Strano...... !!!

[vannicv]

Giorno a tutti, Oggi come di consueto faccio la scansione online e con Panda tutto Ok, mentre con F-secure ho trovato un troian (weather.exe ).
Poi eliminato in modalita' provvisoria
Mi ricordo pero'.... che nella giornata di ieri ogni tanto vedevo nella parte in basso a dx che compariva un icona di connessione accesa( quella con 2 Pc ad intermittenza, modello modem 56k).
Premetto che ho la ADSL Flat 24h su 24 con rooter , e l'iconcina non mi e' mai comparsa.

A qualcun'altro e' successo??


Posto log:

Logfile of HijackThis v1.99.1
Scan saved at 14.55.37, on 19/07/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\drivers\CDAC11BA.EXE
C:\WINNT\System32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\system32\stisvc.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\mspmspsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmi\Logitech\iTouch\iTouch.exe
C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
C:\Programmi\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb06. exe
C:\Programmi\Ahead\InCD\InCD.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINNT\system32\ctfmon.exe
C:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - Default URLSearchHook is missing
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
O2 - BHO: SpoofStick BHO - {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} - C:\Programmi\CoreStreet\SpoofStick\SpoofStickBHO.d ll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O3 - Toolbar: SpoofStick - {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} - C:\Programmi\CoreStreet\SpoofStick\SpoofStick.dll
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Programmi\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\Run: [MMTray] C:\Programmi\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb06. exe
O4 - HKLM\..\Run: [InCD] C:\Programmi\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINNT\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Programmi\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Daily Weather Forecast] C:\Programmi\Daily Weather Forecast\weather.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Programmi\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Programmi\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - SolidConverterPDF - (no file) (HKCU)
O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F48C1D3D-DB70-4583-BF8F-48549E5585DD}: NameServer = 193.70.192.25,193.70.152.25
O23 - Service: Adobe LM Service - Unknown owner - C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINNT\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINNT\system32\ati2sgag.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINNT\System32\drivers\CDAC11BA.EXE
O23 - Service: Servizio amministrativo di Gestione disco logico (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Programmi\File comuni\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINNT\system32\ZoneLabs\vsmon.exe

[NetEscape]

http://www.2-spyware.com/file-weather-exe.html

La voce si trova in riferimento a due spyware (segui i link). Dovresti installare un antivirus ed abbinarlo ad un antispyware/antitrojan.

[vannicv]

Originariamente inviato da NetEscape
http://www.2-spyware.com/file-weather-exe.html

La voce si trova in riferimento a due spyware (segui i link). Dovresti installare un antivirus ed abbinarlo ad un antispyware/antitrojan.

Ti posto l'allegato per farti vedere l'iconcina che mi compariva!!!

Fa parte della spiegazione o e' un'altro amicone...

Ho gia' installato l'antivirus Antivir aggiornato ma non l'ha rilevato.

Grazie per il tuo aiuto.

[vannicv]

.....

[vannicv]

