OTL logfile created on: 09/01/2014 4.28.21 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Documents and Settings\tit angela\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy
 
1014,36 Mb Total Physical Memory | 409,90 Mb Available Physical Memory | 40,41% Memory free
2,39 Gb Paging File | 1,77 Gb Available in Paging File | 74,00% Paging File free
Paging file location(s): C:\pagefile.sys 1524 3048 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programmi
Drive C: | 71,04 Gb Total Space | 55,74 Gb Free Space | 78,46% Space Free | Partition Type: NTFS
Drive D: | 72,00 Gb Total Space | 71,90 Gb Free Space | 99,86% Space Free | Partition Type: NTFS
 
Computer Name: NOME-FD7AA3C136 | User Name: tit angela | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2014/01/09 04.18.35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\tit angela\Desktop\OTL.scr
PRC - [2014/01/08 15.08.50 | 000,182,696 | ---- | M] (Oracle Corporation) -- C:\Programmi\Java\jre7\bin\jqs.exe
PRC - [2014/01/08 15.01.30 | 002,471,448 | ---- | M] () -- C:\Programmi\AVG SafeGuard toolbar\vprot.exe
PRC - [2014/01/08 15.01.29 | 001,771,544 | ---- | M] (AVG Secure Search) -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe
PRC - [2014/01/08 15.01.28 | 000,159,768 | ---- | M] () -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
PRC - [2013/10/08 13.05.13 | 000,264,360 | R--- | M] (Symantec Corporation) -- C:\Programmi\Norton 360\Engine\21.1.0.18\N360.exe
PRC - [2013/07/02 09.16.26 | 000,254,336 | ---- | M] (Oracle Corporation) -- C:\Programmi\File comuni\Java\Java Update\jusched.exe
PRC - [2009/10/14 14.42.38 | 000,583,640 | ---- | M] (PC Tools) -- C:\Programmi\File comuni\PC Tools\sMonitor\StartManSvc.exe
PRC - [2008/11/09 21.48.14 | 000,602,392 | ---- | M] (Yahoo! Inc.) -- C:\Programmi\Yahoo!\SoftwareUpdate\YahooAUService.exe
PRC - [2008/10/20 10.32.54 | 002,768,896 | ---- | M] () -- C:\Programmi\Samsung\Samsung Battery Manager\BatteryManager.exe
PRC - [2008/10/06 18.07.26 | 000,679,936 | ---- | M] (SAMSUNG Electronics) -- C:\Programmi\Samsung\Easy Display Manager\dmhkcore.exe
PRC - [2008/09/17 13.25.46 | 001,440,384 | ---- | M] (Broadcom Corporation.) -- C:\Programmi\WIDCOMM\Bluetooth Software\BTStackServer.exe
PRC - [2008/09/17 13.25.46 | 000,580,200 | ---- | M] (Broadcom Corporation.) -- C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe
PRC - [2008/05/21 16.44.30 | 000,299,008 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Programmi\Samsung\MagicKBD\PerformanceManager.exe
PRC - [2008/05/20 20.02.08 | 000,372,736 | ---- | M] (SAMSUNG Electronics Co., Ltd.) -- C:\Programmi\Samsung\MagicKBD\MagicKBD.exe
PRC - [2008/04/14 13.00.00 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007/12/20 20.40.30 | 000,659,456 | ---- | M] (Samsung Electronics,.LTD) -- C:\Programmi\Samsung\Samsung EDS\EDSAgent.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2014/01/08 15.01.31 | 000,519,704 | ---- | M] () -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\log4cplusU.dll
MOD - [2014/01/08 15.01.30 | 002,471,448 | ---- | M] () -- C:\Programmi\AVG SafeGuard toolbar\vprot.exe
MOD - [2014/01/08 15.01.28 | 000,159,768 | ---- | M] () -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
MOD - [2012/05/25 03.25.00 | 000,921,600 | ---- | M] () -- C:\Programmi\Yahoo!\Messenger\yui.dll
MOD - [2008/10/20 10.32.54 | 002,768,896 | ---- | M] () -- C:\Programmi\Samsung\Samsung Battery Manager\BatteryManager.exe
MOD - [2008/09/17 13.20.08 | 002,842,624 | ---- | M] () -- C:\WINDOWS\system32\btwicons.dll
MOD - [2006/08/12 12.48.40 | 000,049,152 | ---- | M] () -- C:\Programmi\Samsung\Easy Display Manager\HookDllPS2.dll
MOD - [2005/07/12 16.34.22 | 000,045,056 | ---- | M] () -- C:\Programmi\Samsung\MagicKBD\EasyBoxDll.dll
 
 
[color=#E56717]========== Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- %SystemRoot%\System32\appmgmts.dll -- (AppMgmt)
SRV - [2014/01/08 15.08.50 | 000,182,696 | ---- | M] (Oracle Corporation) [Auto | Running] -- C:\Programmi\Java\jre7\bin\jqs.exe -- (JavaQuickStarterService)
SRV - [2014/01/08 15.01.29 | 001,771,544 | ---- | M] (AVG Secure Search) [Auto | Running] -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe -- (vToolbarUpdater17.2.0)
