RISOLTO risultato combofix

[magicando]

ragazzi ecco il risultato di combofix su un pc di un mio amico cosa mi potete consigliare a riguardo?

ComboFix 12-12-04.01 - Consilia 01/01/2002 0.33.51.1.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.39.1040.18.1015.587 [GMT 1:00]
Eseguito da: C:\Documents and Settings\Consilia\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free Edition 2012 *Disabled/Outdated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}




((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))




C:\Programmi\Parental Control\bin\pcontrol.exe
C:\WINDOWS\system\WINSPOOL.DRV


La copia infetta di C:\WINDOWS\system32\msgsvc.dll è stata trovata e disinfettata
ipristinata copia da - C:\System Volume Information\_restore{5BEC0894-B454-4FFB-B9F4-3DA7ACE1765B}\RP29\A0034050.dll




((((((((((((((((((((((((( Files Creati Da 2001-11-28 al 2001-12-31 )))))))))))))))))))))))))))))))))))




2009-05-12 09:07:06 . 2009-05-12 09:07:06 -------- d-----r- C:\MSOCache
2009-05-12 08:50:15 . 2009-05-12 08:50:15 -------- d-----w- C:\Intel
.




(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))


2010-06-14 14:31:20 . 2009-05-11 19:53:01 744448 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\helpsvc.exe
2009-11-27 16:07:35 . 2001-08-30 23:08:00 8704 ----a-w- C:\WINDOWS\system32\tsbyuv.dll
2009-11-21 15:54:26 . 2009-05-11 21:41:53 471552 ----a-w- C:\WINDOWS\apppatch\aclayers.dll
2008-04-14 12:00:00 . 2009-05-11 21:42:10 3374598 ----a-w- C:\WINDOWS\help\Tours\mmTour\tour.exe
2008-04-14 12:00:00 . 2009-05-11 21:42:04 33280 ----a-w- C:\WINDOWS\help\sstub.dll
2008-04-14 12:00:00 . 2009-05-11 21:42:04 279040 ----a-w- C:\WINDOWS\help\tshoot.dll
2008-04-14 12:00:00 . 2009-05-11 21:42:03 34816 ----a-w- C:\WINDOWS\help\sniffpol.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:54 152576 ----a-w- C:\WINDOWS\help\bnts.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:53 39424 ----a-w- C:\WINDOWS\apppatch\AcAdProc.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:53 245248 ----a-w- C:\WINDOWS\apppatch\AcSpecfc.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:53 1852928 ----a-w- C:\WINDOWS\apppatch\AcGenral.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:53 141312 ----a-w- C:\WINDOWS\apppatch\AcLua.dll
2008-04-14 12:00:00 . 2009-05-11 21:41:53 116224 ----a-w- C:\WINDOWS\apppatch\AcXtrnal.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:14 99840 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\HelpHost.exe
2008-04-14 12:00:00 . 2009-05-11 19:53:14 7680 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\HCAppRes.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:14 35328 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\notiflag.exe
2008-04-14 12:00:00 . 2009-05-11 19:53:14 21504 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\brpinfo.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:10 727102 ----a-w- C:\WINDOWS\srchasst\srchui.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:10 58434 ----a-w- C:\WINDOWS\srchasst\srchctls.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:10 3166208 ----a-w- C:\WINDOWS\srchasst\msgr3en.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:02 38400 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:02 151040 ----a-w- C:\WINDOWS\pchealth\UploadLB\Binaries\UploadM.exe
2008-04-14 12:00:00 . 2009-05-11 19:53:02 102912 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\pchshell.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:01 769024 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe
2008-04-14 12:00:00 . 2009-05-11 19:53:01 380416 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\msinfo.dll
2008-04-14 12:00:00 . 2009-05-11 19:53:01 18432 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\HscUpd.exe
2008-04-14 12:00:00 . 2009-05-11 19:53:01 172032 ----a-w- C:\WINDOWS\pchealth\helpctr\binaries\msconfig.exe
2008-04-14 12:00:00 . 2001-08-30 23:08:24 77891 ----a-w- C:\WINDOWS\system32\usrmlnka.exe
2008-04-14 12:00:00 . 2001-08-30 23:08:24 69700 ----a-w- C:\WINDOWS\system32\usrshuta.exe
2008-04-14 12:00:00 . 2001-08-30 23:08:24 61508 ----a-w- C:\WINDOWS\system32\usrprbda.exe
2008-04-14 12:00:00 . 2001-08-30 23:08:10 57856 ----a-w- C:\WINDOWS\system32\dvdplay.exe
2008-04-14 12:00:00 . 2001-08-30 23:08:04 14336 ----a-w- C:\WINDOWS\system32\wowfaxui.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 86073 ----a-w- C:\WINDOWS\system32\usrfaxa.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 77890 ----a-w- C:\WINDOWS\system32\usrdpa.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 77883 ----a-w- C:\WINDOWS\system32\usrrtosa.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 69699 ----a-w- C:\WINDOWS\system32\usrcoina.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 61500 ----a-w- C:\WINDOWS\system32\usrcntra.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 53305 ----a-w- C:\WINDOWS\system32\usrlbva.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 49211 ----a-w- C:\WINDOWS\system32\usrvpa.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 49211 ----a-w- C:\WINDOWS\system32\usrsdpia.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 49209 ----a-w- C:\WINDOWS\system32\usrv80a.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 45116 ----a-w- C:\WINDOWS\system32\usrvoica.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 41019 ----a-w- C:\WINDOWS\system32\usrsvpia.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 323641 ----a-w- C:\WINDOWS\system32\usrdtea.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:02 102457 ----a-w- C:\WINDOWS\system32\usrv42a.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:00 8192 ----a-w- C:\WINDOWS\system32\streamci.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:00 72192 ----a-w- C:\WINDOWS\system32\sprio800.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:00 70656 ----a-w- C:\WINDOWS\system32\sprio600.dll
2008-04-14 12:00:00 . 2001-08-30 23:08:00 69632 ----a-w- C:\WINDOWS\system32\spnike.dll
2008-04-14 12:00:00 . 2001-08-30 23:07:58 157696 ----a-w- C:\WINDOWS\system32\paqsp.dll
2008-04-14 12:00:00 . 2001-08-30 23:07:50 147968 ----a-w- C:\WINDOWS\system32\mdwmdmsp.dll
2008-04-14 12:00:00 . 2001-08-30 23:07:22 3200 ----a-w- C:\WINDOWS\system32\wowfax.dll
2008-04-14 12:00:00 . 2001-08-30 22:03:30 125824 ----a-w- C:\WINDOWS\system32\drivers\ftdisk.sys
2008-04-14 12:00:00 . 2001-08-30 22:03:24 12288 ----a-w- C:\WINDOWS\system32\drivers\fsvga.sys
2008-04-14 12:00:00 . 2001-08-30 20:33:58 262528 ----a-w- C:\WINDOWS\system32\drivers\cinemst2.sys
2008-04-14 12:00:00 . 2001-08-30 19:43:20 12160 ----a-w- C:\WINDOWS\system32\drivers\acpiec.sys
2008-04-14 12:00:00 . 2001-08-17 22:06:22 21376 ----a-w- C:\WINDOWS\system32\drivers\tsbvcap.sys
2008-04-14 12:00:00 . 2001-08-17 22:03:02 4736 ----a-w- C:\WINDOWS\system32\drivers\usbd.sys
2008-04-14 12:00:00 . 2001-08-17 22:02:14 58112 ----a-w- C:\WINDOWS\system32\drivers\vdmindvd.sys
2008-04-14 12:00:00 . 2001-08-17 22:01:34 51712 ----a-w- C:\WINDOWS\system32\drivers\tosdvd.sys
2008-04-14 12:00:00 . 2001-08-17 21:57:56 3456 ----a-w- C:\WINDOWS\system32\drivers\oprghdlr.sys
2008-04-14 12:00:00 . 2001-08-17 21:52:30 18688 ----a-w- C:\WINDOWS\system32\drivers\cdaudio.sys
2008-04-14 12:00:00 . 2001-08-17 21:52:08 13952 ----a-w- C:\WINDOWS\system32\drivers\cbidf2k.sys
2008-04-14 12:00:00 . 2001-08-17 21:24:46 12032 ----a-w- C:\WINDOWS\system32\drivers\riodrv.sys
2008-04-14 12:00:00 . 2001-08-17 21:24:46 12032 ----a-w- C:\WINDOWS\system32\drivers\rio8drv.sys
2008-04-14 12:00:00 . 2001-08-17 21:24:44 12032 ----a-w- C:\WINDOWS\system32\drivers\nikedrv.sys
2008-04-14 12:00:00 . 2001-08-17 21:24:38 11776 ----a-w- C:\WINDOWS\system32\drivers\cpqdap01.sys
2001-11-14 11:56:00 . 2001-11-14 11:56:00 1802240 ----a-w- C:\WINDOWS\system32\lcppn21.dll




((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))




*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension1]
@="{fe25455d-b4c2-4e32-97d2-92632ec1c224}"
[HKEY_CLASSES_ROOT\CLSID\{fe25455d-b4c2-4e32-97d2-92632ec1c224}]
2009-11-07 00:07:04 297808 ----a-w- C:\WINDOWS\system32\mscoree.dll


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\OverlayIconExtension2]
@="{1fae2d88-a78e-4f03-909f-be818a3c1ce6}"
[HKEY_CLASSES_ROOT\CLSID\{1fae2d88-a78e-4f03-909f-be818a3c1ce6}]
2009-11-07 00:07:04 297808 ----a-w- C:\WINDOWS\system32\mscoree.dll


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Eee Docking"="C:\Programmi\ASUS\Eee Docking\Eee Docking.exe" [2009-05-08 08:42:54 395776]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2008-04-14 12:00:00 15360]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2007-12-19 15:08:08 135168]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2007-12-19 15:08:12 159744]
"Persistence"="C:\WINDOWS\system32\igfxpers.exe" [2007-12-19 15:07:42 131072]
"RTHDCPL"="RTHDCPL.EXE" [2009-03-27 03:22:08 17567744]
"SynTPEnh"="C:\Programmi\Synaptics\SynTP\SynTPEnh.exe" [2009-03-06 08:57:54 1434920]
"SynAsusAcpi"="C:\Programmi\Synaptics\SynTP\SynAsusAcpi.exe" [2009-03-06 08:58:06 79144]
"AsusACPIServer"="C:\Programmi\EeePC\ACPI\AsAcpiSvr.exe" [2009-04-16 17:46:30 630784]
"AsusEPCMonitor"="C:\Programmi\EeePC\ACPI\AsEPCMon.exe" [2009-03-13 14:15:02 98304]
"AsusTray"="C:\Programmi\EeePC\ACPI\AsTray.exe" [2009-04-16 16:58:54 118784]
"LiveUpdate"="C:\Programmi\Asus\LiveUpdate\LiveUpdate.exe" [2011-07-13 08:38:14 1095080]
"AVG_TRAY"="C:\Programmi\AVG\AVG2012\avgtray.exe" [2012-01-24 16:24:26 2416480]


[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2008-04-14 12:00:00 15360]


C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\
SuperHybridEngine.lnk - C:\Programmi\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exe [2009-5-12 376832]
BTTray.lnk - C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe [2008-9-2 604776]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart


[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)


[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\wlcsdk.exe"=
"C:\\Programmi\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Programmi\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"C:\\Programmi\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"C:\\Programmi\\AVG\\AVG2012\\avgmfapx.exe"=
"C:\\Programmi\\AVG\\AVG2012\\avgnsx.exe"=
"C:\\Programmi\\AVG\\AVG2012\\avgdiagex.exe"=
"C:\\Programmi\\AVG\\AVG2012\\avgemcx.exe"=
"C:\\Programmi\\Skype\\Phone\\Skype.exe"=


