Aiuto PC

 
.

(RISOLTO) Tutti i download sono corrotti

« Older   Newer »
 
  Share  
.
  1. Judgement1991
    Posted on 9/10/2013, 21:23
     
    .

    Aiutante

    Group
    Member
    Posts
    518

    Status
    Offline
    Ho comprato un nuovo pc portatile con preinstallato norton internet security che è attivo per un periodo limitato ora ho dovuto ripristinare il sistema per un problema non grave ma l'antivirus non funziona più mi dice che è da aggiornare ma se ci provo mi da errore e non so più cosa fare ho provato disinstallando l'antivirus e ho provato a ripristinare il sistema per vedere se risolvevo il problenma ma mi da quest errore quando provo a ripristinare di nuovo il sistema.
    SPOILER (clicca per visualizzare)
    Ho anche un problema con dei video scaricati da youtube tramite keepvid e altri siti praticamente il video viene scaricato e funziona ma dopo 2 o 3 minuti a seconda della durata del video il video si blocca e il timer scorre ma le immagini non cambiano non so proprio come fare non vorrei portare il pc in riparazione o comunque apparte queste cose funziona alla perfezione è quasi un mese che lo ho comprato e non lo voglio portare in riparazione i miei si arrabbierebbero se fosse gia da portare in riparazione per leggere i video uso vlc ho l'applicazione gia instalata sul computer per i video credo si chiami xbox video inoltre volevo sapere se uso gli emulatori per ps1 n64 e gb con le rom dei giochi il computer si rovini forse ho problemi anche con un virus dato che spesso mi si aprono pagine di pubblicità e inoltre non si aggiorna l'antivirus cosa faccio? anche un problema con gli archivi rar che mi dice sono corrotti o altro credo sia un virus aiuto. Inoltre il pc si rallenta molto quando uso internet credo sia un virus.quasi tutti i file che scarico da internet sono corrotti non voglio portarlo in riparazione, come funziona il rimuovi tutto e reinstalla windows? Ciao e Grazie dell'aiuto che mi darete.

    Edited by Judgement1991 - 10/10/2013, 01:56
     
    .
  2. vicky67
    Posted on 10/10/2013, 07:21
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    ciao judgement1991
    Da come descrivi il problema potrebbe trattarsi di una variante del virut.

    Dobbiamo quindi prima accertare quale sia il problema per poi indicarti la giusta soluzione.
    Scarica(da altro pc) ed esegui Farbar recovery scan tool eseguito dal desktop e fai una scansione online con Eset on line scanner.Trovi le istruzioni nei tool di rimozione in firma.
    Allega i log

    n.b. Se hai collegato dopo il problema supporti removibili durante la scansione con ESET collegali.
    Se non hai collegato supporti removibili finora non collegarli assolutamente al pc.
    per portare i 2 tool sul pc infetto usa una pendrive sulla quale non hai dati importanti.
     
    .
  3. Judgement1991
    Posted on 11/10/2013, 17:26
     
    .

    Aiutante

    Group
    Member
    Posts
    518

    Status
    Offline
    Questo è il log di falbar: http://wikisend.com/download/264116/FRST.txt

    Questo è il log additional: http://wikisend.com/download/901050/Addition.txt

    Questo invece è l'errore che mi da con eset:
    SPOILER (clicca per visualizzare)
    mi potresti spiegare come funziona rimuovi tutto è reinstalla windows di windows non potrei usare quella dato che.non ho dati.importanti nel.pc, ho sbagliato sh.messo il link del download spero vada bene.lo stesso

    Edited by Judgement1991 - 11/10/2013, 19:33
     
    .
  4. vicky67
    Posted on 12/10/2013, 08:15
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Le immagini non si riescono a leggere.
    Comunque se vuoi formattare che nel tuo caso creso sia la soluzione migliore devi riavviare il pc e immediatamente premere velocemente il tasto F11.
    Ti apparirà una schermata che ti chiederà di ripristinare il sistema alle condizioni di fabbrica(Ripristino di fabbrica).

    n.b.
    Dato che non abbiamo accertato(eset non ha funzionato) di che infezione si tratti attenzione se hai collegato archivi removibili al pc altrimenti rischi di reinfettare nuovamente il pc se collegati di nuovo.
    Prima di formattare fai analizzare uno o due archivi rar che non ti si aprono su https://www.virustotal.com/it/.
    Fammi sapere se vengono rilevate infezioni.
     
    .
  5. Judgement1991
    Posted on 12/10/2013, 22:34
     
    .

    Aiutante

    Group
    Member
    Posts
    518

    Status
    Offline
    Ho provato a danalizzare archivi rar e un video ma non risultano infezioni, posso procedere alla forattazione? è possibile salvare i preferiti di firefox per averli una volta formattato il computer?
     
