View difference between Paste ID: V6CxafzZ and
SHOW: | | - or go back to the newest paste.
1-
1+
DDS (Ver_10-03-17.01) - NTFSx86  
2
Run by tonicooperi at 14.31.53,54 on 02/06/2010
3
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
4
Microsoft Windows XP Home Edition  5.1.2600.3.1252.39.1040.18.1012.80 [GMT 2:00]
5
6
AV: AntiVir Desktop *On-access scanning enabled* (Updated)   {00000002-0002-0000-6C25-9E7C08000A00}
7
AV: AntiVir Desktop *On-access scanning enabled* (Updated)   {00000002-0002-0000-7C25-9E7C08000A00}
8
FW: Sygate Personal Firewall *enabled*   {BE898FE3-CD0B-4014-85A9-03DB9923DDB6}
9
10
============== Running Processes ===============
11
12
C:\WINDOWS\system32\svchost -k DcomLaunch
13
svchost.exe
14
C:\WINDOWS\System32\svchost.exe -k netsvcs
15
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
16
C:\Programmi\Sygate\SPF\smc.exe
17
svchost.exe
18
svchost.exe
19
C:\WINDOWS\system32\spoolsv.exe
20
C:\Programmi\Avira\AntiVir Desktop\sched.exe
21
svchost.exe
22
C:\Programmi\Avira\AntiVir Desktop\avguard.exe
23
svchost.exe
24
C:\Programmi\File comuni\InterVideo\RegMgr\iviRegMgr.exe
25
C:\Programmi\Java\jre6\bin\jqs.exe
26
C:\Programmi\Sandboxie\SbieSvc.exe
27
C:\WINDOWS\system32\svchost.exe -k imgsvc
28
C:\WINDOWS\system32\wbem\wmiapsrv.exe
29
C:\WINDOWS\Explorer.EXE
30
C:\WINDOWS\system32\igfxtray.exe
31
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
32
C:\WINDOWS\system32\igfxsrvc.exe
33
C:\WINDOWS\system32\igfxpers.exe
34
C:\WINDOWS\RTHDCPL.EXE
35
C:\Programmi\Synaptics\SynTP\SynTPEnh.exe
36
C:\WINDOWS\system32\rundll32.exe
37
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
38
C:\Programmi\Avira\AntiVir Desktop\avgnt.exe
39
C:\WINDOWS\Samsung\PanelMgr\SSMMgr.exe
40
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
41
C:\Programmi\File comuni\Java\Java Update\jusched.exe
42
C:\Programmi\FreePDF_XP\fpassist.exe
43
C:\Programmi\File comuni\Nokia\MPlatform\NokiaMServer.exe
44
C:\WINDOWS\system32\SmartAssemblyHelper.exe
45
C:\WINDOWS\system32\DannyHost.exe
46
C:\Programmi\WebMoney Agent\wmagent.exe
47
C:\WINDOWS\system32\igfxext.exe
48
C:\Programmi\Skype\Phone\Skype.exe
49
C:\Programmi\Messenger\msmsgs.exe
50
C:\Programmi\DAEMON Tools Pro\DTProAgent.exe
51
C:\Programmi\ICQ6.5\ICQ.exe
52
C:\Programmi\Vidalia Bundle\Vidalia\vidalia.exe
53
C:\Programmi\Sandboxie\SbieCtrl.exe
54
C:\DOCUME~1\TONICO~1\IMPOST~1\Temp\RtkBtMnt.exe
55
C:\Programmi\InterVideo\Common\Bin\WinCinemaMgr.exe
56
C:\Documents and Settings\tonicooperi\Dati applicazioni\Dropbox\bin\Dropbox.exe
57
C:\Programmi\No-IP\DUC20.exe
58
C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE
59
C:\Programmi\Vidalia Bundle\Tor\tor.exe
60
C:\Programmi\Vidalia Bundle\Polipo\polipo.exe
61
C:\WINDOWS\system32\mdm.exe
62
C:\Programmi\Mozilla Firefox\firefox.exe
63
C:\Programmi\Skype\Toolbars\Shared\SkypeNames.exe
64
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
65
C:\Programmi\Skype\Plugin Manager\skypePM.exe
66
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
67
C:\Programmi\Windows Live\Contacts\wlcomm.exe
68
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
69
C:\Documents and Settings\tonicooperi\Desktop\dds.scr
70
71
============== Pseudo HJT Report ===============
72
73
uStart Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0410&s=0&o=xph&d=1109&m=aoa150
74
