potreste verificare il mio logfile?

[simonoir]

E' da un po' che qualche programma bastardo mi spara virus a raffica che Nod continua a bloccare, credo sia un tentativo di accesso che parte da System32... Spesso compare una finestra che dice "Il serverè occupato, passa a... termina..." e si apre Messengers. Poi c'è un'applicazione, certo TODO, che si chiude. Ho eliminato con HijackThis tre files con no name e ho riavviato però la finestra col server occupato mi si apre lo stesso.
Uso il firewall di windows XP, e ssitematicamente scannerizzo con ad adware, killBox, ccleaner.
Grazie!

Logfile of HijackThis v1.99.1
Scan saved at 13.30.50, on 03/06/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\windows\system32\svchost.exe
C:\Programmi\D-Link\Software Bluetooth\bin\btwdins.exe
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Programmi\Eset\nod32krn.exe
C:\Programmi\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\ScsiAccess.EXE
C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Programmi\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe
C:\Programmi\Eset\nod32kui.exe
C:\Programmi\Linksys Wireless-G USB Wireless Network Monitor\WUSB54Gv4.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe
C:\Programmi\Linksys Wireless-G USB Wireless Network Monitor\InfoMyCa.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\TEMP\nzmsda.exe
C:\Programmi\DNA\btdna.exe
C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Programmi\D-Link\Software Bluetooth\BTTray.exe
C:\Programmi\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\TWAIN_32\A4CIS\WATCH.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Programmi\File comuni\Logishrd\KHAL2\KHALMNPR.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\WinRAR\WinRAR.exe
C:\DOCUME~1\XP\IMPOST~1\Temp\Rar$EX00.875\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=488
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Programmi\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Programmi\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [WUSB54Gv4] C:\Programmi\Linksys Wireless-G USB Wireless Network Monitor\InvokeSvc3.exe
O4 - HKLM\..\Run: [VTtrayp] VTtrayp.exe
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] C:\Programmi\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [devenv] C:\WINDOWS\system\smvss.exe /w
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [nzmsda.exe] C:\WINDOWS\TEMP\nzmsda.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Programmi\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Programmi\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Startup: Watch.lnk = C:\WINDOWS\TWAIN_32\A4CIS\WATCH.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Logitech SetPoint.lnk = C:\Programmi\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: Aggiungi all'elenco di stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Toolband.dll/RC_AddToList.html
O8 - Extra context menu item: Anteprima Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Toolband.dll/RC_Preview.html
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\D-Link\Software Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Stampa ad alta velocità Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Toolband.dll/RC_HSPrint.html
O8 - Extra context menu item: Stampa Easy-WebPrint - res://C:\Programmi\Canon\Easy-WebPrint\Toolband.dll/RC_Print.html
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\D-Link\Software Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\D-Link\Software Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupda ... 5082111671
O17 - HKLM\System\CCS\Services\Tcpip\..\{13F60B6B-F1EC-4798-8465-6843C96234D3}: NameServer = 193.70.192.25,193.70.152.25
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: LBTWlgn - c:\programmi\file comuni\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Programmi\D-Link\Software Bluetooth\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google
Updater\GoogleUpdaterService.exe
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Programmi\File comuni\Logitech\Bluetooth\LBTServ.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Programmi\Eset\nod32krn.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Programmi\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ScsiAccess - Unknown owner - C:\WINDOWS\system32\ScsiAccess.EXE
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Programmi\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: WUSB54Gv4SVC - Unknown owner - C:\Programmi\Linksys Wireless-G USB Wireless Network Monitor\WLService.exe" "WUSB54Gv4.exe (file missing)

[Luke57]

Ciao, scarica SDFix sul desktop
http://downloads.andymanchesta.com/Remo ... /SDFix.exe

scarica atf cleaner e mettilo sul desktop:
http://www.majorgeeks.com/ATF_Cleaner_d4949.html

Apri il taskmanager (ctrl+alt+canc), premi il tab Processi, se trovi
nzmsda.exe
evidenzialo e premi Termina processo.

