Voila les rapports:
log.txt:
Logfile of random's system information tool (written by random/random)
Run by Fabien at 2008-09-10 16:12:17
Microsoft Windows XP Professional Service Pack 3
System drive C: has 16 GB (20%) free of 78 GB
Total RAM: 759 MB (35% free)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:13:12, on 10/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\VM305_STI.EXE
C:\WINDOWS\system32\ezSP_Px.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmi\Nokia\Nokia PC Suite 7\PCSync2.exe
C:\Programmi\Google\Google Updater\GoogleUpdater.exe
C:\Programmi\Reality Fusion\Reality Fusion GameCam SE\Program\RFTRay.exe
C:\Programmi\Windows Live\Mail\wlmail.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
C:\Programmi\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Programmi\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmi\File comuni\Nokia\MPAPI\MPAPI3s.exe
C:\Programmi\Windows Live Favorites\wlfsync.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\SoftwareDistribution\Download\6992704de146fd04c2b287b390b5ce62\update\update.exe
C:\Documents and Settings\Fabien\Desktop\RSIT.exe
C:\Programmi\trend micro\Fabien.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.live.com/?wa=wsignin1.0
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file)
R3 - URLSearchHook: (no name) - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - (no file)
O1 - Hosts: 172.18.18.10 srv0
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0BD44AB1-76A7-4E05-92F4-4B065FE72BD6} - C:\Programmi\Applications\iebt.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\system32\ezSP_Px.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9213] command /c del "C:\Programmi\Applications\iebt.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8828] cmd /c del "C:\Programmi\Applications\iebt.dll_old"
O4 - HKLM\..\RunOnce: [SpybotDeletingA7642] command /c del "C:\Programmi\Applications\iebu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8481] cmd /c del "C:\Programmi\Applications\iebu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA2583] command /c del "C:\Programmi\Applications\iebtmm.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC9998] cmd /c del "C:\Programmi\Applications\iebtmm.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA3635] command /c del "C:\Programmi\Applications\iebtu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC1462] cmd /c del "C:\Programmi\Applications\iebtu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA2057] command /c del "C:\Programmi\Applications\wcu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC948] cmd /c del "C:\Programmi\Applications\wcu.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1241] command /c del "C:\Programmi\Applications\wcs.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingC800] cmd /c del "C:\Programmi\Applications\wcs.exe"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1279] command /c del "C:\Programmi\Applications\myd.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC653] cmd /c del "C:\Programmi\Applications\myd.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA2001] command /c del "C:\Programmi\Applications\mym.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC121] cmd /c del "C:\Programmi\Applications\mym.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA5465] command /c del "C:\Programmi\Applications\myp.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3658] cmd /c del "C:\Programmi\Applications\myp.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9777] command /c del "C:\Programmi\Applications\myv.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC9427] cmd /c del "C:\Programmi\Applications\myv.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1674] command /c del "C:\Programmi\Applications\ot.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC7500] cmd /c del "C:\Programmi\Applications\ot.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingA4996] command /c del "C:\Programmi\Applications\ts.ico"
O4 - HKLM\..\RunOnce: [SpybotDeletingC4350] cmd /c del "C:\Programmi\Applications\ts.ico"
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Programmi\Spybot - Search & Destroy\SpybotSD.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [kueia] c:\documents and settings\fabien\impostazioni locali\dati applicazioni\kueia.exe kueia
O4 - HKCU\..\Run: [Nokia.PCSync] "C:\Programmi\Nokia\Nokia PC Suite 7\PCSync2.exe" /NoDialog
O4 - HKCU\..\RunOnce: [SpybotDeletingB2768] command /c del "C:\Programmi\Applications\iebt.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingD5365] cmd /c del "C:\Programmi\Applications\iebt.dll_old"
O4 - HKCU\..\RunOnce: [SpybotDeletingB3514] command /c del "C:\Programmi\Applications\iebu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD7816] cmd /c del "C:\Programmi\Applications\iebu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB3623] command /c del "C:\Programmi\Applications\iebtmm.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD18] cmd /c del "C:\Programmi\Applications\iebtmm.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB9943] command /c del "C:\Programmi\Applications\iebtu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD4506] cmd /c del "C:\Programmi\Applications\iebtu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB8989] command /c del "C:\Programmi\Applications\wcu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD6135] cmd /c del "C:\Programmi\Applications\wcu.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB2702] command /c del "C:\Programmi\Applications\wcs.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingD5962] cmd /c del "C:\Programmi\Applications\wcs.exe"
O4 - HKCU\..\RunOnce: [SpybotDeletingB3013] command /c del "C:\Programmi\Applications\myd.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2627] cmd /c del "C:\Programmi\Applications\myd.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1718] command /c del "C:\Programmi\Applications\mym.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD4539] cmd /c del "C:\Programmi\Applications\mym.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB5076] command /c del "C:\Programmi\Applications\myp.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD1228] cmd /c del "C:\Programmi\Applications\myp.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB5154] command /c del "C:\Programmi\Applications\myv.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD8424] cmd /c del "C:\Programmi\Applications\myv.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB144] command /c del "C:\Programmi\Applications\ot.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD7373] cmd /c del "C:\Programmi\Applications\ot.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingB6844] command /c del "C:\Programmi\Applications\ts.ico"
O4 - HKCU\..\RunOnce: [SpybotDeletingD7843] cmd /c del "C:\Programmi\Applications\ts.ico"
O4 - HKLM\..\Policies\Explorer\Run: [smile] C:\Programmi\Applications\wcs.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Programmi\Google\Google Updater\GoogleUpdater.exe
O4 - Global Startup: Reality Fusion GameCam SE.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Programmi\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Programmi\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?c883aadc9fb74c1da6529ccb7959ec4d
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Programmi\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?c883aadc9fb74c1da6529ccb7959ec4d
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
O16 - DPF: {03B39B10-9AB9-4DBB-8189-7F76E0CE5F3F} (FavImport Class) - https://favorites.live.com/cab/ImportAx.cab?v=13,0,1609,00
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=58813
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab
O16 - DPF: {5CB26FF7-663A-471F-BDA2-15FE6CCA1B6F} (CTDx9 Control) - http://62.94.141.90:90/admin/CTDx9.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase5036.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/...