    .
  6. vicky67
    Posted on 13/10/2013, 07:23
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Per salvare i preferiti vai su segnalibri-visualizza tutti i segnalibri-esporta i s. in html.Verranno esportati i seganlibri in un file che dovrsai salvare da altra parte.
    Quando hai formattato,dopo aver installato firefox rifai la stessa procedura cliccando questa volta su importa seganlibri indicandogli il file che hai precedentemente salvato.
     
    .
  7. lachitarra96
    Posted on 26/7/2014, 23:07
     
    .

    Principiante

    Group
    Member
    Posts
    19
    Location
    Sicilia

    Status
    Offline
    Ho lo stesso problema quasi ogni video che che scarico con atube catcher, fvd downloade, downloa helper, e anche sui vari siti dai download diretti, appena li faccio partire con vlc si vedono i primi minuti e poi tutto nero mentre il tempo scorre.
    Cosa posso fare?
     
    .
  8. vicky67
    Posted on 27/7/2014, 07:26
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Ciao lachitarra
    esegui una scansione con farbar recovery scan tool in modalità normale ed allega i 2 log scaturiti.

    I download corrotti riguardano solo i video o altri files?
    Effettua anche una scansione con il tuo antivirus e dimmi se rileva infezioni.
     
    .
  9. lachitarra96
    Posted on 27/7/2014, 12:33
     
    .

    Principiante

    Group
    Member
    Posts
    19
    Location
    Sicilia

    Status
    Offline
    Ecco i risultati di farbar recovery scan tool:
    -FRST
    SPOILER (clicca per visualizzare)
    Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
    Ran by Simone (administrator) on SIMONE on 27-07-2014 11:52:53
    Running from C:\Users\simone\Downloads
    Platform: Windows 8.1 (X64) OS Language: Italiano (Italia)
    Internet Explorer Version 11
    Boot Mode: Normal

    The only official download link for FRST:
    Download link for 32-Bit version: http://www.bleepingcomputer.com/download/f...can-tool/dl/81/
    Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/f...can-tool/dl/82/
    Download link from any site other than Bleeping Computer is unpermitted or outdated.
    See tutorial for FRST: http://www.geekstogo.com/forum/topic/33508...very-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe
    (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
    (Microsoft Corporation) C:\Windows\System32\dasHost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
    (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
    (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
    (ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
    () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
    (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
    (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
    (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
    (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20498_x64__8wekyb3d8bbwe\livecomm.exe
    (Microsoft Corporation) C:\Windows\System32\dllhost.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
    (ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
    (Bitdefender) C:\Program Files\Bitdefender\Antivirus Free Edition\gziface.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
    (Intel Corporation) C:\Windows\System32\igfxsrvc.exe
    (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
    (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
    (Dropbox, Inc.) C:\Users\simone\AppData\Roaming\Dropbox\bin\Dropbox.exe
    (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Intel Corporation) C:\Windows\System32\hkcmd.exe
    (Intel Corporation) C:\Windows\System32\igfxtray.exe
    (CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
    (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
    (ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
    (ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
    (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
    (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
    (AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\WWAHost.exe
    (Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
    (Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe


    ==================== Registry (Whitelisted) ==================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM-x32\...\Run: [CLMLServer] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [111120 2012-05-24] (CyberLink)
    HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4086432 2014-07-10] (AVAST Software)
    HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
    HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-11] (Oracle Corporation)
    Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
    HKLM\...\Policies\Explorer: [NoControlPanel] 0
    HKU\S-1-5-21-1133505190-2844704603-3595659071-1001\...\MountPoints2: {8474da29-b917-11e3-be96-d850e637cfc5} - "F:\Startme.exe"
    Startup: C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
    ShortcutTarget: Dropbox.lnk -> C:\Users\simone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
    ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
    ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers: DropboxExt4 -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll (Microsoft Corporation)
    ShellIconOverlayIdentifiers-x32: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)
    ShellIconOverlayIdentifiers-x32: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt.24.dll (Dropbox, Inc.)