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\programmi\file comuni\adobe\acrobat\activex\AcroIEHelperShim.dll
75
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\programmi\microsoft office\office12\GrooveShellExtensions.dll
76
BHO: Guida per l'accesso a Windows Live: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\programmi\file comuni\microsoft shared\windows live\WindowsLiveLogin.dll
77
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\programmi\java\jre6\bin\jp2ssv.dll
78
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\programmi\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
79
uRun: [Skype] "c:\programmi\skype\phone\Skype.exe" /nosplash /minimized
80
uRun: [MSMSGS] "c:\programmi\messenger\msmsgs.exe" /background
81
uRun: [DAEMON Tools Pro Agent] "c:\programmi\daemon tools pro\DTProAgent.exe"
82
uRun: [ICQ] "c:\programmi\icq6.5\ICQ.exe" silent
83
uRun: [Vidalia] "c:\programmi\vidalia bundle\vidalia\vidalia.exe"
84
uRun: [SandboxieControl] "c:\programmi\sandboxie\SbieCtrl.exe"
85
mRun: [LaunchApp] Alaunch
86
mRun: [IgfxTray] c:\windows\system32\igfxtray.exe
87
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
88
mRun: [Persistence] c:\windows\system32\igfxpers.exe
89
mRun: [RTHDCPL] RTHDCPL.EXE
90
mRun: [AzMixerSel] c:\programmi\realtek\audio\installshield\AzMixerSel.exe
91
mRun: [SynTPEnh] c:\programmi\synaptics\syntp\SynTPEnh.exe
92
mRun: [IMJPMIG8.1] "c:\windows\ime\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
93
mRun: [MSPY2002] c:\windows\system32\ime\pintlgnt\ImScInst.exe /SYNC
94
mRun: [PHIME2002ASync] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /SYNC
95
mRun: [PHIME2002A] c:\windows\system32\ime\tintlgnt\TINTSETP.EXE /IMEName
96
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
97
mRun: [LManager] c:\progra~1\launch~1\QtZgAcer.EXE
98
mRun: [PLFSetL] c:\windows\PLFSetL.exe
99
mRun: [eRecoveryService] c:\acer\empowering technology\erecovery\eRAgent.exe
100
mRun: [avgnt] "c:\programmi\avira\antivir desktop\avgnt.exe" /min
101
mRun: [SmcService] c:\progra~1\sygate\spf\smc.exe -startgui
102
mRun: [Samsung PanelMgr] c:\windows\samsung\panelmgr\SSMMgr.exe /autorun
103
mRun: [GrooveMonitor] "c:\programmi\microsoft office\office12\GrooveMonitor.exe"
104
mRun: [SunJavaUpdateSched] "c:\programmi\file comuni\java\java update\jusched.exe"
105
mRun: [Adobe Reader Speed Launcher] "c:\programmi\adobe\reader 9.0\reader\Reader_sl.exe"
106
mRun: [Adobe ARM] "c:\programmi\file comuni\adobe\arm\1.0\AdobeARM.exe"
107
mRun: [FreePDF Assistant] c:\programmi\freepdf_xp\fpassist.exe
108
mRun: [NokiaMServer] c:\programmi\file comuni\nokia\mplatform\NokiaMServer /watchfiles startup
109
mRun: [QuickTime Task] "c:\programmi\quicktime\QTTask.exe" -atboottime
110
mRun: [SmartAssemblyHelper] "c:\windows\system32\SmartAssemblyHelper.exe"
111
mRun: [DannyHost] "c:\windows\system32\DannyHost.exe"
112
mRun: [wmagent.exe] "c:\programmi\webmoney agent\wmagent.exe"
113
StartupFolder: c:\docume~1\tonico~1\menuav~1\progra~1\esecuz~1\dropbox.lnk - c:\documents and settings\tonicooperi\dati applicazioni\dropbox\bin\Dropbox.exe
114
StartupFolder: c:\docume~1\tonico~1\menuav~1\progra~1\esecuz~1\no-ipd~1.lnk - c:\programmi\no-ip\DUC20.exe
115
StartupFolder: c:\docume~1\tonico~1\menuav~1\progra~1\esecuz~1\ritagl~1.lnk - c:\programmi\microsoft office\office12\ONENOTEM.EXE
116
