\Mobile Partner\DeviceMgrPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\DeviceMgrUIPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\NDISAPI.dll ()
MOD - C:\Programmi\Mobile Partner\NetInfoPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\Mobile Partner.exe ()
MOD - C:\Programmi\Mobile Partner\LocaleMgrPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\SMSPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\NotifyServicePlugin.dll ()
MOD - C:\Programmi\Mobile Partner\ConfigFilePlugin.dll ()
MOD - C:\Programmi\Mobile Partner\CallPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\DialUpPlugin.dll ()
MOD - C:\Programmi\Mobile Partner\DetectDev.dll ()
MOD - C:\Programmi\Mobile Partner\XCodec.dll ()
MOD - C:\Programmi\Mobile Partner\DeviceOperate.dll ()
MOD - C:\Programmi\Mobile Partner\atcomm.dll ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Programmi\Mobile Partner\isaputrace.dll ()
MOD - C:\Programmi\Mobile Partner\FileManager.dll ()
========== Services (SafeList) ========== SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (FLEXnet Licensing Service) -- C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Macrovision Europe Ltd.)
SRV - (MBAMService) -- C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (ekrn) -- C:\Programmi\ESET\ESET Smart Security\ekrn.exe (ESET)
SRV - (odserv) -- C:\Programmi\File comuni\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (GtDetectSc) -- C:\Programmi\Option\Acer 3G Connection Manager\GtDetectSc.exe (OptionNV)
SRV - (ose) -- C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (SentinelProtectionServer) -- C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (SafeNet, Inc)
========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (BTWUSB) -- C:\WINDOWS\system32\drivers\btwusb.sys (Broadcom Corporation.)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Epfwndis) -- C:\WINDOWS\system32\drivers\epfwndis.sys (ESET)
DRV - (eamon) -- C:\WINDOWS\system32\drivers\eamon.sys (ESET)
DRV - (epfw) -- C:\WINDOWS\system32\drivers\epfw.sys (ESET)
DRV - (epfwtdi) -- C:\WINDOWS\system32\drivers\epfwtdi.sys (ESET)
DRV - (ehdrv) -- C:\WINDOWS\system32\drivers\ehdrv.sys (ESET)
DRV - (ewusbnet) -- C:\WINDOWS\system32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\WINDOWS\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (hwusbdev) -- C:\WINDOWS\system32\drivers\ewusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (SCDEmu) -- C:\WINDOWS\System32\drivers\scdemu.sys (PowerISO Computing, Inc.)
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (BCM43XX) -- C:\WINDOWS\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Sentinel) -- C:\WINDOWS\system32\drivers\sentinel.sys (SafeNet, Inc.)
========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.comIE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://www.qone8.com/web/?type=ds&ts=13 ... ESYKMAX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page =
http://www.qone8.com/web/?type=ds&ts=13 ... ESYKMAX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.comIE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\Software\Microsoft\Internet Explorer\SearchURL\g, =
http://www.google.com/search?q=%s
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchURL\g, =
http://www.google.com/search?q=%s
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchURL\g, =
http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://www.google.comIE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.comIE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\Software\Microsoft\Internet Explorer\SearchURL\g, =
http://www.google.com/search?q=%s
IE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" =
http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programmi\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programmi\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmi\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmi\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programmi\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Programmi\ESET\ESET Smart Security\Mozilla Thunderbird [2014.02.10 17:21:41 | 000,000,000 | ---D | M]
========== Chrome ========== CHR - default_search_provider: qone8 (Enabled)
CHR - default_search_provider: search_url =
http://www.qone8.com/web/?type=ds&ts=13 ... ESYKMAX&q={searchTerms}
CHR - default_search_provider: suggest_url = ,
CHR - homepage:
http://start.qone8.com/?type=hp&ts=1395 ... 15CESYKMAXCHR - plugin: Error reading preferences file
CHR - Extension: Documenti Google = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0\
CHR - Extension: Google Drive = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Ricerca Google = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: cacaoweb = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\gebbadcnkcgcfgpbmcdleckpejgopimf\1.19_0\
CHR - Extension: Google Wallet = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
O1 HOSTS File: ([2001.09.01 15:00:00 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [Adobe ARM] C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [egui] C:\Programmi\ESET\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [PersistenceThread] C:\WINDOWS\system32\PersistenceThread.exe (Intel Corporation)
O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Programmi\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.)