Apri hijackthis, premi "do a system scan only", cerca e spunta le voci seguenti:
O4 - HKLM\..\Run: [devenv] C:\WINDOWS\system\smvss.exe /w
O4 - HKLM\..\Run: [nzmsda.exe] C:\WINDOWS\TEMP\nzmsda.exe

premi fix checked.

Chiudi il programma.

Doppio click sul file SDFix.exe e si estrarranno i files in C:\SDFix

Avvia in modalità provvisoria

Lancia Atfcleaner. (Una volta avviata l´applicazione selezionate “Select All” , nella barra del menù in alto vi compariranno anche le voci dei vostri browers, (Firofox o Opera) premete sulla voce di menu che riguarda il vostro browers e selezionate anche lì la casella “Select All“, (se volete mantenere le password deselezionate la rispettiva casella)premete sul pulsante “Empty selected” e attendete che vi venga mostrato il messaggio “Done Cleaning!).

Poi, sempre dalla modalità provvisoria, apri il disco C:\ e troverai la cartella SDFix, apri questa cartella e doppio click sul file RunThis.bat
Ti si apre il prompt Dos
Digita Y e dai l'invio
Attendi la fine della "scansione"
Premi un pulsante qualsiasi quando ti viene chiesto di riavviare
Al riavvio, continuerà la scansione, quando visualizzerai il messaggio "Finished" premi un pulsante qualsiasi e si caricherà il desktop e le relative icone.
Finito il caricamento si aprirà il block notes, chiudilo.
Allega poi il report
C:\SDFix\Report.txt

[simonoir]

Fatto. Speriamo bene...


SDFix: Version 1.187
Run by XP on 03/06/2008 at 17.11

Microsoft Windows XP [Versione 5.1.2600]
Running From: C:\SDFix

Checking Services :


Restoring Windows Registry Values
Restoring Windows Default Hosts File

Rebooting


Checking Files :

Trojan Files Found:

C:\WINDOWS\system\smvss.exe - Deleted





Removing Temp Files

ADS Check :



Final Check :

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-03 17:21:14
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


Remaining Services :




Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Programmi\\IncrediMail\\bin\\IMApp.exe"="C:\\Programmi\\IncrediMail\\bin\\IMApp.exe:*:Enabled:IncrediMail"
"C:\\Programmi\\IncrediMail\\bin\\IncMail.exe"="C:\\Programmi\\IncrediMail\\bin\\IncMail.exe:*:Enabled:IncrediMail"
"C:\\Programmi\\IncrediMail\\bin\\ImpCnt.exe"="C:\\Programmi\\IncrediMail\\bin\\ImpCnt.exe:*:Enabled:IncrediMail"
"C:\\Programmi\\MSN Messenger\\msncall.exe"="C:\\Programmi\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\My Downloads\\magentic_install.exe"="C:\\My Downloads\\magentic_install.exe:*:Enabled:IncrediMail Installer"
"C:\\Programmi\\eMule\\emule.exe"="C:\\Programmi\\eMule\\emule.exe:*:Enabled:eMule"
"C:\\Programmi\\MSN Messenger\\msnmsgr.exe"="C:\\Programmi\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Programmi\\MSN Messenger\\livecall.exe"="C:\\Programmi\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Programmi\\Magentic\\bin\\MgImp.exe"="C:\\Programmi\\Magentic\\bin\\MgImp.exe:*:Disabled:Magentic"
"C:\\Programmi\\Intuwave\\Shared\\mRouterRunTime\\mRouterRuntime.exe"="C:\\Programmi\\Intuwave\\Shared\\mRouterRunTime\\mRouterRuntime.exe:*:Enabled:mRouterRuntime"
"C:\\Programmi\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe"="C:\\Programmi\\Kodak\\KODAK Software Updater\\7288971\\Program\\Kodak Software Updater.exe:*:Enabled:Kodak Software Updater"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\8exmdnk50.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\8exmdnk50.exe:*:Disabled:8exmdnk50"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\55exmdnk50.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\55exmdnk50.exe:*:Disabled:55exmdnk50"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\69exmdnk50.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\69exmdnk50.exe:*:Disabled:69exmdnk50"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\85exmdnk50.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\85exmdnk50.exe:*:Disabled:85exmdnk50"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\49exmdnk50.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\49exmdnk50.exe:*:Disabled:49exmdnk50"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\88exmdnk51.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\88exmdnk51.exe:*:Disabled:88exmdnk51"
"C:\\Programmi\\Magentic\\bin\\Magentic.exe"="C:\\Programmi\\Magentic\\bin\\Magentic.exe:*:Enabled:Magentic"
"C:\\Programmi\\Magentic\\bin\\MgApp.exe"="C:\\Programmi\\Magentic\\bin\\MgApp.exe:*:Enabled:Magentic"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\81exmdnk51.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\81exmdnk51.exe:*:Disabled:81exmdnk51"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\55exmdnk51.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\55exmdnk51.exe:*:Disabled:55exmdnk51"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\23exmdnk51.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\23exmdnk51.exe:*:Disabled:23exmdnk51"
"C:\\Programmi\\BitTorrent\\bittorrent.exe"="C:\\Programmi\\BitTorrent\\bittorrent.exe:*:Disabled:BitTorrent"
"C:\\Programmi\\DNA\\btdna.exe"="C:\\Programmi\\DNA\\btdna.exe:*:Disabled:DNA"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\27exmdnk54.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\27exmdnk54.exe:*:Disabled:27exmdnk54"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\6exmdnk54.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\6exmdnk54.exe:*:Disabled:6exmdnk54"
"C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\17exmdnk56.exe"="C:\\Documents and Settings\\XP\\Impostazioni locali\\Temp\\17exmdnk56.exe:*:Disabled:17exmdnk56"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Programmi\\MSN Messenger\\msncall.exe"="C:\\Programmi\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
"C:\\Programmi\\MSN Messenger\\msnmsgr.exe"="C:\\Programmi\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Programmi\\MSN Messenger\\livecall.exe"="C:\\Programmi\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