O16 - DPF: {C9386579-3C0F-4713-82C6-5BA8088C7C8D} (Windows Live SkyDrive Upload Tool) - http://secure.shared.live.com/...
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://3dlifeplayer.dl.3dvia.com/player/install/installer.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{FB134D82-9AE2-44E3-9127-6CB74A08BDDC}: Domain = iem.lan
O17 - HKLM\System\CCS\Services\Tcpip\..\{FB134D82-9AE2-44E3-9127-6CB74A08BDDC}: NameServer = 172.18.18.10,80.10.246.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Programmi\File comuni\Sony Shared\AVLib\SPTISRV.exe
End of file - 15918 bytes
Scheduled tasks folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\avast! Antivirus.job
C:\WINDOWS\tasks\Spybot - Search & Destroy - Scheduled Task.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D1E50365-4572-4D7B-AD2D-1F686DE797CE}.job
C:\WINDOWS\tasks\User_Feed_Synchronization-{D450FD7E-0698-493B-B8C8-1C071BECE502}.job
C:\WINDOWS\tasks\Vérifier les mises à jour de Windows Live Toolbar.job
Registry dump
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Supporto di collegamento per Adobe PDF Reader - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0BD44AB1-76A7-4E05-92F4-4B065FE72BD6}]
C:\Programmi\Applications\iebt.dll []
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA}]
RealPlayer Download and Record Plugin for Internet Explorer - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll [2008-07-10 308856]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\PROGRA~1\SPYBOT~1\SDHelper.dll [2008-08-14 1562448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7E853D72-626A-48EC-A868-BA8D5E23E045}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Programme d'aide de l'Assistant de connexion Windows Live - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2007-09-20 328752]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}]
Google Toolbar Notifier BHO - C:\Programmi\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll [2008-04-27 654320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0}]
Windows Live Toolbar Helper - C:\Programmi\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Windows Live Toolbar - C:\Programmi\Windows Live Toolbar\msntb.dll [2007-10-19 546320]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2004-08-20 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2004-08-20 118784]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2003-04-24 54784]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"PinnacleDriverCheck"=C:\WINDOWS\System32\PSDrvCheck.exe [2003-12-04 406016]
"BigDog305"=C:\WINDOWS\VM305_STI.EXE [2006-08-31 61440]
"ezShieldProtector for Px"=C:\WINDOWS\system32\ezSP_Px.exe [2002-08-20 40960]
"avast!"=C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe [2008-07-19 78008]
"QuickTime Task"=C:\Programmi\QuickTime\qttask.exe [2008-05-27 413696]
"TkBellExe"=C:\Programmi\File comuni\Real\Update_OB\realsched.exe [2008-07-10 185896]
"iTunesHelper"=C:\Programmi\iTunes\iTunesHelper.exe [2008-07-10 289064]
"Adobe Reader Speed Launcher"=C:\Programmi\Adobe\Reader 8.0\Reader\Reader_sl.exe [2008-01-11 39792]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingA9213"=command /c del C:\Programmi\Applications\iebt.dll_old []
"SpybotDeletingC8828"=cmd /c del C:\Programmi\Applications\iebt.dll_old []
"SpybotDeletingA7642"=command /c del C:\Programmi\Applications\iebu.exe []
"SpybotDeletingC8481"=cmd /c del C:\Programmi\Applications\iebu.exe []
"SpybotDeletingA2583"=command /c del C:\Programmi\Applications\iebtmm.exe []
"SpybotDeletingC9998"=cmd /c del C:\Programmi\Applications\iebtmm.exe []
"SpybotDeletingA3635"=command /c del C:\Programmi\Applications\iebtu.exe []
"SpybotDeletingC1462"=cmd /c del C:\Programmi\Applications\iebtu.exe []
"SpybotDeletingA2057"=command /c del C:\Programmi\Applications\wcu.exe []
"SpybotDeletingC948"=cmd /c del C:\Programmi\Applications\wcu.exe []
"SpybotDeletingA1241"=command /c del C:\Programmi\Applications\wcs.exe []
"SpybotDeletingC800"=cmd /c del C:\Programmi\Applications\wcs.exe []
"SpybotDeletingA1279"=command /c del C:\Programmi\Applications\myd.ico []
"SpybotDeletingC653"=cmd /c del C:\Programmi\Applications\myd.ico []
"SpybotDeletingA2001"=command /c del C:\Programmi\Applications\mym.ico []