SRV - [2013/10/08 13.05.13 | 000,264,360 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Programmi\Norton 360\Engine\21.1.0.18\N360.exe -- (N360)
SRV - [2013/07/22 08.56.51 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2013/04/04 14.50.32 | 000,701,512 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2013/04/04 14.50.32 | 000,418,376 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe -- (MBAMScheduler)
SRV - [2009/10/14 14.42.38 | 000,583,640 | ---- | M] (PC Tools) [Auto | Running] -- C:\Programmi\File comuni\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc)
SRV - [2008/11/09 21.48.14 | 000,602,392 | ---- | M] (Yahoo! Inc.) [Auto | Running] -- C:\Programmi\Yahoo!\SoftwareUpdate\YahooAUService.exe -- (YahooAUService)
SRV - [2008/05/13 08.44.00 | 000,077,480 | ---- | M] () [Auto | Stopped] -- C:\Programmi\Samsung\Samsung Update Plus\SLUBackgroundService.exe -- (Samsung Update Plus)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\DOCUME~1\TITANG~1\IMPOST~1\Temp\ugdcrkoc.sys -- (ugdcrkoc)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - [2014/01/09 01.27.23 | 000,142,936 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SYMEVENT.SYS -- (SymEvent)
DRV - [2014/01/09 01.02.13 | 000,035,144 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbamchameleon.sys -- (mbamchameleon)
DRV - [2014/01/08 15.01.31 | 000,037,664 | ---- | M] (AVG Technologies) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avgtpx86.sys -- (avgtp)
DRV - [2013/10/04 10.00.00 | 001,612,376 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Programmi\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20131004.035\NAVEX15.SYS -- (NAVEX15)
DRV - [2013/10/04 10.00.00 | 000,376,920 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Programmi\File comuni\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl)
DRV - [2013/10/04 10.00.00 | 000,108,120 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Unknown] -- C:\Programmi\File comuni\Symantec Shared\EENGINE\EraserUtilDrv11311.sys -- (EraserUtilDrv11311)
DRV - [2013/10/04 10.00.00 | 000,093,272 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Programmi\Norton 360\NortonData\21.1.0.18\Definitions\VirusDefs\20131004.035\NAVENG.SYS -- (NAVENG)
DRV - [2013/09/27 04.18.30 | 000,935,512 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\SymEFA.sys -- (SymEFA)
DRV - [2013/09/27 03.45.56 | 000,206,936 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\Ironx86.sys -- (SymIRON)
DRV - [2013/09/27 03.26.03 | 000,651,352 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\srtsp.sys -- (SRTSP)
DRV - [2013/09/26 04.28.00 | 000,421,592 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\symtdi.sys -- (SYMTDI)
DRV - [2013/09/26 03.50.25 | 000,127,064 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\ccSetx86.sys -- (ccSet_N360)
DRV - [2013/09/26 03.40.34 | 001,097,304 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Programmi\Norton 360\NortonData\21.1.0.18\Definitions\BASHDefs\20131002.001\BHDrvx86.sys -- (BHDrvx86)
DRV - [2013/09/24 03.24.27 | 000,380,824 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Programmi\Norton 360\NortonData\21.1.0.18\Definitions\IPSDefs\20130930.001\IDSXpx86.sys -- (IDSxpx86)
DRV - [2013/09/10 03.47.26 | 000,367,704 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\SymDS.sys -- (SymDS)
DRV - [2013/09/10 02.49.48 | 000,032,344 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\N360\1501000.012\srtspx.sys -- (SRTSPX)
DRV - [2013/04/04 14.50.32 | 000,022,856 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2008/11/07 10.04.00 | 000,291,328 | ---- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2008/10/22 16.50.44 | 000,103,552 | ---- | M] (TCT International Mobile Ltd) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\qcusbser.sys -- (qcusbser)
DRV - [2008/10/08 07.35.10 | 001,334,432 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\athw.sys -- (AR5416)
DRV - [2008/09/23 21.23.58 | 000,238,464 | ---- | M] (Vimicro Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VMC326.sys -- (VMC326)
DRV - [2008/08/27 00.35.00 | 004,753,920 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService)