Remaining Files :


File Backups: - C:\SDFix\backups\backups.zip

Files with Hidden Attributes :

Sat 18 Nov 2006 4,348 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv1.bak"
Sat 18 Nov 2006 401 ..SH. --- "C:\Documents and Settings\All Users\DRM\DRMv17.bak"
Tue 26 Dec 2006 0 A.SH. --- "C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp"
Thu 24 Feb 2005 49,664 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0001.tmp"
Fri 18 Jan 2008 45,568 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0005.tmp"
Thu 6 May 2004 47,616 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0298.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0386.tmp"
Fri 18 Jan 2008 46,592 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0387.tmp"
Wed 23 Feb 2005 53,760 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0488.tmp"
Fri 18 Jan 2008 45,568 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0885.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL0918.tmp"
Mon 21 Feb 2005 54,272 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1085.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1124.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1134.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1221.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1249.tmp"
Fri 18 Jan 2008 46,592 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1250.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1306.tmp"
Fri 18 Jan 2008 46,592 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1369.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1397.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1435.tmp"
Thu 22 Sep 2005 50,176 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1533.tmp"
Mon 21 Feb 2005 54,272 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1645.tmp"
Fri 18 Jan 2008 46,592 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL1735.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2014.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2036.tmp"
Mon 21 Feb 2005 54,272 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2039.tmp"
Fri 18 Jan 2008 46,080 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2053.tmp"
Thu 22 Sep 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2162.tmp"
Mon 21 Feb 2005 54,272 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2165.tmp"
Mon 21 Feb 2005 56,320 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2379.tmp"
Thu 22 Sep 2005 50,688 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2444.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2485.tmp"
Mon 21 Feb 2005 55,808 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL2634.tmp"
Mon 21 Feb 2005 55,296 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL3292.tmp"
Mon 21 Feb 2005 56,320 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL3529.tmp"
Tue 23 Nov 2004 103,936 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL3721.tmp"
Mon 21 Feb 2005 56,320 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\~WRL3823.tmp"
Thu 10 Feb 2005 1,009,664 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL0155.tmp"
Thu 10 Feb 2005 1,005,056 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL0193.tmp"
Wed 9 Feb 2005 1,003,520 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL0720.tmp"
Thu 10 Feb 2005 1,012,224 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL1003.tmp"
Thu 10 Feb 2005 1,007,616 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL1210.tmp"
Thu 10 Feb 2005 1,012,224 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL1496.tmp"
Thu 10 Feb 2005 1,011,712 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL2017.tmp"
Thu 10 Feb 2005 1,004,032 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL2281.tmp"
Thu 10 Feb 2005 1,010,176 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL2511.tmp"
Thu 10 Feb 2005 1,012,224 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL2574.tmp"
Thu 10 Feb 2005 1,008,128 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL3643.tmp"
Thu 10 Feb 2005 1,007,616 A..H. --- "C:\Documents and Settings\XP\Documenti\Unpostoalsole\~WRL3742.tmp"