R0 AVGIDSEH;AVGIDSEH;C:\WINDOWS\system32\drivers\AVGIDSEH.sys [11/07/2011 1.14.28 23120]
R0 Avgrkx86;AVG Anti-Rootkit Driver;C:\WINDOWS\system32\drivers\avgrkx86.sys [13/09/2011 6.30.10 32592]
R1 AsUpIO;AsUpIO;C:\WINDOWS\system32\drivers\AsUpIO.sys [01/01/2002 3.30.28 11832]
R1 Avgldx86;AVG AVI Loader Driver;C:\WINDOWS\system32\drivers\avgldx86.sys [07/10/2011 6.23.48 230608]
R1 Avgtdix;AVG TDI Driver;C:\WINDOWS\system32\drivers\avgtdix.sys [11/07/2011 1.14.38 295248]
R1 policyappblockservice;Parental Control Application Filter;C:\Programmi\Parental Control\bin\policyappblock.sys [02/02/2009 21.22.44 5120]
R2 avgwd;AVG WatchDog;C:\Programmi\AVG\AVG2012\avgwdsvc.exe [02/08/2011 6.09.08 192776]
R2 privoxy;privoxy;C:\Programmi\Privoxy\privoxy.exe --service --> C:\Programmi\Privoxy\privoxy.exe --service [?]
R3 AVGIDSDriver;AVGIDSDriver;C:\WINDOWS\system32\drivers\AVGIDSDriver.sys [11/07/2011 1.14.26 134608]
R3 AVGIDSFilter;AVGIDSFilter;C:\WINDOWS\system32\drivers\AVGIDSFilter.sys [11/07/2011 1.14.28 24272]
R3 AVGIDSShim;AVGIDSShim;C:\WINDOWS\system32\drivers\AVGIDSShim.sys [04/10/2011 6.21.42 16720]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;C:\WINDOWS\system32\drivers\l1c51x86.sys [09/04/2009 12.17.24 38912]
R3 uvclf;uvclf;C:\WINDOWS\system32\drivers\uvclf.sys [02/04/2009 3.19.09 39040]
S2 AVGIDSAgent;AVGIDSAgent;C:\Programmi\AVG\AVG2012\AVGIDSAgent.exe [12/10/2011 6.25.22 4433248]
S3 Ambfilt;Ambfilt;C:\WINDOWS\system32\drivers\Ambfilt.sys [12/05/2009 10.21.21 1684736]
S3 SRS_PremiumSound_Service;SRS Labs Premium Sound;C:\WINDOWS\system32\drivers\SRS_PremiumSound_i386.sys [12/05/2009 12.11.32 232872]


--- Altri Servizi/Drivers In Memoria ---


*NewlyCreated* - WS2IFSL


Contenuto della cartella 'Scheduled Tasks'


2001-12-31 C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3686166393-1678417550-1566184405-1005Core.job
- C:\Documents and Settings\Consilia\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2012-01-01 15:59:27 . 2012-01-01 15:59:26]


2001-12-31 C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3686166393-1678417550-1566184405-1005UA.job
- C:\Documents and Settings\Consilia\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe [2012-01-01 15:59:27 . 2012-01-01 15:59:26]




------- Scansione supplementare -------


uStart Page = hxxp://eeepc.asus.com/global
uDefault_Search_URL = hxxp://www.google.com/ie
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Add to Google Photos Screensa&ver - C:\WINDOWS\system32\GPhotos.scr/200
IE: E&sporta in Microsoft Excel - C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: Invia a Bluetooth - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm
IE: Invia a periferica &Bluetooth... - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
LSP: C:\WINDOWS\system32\PolicyLSP.dll
TCP: DhcpNameServer = 8.8.8.8 8.8.4.4


- - - - CHIAVI ORFANE RIMOSSE - - - -


HKLM-Run-Parental Control - C:\Programmi\Parental Control\bin\pcontrol.exe
MSConfigStartUp-Adobe Reader Speed Launcher - C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
MSConfigStartUp-MsnMsgr - C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
MSConfigStartUp-SRS Premium Sound - C:\Programmi\SRS Labs\SRS Premium Sound\SRSPremiumSoundBig_Small.exe

 

[tecnico24]

Ciao .
Come ho già detto tante volte , Combofix è un tool molto potente e va utilizzato in casi strettamente necessari.
Vorrei sapere i problemi che riscontri sul pc.

 

[magicando]

si riavvia all'improvviso
ho fatto una scansione anche con Kaspersky TDSS Killer
e mi ha trovato è rimosso un virus se vuole le copio anche il resoconto di tdsskiller
grazie ti metto un mi piace per avermi risposto

 

[tecnico24]

Vediamo il report di TDSS Killer.

 

[magicando]