DRV - [2008/07/29 16.59.08 | 000,879,832 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btkrnl.sys -- (BTKRNL)
DRV - [2008/07/29 16.59.02 | 000,156,816 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwdndis.sys -- (BTWDNDIS)
DRV - [2008/07/27 00.29.54 | 000,074,688 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btwusb.sys -- (BTWUSB)
DRV - [2008/07/27 00.29.36 | 000,037,424 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btport.sys -- (BTDriver)
DRV - [2008/07/27 00.29.28 | 000,539,640 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\btaudio.sys -- (btaudio)
DRV - [2008/04/14 13.00.00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/14 13.00.00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/04/14 13.00.00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2008/04/14 13.00.00 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2008/03/17 11.03.46 | 000,101,376 | R--- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2008/01/14 19.01.02 | 000,030,208 | ---- | M] (Samsung Electronics,.LTD) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\SamsungEDS.SYS -- (DNSeFilter)
DRV - [2006/08/01 15.57.24 | 000,019,840 | ---- | M] (Samsung) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\SUE_PD.sys -- (SUEPD)
DRV - [2005/10/27 05.18.05 | 000,004,300 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\MEMIO.SYS -- (DOSMEMIO)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=SMSN&bmod=SMSN
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=SMSN&bmod=SMSN
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=SMSN&bmod=SMSN
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.ro/
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/custom/java/redirect?client=ie&tb=ORJ&o=100000026&src=crm&q={searchTerms}&locale=&apn_ptnrs=U3&apn_dtid=OSJ000
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7SMSN
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://mysearch.avg.com/search?cid={73A539DD-EBB7-45E4-A255-6BAE5919AE87}&mid=09cb2f58a99247d285f3d16d6a2795d8-c987c70f4c0b88e45329079c210253387c862b49&lang=it&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-01-08 15:02:12&v=17.2.0.38&pid=safeguard&sg=&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Programmi\File comuni\AVG Secure Search\SiteSafetyInstaller\17.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.45.2: C:\Programmi\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2: C:\Programmi\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@messenger.yahoo.com/YahooMessengerStatePlugin;version=1.0.0.6: C:\Programmi\Yahoo!\Shared\npYState.dll (Yahoo! Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programmi\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programmi\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin:  File not found
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\Documents and Settings\All Users\Dati applicazioni\AVG SafeGuard toolbar\FireFoxExt\17.2.0.38 [2014/01/08 15.02.21 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\Documents and Settings\All Users\Dati applicazioni\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\IPSFF [2014/01/09 01.28.29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\Documents and Settings\All Users\Dati applicazioni\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_21.1.0.18\coFFPlgn\ [2014/01/09 01.39.22 | 000,000,000 | ---D | M]
 
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}{google:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - Extension: Docs = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\
CHR - Extension: Docs = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_1\
CHR - Extension: Docs = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_2\
CHR - Extension: Docs = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_3\
CHR - Extension: Docs = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_4\
CHR - Extension: Google Drive = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\
CHR - Extension: Google Drive = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_1\
CHR - Extension: Google Drive = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_2\