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://asus13.msn.com
    HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
    SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}...E10TR&pc=ASU2JS
    SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.bing.com/search?q={searchTerms}...E10TR&pc=ASU2JS
    SearchScopes: HKLM-x32 - DefaultScope value is missing.
    SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
    BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
    BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
    BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
    BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
    BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
    Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
    Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
    Tcpip\..\Interfaces\{2579BA02-5045-47DA-A2AD-77452AF08741}: [NameServer]8.8.8.8,8.8.8.2

    FireFox:
    ========
    FF ProfilePath: C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\5lcg65mj.default-1400516391808
    FF Homepage: www.google.it/
    FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @adobe.com/FlashPlayer - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
    FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
    FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
    FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
    FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
    FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\3\NP_wtapp.dll ()
    FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
    FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\simone\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
    FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-it.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-it.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\hoepli.xml
    FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-it.xml
    FF Extension: DownloadHelper - C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\5lcg65mj.default-1400516391808\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-05-19]
    FF Extension: ScrollyFox - C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\5lcg65mj.default-1400516391808\Extensions\[email protected] [2014-05-19]
    FF Extension: The Addon Bar (restored) - C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\5lcg65mj.default-1400516391808\Extensions\[email protected] [2014-05-19]
    FF Extension: Adblock Plus - C:\Users\simone\AppData\Roaming\Mozilla\Firefox\Profiles\5lcg65mj.default-1400516391808\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-05-19]
    FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\AVAST Software\Avast\WebRep\FF
    FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-14]

    Chrome:
    =======
    CHR HomePage: www.google.it/
    CHR Extension: (Documenti Google) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-13]
    CHR Extension: (Google Drive) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-13]
    CHR Extension: (YouTube) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-13]
    CHR Extension: (Adblock Plus) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-01-13]
    CHR Extension: (Ricerca Google) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-13]
    CHR Extension: (full metal alchemist) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\dniafhgdclpioaooambpdnjibfenafkd [2014-05-19]
    CHR Extension: (avast! Online Security) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-14]
    CHR Extension: (FVD Downloader) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2014-06-18]
    CHR Extension: (Google Wallet) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-13]
    CHR Extension: (Il mio tema di Chrome) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\oehpjpccmlcalbenfhnacjeocbjdonic [2014-02-08]
    CHR Extension: (Gmail) - C:\Users\simone\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-13]
    CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-10]

    ==================== Services (Whitelisted) =================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R3 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-06-19] (ASUS)
    R3 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
    R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-10] (AVAST Software)
    R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-02-14] (WildTangent)
    R2 gzserv; C:\Program Files\Bitdefender\Antivirus Free Edition\gzserv.exe [69368 2013-10-23] (Bitdefender)
    R3 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
    R3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
    R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

    ==================== Drivers (Whitelisted) ====================

    (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

    R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-10] ()
    R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-10] (AVAST Software)
    R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-10] (AVAST Software)
    R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-10] ()
    R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-10] (AVAST Software)
    R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-10] (AVAST Software)
    R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-10] (AVAST Software)
    R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-10] ()
    R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3837440 2013-08-14] (Qualcomm Atheros Communications, Inc.)
    R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-06-28] (ASUS Corporation)
    R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [718840 2013-04-17] (BitDefender)
    U5 avchv; C:\Windows\System32\Drivers\avchv.sys [261056 2014-07-22] (BitDefender)
    R3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [593144 2013-04-17] (BitDefender)
    R1 bdfwfpf; C:\Program Files\Bitdefender\Antivirus Free Edition\bdfwfpf.sys [121928 2013-07-02] (Bitdefender SRL)
    R1 gzflt; C:\Windows\System32\DRIVERS\gzflt.sys [148696 2013-04-22] (BitDefender LLC)
    R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
    S3 sscdserd; C:\Windows\system32\DRIVERS\sscdserd.sys [141384 2011-12-08] (MCCI Corporation)
    R0 trufos; C:\Windows\System32\DRIVERS\trufos.sys [382536 2013-05-28] (BitDefender S.R.L.)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
    R3 WUDFWpdComp; C:\Windows\system32\DRIVERS\WUDFRd.sys [227840 2014-05-31] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