Ho provveduto a installare SpyHunter 2.0
Posto il risultato:
Log Contents provided by Enigma Software Group, Inc.
###########################Runnning Processes DATA###########################
processName = SMSS.EXE File Size = 45840 File Path = \SystemRoot\System32\smss.exe ModuleMD5 = 77746b1b07d84995ccc93a495705515f
processName = WINLOGON.EXE File Size = 189712 File Path = \??\C:\WINNT\system32\winlogon.exe ModuleMD5 = 8fb6488b496b70357c4380ade7fc2e9a
processName = SERVICES.EXE File Size = 92944 File Path = C:\WINNT\system32\services.exe ModuleMD5 = e5f9a3122921ed7d3e8b524129af229f
processName = LSASS.EXE File Size = 38160 File Path = C:\WINNT\system32\lsass.exe ModuleMD5 = bb74f8c7f691f29d70b314b0cdeea52d
processName = ATI2EVXX.EXE File Size = 360448 File Path = C:\WINNT\system32\Ati2evxx.exe ModuleMD5 = 68ccf9573df16bce2236e07c430e607d
processName = SVCHOST.EXE File Size = 7952 File Path = C:\WINNT\system32\svchost.exe ModuleMD5 = 9e64ad53cfd9da2d22e8a924f8c6e62c
processName = SPOOLSV.EXE File Size = 48400 File Path = C:\WINNT\system32\spoolsv.exe ModuleMD5 = 1f124b89aa469671821115a39c0fbd27
processName = AVGUARD.EXE File Size = 238120 File Path = C:\Programmi\AVPersonal\AVGUARD.EXE ModuleMD5 = d3ccc1233719969205eee7ca5b5dcfb7
processName = AVWUPSRV.EXE File Size = 45096 File Path = C:\Programmi\AVPersonal\AVWUPSRV.EXE ModuleMD5 = 7d41a8e0f4561dfa82d5aeb37a2fa9b5
processName = CDAC11BA.EXE File Size = 54784 File Path = C:\WINNT\System32\drivers\CDAC11BA.EXE ModuleMD5 = 9bdbda21d3ba8e374fd06a405be10215
processName = SVCHOST.EXE File Size = 7952 File Path = C:\WINNT\System32\svchost.exe ModuleMD5 = 9e64ad53cfd9da2d22e8a924f8c6e62c
processName = REGSVC.EXE File Size = 68368 File Path = C:\WINNT\system32\regsvc.exe ModuleMD5 = 2e35ded10ccc807dea01bf81cbfb0ae0
processName = MSTASK.EXE File Size = 123664 File Path = C:\WINNT\system32\MSTask.exe ModuleMD5 = cae354822eaf8097b6a8a9b294601e7d
processName = STISVC.EXE File Size = 62224 File Path = C:\WINNT\system32\stisvc.exe ModuleMD5 = 4fcefed8e4311b4083e2d16db39eda87
processName = WINMGMT.EXE File Size = 196706 File Path = C:\WINNT\System32\WBEM\WinMgmt.exe ModuleMD5 = 453b0721be6d1db6b17b187ed13a016c
processName = MSPMSPSV.EXE File Size = 53248 File Path = C:\WINNT\system32\mspmspsv.exe ModuleMD5 = af619b3908bb1c9336fb6981609018fe
processName = SVCHOST.EXE File Size = 7952 File Path = C:\WINNT\system32\svchost.exe ModuleMD5 = 9e64ad53cfd9da2d22e8a924f8c6e62c
processName = ATI2EVXX.EXE File Size = 360448 File Path = C:\WINNT\system32\Ati2evxx.exe ModuleMD5 = 68ccf9573df16bce2236e07c430e607d
processName = EXPLORER.EXE File Size = 243984 File Path = C:\WINNT\Explorer.EXE ModuleMD5 = f2e8fe8092b5f045dc67ea36d7c535b9
processName = SOUNDMAN.EXE File Size = 46592 File Path = C:\WINNT\SOUNDMAN.EXE ModuleMD5 = a65916a55384f937f6ba4653ad203ecb
processName = ATIPTAXX.EXE File Size = 294912 File Path = C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe ModuleMD5 = 59f1372fab63cfab8a3878a3abbbfa37
processName = ITOUCH.EXE File Size = 577602 File Path = C:\Programmi\Logitech\iTouch\iTouch.exe ModuleMD5 = 5a24096190d68fdbc193229a6ad99896
processName = EM_EXEC.EXE File Size = 28672 File Path = C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXE ModuleMD5 = bcdbcd110dae1abca8f3787c8fcd3166
