One week ago my PC stopped connecting to internet; I've 2 connection, one wired and another wireless, and noone works.
Other device are connecting to internet without any issues using same router (PCs, smartphones, ...).
Tried unplugging wireless USB connection and disabling wired one; then installed a new NIC but nothing changed - no internet connection; so restored previous configuration.
System tray connection status is always trying to get network address.
Ipconfig command reports IP address 0.0.0.0.
Tried Microsoft Support methods, run MicrosoftEasyFix50562 and MicrosoftFixit50267 without issue resolution.
It seems an issue like one described in post https://www.techspot.com/community/...cp-wont-start-error-1068-dhcp-afd-sys.182903/
FRST logs follow:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:30-09-2015
Ran by Marcato Paolo (administrator) on MONSTER (02-10-2015 01:46:34)
Running from C:\Documents and Settings\Marcato Paolo\Desktop
Loaded Profiles: Marcato Paolo (Available Profiles: Marcato Paolo & Administrator)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: Italiano (Italia)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Nero AG) C:\Programmi\Ahead\InCD\InCDsrv.exe
(Broadcom Corporation.) C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avguard.exe
(ATI Technologies, Inc.) C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(GreenPrint Technologies LLC.) C:\Programmi\GreenPrint\gpsrht01.exe
(GreenPrint Technologies LLC.) C:\Programmi\GreenPrint\gpsrdg01.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe
(Nitro PDF Software) C:\Programmi\Nitro PDF\Reader\NitroPDFReaderDriverService.exe
(Broadcom Corporation.) C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Programmi\HTC\Internet Pass-Through\PassThruSvr.exe
(Safer-Networking Ltd.) C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\fxssvc.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ATIPTA] => C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe [335872 2004-04-21] (ATI Technologies, Inc.)
HKLM\...\Run: [Logitech Utility] => C:\WINDOWS\Logi_MwX.Exe [19968 2003-11-07] (Logitech Inc.)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2005-02-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [APSDaemon] => C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Programmi\Avira\AntiVir Desktop\avgnt.exe [782520 2015-09-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SDTray] => C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [QuickTime Task] => C:\Programmi\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [IJNetworkScanUtility] => C:\Programmi\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [128352 2007-11-19] (CANON INC.)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Programmi\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CanonMyPrinter] => C:\Programmi\Canon\MyPrinter\BJMyPrt.exe [1848648 2008-03-17] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Programmi\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programmi\File comuni\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2005-02-22] (ATI Technologies Inc.)
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Programmi\File comuni\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\...\Run: [GUDelayStartup] => C:\Programmi\Glary Utilities 5\StartupManager.exe [37152 2015-09-28] (Glarysoft Ltd)
ShellExecuteHooks: Hook per l'esecuzione degli URL - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\system32\shell32.dll [8492032 2012-06-08] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\BTTray.lnk [2008-05-28]
ShortcutTarget: BTTray.lnk -> C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\Esecuzione automatica\ERUNT AutoBackup.lnk [2005-12-10]
ShortcutTarget: ERUNT AutoBackup.lnk -> C:\Programmi\ERUNT\AUTOBACK.EXE ()
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://192.168.1.254/basic/home_wlan.htm
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-2595107873-1605812571-3183979579-1006 -> DefaultScope {55C56BC7-A927-4F98-8B72-B547216E6DA5} URL = hxxp://www.google.it/search?hl=it&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-2595107873-1605812571-3183979579-1006 -> {55C56BC7-A927-4F98-8B72-B547216E6DA5} URL = hxxp://www.google.it/search?hl=it&q={searchTerms}&meta=
BHO: Supporto di collegamento per Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: No Name -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
BHO: IE to GetRight Helper -> {31FF080D-12A3-439A-A2EF-4BA95A3148E8} -> C:\Programmi\GetRight\xx2gr.dll [2007-07-18] (Headlight Software, Inc.)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Programmi\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Programmi\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-04-18] ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programmi\Java\jre1.8.0_60\bin\ssv.dll [2015-09-21] (Oracle Corporation)
BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Programmi\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programmi\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-21] (Oracle Corporation)
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/common/asusTek_sys_ctrl.cab
DPF: {601B418B-E6A6-47FC-A094-07248741CEB3}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programmi\File comuni\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: hxxps://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-24] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX Content Upload Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Content Uploader\npUpload.dll [No File]
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Player\npDivxPlayerPlugin.dll [No File]
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Programmi\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Programmi\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Programmi\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Programmi\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Programmi\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Programmi\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: Adobe Reader -> C:\Programmi\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2008-01-08] (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin2.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin3.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin4.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin5.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\garzanti_ItaFra.xml [2012-08-17]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\googletranslate.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\isearch.whitesmoke.com.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\normeinrete.xml [2008-12-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\PagineBianche.xml [2008-12-09]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\s-amazon-it.xml [2012-02-08]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\translate-german-to-english.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\webster.xml [2008-06-30]
FF Extension: Avira Browser Safety - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\abs@avira.com [2015-09-18]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\artur.dubovoy@gmail.com [2015-09-24]
FF Extension: Free Download Manager plugin - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\fdm_ffext@freedownloadmanager.org [2012-12-13]
FF Extension: Italian dictionary - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\it-IT@dictionaries.addons.mozilla.org [2014-08-04]
FF Extension: Tabberwocky - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\tabberwocky@studio17.wordpress.com [2011-02-16]
FF Extension: Tabs Open Relative - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\tabsopenrelative@jomel.me.uk [2009-05-11]
FF Extension: No Name - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\temp [2006-04-16]
FF Extension: Download Youtube Videos + - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\video.downloader.plugin@ffpimp.com [2012-03-21]
FF Extension: VideoSurf Videos at a Glance - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\videosurf_enhanced@videosurf.com [2011-03-13]
FF Extension: Forecastfox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2012-10-08]
FF Extension: No Name - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}-trash [2011-03-23]
FF Extension: Stop Autoplay - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{2e61e246-e640-4c56-b1ed-f146dbed48cd} [2011-02-11]
FF Extension: FEBE - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2015-06-02]
FF Extension: iMacros for Firefox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2015-09-24]
FF Extension: DictionarySearch(Updated) - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{a0faa0a4-f1a7-4098-9a71-21efc3a92372} [2012-02-03]
FF Extension: Memory Fox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} [2015-05-31]
FF Extension: Add to Amazon Wish List Button - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\amznUWL2@amazon.com.xpi [2012-05-16]
FF Extension: BarTab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\bartap@philikon.de.xpi [2012-03-27]
FF Extension: Be Quiet! - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\BeQuiet@com.sppad.xpi [2013-09-23]
FF Extension: Ctrl-Tab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\ctrl-tab@design-noir.de.xpi [2015-04-25]
FF Extension: FabTabs - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\fabtab@captaincaveman.nl.xpi [2011-03-23]
FF Extension: Ghostery - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
FF Extension: InstaClick - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\instaclick@leahscape.com.xpi [2011-05-23]
FF Extension: Self-Destructing Cookies - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2015-06-04]
FF Extension: Location Guard - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\jid1-HdwPLukcGQeOSh@jetpack.xpi [2015-06-04]
FF Extension: Preserve Download Modification Timestamp - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\pdmts@caligonstudios.com.xpi [2011-11-30]
FF Extension: Print Edit - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\printedit@DW-dev.xpi [2013-05-17]
FF Extension: ScrapBook Plus - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\scrapbookplus@addons.mozilla.org.xpi [2011-11-09]
FF Extension: Searchbastard - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\searchbastard@rosell.dk.xpi [2011-11-30]
FF Extension: SiteDelta - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\sitedelta@schierla.de.xpi [2012-05-08]
FF Extension: Shoptimate - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\support@shoptimate.com.xpi [2015-07-03]
FF Extension: TrBut - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\trbut@david.gevaerts.xpi [2011-11-30]
FF Extension: Tree Style Tab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\treestyletab@piro.sakura.ne.jp.xpi [2014-03-27]
FF Extension: YouTube to MP3 - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\youtube2mp3@mondayx.de.xpi [2011-08-15]
FF Extension: Session Manager - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2012-03-07]
FF Extension: ScrapBook MAF Creator - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1544D611-955F-4ceb-95D3-82C720C29EAE}.xpi [2011-11-09]
FF Extension: FlashGot - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2011-03-23]
FF Extension: Image Zoom - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2013-04-18]
FF Extension: Tab Control - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{39952c40-5197-11da-8cd6-0800200c9a66}.xpi [2013-06-02]
FF Extension: Work Offline - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{761a54f1-8ccf-4112-9e48-dbf72adf6244}.xpi [2012-03-15]
FF Extension: Mozilla Archive Format - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}.xpi [2012-03-21]
FF Extension: Dictionary Tooltip - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{C6128004-4838-4708-9A97-BB172D17767D}.xpi [2011-03-23]
FF Extension: BetterPrivacy - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2011-04-21]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-17]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Programmi\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &video& - C:\Programmi\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-11]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Programmi\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Programmi\Avira\AntiVir Desktop\avmailc.exe [916968 2015-09-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Programmi\Avira\AntiVir Desktop\sched.exe [461672 2015-09-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programmi\Avira\AntiVir Desktop\avguard.exe [461672 2015-09-23] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Programmi\Avira\AntiVir Desktop\AVWEBGRD.EXE [1210512 2015-09-23] (Avira Operations GmbH & Co. KG)
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [516096 2004-04-21] () [File not signed]
R2 Avira.ServiceHost; C:\Programmi\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG)
R2 btwdins; C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800 2007-09-11] (Broadcom Corporation.)