ecco il resoconto

00:57:24.0625 2484 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
00:57:25.0250 2484 ============================================================
00:57:25.0250 2484 Current date / time: 2002/01/01 00:57:25.0250
00:57:25.0250 2484 SystemInfo:
00:57:25.0250 2484
00:57:25.0250 2484 OS Version: 5.1.2600 ServicePack: 3.0
00:57:25.0250 2484 Product type: Workstation
00:57:25.0250 2484 ComputerName: LUIGI
00:57:25.0250 2484 UserName: Consilia
00:57:25.0250 2484 Windows directory: C:\WINDOWS
00:57:25.0250 2484 System windows directory: C:\WINDOWS
00:57:25.0250 2484 Processor architecture: Intel x86
00:57:25.0250 2484 Number of processors: 2
00:57:25.0250 2484 Page size: 0x1000
00:57:25.0250 2484 Boot type: Normal boot
00:57:25.0250 2484 ============================================================
00:57:25.0984 2484 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
00:57:25.0984 2484 ============================================================
00:57:25.0984 2484 \Device\Harddisk0\DR0:
00:57:25.0984 2484 MBR partitions:
00:57:25.0984 2484 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x9506700
00:57:25.0984 2484 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x950673F, BlocksNum 0x950673F
00:57:25.0984 2484 ============================================================
00:57:26.0015 2484 C: <-> \Device\Harddisk0\DR0\Partition1
00:57:26.0062 2484 D: <-> \Device\Harddisk0\DR0\Partition2
00:57:26.0062 2484 ============================================================
00:57:26.0062 2484 Initialize success
00:57:26.0062 2484 ============================================================
00:57:28.0171 0448 ============================================================
00:57:28.0171 0448 Scan started
00:57:28.0171 0448 Mode: Manual;
00:57:28.0171 0448 ============================================================
00:57:29.0796 0448 ================ Scan system memory ========================
00:57:29.0812 0448 System memory - ok
00:57:29.0812 0448 ================ Scan services =============================
00:57:31.0953 0448 Abiosdsk - ok
00:57:31.0968 0448 abp480n5 - ok
00:57:32.0031 0448 [ D766E636187B8F240BBFBABCD51EB2C6 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
00:57:32.0031 0448 ACPI - ok
00:57:32.0062 0448 [ 49AC5CD87FBDDA62F3E25190019E7627 ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
00:57:32.0062 0448 ACPIEC - ok
00:57:32.0078 0448 adpu160m - ok
00:57:32.0125 0448 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
00:57:32.0125 0448 aec - ok
00:57:32.0171 0448 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
00:57:32.0187 0448 AFD - ok
00:57:32.0187 0448 Aha154x - ok
00:57:32.0203 0448 aic78u2 - ok
00:57:32.0218 0448 aic78xx - ok
00:57:32.0250 0448 [ 14A077AD0CF6116D1102631D8E1EDEE8 ] Alerter C:\WINDOWS\system32\alrsvc.dll
00:57:32.0265 0448 Alerter - ok
00:57:32.0281 0448 [ 79FE2E0D7859738225816658F0BB2A0D ] ALG C:\WINDOWS\System32\alg.exe
00:57:32.0296 0448 ALG - ok
00:57:32.0296 0448 AliIde - ok
00:57:32.0421 0448 [ F6AF59D6EEE5E1C304F7F73706AD11D8 ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
00:57:32.0468 0448 Ambfilt - ok
00:57:32.0484 0448 amsint - ok
00:57:32.0500 0448 AppMgmt - ok
00:57:32.0593 0448 [ E0EE769D14128014965E03B433F5F46E ] AR5416 C:\WINDOWS\system32\DRIVERS\athw.sys
00:57:32.0671 0448 AR5416 - ok
00:57:32.0687 0448 asc - ok
00:57:32.0703 0448 asc3350p - ok
00:57:32.0718 0448 asc3550 - ok
00:57:32.0843 0448 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
00:57:32.0843 0448 aspnet_state - ok
00:57:32.0875 0448 [ A9A565C669786C402752F609AFDD0DD5 ] AsUpIO C:\WINDOWS\system32\drivers\AsUpIO.sys
00:57:32.0875 0448 AsUpIO - ok
00:57:32.0921 0448 [ 12415A4B61DED200FE9932B47A35FA42 ] AsusACPI C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
00:57:32.0937 0448 AsusACPI - ok
00:57:32.0968 0448 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
00:57:32.0968 0448 AsyncMac - ok
00:57:33.0031 0448 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
00:57:33.0031 0448 atapi - ok
00:57:33.0046 0448 Atdisk - ok
00:57:33.0078 0448 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
00:57:33.0093 0448 Atmarpc - ok
00:57:33.0140 0448 [ 1B58D118049304E88464BE614C6D0014 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
00:57:33.0140 0448 AudioSrv - ok
00:57:33.0187 0448 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
00:57:33.0187 0448 audstub - ok
00:57:33.0500 0448 [ 6D440FF3F44CA72EDFD6176C6D6A89C0 ] AVGIDSAgent C:\Programmi\AVG\AVG2012\AVGIDSAgent.exe
00:57:33.0671 0448 AVGIDSAgent - ok
00:57:33.0734 0448 [ 4FA401B33C1B50C816486F6951244A14 ] AVGIDSDriver C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
00:57:33.0734 0448 AVGIDSDriver - ok
00:57:33.0765 0448 [ 69578BC9D43D614C6B3455DB4AF19762 ] AVGIDSEH C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
00:57:33.0765 0448 AVGIDSEH - ok
00:57:33.0796 0448 [ 6DF528406AA22201F392B9B19121CD6F ] AVGIDSFilter C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
00:57:33.0796 0448 AVGIDSFilter - ok
00:57:33.0812 0448 [ 1E01C2166B5599802BCD61B9691F7476 ] AVGIDSShim C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
00:57:33.0812 0448 AVGIDSShim - ok
00:57:33.0843 0448 [ BF8118CD5E2255387B715B534D64ACD1 ] Avgldx86 C:\WINDOWS\system32\DRIVERS\avgldx86.sys
00:57:33.0859 0448 Avgldx86 - ok
00:57:33.0875 0448 [ 1C77EF67F196466ADC9924CB288AFE87 ] Avgmfx86 C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
00:57:33.0875 0448 Avgmfx86 - ok
00:57:33.0890 0448 [ F2038ED7284B79DCEF581468121192A9 ] Avgrkx86 C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
00:57:33.0906 0448 Avgrkx86 - ok
00:57:33.0921 0448 [ A6D562B612216D8D02A35EBEB92366BD ] Avgtdix C:\WINDOWS\system32\DRIVERS\avgtdix.sys
00:57:33.0937 0448 Avgtdix - ok
00:57:33.0984 0448 [ 6699ECE24FE4B3F752A66C66A602EE86 ] avgwd C:\Programmi\AVG\AVG2012\avgwdsvc.exe
00:57:34.0000 0448 avgwd - ok
00:57:34.0031 0448 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
00:57:34.0046 0448 Beep - ok
00:57:34.0093 0448 [ 48C4763A9C8990FB48B73445BEB15D6A ] BITS C:\WINDOWS\system32\qmgr.dll
00:57:34.0125 0448 BITS - ok
00:57:34.0156 0448 [ 4314623FD836E96A51343CE5C74B48A8 ] Browser C:\WINDOWS\System32\browser.dll
00:57:34.0171 0448 Browser - ok
00:57:34.0203 0448 [ 4B43DFE1C1FBB305A1DC5504EF9BB34E ] btaudio C:\WINDOWS\system32\drivers\btaudio.sys
00:57:34.0218 0448 btaudio - ok
00:57:34.0265 0448 [ 2F9F111D31AA3FBBE5781D829A4524E6 ] BTDriver C:\WINDOWS\system32\DRIVERS\btport.sys
00:57:34.0265 0448 BTDriver - ok
00:57:34.0343 0448 [ 70455BAFFC078B6152D1E52376296467 ] BTKRNL C:\WINDOWS\system32\DRIVERS\btkrnl.sys
00:57:34.0375 0448 BTKRNL - ok
00:57:34.0437 0448 [ E43F7709F36444681978F9DC067A976B ] btwdins C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
00:57:34.0453 0448 btwdins - ok
00:57:34.0484 0448 [ 485020A1E1FC5C51A800CA69C618D881 ] BTWDNDIS C:\WINDOWS\system32\DRIVERS\btwdndis.sys
00:57:34.0500 0448 BTWDNDIS - ok
00:57:34.0515 0448 [ 949ECA9C56F657C06D3166D51F3226C7 ] btwhid C:\WINDOWS\system32\DRIVERS\btwhid.sys
00:57:34.0515 0448 btwhid - ok
00:57:34.0531 0448 [ 2CFC2BD8785F82A42FCAD83DE1FA5A36 ] BTWUSB C:\WINDOWS\system32\Drivers\btwusb.sys
00:57:34.0546 0448 BTWUSB - ok
00:57:34.0656 0448 catchme - ok
00:57:34.0687 0448 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
00:57:34.0687 0448 cbidf2k - ok
00:57:34.0718 0448 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
00:57:34.0718 0448 CCDECODE - ok
00:57:34.0734 0448 cd20xrnt - ok
00:57:34.0765 0448 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
00:57:34.0765 0448 Cdaudio - ok
00:57:34.0781 0448 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
00:57:34.0796 0448 Cdfs - ok
00:57:34.0843 0448 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
00:57:34.0843 0448 Cdrom - ok
00:57:34.0859 0448 Changer - ok
00:57:34.0875 0448 [ D04F2BEB5EA63D0766E12E44AEF7C38D ] CiSvc C:\WINDOWS\system32\cisvc.exe
00:57:34.0875 0448 CiSvc - ok
00:57:34.0921 0448 [ 48CB1DEFA1A6506C3CF09E4950F82EF6 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
00:57:34.0921 0448 ClipSrv - ok
00:57:34.0968 0448 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
00:57:34.0984 0448 clr_optimization_v2.0.50727_32 - ok
00:57:35.0015 0448 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
00:57:35.0015 0448 CmBatt - ok
00:57:35.0031 0448 CmdIde - ok
00:57:35.0046 0448 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
00:57:35.0046 0448 Compbatt - ok
00:57:35.0062 0448 COMSysApp - ok
00:57:35.0093 0448 Cpqarray - ok
00:57:35.0140 0448 [ B6FCBB157E9C8ABDCA4134C535535A8B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
00:57:35.0140 0448 CryptSvc - ok
00:57:35.0156 0448 dac2w2k - ok
00:57:35.0171 0448 dac960nt - ok
00:57:35.0234 0448 [ BC4E0226341AAEC1222336B3AED86BAB ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
00:57:35.0250 0448 DcomLaunch - ok
00:57:35.0296 0448 [ 699EE7F752A25180AEB92C3A0EAEE440 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
00:57:35.0296 0448 Dhcp - ok
00:57:35.0328 0448 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
00:57:35.0328 0448 Disk - ok
00:57:35.0343 0448 dmadmin - ok
00:57:35.0421 0448 [ 82BC125A8ED33F5F0E75F2AAC1065323 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
00:57:35.0453 0448 dmboot - ok
00:57:35.0484 0448 [ E959DDC0EA7AC11EE5E5602E2A364310 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
00:57:35.0500 0448 dmio - ok
00:57:35.0531 0448 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
00:57:35.0531 0448 dmload - ok
00:57:35.0593 0448 [ A01858C50704B2D2EDEEBBF6BBBCED2A ] dmserver C:\WINDOWS\System32\dmserver.dll
00:57:35.0609 0448 dmserver - ok
00:57:35.0656 0448 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
00:57:35.0656 0448 DMusic - ok
00:57:35.0703 0448 [ B7A1162B1A26DF7B60D5D9500006096C ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
00:57:35.0718 0448 Dnscache - ok
00:57:35.0750 0448 [ D580D77DFF316BD8C9D73B38695DE8DC ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
00:57:35.0750 0448 Dot3svc - ok
00:57:35.0765 0448 dpti2o - ok
00:57:35.0781 0448 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
00:57:35.0781 0448 drmkaud - ok
00:57:35.0812 0448 [ 86B1F123BACD444E81960B339BAE3FF2 ] EapHost C:\WINDOWS\System32\eapsvc.dll
00:57:35.0812 0448 EapHost - ok
00:57:35.0843 0448 [ B6599EDA9F3EBEF064504EE35BBECA1C ] ERSvc C:\WINDOWS\System32\ersvc.dll
00:57:35.0843 0448 ERSvc - ok
00:57:35.0890 0448 [ 26845F272435302E0F3322E660A24F7D ] Eventlog C:\WINDOWS\system32\services.exe
00:57:35.0906 0448 Eventlog - ok
00:57:35.0937 0448 [ 8360CB9756E598A5C6214EACFB3677C3 ] EventSystem C:\WINDOWS\system32\es.dll
00:57:35.0953 0448 EventSystem - ok
00:57:35.0984 0448 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
00:57:35.0984 0448 Fastfat - ok
00:57:36.0031 0448 [ DCCC606FC144F6E44E497F9A906F1C30 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
00:57:36.0046 0448 FastUserSwitchingCompatibility - ok
00:57:36.0093 0448 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
00:57:36.0093 0448 Fdc - ok
00:57:36.0109 0448 [ 2CFEA3326981A18C6BAF2BD9BE76225B ] Fips C:\WINDOWS\system32\drivers\Fips.sys
00:57:36.0109 0448 Fips - ok
00:57:36.0140 0448 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
00:57:36.0140 0448 Flpydisk - ok
00:57:36.0187 0448 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
00:57:36.0187 0448 FltMgr - ok
00:57:36.0265 0448 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
00:57:36.0265 0448 FontCache3.0.0.0 - ok
00:57:36.0312 0448 [ 960F5E5E4E1F720465311AC68A99C2DF ] fssfltr C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
00:57:36.0312 0448 fssfltr - ok
00:57:36.0406 0448 [ 9B1622EBEB31B3411B13382FFCB8737D ] fsssvc C:\Programmi\Windows Live\Family Safety\fsssvc.exe
00:57:36.0421 0448 fsssvc - ok
00:57:36.0468 0448 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
00:57:36.0468 0448 Fs_Rec - ok
00:57:36.0515 0448 [ F3269A6EE547EA87B949A1CEA4816B38 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
00:57:36.0515 0448 Ftdisk - ok
00:57:36.0562 0448 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
00:57:36.0562 0448 Gpc - ok
00:57:36.0625 0448 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
00:57:36.0625 0448 gusvc - ok
00:57:36.0656 0448 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
00:57:36.0656 0448 HDAudBus - ok
00:57:36.0718 0448 [ 6CE66B51B4EB23D9D073F92698C55C8D ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
00:57:36.0718 0448 helpsvc - ok
00:57:36.0750 0448 [ 43D985A9A51E0295091B6EBE84C96B78 ] HidServ C:\WINDOWS\System32\hidserv.dll
00:57:36.0750 0448 HidServ - ok
00:57:36.0796 0448 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
00:57:36.0796 0448 HidUsb - ok
00:57:36.0843 0448 [ 00CAD842F48947887A972828ACA665F7 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
00:57:36.0843 0448 hkmsvc - ok
00:57:36.0859 0448 hpn - ok
00:57:36.0890 0448 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
00:57:36.0906 0448 HTTP - ok
00:57:36.0953 0448 [ 450091AEBFCD08E5858533EAB5B9A436 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
00:57:36.0968 0448 HTTPFilter - ok
00:57:36.0968 0448 i2omgmt - ok
00:57:36.0984 0448 i2omp - ok
00:57:37.0031 0448 [ 610726E28AF55B95043C5C35A727E320 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
00:57:37.0046 0448 i8042prt - ok
00:57:37.0312 0448 [ 0F68E2EC713F132FFB19E45415B09679 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
00:57:37.0562 0448 ialm - ok
00:57:37.0609 0448 [ 8EF427C54497C5F8A7A645990E4278C7 ] iaStor C:\WINDOWS\system32\drivers\iaStor.sys
00:57:37.0625 0448 iaStor - ok
00:57:37.0718 0448 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
00:57:37.0750 0448 idsvc - ok
00:57:37.0781 0448 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
00:57:37.0781 0448 Imapi - ok
00:57:37.0812 0448 [ DB491237445F172FDDDF00541DE1A51D ] ImapiService C:\WINDOWS\system32\imapi.exe
00:57:37.0828 0448 ImapiService - ok
00:57:37.0843 0448 ini910u - ok
00:57:38.0093 0448 [ 1AE3CFF80017EF89DA959350724C7194 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
00:57:38.0296 0448 IntcAzAudAddService - ok
00:57:38.0312 0448 IntelIde - ok
00:57:38.0359 0448 [ EBD830A0970C438047006A49C23E287F ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
00:57:38.0375 0448 intelppm - ok
00:57:38.0406 0448 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
00:57:38.0406 0448 Ip6Fw - ok
00:57:38.0421 0448 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
00:57:38.0437 0448 IpFilterDriver - ok
00:57:38.0437 0448 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
00:57:38.0453 0448 IpInIp - ok
00:57:38.0468 0448 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
00:57:38.0468 0448 IpNat - ok
00:57:38.0515 0448 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
00:57:38.0515 0448 IPSec - ok
00:57:38.0562 0448 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
00:57:38.0562 0448 IRENUM - ok
00:57:38.0593 0448 [ 0953594BEB81CC72FCC62D37921B25A6 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
00:57:38.0609 0448 isapnp - ok
00:57:38.0656 0448 [ 28B6EACE513CA7EABA3B809AD4BC274D ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
00:57:38.0656 0448 Kbdclass - ok
00:57:38.0703 0448 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
00:57:38.0718 0448 kmixer - ok
00:57:38.0750 0448 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
00:57:38.0750 0448 KSecDD - ok
00:57:38.0812 0448 [ 6C8658587E91EA25B0FD2E71781AD228 ] L1c C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
00:57:38.0812 0448 L1c - ok
00:57:38.0859 0448 [ 0F726D49C0B19E5A506A1CDFCE0EE42F ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
00:57:38.0859 0448 LanmanServer - ok
00:57:38.0906 0448 [ E13B0181DDA60B93E3253EFF52A79CBE ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
00:57:38.0921 0448 lanmanworkstation - ok
00:57:38.0921 0448 lbrtfdc - ok
00:57:38.0984 0448 [ E01255727D0B158538D7C2B469B533A8 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
00:57:38.0984 0448 LmHosts - ok
00:57:39.0031 0448 [ 3B32F662C8607E891F325E41F7EE225C ] Messenger C:\WINDOWS\System32\msgsvc.dll
00:57:39.0031 0448 Messenger - ok
00:57:39.0078 0448 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
00:57:39.0078 0448 mnmdd - ok
00:57:39.0109 0448 [ 514A299EC926BAADA3C718B171476AA4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
00:57:39.0109 0448 mnmsrvc - ok
00:57:39.0140 0448 [ 8CB6636806D76B85FAFAEE94D75F5129 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
00:57:39.0140 0448 Modem - ok
00:57:39.0218 0448 [ 9FA7207D1B1ADEAD88AE8EED9CDBBAA5 ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
00:57:39.0265 0448 Monfilt - ok
00:57:39.0312 0448 [ E904EBED608055A2BFB824C07F59766C ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
00:57:39.0312 0448 Mouclass - ok
00:57:39.0359 0448 [ D7662F0CF5B77BBBE3202716F5BD5318 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
00:57:39.0359 0448 mouhid - ok
00:57:39.0406 0448 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
00:57:39.0406 0448 MountMgr - ok
00:57:39.0421 0448 mraid35x - ok
00:57:39.0453 0448 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
00:57:39.0453 0448 MRxDAV - ok
00:57:39.0515 0448 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
00:57:39.0531 0448 MRxSmb - ok
00:57:39.0562 0448 [ 01F77E9E473235C31796ADE46107B0AD ] MSDTC C:\WINDOWS\system32\msdtc.exe
00:57:39.0562 0448 MSDTC - ok
00:57:39.0609 0448 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