"SpybotDeletingC121"=cmd /c del C:\Programmi\Applications\mym.ico []
"SpybotDeletingA5465"=command /c del C:\Programmi\Applications\myp.ico []
"SpybotDeletingC3658"=cmd /c del C:\Programmi\Applications\myp.ico []
"SpybotDeletingA9777"=command /c del C:\Programmi\Applications\myv.ico []
"SpybotDeletingC9427"=cmd /c del C:\Programmi\Applications\myv.ico []
"SpybotDeletingA1674"=command /c del C:\Programmi\Applications\ot.ico []
"SpybotDeletingC7500"=cmd /c del C:\Programmi\Applications\ot.ico []
"SpybotDeletingA4996"=command /c del C:\Programmi\Applications\ts.ico []
"SpybotDeletingC4350"=cmd /c del C:\Programmi\Applications\ts.ico []
"SpybotSnD"=C:\Programmi\Spybot - Search & Destroy\SpybotSD.exe [2008-07-30 4891984]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
"smile"=C:\Programmi\Applications\wcs.exe []
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-13 15360]
"MsnMsgr"=C:\Programmi\Windows Live\Messenger\msnmsgr.exe [2007-10-18 5724184]
"PC Suite Tray"=C:\Programmi\Nokia\Nokia PC Suite 7\PCSuite.exe [2008-08-11 1124352]
"SpybotSD TeaTimer"=C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe [2008-08-18 1832272]
"kueia"=c:\documents and settings\fabien\impostazioni locali\dati applicazioni\kueia.exe kueia []
"Nokia.PCSync"=C:\Programmi\Nokia\Nokia PC Suite 7\PCSync2.exe [2008-06-17 1249280]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpybotDeletingB2768"=command /c del C:\Programmi\Applications\iebt.dll_old []
"SpybotDeletingD5365"=cmd /c del C:\Programmi\Applications\iebt.dll_old []
"SpybotDeletingB3514"=command /c del C:\Programmi\Applications\iebu.exe []
"SpybotDeletingD7816"=cmd /c del C:\Programmi\Applications\iebu.exe []
"SpybotDeletingB3623"=command /c del C:\Programmi\Applications\iebtmm.exe []
"SpybotDeletingD18"=cmd /c del C:\Programmi\Applications\iebtmm.exe []
"SpybotDeletingB9943"=command /c del C:\Programmi\Applications\iebtu.exe []
"SpybotDeletingD4506"=cmd /c del C:\Programmi\Applications\iebtu.exe []
"SpybotDeletingB8989"=command /c del C:\Programmi\Applications\wcu.exe []
"SpybotDeletingD6135"=cmd /c del C:\Programmi\Applications\wcu.exe []
"SpybotDeletingB2702"=command /c del C:\Programmi\Applications\wcs.exe []
"SpybotDeletingD5962"=cmd /c del C:\Programmi\Applications\wcs.exe []
"SpybotDeletingB3013"=command /c del C:\Programmi\Applications\myd.ico []
"SpybotDeletingD2627"=cmd /c del C:\Programmi\Applications\myd.ico []
"SpybotDeletingB1718"=command /c del C:\Programmi\Applications\mym.ico []
"SpybotDeletingD4539"=cmd /c del C:\Programmi\Applications\mym.ico []
"SpybotDeletingB5076"=command /c del C:\Programmi\Applications\myp.ico []
"SpybotDeletingD1228"=cmd /c del C:\Programmi\Applications\myp.ico []
"SpybotDeletingB5154"=command /c del C:\Programmi\Applications\myv.ico []
"SpybotDeletingD8424"=cmd /c del C:\Programmi\Applications\myv.ico []
"SpybotDeletingB144"=command /c del C:\Programmi\Applications\ot.ico []
"SpybotDeletingD7373"=cmd /c del C:\Programmi\Applications\ot.ico []
"SpybotDeletingB6844"=command /c del C:\Programmi\Applications\ts.ico []
"SpybotDeletingD7843"=cmd /c del C:\Programmi\Applications\ts.ico []
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica
Outil de mise à jour Google.lnk - C:\Programmi\Google\Google Updater\GoogleUpdater.exe
Reality Fusion GameCam SE.lnk - C:\Programmi\Reality Fusion\Reality Fusion GameCam SE\Program\RFTRay.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2004-08-20 344064]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Programmi\Messenger\msmsgs.exe"="C:\Programmi\Messenger\msmsgs.exe:*:Enabled:Windows Messenger"
"C:\Programmi\Skype\Phone\Skype.exe"="C:\Programmi\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Programmi\Windows Live\Messenger\msnmsgr.exe"="C:\Programmi\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Programmi\Windows Live\Messenger\livecall.exe"="C:\Programmi\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"C:\Programmi\File comuni\Nokia\Service Layer\A\nsl_host_process.exe"="C:\Programmi\File comuni\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process "
"C:\Programmi\Nokia\Nokia Software Updater\nsu_ui_client.exe"="C:\Programmi\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater"