O4 - HKU\S-1-5-21-507921405-1644491937-1275210071-1004..\Run: [cacaoweb] C:\Programmi\cacaoweb\cacaoweb.exe ()
O4 - HKU\.DEFAULT..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-18..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - HKU\S-1-5-20..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 File not found
O4 - Startup: C:\Documents and Settings\valentina\Menu Avvio\Programmi\Esecuzione automatica\Dropbox.lnk = C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 149
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-507921405-1644491937-1275210071-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.13.173.94 62.13.173.95
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{AAC50D1D-E2D6-4FF5-A271-22EB51EEBB6E}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B9CF7CF5-3E54-4810-8437-BF11E02614A3}: DhcpNameServer = 62.13.173.94 62.13.173.95
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programmi\File comuni\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igdlogin: DllName - (igdlogin.dll) - C:\WINDOWS\System32\igdlogin.dll ()
O24 - Desktop Components:0 (Pagina iniziale corrente) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Colline.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Colline.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2014.01.11 12:11:42 | 000,000,000 | ---D | M] - C:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2014.01.11 10:34:18 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.08.26 03:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.) - E:\AutoRun.exe -- [ CDFS ]
O32 - AutoRun File - [2008.03.07 01:34:52 | 000,000,047 | R--- | M] () - E:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{37677b62-7aba-11e3-a7ef-00269e427cf3}\Shell - "" = AutoRun
O33 - MountPoints2\{37677b62-7aba-11e3-a7ef-00269e427cf3}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{5b39eb01-878e-11e3-a811-00269e427cf3}\Shell - "" = AutoRun
O33 - MountPoints2\{5b39eb01-878e-11e3-a811-00269e427cf3}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2009.08.26 03:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{98860da2-7d0b-11e3-a7f9-00269e427cf3}\Shell - "" = AutoRun
O33 - MountPoints2\{98860da2-7d0b-11e3-a7f9-00269e427cf3}\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2009.08.26 03:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O33 - MountPoints2\{c0442542-7aa9-11e3-a7e8-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{c0442542-7aa9-11e3-a7e8-806d6172696f}\Shell\AutoRun\command - "" = D:\setup.exe
O33 - MountPoints2\{e2481446-7aa6-11e3-a7ea-9291355f12cf}\Shell - "" = AutoRun
O33 - MountPoints2\{e2481446-7aa6-11e3-a7ea-9291355f12cf}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{e2481449-7aa6-11e3-a7ea-c89af6299019}\Shell - "" = AutoRun
O33 - MountPoints2\{e2481449-7aa6-11e3-a7ea-c89af6299019}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{fe4aaebe-a370-11e3-a855-00269e427cf3}\Shell\AutoRun\command - "" = E:\RunClubSanDisk.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\AutoRun.exe -- [2009.08.26 03:42:34 | 000,143,360 | R--- | M] (Huawei Technologies Co., Ltd.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 60 Days ========== [2014.03.22 23:06:27 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\Malwarebytes
[2014.03.22 23:06:21 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes' Anti-Malware
[2014.03.22 23:06:19 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2014.03.22 23:06:19 | 000,000,000 | ---D | C] -- C:\Programmi\Malwarebytes' Anti-Malware
[2014.03.22 23:03:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\SupTab
[2014.03.22 23:02:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
[2014.03.22 23:01:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\WPM
[2014.03.22 23:00:12 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\qone8
[2014.03.22 22:57:38 | 000,000,000 | ---D | C] -- C:\Programmi\ExpressFiles
[2014.03.22 22:57:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\ExpressFiles
[2014.03.22 20:53:19 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Microsoft Silverlight
[2014.03.22 20:51:07 | 000,000,000 | ---D | C] -- C:\Programmi\Microsoft Silverlight
[2014.03.21 08:51:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\rif project
[2014.03.13 13:06:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\Google
[2014.03.13 12:55:40 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Google Earth
[2014.03.09 18:19:21 | 001,952,512 | ---- | C] (Broadcom Corporation) -- C:\WINDOWS\System32\drivers\BCMWL5.SYS
[2014.03.07 18:46:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\spalato
[2014.03.04 08:20:58 | 000,000,000 | ---D | C] -- C:\Programmi\SafeNet Sentinel
[2014.03.04 08:20:58 | 000,000,000 | ---D | C] -- C:\Programmi\File comuni\SafeNet Sentinel