    ==================== One Month Created Files and Folders ========

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-07-27 11:52 - 2014-07-27 11:53 - 00021525 _____ () C:\Users\simone\Downloads\FRST.txt
    2014-07-27 11:52 - 2014-07-27 11:52 - 00000000 ____D () C:\FRST
    2014-07-27 11:51 - 2014-07-27 11:51 - 02093568 _____ (Farbar) C:\Users\simone\Downloads\FRST64.exe
    2014-07-26 23:46 - 2014-07-26 23:47 - 17289940 _____ (Malwarebytes Corporation ) C:\Users\simone\Downloads\mbam-setup-2.0.2.1012.exe
    2014-07-26 23:39 - 2014-07-26 23:39 - 00002406 _____ () C:\WINDOWS\PFRO.log
    2014-07-26 23:23 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
    2014-07-26 23:21 - 2014-07-27 11:52 - 00070629 _____ () C:\WINDOWS\WindowsUpdate.log
    2014-07-26 23:01 - 2014-07-26 23:34 - 00000000 ____D () C:\AdwCleaner
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\Users\simone\AppData\Local\Adobe
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Repair
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\Program Files (x86)\Repair File
    2014-07-26 22:17 - 2014-07-26 22:17 - 01319328 _____ (File Repair ) C:\Users\simone\Downloads\file-repair-setup.exe
    2014-07-26 22:13 - 2014-07-26 22:13 - 00000000 ____D () C:\Users\simone\AppData\Roaming\MPC-HC
    2014-07-26 22:12 - 2014-07-26 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
    2014-07-26 22:12 - 2014-06-14 16:03 - 00260696 _____ () C:\WINDOWS\system32\unrar64.dll
    2014-07-26 22:12 - 2014-06-14 16:03 - 00218200 _____ () C:\WINDOWS\SysWOW64\unrar.dll
    2014-07-26 22:11 - 2014-07-26 22:12 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
    2014-07-26 22:08 - 2014-07-26 22:09 - 27992636 _____ ( ) C:\Users\simone\Downloads\K-Lite_Codec_Pack_1060_Full.exe
    2014-07-24 23:12 - 2014-07-24 23:12 - 00000000 ____D () C:\Users\simone\AppData\Local\Blizzard
    2014-07-24 22:18 - 2014-07-24 23:12 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
    2014-07-24 22:18 - 2014-07-24 22:18 - 00001217 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk
    2014-07-24 22:18 - 2014-07-24 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
    2014-07-24 22:11 - 2014-07-26 14:56 - 00000000 ____D () C:\Users\simone\AppData\Local\Battle.net
    2014-07-24 22:11 - 2014-07-24 22:17 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Battle.net
    2014-07-24 22:11 - 2014-07-24 22:11 - 00001180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\Users\simone\AppData\Local\Blizzard Entertainment
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\Program Files (x86)\Battle.net
    2014-07-24 22:05 - 2014-07-24 22:06 - 00000000 ____D () C:\ProgramData\Battle.net
    2014-07-24 01:56 - 2014-07-24 01:56 - 00000000 ____D () C:\Users\simone\AppData\Local\eMule
    2014-07-24 01:56 - 2014-07-24 01:56 - 00000000 ____D () C:\ProgramData\eMule
    2014-07-23 16:57 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
    2014-07-23 16:57 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
    2014-07-23 16:57 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
    2014-07-22 12:58 - 2014-07-22 12:58 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
    2014-07-21 02:52 - 2014-07-21 02:52 - 00001189 _____ () C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mp3tag.lnk
    2014-07-21 02:42 - 2014-07-25 15:31 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Mp3tag
    2014-07-21 02:40 - 2014-07-21 02:42 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
    2014-07-21 02:31 - 2014-07-21 02:31 - 02672432 _____ () C:\Users\simone\Downloads\mp3tagv261asetup.exe
    2014-07-20 15:06 - 2014-07-20 15:06 - 00000000 ____D () C:\Users\simone\Documents\The Forbidden Land
    2014-07-20 12:25 - 2014-07-20 12:25 - 00004379 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_65-b20.log
    2014-07-20 12:25 - 2014-07-20 12:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2014-07-20 12:25 - 2014-07-11 03:02 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2014-07-20 12:25 - 2014-07-11 02:56 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
    2014-07-20 12:25 - 2014-07-11 02:56 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
    2014-07-20 12:25 - 2014-07-11 02:55 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
    2014-07-19 23:23 - 2014-07-19 23:29 - 00002900 _____ () C:\WINDOWS\system32\lic2.xml26814
    2014-07-15 13:24 - 2014-07-15 13:25 - 00001099 _____ () C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ToYcon.lnk
    2014-07-15 13:21 - 2014-07-15 13:21 - 00000000 ____D () C:\Program Files\ToYcon
    2014-07-15 13:19 - 2014-07-15 16:43 - 00000132 _____ () C:\Users\simone\AppData\Roaming\Adobe PNG Format CS5 Prefs
    2014-07-15 13:18 - 2014-07-15 13:18 - 00729736 _____ ( ) C:\Users\simone\Downloads\toycon.exe
    2014-07-13 01:15 - 2014-07-13 01:15 - 00065920 _____ () C:\Users\simone\Downloads\Aria.the.Natural.-.Ep..01-13.torrent
    2014-07-13 01:14 - 2014-07-13 01:14 - 00065746 _____ () C:\Users\simone\Downloads\Aria.the.Natural.-.Ep.14-26.torrent
    2014-07-12 23:31 - 2014-07-12 23:33 - 42353436 _____ () C:\Users\simone\Downloads\05896-CSR-Racing-v1-8-0.apk
    2014-07-12 23:21 - 2014-07-12 23:28 - 248018577 _____ () C:\Users\simone\Downloads\05896-cache-CSR-Racing-v1-8-01.zip
    2014-07-12 16:15 - 2014-07-12 16:24 - 00000000 ____D () C:\Users\simone\Downloads\chrome-youtube-downloader-2.6.20
    2014-07-11 13:23 - 2014-07-11 13:23 - 00653004 _____ () C:\Users\simone\Downloads\Street Fighter II V S01e01-29.torrent
    2014-07-10 18:10 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
    2014-07-10 18:10 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
    2014-07-10 18:10 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
    2014-07-10 18:10 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
    2014-07-10 18:10 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
    2014-07-10 18:10 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
    2014-07-10 18:10 - 2014-05-03 05:30 - 02641920 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
    2014-07-10 18:10 - 2014-05-03 05:27 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
    2014-07-10 18:10 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
    2014-07-10 18:10 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
    2014-07-10 18:10 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
    2014-07-10 18:10 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
    2014-07-10 18:10 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
    2014-07-10 18:10 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
    2014-07-10 18:10 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
    2014-07-10 18:10 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
    2014-07-10 18:10 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
    2014-07-10 18:10 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
    2014-07-10 18:09 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2014-07-10 18:09 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
    2014-07-10 18:09 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
    2014-07-10 18:09 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
    2014-07-10 18:09 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
    2014-07-10 18:09 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
    2014-07-10 18:09 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
    2014-07-10 18:09 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
    2014-07-10 18:09 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
    2014-07-10 18:09 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
    2014-07-10 18:09 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
    2014-07-10 18:09 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
    2014-07-10 18:09 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