CHR - Extension: Google Drive = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_3\
CHR - Extension: YouTube = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: YouTube = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_1\
CHR - Extension: YouTube = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_2\
CHR - Extension: Ricerca Google = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Ricerca Google = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_1\
CHR - Extension: Ricerca Google = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_2\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_0\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_1\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_2\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_3\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_4\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_5\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_6\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_7\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_8\
CHR - Extension: AVG SafeGuard = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof\17.2.0.38_9\
CHR - Extension: Gmail = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
CHR - Extension: Gmail = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: Gmail = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_2\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_0\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_1\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_2\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_3\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_4\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_5\
CHR - Extension: Ask Toolbar = C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\pljcgbedjplidkdjahbaalanadmjfgop\26.63936_6\
 
O1 HOSTS File: ([2008/04/14 13.00.00 | 000,000,768 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programmi\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O2 - BHO: (Supporto di collegamento per Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Norton Identity Protection) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Programmi\Norton 360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
O2 - BHO: (Norton Vulnerability Protection) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Programmi\Norton 360\Engine\21.1.0.18\IPS\IPSBHO.dll (Symantec Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG SafeGuard toolbar\17.2.0.38\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Programmi\Norton 360\Engine\21.1.0.18\CoIEPlg.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (AVG SafeGuard toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG SafeGuard toolbar\17.2.0.38\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O3 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\..\Toolbar\WebBrowser: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programmi\Yahoo!\Companion\Installs\cpn1\yt.dll (Yahoo! Inc.)
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [BatteryManager] C:\Programmi\Samsung\Samsung Battery Manager\BatteryManager.exe ()
O4 - HKLM..\Run: [DMHotKey] C:\Programmi\Samsung\Easy Display Manager\DMLoader.exe (SAMSUNG Electronics)
O4 - HKLM..\Run: [EDS] C:\Programmi\Samsung\Samsung EDS\EDSAgent.exe (Samsung Electronics,.LTD)
O4 - HKLM..\Run: [MagicKeyboard] C:\Programmi\Samsung\MagicKBD\PreMKbd.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programmi\File comuni\Java\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [vProt] C:\Programmi\AVG SafeGuard toolbar\vprot.exe ()
O4 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005..\Run: [AVG-Secure-Search-Update_1213b] C:\Documents and Settings\tit angela\Dati applicazioni\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe /PROMPT /mid=09cb2f58a99247d285f3d16d6a2795d8-c987c70f4c0b88e45329079c210253387c862b49 /CMPID=1213b File not found
O4 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005..\Run: [Facebook Update] C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005..\Run: [Messenger (Yahoo!)] C:\Programmi\Yahoo!\Messenger\YahooMessenger.exe (Yahoo! Inc.)