[2014.03.04 08:13:11 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\Computers and Structures
[2014.03.04 08:11:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Computers and Structures
[2014.03.04 08:08:46 | 000,000,000 | ---D | C] -- C:\Programmi\Computers and Structures
[2014.03.01 20:54:57 | 000,000,000 | R--D | C] -- C:\Documents and Settings\valentina\Documenti\Dropbox
[2014.03.01 20:51:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\DropboxMaster
[2014.03.01 20:51:13 | 000,000,000 | ---D | C] -- C:\Programmi\Dropbox
[2014.03.01 20:50:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Menu Avvio\Programmi\Dropbox
[2014.03.01 20:48:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\Dropbox
[2014.02.28 16:48:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\prog strutt
[2014.02.25 19:54:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\design
[2014.02.24 16:34:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\cri
[2014.02.22 20:50:28 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Desktop\tavole
[2014.02.22 20:32:34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\cacaoweb
[2014.02.22 20:32:27 | 000,000,000 | ---D | C] -- C:\Programmi\cacaoweb
[2014.02.10 17:25:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\ESET
[2014.02.10 17:25:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\ESET
[2014.02.10 17:24:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\ESET
[2014.02.10 17:21:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\ESET
[2014.02.10 17:21:08 | 000,000,000 | ---D | C] -- C:\Programmi\ESET
[2014.02.10 17:21:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\ESET
[2014.02.05 20:17:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\valentina\Dati applicazioni\systweak
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\valentina\*.tmp files -> C:\Documents and Settings\valentina\*.tmp -> ]
========== Files - Modified Within 60 Days ========== [2014.03.24 11:55:05 | 000,489,556 | ---- | M] () -- C:\WINDOWS\System32\perfh010.dat
[2014.03.24 11:55:04 | 000,441,852 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2014.03.24 11:55:04 | 000,083,824 | ---- | M] () -- C:\WINDOWS\System32\perfc010.dat
[2014.03.24 11:55:03 | 000,070,968 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2014.03.24 11:47:34 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014.03.24 11:47:34 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express FilesUpdate.job
[2014.03.24 11:47:28 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014.03.24 11:30:11 | 000,001,136 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014.03.24 09:29:49 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2014.03.22 23:06:22 | 000,000,756 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2014.03.22 23:03:06 | 000,001,576 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Express Files.lnk
[2014.03.22 22:59:25 | 000,001,985 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2014.03.21 10:09:50 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014.03.20 08:45:52 | 000,011,429 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images (5).jpg
[2014.03.20 08:43:27 | 000,008,788 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images (4).jpg
[2014.03.20 08:41:18 | 000,008,481 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\download.jpg
[2014.03.20 08:27:50 | 000,009,419 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images (3).jpg
[2014.03.20 08:26:20 | 000,011,308 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images (2).jpg
[2014.03.20 08:20:11 | 000,009,811 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images (1).jpg
[2014.03.20 08:18:50 | 000,011,479 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\images.jpg
[2014.03.16 15:52:15 | 000,047,104 | ---- | M] () -- C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.03.07 11:05:47 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2014.03.04 08:22:35 | 000,000,350 | ---- | M] () -- C:\WINDOWS\System32\k0ln1mm.tgz
[2014.03.04 08:22:35 | 000,000,114 | ---- | M] () -- C:\WINDOWS\System32\prsgrc.tgz
[2014.03.04 08:22:35 | 000,000,100 | ---- | M] () -- C:\WINDOWS\System32\prsgrc.dll
[2014.03.04 08:22:35 | 000,000,086 | ---- | M] () -- C:\WINDOWS\System32\ssprs.tgz
[2014.03.04 08:13:13 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\grcauth2.dll
[2014.03.04 08:13:13 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\grcauth1.dll
[2014.03.04 08:12:53 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\lcgnscb.tgz
[2014.03.04 08:12:53 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\lcgnscb.dll
[2014.03.04 08:12:40 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\clauth2.dll