processName = MM_TRAY.EXE File Size = 90112 File Path = C:\Programmi\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe ModuleMD5 = c3c5641e7d80464d138bd6bd9e3015a5
processName = HPZTSB06.EXE File Size = 188416 File Path = C:\WINNT\System32\spool\drivers\w32x86\3\hpztsb06. exe ModuleMD5 = 45a483a8b56605414af38abf71db102e
processName = INCD.EXE File Size = 1224704 File Path = C:\Programmi\Ahead\InCD\InCD.exe ModuleMD5 = 0b68cb5542dbc00ec0c26077c699faf0
processName = QTTASK.EXE File Size = 98304 File Path = C:\Programmi\QuickTime\qttask.exe ModuleMD5 = 76a3a30b58405c2c6d833895253a51a9
processName = SVCHOST.EXE File Size = 7952 File Path = C:\WINNT\System32\svchost.exe ModuleMD5 = 9e64ad53cfd9da2d22e8a924f8c6e62c
processName = AVGNT.EXE File Size = 168039 File Path = C:\Programmi\AVPersonal\AVGNT.EXE ModuleMD5 = 7bd6d6efcf5547124dbdf49dde0cf16a
processName = CTFMON.EXE File Size = 8192 File Path = C:\WINNT\system32\ctfmon.exe ModuleMD5 = d36a33c21eeed5a6c1daecb7c80a1909
processName = OUTLOOK.EXE File Size = 196152 File Path = C:\Programmi\Microsoft Office\OFFICE11\OUTLOOK.EXE ModuleMD5 = 40825acfc23e0ad28da1fc63f77e9825
processName = WINWORD.EXE File Size = 12037688 File Path = C:\Programmi\Microsoft Office\OFFICE11\WINWORD.EXE ModuleMD5 = 1eea7dd2f1ea6efef380b99a90228d2f
processName = WUAUCLT.EXE File Size = 125208 File Path = C:\WINNT\system32\wuauclt.exe ModuleMD5 = 72e60e90ad70854b60b7488ef898fe2f
processName = ACAD.EXE File Size = 7842464 File Path = C:\Programmi\AutoCAD 2004\acad.exe ModuleMD5 = 7709ac8e6bf7614ab2e1241116a43012
processName = ~E5D141.TMP File Size = 46080 File Path = C:\DOCUME~1\Vanni\IMPOST~1\Temp\~e5d141.tmp ModuleMD5 = a19804b45575151100c3de28ddeba2fe
processName = NTVDM.EXE File Size = 399120 File Path = C:\WINNT\system32\ntvdm.exe ModuleMD5 = ef6b4692aa4c6c0cb736a9c7ebc9d613
processName = WSCOMMCNTR1.EXE File Size = 193696 File Path = C:\Programmi\File comuni\Autodesk Shared\WSCommCntr1.exe ModuleMD5 = 6af92967c3316de9db7710bac9fd226a
processName = PRIVACYERASER.E File Size = 1376768 File Path = C:\Programmi\PrivacyEraser Computing\Privacy Eraser\PrivacyEraser.exe ModuleMD5 = 3ec47481c2a8eade26f41c982cb66e01
processName = WISPTIS.EXE File Size = 189952 File Path = C:\WINNT\System32\WISPTIS.EXE ModuleMD5 = 99783fa6bfeb23a5f97b4a8db36c8a39
processName = ACRORD32.EXE File Size = 7663683 File Path = C:\Programmi\Adobe\Acrobat 6.0\Reader\AcroRd32.exe ModuleMD5 = 4a071c9cc4bc41249f0918085cde6745
processName = IEXPLORE.EXE File Size = 91136 File Path = C:\Programmi\Internet Explorer\iexplore.exe ModuleMD5 = 7c3fad95b9d574f3698949cf6d515127
processName = AD-AWARE.EXE File Size = 838656 File Path = C:\Programmi\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe ModuleMD5 = 30f0be3c77b71aa0cd20488536af9a68
processName = SPYHUNTER.EXE File Size = 2469888 File Path = C:\Programmi\Enigma Software Group\SpyHunter\SpyHunter.exe ModuleMD5 = b0966fa7fbc70d83e6bdbf7257247bff
###########################REGISTRY MD5 DATA###########################
<HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CUR RENTVERSION\RUN>
Name=Synchronization Manager Data=mobsync.exe /logon FileSize = 111376 MD5=
Name=SoundMan Data=SOUNDMAN.EXE FileSize = 46592 MD5=
Name=ATIPTA Data=C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe FileSize = 294912 MD5=59f1372fab63cfab8a3878a3abbbfa37
Name=zBrowser Launcher Data=C:\Programmi\Logitech\iTouch\iTouch.exe FileSize = 577602 MD5=5a24096190d68fdbc193229a6ad99896