"C:\Programmi\Windows Live\PortableaMSN\amsn\bin\wish.exe"="C:\Programmi\Windows Live\PortableaMSN\amsn\bin\wish.exe:*:Enabled:Wish Application"
"C:\Programmi\aMSN\bin\wish.exe"="C:\Programmi\aMSN\bin\wish.exe:*:Enabled:Wish Application"
"E:\PortableaMSN\AMSN\BIN\wish.exe"="E:\PortableaMSN\AMSN\BIN\wish.exe:*:Enabled:Wish Application"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Programmi\Internet Explorer\iexplore.exe"="C:\Programmi\Internet Explorer\iexplore.exe:*:Disabled:Internet Explorer"
"C:\Programmi\Bonjour\mDNSResponder.exe"="C:\Programmi\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Programmi\iTunes\iTunes.exe"="C:\Programmi\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Programmi\ma-config.com\maconfservice.exe"="C:\Programmi\ma-config.com\maconfservice.exe:LocalSubNet:Enabled:maconfservice"
"C:\Documents and Settings\Fabien\Desktop\widget_nrj.exe"="C:\Documents and Settings\Fabien\Desktop\widget_nrj.exe:*:Enabled:widget_nrj"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\WINDOWS\system32\rundll32.exe"="C:\WINDOWS\system32\rundll32.exe:*:Enabled:Modulo di esecuzione DLL come applicazioni"
"C:\WINDOWS\system32\dpvsetup.exe"="C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test"
"C:\Programmi\Skype\Phone\Skype.exe"="C:\Programmi\Skype\Phone\Skype.exe:*:Enabled:Skype. The whole world can talk for free."
"C:\Programmi\Windows Live\Messenger\msnmsgr.exe"="C:\Programmi\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\Programmi\Windows Live\Messenger\livecall.exe"="C:\Programmi\Windows Live\Messenger\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
List of files/folders created in the last three months
2008-09-10 16:13:06 ----HDC---- C:\WINDOWS\$NtUninstallKB938464$
2008-09-10 16:12:21 ----D---- C:\Programmi\trend micro
2008-09-10 16:12:17 ----D---- C:\rsit
2008-09-10 16:12:09 ----D---- C:\WINDOWS\LastGood
2008-08-31 12:14:16 ----D---- C:\Programmi\File comuni\PCSuite
2008-08-31 11:49:27 ----D---- C:\Programmi\PC Connectivity Solution
2008-08-20 15:25:25 ----D---- C:\Programmi\MSBuild
2008-08-20 15:16:29 ----D---- C:\WINDOWS\system32\XPSViewer
2008-08-20 15:14:00 ----D---- C:\Programmi\Reference Assemblies
2008-08-20 15:11:01 ----N---- C:\WINDOWS\system32\spmsg2.dll
2008-08-20 14:56:28 ----RSD---- C:\WINDOWS\assembly
2008-08-20 14:54:34 ----D---- C:\WINDOWS\Microsoft.NET
2008-08-15 13:05:59 ----HDC---- C:\WINDOWS\$NtUninstallKB952954$
2008-08-15 13:05:09 ----HDC---- C:\WINDOWS\$NtUninstallKB946648$
2008-08-15 13:04:08 ----HDC---- C:\WINDOWS\$NtUninstallKB953839$
2008-08-15 13:02:57 ----HDC---- C:\WINDOWS\$NtUninstallKB950974$
2008-08-15 12:48:58 ----HDC---- C:\WINDOWS\$NtUninstallKB951072-v2$
2008-08-15 12:48:27 ----HDC---- C:\WINDOWS\$NtUninstallKB952287$
2008-08-15 12:37:04 ----HDC---- C:\WINDOWS\$NtUninstallKB951066$
2008-08-01 16:07:47 ----A---- C:\WINDOWS\system32\wdfcoinstaller01005.dll
2008-08-01 16:07:47 ----A---- C:\WINDOWS\system32\nmwcdcocls.dll
2008-07-28 18:32:27 ----A---- C:\WINDOWS\system32\igfxres.dll
2008-07-28 18:18:37 ----D---- C:\Programmi\ma-config.com
2008-07-28 18:18:37 ----D---- C:\Documents and Settings\All Users\Dati applicazioni\ma-config.com
2008-07-28 15:38:18 ----D---- C:\Programmi\Wakfu
2008-07-12 13:50:45 ----D---- C:\Programmi\iPod
2008-07-12 13:50:38 ----D---- C:\Programmi\iTunes
2008-07-12 13:49:13 ----D---- C:\Programmi\Bonjour
2008-07-11 12:33:11 ----D---- C:\Documents and Settings\Fabien\Dati applicazioni\Media Player Classic
2008-07-11 12:32:37 ----D---- C:\Programmi\Real Alternative
2008-07-10 12:02:55 ----D---- C:\Programmi\File comuni\xing shared
2008-07-10 12:01:52 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2008-07-10 12:01:11 ----A---- C:\WINDOWS\system32\pndx5032.dll
2008-07-10 12:01:10 ----A---- C:\WINDOWS\system32\pndx5016.dll
2008-07-10 12:00:52 ----A---- C:\WINDOWS\system32\pncrt.dll
2008-07-10 12:00:37 ----D---- C:\Documents and Settings\Fabien\Dati applicazioni\Real
2008-07-09 13:11:30 ----HDC---- C:\WINDOWS\$NtUninstallKB951978$
2008-07-09 13:02:04 ----HDC---- C:\WINDOWS\$NtUninstallKB951748$
2008-07-03 11:12:41 ----D---- C:\Programmi\SDistTest
2008-07-03 10:59:56 ----D---- C:\Programmi\Spybot - Search & Destroy
2008-07-03 10:59:56 ----D---- C:\Documents and Settings\All Users\Dati applicazioni\Spybot - Search & Destroy