[2014.03.04 08:12:40 | 000,001,024 | ---- | M] () -- C:\WINDOWS\System32\clauth1.dll
[2014.03.04 08:12:40 | 000,000,072 | ---- | M] () -- C:\WINDOWS\System32\ssprs.dll
[2014.03.04 08:12:00 | 000,001,792 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SAP2000 14.lnk
[2014.03.01 20:54:57 | 000,001,015 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\Dropbox.lnk
[2014.03.01 20:52:12 | 000,001,045 | ---- | M] () -- C:\Documents and Settings\valentina\Menu Avvio\Programmi\Esecuzione automatica\Dropbox.lnk
[2014.02.17 18:17:50 | 000,035,346 | ---- | M] () -- C:\Documents and Settings\valentina\Desktop\CALENDARIO 2° semestre INTEGRATO.pdf
[2014.02.06 12:58:56 | 000,342,624 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\Documents and Settings\valentina\*.tmp files -> C:\Documents and Settings\valentina\*.tmp -> ]
========== Files Created - No Company Name ========== [2014.03.22 23:06:22 | 000,000,756 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2014.03.22 22:58:20 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\Express FilesUpdate.job
[2014.03.22 22:58:19 | 000,001,576 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Express Files.lnk
[2014.03.20 08:45:51 | 000,011,429 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images (5).jpg
[2014.03.20 08:43:26 | 000,008,788 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images (4).jpg
[2014.03.20 08:41:20 | 000,008,481 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\download.jpg
[2014.03.20 08:27:49 | 000,009,419 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images (3).jpg
[2014.03.20 08:26:19 | 000,011,308 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images (2).jpg
[2014.03.20 08:20:10 | 000,009,811 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images (1).jpg
[2014.03.20 08:18:48 | 000,011,479 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\images.jpg
[2014.03.15 16:28:27 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Adobe Reader XI.lnk
[2014.03.04 08:16:03 | 000,066,896 | ---- | C] () -- C:\WINDOWS\System\lsvbwrap.dll
[2014.03.04 08:12:53 | 000,001,024 | ---- | C] () -- C:\WINDOWS\System32\lcgnscb.tgz
[2014.03.04 08:12:00 | 000,001,792 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\SAP2000 14.lnk
[2014.03.01 20:54:57 | 000,001,015 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\Dropbox.lnk
[2014.03.01 20:52:12 | 000,001,045 | ---- | C] () -- C:\Documents and Settings\valentina\Menu Avvio\Programmi\Esecuzione automatica\Dropbox.lnk
[2014.02.05 12:43:56 | 000,035,346 | ---- | C] () -- C:\Documents and Settings\valentina\Desktop\CALENDARIO 2° semestre INTEGRATO.pdf
[2014.01.18 15:38:24 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014.01.12 08:53:33 | 000,197,240 | ---- | C] () -- C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\FontCache3.0.0.0.dat
[2014.01.11 12:58:20 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\RtNicProp32.dll
[2014.01.11 12:56:25 | 000,004,343 | ---- | C] () -- C:\WINDOWS\System32\lpgun.ini
[2014.01.11 12:56:15 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\igdlogin.dll
[2014.01.11 11:34:09 | 000,667,136 | ---- | C] () -- C:\WINDOWS\System32\OGACheckControl.dll
[2014.01.11 11:34:09 | 000,323,072 | ---- | C] () -- C:\WINDOWS\System32\WgaTray.exe
[2014.01.11 11:34:09 | 000,190,976 | ---- | C] () -- C:\WINDOWS\System32\WgaLogon.dll
[2014.01.11 11:20:15 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2014.01.11 11:18:54 | 000,342,624 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2014.01.11 10:58:01 | 000,000,086 | ---- | C] () -- C:\Documents and Settings\valentina\DelC5C.bat
[2014.01.11 10:51:02 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2014.01.11 10:30:01 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2014.01.11 08:44:02 | 000,047,104 | ---- | C] () -- C:\Documents and Settings\valentina\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014.01.11 08:40:55 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
========== ZeroAccess Check ========== [2014.01.11 10:37:22 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 02:13:52 | 001,499,136 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2008.04.14 02:13:40 | 000,472,064 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008.04.14 02:13:58 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ========== [2014.01.11 12:27:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Autodesk
[2014.02.10 17:21:08 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\ESET
[2014.03.24 11:45:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\WPM
[2014.01.11 12:27:48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\Autodesk
[2014.03.22 20:44:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\cacaoweb