Name=EM_EXEC Data=C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC. EXE
FileSize = MD5=********************************
<HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CUR RENTVERSION\RUNONCEEX>
<HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CUR RENTVERSION\RUNONCE>
Name= Privacy Eraser Data=C:\Programmi\PrivacyEraser Computing\Privacy Eraser\PrivacyEraser.exe /ErIEIndex
FileSize = 1376768 MD5=3ec47481c2a8eade26f41c982cb66e01
<HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURR ENTVERSION\RUN>
Name=ATI Launchpad Data="C:\Programmi\ATI Multimedia\main\launchpd.exe" FileSize = 98304 MD5=1da42e59e7d6906f1f19ea8998eef014
Name=ccleaner Data="C:\Programmi\CCleaner\ccleaner.exe" /AUTO FileSize = 425984 MD5=1949d97455e46c137115b788efc469b4
Name=ctfmon.exe Data=ctfmon.exe
FileSize = 8192 MD5=
<HKEY_CURRENT_USER\SOFTWARE\MICROSOFT\WINDOWS\CURR ENTVERSION\RUNONCE>
Name= Privacy Eraser Data=C:\Programmi\PrivacyEraser Computing\Privacy Eraser\PrivacyEraser.exe /ErIEIndex
FileSize = 1376768 MD5=3ec47481c2a8eade26f41c982cb66e01
<HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CU RRENTVERSION\RUN>
Name=internat.exe Data=internat.exe
FileSize = 20752 MD5=
<HKEY_USERS\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CU RRENTVERSION\RUNONCE>
Name=^SetupICWDesktop Data=C:\Programmi\Internet Explorer\Connection Wizard\icwconn1.exe /desktop
FileSize = 188176 MD5=9653bdc11513d801149c8565c45f32fc
#############################FILE MD5 DATA#############################
<C:\Documents and Settings\Vanni\Menu Avvio\Programmi\Esecuzione automatica>
#############################SERVICES DATA#############################
Service Name = Alerter Service Display Name = Avvisi Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = AntiVirService Service Display Name = AntiVir Service Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Programmi\AVPersonal\AVGUARD.EXE" Binary Size = 0 Binary MD5 =
Service Name = AppMgmt Service Display Name = Gestione applicazione Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = Ati HotKey Poller Service Display Name = Ati HotKey Poller Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\Ati2evxx.exe Binary Size = 360448 Binary MD5 = 68ccf9573df16bce2236e07c430e607d
Service Name = AVWUpSrv Service Display Name = AntiVir Update Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = "C:\Programmi\AVPersonal\AVWUPSRV.EXE" Binary Size = 0 Binary MD5 =
Service Name = BITS Service Display Name = Servizio trasferimento intelligente in background Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k BITSgroup Binary Size = 0 Binary MD5 =
Service Name = Browser Service Display Name = Browser di computer Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = C-DillaCdaC11BA Service Display Name = C-DillaCdaC11BA Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\drivers\CDAC11BA.EXE Binary Size = 54784 Binary MD5 = 9bdbda21d3ba8e374fd06a405be10215
Service Name = Dhcp Service Display Name = Client DHCP Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = dmserver Service Display Name = Gestione disco logico Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = Dnscache Service Display Name = Client DNS Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = Eventlog Service Display Name = Registro eventi Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f