R2 GreenPrint; C:\Programmi\GreenPrint\GPSRHT01.exe [520744 2011-01-07] (GreenPrint Technologies LLC.)
S3 IDriverT; C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 InCDsrv; C:\Programmi\Ahead\InCD\InCDsrv.exe [854528 2005-01-03] (Nero AG) [File not signed]
S2 InCDsrvR; C:\Programmi\Ahead\InCD\InCDsrv.exe [854528 2005-01-03] (Nero AG) [File not signed]
S2 MBAMService; C:\Programmi\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 MozillaMaintenance; C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe [147624 2015-09-22] (Mozilla Foundation)
R2 NitroReaderDriverReadSpool; C:\Programmi\Nitro PDF\Reader\NitroPDFReaderDriverService.exe [196912 2011-02-04] (Nitro PDF Software)
S3 ose; C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 PassThru Service; C:\Programmi\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2012-04-13] () [File not signed]
S3 SandraDataSrv; C:\Programmi\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe [184504 2007-09-11] (SiSoftware)
S3 SandraTheSrv; C:\Programmi\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe [1265856 2007-09-11] (SiSoftware)
S2 SDScannerService; C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Programmi\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 ServiceLayer; C:\Programmi\PC Connectivity Solution\ServiceLayer.exe [575488 2008-08-07] (Nokia.) [File not signed]
S2 SkypeUpdate; C:\Programmi\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
S3 WMPNetworkSvc; C:\Programmi\Windows Media Player\WMPNetwk.exe [918528 2006-11-02] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 abp480n5; C:\WINDOWS\system32\Drivers\abp480n5.sys [23552 2001-08-17] (Microsoft Corporation)
S3 ActionReplayDS; C:\WINDOWS\System32\Drivers\ActionReplayDS.sys [29184 2007-02-08] (Thesycon GmbH, Germany) [File not signed]
R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2310720 2005-02-02] (Realtek Semiconductor Corp.) [File not signed]
R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-01] (Advanced Micro Devices)
R1 AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [4962 2004-10-14] () [File not signed]
R1 aslm75; C:\WINDOWS\system32\drivers\aslm75.sys [6272 1997-04-22] () [File not signed]
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [108448 2015-09-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136728 2015-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37896 2015-05-22] (Avira Operations GmbH & Co. KG)
S3 BRGSp50; C:\WINDOWS\System32\Drivers\BRGSp50.sys [20608 2005-06-08] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [539432 2008-05-28] (Broadcom Corporation.)
R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37424 2008-05-28] (Broadcom Corporation.)
R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [879496 2008-05-28] (Broadcom Corporation.)
S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [156392 2008-05-28] (Broadcom Corporation.)
S3 btwhid; C:\WINDOWS\System32\DRIVERS\btwhid.sys [55352 2008-05-28] (Broadcom Corporation.)
R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [74656 2008-05-28] (Broadcom Corporation.)
S1 Changer; C:\WINDOWS\system32\Drivers\Changer.sys [8192 2008-04-13] (Microsoft Corporation)
S3 CnxEtP; C:\WINDOWS\System32\DRIVERS\CnxEtP.sys [60288 2003-09-12] (Conexant) [File not signed]
S3 CnxEtU; C:\WINDOWS\System32\DRIVERS\CnxEtU.sys [646784 2003-09-12] (Conexant) [File not signed]
S3 CnxTgN; C:\WINDOWS\System32\DRIVERS\CnxTgN.sys [108675 2003-10-29] (Conexant Systems Inc.) [File not signed]
R3 ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [17472 2015-10-01] (Glarysoft Ltd)
R3 hidgame; C:\WINDOWS\System32\DRIVERS\hidgame.sys [8576 2001-08-17] (Microsoft Corporation)
R2 HWiNFO32; C:\Programmi\HWiNFO32\HWiNFO32.SYS [7296 2006-06-07] (REALiX(tm)) [File not signed]
R4 InCDfs; C:\WINDOWS\system32\Drivers\InCDfs.sys [99456 2005-01-03] (Nero AG) [File not signed]
R1 InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [28928 2005-01-03] (Nero AG) [File not signed]
U1 InCDrec; C:\WINDOWS\system32\Drivers\InCDrec.sys [8704 2005-01-03] (Nero AG) [File not signed]
R1 incdrm; C:\WINDOWS\system32\Drivers\incdrm.sys [27776 2005-01-03] (Nero AG) [File not signed]
S1 lbrtfdc; C:\WINDOWS\system32\Drivers\lbrtfdc.sys [34688 2008-04-13] (Toshiba Corp.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 ms_mpu401; C:\WINDOWS\System32\drivers\msmpu401.sys [2944 2001-08-18] (Microsoft Corporation)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R0 nvata; C:\WINDOWS\System32\DRIVERS\nvata.sys [92800 2005-05-17] (NVIDIA Corporation)
R0 nvatabus; C:\WINDOWS\System32\DRIVERS\nvatabus.sys [86144 2004-11-03] (NVIDIA Corporation) [File not signed]
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [33536 2005-04-06] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [12928 2005-04-06] (NVIDIA Corporation)
S3 OSFMount; C:\Documents and Settings\Marcato Paolo\Documenti\Download\- USB Application - No Install -\OSFMount - virtual CD DVD drive tools\OSFMount.sys [974264 2014-02-07] (PassMark Software)
R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [77184 2004-03-09] (Protection Technology) [File not signed]
R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [65504 2004-03-09] (Protection Technology) [File not signed]
R0 prosync1; C:\WINDOWS\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S3 rtl8139; C:\WINDOWS\System32\DRIVERS\R8139n51.SYS [46976 2002-10-04] (Realtek Semiconductor Corporation )
R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 SIVDriver; C:\WINDOWS\system32\Drivers\SIVX32.sys [98072 2012-02-14] (Ray Hinchliffe)
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [31848 2015-06-19] (Avira Operations GmbH & Co. KG)
R3 WmBEnum; C:\WINDOWS\System32\drivers\WmBEnum.sys [10144 2004-04-14] (Logitech Inc.)
S3 WmFilter; C:\WINDOWS\System32\drivers\WmFilter.sys [21280 2004-04-14] (Logitech Inc.)
S3 WmVirHid; C:\WINDOWS\System32\drivers\WmVirHid.sys [5600 2004-04-14] (Logitech Inc.)
R3 WmXlCore; C:\WINDOWS\System32\drivers\WmXlCore.sys [44064 2004-04-14] (Logitech Inc.)