    2014-07-10 18:09 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
    2014-07-10 18:09 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
    2014-07-10 18:09 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
    2014-07-10 18:09 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
    2014-07-10 18:09 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
    2014-07-10 18:09 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
    2014-07-10 18:09 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
    2014-07-10 18:09 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
    2014-07-10 18:09 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
    2014-07-10 18:09 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
    2014-07-10 18:09 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
    2014-07-10 18:09 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
    2014-07-10 18:09 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
    2014-07-10 18:09 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
    2014-07-10 18:09 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
    2014-07-10 18:08 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
    2014-07-10 18:08 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
    2014-07-10 18:08 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
    2014-07-10 18:08 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
    2014-07-10 18:08 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
    2014-07-10 18:08 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
    2014-07-10 18:08 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
    2014-07-10 18:08 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
    2014-07-10 18:08 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
    2014-07-10 18:08 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
    2014-07-10 18:08 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
    2014-07-10 18:08 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
    2014-07-10 18:08 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
    2014-07-10 18:08 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
    2014-07-10 18:08 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
    2014-07-10 18:08 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
    2014-07-10 18:08 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
    2014-07-10 18:08 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2014-07-10 18:05 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
    2014-07-10 17:55 - 2014-06-16 03:56 - 00000000 ____D () C:\Users\simone\Downloads\The Forbidden Land
    2014-07-10 13:24 - 2014-07-10 13:24 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
    2014-07-10 13:20 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
    2014-07-10 13:17 - 2014-07-10 13:17 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
    2014-07-09 13:04 - 2014-07-12 14:18 - 00000417 _____ () C:\Users\simone\Desktop\acquisti.txt
    2014-07-09 13:04 - 2014-07-09 13:04 - 00000000 ____D () C:\Users\simone\Documents\Visual Studio 2005
    2014-07-09 12:14 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2014-07-09 12:14 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
    2014-07-09 12:14 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2014-07-09 12:14 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
    2014-07-09 12:14 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
    2014-07-09 12:14 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
    2014-07-09 12:14 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
    2014-07-09 12:14 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
    2014-07-09 12:14 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
    2014-07-09 12:14 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
    2014-07-09 12:14 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
    2014-07-09 12:14 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
    2014-07-09 12:14 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
    2014-07-09 12:14 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
    2014-07-09 12:14 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2014-07-09 12:14 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
    2014-07-09 12:14 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
    2014-07-09 12:14 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
    2014-07-09 12:14 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2014-07-09 12:14 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
    2014-07-09 12:14 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
    2014-07-09 12:14 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2014-07-09 12:14 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2014-07-09 12:14 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
    2014-07-09 12:14 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2014-07-09 12:14 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2014-07-09 12:14 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
    2014-07-09 12:14 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
    2014-07-09 12:14 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
    2014-07-09 12:14 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
    2014-07-09 12:14 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
    2014-07-09 01:19 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
    2014-07-09 01:19 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
    2014-07-09 01:19 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
    2014-07-09 01:19 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
    2014-07-09 01:18 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2014-07-09 01:18 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
    2014-07-09 01:18 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
    2014-07-09 01:18 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
    2014-07-09 01:18 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
    2014-07-09 01:18 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
    2014-07-09 01:12 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
    2014-07-09 01:12 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
    2014-07-09 01:12 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
    2014-07-09 01:12 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
    2014-07-09 01:12 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
    2014-07-09 01:12 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
    2014-07-09 01:12 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
    2014-07-09 01:12 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2014-07-09 01:12 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2014-07-09 01:12 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2014-07-09 01:12 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
    2014-07-09 01:12 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2014-07-09 01:12 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2014-07-09 01:12 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
    2014-07-09 01:12 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2014-07-09 01:12 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2014-07-09 01:12 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
    2014-07-09 01:12 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
    2014-07-09 01:12 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
    2014-07-09 01:12 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
    2014-07-09 01:05 - 2014-07-09 01:05 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
    2014-06-27 15:25 - 2014-06-27 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
    2014-06-27 15:25 - 2014-06-27 15:25 - 00000000 ____D () C:\Program Files\7-Zip