[vannicv]

Service Name = EventSystem Service Display Name = Sistema di eventi COM+ Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = lanmanserver Service Display Name = Server Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = lanmanworkstation Service Display Name = Workstation Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = LmHosts Service Display Name = Servizio guida TCP/IP NetBIOS Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = Messenger Service Display Name = Messenger Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = Netman Service Display Name = Connessioni di rete Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = NtmsSvc Service Display Name = Gestione archivi rimovibili Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = PlugPlay Service Display Name = Plug and Play Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = PolicyAgent Service Display Name = Agente criteri IPSEC Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\lsass.exe Binary Size = 38160 Binary MD5 = bb74f8c7f691f29d70b314b0cdeea52d
Service Name = ProtectedStorage Service Display Name = Archiviazione protetta Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = RasMan Service Display Name = Connection Manager di Accesso remoto Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = RemoteRegistry Service Display Name = Servizio Registro di sistema remoto Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\regsvc.exe Binary Size = 68368 Binary MD5 = 2e35ded10ccc807dea01bf81cbfb0ae0
Service Name = RpcSs Service Display Name = RPC (Remote Procedure Call) Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\svchost -k rpcss Binary Size = 0 Binary MD5 =
Service Name = SamSs Service Display Name = Gestione protezione account Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\lsass.exe Binary Size = 38160 Binary MD5 = bb74f8c7f691f29d70b314b0cdeea52d
Service Name = Schedule Service Display Name = Utilità di pianificazione Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\MSTask.exe Binary Size = 123664 Binary MD5 = cae354822eaf8097b6a8a9b294601e7d
Service Name = seclogon Service Display Name = Servizio RunAs Opened = YES Status = Running Query = SUCCESS Service Type = 288 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = SENS Service Display Name = Notifica eventi di sistema Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = Spooler Service Display Name = Spooler di stampa Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\spoolsv.exe Binary Size = 48400 Binary MD5 = 1f124b89aa469671821115a39c0fbd27
Service Name = StiSvc Service Display Name = Still Image Service Opened = YES Status = Running Query = SUCCESS Service Type = 272 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\stisvc.exe Binary Size = 62224 Binary MD5 = 4fcefed8e4311b4083e2d16db39eda87
Service Name = TapiSrv Service Display Name = Telefonia Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\System32\svchost.exe -k netsvcs Binary Size = 0 Binary MD5 =
Service Name = TrkWks Service Display Name = Manutenzione collegamenti distribuiti client Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = WinMgmt Service Display Name = Strumentazione gestione Windows Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 0 Service Binary Path = C:\WINNT\System32\WBEM\WinMgmt.exe Binary Size = 196706 Binary MD5 = 453b0721be6d1db6b17b187ed13a016c
Service Name = WMDM PMSP Service Service Display Name = WMDM PMSP Service Opened = YES Status = Running Query = SUCCESS Service Type = 16 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\mspmspsv.exe Binary Size = 53248 Binary MD5 = af619b3908bb1c9336fb6981609018fe
Service Name = Wmi Service Display Name = Estensioni driver Strumentazione gestione Windows Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 3 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\Services.exe Binary Size = 92944 Binary MD5 = e5f9a3122921ed7d3e8b524129af229f
Service Name = wuauserv Service Display Name = Aggiornamenti automatici Opened = YES Status = Running Query = SUCCESS Service Type = 32 Service Start Type = 2 Service Error Control = 1 Service Binary Path = C:\WINNT\system32\svchost.exe -k wugroup Binary Size = 0 Binary MD5 =
#############################WINLOGON DATA#############################
<HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWSNT\C URRENTVERSION\WINLOGON\NOTIFY>
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent Filepath = C:\WINNT\system32\Ati2evxx.dll File Size = 46080 File MD5 = 575c687b3ff09e0274557dd72a8fdf5c
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain Filepath = C:\WINNT\system32\crypt32.dll File Size = 566032 File MD5 = 8e36da24d26bf5ec98e426f894e4863b
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet Filepath = C:\WINNT\system32\cryptnet.dll File Size = 63760 File MD5 = bdbb4e8e70450101b103b41a0f84ef5d
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll Filepath = C:\WINNT\system32\cscdll.dll File Size = 101648 File MD5 = 20ebf23832d8774045ebbe6052f11f43
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy Filepath = C:\WINNT\system32\sclgntfy.dll File Size = 21776 File MD5 = 7c889019faa5520fe8e99e3350e7a0d8
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn Filepath = C:\WINNT\system32\WlNotify.dll File Size = 57616 File MD5 = d150aa7f6a757ececea9719198c24a68
Subkey Name = Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wzcnotif Filepath = C:\WINNT\system32\wzcdlg.dll File Size = 53008 File MD5 = 3e9f33dbbe5e5d28d323fbc036cc428e