2008-07-01 15:58:47 ----D---- C:\Programmi\Le Robert
2008-07-01 15:58:47 ----A---- C:\WINDOWS\rcwin.ini
2008-07-01 15:25:56 ----D---- C:\Documents and Settings\All Users\Dati applicazioni\NCH Software
2008-07-01 15:25:47 ----D---- C:\Documents and Settings\All Users\Dati applicazioni\NCH Swift Sound
2008-07-01 15:25:44 ----D---- C:\Programmi\NCH Swift Sound
2008-07-01 15:25:44 ----D---- C:\Documents and Settings\Fabien\Dati applicazioni\NCH Swift Sound
2008-07-01 15:24:41 ----D---- C:\Programmi\NCH Software
2008-06-20 20:18:04 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2$
2008-06-14 12:32:55 ----D---- C:\Programmi\CamStudio
2008-06-13 15:49:20 ----D---- C:\Programmi\Web Builder
2008-06-11 18:06:24 ----HDC---- C:\WINDOWS\$NtUninstallKB951698$
2008-06-11 18:06:09 ----HDC---- C:\WINDOWS\$NtUninstallKB950762$
2008-06-11 18:05:56 ----HDC---- C:\WINDOWS\$NtUninstallKB950760$
2008-06-11 18:05:31 ----HDC---- C:\WINDOWS\$NtUninstallKB951376$
List of drivers
R1 Aavmker4;avast! Asynchronous Virus Monitor; C:\WINDOWS\system32\drivers\Aavmker4.sys [2008-07-19 26944]
R1 aswSP;avast! Self Protection; C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 78416]
R1 aswTdi;avast! Network Shield Support; C:\WINDOWS\system32\drivers\aswTdi.sys [2008-07-19 42912]
R1 intelppm;Driver processore Intel; C:\WINDOWS\System32\DRIVERS\intelppm.sys [2008-04-13 40448]
R1 lusbaudio;Logitech USB Microphone; C:\WINDOWS\system32\drivers\OVSound2.sys [2001-08-17 25216]
R2 aswFsBlk;aswFsBlk; C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 20560]
R2 aswMon2;avast! Standard Shield Support; C:\WINDOWS\system32\drivers\aswMon2.sys [2008-07-19 94416]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-04-24 730092]
R3 Arp1394;Protocollo client ARP 1394; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2008-04-13 60800]
R3 ASAPIW2k;ASAPIW2K; C:\WINDOWS\system32\drivers\ASAPIW2k.sys [2003-12-04 11264]
R3 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2008-07-19 23152]
R3 b57w2k;Broadcom NetXtreme Gigabit Ethernet; C:\WINDOWS\System32\DRIVERS\b57xp32.sys [2003-01-07 166016]
R3 GEARAspiWDM;GEARAspiWDM; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-01-29 16168]
R3 ialm;ialm; C:\WINDOWS\System32\DRIVERS\ialmnt5.sys [2004-08-20 737874]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2008-04-13 61824]
R3 odysseyIM3;Odyssey Network Services Miniport; C:\WINDOWS\system32\DRIVERS\odysseyIM3.sys [2003-05-14 62673]
R3 QCEmerald;Logitech QuickCam Web; C:\WINDOWS\system32\DRIVERS\OVCE.sys [2001-08-17 31872]
R3 TNET1130x;ZyXEL 802.11g Wireless Card; C:\WINDOWS\system32\DRIVERS\tnet1130x.sys [2004-06-10 385664]
R3 usbccgp;Driver principale generico USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
R3 usbhub;Hub abilitato USB2; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2008-04-13 59520]
R3 usbuhci;Driver Miniport Controller Universal Host USB Microsoft; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
S3 {6080A529-897E-4629-A488-ABA0C29B635E};Intel(R) Graphics Platform (SoftBIOS) Driver; C:\WINDOWS\system32\drivers\ialmsbw.sys [2003-04-15 113504]
S3 {D31A0762-0CEB-444e-ACFF-B049A1F6FE91};Intel(R) Graphics Chipset (KCH) Driver; C:\WINDOWS\system32\drivers\ialmkchw.sys [2003-04-15 78752]
S3 61883;Periferica unità 61883; C:\WINDOWS\System32\DRIVERS\61883.sys [2008-04-13 48128]
S3 Avc;Periferica AVC; C:\WINDOWS\System32\DRIVERS\avc.sys [2008-04-13 38912]
S3 Bridge;Bridge MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 BridgeMP;Miniport del ponte MAC; C:\WINDOWS\System32\DRIVERS\bridge.sys [2008-04-13 71552]
S3 CBTNDIS5;CBTNDIS5 NDIS Protocol Driver; \??\C:\WINDOWS\system32\CBTNDIS5.SYS []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 HidUsb;Driver di classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
S3 mouhid;Driver di mouse HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-08-30 12160]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\System32\DRIVERS\msdv.sys [2008-04-13 51200]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nmwcd;Nokia USB Phone Parent; C:\WINDOWS\system32\drivers\ccdcmb.sys [2008-05-07 17536]
S3 nmwcdc;Nokia USB Generic; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2008-05-07 20864]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2007-09-17 21632]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2008-06-06 8064]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2008-07-10 32000]