StartupFolder: c:\docume~1\alluse~1\menuav~1\progra~1\esecuz~1\interv~1.lnk - c:\programmi\intervideo\common\bin\WinCinemaMgr.exe
117
IE: E&sporta in Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
118
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
119
IE: {E59EB121-F339-4851-A3BA-FE49C35617C2} - c:\programmi\icq6.5\ICQ.exe
120
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\programmi\messenger\msmsgs.exe
121
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
122
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
123
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
124
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
125
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab
126
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\programmi\microsoft office\office12\GrooveSystemServices.dll
127
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\fileco~1\skype\SKYPE4~1.DLL
128
Notify: igfxcui - igfxdev.dll
129
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
130
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\programmi\microsoft office\office12\GrooveShellExtensions.dll
131
132
================= FIREFOX ===================
133
134
FF - ProfilePath - c:\docume~1\tonico~1\datiap~1\mozilla\firefox\profiles\vdkn7dv6.default\
135
FF - prefs.js: browser.search.selectedEngine - Google
136
FF - prefs.js: browser.startup.homepage - hxxp://www.google.it/
137
FF - prefs.js: keyword.URL - hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=
138
FF - prefs.js: network.proxy.http - http://wpad.polimi.it/wpad.dat
139
FF - prefs.js: network.proxy.http_port - 8080
140
FF - prefs.js: network.proxy.type - 2
141
FF - component: c:\programmi\nokia\nokia ovi suite\connectors\bookmarks connector\firefoxextension\components\FirefoxExtension.dll
142
FF - plugin: c:\programmi\mozilla firefox\plugins\npdeployJava1.dll
143
FF - plugin: c:\programmi\opera\program\plugins\np_gp.dll
144
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
145
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmi\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
146
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmi\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}
147
FF - HiddenExtension: Java Console: No Registry Reference - c:\programmi\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
148
149
---- FIREFOX POLICIES ----
150
FF - user.js: yahoo.homepage.dontask - truec:\programmi\mozilla firefox\greprefs\all.js - pref("ui.use_native_colors", true);
151
c:\programmi\mozilla firefox\greprefs\all.js - pref("ui.use_native_popup_windows", false);
152
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.enable_click_image_resizing", true);
153
c:\programmi\mozilla firefox\greprefs\all.js - pref("accessibility.browsewithcaret_shortcut.enabled", true);
154
c:\programmi\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.high_water_mark", 32);
155
c:\programmi\mozilla firefox\greprefs\all.js - pref("javascript.options.mem.gc_frequency",   1600);
156
c:\programmi\mozilla firefox\greprefs\all.js - pref("network.auth.force-generic-ntlm", false);
157
c:\programmi\mozilla firefox\greprefs\all.js - pref("svg.smil.enabled", false);
158
c:\programmi\mozilla firefox\greprefs\all.js - pref("ui.trackpoint_hack.enabled", -1);
159
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.debug",            false);
160