00:57:39.0609 0448 Msfs - ok
00:57:39.0625 0448 MSIServer - ok
00:57:39.0640 0448 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
00:57:39.0640 0448 MSKSSRV - ok
00:57:39.0656 0448 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
00:57:39.0656 0448 MSPCLOCK - ok
00:57:39.0703 0448 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
00:57:39.0703 0448 MSPQM - ok
00:57:39.0750 0448 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
00:57:39.0750 0448 mssmbios - ok
00:57:39.0765 0448 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
00:57:39.0765 0448 MSTEE - ok
00:57:39.0796 0448 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
00:57:39.0812 0448 Mup - ok
00:57:39.0828 0448 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
00:57:39.0828 0448 NABTSFEC - ok
00:57:39.0859 0448 [ 911587FD303C9690A428BB4B04732B61 ] napagent C:\WINDOWS\System32\qagentrt.dll
00:57:39.0875 0448 napagent - ok
00:57:39.0906 0448 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
00:57:39.0921 0448 NDIS - ok
00:57:39.0953 0448 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
00:57:39.0953 0448 NdisIP - ok
00:57:40.0000 0448 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
00:57:40.0000 0448 NdisTapi - ok
00:57:40.0031 0448 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
00:57:40.0031 0448 Ndisuio - ok
00:57:40.0046 0448 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
00:57:40.0062 0448 NdisWan - ok
00:57:40.0093 0448 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
00:57:40.0093 0448 NDProxy - ok
00:57:40.0109 0448 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
00:57:40.0109 0448 NetBIOS - ok
00:57:40.0171 0448 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
00:57:40.0171 0448 NetBT - ok
00:57:40.0203 0448 [ 1B09227E41F414A93DBC0BAF80C4D527 ] NetDDE C:\WINDOWS\system32\netdde.exe
00:57:40.0218 0448 NetDDE - ok
00:57:40.0234 0448 [ 1B09227E41F414A93DBC0BAF80C4D527 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
00:57:40.0234 0448 NetDDEdsdm - ok
00:57:40.0281 0448 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] Netlogon C:\WINDOWS\system32\lsass.exe
00:57:40.0281 0448 Netlogon - ok
00:57:40.0312 0448 [ 02815B70FC4CA8611A926176F1C39FC2 ] Netman C:\WINDOWS\System32\netman.dll
00:57:40.0328 0448 Netman - ok
00:57:40.0421 0448 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
00:57:40.0421 0448 NetTcpPortSharing - ok
00:57:40.0453 0448 [ C6B69A18D39744725FB73AC85E46032B ] Nla C:\WINDOWS\System32\mswsock.dll
00:57:40.0468 0448 Nla - ok
00:57:40.0500 0448 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
00:57:40.0500 0448 Npfs - ok
00:57:40.0531 0448 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
00:57:40.0546 0448 Ntfs - ok
00:57:40.0578 0448 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
00:57:40.0578 0448 NtLmSsp - ok
00:57:40.0625 0448 [ 89DB90B5F35D2795D9FC56D933CC72B8 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
00:57:40.0640 0448 NtmsSvc - ok
00:57:40.0671 0448 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
00:57:40.0671 0448 Null - ok
00:57:40.0703 0448 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
00:57:40.0703 0448 NwlnkFlt - ok
00:57:40.0718 0448 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
00:57:40.0718 0448 NwlnkFwd - ok
00:57:40.0875 0448 [ 1F0E05DFF4F5A833168E49BE1256F002 ] odserv C:\Programmi\File comuni\Microsoft Shared\OFFICE12\ODSERV.EXE
00:57:40.0890 0448 odserv - ok
00:57:40.0937 0448 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE
00:57:40.0953 0448 ose - ok
00:57:40.0984 0448 [ 4E9408A178B2D955871C2CDD278DE3C3 ] Parport C:\WINDOWS\system32\drivers\Parport.sys
00:57:40.0984 0448 Parport - ok
00:57:41.0031 0448 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
00:57:41.0046 0448 PartMgr - ok
00:57:41.0078 0448 [ 0DABEF655A444CB1E193626FB1D24B9F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
00:57:41.0078 0448 ParVdm - ok
00:57:41.0093 0448 [ F40A46892AFEBB0314536B849D57C11E ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
00:57:41.0093 0448 PCI - ok
00:57:41.0109 0448 PCIDump - ok
00:57:41.0125 0448 [ B2DF00D650FD6C4EE781740ED3C8E67F ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
00:57:41.0125 0448 PCIIde - ok
00:57:41.0156 0448 [ 815C50F2B1D1562800BDCE8BE895000E ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
00:57:41.0156 0448 Pcmcia - ok
00:57:41.0171 0448 PDCOMP - ok
00:57:41.0187 0448 PDFRAME - ok
00:57:41.0203 0448 PDRELI - ok
00:57:41.0218 0448 PDRFRAME - ok
00:57:41.0234 0448 perc2 - ok
00:57:41.0250 0448 perc2hib - ok
00:57:41.0312 0448 [ 26845F272435302E0F3322E660A24F7D ] PlugPlay C:\WINDOWS\system32\services.exe
00:57:41.0312 0448 PlugPlay - ok
00:57:41.0312 0448 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
00:57:41.0328 0448 PolicyAgent - ok
00:57:41.0375 0448 [ E36EDA6BCC41378F3115A9CEEE256C00 ] policyappblockservice C:\Programmi\Parental Control\bin\policyappblock.sys
00:57:41.0375 0448 policyappblockservice - ok
00:57:41.0421 0448 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
00:57:41.0421 0448 PptpMiniport - ok
00:57:41.0453 0448 privoxy - ok
00:57:41.0453 0448 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
00:57:41.0453 0448 ProtectedStorage - ok
00:57:41.0468 0448 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
00:57:41.0468 0448 PSched - ok
00:57:41.0500 0448 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
00:57:41.0500 0448 Ptilink - ok
00:57:41.0500 0448 ql1080 - ok
00:57:41.0515 0448 Ql10wnt - ok
00:57:41.0531 0448 ql12160 - ok
00:57:41.0546 0448 ql1240 - ok
00:57:41.0546 0448 ql1280 - ok
00:57:41.0578 0448 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
00:57:41.0578 0448 RasAcd - ok
00:57:41.0609 0448 [ 9839B418343D6E6E52659BDF3FF1FE67 ] RasAuto C:\WINDOWS\System32\rasauto.dll
00:57:41.0625 0448 RasAuto - ok
00:57:41.0640 0448 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
00:57:41.0640 0448 Rasl2tp - ok
00:57:41.0671 0448 [ 62AD41548E720DB4763B86F95E44F3FA ] RasMan C:\WINDOWS\System32\rasmans.dll
00:57:41.0671 0448 RasMan - ok
00:57:41.0687 0448 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
00:57:41.0687 0448 RasPppoe - ok
00:57:41.0718 0448 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
00:57:41.0718 0448 Raspti - ok
00:57:41.0750 0448 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
00:57:41.0765 0448 Rdbss - ok
00:57:41.0812 0448 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
00:57:41.0812 0448 RDPCDD - ok
00:57:41.0859 0448 [ 5B3055DAA788BD688594D2F5981F2A83 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
00:57:41.0859 0448 RDPWD - ok
00:57:41.0906 0448 [ CC72E6AE90245F0AE48BF1236A7E1F9C ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
00:57:41.0906 0448 RDSessMgr - ok
00:57:41.0937 0448 [ 393FC252593323B624B230ECA6B85E63 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
00:57:41.0937 0448 redbook - ok
00:57:41.0968 0448 [ 7EBBF16FBD3E0E34F084FA635C1844E3 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
00:57:41.0968 0448 RemoteAccess - ok
00:57:41.0984 0448 [ DC97F6C8A94691834439872B9E8FF2B3 ] RpcLocator C:\WINDOWS\system32\locator.exe
00:57:42.0000 0448 RpcLocator - ok
00:57:42.0031 0448 [ BC4E0226341AAEC1222336B3AED86BAB ] RpcSs C:\WINDOWS\System32\rpcss.dll
00:57:42.0046 0448 RpcSs - ok
00:57:42.0062 0448 [ DCE0D20F8FB66DF41D53734BFF9D66F0 ] RSVP C:\WINDOWS\system32\rsvp.exe
00:57:42.0078 0448 RSVP - ok
00:57:42.0093 0448 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] SamSs C:\WINDOWS\system32\lsass.exe
00:57:42.0093 0448 SamSs - ok
00:57:42.0109 0448 [ 1D456F1CD76A80793C07BA52CF3A7455 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
00:57:42.0109 0448 SCardSvr - ok
00:57:42.0156 0448 [ 511886E5BD060046CCE8373E92E62EDF ] Schedule C:\WINDOWS\system32\schedsvc.dll
00:57:42.0171 0448 Schedule - ok
00:57:42.0203 0448 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
00:57:42.0203 0448 Secdrv - ok
00:57:42.0234 0448 [ 17C6354CA08E7C7972E12C67478AE134 ] seclogon C:\WINDOWS\System32\seclogon.dll
00:57:42.0250 0448 seclogon - ok
00:57:42.0250 0448 [ A0ECA1CE0FCCB29C5E4E1F416E95E73E ] SENS C:\WINDOWS\system32\sens.dll
00:57:42.0265 0448 SENS - ok
00:57:42.0281 0448 [ FDBD9D64E2E03270021D424F0DCCF79D ] Serial C:\WINDOWS\system32\drivers\Serial.sys
00:57:42.0281 0448 Serial - ok
00:57:42.0312 0448 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
00:57:42.0312 0448 Sfloppy - ok
00:57:42.0343 0448 [ 152C0555925DFE028E3148FD215146BB ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
00:57:42.0359 0448 SharedAccess - ok
00:57:42.0375 0448 [ DCCC606FC144F6E44E497F9A906F1C30 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
00:57:42.0390 0448 ShellHWDetection - ok
00:57:42.0406 0448 Simbad - ok
00:57:42.0421 0448 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
00:57:42.0421 0448 SLIP - ok
00:57:42.0453 0448 Sparrow - ok
00:57:42.0484 0448 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
00:57:42.0484 0448 splitter - ok
00:57:42.0531 0448 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
00:57:42.0546 0448 Spooler - ok
00:57:42.0578 0448 [ 618718CAE288BF7CBD8FCBAB2577D932 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
00:57:42.0593 0448 sr - ok
00:57:42.0609 0448 [ B3E3DA70A7A76E69B872DE3D06D32C19 ] srservice C:\WINDOWS\system32\srsvc.dll
00:57:42.0625 0448 srservice - ok
00:57:42.0671 0448 [ 0BD44AA4743A9DBD2C638D699A7FD438 ] SRS_PremiumSound_Service C:\WINDOWS\system32\drivers\srs_PremiumSound_i386.sys
00:57:42.0671 0448 SRS_PremiumSound_Service - ok
00:57:42.0703 0448 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
00:57:42.0718 0448 Srv - ok
00:57:42.0750 0448 [ 5215569DD3A8FBC65A85E85F3C12258B ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
00:57:42.0750 0448 SSDPSRV - ok
00:57:42.0796 0448 [ 3B9263E137896E4D303494F116E00608 ] stisvc C:\WINDOWS\system32\wiaservc.dll
00:57:42.0812 0448 stisvc - ok
00:57:42.0828 0448 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
00:57:42.0828 0448 streamip - ok
00:57:42.0875 0448 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
00:57:42.0875 0448 swenum - ok
00:57:42.0906 0448 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
00:57:42.0906 0448 swmidi - ok
00:57:42.0921 0448 SwPrv - ok
00:57:42.0937 0448 symc810 - ok
00:57:42.0953 0448 symc8xx - ok
00:57:42.0968 0448 sym_hi - ok
00:57:42.0984 0448 sym_u3 - ok
00:57:43.0015 0448 [ A10D781153BB23036B474FFEDB448266 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
00:57:43.0031 0448 SynTP - ok
00:57:43.0046 0448 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
00:57:43.0046 0448 sysaudio - ok
00:57:43.0093 0448 [ A34A9A872EEC4C026FD542AC7156FE0B ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
00:57:43.0093 0448 SysmonLog - ok
00:57:43.0156 0448 [ 6B85F1A9DCE45D45BFFAD3222C21F297 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
00:57:43.0171 0448 TapiSrv - ok
00:57:43.0218 0448 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
00:57:43.0234 0448 Tcpip - ok
00:57:43.0281 0448 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
00:57:43.0281 0448 TDPIPE - ok
00:57:43.0296 0448 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
00:57:43.0296 0448 TDTCP - ok
00:57:43.0328 0448 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
00:57:43.0343 0448 TermDD - ok
00:57:43.0390 0448 [ FE5A5329CCFC33D645C33077FF04F052 ] TermService C:\WINDOWS\System32\termsrv.dll
00:57:43.0406 0448 TermService - ok
00:57:43.0453 0448 [ DCCC606FC144F6E44E497F9A906F1C30 ] Themes C:\WINDOWS\System32\shsvcs.dll
00:57:43.0453 0448 Themes - ok
00:57:43.0468 0448 TosIde - ok
00:57:43.0531 0448 [ 690294999DF1248FAF85D95B31955D0C ] TrkWks C:\WINDOWS\system32\trkwks.dll
00:57:43.0531 0448 TrkWks - ok
00:57:43.0578 0448 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
00:57:43.0578 0448 Udfs - ok
00:57:43.0593 0448 ultra - ok
00:57:43.0656 0448 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
00:57:43.0671 0448 Update - ok
00:57:43.0703 0448 [ 8057B0744D9842A090E51D2845861D5F ] upnphost C:\WINDOWS\System32\upnphost.dll
00:57:43.0703 0448 upnphost - ok
00:57:43.0734 0448 [ F5E8B846EC10E1DF8DCA64119E2EB709 ] UPS C:\WINDOWS\System32\ups.exe
00:57:43.0734 0448 UPS - ok
00:57:43.0781 0448 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
00:57:43.0781 0448 usbccgp - ok
00:57:43.0828 0448 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
00:57:43.0843 0448 usbehci - ok
00:57:43.0859 0448 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
00:57:43.0859 0448 usbhub - ok
00:57:43.0890 0448 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
00:57:43.0890 0448 usbstor - ok
00:57:43.0906 0448 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
00:57:43.0906 0448 usbuhci - ok
00:57:43.0937 0448 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
00:57:43.0953 0448 usbvideo - ok
00:57:43.0968 0448 [ C019889035CDC1A06F2FEBC93CBB6897 ] uvclf C:\WINDOWS\system32\DRIVERS\uvclf.sys
00:57:43.0968 0448 uvclf - ok
00:57:44.0000 0448 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
00:57:44.0000 0448 VgaSave - ok
00:57:44.0015 0448 ViaIde - ok
00:57:44.0062 0448 [ E46C1B5A56DA7DA603D09DFCC79EC59E ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
00:57:44.0062 0448 VolSnap - ok
00:57:44.0125 0448 [ C2FE17125256102F5B44194D5DB0A799 ] VSS C:\WINDOWS\System32\vssvc.exe
00:57:44.0140 0448 VSS - ok
00:57:44.0187 0448 [ 2969DD84B584A6BB541A5273103957A3 ] W32Time C:\WINDOWS\system32\w32time.dll
00:57:44.0187 0448 W32Time - ok
00:57:44.0218 0448 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
00:57:44.0218 0448 Wanarp - ok
00:57:44.0281 0448 [ BBCFEAB7E871CDDAC2D397EE7FA91FDC ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
00:57:44.0296 0448 Wdf01000 - ok
00:57:44.0312 0448 WDICA - ok
00:57:44.0343 0448 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
00:57:44.0343 0448 wdmaud - ok
00:57:44.0390 0448 [ 2EC50EE79B65F60C8E8B4A03BBB3A42F ] WebClient C:\WINDOWS\System32\webclnt.dll
00:57:44.0406 0448 WebClient - ok
00:57:44.0484 0448 [ 40911E98D0F1CBB1015F2101982F1DDF ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
00:57:44.0484 0448 winmgmt - ok
00:57:44.0546 0448 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
00:57:44.0546 0448 WmdmPmSN - ok
00:57:44.0578 0448 [ 81FD02839FDB10ACF0EC40B809B9F8CC ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
00:57:44.0593 0448 WmiApSrv - ok
00:57:44.0703 0448 [ F30DC8F80CF65A323E8B6A2DB81561E3 ] WMPNetworkSvc C:\Programmi\Windows Media Player\WMPNetwk.exe
00:57:44.0734 0448 WMPNetworkSvc - ok
00:57:44.0765 0448 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
00:57:44.0765 0448 WS2IFSL - ok
00:57:44.0796 0448 [ 926D921C93CFF1E19EF4DE3E4C8368CA ] wscsvc C:\WINDOWS\system32\wscsvc.dll
00:57:44.0812 0448 wscsvc - ok
00:57:44.0828 0448 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
00:57:44.0843 0448 WSTCODEC - ok
00:57:44.0875 0448 [ CC48415E6C7CBAA441A3D6A6DCCBCFA6 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
00:57:44.0875 0448 wuauserv - ok
00:57:44.0921 0448 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
00:57:44.0921 0448 WudfPf - ok
00:57:44.0937 0448 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
00:57:44.0953 0448 WudfRd - ok
00:57:44.0968 0448 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
00:57:44.0984 0448 WudfSvc - ok
00:57:45.0046 0448 [ 053E0307A08CAC60793E27E921B46B3E ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
00:57:45.0062 0448 WZCSVC - ok
00:57:45.0109 0448 [ 5526482DCBA6047641B13BF9C75A74E0 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
00:57:45.0125 0448 xmlprov - ok
00:57:45.0156 0448 ================ Scan global ===============================
00:57:45.0187 0448 [ 17DDFE6A0B5404C5EF4C03AD996D0562 ] C:\WINDOWS\system32\basesrv.dll
00:57:45.0218 0448 [ 7B39F8912DF2C266411F7248EC250AE6 ] C:\WINDOWS\system32\winsrv.dll
00:57:45.0250 0448 [ 7B39F8912DF2C266411F7248EC250AE6 ] C:\WINDOWS\system32\winsrv.dll
00:57:45.0281 0448 [ 26845F272435302E0F3322E660A24F7D ] C:\WINDOWS\system32\services.exe
00:57:45.0296 0448 [Global] - ok
00:57:45.0296 0448 ================ Scan MBR ==================================
00:57:45.0312 0448 [ 828E02D5C4A4FBE53441EE9DBEE51F43 ] \Device\Harddisk0\DR0
00:57:45.0328 0448 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - infected
00:57:45.0343 0448 \Device\Harddisk0\DR0 - detected Rootkit.Boot.Sinowal.b (0)
00:57:45.0343 0448 ================ Scan VBR ==================================
00:57:45.0359 0448 [ 968FD280FE9FD0BFAED2924814DCEF18 ] \Device\Harddisk0\DR0\Partition1
00:57:45.0375 0448 \Device\Harddisk0\DR0\Partition1 - ok
00:57:45.0421 0448 [ 5FA2FF2E323C5C2FD9411B009A9484BF ] \Device\Harddisk0\DR0\Partition2
00:57:45.0421 0448 \Device\Harddisk0\DR0\Partition2 - ok
00:57:45.0421 0448 ============================================================
00:57:45.0421 0448 Scan finished
00:57:45.0421 0448 ============================================================
00:57:45.0453 0888 Detected object count: 1
00:57:45.0453 0888 Actual detected object count: 1
00:58:19.0750 0888 \Device\Harddisk0\DR0\# - copied to quarantine
00:58:19.0750 0888 \Device\Harddisk0\DR0 - copied to quarantine
00:58:19.0796 0888 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - will be cured on reboot
00:58:19.0843 0888 \Device\Harddisk0\DR0 - ok
00:58:19.0843 0888 \Device\Harddisk0\DR0 ( Rootkit.Boot.Sinowal.b ) - User select action: Cure
00:58:50.0000 0708 Deinitialize success