S3 usbscan;Driver scanner USB; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-13 26112]
S3 USBSTOR;Driver archiviazione di massa USB; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 Wdf01000;Wdf01000; C:\WINDOWS\system32\DRIVERS\Wdf01000.sys [2006-11-02 492000]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-15 82688]
S3 ZSMC0305;SUPER 188 PC CAMERA; C:\WINDOWS\System32\Drivers\usbVM305.sys [2006-08-31 391743]
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
List of services
R2 Apple Mobile Device;Apple Mobile Device; C:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-07-10 116040]
R2 aswUpdSv;avast! iAVS4 Control Service; C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe [2008-07-19 16056]
R2 avast! Antivirus;avast! Antivirus; C:\Programmi\Alwil Software\Avast4\ashServ.exe [2008-07-19 147640]
R2 Bonjour Service;Service Bonjour; C:\Programmi\Bonjour\mDNSResponder.exe [2007-07-24 229376]
R2 gusvc;Google Updater Service; C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe [2008-04-27 137200]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-13 14336]
R3 avast! Mail Scanner;avast! Mail Scanner; C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe [2008-07-19 250040]
R3 avast! Web Scanner;avast! Web Scanner; C:\Programmi\Alwil Software\Avast4\ashWebSv.exe [2008-07-23 348344]
R3 iPod Service;Service de l'iPod; C:\Programmi\iPod\bin\iPodService.exe [2008-07-10 532264]
R3 ServiceLayer;ServiceLayer; C:\Programmi\PC Connectivity Solution\ServiceLayer.exe [2008-08-07 575488]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2007-04-13 33632]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2007-04-13 68952]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [2006-10-20 36864]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2006-10-30 741376]
S3 ose;Office Source Engine; C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 PACSPTISVR;PACSPTISVR; C:\Programmi\File comuni\Sony Shared\AVLib\PACSPTISVR.exe [2004-10-29 53337]
S3 SPTISRV;Sony SPTI Service; C:\Programmi\File comuni\Sony Shared\AVLib\SPTISRV.exe [2004-10-29 69718]
S3 usnjsvc;Service Messenger Sharing Folders USN Journal Reader; C:\Programmi\Windows Live\Messenger\usnsvc.exe [2007-10-18 98328]
S3 WLSetupSvc;Windows Live Setup Service; C:\Programmi\Windows Live\installer\WLSetupSvc.exe [2007-10-25 266240]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2006-10-30 122880]
-----------------EOF-----------------
info.txt:
info.txt logfile of random's system information tool 2008-09-10 16:13:39
Uninstall list
-->C:\Programmi\File comuni\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{88E5FCB8-5F25-11D5-B16F-0800460222F0}\setup.exe" -l0x10 UNINSTALL
-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{D76298C2-E532-4A11-BCFF-76F3F19DA84D}\setup.exe" UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7}
Adobe Flash Player ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
Adobe Flash Player Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
Adobe Reader 8.1.2 - Italiano-->MsiExec.exe /I{AC76BA86-7AD7-1040-7B44-A81200000003}
Aggiornamento della protezione per Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows Media Player 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Aggiornamento della protezione per Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Aggiornamento per Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Aggiornamento per Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Aggiornamento rapido per Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Aggiornamento rapido per Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Aggiornamento rapido per Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Apple Mobile Device Support-->MsiExec.exe /I{35B91753-5789-4517-9CF1-2CCE3A8CF4F1}
Apple Software Update-->MsiExec.exe /I{02DFF6B1-1654-411C-8D7B-FD6052EF016F}
ArtMoney SE v7.28-->"C:\Programmi\ArtMoney\Uninstall\unins000.exe"
Assistant de connexion Windows Live-->MsiExec.exe /I{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}
avast! Antivirus-->C:\Programmi\Alwil Software\Avast4\aswRunDll.exe "C:\Programmi\Alwil Software\Avast4\Setup\setiface.dll",RunSetup