[2014.03.24 11:54:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\Dropbox
[2014.03.01 20:54:55 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\DropboxMaster
[2014.02.10 17:25:05 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\ESET
[2014.03.22 23:04:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\ExpressFiles
[2014.03.22 23:00:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\qone8
[2014.03.24 11:45:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\SupTab
[2014.02.10 17:07:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\systweak
[2014.01.14 07:41:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\valentina\Dati applicazioni\UDC Profiles
========== Purity Check ========== < End of report >
Extras.txt:
OTL Extras logfile created on: 24.03.2014 11:58:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\valentina\Documenti\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000810 | Country: Svizzera | Language: ITS | Date Format: dd.MM.yyyy
1014.20 Mb Total Physical Memory | 130.13 Mb Available Physical Memory | 12.83% Memory free
2.38 Gb Paging File | 1.53 Gb Available in Paging File | 64.32% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi
Drive C: | 149.04 Gb Total Space | 127.75 Gb Free Space | 85.71% Space Free | Partition Type: NTFS
Drive E: | 29.26 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: SABLONE | User Name: valentina | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-507921405-1644491937-1275210071-1004\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Directory [AddToPlaylistVLC] -- "C:\Programmi\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programmi\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\Network Diagnostic\xpnetdiag.exe" = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000 -- (Microsoft Corporation)
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programmi\Microsoft Office\Office12\OUTLOOK.EXE" = C:\Programmi\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"C:\Programmi\Microsoft Office\Office12\GROOVE.EXE" = C:\Programmi\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"C:\Programmi\Microsoft Office\Office12\ONENOTE.EXE" = C:\Programmi\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Programmi\cacaoweb\cacaoweb.exe" = C:\Programmi\cacaoweb\cacaoweb.exe:*:Enabled:cacaoweb -- ()
"C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\valentina\Dati applicazioni\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)
"C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe" = C:\Programmi\File comuni\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe:*:Enabled:Sentinel Protection Server -- (SafeNet, Inc)
"C:\Programmi\ExpressFiles\expressdl.exe" = C:\Programmi\ExpressFiles\expressdl.exe:*:Enabled:Express Files -- (
http://www.express-files.com/)"C:\Programmi\ExpressFiles\ExpressFiles.exe" = C:\Programmi\ExpressFiles\ExpressFiles.exe:*:Enabled:Express Files -- (
http://www.express-files.com/) ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1479472D-3FF7-450C-BC31-FC4F40405FFD}" = ESET Smart Security
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = Atheros Driver Installation Program
"{350C9410-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{404C18ED-873A-4191-BA03-30F627445418}" = Sentinel Protection Installer 7.3.0
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{55CA4086-0D2C-30E3-A7B5-C76BA737CECE}" = Microsoft .NET Framework 3.5 Language Pack SP1 - ita
"{5783F2D7-8001-0410-0002-0060B0CE6BBA}" = AutoCAD 2010 - Italiano
"{5783F2D7-8001-0410-1002-0060B0CE6BBA}" = Language Pack di AutoCAD 2010 - Italiano
"{65813DA6-6F37-42F9-97BE-3D02B80A8920}" = Acer 3G Connection Manager
"{72EF03F5-0507-4861-9A44-D99FD4C41417}" = Paint.NET v3.5.11
"{7314A846-10ED-4BF6-B084-D359E9D4B89C}" = SAP2000 14
"{8054D734-39C7-463D-B764-9C883982B8F9}" = VC_CRT_x86
"{842F9881-E181-30B3-A152-008D61433274}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - ITA
"{86BA3130-5938-3192-BBCF-6B0A2D86FA58}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - ITA
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{90120000-0010-0410-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Italian) 12
"{90120000-0015-0410-0000-0000000FF1CE}" = Microsoft Office Access MUI (Italian) 2007
"{90120000-0015-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0410-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Italian) 2007
"{90120000-0016-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0410-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Italian) 2007
"{90120000-0018-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0410-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Italian) 2007
"{90120000-0019-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0410-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Italian) 2007