R3 ZD1211BU(Atlantis-Land); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [500736 2007-06-25] (Atheros Technology Corporation) [File not signed]
S3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2004-10-25] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
U5 Inport; C:\Windows\System32\Drivers\Inport.sys [13568 2001-08-30] (Microsoft Corporation)
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-02 01:46 - 2015-10-02 01:47 - 00032508 _____ C:\Documents and Settings\Marcato Paolo\Desktop\FRST.txt
2015-10-02 01:46 - 2015-10-02 01:46 - 00000000 ____D C:\FRST
2015-10-02 01:46 - 2015-10-02 01:17 - 01696256 _____ (Farbar) C:\Documents and Settings\Marcato Paolo\Desktop\FRST.exe
2015-10-01 18:32 - 2015-10-01 18:32 - 00017472 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2015-10-01 18:32 - 2015-10-01 18:32 - 00000768 _____ C:\Documents and Settings\All Users\Menu Avvio\Programmi\Glary Utilities 5.lnk
2015-10-01 18:32 - 2015-10-01 18:32 - 00000762 _____ C:\Documents and Settings\All Users\Desktop\Glary Utilities 5.lnk
2015-10-01 18:32 - 2015-10-01 18:32 - 00000322 _____ C:\WINDOWS\Tasks\GlaryInitialize 5.job
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\GlarySoft
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\DiskDefrag
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Glary Utilities 5
2015-10-01 18:31 - 2015-10-01 18:32 - 00000000 ____D C:\Programmi\Glary Utilities 5
2015-10-01 18:26 - 2015-10-01 18:26 - 00002368 _____ C:\Documents and Settings\Marcato Paolo\Desktop\aswMBR.txt
2015-10-01 18:26 - 2015-10-01 18:26 - 00000512 _____ C:\Documents and Settings\Marcato Paolo\Desktop\MBR.dat
2015-10-01 18:14 - 2015-10-01 18:14 - 00012518 _____ C:\Documents and Settings\Marcato Paolo\Desktop\ADS Spy.txt
2015-10-01 17:50 - 2015-10-02 01:47 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00025164 _____ C:\ComboFix.txt
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\NetworkService\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\LocalService\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\Default User\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\Administrator\Impostazioni locali\temp
2015-10-01 17:16 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2015-10-01 17:16 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2015-10-01 16:20 - 2015-10-01 16:20 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\ProcAlyzer Dumps
2015-10-01 15:48 - 2015-10-01 16:36 - 00001631 _____ C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
2015-10-01 15:47 - 2015-10-01 15:48 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\HitmanPro
2015-10-01 15:47 - 2015-10-01 15:47 - 00000000 ____D C:\Programmi\HitmanPro
2015-10-01 15:47 - 2015-10-01 15:47 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\HitmanPro
2015-10-01 15:45 - 2015-10-01 15:45 - 00078489 _____ C:\Documents and Settings\Marcato Paolo\Desktop\TDSSKiller.txt
2015-10-01 14:52 - 2015-10-01 14:52 - 00022699 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AdwCleaner[C1].txt
2015-10-01 03:07 - 2015-10-01 03:10 - 00000000 ____D C:\AdwCleaner
2015-10-01 03:03 - 2015-10-01 03:06 - 00002754 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Rkill.txt
2015-10-01 02:59 - 2015-10-01 00:51 - 05611408 _____ (Swearware) C:\Documents and Settings\Marcato Paolo\Desktop\abc.com
2015-10-01 02:58 - 2015-10-01 01:50 - 05636489 ____R (Swearware) C:\Documents and Settings\Marcato Paolo\Desktop\abC.exe
2015-10-01 02:57 - 2015-10-01 01:48 - 15310512 _____ C:\Documents and Settings\Marcato Paolo\Desktop\gu5setup-13776.exe
2015-10-01 02:56 - 2015-10-01 00:36 - 05200384 _____ (AVAST Software) C:\Documents and Settings\Marcato Paolo\Desktop\aswmbr.exe
2015-10-01 02:55 - 2015-10-01 01:44 - 00037888 _____ (Soeperman Enterprises Ltd.) C:\Documents and Settings\Marcato Paolo\Desktop\ADSSpy.exe
2015-10-01 02:54 - 2015-10-01 00:33 - 10367880 _____ (SurfRight B.V.) C:\Documents and Settings\Marcato Paolo\Desktop\HitmanPro.exe
2015-10-01 02:52 - 2015-10-01 01:39 - 24345872 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Marcato Paolo\Desktop\mbam-setup-2.1.8.1057.exe
2015-10-01 02:52 - 2015-10-01 01:37 - 01670656 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AdwCleaner.exe
2015-10-01 02:52 - 2015-10-01 01:35 - 02019656 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Marcato Paolo\Desktop\rkill.exe
2015-10-01 02:51 - 2015-09-30 19:00 - 04404952 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Marcato Paolo\Desktop\tdsskiller.exe
2015-10-01 02:51 - 2015-09-30 18:59 - 02019656 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Marcato Paolo\Desktop\rkill.com
2015-10-01 02:17 - 2015-09-30 18:57 - 00000209 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Fixconnessione.bat
2015-09-27 15:53 - 2004-08-03 22:31 - 00020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
2015-09-27 15:53 - 2004-08-03 22:31 - 00020992 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RTL8139.sys
2015-09-27 00:12 - 2015-10-01 14:54 - 00098520 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-27 00:11 - 2015-09-27 00:11 - 00000784 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Programmi\Malwarebytes Anti-Malware
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes Anti-Malware
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2015-09-27 00:11 - 2015-06-18 08:41 - 00121560 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-27 00:11 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-09-26 11:27 - 2015-09-26 11:27 - 14483716 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AVSCAN-20150925-183522-1DC65F68.LOG
2015-09-25 17:48 - 2015-09-25 17:48 - 00000000 ____D C:\ERDNT
2015-09-25 00:00 - 2015-09-25 00:01 - 00142688 _____ C:\Documents and Settings\Marcato Paolo\Documenti\Verbatim USB 64 GB.xcf
2015-09-22 19:02 - 2015-09-23 14:54 - 00000000 ____D C:\Programmi\Mozilla Firefox
2015-09-21 17:10 - 2015-09-21 17:10 - 00000000 ____D C:\Programmi\File comuni\Java
2015-09-21 17:10 - 2015-09-21 17:10 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\.oracle_jre_usage
2015-09-03 11:22 - 2015-09-03 11:22 - 06560582 _____ C:\Documents and Settings\NetworkService\Desktop\AVSCAN-20150903-001901-6ECC1144.LOG
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-02 00:27 - 2005-03-22 18:08 - 00000000 __SHD C:\Documents and Settings\NetworkService
2015-10-01 23:00 - 2005-03-22 18:05 - 01585684 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 22:55 - 2005-11-21 14:22 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-10-01 22:53 - 2010-08-18 01:36 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Nitro PDF
2015-10-01 22:53 - 2005-03-22 19:01 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-10-01 22:53 - 2005-03-22 19:01 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-10-01 22:52 - 2005-03-22 18:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-01 19:15 - 2013-12-30 22:15 - 00032624 _____ C:\WINDOWS\SchedLgU.Txt
2015-10-01 19:14 - 2005-03-23 18:17 - 00000194 ___SH C:\Documents and Settings\Marcato Paolo\ntuser.ini
2015-10-01 19:14 - 2005-03-23 18:17 - 00000000 ____D C:\Documents and Settings\Marcato Paolo
2015-10-01 19:02 - 2007-11-01 19:21 - 00007062 _____ C:\WINDOWS\Marcato Paolo8.xlb
2015-10-01 18:50 - 2008-06-13 21:49 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Apache HTTP Server 2.0
2015-10-01 18:50 - 2005-05-29 23:00 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\Microsoft Reference
2015-10-01 18:50 - 2005-05-24 00:50 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\EPSON
2015-10-01 18:50 - 2005-05-24 00:47 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\EPSON Photo Print
2015-10-01 18:49 - 2013-07-11 15:59 - 00001012 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Spese di Successione - Dare Avere.xls.lnk
2015-10-01 18:32 - 2005-03-23 18:17 - 00000000 __RHD C:\Documents and Settings\Marcato Paolo\Dati applicazioni
2015-10-01 18:32 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Modelli
2015-10-01 18:32 - 2005-03-22 18:59 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi
2015-10-01 18:31 - 2005-03-22 18:59 - 00000000 ___RD C:\Programmi
2015-10-01 17:57 - 2015-03-11 15:06 - 00544440 _____ C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\FontCache3.0.0.0.dat
2015-10-01 17:57 - 2005-03-22 18:09 - 00000000 ___HD C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni
2015-10-01 17:50 - 2009-03-11 13:08 - 00000000 ____D C:\Qoobox
2015-10-01 17:50 - 2005-11-08 01:32 - 00000000 ___HD C:\Documents and Settings\Administrator\Impostazioni locali