Bonjour-->MsiExec.exe /I{47BF1BD6-DCAC-468F-A0AD-E5DECC2211C3}
Bosch MPEG ActiveX Control-->C:\WINDOWS\IsUninst.exe -fC:\WINDOWS\system32\MPEGOcx\Uninst.isu
Broadcom Driver Installer-->C:\PROGRA~1\FILECO~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{BE6890C7-31EF-478C-812E-1E2899ABFCA9} /l1040
Codeur Windows Media Série 9-->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Dofus 1.24.0-->C:\Programmi\Dofus\uninstall.exe
Extension de Windows Live Toolbar (Windows Live Toolbar)-->MsiExec.exe /X{0CA6047C-D28B-4295-834A-07C52BA20C2D}
Google Earth-->MsiExec.exe /I{1D14373E-7970-4F2F-A467-ACA4F0EA21E3}
HijackThis 2.0.2-->"C:\Programmi\trend micro\HijackThis.exe" /uninstall
Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Intel(R) Extreme Graphics 2 Driver-->RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx PCI\VEN_8086&DEV_2572
iTunes-->MsiExec.exe /I{EF6C4600-306D-4F6A-A119-C2A877D25B4A}
Le Grand Robert & Collins-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\PROFES~1\RunTime\10\00\Intel32\Ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{E4A41F8D-5DFD-422F-8C7A-D77D56116A56}\setup.exe" -l0x40c -removeonly
Messenger Plus! Live-->"C:\Programmi\Messenger Plus! Live\Uninstall.exe"
Microsoft .NET Framework 2.0-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
Microsoft .NET Framework 3.0-->c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
Microsoft .NET Framework 3.0-->MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft Kernel-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Professional Edition 2003-->MsiExec.exe /I{90110410-6000-11D3-8CFE-0150048383C9}
Microsoft Office Visio Professional 2003-->MsiExec.exe /I{90510410-6000-11D3-8CFE-0150048383C9}
Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
Microsoft User-Mode Driver Framework Feature Pack 1.5-->"C:\WINDOWS\$NtUninstallWudf01005$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Mozilla Firefox (3.0.1)-->C:\Programmi\Mozilla Firefox\uninstall\helper.exe
MSVC80_x86-->MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Nero 6 Ultra Edition-->C:\Programmi\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Nero BurnRights (Ahead Software)-->C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL
neroxml-->MsiExec.exe /I{56C049BE-79E9-4502-BEA7-9754A3E60F9B}
Nokia Connectivity Cable Driver-->MsiExec.exe /X{C3F19A5F-35A8-4FDB-A6ED-0F4CE398DA48}
Nokia Flashing Cable Driver-->MsiExec.exe /X{2A0A6470-FD0F-4F45-9B11-85F3167DB943}
Nokia Map Loader-->MsiExec.exe /I{18B5996A-643E-4176-9BEB-27C45C9F1FC3}
Nokia Multimedia Factory-->"C:\Documents and Settings\All Users\Dati applicazioni\Installations\{4CFB3821-1582-4f3b-BF8D-30986923B36B}\Nokia_Multimedia_Factory_2_0.exe" /MAINTENANCE /SILENT="SWLPCER" /LANG="2057" /MSI_COMMON_OPTIONS="PCSLANG= MMFLANG=eng"
Nokia Multimedia Factory-->MsiExec.exe /I{4CFB3821-1582-4F3B-BF8D-30986923B36B}
Nokia PC Suite-->C:\Documents and Settings\All Users\Dati applicazioni\Installations\{A8C3710A-0BCA-4F10-9EC3-A302A1F1FA82}\Nokia_PC_Suite_rel_7_0_8_2_fre.exe
Nokia PC Suite-->MsiExec.exe /I{A8C3710A-0BCA-4F10-9EC3-A302A1F1FA82}
Nokia Software Updater-->MsiExec.exe /X{48110A46-A3A4-481E-8230-7873B7F4C696}
Odyssey Client-->MsiExec.exe /X{99D42EC7-652B-4819-B3E6-6450C815E03F}
oggcodecs 0.71.0946-->C:\Programmi\illiminable\oggcodecs\uninst.exe
OneCare Advisor (Windows Live Toolbar)-->MsiExec.exe /X{F242B06B-517F-4D62-B654-16B11564A912}
OpenMG Limited Patch 4.0-04-11-01-01-->C:\Programmi\File comuni\Sony Shared\OpenMG\HotFixes\HotFix4.0-04-11-01-01\HotFixSetup\setup.exe /u
OpenMG Secure Module 4.0.05-->C:\PROGRA~1\FILECO~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{BB92E35A-F5B8-4D59-90F3-CF863871BCF3} /l1033 UNINSTALL
Outil de mise à jour Google-->"C:\Programmi\Google\Google Updater\GoogleUpdater.exe" -uninstall
Pacchetto driver Windows - Nokia Modem (03/05/2008 3.7)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_635B28EFCFA9395123BB1C251595CB16129E2560\nokia_bluetooth.inf
Pacchetto driver Windows - Nokia Modem (03/13/2008 6.86.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_28F2EAC406838DA65AFF6C6886FE9FE96AEF5186\nokbtmdm.inf