[vannicv]

##########################BROWSER ADD-ON DATA##########################
<HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar>
CLSID = {8E718888-423F-11D2-876E-00A0C9082467} FilePath = C:\WINNT\System32\msdxm.ocx File Size = 850192 File MD5 = 0c5c81db985437d9e8e5485f4bd8bc85 Description = 0
CLSID = {4D46ED77-1429-4CF6-8F63-C84B5D710BAF} FilePath = C:\Programmi\CoreStreet\SpoofStick\SpoofStick.dll File Size = 176128 File MD5 = 34d42e51d9e37698238a98ac191a808b Description = 0
<HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Explorer Bars>
CLSID = {4D5C8C25-D075-11d0-B416-00C04FB90376} FilePath = C:\WINNT\System32\shdocvw.dll File Size = 1338368 File MD5 = e2e622b241518248cb661b76a10f4e11
<HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Explorer Bars>
CLSID = {32683183-48a0-441b-a342-7c2a440a9478} FilePath = C:\WINNT\System32\browseui.dll File Size = 1018368 File MD5 = f6334ea8f8d4c647a530a623abe72220
CLSID = {C4EE31F3-4768-11D2-BE5C-00A0C9A83DA1} FilePath = C:\WINNT\system32\shell32.dll File Size = 2449168 File MD5 = b85dd7c676f7267a18c0ad8f3551ce9e
CLSID = {EFA24E61-B078-11D0-89E4-00C04FC9E26E} FilePath = C:\WINNT\System32\shdocvw.dll File Size = 1338368 File MD5 = e2e622b241518248cb661b76a10f4e11
CLSID = {EFA24E62-B078-11D0-89E4-00C04FC9E26E} FilePath = C:\WINNT\System32\shdocvw.dll File Size = 1338368 File MD5 = e2e622b241518248cb661b76a10f4e11
<HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Cur rentVersion\Explorer\Browser Helper Objects>
CLSID = {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} FilePath = C:\Programmi\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll File Size = 50376 File MD5 = 0c0e1b2bcaed8df401be94d538bcb412
CLSID = {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} FilePath = File Size = 0 File MD5 =
CLSID = {CBA74CDA-DF78-4AD9-954E-3B15D0A993DE} FilePath = C:\Programmi\CoreStreet\SpoofStick\SpoofStickBHO.d ll File Size = 94208 File MD5 = c5be2601f7109b4fb5c0383b9d1119cd
<HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions>
CLSID = {85d1f590-48f4-11d9-9669-0800200c9a66} FilePath = File Size = 0 File MD5 =
CLSID = {92780B25-18CC-41C8-B9BE-3C9C571A8263} FilePath = File Size = 0 File MD5 =
<HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Extensions>
CLSID = CmdMapping FilePath = File Size = 0 File MD5 =
CLSID = SolidConverterPDF FilePath = File Size = 0 File MD5 =
##########################LSP CHAIN DATA##########################
<HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVI CES\WINSOCK2\PARAMETERS>
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000001 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000002 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000003 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000004 Filepath = C:\WINNT\system32\rsvpsp.dll File Size = 77072 File MD5 = ff2ac9fb7ed4f4a1192492837c458578
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000005 Filepath = C:\WINNT\system32\rsvpsp.dll File Size = 77072 File MD5 = ff2ac9fb7ed4f4a1192492837c458578
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000006 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000007 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000008 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000009 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000010 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000011 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000012 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
Sequence Num = SYSTEM\CurrentControlSet\Services\WinSock2\Paramet ers\Protocol_Catalog9\Catalog_Entries\000000000013 Filepath = C:\WINNT\system32\msafd.dll File Size = 108816 File MD5 = cae7a80bc57e8476b54e922f6db58f79
##########################UNINSTALL DATA##########################
<HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CUR RENTVERSION\UNINSTALL>
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\ACDSee DisplayName = ACDSee
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Ad-Aware SE Personal DisplayName = Ad-Aware SE Personal
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\AddressBook
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\AntiVir/XP DisplayName = AntiVir/XP
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\ATI Display Driver DisplayName = ATI Display Driver
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Autodesk Express Viewer DisplayName = Autodesk Express Viewer InstallLocation = C:\Programmi\Autodesk\Autodesk Express Viewer
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Branding