2015-10-01 17:50 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:59 - 00000000 __RHD C:\Documents and Settings\Default User\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:09 - 00000000 ___HD C:\Documents and Settings\LocalService\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:08 - 00000000 ___HD C:\Documents and Settings\NetworkService\Impostazioni locali
2015-10-01 17:48 - 2005-12-10 02:47 - 00000000 ____D C:\WINDOWS\ERDNT
2015-10-01 17:47 - 2001-08-31 14:00 - 00000294 _____ C:\WINDOWS\system.ini
2015-10-01 17:46 - 2005-03-24 03:20 - 00000000 ____D C:\Programmi\WinRAR
2015-10-01 17:46 - 2005-03-22 18:59 - 00000000 __RHD C:\Documents and Settings\All Users\Dati applicazioni
2015-10-01 17:46 - 2005-03-22 18:55 - 00000000 ____D C:\WINDOWS\system
2015-10-01 17:42 - 2005-03-22 18:59 - 00000000 ____D C:\Programmi\File comuni
2015-10-01 16:20 - 2005-03-23 18:17 - 00000000 ___RD C:\Documents and Settings\Marcato Paolo\Documenti
2015-10-01 16:20 - 2005-03-22 18:58 - 00000314 __RSH C:\boot.ini
2015-10-01 00:30 - 2014-11-07 02:01 - 00000438 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-09-30 23:55 - 2005-08-19 12:43 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Paolo
2015-09-30 23:28 - 2005-03-24 15:29 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Download
2015-09-30 23:23 - 2001-08-31 14:00 - 00012598 _____ C:\WINDOWS\system32\wpa.dbl
2015-09-30 01:04 - 2014-11-07 02:01 - 00000608 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2015-09-28 01:10 - 2008-03-17 01:16 - 00000151 _____ C:\WINDOWS\PhotoSnapViewer.INI
2015-09-28 00:14 - 2009-12-24 13:44 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Cartella Scambio Bluetooth
2015-09-27 16:06 - 2005-03-22 18:12 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
2015-09-27 03:36 - 2005-03-22 18:03 - 00000000 ____D C:\WINDOWS\Registration
2015-09-26 12:17 - 2006-03-30 00:56 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\PC related
2015-09-26 04:06 - 2007-03-16 22:46 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2015-09-25 20:03 - 2007-09-01 00:38 - 00000060 _____ C:\WINDOWS\wpd99.drv
2015-09-25 20:03 - 2007-09-01 00:38 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\pdf995
2015-09-25 00:28 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni
2015-09-24 15:50 - 2012-05-31 14:47 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\= COLLEGAMENTI RAPIDI =
2015-09-23 20:36 - 2013-08-05 18:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-23 20:00 - 2013-11-04 02:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Avira
2015-09-23 19:13 - 2013-02-24 01:25 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-09-23 14:54 - 2012-04-26 10:46 - 00000000 ____D C:\Programmi\Mozilla Maintenance Service
2015-09-22 15:16 - 2005-12-03 00:19 - 00000000 ____D C:\Programmi\SpywareBlaster
2015-09-21 17:12 - 2015-02-11 20:36 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Oracle
2015-09-21 17:11 - 2014-10-20 22:17 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Java
2015-09-21 17:11 - 2010-04-07 21:26 - 00000000 ____D C:\Programmi\Java
2015-09-21 17:09 - 2014-10-20 22:17 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-09-21 17:08 - 2014-10-20 22:17 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-09-21 17:02 - 2014-08-19 17:05 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\Adobe
2015-09-21 16:03 - 2008-03-17 02:26 - 00000116 _____ C:\WINDOWS\NeroDigital.ini
2015-09-21 16:03 - 2005-03-23 18:17 - 00000000 ___RD C:\Documents and Settings\Marcato Paolo\Documenti\Musica
2015-09-18 19:14 - 2008-01-26 15:39 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Varie
2015-09-15 21:21 - 2005-07-26 01:06 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Altroconsumo
2015-09-15 21:15 - 2006-02-22 00:40 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Tiscali
2015-09-09 18:44 - 2005-07-26 19:37 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Sara
2015-09-09 15:26 - 2014-08-17 16:03 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Package Cache
2015-09-08 15:00 - 2014-03-24 17:57 - 00000232 _____ C:\WINDOWS\Tasks\Notifica di interruzione del servizio per Microsoft Windows XP - Mensile.job
2015-09-07 17:47 - 2005-05-05 00:49 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Luisa
==================== Files in the root of some directories =======
2008-07-13 01:30 - 2008-07-13 01:30 - 0000366 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\.foobillardrc
2009-03-05 01:31 - 2015-02-19 01:00 - 1195314 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\NMM-MetaData.db
2013-03-23 16:26 - 2014-01-27 16:40 - 0002942 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Safer-Networking.log
2005-03-26 09:52 - 2014-08-22 16:51 - 0076288 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2005-07-01 00:03 - 2005-08-22 00:02 - 0000658 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\FASTWiz.html
2005-09-11 23:57 - 2005-09-11 23:57 - 0000142 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\fusioncache.dat
Some files in TEMP:
====================
C:\Documents and Settings\Marcato Paolo\Impostazioni locali\temp\avgnt.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
Addiction log in next post
Please, I need your help to solve this
Other device are connecting to internet without any issues using same router (PCs, smartphones, ...).
Tried unplugging wireless USB connection and disabling wired one; then installed a new NIC but nothing changed - no internet connection; so restored previous configuration.
System tray connection status is always trying to get network address.
Ipconfig command reports IP address 0.0.0.0.
Tried Microsoft Support methods, run MicrosoftEasyFix50562 and MicrosoftFixit50267 without issue resolution.
It seems an issue like one described in post https://www.techspot.com/community/...cp-wont-start-error-1068-dhcp-afd-sys.182903/
FRST logs follow:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:30-09-2015
Ran by Marcato Paolo (administrator) on MONSTER (02-10-2015 01:46:34)
Running from C:\Documents and Settings\Marcato Paolo\Desktop
Loaded Profiles: Marcato Paolo (Available Profiles: Marcato Paolo & Administrator)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) Language: Italiano (Italia)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Nero AG) C:\Programmi\Ahead\InCD\InCDsrv.exe
(Broadcom Corporation.) C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avguard.exe
(ATI Technologies, Inc.) C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\SOUNDMAN.EXE
(GreenPrint Technologies LLC.) C:\Programmi\GreenPrint\gpsrht01.exe
(GreenPrint Technologies LLC.) C:\Programmi\GreenPrint\gpsrdg01.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avgnt.exe
(Safer-Networking Ltd.) C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe
(Nitro PDF Software) C:\Programmi\Nitro PDF\Reader\NitroPDFReaderDriverService.exe
(Broadcom Corporation.) C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe
() C:\Programmi\HTC\Internet Pass-Through\PassThruSvr.exe
(Safer-Networking Ltd.) C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\WINDOWS\system32\fxssvc.exe
(Avira Operations GmbH & Co. KG) C:\Programmi\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ATIPTA] => C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe [335872 2004-04-21] (ATI Technologies, Inc.)
HKLM\...\Run: [Logitech Utility] => C:\WINDOWS\Logi_MwX.Exe [19968 2003-11-07] (Logitech Inc.)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [77824 2005-02-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [APSDaemon] => C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [avgnt] => C:\Programmi\Avira\AntiVir Desktop\avgnt.exe [782520 2015-09-23] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Adobe ARM] => C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\Run: [SDTray] => C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [QuickTime Task] => C:\Programmi\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.)
HKLM\...\Run: [IJNetworkScanUtility] => C:\Programmi\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [128352 2007-11-19] (CANON INC.)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Programmi\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [CanonMyPrinter] => C:\Programmi\Canon\MyPrinter\BJMyPrt.exe [1848648 2008-03-17] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] => C:\Programmi\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (CANON INC.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Programmi\File comuni\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2005-02-22] (ATI Technologies Inc.)
