Fatto ecco il file log di avenger:

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Serv

ices\fkybsruf

*******************

Script file located at: \??\C:\irkvgyna.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at

C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\system32\igfxtray.exe deleted

successfully.
File C:\WINDOWS\system32\hkcmd.exe deleted

successfully.
File C:\WINDOWS\system32\NeroCheck.exe deleted

successfully.
File

C:\WINDOWS\system32\ReinstallBackups\0009\Drive

rFiles\Hcontrol.exe deleted successfully.
File C:\Programmi\QuickTime\qttask.exe deleted

successfully.
File C:\Programmi\Asus\Power4

Gear\BatteryLife.exe deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPLpr.exe

deleted successfully.
File C:\Programmi\Synaptics\SynTP\SynTPEnh.exe

deleted successfully.
File

C:\Programmi\SlySoft\CloneCD\CloneCDTray.exe

deleted successfully.
File C:\Programmi\Intel\NCS\PROSet\PRONoMgr.exe

deleted successfully.
File move operation

C:\WINDOWS\system32\bak\igfxtray.exe|C:\WINDOWS

\system32\igfxtray.exe completed successfully.
File move operation

C:\WINDOWS\system32\bak\hkcmd.exe|C:\WINDOWS\sy

stem32\hkcmd.exe completed successfully.
File move operation

C:\WINDOWS\system32\bak\NeroCheck.exe|C:\WINDOW

S\system32\NeroCheck.exe completed

successfully.
File move operation

C:\Programmi\QuickTime\bak\qttask.exe|C:\Progra

mmi\QuickTime\qttask.exe completed

successfully.
File move operation C:\Programmi\Asus\Power4

Gear\bak\BatteryLife.exe|C:\Programmi\Asus\Powe

r4 Gear\BatteryLife.exe completed successfully.
File move operation

C:\Programmi\Synaptics\SynTP\bak\SynTPLpr.exe|C

:\Programmi\Synaptics\SynTP\SynTPLpr.exe

completed successfully.
File move operation

C:\Programmi\Synaptics\SynTP\bak\SynTPEnh.exe|C

:\Programmi\Synaptics\SynTP\SynTPEnh.exe

completed successfully.
File move operation

C:\Programmi\SlySoft\CloneCD\bak\CloneCDTray.ex

e|C:\Programmi\SlySoft\CloneCD\CloneCDTray.exe

completed successfully.
File move operation

C:\Programmi\Intel\NCS\PROSet\bak\PRONoMgr.exe|

C:\Programmi\Intel\NCS\PROSet\PRONoMgr.exe

completed successfully.

Completed script processing.

*******************

Finished! Terminate.