"{90120000-001A-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0410-0000-0000000FF1CE}" = Microsoft Office Word MUI (Italian) 2007
"{90120000-001B-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0410-0000-0000000FF1CE}" = Microsoft Office Proofing (Italian) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0044-0410-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Italian) 2007
"{90120000-0044-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0410-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Italian) 2007
"{90120000-006E-0410-0000-0000000FF1CE}_ENTERPRISE_{0A75DA12-55CB-4DE5-8B6A-74D97847204E}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0410-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Italian) 2007
"{90120000-00A1-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00BA-0410-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Italian) 2007
"{90120000-00BA-0410-0000-0000000FF1CE}_ENTERPRISE_{71CCE0F1-A3B4-49C9-A328-1DABE845E0C4}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1040-7B44-AB0000000001}" = Adobe Reader XI (11.0.06) - Italiano
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"AutoCAD 2010 - Italiano" = AutoCAD 2010 - Italiano
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Google Chrome" = Google Chrome
"LPCO" = Intel(R) Graphics Media Accelerator 500
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versione 1.75.0.1300
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - ita" = Microsoft .NET Framework 3.5 - Language Pack SP1 (italiano)
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mobile Partner" = Mobile Partner
"PowerISO" = PowerISO
"qone8 uninstaller" = qone8 uninstaller
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Universal Document Converter_is1" = Universal Document Converter Server Edition
"VLC media player" = VLC media player 1.1.10
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"WinRAR archiver" = WinRAR gestione archivi
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-507921405-1644491937-1275210071-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
========== Last 20 Event Log Errors ========== [ Application Events ]
Error - 09.03.2014 13:02:47 | Computer Name = SABLONE | Source = MsiInstaller | ID = 1013
Description = Prodotto: Intel(R) Network Connections -- Impossibile installare i
driver. Nessuna scheda Intel(R) presente sul computer.
[ System Events ]
Error - 01.03.2014 06:53:21 | Computer Name = SABLONE | Source = Dhcp | ID = 1002
Description = Il lease 10.82.143.124 dell'indirizzo IP della scheda di rete con
indirizzo 001E101FE948 è stato negato dal server DHCP 10.86.37.34. Il server DHCP
ha inviato un messaggio DHCPNACK.
Error - 01.03.2014 07:48:16 | Computer Name = SABLONE | Source = Dhcp | ID = 1002
Description = Il lease 10.86.37.33 dell'indirizzo IP della scheda di rete con indirizzo
001E101FC3E9 è stato negato dal server DHCP 10.119.67.169. Il server DHCP ha inviato
un messaggio DHCPNACK.
Error - 01.03.2014 10:50:56 | Computer Name = SABLONE | Source = Dhcp | ID = 1002
Description = Il lease 10.119.67.171 dell'indirizzo IP della scheda di rete con
indirizzo 001E101F5329 è stato negato dal server DHCP 10.83.58.81. Il server DHCP
ha inviato un messaggio DHCPNACK.
Error - 01.03.2014 15:33:36 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7016
Description = Il servizio WebClient ha riportato lo stato non valido corrente 87.
Error - 01.03.2014 15:33:36 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7022
Description = Servizio WebClient bloccato in partenza.
Error - 02.03.2014 11:12:09 | Computer Name = SABLONE | Source = ACPIEC | ID = 327681
Description = \Device\ACPIEC: l'hardware del controller integrato (EC) non ha risposto
nei limiti del periodo di timeout. Ciò indica un errore dell'hardware o del firmware
del controller integrato oppure che un BIOS non all'altezza ha tentato di accedere
al controller integrato in modo errato. Il driver del controller integrato riproverà
eventualmente a effettuare la transizione non riuscita.
Error - 02.03.2014 11:14:17 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7016
Description = Il servizio WebClient ha riportato lo stato non valido corrente 87.
Error - 02.03.2014 11:14:17 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7022
Description = Servizio WebClient bloccato in partenza.
Error - 03.03.2014 15:40:03 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7016
Description = Il servizio WebClient ha riportato lo stato non valido corrente 87.
Error - 03.03.2014 15:40:03 | Computer Name = SABLONE | Source = Service Control Manager | ID = 7022
Description = Servizio WebClient bloccato in partenza.
< End of report >
.