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Programmi\File comuni\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\...\Run: [GUDelayStartup] => C:\Programmi\Glary Utilities 5\StartupManager.exe [37152 2015-09-28] (Glarysoft Ltd)
ShellExecuteHooks: Hook per l'esecuzione degli URL - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - C:\WINDOWS\system32\shell32.dll [8492032 2012-06-08] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\BTTray.lnk [2008-05-28]
ShortcutTarget: BTTray.lnk -> C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\Esecuzione automatica\ERUNT AutoBackup.lnk [2005-12-10]
ShortcutTarget: ERUNT AutoBackup.lnk -> C:\Programmi\ERUNT\AUTOBACK.EXE ()
BootExecute: autocheck autochk *
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://192.168.1.254/basic/home_wlan.htm
HKU\S-1-5-21-2595107873-1605812571-3183979579-1006\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-2595107873-1605812571-3183979579-1006 -> DefaultScope {55C56BC7-A927-4F98-8B72-B547216E6DA5} URL = hxxp://www.google.it/search?hl=it&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-2595107873-1605812571-3183979579-1006 -> {55C56BC7-A927-4F98-8B72-B547216E6DA5} URL = hxxp://www.google.it/search?hl=it&q={searchTerms}&meta=
BHO: Supporto di collegamento per Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2012-09-23] (Adobe Systems Incorporated)
BHO: No Name -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
BHO: IE to GetRight Helper -> {31FF080D-12A3-439A-A2EF-4BA95A3148E8} -> C:\Programmi\GetRight\xx2gr.dll [2007-07-18] (Headlight Software, Inc.)
BHO: DivX Plus Web Player HTML5 <video> -> {326E768D-4182-46FD-9C16-1449A49795F4} -> C:\Programmi\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2011-12-12] (DivX, LLC)
BHO: EWPBrowseObject Class -> {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} -> C:\Programmi\Canon\Easy-WebPrint\EWPBrowseLoader.dll [2006-04-18] ()
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Programmi\Java\jre1.8.0_60\bin\ssv.dll [2015-09-21] (Oracle Corporation)
BHO: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Programmi\Free Download Manager\iefdm2.dll [2013-01-11] (FreeDownloadManager.ORG)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Programmi\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-21] (Oracle Corporation)
DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} hxxp://support.asus.com/common/asusTek_sys_ctrl.cab
DPF: {601B418B-E6A6-47FC-A094-07248741CEB3}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\msdaipp.dll [2008-04-14] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programmi\File comuni\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default
FF SelectedSearchEngine: DuckDuckGo
FF Homepage: hxxps://duckduckgo.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-24] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1213153.dll [2014-06-24] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX Content Upload Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Content Uploader\npUpload.dll [No File]
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Programmi\DivX\DivX Player\npDivxPlayerPlugin.dll [No File]
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Programmi\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Programmi\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Programmi\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Programmi\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.450 -> C:\Programmi\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 -> C:\Programmi\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin: Adobe Reader -> C:\Programmi\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\np-mswmp.dll [2007-04-10] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npDivxPlayerPlugin.dll [2008-01-08] (DivX, Inc)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin2.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin3.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin4.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\npqtplugin5.dll [2015-05-20] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Programmi\mozilla firefox\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\garzanti_ItaFra.xml [2012-08-17]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\googletranslate.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\isearch.whitesmoke.com.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\normeinrete.xml [2008-12-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\PagineBianche.xml [2008-12-09]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\s-amazon-it.xml [2012-02-08]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\translate-german-to-english.xml [2011-11-30]
FF SearchPlugin: C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\searchplugins\webster.xml [2008-06-30]
FF Extension: Avira Browser Safety - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\abs@avira.com [2015-09-18]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\artur.dubovoy@gmail.com [2015-09-24]
FF Extension: Free Download Manager plugin - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\fdm_ffext@freedownloadmanager.org [2012-12-13]
FF Extension: Italian dictionary - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\it-IT@dictionaries.addons.mozilla.org [2014-08-04]
FF Extension: Tabberwocky - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\tabberwocky@studio17.wordpress.com [2011-02-16]
FF Extension: Tabs Open Relative - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\tabsopenrelative@jomel.me.uk [2009-05-11]
FF Extension: No Name - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\temp [2006-04-16]
FF Extension: Download Youtube Videos + - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\video.downloader.plugin@ffpimp.com [2012-03-21]
FF Extension: VideoSurf Videos at a Glance - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\videosurf_enhanced@videosurf.com [2011-03-13]
FF Extension: Forecastfox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3} [2012-10-08]
FF Extension: No Name - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}-trash [2011-03-23]
FF Extension: Stop Autoplay - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{2e61e246-e640-4c56-b1ed-f146dbed48cd} [2011-02-11]
FF Extension: FEBE - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3} [2015-06-02]
FF Extension: iMacros for Firefox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670} [2015-09-24]
FF Extension: DictionarySearch(Updated) - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{a0faa0a4-f1a7-4098-9a71-21efc3a92372} [2012-02-03]
FF Extension: Memory Fox - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{E173B749-DB5B-4fd2-BA0E-94ECEA0CA55B} [2015-05-31]
FF Extension: Add to Amazon Wish List Button - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\amznUWL2@amazon.com.xpi [2012-05-16]
FF Extension: BarTab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\bartap@philikon.de.xpi [2012-03-27]
FF Extension: Be Quiet! - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\BeQuiet@com.sppad.xpi [2013-09-23]
FF Extension: Ctrl-Tab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\ctrl-tab@design-noir.de.xpi [2015-04-25]
FF Extension: FabTabs - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\fabtab@captaincaveman.nl.xpi [2011-03-23]
FF Extension: Ghostery - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\firefox@ghostery.com.xpi [2013-08-19]
FF Extension: InstaClick - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\instaclick@leahscape.com.xpi [2011-05-23]
FF Extension: Self-Destructing Cookies - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\jid0-9XfBwUWnvPx4wWsfBWMCm4Jj69E@jetpack.xpi [2015-06-04]
FF Extension: Location Guard - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\jid1-HdwPLukcGQeOSh@jetpack.xpi [2015-06-04]
FF Extension: Preserve Download Modification Timestamp - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\pdmts@caligonstudios.com.xpi [2011-11-30]
FF Extension: Print Edit - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\printedit@DW-dev.xpi [2013-05-17]
FF Extension: ScrapBook Plus - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\scrapbookplus@addons.mozilla.org.xpi [2011-11-09]
FF Extension: Searchbastard - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\searchbastard@rosell.dk.xpi [2011-11-30]
FF Extension: SiteDelta - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\sitedelta@schierla.de.xpi [2012-05-08]
FF Extension: Shoptimate - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\support@shoptimate.com.xpi [2015-07-03]
FF Extension: TrBut - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\trbut@david.gevaerts.xpi [2011-11-30]
FF Extension: Tree Style Tab - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\treestyletab@piro.sakura.ne.jp.xpi [2014-03-27]
FF Extension: YouTube to MP3 - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\youtube2mp3@mondayx.de.xpi [2011-08-15]
FF Extension: Session Manager - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2012-03-07]
FF Extension: ScrapBook MAF Creator - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1544D611-955F-4ceb-95D3-82C720C29EAE}.xpi [2011-11-09]
FF Extension: FlashGot - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2011-03-23]
FF Extension: Image Zoom - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2013-04-18]
FF Extension: Tab Control - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{39952c40-5197-11da-8cd6-0800200c9a66}.xpi [2013-06-02]
FF Extension: Work Offline - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{761a54f1-8ccf-4112-9e48-dbf72adf6244}.xpi [2012-03-15]
FF Extension: Mozilla Archive Format - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{7f57cf46-4467-4c2d-adfa-0cba7c507e54}.xpi [2012-03-21]
FF Extension: Dictionary Tooltip - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{C6128004-4838-4708-9A97-BB172D17767D}.xpi [2011-03-23]
FF Extension: BetterPrivacy - C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Mozilla\Firefox\Profiles\unemrdy6.default\Extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi [2011-04-21]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-17]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Programmi\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &video& - C:\Programmi\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-11]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Programmi\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Programmi\Avira\AntiVir Desktop\avmailc.exe [916968 2015-09-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Programmi\Avira\AntiVir Desktop\sched.exe [461672 2015-09-23] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Programmi\Avira\AntiVir Desktop\avguard.exe [461672 2015-09-23] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Programmi\Avira\AntiVir Desktop\AVWEBGRD.EXE [1210512 2015-09-23] (Avira Operations GmbH & Co. KG)
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [516096 2004-04-21] () [File not signed]
R2 Avira.ServiceHost; C:\Programmi\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG)
R2 btwdins; C:\Programmi\WIDCOMM\Bluetooth Software\bin\btwdins.exe [264800 2007-09-11] (Broadcom Corporation.)