2 resoconto

01:00:38.0265 2984 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35
01:00:38.0781 2984 ============================================================
01:00:38.0781 2984 Current date / time: 2002/01/01 01:00:38.0781
01:00:38.0781 2984 SystemInfo:
01:00:38.0781 2984
01:00:38.0781 2984 OS Version: 5.1.2600 ServicePack: 3.0
01:00:38.0781 2984 Product type: Workstation
01:00:38.0796 2984 ComputerName: LUIGI
01:00:38.0796 2984 UserName: Consilia
01:00:38.0796 2984 Windows directory: C:\WINDOWS
01:00:38.0796 2984 System windows directory: C:\WINDOWS
01:00:38.0796 2984 Processor architecture: Intel x86
01:00:38.0796 2984 Number of processors: 2
01:00:38.0796 2984 Page size: 0x1000
01:00:38.0796 2984 Boot type: Normal boot
01:00:38.0796 2984 ============================================================
01:00:39.0625 2984 BG loaded
01:00:41.0312 2984 Drive \Device\Harddisk0\DR0 - Size: 0x25433D6000 (149.05 Gb), SectorSize: 0x200, Cylinders: 0x4C01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000050
01:00:41.0312 2984 ============================================================
01:00:41.0312 2984 \Device\Harddisk0\DR0:
01:00:41.0312 2984 MBR partitions:
01:00:41.0312 2984 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x9506700
01:00:41.0312 2984 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x950673F, BlocksNum 0x950673F
01:00:41.0312 2984 ============================================================
01:00:41.0375 2984 C: <-> \Device\Harddisk0\DR0\Partition1
01:00:41.0578 2984 D: <-> \Device\Harddisk0\DR0\Partition2
01:00:41.0578 2984 ============================================================
01:00:41.0578 2984 Initialize success
01:00:41.0578 2984 ============================================================
01:00:44.0546 3408 ============================================================
01:00:44.0546 3408 Scan started
01:00:44.0546 3408 Mode: Manual;
01:00:44.0546 3408 ============================================================
01:00:45.0625 3408 ================ Scan system memory ========================
01:00:45.0625 3408 System memory - ok
01:00:45.0640 3408 ================ Scan services =============================
01:00:46.0750 3408 Abiosdsk - ok
01:00:46.0765 3408 abp480n5 - ok
01:00:46.0859 3408 [ D766E636187B8F240BBFBABCD51EB2C6 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
01:00:46.0890 3408 ACPI - ok
01:00:46.0953 3408 [ 49AC5CD87FBDDA62F3E25190019E7627 ] ACPIEC C:\WINDOWS\system32\DRIVERS\ACPIEC.sys
01:00:47.0093 3408 ACPIEC - ok
01:00:47.0171 3408 adpu160m - ok
01:00:47.0234 3408 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
01:00:47.0296 3408 aec - ok
01:00:47.0406 3408 [ 1E44BC1E83D8FD2305F8D452DB109CF9 ] AFD C:\WINDOWS\System32\drivers\afd.sys
01:00:47.0421 3408 AFD - ok
01:00:47.0453 3408 Aha154x - ok
01:00:47.0468 3408 aic78u2 - ok
01:00:47.0515 3408 aic78xx - ok
01:00:47.0671 3408 [ 14A077AD0CF6116D1102631D8E1EDEE8 ] Alerter C:\WINDOWS\system32\alrsvc.dll
01:00:47.0796 3408 Alerter - ok
01:00:47.0859 3408 [ 79FE2E0D7859738225816658F0BB2A0D ] ALG C:\WINDOWS\System32\alg.exe
01:00:47.0906 3408 ALG - ok
01:00:47.0937 3408 AliIde - ok
01:00:48.0500 3408 [ F6AF59D6EEE5E1C304F7F73706AD11D8 ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
01:00:49.0453 3408 Ambfilt - ok
01:00:49.0484 3408 amsint - ok
01:00:49.0593 3408 AppMgmt - ok
01:00:49.0937 3408 [ E0EE769D14128014965E03B433F5F46E ] AR5416 C:\WINDOWS\system32\DRIVERS\athw.sys
01:00:49.0968 3408 AR5416 - ok
01:00:50.0000 3408 asc - ok
01:00:50.0093 3408 asc3350p - ok
01:00:50.0156 3408 asc3550 - ok
01:00:50.0531 3408 [ 0E5E4957549056E2BF2C49F4F6B601AD ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
01:00:50.0843 3408 aspnet_state - ok
01:00:50.0906 3408 [ A9A565C669786C402752F609AFDD0DD5 ] AsUpIO C:\WINDOWS\system32\drivers\AsUpIO.sys
01:00:50.0921 3408 AsUpIO - ok
01:00:51.0000 3408 [ 12415A4B61DED200FE9932B47A35FA42 ] AsusACPI C:\WINDOWS\system32\DRIVERS\ASUSACPI.sys
01:00:51.0000 3408 AsusACPI - ok
01:00:51.0078 3408 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
01:00:51.0093 3408 AsyncMac - ok
01:00:51.0187 3408 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
01:00:51.0203 3408 atapi - ok
01:00:51.0234 3408 Atdisk - ok
01:00:51.0281 3408 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
01:00:51.0296 3408 Atmarpc - ok
01:00:51.0343 3408 [ 1B58D118049304E88464BE614C6D0014 ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
01:00:51.0343 3408 AudioSrv - ok
01:00:51.0406 3408 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
01:00:51.0406 3408 audstub - ok
01:00:52.0031 3408 [ 6D440FF3F44CA72EDFD6176C6D6A89C0 ] AVGIDSAgent C:\Programmi\AVG\AVG2012\AVGIDSAgent.exe
01:00:52.0140 3408 AVGIDSAgent - ok
01:00:52.0218 3408 [ 4FA401B33C1B50C816486F6951244A14 ] AVGIDSDriver C:\WINDOWS\system32\DRIVERS\AVGIDSDriver.Sys
01:00:52.0234 3408 AVGIDSDriver - ok
01:00:52.0250 3408 [ 69578BC9D43D614C6B3455DB4AF19762 ] AVGIDSEH C:\WINDOWS\system32\DRIVERS\AVGIDSEH.Sys
01:00:52.0281 3408 AVGIDSEH - ok
01:00:52.0312 3408 [ 6DF528406AA22201F392B9B19121CD6F ] AVGIDSFilter C:\WINDOWS\system32\DRIVERS\AVGIDSFilter.Sys
01:00:52.0328 3408 AVGIDSFilter - ok
01:00:52.0359 3408 [ 1E01C2166B5599802BCD61B9691F7476 ] AVGIDSShim C:\WINDOWS\system32\DRIVERS\AVGIDSShim.Sys
01:00:52.0359 3408 AVGIDSShim - ok
01:00:52.0421 3408 [ BF8118CD5E2255387B715B534D64ACD1 ] Avgldx86 C:\WINDOWS\system32\DRIVERS\avgldx86.sys
01:00:52.0421 3408 Avgldx86 - ok
01:00:52.0500 3408 [ 1C77EF67F196466ADC9924CB288AFE87 ] Avgmfx86 C:\WINDOWS\system32\DRIVERS\avgmfx86.sys
01:00:52.0500 3408 Avgmfx86 - ok
01:00:52.0515 3408 [ F2038ED7284B79DCEF581468121192A9 ] Avgrkx86 C:\WINDOWS\system32\DRIVERS\avgrkx86.sys
01:00:52.0531 3408 Avgrkx86 - ok
01:00:52.0671 3408 [ A6D562B612216D8D02A35EBEB92366BD ] Avgtdix C:\WINDOWS\system32\DRIVERS\avgtdix.sys
01:00:52.0671 3408 Avgtdix - ok
01:00:52.0750 3408 [ 6699ECE24FE4B3F752A66C66A602EE86 ] avgwd C:\Programmi\AVG\AVG2012\avgwdsvc.exe
01:00:52.0765 3408 avgwd - ok
01:00:52.0828 3408 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
01:00:52.0843 3408 Beep - ok
01:00:52.0906 3408 [ 48C4763A9C8990FB48B73445BEB15D6A ] BITS C:\WINDOWS\system32\qmgr.dll
01:00:52.0953 3408 BITS - ok
01:00:53.0015 3408 [ 4314623FD836E96A51343CE5C74B48A8 ] Browser C:\WINDOWS\System32\browser.dll
01:00:53.0015 3408 Browser - ok
01:00:53.0140 3408 [ 4B43DFE1C1FBB305A1DC5504EF9BB34E ] btaudio C:\WINDOWS\system32\drivers\btaudio.sys
01:00:53.0156 3408 btaudio - ok
01:00:53.0203 3408 [ 2F9F111D31AA3FBBE5781D829A4524E6 ] BTDriver C:\WINDOWS\system32\DRIVERS\btport.sys
01:00:53.0203 3408 BTDriver - ok
01:00:53.0437 3408 [ 70455BAFFC078B6152D1E52376296467 ] BTKRNL C:\WINDOWS\system32\DRIVERS\btkrnl.sys
01:00:53.0468 3408 BTKRNL - ok
01:00:53.0625 3408 [ E43F7709F36444681978F9DC067A976B ] btwdins C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
01:00:53.0640 3408 btwdins - ok
01:00:53.0703 3408 [ 485020A1E1FC5C51A800CA69C618D881 ] BTWDNDIS C:\WINDOWS\system32\DRIVERS\btwdndis.sys
01:00:53.0718 3408 BTWDNDIS - ok
01:00:53.0750 3408 [ 949ECA9C56F657C06D3166D51F3226C7 ] btwhid C:\WINDOWS\system32\DRIVERS\btwhid.sys
01:00:53.0765 3408 btwhid - ok
01:00:53.0843 3408 [ 2CFC2BD8785F82A42FCAD83DE1FA5A36 ] BTWUSB C:\WINDOWS\system32\Drivers\btwusb.sys
01:00:53.0859 3408 BTWUSB - ok
01:00:54.0062 3408 catchme - ok
01:00:54.0109 3408 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
01:00:54.0140 3408 cbidf2k - ok
01:00:54.0171 3408 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
01:00:54.0234 3408 CCDECODE - ok
01:00:54.0265 3408 cd20xrnt - ok
01:00:54.0343 3408 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
01:00:54.0359 3408 Cdaudio - ok
01:00:54.0421 3408 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
01:00:54.0437 3408 Cdfs - ok
01:00:54.0484 3408 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
01:00:54.0500 3408 Cdrom - ok
01:00:54.0531 3408 Changer - ok
01:00:54.0656 3408 [ D04F2BEB5EA63D0766E12E44AEF7C38D ] CiSvc C:\WINDOWS\system32\cisvc.exe
01:00:54.0843 3408 CiSvc - ok
01:00:54.0968 3408 [ 48CB1DEFA1A6506C3CF09E4950F82EF6 ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
01:00:55.0125 3408 ClipSrv - ok
01:00:55.0203 3408 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
01:00:55.0281 3408 clr_optimization_v2.0.50727_32 - ok
01:00:55.0328 3408 [ 0F6C187D38D98F8DF904589A5F94D411 ] CmBatt C:\WINDOWS\system32\DRIVERS\CmBatt.sys
01:00:55.0328 3408 CmBatt - ok
01:00:55.0343 3408 CmdIde - ok
01:00:55.0421 3408 [ 6E4C9F21F0FAE8940661144F41B13203 ] Compbatt C:\WINDOWS\system32\DRIVERS\compbatt.sys
01:00:55.0437 3408 Compbatt - ok
01:00:55.0468 3408 COMSysApp - ok
01:00:55.0515 3408 Cpqarray - ok
01:00:55.0578 3408 [ B6FCBB157E9C8ABDCA4134C535535A8B ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
01:00:55.0578 3408 CryptSvc - ok
01:00:55.0593 3408 dac2w2k - ok
01:00:55.0609 3408 dac960nt - ok
01:00:55.0671 3408 [ BC4E0226341AAEC1222336B3AED86BAB ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
01:00:55.0671 3408 DcomLaunch - ok
01:00:55.0718 3408 [ 699EE7F752A25180AEB92C3A0EAEE440 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
01:00:55.0734 3408 Dhcp - ok
01:00:55.0765 3408 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
01:00:55.0765 3408 Disk - ok
01:00:55.0781 3408 dmadmin - ok
01:00:55.0843 3408 [ 82BC125A8ED33F5F0E75F2AAC1065323 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
01:00:55.0859 3408 dmboot - ok
01:00:55.0906 3408 [ E959DDC0EA7AC11EE5E5602E2A364310 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
01:00:55.0906 3408 dmio - ok
01:00:55.0953 3408 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
01:00:55.0953 3408 dmload - ok
01:00:55.0968 3408 [ A01858C50704B2D2EDEEBBF6BBBCED2A ] dmserver C:\WINDOWS\System32\dmserver.dll
01:00:56.0000 3408 dmserver - ok
01:00:56.0031 3408 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
01:00:56.0031 3408 DMusic - ok
01:00:56.0078 3408 [ B7A1162B1A26DF7B60D5D9500006096C ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
01:00:56.0078 3408 Dnscache - ok
01:00:56.0109 3408 [ D580D77DFF316BD8C9D73B38695DE8DC ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
01:00:56.0156 3408 Dot3svc - ok
01:00:56.0171 3408 dpti2o - ok
01:00:56.0187 3408 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
01:00:56.0187 3408 drmkaud - ok
01:00:56.0250 3408 [ 86B1F123BACD444E81960B339BAE3FF2 ] EapHost C:\WINDOWS\System32\eapsvc.dll
01:00:56.0296 3408 EapHost - ok
01:00:56.0328 3408 [ B6599EDA9F3EBEF064504EE35BBECA1C ] ERSvc C:\WINDOWS\System32\ersvc.dll
01:00:56.0328 3408 ERSvc - ok
01:00:56.0390 3408 [ 26845F272435302E0F3322E660A24F7D ] Eventlog C:\WINDOWS\system32\services.exe
01:00:56.0406 3408 Eventlog - ok
01:00:56.0437 3408 [ 8360CB9756E598A5C6214EACFB3677C3 ] EventSystem C:\WINDOWS\system32\es.dll
01:00:56.0437 3408 EventSystem - ok
01:00:56.0484 3408 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
01:00:56.0500 3408 Fastfat - ok
01:00:56.0546 3408 [ DCCC606FC144F6E44E497F9A906F1C30 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
01:00:56.0562 3408 FastUserSwitchingCompatibility - ok
01:00:56.0593 3408 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\drivers\Fdc.sys
01:00:56.0609 3408 Fdc - ok
01:00:56.0625 3408 [ 2CFEA3326981A18C6BAF2BD9BE76225B ] Fips C:\WINDOWS\system32\drivers\Fips.sys
01:00:56.0625 3408 Fips - ok
01:00:56.0656 3408 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\drivers\Flpydisk.sys
01:00:56.0671 3408 Flpydisk - ok
01:00:56.0703 3408 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\DRIVERS\fltMgr.sys
01:00:56.0718 3408 FltMgr - ok
01:00:56.0781 3408 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
01:00:56.0812 3408 FontCache3.0.0.0 - ok
01:00:56.0859 3408 [ 960F5E5E4E1F720465311AC68A99C2DF ] fssfltr C:\WINDOWS\system32\DRIVERS\fssfltr_tdi.sys