O4 - Startup: C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\BTTray.lnk = C:\Programmi\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-4159745607-663305977-4172335611-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Invia a Bluetooth - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O8 - Extra context menu item: Invia a periferica &Bluetooth... - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre7\bin\jp2iexp.dll ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programmi\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 10.45.2)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Java Plug-in 1.5.0)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programmi\File comuni\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programmi\File comuni\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll (AVG Secure Search)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Pagina iniziale corrente) - About:Home
O24 - Desktop WallPaper: C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/02/12 16.07.23 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011/10/17 13.11.41 | 000,000,000 | ---- | M] () - D:\AUTORUN.INF -- [ NTFS ]
O33 - MountPoints2\{0a2eb9ca-bf28-11de-87ab-00242c33753e}\Shell - "" = AutoRun
O33 - MountPoints2\{0a2eb9ca-bf28-11de-87ab-00242c33753e}\Shell\AutoRun\command - "" = E:\autorun.exe
O33 - MountPoints2\{f31e1f8c-f7e0-11e0-a974-001377f77f95}\Shell - "" = AutoRun
O33 - MountPoints2\{f31e1f8c-f7e0-11e0-a974-001377f77f95}\Shell\AutoRun\command - "" = E:\autorun.exe
O33 - MountPoints2\{f46f6164-c20b-11de-a8a2-00242cc37c2b}\Shell - "" = AutoRun
O33 - MountPoints2\{f46f6164-c20b-11de-a8a2-00242cc37c2b}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{f46f6165-c20b-11de-a8a2-00242cc37c2b}\Shell - "" = AutoRun
O33 - MountPoints2\{f46f6165-c20b-11de-a8a2-00242cc37c2b}\Shell\AutoRun\command - "" = E:\setup_vmc_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2014/01/09 04.26.49 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\tit angela\Desktop\OTL.scr
[2014/01/09 02.48.03 | 001,065,947 | ---- | C] (Farbar) -- C:\Documents and Settings\tit angela\Desktop\FRST.exe
[2014/01/09 01.27.24 | 000,142,936 | ---- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2014/01/09 01.27.23 | 000,000,000 | ---D | C] -- C:\Programmi\File comuni\Symantec Shared
[2014/01/09 01.27.23 | 000,000,000 | ---D | C] -- C:\Programmi\Symantec
[2014/01/09 01.26.25 | 000,446,552 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\symnets.sys
[2014/01/09 01.26.25 | 000,421,592 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\symtdi.sys
[2014/01/09 01.26.25 | 000,383,576 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\symtdiv.sys
[2014/01/09 01.26.25 | 000,021,520 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymELAM.sys
[2014/01/09 01.26.24 | 000,935,512 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymEFA.sys
[2014/01/09 01.26.24 | 000,651,352 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtsp.sys
[2014/01/09 01.26.24 | 000,367,704 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymDS.sys
[2014/01/09 01.26.24 | 000,206,936 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\Ironx86.sys
[2014/01/09 01.26.24 | 000,032,344 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtspx.sys
[2014/01/09 01.26.22 | 000,127,064 | R--- | C] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\N360\1501000.012\ccSetx86.sys
[2014/01/09 01.24.44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\N360
[2014/01/09 01.24.44 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\N360\1501000.012
[2014/01/09 01.24.38 | 000,000,000 | ---D | C] -- C:\Programmi\Norton 360
[2014/01/09 01.24.38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Norton 360
[2014/01/09 01.23.19 | 000,000,000 | ---D | C] -- C:\Programmi\NortonInstaller
[2014/01/09 01.17.21 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2014/01/08 23.24.08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Dati applicazioni\Malwarebytes
[2014/01/08 23.24.01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Malwarebytes' Anti-Malware
[2014/01/08 23.24.00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\Malwarebytes
[2014/01/08 23.23.58 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2014/01/08 23.23.58 | 000,000,000 | ---D | C] -- C:\Programmi\Malwarebytes' Anti-Malware
[2014/01/08 23.22.01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Dati applicazioni\WinRAR
[2014/01/08 23.22.01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\WinRAR
[2014/01/08 23.22.00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Menu Avvio\Programmi\WinRAR
[2014/01/08 23.21.55 | 000,000,000 | ---D | C] -- C:\Programmi\WinRAR
[2014/01/08 17.40.34 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Google Chrome
[2014/01/08 15.11.58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\APN