Thu 8 May 2008 0 A..H. --- "C:\WINDOWS\SoftwareDistribution\Download\d080a4213f804f36545d041e7e75c1c9\BIT17.tmp"
Wed 11 Apr 2007 33,280 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL0540.tmp"
Wed 11 Apr 2007 42,496 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL1301.tmp"
Mon 14 May 2007 38,400 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL2042.tmp"
Wed 11 Apr 2007 41,472 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL2209.tmp"
Wed 11 Apr 2007 36,864 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL2825.tmp"
Wed 11 Apr 2007 37,888 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-ESSEDUE COMUNICAZIONE\ARTI ALLO SPECCHIO III ed\~WRL3068.tmp"
Thu 3 Feb 2005 41,984 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL0252.tmp"
Thu 3 Feb 2005 43,008 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL0254.tmp"
Thu 3 Feb 2005 41,984 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL0608.tmp"
Fri 18 Feb 2005 39,424 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL1029.tmp"
Thu 3 Feb 2005 42,496 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL1040.tmp"
Tue 27 Jul 2004 35,840 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL1070.tmp"
Thu 3 Feb 2005 43,008 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL1449.tmp"
Thu 3 Feb 2005 43,008 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL2070.tmp"
Thu 3 Feb 2005 41,984 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL2875.tmp"
Thu 3 Feb 2005 42,496 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL3105.tmp"
Thu 3 Feb 2005 41,984 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL3508.tmp"
Thu 3 Feb 2005 42,496 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL3543.tmp"
Thu 12 Feb 2004 33,280 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL3622.tmp"
Thu 3 Feb 2005 43,008 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\DONNE IN NOIR\~WRL3746.tmp"
Thu 10 Mar 2005 486,400 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL0662.tmp"
Fri 18 Mar 2005 487,936 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL1616.tmp"
Fri 18 Mar 2005 487,936 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL1971.tmp"
Fri 18 Mar 2005 488,448 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL1996.tmp"
Thu 19 May 2005 565,248 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL2483.tmp"
Fri 18 Mar 2005 488,448 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL2504.tmp"
Mon 23 May 2005 565,248 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL2968.tmp"
Mon 23 May 2005 565,248 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL3056.tmp"
Fri 18 Mar 2005 488,448 A..H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\OUROBOROS\~WRL3731.tmp"
Thu 12 Feb 2004 45,568 ...H. --- "C:\Documents and Settings\XP\Documenti\AAA-RACCONTI\PREMIO NOIR STORY 2005\~WRL0001.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL0005.tmp"
Fri 14 Jul 2006 28,160 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL0105.tmp"
Fri 14 Jul 2006 28,672 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL0108.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL0212.tmp"
Fri 14 Jul 2006 28,672 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL1126.tmp"
Fri 14 Jul 2006 26,112 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL1340.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL1545.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2003.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2161.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2261.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2278.tmp"
Fri 14 Jul 2006 24,576 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2766.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL2919.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL3182.tmp"
Fri 14 Jul 2006 25,088 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL3455.tmp"
Fri 14 Jul 2006 24,576 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL3483.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL3515.tmp"
Fri 14 Jul 2006 24,064 A..H. --- "C:\Documents and Settings\XP\Documenti\PREMI DA GIURATO\Scomessa d'autore\~WRL3865.tmp"

Finished!