01:00:56.0859 3408 fssfltr - ok
01:00:56.0953 3408 [ 9B1622EBEB31B3411B13382FFCB8737D ] fsssvc C:\Programmi\Windows Live\Family Safety\fsssvc.exe
01:00:57.0109 3408 fsssvc - ok
01:00:57.0187 3408 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
01:00:57.0187 3408 Fs_Rec - ok
01:00:57.0234 3408 [ F3269A6EE547EA87B949A1CEA4816B38 ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
01:00:57.0250 3408 Ftdisk - ok
01:00:57.0281 3408 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
01:00:57.0281 3408 Gpc - ok
01:00:57.0343 3408 [ C1B577B2169900F4CF7190C39F085794 ] gusvc C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
01:00:57.0343 3408 gusvc - ok
01:00:57.0375 3408 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
01:00:57.0390 3408 HDAudBus - ok
01:00:57.0453 3408 [ 6CE66B51B4EB23D9D073F92698C55C8D ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
01:00:57.0453 3408 helpsvc - ok
01:00:57.0484 3408 [ 43D985A9A51E0295091B6EBE84C96B78 ] HidServ C:\WINDOWS\System32\hidserv.dll
01:00:57.0500 3408 HidServ - ok
01:00:57.0546 3408 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] HidUsb C:\WINDOWS\system32\DRIVERS\hidusb.sys
01:00:57.0546 3408 HidUsb - ok
01:00:57.0593 3408 [ 00CAD842F48947887A972828ACA665F7 ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
01:00:57.0640 3408 hkmsvc - ok
01:00:57.0656 3408 hpn - ok
01:00:57.0703 3408 [ F80A415EF82CD06FFAF0D971528EAD38 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
01:00:57.0718 3408 HTTP - ok
01:00:57.0781 3408 [ 450091AEBFCD08E5858533EAB5B9A436 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
01:00:57.0781 3408 HTTPFilter - ok
01:00:57.0796 3408 i2omgmt - ok
01:00:57.0812 3408 i2omp - ok
01:00:57.0843 3408 [ 610726E28AF55B95043C5C35A727E320 ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
01:00:57.0843 3408 i8042prt - ok
01:00:58.0078 3408 [ 0F68E2EC713F132FFB19E45415B09679 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
01:00:58.0156 3408 ialm - ok
01:00:58.0218 3408 [ 8EF427C54497C5F8A7A645990E4278C7 ] iaStor C:\WINDOWS\system32\drivers\iaStor.sys
01:00:58.0234 3408 iaStor - ok
01:00:58.0312 3408 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
01:00:58.0421 3408 idsvc - ok
01:00:58.0453 3408 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
01:00:58.0453 3408 Imapi - ok
01:00:58.0500 3408 [ DB491237445F172FDDDF00541DE1A51D ] ImapiService C:\WINDOWS\system32\imapi.exe
01:00:58.0562 3408 ImapiService - ok
01:00:58.0578 3408 ini910u - ok
01:00:58.0828 3408 [ 1AE3CFF80017EF89DA959350724C7194 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
01:00:58.0921 3408 IntcAzAudAddService - ok
01:00:58.0937 3408 IntelIde - ok
01:00:58.0968 3408 [ EBD830A0970C438047006A49C23E287F ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
01:00:58.0984 3408 intelppm - ok
01:00:59.0015 3408 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
01:00:59.0015 3408 Ip6Fw - ok
01:00:59.0031 3408 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
01:00:59.0046 3408 IpFilterDriver - ok
01:00:59.0046 3408 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
01:00:59.0062 3408 IpInIp - ok
01:00:59.0093 3408 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
01:00:59.0093 3408 IpNat - ok
01:00:59.0140 3408 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
01:00:59.0156 3408 IPSec - ok
01:00:59.0187 3408 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
01:00:59.0187 3408 IRENUM - ok
01:00:59.0250 3408 [ 0953594BEB81CC72FCC62D37921B25A6 ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
01:00:59.0250 3408 isapnp - ok
01:00:59.0312 3408 [ 28B6EACE513CA7EABA3B809AD4BC274D ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
01:00:59.0312 3408 Kbdclass - ok
01:00:59.0375 3408 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
01:00:59.0375 3408 kmixer - ok
01:00:59.0406 3408 [ B467646C54CC746128904E1654C750C1 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
01:00:59.0406 3408 KSecDD - ok
01:00:59.0453 3408 [ 6C8658587E91EA25B0FD2E71781AD228 ] L1c C:\WINDOWS\system32\DRIVERS\l1c51x86.sys
01:00:59.0453 3408 L1c - ok
01:00:59.0500 3408 [ 0F726D49C0B19E5A506A1CDFCE0EE42F ] LanmanServer C:\WINDOWS\System32\srvsvc.dll
01:00:59.0500 3408 LanmanServer - ok
01:00:59.0546 3408 [ E13B0181DDA60B93E3253EFF52A79CBE ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
01:00:59.0546 3408 lanmanworkstation - ok
01:00:59.0562 3408 lbrtfdc - ok
01:00:59.0625 3408 [ E01255727D0B158538D7C2B469B533A8 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
01:00:59.0640 3408 LmHosts - ok
01:00:59.0671 3408 [ 3B32F662C8607E891F325E41F7EE225C ] Messenger C:\WINDOWS\System32\msgsvc.dll
01:00:59.0718 3408 Messenger - ok
01:00:59.0765 3408 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
01:00:59.0765 3408 mnmdd - ok
01:00:59.0812 3408 [ 514A299EC926BAADA3C718B171476AA4 ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
01:00:59.0859 3408 mnmsrvc - ok
01:00:59.0890 3408 [ 8CB6636806D76B85FAFAEE94D75F5129 ] Modem C:\WINDOWS\system32\drivers\Modem.sys
01:00:59.0890 3408 Modem - ok
01:00:59.0968 3408 [ 9FA7207D1B1ADEAD88AE8EED9CDBBAA5 ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
01:01:00.0015 3408 Monfilt - ok
01:01:00.0062 3408 [ E904EBED608055A2BFB824C07F59766C ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
01:01:00.0078 3408 Mouclass - ok
01:01:00.0125 3408 [ D7662F0CF5B77BBBE3202716F5BD5318 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
01:01:00.0125 3408 mouhid - ok
01:01:00.0156 3408 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
01:01:00.0156 3408 MountMgr - ok
01:01:00.0171 3408 mraid35x - ok
01:01:00.0218 3408 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
01:01:00.0234 3408 MRxDAV - ok
01:01:00.0296 3408 [ 7D304A5EB4344EBEEAB53A2FE3FFB9F0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
01:01:00.0296 3408 MRxSmb - ok
01:01:00.0343 3408 [ 01F77E9E473235C31796ADE46107B0AD ] MSDTC C:\WINDOWS\system32\msdtc.exe
01:01:00.0375 3408 MSDTC - ok
01:01:00.0406 3408 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
01:01:00.0437 3408 Msfs - ok
01:01:00.0609 3408 MSIServer - ok
01:01:00.0640 3408 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
01:01:00.0640 3408 MSKSSRV - ok
01:01:00.0656 3408 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
01:01:00.0671 3408 MSPCLOCK - ok
01:01:00.0718 3408 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
01:01:00.0718 3408 MSPQM - ok
01:01:00.0750 3408 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
01:01:00.0750 3408 mssmbios - ok
01:01:00.0765 3408 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
01:01:00.0765 3408 MSTEE - ok
01:01:00.0828 3408 [ DE6A75F5C270E756C5508D94B6CF68F5 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
01:01:00.0828 3408 Mup - ok
01:01:00.0843 3408 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
01:01:00.0843 3408 NABTSFEC - ok
01:01:00.0875 3408 [ 911587FD303C9690A428BB4B04732B61 ] napagent C:\WINDOWS\System32\qagentrt.dll
01:01:00.0937 3408 napagent - ok
01:01:00.0968 3408 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
01:01:00.0984 3408 NDIS - ok
01:01:01.0015 3408 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
01:01:01.0015 3408 NdisIP - ok
01:01:01.0046 3408 [ 0109C4F3850DFBAB279542515386AE22 ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
01:01:01.0046 3408 NdisTapi - ok
01:01:01.0093 3408 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
01:01:01.0093 3408 Ndisuio - ok
01:01:01.0109 3408 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
01:01:01.0109 3408 NdisWan - ok
01:01:01.0171 3408 [ 9282BD12DFB069D3889EB3FCC1000A9B ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
01:01:01.0171 3408 NDProxy - ok
01:01:01.0218 3408 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
01:01:01.0218 3408 NetBIOS - ok
01:01:01.0281 3408 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
01:01:01.0281 3408 NetBT - ok
01:01:01.0312 3408 [ 1B09227E41F414A93DBC0BAF80C4D527 ] NetDDE C:\WINDOWS\system32\netdde.exe
01:01:01.0343 3408 NetDDE - ok
01:01:01.0359 3408 [ 1B09227E41F414A93DBC0BAF80C4D527 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
01:01:01.0359 3408 NetDDEdsdm - ok
01:01:01.0406 3408 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] Netlogon C:\WINDOWS\system32\lsass.exe
01:01:01.0406 3408 Netlogon - ok
01:01:01.0453 3408 [ 02815B70FC4CA8611A926176F1C39FC2 ] Netman C:\WINDOWS\System32\netman.dll
01:01:01.0468 3408 Netman - ok
01:01:01.0562 3408 [ D34612C5D02D026535B3095D620626AE ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
01:01:01.0671 3408 NetTcpPortSharing - ok
01:01:01.0703 3408 [ C6B69A18D39744725FB73AC85E46032B ] Nla C:\WINDOWS\System32\mswsock.dll
01:01:01.0718 3408 Nla - ok
01:01:01.0781 3408 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
01:01:01.0781 3408 Npfs - ok
01:01:01.0859 3408 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
01:01:01.0968 3408 Ntfs - ok
01:01:01.0984 3408 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] NtLmSsp C:\WINDOWS\system32\lsass.exe
01:01:02.0000 3408 NtLmSsp - ok
01:01:02.0093 3408 [ 89DB90B5F35D2795D9FC56D933CC72B8 ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
01:01:02.0203 3408 NtmsSvc - ok
01:01:02.0234 3408 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
01:01:02.0234 3408 Null - ok
01:01:02.0281 3408 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
01:01:02.0296 3408 NwlnkFlt - ok
01:01:02.0312 3408 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
01:01:02.0328 3408 NwlnkFwd - ok
01:01:02.0546 3408 [ 1F0E05DFF4F5A833168E49BE1256F002 ] odserv C:\Programmi\File comuni\Microsoft Shared\OFFICE12\ODSERV.EXE
01:01:02.0609 3408 odserv - ok
01:01:02.0703 3408 [ 5A432A042DAE460ABE7199B758E8606C ] ose C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE
01:01:02.0750 3408 ose - ok
01:01:02.0765 3408 [ 4E9408A178B2D955871C2CDD278DE3C3 ] Parport C:\WINDOWS\system32\drivers\Parport.sys
01:01:02.0781 3408 Parport - ok
01:01:02.0828 3408 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
01:01:02.0843 3408 PartMgr - ok
01:01:02.0875 3408 [ 0DABEF655A444CB1E193626FB1D24B9F ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
01:01:02.0890 3408 ParVdm - ok
01:01:02.0937 3408 [ F40A46892AFEBB0314536B849D57C11E ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
01:01:02.0968 3408 PCI - ok
01:01:02.0968 3408 PCIDump - ok
01:01:03.0031 3408 [ B2DF00D650FD6C4EE781740ED3C8E67F ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
01:01:03.0046 3408 PCIIde - ok
01:01:03.0093 3408 [ 815C50F2B1D1562800BDCE8BE895000E ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
01:01:03.0140 3408 Pcmcia - ok
01:01:03.0156 3408 PDCOMP - ok
01:01:03.0171 3408 PDFRAME - ok
01:01:03.0187 3408 PDRELI - ok
01:01:03.0203 3408 PDRFRAME - ok
01:01:03.0218 3408 perc2 - ok
01:01:03.0234 3408 perc2hib - ok
01:01:03.0296 3408 [ 26845F272435302E0F3322E660A24F7D ] PlugPlay C:\WINDOWS\system32\services.exe
01:01:03.0296 3408 PlugPlay - ok
01:01:03.0312 3408 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] PolicyAgent C:\WINDOWS\system32\lsass.exe
01:01:03.0312 3408 PolicyAgent - ok
01:01:03.0421 3408 [ E36EDA6BCC41378F3115A9CEEE256C00 ] policyappblockservice C:\Programmi\Parental Control\bin\policyappblock.sys
01:01:03.0468 3408 policyappblockservice - ok
01:01:03.0515 3408 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
01:01:03.0515 3408 PptpMiniport - ok
01:01:03.0562 3408 privoxy - ok
01:01:03.0593 3408 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
01:01:03.0593 3408 ProtectedStorage - ok
01:01:03.0609 3408 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
01:01:03.0625 3408 PSched - ok
01:01:03.0656 3408 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