[2014/01/08 15.09.29 | 000,264,616 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2014/01/08 15.09.14 | 000,175,016 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2014/01/08 15.09.14 | 000,174,504 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2014/01/08 15.09.14 | 000,094,632 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2014/01/08 15.09.14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menu Avvio\Programmi\Java
[2014/01/08 15.02.39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\AVG SafeGuard toolbar
[2014/01/08 15.02.26 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Dati applicazioni\AVG SafeGuard toolbar
[2014/01/08 15.02.24 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG Security Toolbar
[2014/01/08 15.02.13 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\cache
[2014/01/08 15.02.06 | 000,037,664 | ---- | C] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys
[2014/01/08 15.01.56 | 000,000,000 | ---D | C] -- C:\Programmi\File comuni\AVG Secure Search
[2014/01/08 15.01.53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG SafeGuard toolbar
[2014/01/08 15.01.48 | 000,000,000 | ---D | C] -- C:\Programmi\AVG SafeGuard toolbar
[2014/01/07 12.41.01 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Dati applicazioni\AVG2014
[2014/01/07 12.39.49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Dati applicazioni\TuneUp Software
[2014/01/07 12.36.58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG2014
[2014/01/07 12.35.50 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\Common Files
[2014/01/07 12.35.50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\MFAData
[2014/01/07 12.35.50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Dati applicazioni\MFAData
[2014/01/07 12.35.50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\Avg2014
[2012/01/10 12.08.42 | 004,027,160 | ---- | C] (TeamViewer GmbH) -- C:\Programmi\TeamViewer_Setup_es.exe
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2014/01/09 04.27.58 | 000,001,130 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2014/01/09 04.18.35 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\tit angela\Desktop\OTL.scr
[2014/01/09 03.56.00 | 000,000,978 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2014/01/09 03.38.08 | 000,001,030 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-4159745607-663305977-4172335611-1005UA.job
[2014/01/09 02.38.33 | 000,377,856 | ---- | M] () -- C:\Documents and Settings\tit angela\Desktop\513ts556.exe
[2014/01/09 02.36.17 | 001,065,947 | ---- | M] (Farbar) -- C:\Documents and Settings\tit angela\Desktop\FRST.exe
[2014/01/09 01.37.33 | 000,001,126 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2014/01/09 01.37.23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2014/01/09 01.37.21 | 1063,702,528 | -HS- | M] () -- C:\hiberfil.sys
[2014/01/09 01.27.58 | 000,565,906 | ---- | M] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\Cat.DB
[2014/01/09 01.27.23 | 000,142,936 | ---- | M] (Symantec Corporation) -- C:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2014/01/09 01.27.23 | 000,008,194 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2014/01/09 01.27.23 | 000,000,805 | ---- | M] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2014/01/09 01.27.07 | 000,001,783 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Norton 360.LNK
[2014/01/09 01.02.13 | 000,035,144 | ---- | M] () -- C:\WINDOWS\System32\drivers\mbamchameleon.sys
[2014/01/08 21.55.15 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014/01/08 17.40.34 | 000,001,775 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2014/01/08 15.08.57 | 000,094,632 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\WindowsAccessBridge.dll
[2014/01/08 15.08.46 | 000,264,616 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaws.exe
[2014/01/08 15.08.45 | 000,175,016 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javaw.exe
[2014/01/08 15.08.44 | 000,145,408 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\javacpl.cpl
[2014/01/08 15.08.43 | 000,174,504 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\System32\java.exe
[2014/01/08 15.01.31 | 000,037,664 | ---- | M] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys
[2014/01/07 12.38.01 | 000,001,008 | ---- | M] () -- C:\WINDOWS\tasks\FacebookUpdateTaskUserS-1-5-21-4159745607-663305977-4172335611-1005Core.job
[2014/01/07 10.41.12 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2013/12/22 09.23.03 | 000,094,272 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013/12/21 21.13.50 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2014/01/09 02.48.10 | 000,377,856 | ---- | C] () -- C:\Documents and Settings\tit angela\Desktop\513ts556.exe
[2014/01/09 01.37.21 | 1063,702,528 | -HS- | C] () -- C:\hiberfil.sys
[2014/01/09 01.27.40 | 000,565,906 | ---- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\Cat.DB