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.agedWeight",       2);
161
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.bucketSize",       1);
162
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.maxTimeGroupings", 25);
163
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.timeGroupingSize", 604800);
164
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.boundaryWeight",   25);
165
c:\programmi\mozilla firefox\greprefs\all.js - pref("browser.formfill.prefixWeight",     5);
166
c:\programmi\mozilla firefox\greprefs\all.js - pref("html5.enable", false);
167
c:\programmi\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", true);
168
c:\programmi\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.renego_unrestricted_hosts", "");
169
c:\programmi\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.treat_unsafe_negotiation_as_broken", false);
170
c:\programmi\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl.require_safe_negotiation",  false);
171
c:\programmi\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);
172
c:\programmi\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.download.backgroundInterval", 600);
173
c:\programmi\mozilla firefox\defaults\pref\firefox-branding.js - pref("app.update.url.manual", "http://www.firefox.com");
174
c:\programmi\mozilla firefox\defaults\pref\firefox-branding.js - pref("browser.search.param.yahoo-fr-ja", "mozff");
175
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.name", "chrome://browser/locale/browser.properties");
176
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("extensions.{972ce4c6-7e08-4474-a285-3208198ce6fd}.description", "chrome://browser/locale/browser.properties");
177
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add", "addons.mozilla.org");
178
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("xpinstall.whitelist.add.36", "getpersonas.com");
179
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("lightweightThemes.update.enabled", true);
180
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("browser.allTabs.previews", false);
181
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("plugins.hide_infobar_for_outdated_plugin", false);
182
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("plugins.update.notifyUser", false);
183
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("toolbar.customization.usesheet", false);
184
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.enable", false);
185
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.max", 20);
186
c:\programmi\mozilla firefox\defaults\pref\firefox.js - pref("browser.taskbar.previews.cachetime", 20);
187
188
============= SERVICES / DRIVERS ===============
189
190
R1 avgio;avgio;c:\programmi\avira\antivir desktop\avgio.sys [2009-11-18 11608]
191
R1 Ext2fs;Ext2fs;c:\windows\system32\drivers\ext2fs.sys [2009-11-18 181120]
192
R1 IfsMount;IfsMount;c:\windows\system32\drivers\ifsmount.sys [2009-11-18 51072]
193
R2 AntiVirScheduler;Avira AntiVir Scheduler;c:\programmi\avira\antivir desktop\sched.exe [2009-11-18 108289]
194
R2 AntiVirService;Avira AntiVir Guard;c:\programmi\avira\antivir desktop\avguard.exe [2009-11-18 185089]
195
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-11-18 56816]
196
R3 SbieDrv;SbieDrv;c:\programmi\sandboxie\SbieDrv.sys [2010-4-17 115944]
197
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