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\CCleaner DisplayName = CCleaner (remove only)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\CdaC13Ba DisplayName = SafeCast Shared Components InstallLocation = C:\Programmi\File comuni\Macrovision Shared\SafeCast\Install\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Connection Manager
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\DirectAnimation
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\DirectDrawEx
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\DXM_Runtime
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\EPSON Printer and Utilities DisplayName = Software per stampante EPSON
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\expinst
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\FileZilla DisplayName = FileZilla (remove only)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Fontcore
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\HijackThis DisplayName = HijackThis 1.99.1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Hollywood FX for Studio DisplayName = Pinnacle Hollywood FX for Studio
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\hp deskjet 5550 series DisplayName = Disinstallazione di hp deskjet 5550 series
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\hp print screen utility DisplayName = hp print screen utility
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\ICW
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\IE40
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\IE4Data
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\IE5BAKEX
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\IEData
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\IEREADME
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Image Web Server IE Plugin DisplayName = Image Web Server IE Plugins 1,7,1,43
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\InCD!UninstallKey DisplayName = Ahead InCD
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\InstallShield Uninstall Information
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} DisplayName = SmartSound Quicktracks Plugin InstallLocation = C:\Programmi\SmartSound Software\Quicktracks\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\InstallShield_{DA13B1E3-4362-4442-8345-CCA945A8F760}
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB833407 DisplayName = Aggiornamento rapido di Windows 2000 - KB833407
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB839643-DirectX9 DisplayName = Aggiornamento rapido di DirectX 9 - KB839643
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB842773 DisplayName = Aggiornamento rapido di Windows 2000 - KB842773
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB867282-IE6SP1-20050127.163319 DisplayName = Aggiornamento rapido per Windows 2000 - KB867282
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB883939-IE6SP1-20050428.125228 DisplayName = Aggiornamento rapido per Windows 2000 - KB883939
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB884016
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB890046 DisplayName = Aggiornamento rapido di Windows 2000 - KB890046
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB890923-IE6SP1-20050225.103456 DisplayName = Aggiornamento rapido per Windows 2000 - KB890923
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB893803 DisplayName = Windows Installer 3.1 (KB893803)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB893803v2 DisplayName = Windows Installer 3.1 (KB893803)
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB894320 DisplayName = Aggiornamento rapido di Windows 2000 - KB894320
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB896358 DisplayName = Aggiornamento rapido di Windows 2000 - KB896358
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB896422 DisplayName = Aggiornamento rapido di Windows 2000 - KB896422
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB897715-OE6SP1-20050503.210336 DisplayName = Aggiornamento rapido per Windows 2000 - KB897715
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\KB901214 DisplayName = Aggiornamento rapido di Windows 2000 - KB901214
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Language pack for Ad-Aware SE DisplayName = Language pack for Ad-Aware SE
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Macromedia Shockwave Player DisplayName = Macromedia Shockwave Player
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Microsoft NetShow Player 2.0