01:01:03.0656 3408 Ptilink - ok
01:01:03.0656 3408 ql1080 - ok
01:01:03.0671 3408 Ql10wnt - ok
01:01:03.0687 3408 ql12160 - ok
01:01:03.0703 3408 ql1240 - ok
01:01:03.0718 3408 ql1280 - ok
01:01:03.0796 3408 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
01:01:03.0796 3408 RasAcd - ok
01:01:03.0843 3408 [ 9839B418343D6E6E52659BDF3FF1FE67 ] RasAuto C:\WINDOWS\System32\rasauto.dll
01:01:03.0906 3408 RasAuto - ok
01:01:03.0937 3408 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
01:01:03.0937 3408 Rasl2tp - ok
01:01:03.0984 3408 [ 62AD41548E720DB4763B86F95E44F3FA ] RasMan C:\WINDOWS\System32\rasmans.dll
01:01:04.0000 3408 RasMan - ok
01:01:04.0015 3408 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
01:01:04.0015 3408 RasPppoe - ok
01:01:04.0062 3408 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
01:01:04.0062 3408 Raspti - ok
01:01:04.0140 3408 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
01:01:04.0140 3408 Rdbss - ok
01:01:04.0312 3408 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
01:01:04.0328 3408 RDPCDD - ok
01:01:04.0468 3408 [ 5B3055DAA788BD688594D2F5981F2A83 ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
01:01:04.0531 3408 RDPWD - ok
01:01:04.0609 3408 [ CC72E6AE90245F0AE48BF1236A7E1F9C ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
01:01:05.0109 3408 RDSessMgr - ok
01:01:05.0125 3408 [ 393FC252593323B624B230ECA6B85E63 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
01:01:05.0140 3408 redbook - ok
01:01:05.0203 3408 [ 7EBBF16FBD3E0E34F084FA635C1844E3 ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
01:01:05.0265 3408 RemoteAccess - ok
01:01:05.0531 3408 [ DC97F6C8A94691834439872B9E8FF2B3 ] RpcLocator C:\WINDOWS\system32\locator.exe
01:01:05.0593 3408 RpcLocator - ok
01:01:05.0671 3408 [ BC4E0226341AAEC1222336B3AED86BAB ] RpcSs C:\WINDOWS\System32\rpcss.dll
01:01:05.0687 3408 RpcSs - ok
01:01:05.0734 3408 [ DCE0D20F8FB66DF41D53734BFF9D66F0 ] RSVP C:\WINDOWS\system32\rsvp.exe
01:01:05.0796 3408 RSVP - ok
01:01:05.0828 3408 [ 0FBA335727905DE8E4CB5A2CF438ABF5 ] SamSs C:\WINDOWS\system32\lsass.exe
01:01:05.0843 3408 SamSs - ok
01:01:05.0906 3408 [ 1D456F1CD76A80793C07BA52CF3A7455 ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
01:01:05.0968 3408 SCardSvr - ok
01:01:06.0046 3408 [ 511886E5BD060046CCE8373E92E62EDF ] Schedule C:\WINDOWS\system32\schedsvc.dll
01:01:06.0078 3408 Schedule - ok
01:01:06.0140 3408 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
01:01:06.0171 3408 Secdrv - ok
01:01:06.0250 3408 [ 17C6354CA08E7C7972E12C67478AE134 ] seclogon C:\WINDOWS\System32\seclogon.dll
01:01:06.0250 3408 seclogon - ok
01:01:06.0328 3408 [ A0ECA1CE0FCCB29C5E4E1F416E95E73E ] SENS C:\WINDOWS\system32\sens.dll
01:01:06.0328 3408 SENS - ok
01:01:06.0359 3408 [ FDBD9D64E2E03270021D424F0DCCF79D ] Serial C:\WINDOWS\system32\drivers\Serial.sys
01:01:06.0359 3408 Serial - ok
01:01:06.0437 3408 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
01:01:06.0437 3408 Sfloppy - ok
01:01:06.0468 3408 [ 152C0555925DFE028E3148FD215146BB ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
01:01:06.0484 3408 SharedAccess - ok
01:01:06.0546 3408 [ DCCC606FC144F6E44E497F9A906F1C30 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
01:01:06.0546 3408 ShellHWDetection - ok
01:01:06.0562 3408 Simbad - ok
01:01:06.0625 3408 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
01:01:06.0640 3408 SLIP - ok
01:01:06.0656 3408 Sparrow - ok
01:01:06.0750 3408 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
01:01:06.0750 3408 splitter - ok
01:01:06.0828 3408 [ 60784F891563FB1B767F70117FC2428F ] Spooler C:\WINDOWS\system32\spoolsv.exe
01:01:06.0828 3408 Spooler - ok
01:01:06.0921 3408 [ 618718CAE288BF7CBD8FCBAB2577D932 ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
01:01:07.0046 3408 sr - ok
01:01:07.0140 3408 [ B3E3DA70A7A76E69B872DE3D06D32C19 ] srservice C:\WINDOWS\system32\srsvc.dll
01:01:07.0296 3408 srservice - ok
01:01:07.0359 3408 [ 0BD44AA4743A9DBD2C638D699A7FD438 ] SRS_PremiumSound_Service C:\WINDOWS\system32\drivers\srs_PremiumSound_i386.sys
01:01:07.0421 3408 SRS_PremiumSound_Service - ok
01:01:07.0656 3408 [ 47DDFC2F003F7F9F0592C6874962A2E7 ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
01:01:07.0687 3408 Srv - ok
01:01:07.0718 3408 [ 5215569DD3A8FBC65A85E85F3C12258B ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
01:01:07.0734 3408 SSDPSRV - ok
01:01:07.0796 3408 [ 3B9263E137896E4D303494F116E00608 ] stisvc C:\WINDOWS\system32\wiaservc.dll
01:01:07.0812 3408 stisvc - ok
01:01:07.0859 3408 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
01:01:07.0875 3408 streamip - ok
01:01:07.0921 3408 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
01:01:07.0921 3408 swenum - ok
01:01:07.0968 3408 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
01:01:07.0984 3408 swmidi - ok
01:01:08.0015 3408 SwPrv - ok
01:01:08.0046 3408 symc810 - ok
01:01:08.0062 3408 symc8xx - ok
01:01:08.0093 3408 sym_hi - ok
01:01:08.0109 3408 sym_u3 - ok
01:01:08.0156 3408 [ A10D781153BB23036B474FFEDB448266 ] SynTP C:\WINDOWS\system32\DRIVERS\SynTP.sys
01:01:08.0250 3408 SynTP - ok
01:01:08.0281 3408 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
01:01:08.0281 3408 sysaudio - ok
01:01:08.0343 3408 [ A34A9A872EEC4C026FD542AC7156FE0B ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
01:01:08.0406 3408 SysmonLog - ok
01:01:08.0484 3408 [ 6B85F1A9DCE45D45BFFAD3222C21F297 ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
01:01:08.0515 3408 TapiSrv - ok
01:01:08.0781 3408 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
01:01:08.0781 3408 Tcpip - ok
01:01:08.0828 3408 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
01:01:08.0859 3408 TDPIPE - ok
01:01:08.0953 3408 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
01:01:08.0953 3408 TDTCP - ok
01:01:09.0015 3408 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
01:01:09.0015 3408 TermDD - ok
01:01:09.0125 3408 [ FE5A5329CCFC33D645C33077FF04F052 ] TermService C:\WINDOWS\System32\termsrv.dll
01:01:09.0140 3408 TermService - ok
01:01:09.0250 3408 [ DCCC606FC144F6E44E497F9A906F1C30 ] Themes C:\WINDOWS\System32\shsvcs.dll
01:01:09.0250 3408 Themes - ok
01:01:09.0296 3408 TosIde - ok
01:01:09.0375 3408 [ 690294999DF1248FAF85D95B31955D0C ] TrkWks C:\WINDOWS\system32\trkwks.dll
01:01:09.0375 3408 TrkWks - ok
01:01:09.0437 3408 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
01:01:09.0468 3408 Udfs - ok
01:01:09.0500 3408 ultra - ok
01:01:09.0593 3408 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
01:01:09.0609 3408 Update - ok
01:01:09.0656 3408 [ 8057B0744D9842A090E51D2845861D5F ] upnphost C:\WINDOWS\System32\upnphost.dll
01:01:09.0765 3408 upnphost - ok
01:01:09.0796 3408 [ F5E8B846EC10E1DF8DCA64119E2EB709 ] UPS C:\WINDOWS\System32\ups.exe
01:01:09.0843 3408 UPS - ok
01:01:09.0890 3408 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
01:01:09.0890 3408 usbccgp - ok
01:01:09.0937 3408 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
01:01:09.0953 3408 usbehci - ok
01:01:09.0984 3408 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
01:01:10.0000 3408 usbhub - ok
01:01:10.0015 3408 [ A32426D9B14A089EAA1D922E0C5801A9 ] usbstor C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
01:01:10.0015 3408 usbstor - ok
01:01:10.0046 3408 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
01:01:10.0046 3408 usbuhci - ok
01:01:10.0078 3408 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
01:01:10.0093 3408 usbvideo - ok
01:01:10.0140 3408 [ C019889035CDC1A06F2FEBC93CBB6897 ] uvclf C:\WINDOWS\system32\DRIVERS\uvclf.sys
01:01:10.0140 3408 uvclf - ok
01:01:10.0187 3408 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
01:01:10.0187 3408 VgaSave - ok
01:01:10.0187 3408 ViaIde - ok
01:01:10.0234 3408 [ E46C1B5A56DA7DA603D09DFCC79EC59E ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
01:01:10.0234 3408 VolSnap - ok
01:01:10.0328 3408 [ C2FE17125256102F5B44194D5DB0A799 ] VSS C:\WINDOWS\System32\vssvc.exe
01:01:10.0437 3408 VSS - ok
01:01:10.0484 3408 [ 2969DD84B584A6BB541A5273103957A3 ] W32Time C:\WINDOWS\system32\w32time.dll
01:01:10.0484 3408 W32Time - ok
01:01:10.0531 3408 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
01:01:10.0531 3408 Wanarp - ok
01:01:10.0656 3408 [ BBCFEAB7E871CDDAC2D397EE7FA91FDC ] Wdf01000 C:\WINDOWS\system32\Drivers\wdf01000.sys
01:01:10.0656 3408 Wdf01000 - ok
01:01:10.0671 3408 WDICA - ok
01:01:10.0718 3408 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
01:01:10.0718 3408 wdmaud - ok
01:01:10.0796 3408 [ 2EC50EE79B65F60C8E8B4A03BBB3A42F ] WebClient C:\WINDOWS\System32\webclnt.dll
01:01:10.0812 3408 WebClient - ok
01:01:10.0984 3408 [ 40911E98D0F1CBB1015F2101982F1DDF ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
01:01:10.0984 3408 winmgmt - ok
01:01:11.0062 3408 [ C51B4A5C05A5475708E3C81C7765B71D ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
01:01:11.0109 3408 WmdmPmSN - ok
01:01:11.0187 3408 [ 81FD02839FDB10ACF0EC40B809B9F8CC ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
01:01:11.0281 3408 WmiApSrv - ok
01:01:11.0484 3408 [ F30DC8F80CF65A323E8B6A2DB81561E3 ] WMPNetworkSvc C:\Programmi\Windows Media Player\WMPNetwk.exe
01:01:11.0515 3408 WMPNetworkSvc - ok
01:01:11.0562 3408 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
01:01:11.0562 3408 WS2IFSL - ok
01:01:11.0609 3408 [ 926D921C93CFF1E19EF4DE3E4C8368CA ] wscsvc C:\WINDOWS\system32\wscsvc.dll
01:01:11.0625 3408 wscsvc - ok
01:01:11.0656 3408 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
01:01:11.0656 3408 WSTCODEC - ok
01:01:11.0718 3408 [ CC48415E6C7CBAA441A3D6A6DCCBCFA6 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
01:01:11.0734 3408 wuauserv - ok
01:01:11.0781 3408 [ F15FEAFFFBB3644CCC80C5DA584E6311 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
01:01:11.0796 3408 WudfPf - ok
01:01:11.0812 3408 [ 28B524262BCE6DE1F7EF9F510BA3985B ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
01:01:11.0828 3408 WudfRd - ok
01:01:11.0843 3408 [ 05231C04253C5BC30B26CBAAE680ED89 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
01:01:11.0890 3408 WudfSvc - ok
01:01:11.0953 3408 [ 053E0307A08CAC60793E27E921B46B3E ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
01:01:11.0968 3408 WZCSVC - ok
01:01:12.0031 3408 [ 5526482DCBA6047641B13BF9C75A74E0 ] xmlprov C:\WINDOWS\System32\xmlprov.dll
01:01:12.0109 3408 xmlprov - ok
01:01:12.0156 3408 ================ Scan global ===============================
01:01:12.0187 3408 [ 17DDFE6A0B5404C5EF4C03AD996D0562 ] C:\WINDOWS\system32\basesrv.dll
01:01:12.0218 3408 [ 7B39F8912DF2C266411F7248EC250AE6 ] C:\WINDOWS\system32\winsrv.dll
01:01:12.0250 3408 [ 7B39F8912DF2C266411F7248EC250AE6 ] C:\WINDOWS\system32\winsrv.dll
01:01:12.0281 3408 [ 26845F272435302E0F3322E660A24F7D ] C:\WINDOWS\system32\services.exe
01:01:12.0281 3408 [Global] - ok
01:01:12.0281 3408 ================ Scan MBR ==================================
01:01:12.0312 3408 [ 8F558EB6672622401DA993E1E865C861 ] \Device\Harddisk0\DR0
01:01:12.0859 3408 \Device\Harddisk0\DR0 - ok
01:01:12.0859 3408 ================ Scan VBR ==================================
01:01:12.0875 3408 [ 968FD280FE9FD0BFAED2924814DCEF18 ] \Device\Harddisk0\DR0\Partition1
01:01:12.0875 3408 \Device\Harddisk0\DR0\Partition1 - ok
01:01:12.0906 3408 [ 5FA2FF2E323C5C2FD9411B009A9484BF ] \Device\Harddisk0\DR0\Partition2
01:01:12.0906 3408 \Device\Harddisk0\DR0\Partition2 - ok
01:01:12.0906 3408 ============================================================
01:01:12.0906 3408 Scan finished
01:01:12.0906 3408 ============================================================
01:01:12.0953 3400 Detected object count: 0
01:01:12.0953 3400 Actual detected object count: 0
01:02:07.0109 2960 Deinitialize success