    ==================== One Month Modified Files and Folders =======

    (If an entry is included in the fixlist, the file\folder will be moved.)

    2014-07-27 11:53 - 2014-07-27 11:52 - 00021525 _____ () C:\Users\simone\Downloads\FRST.txt
    2014-07-27 11:52 - 2014-07-27 11:52 - 00000000 ____D () C:\FRST
    2014-07-27 11:52 - 2014-07-26 23:21 - 00070629 _____ () C:\WINDOWS\WindowsUpdate.log
    2014-07-27 11:52 - 2014-02-20 00:16 - 00003942 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{7A937D94-6B05-40B2-99B9-79EE09A33B39}
    2014-07-27 11:51 - 2014-07-27 11:51 - 02093568 _____ (Farbar) C:\Users\simone\Downloads\FRST64.exe
    2014-07-27 11:51 - 2014-01-13 00:21 - 00000062 _____ () C:\Users\simone\AppData\Roaming\sp_data.sys
    2014-07-27 11:50 - 2013-09-13 18:38 - 00003056 _____ () C:\WINDOWS\System32\Tasks\ASUS P4G
    2014-07-27 11:50 - 2013-09-13 18:37 - 00003268 _____ () C:\WINDOWS\System32\Tasks\AsusVibeSchedule
    2014-07-27 11:50 - 2013-09-13 18:37 - 00003028 _____ () C:\WINDOWS\System32\Tasks\ASUS USB Charger Plus
    2014-07-27 11:50 - 2013-09-13 18:37 - 00003004 _____ () C:\WINDOWS\System32\Tasks\ASUS Splendid ColorU
    2014-07-27 11:50 - 2013-09-13 18:37 - 00002988 _____ () C:\WINDOWS\System32\Tasks\ASUS Splendid ACMON
    2014-07-27 11:50 - 2013-09-13 18:28 - 00003540 _____ () C:\WINDOWS\System32\Tasks\ASUS Smart Gesture Launcher
    2014-07-27 11:49 - 2014-04-01 23:10 - 00000000 ___RD () C:\Users\simone\Dropbox
    2014-07-27 11:49 - 2014-03-31 23:05 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Dropbox
    2014-07-27 11:49 - 2014-01-13 00:39 - 00001160 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2014-07-27 11:48 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
    2014-07-27 02:24 - 2014-01-13 00:39 - 00001164 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    2014-07-27 01:37 - 2014-01-13 18:41 - 00000978 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
    2014-07-27 00:13 - 2014-01-13 00:55 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1133505190-2844704603-3595659071-1001
    2014-07-26 23:47 - 2014-07-26 23:46 - 17289940 _____ (Malwarebytes Corporation ) C:\Users\simone\Downloads\mbam-setup-2.0.2.1012.exe
    2014-07-26 23:39 - 2014-07-26 23:39 - 00002406 _____ () C:\WINDOWS\PFRO.log
    2014-07-26 23:39 - 2014-01-14 19:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
    2014-07-26 23:39 - 2014-01-14 19:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
    2014-07-26 23:39 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
    2014-07-26 23:38 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
    2014-07-26 23:34 - 2014-07-26 23:01 - 00000000 ____D () C:\AdwCleaner
    2014-07-26 23:05 - 2014-03-12 13:36 - 00000000 ____D () C:\Users\simone\AppData\Roaming\uTorrent
    2014-07-26 23:05 - 2014-01-13 12:01 - 00000000 ____D () C:\Users\simone\AppData\Roaming\vlc
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\Users\simone\AppData\Local\Adobe
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\File Repair
    2014-07-26 22:18 - 2014-07-26 22:18 - 00000000 ____D () C:\Program Files (x86)\Repair File
    2014-07-26 22:18 - 2014-01-13 00:20 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Adobe
    2014-07-26 22:17 - 2014-07-26 22:17 - 01319328 _____ (File Repair ) C:\Users\simone\Downloads\file-repair-setup.exe
    2014-07-26 22:13 - 2014-07-26 22:13 - 00000000 ____D () C:\Users\simone\AppData\Roaming\MPC-HC
    2014-07-26 22:12 - 2014-07-26 22:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
    2014-07-26 22:12 - 2014-07-26 22:11 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
    2014-07-26 22:09 - 2014-07-26 22:08 - 27992636 _____ ( ) C:\Users\simone\Downloads\K-Lite_Codec_Pack_1060_Full.exe
    2014-07-26 20:37 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
    2014-07-26 15:38 - 2014-01-13 00:17 - 00000000 ____D () C:\Users\simone\AppData\Local\Packages
    2014-07-26 15:11 - 2014-05-11 11:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