[vannicv]

Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MobileOptionPack
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MPlayer2
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30-Beta1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30-Beta2
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30-KB884016
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30-RC1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30-RC2
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI30a-KB884016
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI31-Beta
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MSI31-RC1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MsJavaVM
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\MUSICMATCH Jukebox DisplayName = MUSICMATCH Jukebox
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Nero - Burning Rom!UninstallKey DisplayName = Nero 6 Ultra Edition
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\NeroVision!UninstallKey DisplayName = NeroVision Express 3
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\NetMeeting
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\NMPUninstallKey DisplayName = Nero Media Player
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\OutlookExpress
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Privacy Eraser_is1 DisplayName = Privacy Eraser 3.50
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Q828026 DisplayName = Aggiornamento rapido di Windows Media Player [Per ulteriori informazioni vedere Q828026]
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Q903235 DisplayName = Internet Explorer Q903235
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\QuickTime DisplayName = QuickTime
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\RNCompiler 6.0 DisplayName = Advanced RealMedia Export Plug-in for Premiere 6.0
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\SchedulingAgent
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Shockwave
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\ShockwaveFlash
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\SimpleOCR 3.1 DisplayName = SimpleOCR 3.1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\SpoofStick for Internet Explorer DisplayName = SpoofStick for Internet Explorer 1.02
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Spybot - Search & Destroy_is1 DisplayName = Spybot - Search & Destroy 1.4 InstallLocation = C:\Programmi\Spybot - Search & Destroy\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Sunplus CA533A DisplayName = Digital Camera, WDM Video Capture
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Update Rollup 1 DisplayName = Aggiornamento cumulativo 1 per Windows 2000 SP4
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Windows 2000 Service Pack DisplayName = Windows 2000 Service Pack 4
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\WinRAR archiver DisplayName = WinRAR gestione archivi
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\WMP7 DisplayName = Windows Media Player 7.1
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\Works DisplayName = Microsoft Works 4.0
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\ZoneAlarm Pro DisplayName = ZoneAlarm Pro
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} DisplayName = PDFCreator 0.8.0
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{036AA4D4-6D32-11D4-9875-00105ACE7734} DisplayName = Logitech iTouch Software
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{0BEDBD4E-2D34-47B5-9973-57E62B29307C} DisplayName = ATI Control Panel
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{2F353D44-73BB-4971-B31D-F7642E9E9531} DisplayName = Macromedia Flash MX 2004 InstallLocation = C:\Programmi\Macromedia\Flash MX 2004
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{3BE480ED-E17A-431A-981C-5C2EDDBCD3BF} DisplayName = Macromedia Flash MX InstallLocation = C:\Programmi\Macromedia\Flash MX
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{3E908702-AF35-4611-9518-955DA24B7E07} DisplayName = Parser Microsoft XML e SDK InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66} DisplayName = HydraVision
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E} DisplayName = SmartSound Quicktracks Plugin InstallLocation = C:\Programmi\SmartSound Software\Quicktracks\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{4D826618-59C6-11D4-976E-00C04F8EEB39} DisplayName = Macromedia FreeHand 10 InstallLocation = C:\Programmi\Macromedia\FreeHand 10
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{4EF69D40-4DC9-485E-95D3-B1C22F218FC8} DisplayName = upapp InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{5783F2D7-0201-0410-0002-0060B0CE6BBA} DisplayName = AutoCAD 2004 InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{5809E7CF-4DCF-11D4-9875-00105ACE7734} DisplayName = Logitech MouseWare 9.71
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{5B239A98-4222-4D8C-AF38-1A8EC07F956B}
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{5D0930A0-1040-433A-8BB9-602665550DD0}
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{6F716DA2-398F-11D3-85E1-005004838609} DisplayName = WebFldrs InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{8B4AB829-DFD3-436D-B808-D9733D76C590} DisplayName = Macromedia Dreamweaver MX InstallLocation = C:\Programmi\Macromedia\Dreamweaver MX
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB} DisplayName = Logitech Desktop Messenger
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{90110410-6000-11D3-8CFE-0150048383C9} DisplayName = Microsoft Office Professional Edition 2003 InstallLocation = C:\Programmi\Microsoft Office\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{9811A185-3D3D-11D6-9E14-00036D172B00} DisplayName = Adobe MPEG Encoder InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{9984DF60-1C5B-11D3-ACA1-908A4FC10801} DisplayName = Intel Application Accelerator
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{9E491AB7-4589-48CA-9CBB-874CB2788391} DisplayName = Studio 9 InstallLocation = C:\Programmi\Pinnacle\Studio 9
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{A4D7B764-4140-11D4-88EB-0050DA3579C0} DisplayName = Nero InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{A5BA14E0-7384-11D4-BAE7-00409631A2C8} DisplayName = Macromedia Extension Manager InstallLocation = C:\Programmi\Macromedia\Extension Manager
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{AC76BA86-7AD7-1033-7B44-000000000001} DisplayName = Adobe Reader 6.0 InstallLocation = C:\Programmi\Adobe\Acrobat 6.0\Reader\
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{B6A6BCFB-A67D-49C7-8E0C-DEDA3FA28CA4} DisplayName = Audible Manager
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{BF915BB7-8675-40B3-835B-44A3304ECB7B} DisplayName = Microsoft Works 7.0 InstallLocation = INSTALLDIR
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{E957696E-6D13-4B92-AF02-2073D7D522B4} DisplayName = ATI Multimedia Center 7.8.0.0
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{E9A2ECEB-CE47-4AB9-9ABC-29731A1F5733} DisplayName = Digital Camera Drivers InstallLocation =
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{EE5B8E34-973C-4FBE-AC83-99F064009FC7} DisplayName = SpyHunter InstallLocation = C:\Programmi\Enigma Software Group\SpyHunter
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{EFB21DE7-8C19-4A88-BB28-A766E16493BC} DisplayName = Adobe Photoshop CS InstallLocation = C:\Programmi\Adobe\Photoshop CS
Subkey Name = Software\Microsoft\Windows\CurrentVersion\Uninstal l\{FB08F381-6533-4108-B7DD-039E11FBC27E} DisplayName = Avance AC'97 Audio


Cosa mi consigli di fare??
Spero che voi ne capite + di me!!!
Grazie

[NetEscape]

Se il problema nn si ripresenta dovresti stare tranquillo. Nn mi sembra di aver visto niente di anomalo. Per sicurezza fai una scansione con Ad-Aware o Spybot dalla modalità provvisoria, dopo averli aggiornati. ciao