Pacchetto driver Windows - Nokia Modem (05/22/2008 3.8)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_6F90B0F4A73A2F780A1010B5D6CB5DDFB098181E\nokia_bluetooth.inf
Pacchetto driver Windows - Nokia Modem (05/22/2008 7.00.0.1)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_E68D50F7E25BFE399D47C864C3B52557346242A9\nokbtmdm.inf
Pacchetto driver Windows - Nokia Modem (08/03/2007 6.84.0.2)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_1EB5F2E6F54A6BEDE9F436D1BA5D830FC71739BE\nokbtmdm.inf
Pacchetto driver Windows - Nokia Modem (10/12/2007 3.6)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_0A5D98F754C6588B2E3DDE89DDEF097075ADFFB7\nokia_bluetooth.inf
Pacchetto driver Windows - Nokia pccsmcfd (10/12/2007 6.85.4.0)-->C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_4A1E30386F4D0DEC8F5DF262CFBD8845EEBAB175\pccsmcfd.inf
Parser Microsoft XML e SDK-->MsiExec.exe /I{3E908702-AF35-4611-9518-955DA24B7E07}
PC Connectivity Solution-->MsiExec.exe /I{1A524CFE-DF85-4555-8BC2-0C89DBD8BC2C}
Pinnacle Hollywood FX 5-->C:\WINDOWS\unvise32.exe C:\Programmi\Pinnacle\Hollywood FX 5\uninstal.log
QuickCam-->MsiExec.exe /I{43A9F944-0398-425E-9E22-201F65FE0CCA}
QuickTime-->MsiExec.exe /I{08CA9554-B5FE-4313-938F-D4A417B81175}
RealPlayer-->C:\Programmi\File comuni\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek AC'97 Audio-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE
Security Update per Microsoft .NET Framework 2.0 (KB928365)-->C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
Skype™ 3.5-->MsiExec.exe /X{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}
Spybot - Search & Destroy-->"C:\Programmi\Spybot - Search & Destroy\unins000.exe"
Studio 9-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{9E491AB7-4589-48CA-9CBB-874CB2788391}\setup.exe" -l0x10 UNINSTALL
SUPER 188 PC CAMERA-->RunDll32 C:\PROGRA~1\FILECO~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programmi\InstallShield Installation Information\{8AD824A5-1CCC-4BB7-82C9-E6FB25CC0479}\setup.exe" -l0x9
TELL ME MORE-->"C:\Programmi\Auralog\TELL ME MORE SI PLUS\Bin\unsetup.exe" -file "C:\Programmi\Auralog\TELL ME MORE SI PLUS\unsetup.aui"
USB Storage Driver-->DelUIDrv.exe
Virtools 3D Life Player-->C:\Programmi\Virtools\3D Life Player\WebplayerConfig.exe -u
Virtual Dj Studio 5.1-->"C:\Programmi\VDJ5\unins000.exe"
Wakfu-->C:\Programmi\Wakfu\uninstall.exe
Windows Communication Foundation-->MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Favorites pour Windows Live Toolbar-->MsiExec.exe /X{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}
Windows Live installer-->MsiExec.exe /X{FD44E544-E7D0-4DBA-9FA0-8AE1A1300390}
Windows Live Mail-->MsiExec.exe /I{C514C594-23AA-4F13-A070-DB8BDB27594F}
Windows Live Messenger-->MsiExec.exe /X{BADF6744-3787-48F6-B8C9-4C4995401D65}
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Programmi\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Toolbar-->"C:\Programmi\Windows Live Toolbar\UnInstall.exe" {0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Live Toolbar-->MsiExec.exe /X{0A8C97AD-DEED-4894-B446-3ABA95A77D0D}
Windows Media Format 11 runtime-->"C:\Programmi\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows Workflow Foundation-->MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinZip-->"C:\Programmi\WinZip\WINZIP32.EXE" /uninstall
Xiph QuickTime Components-->"C:\Programmi\QuickTime\QTComponents\XiphQTuninstall.exe"
Zeronove PDF-->C:\WINDOWS\system32\uninstpw.exe C:\Programmi\zeronovepdf
Hosts File
127.0.0.1 localhost
172.18.18.10 srv0
127.0.0.1 rad.msn.com
127.0.0.1 rad.live.com
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
Security center information
AV: avast! antivirus 4.8.1229 [VPS 080909-0]
Environment variables
"ComSpec"=%SystemRoot%\system32\cmd.exe
"Path"=C:\Programmi\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Programmi\QuickTime\QTSystem\
"windir"=%SystemRoot%
"OS"=Windows_NT
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_LEVEL"=15
"PROCESSOR_IDENTIFIER"=x86 Family 15 Model 2 Stepping 9, GenuineIntel
"PROCESSOR_REVISION"=0209
"NUMBER_OF_PROCESSORS"=1
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"FP_NO_HOST_CHECK"=NO
"CLASSPATH"=.;C:\Programmi\QuickTime\QTSystem\QTJava.zip
"QTJAVA"=C:\Programmi\QuickTime\QTSystem\QTJava.zip
-----------------EOF-----------------