    2014-07-26 14:56 - 2014-07-24 22:11 - 00000000 ____D () C:\Users\simone\AppData\Local\Battle.net
    2014-07-26 12:00 - 2014-03-18 21:06 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
    2014-07-26 12:00 - 2013-09-13 18:34 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
    2014-07-26 11:58 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
    2014-07-25 15:31 - 2014-07-21 02:42 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Mp3tag
    2014-07-25 12:12 - 2014-04-01 23:09 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
    2014-07-24 23:12 - 2014-07-24 23:12 - 00000000 ____D () C:\Users\simone\AppData\Local\Blizzard
    2014-07-24 23:12 - 2014-07-24 22:18 - 00000000 ____D () C:\Program Files (x86)\Hearthstone
    2014-07-24 22:18 - 2014-07-24 22:18 - 00001217 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HearthstoneHearthstone.lnk
    2014-07-24 22:18 - 2014-07-24 22:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
    2014-07-24 22:17 - 2014-07-24 22:11 - 00000000 ____D () C:\Users\simone\AppData\Roaming\Battle.net
    2014-07-24 22:11 - 2014-07-24 22:11 - 00001180 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.netBattle.net.lnk
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\Users\simone\AppData\Local\Blizzard Entertainment
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\ProgramData\Blizzard Entertainment
    2014-07-24 22:11 - 2014-07-24 22:11 - 00000000 ____D () C:\Program Files (x86)\Battle.net
    2014-07-24 22:06 - 2014-07-24 22:05 - 00000000 ____D () C:\ProgramData\Battle.net
    2014-07-24 20:07 - 2014-01-14 19:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
    2014-07-24 01:56 - 2014-07-24 01:56 - 00000000 ____D () C:\Users\simone\AppData\Local\eMule
    2014-07-24 01:56 - 2014-07-24 01:56 - 00000000 ____D () C:\ProgramData\eMule
    2014-07-24 00:34 - 2013-11-14 09:29 - 01813012 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
    2014-07-24 00:34 - 2013-11-14 09:14 - 00803564 _____ () C:\WINDOWS\system32\perfh010.dat
    2014-07-24 00:34 - 2013-11-14 09:14 - 00156688 _____ () C:\WINDOWS\system32\perfc010.dat
    2014-07-23 17:34 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
    2014-07-22 12:58 - 2014-07-22 12:58 - 00261056 _____ (BitDefender) C:\WINDOWS\system32\Drivers\avchv.sys
    2014-07-22 12:54 - 2014-01-14 17:01 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
    2014-07-21 02:52 - 2014-07-21 02:52 - 00001189 _____ () C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mp3tag.lnk
    2014-07-21 02:42 - 2014-07-21 02:40 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
    2014-07-21 02:31 - 2014-07-21 02:31 - 02672432 _____ () C:\Users\simone\Downloads\mp3tagv261asetup.exe
    2014-07-20 15:06 - 2014-07-20 15:06 - 00000000 ____D () C:\Users\simone\Documents\The Forbidden Land
    2014-07-20 12:26 - 2014-04-18 00:59 - 00000000 ____D () C:\ProgramData\Oracle
    2014-07-20 12:25 - 2014-07-20 12:25 - 00004379 _____ () C:\WINDOWS\SysWOW64\jupdate-1.7.0_65-b20.log
    2014-07-20 12:25 - 2014-07-20 12:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
    2014-07-20 12:25 - 2014-04-18 00:58 - 00000000 ____D () C:\Program Files (x86)\Java
    2014-07-19 23:29 - 2014-07-19 23:23 - 00002900 _____ () C:\WINDOWS\system32\lic2.xml26814
    2014-07-17 13:15 - 2014-02-20 00:17 - 00001456 _____ () C:\Users\simone\AppData\Local\Adobe Salva per Web e dispositivi 12.0 Prefs
    2014-07-15 16:43 - 2014-07-15 13:19 - 00000132 _____ () C:\Users\simone\AppData\Roaming\Adobe PNG Format CS5 Prefs
    2014-07-15 13:25 - 2014-07-15 13:24 - 00001099 _____ () C:\Users\simone\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ToYcon.lnk
    2014-07-15 13:21 - 2014-07-15 13:21 - 00000000 ____D () C:\Program Files\ToYcon
    2014-07-15 13:18 - 2014-07-15 13:18 - 00729736 _____ ( ) C:\Users\simone\Downloads\toycon.exe
    2014-07-13 01:15 - 2014-07-13 01:15 - 00065920 _____ () C:\Users\simone\Downloads\Aria.the.Natural.-.Ep..01-13.torrent
    2014-07-13 01:14 - 2014-07-13 01:14 - 00065746 _____ () C:\Users\simone\Downloads\Aria.the.Natural.-.Ep.14-26.torrent