R2 GreenPrint; C:\Programmi\GreenPrint\GPSRHT01.exe [520744 2011-01-07] (GreenPrint Technologies LLC.)
S3 IDriverT; C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 InCDsrv; C:\Programmi\Ahead\InCD\InCDsrv.exe [854528 2005-01-03] (Nero AG) [File not signed]
S2 InCDsrvR; C:\Programmi\Ahead\InCD\InCDsrv.exe [854528 2005-01-03] (Nero AG) [File not signed]
S2 MBAMService; C:\Programmi\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 MozillaMaintenance; C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe [147624 2015-09-22] (Mozilla Foundation)
R2 NitroReaderDriverReadSpool; C:\Programmi\Nitro PDF\Reader\NitroPDFReaderDriverService.exe [196912 2011-02-04] (Nitro PDF Software)
S3 ose; C:\Programmi\File comuni\Microsoft Shared\Source Engine\OSE.EXE [89136 2003-07-28] (Microsoft Corporation)
R2 PassThru Service; C:\Programmi\HTC\Internet Pass-Through\PassThruSvr.exe [88576 2012-04-13] () [File not signed]
S3 SandraDataSrv; C:\Programmi\SiSoftware\SiSoftware Sandra Lite XIIc\Win32\RpcDataSrv.exe [184504 2007-09-11] (SiSoftware)
S3 SandraTheSrv; C:\Programmi\SiSoftware\SiSoftware Sandra Lite XIIc\RpcSandraSrv.exe [1265856 2007-09-11] (SiSoftware)
S2 SDScannerService; C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Programmi\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 ServiceLayer; C:\Programmi\PC Connectivity Solution\ServiceLayer.exe [575488 2008-08-07] (Nokia.) [File not signed]
S2 SkypeUpdate; C:\Programmi\Skype\Updater\Updater.exe [172192 2013-10-23] (Skype Technologies)
S3 WMPNetworkSvc; C:\Programmi\Windows Media Player\WMPNetwk.exe [918528 2006-11-02] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 abp480n5; C:\WINDOWS\system32\Drivers\abp480n5.sys [23552 2001-08-17] (Microsoft Corporation)
S3 ActionReplayDS; C:\WINDOWS\System32\Drivers\ActionReplayDS.sys [29184 2007-02-08] (Thesycon GmbH, Germany) [File not signed]
R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [2310720 2005-02-02] (Realtek Semiconductor Corp.) [File not signed]
R1 AmdK8; C:\WINDOWS\System32\DRIVERS\AmdK8.sys [43520 2006-07-01] (Advanced Micro Devices)
R1 AsIO; C:\WINDOWS\system32\drivers\AsIO.sys [4962 2004-10-14] () [File not signed]
R1 aslm75; C:\WINDOWS\system32\drivers\aslm75.sys [6272 1997-04-22] () [File not signed]
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [108448 2015-09-23] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\System32\DRIVERS\avipbb.sys [136728 2015-07-28] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\System32\DRIVERS\avkmgr.sys [37896 2015-05-22] (Avira Operations GmbH & Co. KG)
S3 BRGSp50; C:\WINDOWS\System32\Drivers\BRGSp50.sys [20608 2005-06-08] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
S3 btaudio; C:\WINDOWS\System32\drivers\btaudio.sys [539432 2008-05-28] (Broadcom Corporation.)
R3 BTDriver; C:\WINDOWS\System32\DRIVERS\btport.sys [37424 2008-05-28] (Broadcom Corporation.)
R3 BTKRNL; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [879496 2008-05-28] (Broadcom Corporation.)
S3 BTWDNDIS; C:\WINDOWS\System32\DRIVERS\btwdndis.sys [156392 2008-05-28] (Broadcom Corporation.)
S3 btwhid; C:\WINDOWS\System32\DRIVERS\btwhid.sys [55352 2008-05-28] (Broadcom Corporation.)
R3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [74656 2008-05-28] (Broadcom Corporation.)
S1 Changer; C:\WINDOWS\system32\Drivers\Changer.sys [8192 2008-04-13] (Microsoft Corporation)
S3 CnxEtP; C:\WINDOWS\System32\DRIVERS\CnxEtP.sys [60288 2003-09-12] (Conexant) [File not signed]
S3 CnxEtU; C:\WINDOWS\System32\DRIVERS\CnxEtU.sys [646784 2003-09-12] (Conexant) [File not signed]
S3 CnxTgN; C:\WINDOWS\System32\DRIVERS\CnxTgN.sys [108675 2003-10-29] (Conexant Systems Inc.) [File not signed]
R3 ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [34760 2007-02-16] (SlySoft, Inc.)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [25160 2007-08-07] (Elaborate Bytes AG)
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-13] (Microsoft Corporation)
R0 giveio; C:\WINDOWS\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [17472 2015-10-01] (Glarysoft Ltd)
R3 hidgame; C:\WINDOWS\System32\DRIVERS\hidgame.sys [8576 2001-08-17] (Microsoft Corporation)
R2 HWiNFO32; C:\Programmi\HWiNFO32\HWiNFO32.SYS [7296 2006-06-07] (REALiX(tm)) [File not signed]
R4 InCDfs; C:\WINDOWS\system32\Drivers\InCDfs.sys [99456 2005-01-03] (Nero AG) [File not signed]
R1 InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [28928 2005-01-03] (Nero AG) [File not signed]
U1 InCDrec; C:\WINDOWS\system32\Drivers\InCDrec.sys [8704 2005-01-03] (Nero AG) [File not signed]
R1 incdrm; C:\WINDOWS\system32\Drivers\incdrm.sys [27776 2005-01-03] (Nero AG) [File not signed]
S1 lbrtfdc; C:\WINDOWS\system32\Drivers\lbrtfdc.sys [34688 2008-04-13] (Toshiba Corp.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [23256 2015-06-18] (Malwarebytes Corporation)
R3 ms_mpu401; C:\WINDOWS\System32\drivers\msmpu401.sys [2944 2001-08-18] (Microsoft Corporation)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
R0 nvata; C:\WINDOWS\System32\DRIVERS\nvata.sys [92800 2005-05-17] (NVIDIA Corporation)
R0 nvatabus; C:\WINDOWS\System32\DRIVERS\nvatabus.sys [86144 2004-11-03] (NVIDIA Corporation) [File not signed]
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [33536 2005-04-06] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [12928 2005-04-06] (NVIDIA Corporation)
S3 OSFMount; C:\Documents and Settings\Marcato Paolo\Documenti\Download\- USB Application - No Install -\OSFMount - virtual CD DVD drive tools\OSFMount.sys [974264 2014-02-07] (PassMark Software)
R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [77184 2004-03-09] (Protection Technology) [File not signed]
R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [65504 2004-03-09] (Protection Technology) [File not signed]
R0 prosync1; C:\WINDOWS\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S3 rtl8139; C:\WINDOWS\System32\DRIVERS\R8139n51.SYS [46976 2002-10-04] (Realtek Semiconductor Corporation )
R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 SIVDriver; C:\WINDOWS\system32\Drivers\SIVX32.sys [98072 2012-02-14] (Ray Hinchliffe)
R0 speedfan; C:\WINDOWS\System32\speedfan.sys [5248 2006-09-24] (Windows (R) 2000 DDK provider) [File not signed]
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [31848 2015-06-19] (Avira Operations GmbH & Co. KG)
R3 WmBEnum; C:\WINDOWS\System32\drivers\WmBEnum.sys [10144 2004-04-14] (Logitech Inc.)