 

[tecnico24]

Ha rimosso un rootkit molto ostico.
Segui questa guida:
http://www.tomshw.it/forum/sicurezz...omputer-infetto-leggere-prima-di-postare.html
postami i due report di OTL.

Scarica AswMbr
http://public.avast.com/~gmerek/aswMBR.exe
sul desktop
avvialo
clicca su Scan per far partire la scansione
Clicca su Save per salvare il report delle operazioni
lo troverai sul desktop , allegalo su www.wikisend.com insieme agli altre due.

 

[magicando]

ok grazie domani pubblica i risultati

- - - Updated - - -

ho provato a fare la scansione con otl ma non mi parte comunque penso che il pc sta molto meglio di prima eliminando quel virus
grazie per l'aiuto

 

[magicando]

oggi ho acceso il pc e ho notato che l'icona di avira non era presente nella barra quindi ho visto varie recensioni e ho deciso di istallare avast
avvio la scansione ma la interrompo perché dovevo riavviare il pc dopo 15 minuti ho notato che l'icona di avast dalla barra non c'era più
da cosa dipende?
poi ho anche core temp con il gadget e improvvisamente oggi il gadget mi diceva che non rilevava il programma e lo reistallato e adesso funziona anche se ho avuto qualche problema
potrebbe essere u virus?
p.s mi è stato chiesto di continuare questo topic ma questa volta si tratta del mio pc quindi non è quello di sopra

 

[tecnico24]

oggi ho acceso il pc e ho notato che l'icona di avira non era presente nella barra quindi ho visto varie recensioni e ho deciso di istallare avast
avvio la scansione ma la interrompo perché dovevo riavviare il pc dopo 15 minuti ho notato che l'icona di avast dalla barra non c'era più
da cosa dipende?
poi ho anche core temp con il gadget e improvvisamente oggi il gadget mi diceva che non rilevava il programma e lo reistallato e adesso funziona anche se ho avuto qualche problema
potrebbe essere u virus?
p.s mi è stato chiesto di continuare questo topic ma questa volta si tratta del mio pc quindi non è quello di sopra

Avast compare tra i programmi installati?prova a riavviarlo da tutti i programmi.

 

[magicando]

si e mi fa anche la scansione
proprio adesso è terminata è mi ha trovato una minaccia
allego la foto

- - - Updated - - -

pensi che sia quello il problema?

- - - Updated - - -

ho riavviato il pc e l'icona di avast non compare

 

[tecnico24]

Eliminalo tranquillamente.
Non ho capito pero quando dici che stavi facendo la scansione con avast ma dovevi riavviare.
Avast è attivo oppure no?controlla nel pannello di controllo.
Specifica anche il tuo sistema operativo , visto che non possiamo andare ad indovino.

 

[magicando]

e l'icona di core temp sul desktop è diventata cosi
window 7

- - - Updated - - -

si l'ho eliminata poi ho riavviato
mentre prima ho istallato avast e ho disitallato avira che mi richiedeva il riavvio del pc quindi ho sospeso la scansione e ho riavviato il pc

 

[tecnico24]

Cerchiamo di capirci.
Se mi segui , cerchiamo di capire , altrimenti non arriviamo a niente.
Ricapitoliamo:
I servizi di avast sono attivi?controlla in msconfig sulla scheda servizi.
Hai attivato la licenza di avast?
in impostazioni - apparenza - è spuntato su :
mostra l'icona di avast! nella system tray?
controlla.

 

[magicando]

avast è in esecuzione
ho la licenza free
si la spunta c'è

- - - Updated - - -

e adesso che ho aperto il portale di avast è comparsa anche l'icona
però all'avvio non compare anche se su mconfig mi dice in esecuzione

 

[tecnico24]

Ti sei registrato al loro sito ottenendo la chiave di licenza?