198
S2 SSPORT;SSPORT;\??\c:\windows\system32\drivers\ssport.sys --> c:\windows\system32\drivers\SSPORT.sys [?]
199
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2010-2-24 137344]
200
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2010-2-24 8320]
201
S3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\vboxnetflt.sys --> c:\windows\system32\drivers\VBoxNetFlt.sys [?]
202
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
203
S4 vsdatant;vsdatant; [x]
204
205
=============== Created Last 30 ================
206
207
2010-06-01 18:35:29	0	d-----w-	c:\docume~1\tonico~1\datiap~1\Malwarebytes
208
2010-06-01 18:35:15	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
209
2010-06-01 18:35:08	0	d-----w-	c:\docume~1\alluse~1\datiap~1\Malwarebytes
210
2010-06-01 18:35:06	20952	----a-w-	c:\windows\system32\drivers\mbam.sys
211
2010-06-01 18:35:05	0	d-----w-	c:\programmi\Malwarebytes' Anti-Malware
212
2010-06-01 18:23:44	0	d-----w-	c:\programmi\ESET
213
2010-06-01 15:56:06	0	d-----w-	c:\programmi\Trend Micro
214
2010-05-31 14:13:50	64000	----a-w-	c:\windows\system32\ieframe.oca
215
2010-05-31 14:12:07	35840	----a-w-	c:\windows\system32\ComDlg32.oca
216
2010-05-31 14:12:06	22016	----a-w-	c:\windows\system32\MSWINSCK.oca
217
2010-05-31 14:12:03	265728	----a-w-	c:\windows\system32\MSCOMCTL.oca
218
2010-05-30 23:22:50	0	d-----w-	c:\docume~1\tonico~1\datiap~1\WebMoney
219
2010-05-30 23:21:33	0	d-----w-	c:\programmi\WebMoney Agent
220
2010-05-30 23:20:48	0	d-----w-	c:\programmi\WebMoney
221
2010-05-30 13:20:21	0	dc-h--w-	c:\docume~1\alluse~1\datiap~1\{E6CA0070-F119-46D3-AFA3-A16FB84FEFA0}
222
2010-05-30 13:20:05	0	d-----w-	c:\programmi\Eziriz
223
2010-05-30 08:39:02	0	d-----w-	c:\docume~1\tonico~1\datiap~1\TeamViewer
224
2010-05-30 08:38:46	0	d-----w-	c:\programmi\TeamViewer
225
2010-05-29 19:17:57	307200	----a-w-	c:\windows\system32\msvcr70.dll
226
2010-05-29 19:15:09	233472	----a-w-	c:\windows\system32\fusion.dll
227
2010-05-29 19:14:00	348160	----a-w-	c:\windows\system32\MSVCR71.dll
228
2010-05-29 19:01:06	0	d-----w-	c:\docume~1\alluse~1\datiap~1\{smartassembly}
229
2010-05-29 19:00:41	0	d-----w-	c:\programmi\{smartassembly}
230
2010-05-29 15:57:55	0	d-----w-	c:\programmi\Microsoft SQL Server
231
2010-05-29 15:57:21	0	d-----w-	c:\programmi\Microsoft Synchronization Services
232
2010-05-29 15:57:20	0	d-----w-	c:\programmi\Microsoft SQL Server Compact Edition
233
2010-05-29 15:51:18	0	d-----w-	c:\programmi\Microsoft Help Viewer
234
2010-05-29 15:51:17	0	d-----w-	c:\programmi\Microsoft Visual Studio 10.0
235
2010-05-29 13:45:57	165	----a-w-	c:\windows\system32\spupdsvc.inf
236
2010-05-28 20:41:39	185	----a-w-	c:\windows\mdm.ini
237
2010-05-28 20:41:24	288	----a-w-	c:\windows\ODBC.INI
238
2010-05-28 20:39:48	0	d-----w-	c:\programmi\Web Publish
239
2010-05-28 20:29:12	7356	----a-w-	c:\windows\system32\javasup.vxd
240
2010-05-28 20:29:12	6550	----a-w-	c:\windows\jautoexp.dat
241
2010-05-28 20:29:12	42496	----a-w-	c:\windows\setdebug.exe
242
2010-05-28 20:29:12	313856	----a-w-	c:\windows\system32\dx3j.dll
243
2010-05-28 20:29:12	140048	----a-w-	c:\windows\system32\jit.dll
244
2010-05-28 20:29:12	135168	----a-w-	c:\windows\system32\javaee.dll
245
2010-05-28 15:23:46	0	d-----w-	c:\programmi\No-IP
246
2010-05-27 18:17:33	0	d-----w-	c:\docume~1\tonico~1\datiap~1\Dropbox
247