S3 WmFilter; C:\WINDOWS\System32\drivers\WmFilter.sys [21280 2004-04-14] (Logitech Inc.)
S3 WmVirHid; C:\WINDOWS\System32\drivers\WmVirHid.sys [5600 2004-04-14] (Logitech Inc.)
R3 WmXlCore; C:\WINDOWS\System32\drivers\WmXlCore.sys [44064 2004-04-14] (Logitech Inc.)
R3 ZD1211BU(Atlantis-Land); C:\WINDOWS\System32\DRIVERS\zd1211Bu.sys [500736 2007-06-25] (Atheros Technology Corporation) [File not signed]
S3 ZDPSp50; C:\WINDOWS\System32\Drivers\ZDPSp50.sys [17664 2004-10-25] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
U5 Inport; C:\Windows\System32\Drivers\Inport.sys [13568 2001-08-30] (Microsoft Corporation)
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U3 TlntSvr; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-02 01:46 - 2015-10-02 01:47 - 00032508 _____ C:\Documents and Settings\Marcato Paolo\Desktop\FRST.txt
2015-10-02 01:46 - 2015-10-02 01:46 - 00000000 ____D C:\FRST
2015-10-02 01:46 - 2015-10-02 01:17 - 01696256 _____ (Farbar) C:\Documents and Settings\Marcato Paolo\Desktop\FRST.exe
2015-10-01 18:32 - 2015-10-01 18:32 - 00017472 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2015-10-01 18:32 - 2015-10-01 18:32 - 00000768 _____ C:\Documents and Settings\All Users\Menu Avvio\Programmi\Glary Utilities 5.lnk
2015-10-01 18:32 - 2015-10-01 18:32 - 00000762 _____ C:\Documents and Settings\All Users\Desktop\Glary Utilities 5.lnk
2015-10-01 18:32 - 2015-10-01 18:32 - 00000322 _____ C:\WINDOWS\Tasks\GlaryInitialize 5.job
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\GlarySoft
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\DiskDefrag
2015-10-01 18:32 - 2015-10-01 18:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Glary Utilities 5
2015-10-01 18:31 - 2015-10-01 18:32 - 00000000 ____D C:\Programmi\Glary Utilities 5
2015-10-01 18:26 - 2015-10-01 18:26 - 00002368 _____ C:\Documents and Settings\Marcato Paolo\Desktop\aswMBR.txt
2015-10-01 18:26 - 2015-10-01 18:26 - 00000512 _____ C:\Documents and Settings\Marcato Paolo\Desktop\MBR.dat
2015-10-01 18:14 - 2015-10-01 18:14 - 00012518 _____ C:\Documents and Settings\Marcato Paolo\Desktop\ADS Spy.txt
2015-10-01 17:50 - 2015-10-02 01:47 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00025164 _____ C:\ComboFix.txt
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\NetworkService\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\LocalService\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\Default User\Impostazioni locali\temp
2015-10-01 17:50 - 2015-10-01 17:50 - 00000000 ____D C:\Documents and Settings\Administrator\Impostazioni locali\temp
2015-10-01 17:16 - 2011-06-26 08:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2015-10-01 17:16 - 2010-11-07 19:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2015-10-01 16:20 - 2015-10-01 16:20 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\ProcAlyzer Dumps
2015-10-01 15:48 - 2015-10-01 16:36 - 00001631 _____ C:\Documents and Settings\All Users\Desktop\HitmanPro.lnk
2015-10-01 15:47 - 2015-10-01 15:48 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\HitmanPro
2015-10-01 15:47 - 2015-10-01 15:47 - 00000000 ____D C:\Programmi\HitmanPro
2015-10-01 15:47 - 2015-10-01 15:47 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\HitmanPro
2015-10-01 15:45 - 2015-10-01 15:45 - 00078489 _____ C:\Documents and Settings\Marcato Paolo\Desktop\TDSSKiller.txt
2015-10-01 14:52 - 2015-10-01 14:52 - 00022699 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AdwCleaner[C1].txt
2015-10-01 03:07 - 2015-10-01 03:10 - 00000000 ____D C:\AdwCleaner
2015-10-01 03:03 - 2015-10-01 03:06 - 00002754 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Rkill.txt
2015-10-01 02:59 - 2015-10-01 00:51 - 05611408 _____ (Swearware) C:\Documents and Settings\Marcato Paolo\Desktop\abc.com
2015-10-01 02:58 - 2015-10-01 01:50 - 05636489 ____R (Swearware) C:\Documents and Settings\Marcato Paolo\Desktop\abC.exe
2015-10-01 02:57 - 2015-10-01 01:48 - 15310512 _____ C:\Documents and Settings\Marcato Paolo\Desktop\gu5setup-13776.exe
2015-10-01 02:56 - 2015-10-01 00:36 - 05200384 _____ (AVAST Software) C:\Documents and Settings\Marcato Paolo\Desktop\aswmbr.exe
2015-10-01 02:55 - 2015-10-01 01:44 - 00037888 _____ (Soeperman Enterprises Ltd.) C:\Documents and Settings\Marcato Paolo\Desktop\ADSSpy.exe
2015-10-01 02:54 - 2015-10-01 00:33 - 10367880 _____ (SurfRight B.V.) C:\Documents and Settings\Marcato Paolo\Desktop\HitmanPro.exe
2015-10-01 02:52 - 2015-10-01 01:39 - 24345872 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Marcato Paolo\Desktop\mbam-setup-2.1.8.1057.exe
2015-10-01 02:52 - 2015-10-01 01:37 - 01670656 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AdwCleaner.exe
2015-10-01 02:52 - 2015-10-01 01:35 - 02019656 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Marcato Paolo\Desktop\rkill.exe
2015-10-01 02:51 - 2015-09-30 19:00 - 04404952 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Marcato Paolo\Desktop\tdsskiller.exe
2015-10-01 02:51 - 2015-09-30 18:59 - 02019656 _____ (Bleeping Computer, LLC) C:\Documents and Settings\Marcato Paolo\Desktop\rkill.com
2015-10-01 02:17 - 2015-09-30 18:57 - 00000209 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Fixconnessione.bat
2015-09-27 15:53 - 2004-08-03 22:31 - 00020992 ____C (Realtek Semiconductor Corporation) C:\WINDOWS\system32\dllcache\rtl8139.sys
2015-09-27 15:53 - 2004-08-03 22:31 - 00020992 _____ (Realtek Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RTL8139.sys
2015-09-27 00:12 - 2015-10-01 14:54 - 00098520 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-27 00:11 - 2015-09-27 00:11 - 00000784 _____ C:\Documents and Settings\All Users\Desktop\Malwarebytes Anti-Malware.lnk
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Programmi\Malwarebytes Anti-Malware
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes Anti-Malware
2015-09-27 00:11 - 2015-09-27 00:11 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
2015-09-27 00:11 - 2015-06-18 08:41 - 00121560 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-27 00:11 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-09-26 11:27 - 2015-09-26 11:27 - 14483716 _____ C:\Documents and Settings\Marcato Paolo\Desktop\AVSCAN-20150925-183522-1DC65F68.LOG
2015-09-25 17:48 - 2015-09-25 17:48 - 00000000 ____D C:\ERDNT
2015-09-25 00:00 - 2015-09-25 00:01 - 00142688 _____ C:\Documents and Settings\Marcato Paolo\Documenti\Verbatim USB 64 GB.xcf
2015-09-22 19:02 - 2015-09-23 14:54 - 00000000 ____D C:\Programmi\Mozilla Firefox
2015-09-21 17:10 - 2015-09-21 17:10 - 00000000 ____D C:\Programmi\File comuni\Java
2015-09-21 17:10 - 2015-09-21 17:10 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\.oracle_jre_usage
2015-09-03 11:22 - 2015-09-03 11:22 - 06560582 _____ C:\Documents and Settings\NetworkService\Desktop\AVSCAN-20150903-001901-6ECC1144.LOG
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-10-02 00:27 - 2005-03-22 18:08 - 00000000 __SHD C:\Documents and Settings\NetworkService
2015-10-01 23:00 - 2005-03-22 18:05 - 01585684 _____ C:\WINDOWS\WindowsUpdate.log
2015-10-01 22:55 - 2005-11-21 14:22 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2015-10-01 22:53 - 2010-08-18 01:36 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Nitro PDF