[2014/01/09 01.27.24 | 000,008,194 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2014/01/09 01.27.24 | 000,000,805 | ---- | C] () -- C:\WINDOWS\System32\drivers\SYMEVENT.INF
[2014/01/09 01.27.07 | 000,001,783 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Norton 360.LNK
[2014/01/09 01.25.43 | 000,003,433 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymEFA.inf
[2014/01/09 01.25.43 | 000,002,852 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymDS.inf
[2014/01/09 01.25.43 | 000,001,440 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymNet.inf
[2014/01/09 01.25.43 | 000,001,098 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\symELAM.inf
[2014/01/09 01.25.42 | 000,001,389 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtspx.inf
[2014/01/09 01.25.42 | 000,001,388 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtsp.inf
[2014/01/09 01.25.42 | 000,000,829 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\ccSetx86.inf
[2014/01/09 01.25.42 | 000,000,737 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\Iron.inf
[2014/01/09 01.24.45 | 000,014,818 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymVTcer.dat
[2014/01/09 01.24.44 | 000,009,931 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymELAM.cat
[2014/01/09 01.24.44 | 000,008,194 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\ccSetx86.cat
[2014/01/09 01.24.44 | 000,008,184 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymNet.cat
[2014/01/09 01.24.44 | 000,008,182 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymEFA.cat
[2014/01/09 01.24.44 | 000,008,180 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtspx.cat
[2014/01/09 01.24.44 | 000,008,176 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\SymDS.cat
[2014/01/09 01.24.44 | 000,008,176 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\srtsp.cat
[2014/01/09 01.24.44 | 000,008,176 | R--- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\iron.cat
[2014/01/09 01.24.44 | 000,000,172 | ---- | C] () -- C:\WINDOWS\System32\drivers\N360\1501000.012\isolate.ini
[2014/01/09 01.02.13 | 000,035,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\mbamchameleon.sys
[2014/01/08 21.52.39 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2014/01/08 17.40.34 | 000,001,775 | ---- | C] () -- C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
[2012/02/15 10.03.16 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2009/11/10 15.05.07 | 000,014,848 | ---- | C] () -- C:\Documents and Settings\tit angela\Impostazioni locali\Dati applicazioni\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
 
[color=#E56717]========== ZeroAccess Check ==========[/color]
 
[2009/10/26 09.47.36 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2013/10/25 01.53.16 | 001,510,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009/02/09 11.51.43 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = C:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 13.00.00 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2014/01/08 15.11.58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\APN
[2013/06/19 19.37.48 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Ask
[2014/01/08 19.48.54 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG SafeGuard toolbar
[2014/01/08 15.02.24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG Security Toolbar
[2014/01/09 01.19.15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\AVG2014
[2014/01/07 12.35.50 | 000,000,000 | -H-D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Common Files
[2014/01/09 01.20.44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\MFAData
[2014/01/09 00.52.10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\TEMP
[2009/10/26 09.51.33 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\Vodafone
[2009/02/12 16.14.28 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Dati applicazioni\WLAN
[2009/10/26 09.52.02 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dati applicazioni\Vodafone
[2010/08/26 20.40.06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\LocalService\Dati applicazioni\WINDEasyConnect
[2014/01/08 15.02.26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\AVG SafeGuard toolbar
[2014/01/07 12.41.01 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\AVG2014
[2013/07/20 09.10.41 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\Registry Mechanic
[2012/01/14 17.22.20 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\TeamViewer
[2014/01/07 12.39.49 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\TuneUp Software
[2009/10/26 09.52.10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\tit angela\Dati applicazioni\Vodafone
 
[color=#E56717]========== Purity Check ==========[/color]
 
 
 
[color=#E56717]========== Alternate Data Streams ==========[/color]
 
@Alternate Data Stream - 150 bytes -> C:\Documents and Settings\All Users\Dati applicazioni\TEMP:D1B5B4F1

< End of report >