2010-05-27 14:13:04	0	d-----w-	c:\programmi\UltraVPN
248
2010-05-26 22:33:57	0	d-----w-	c:\windows\pss
249
2010-05-26 22:27:15	0	d-sh--r-	c:\docume~1\tonico~1\datiap~1\recyclerr
250
2010-05-25 15:36:49	664	----a-w-	c:\windows\system32\d3d9caps.dat
251
2010-05-23 19:04:01	0	d-----w-	c:\programmi\Siber Systems
252
2010-05-22 10:52:21	0	d-----r-	C:\Sandbox
253
2010-05-22 10:52:12	1198	----a-w-	c:\windows\Sandboxie.ini
254
2010-05-22 10:52:04	0	d-----w-	c:\programmi\Sandboxie
255
2010-05-22 08:46:01	0	d-----w-	c:\docume~1\tonico~1\datiap~1\NoNameScript
256
2010-05-21 16:37:02	139	----a-w-	C:\TestICQ2.bin
257
2010-05-21 16:36:59	24243	----a-w-	c:\documents and settings\tonicooperi\check.ini
258
2010-05-18 20:52:39	0	d-----w-	c:\programmi\HTTP-Tunnel
259
2010-05-18 18:30:29	0	d-----w-	c:\docume~1\tonico~1\datiap~1\Tor
260
2010-05-18 18:30:26	0	d-----w-	c:\programmi\Vidalia Bundle
261
2010-05-16 00:26:40	0	d-----w-	c:\programmi\uTorrent
262
2010-05-13 17:25:35	0	d-----w-	C:\GDPoker
263
2010-05-04 16:39:18	123856	----a-w-	c:\windows\system32\drivers\VBoxDrv.sys
264
2010-05-04 16:38:43	41680	----a-w-	c:\windows\system32\drivers\VBoxUSBMon.sys
265
2010-05-04 15:39:59	78848	---ha-w-	c:\windows\system32\mlfcache.dat
266
267
==================== Find3M  ====================
268
269
2010-06-02 10:48:31	1660	----a-w-	c:\windows\bthservsdp.dat
270
2010-05-29 13:43:51	558320	----a-w-	c:\windows\system32\perfh010.dat
271
2010-05-29 13:43:51	106098	----a-w-	c:\windows\system32\perfc010.dat
272
2010-05-02 22:33:36	39156	----a-w-	c:\windows\fonts\BILLY ARGEL TRIAL___.otf
273
2010-04-19 21:45:39	223440	----a-w-	c:\windows\system32\drivers\truecrypt.sys
274
2010-04-19 16:33:20	695578	----a-w-	c:\windows\system32\unins000.exe
275
2010-04-12 15:29:19	411368	----a-w-	c:\windows\system32\deployJava1.dll
276
2010-03-18 14:47:22	17760	----a-w-	c:\windows\system32\aspnet_counters.dll
277
2010-03-18 11:16:28	771424	----a-w-	c:\windows\system32\msvcr100_clr0400.dll
278
2010-03-18 11:16:28	70472	----a-w-	c:\windows\system32\dxva2.dll
279
2010-03-18 11:16:28	486216	----a-w-	c:\windows\system32\evr.dll
280
2010-03-18 08:09:00	99176	----a-w-	c:\windows\system32\PresentationHostProxy.dll
281
2010-03-18 08:09:00	49488	----a-w-	c:\windows\system32\netfxperf.dll
282
2010-03-18 08:09:00	297808	----a-w-	c:\windows\system32\mscoree.dll
283
2010-03-18 08:09:00	295264	----a-w-	c:\windows\system32\PresentationHost.exe
284
2010-03-18 07:15:26	80720	----a-w-	c:\windows\system32\mfcm100u.dll
285
2010-03-18 07:15:26	80208	----a-w-	c:\windows\system32\mfcm100.dll
286
2010-03-18 07:15:26	770384	----a-w-	c:\windows\system32\msvcr100.dll
287
2010-03-18 07:15:26	4368720	----a-w-	c:\windows\system32\mfc100u.dll
288
2010-03-18 07:15:26	4342088	----a-w-	c:\windows\system32\mfc100.dll
289
2010-03-18 07:15:26	421200	----a-w-	c:\windows\system32\msvcp100.dll
290
2010-03-18 07:15:26	138056	----a-w-	c:\windows\system32\atl100.dll
291
2010-03-10 06:15:53	420352	----a-w-	c:\windows\system32\vbscript.dll
292
2009-11-18 08:02:53	32768	--sha-w-	c:\windows\system32\config\systemprofile\impostazioni locali\cronologia\history.ie5\mshist012009111820091119\index.dat
293
2008-08-20 19:26:24	32768	--sha-w-	c:\windows\system32\config\systemprofile\impostazioni locali\dati applicazioni\microsoft\feeds cache\index.dat
294
295
============= FINISH: 14.32.38,25 ===============