2015-10-01 22:53 - 2005-03-22 19:01 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-10-01 22:53 - 2005-03-22 19:01 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-10-01 22:52 - 2005-03-22 18:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-10-01 19:15 - 2013-12-30 22:15 - 00032624 _____ C:\WINDOWS\SchedLgU.Txt
2015-10-01 19:14 - 2005-03-23 18:17 - 00000194 ___SH C:\Documents and Settings\Marcato Paolo\ntuser.ini
2015-10-01 19:14 - 2005-03-23 18:17 - 00000000 ____D C:\Documents and Settings\Marcato Paolo
2015-10-01 19:02 - 2007-11-01 19:21 - 00007062 _____ C:\WINDOWS\Marcato Paolo8.xlb
2015-10-01 18:50 - 2008-06-13 21:49 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Apache HTTP Server 2.0
2015-10-01 18:50 - 2005-05-29 23:00 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\Microsoft Reference
2015-10-01 18:50 - 2005-05-24 00:50 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Menu Avvio\Programmi\EPSON
2015-10-01 18:50 - 2005-05-24 00:47 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\EPSON Photo Print
2015-10-01 18:49 - 2013-07-11 15:59 - 00001012 _____ C:\Documents and Settings\Marcato Paolo\Desktop\Spese di Successione - Dare Avere.xls.lnk
2015-10-01 18:32 - 2005-03-23 18:17 - 00000000 __RHD C:\Documents and Settings\Marcato Paolo\Dati applicazioni
2015-10-01 18:32 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Modelli
2015-10-01 18:32 - 2005-03-22 18:59 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi
2015-10-01 18:31 - 2005-03-22 18:59 - 00000000 ___RD C:\Programmi
2015-10-01 17:57 - 2015-03-11 15:06 - 00544440 _____ C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\FontCache3.0.0.0.dat
2015-10-01 17:57 - 2005-03-22 18:09 - 00000000 ___HD C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni
2015-10-01 17:50 - 2009-03-11 13:08 - 00000000 ____D C:\Qoobox
2015-10-01 17:50 - 2005-11-08 01:32 - 00000000 ___HD C:\Documents and Settings\Administrator\Impostazioni locali
2015-10-01 17:50 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:59 - 00000000 __RHD C:\Documents and Settings\Default User\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:09 - 00000000 ___HD C:\Documents and Settings\LocalService\Impostazioni locali
2015-10-01 17:50 - 2005-03-22 18:08 - 00000000 ___HD C:\Documents and Settings\NetworkService\Impostazioni locali
2015-10-01 17:48 - 2005-12-10 02:47 - 00000000 ____D C:\WINDOWS\ERDNT
2015-10-01 17:47 - 2001-08-31 14:00 - 00000294 _____ C:\WINDOWS\system.ini
2015-10-01 17:46 - 2005-03-24 03:20 - 00000000 ____D C:\Programmi\WinRAR
2015-10-01 17:46 - 2005-03-22 18:59 - 00000000 __RHD C:\Documents and Settings\All Users\Dati applicazioni
2015-10-01 17:46 - 2005-03-22 18:55 - 00000000 ____D C:\WINDOWS\system
2015-10-01 17:42 - 2005-03-22 18:59 - 00000000 ____D C:\Programmi\File comuni
2015-10-01 16:20 - 2005-03-23 18:17 - 00000000 ___RD C:\Documents and Settings\Marcato Paolo\Documenti
2015-10-01 16:20 - 2005-03-22 18:58 - 00000314 __RSH C:\boot.ini
2015-10-01 00:30 - 2014-11-07 02:01 - 00000438 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-09-30 23:55 - 2005-08-19 12:43 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Paolo
2015-09-30 23:28 - 2005-03-24 15:29 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Download
2015-09-30 23:23 - 2001-08-31 14:00 - 00012598 _____ C:\WINDOWS\system32\wpa.dbl
2015-09-30 01:04 - 2014-11-07 02:01 - 00000608 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2015-09-28 01:10 - 2008-03-17 01:16 - 00000151 _____ C:\WINDOWS\PhotoSnapViewer.INI
2015-09-28 00:14 - 2009-12-24 13:44 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Cartella Scambio Bluetooth
2015-09-27 16:06 - 2005-03-22 18:12 - 00000000 ____D C:\WINDOWS\system32\ReinstallBackups
2015-09-27 03:36 - 2005-03-22 18:03 - 00000000 ____D C:\WINDOWS\Registration
2015-09-26 12:17 - 2006-03-30 00:56 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\PC related
2015-09-26 04:06 - 2007-03-16 22:46 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2015-09-25 20:03 - 2007-09-01 00:38 - 00000060 _____ C:\WINDOWS\wpd99.drv
2015-09-25 20:03 - 2007-09-01 00:38 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\pdf995
2015-09-25 00:28 - 2005-03-23 18:17 - 00000000 ___HD C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni
2015-09-24 15:50 - 2012-05-31 14:47 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\= COLLEGAMENTI RAPIDI =
2015-09-23 20:36 - 2013-08-05 18:46 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-23 20:00 - 2013-11-04 02:32 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Avira
2015-09-23 19:13 - 2013-02-24 01:25 - 00108448 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-09-23 14:54 - 2012-04-26 10:46 - 00000000 ____D C:\Programmi\Mozilla Maintenance Service
2015-09-22 15:16 - 2005-12-03 00:19 - 00000000 ____D C:\Programmi\SpywareBlaster
2015-09-21 17:12 - 2015-02-11 20:36 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Oracle
2015-09-21 17:11 - 2014-10-20 22:17 - 00000000 ____D C:\Documents and Settings\All Users\Menu Avvio\Programmi\Java
2015-09-21 17:11 - 2010-04-07 21:26 - 00000000 ____D C:\Programmi\Java
2015-09-21 17:09 - 2014-10-20 22:17 - 00097888 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-09-21 17:08 - 2014-10-20 22:17 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-09-21 17:02 - 2014-08-19 17:05 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\Adobe
2015-09-21 16:03 - 2008-03-17 02:26 - 00000116 _____ C:\WINDOWS\NeroDigital.ini
2015-09-21 16:03 - 2005-03-23 18:17 - 00000000 ___RD C:\Documents and Settings\Marcato Paolo\Documenti\Musica
2015-09-18 19:14 - 2008-01-26 15:39 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Varie
2015-09-15 21:21 - 2005-07-26 01:06 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Altroconsumo
2015-09-15 21:15 - 2006-02-22 00:40 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Tiscali
2015-09-09 18:44 - 2005-07-26 19:37 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Sara
2015-09-09 15:26 - 2014-08-17 16:03 - 00000000 ____D C:\Documents and Settings\All Users\Dati applicazioni\Package Cache
2015-09-08 15:00 - 2014-03-24 17:57 - 00000232 _____ C:\WINDOWS\Tasks\Notifica di interruzione del servizio per Microsoft Windows XP - Mensile.job
2015-09-07 17:47 - 2005-05-05 00:49 - 00000000 ____D C:\Documents and Settings\Marcato Paolo\Documenti\Luisa
==================== Files in the root of some directories =======
2008-07-13 01:30 - 2008-07-13 01:30 - 0000366 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\.foobillardrc
2009-03-05 01:31 - 2015-02-19 01:00 - 1195314 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\NMM-MetaData.db
2013-03-23 16:26 - 2014-01-27 16:40 - 0002942 _____ () C:\Documents and Settings\Marcato Paolo\Dati applicazioni\Safer-Networking.log
2005-03-26 09:52 - 2014-08-22 16:51 - 0076288 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2005-07-01 00:03 - 2005-08-22 00:02 - 0000658 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\FASTWiz.html
2005-09-11 23:57 - 2005-09-11 23:57 - 0000142 _____ () C:\Documents and Settings\Marcato Paolo\Impostazioni locali\Dati applicazioni\fusioncache.dat
Some files in TEMP:
====================
C:\Documents and Settings\Marcato Paolo\Impostazioni locali\temp\avgnt.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
Addiction log in next post
Please, I need your help to solve this
xpsp2res.dll,-22004