    2014-07-12 23:33 - 2014-07-12 23:31 - 42353436 _____ () C:\Users\simone\Downloads\05896-CSR-Racing-v1-8-0.apk
    2014-07-12 23:28 - 2014-07-12 23:21 - 248018577 _____ () C:\Users\simone\Downloads\05896-cache-CSR-Racing-v1-8-01.zip
    2014-07-12 16:24 - 2014-07-12 16:15 - 00000000 ____D () C:\Users\simone\Downloads\chrome-youtube-downloader-2.6.20
    2014-07-12 14:18 - 2014-07-09 13:04 - 00000417 _____ () C:\Users\simone\Desktop\acquisti.txt
    2014-07-12 01:32 - 2014-03-20 00:42 - 00000000 ____D () C:\Users\simone\dwhelper
    2014-07-11 13:23 - 2014-07-11 13:23 - 00653004 _____ () C:\Users\simone\Downloads\Street Fighter II V S01e01-29.torrent
    2014-07-11 03:02 - 2014-07-20 12:25 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
    2014-07-11 02:56 - 2014-07-20 12:25 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
    2014-07-11 02:56 - 2014-07-20 12:25 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
    2014-07-11 02:55 - 2014-07-20 12:25 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
    2014-07-10 18:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
    2014-07-10 18:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
    2014-07-10 18:17 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
    2014-07-10 18:04 - 2014-04-17 13:09 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
    2014-07-10 18:01 - 2014-05-21 19:43 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
    2014-07-10 17:57 - 2013-04-26 01:13 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
    2014-07-10 13:26 - 2013-08-22 16:44 - 00482744 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
    2014-07-10 13:24 - 2014-07-10 13:24 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
    2014-07-10 13:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
    2014-07-10 13:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2014-07-10 13:24 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
    2014-07-10 13:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
    2014-07-10 13:23 - 2014-01-15 18:09 - 00000000 ____D () C:\WINDOWS\system32\MRT
    2014-07-10 13:21 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
    2014-07-10 13:20 - 2014-03-29 01:03 - 00000000 ____D () C:\ProgramData\Microsoft Help
    2014-07-10 13:20 - 2014-01-15 18:09 - 96441528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2014-07-10 13:18 - 2014-01-14 17:01 - 00427360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
    2014-07-10 13:17 - 2014-07-10 13:17 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
    2014-07-10 13:17 - 2014-05-06 15:36 - 00029208 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 01041168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 00307344 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
    2014-07-10 13:17 - 2014-01-14 17:01 - 00224896 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 00093568 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 00092008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 00079184 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
    2014-07-10 13:17 - 2014-01-14 17:01 - 00065776 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
    2014-07-10 13:10 - 2013-11-14 09:17 - 00000000 ____D () C:\Program Files\Windows Journal
    2014-07-10 06:16 - 2014-07-23 16:57 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
    2014-07-10 06:03 - 2014-07-23 16:57 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
    2014-07-10 05:33 - 2014-07-23 16:57 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
    2014-07-09 13:04 - 2014-07-09 13:04 - 00000000 ____D () C:\Users\simone\Documents\Visual Studio 2005
    2014-07-09 13:04 - 2014-03-29 01:04 - 00000000 ____D () C:\Users\simone\AppData\Local\Microsoft Help
    2014-07-09 01:10 - 2014-07-09 01:10 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
    2014-07-09 01:10 - 2014-07-09 01:10 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
    2014-07-09 01:10 - 2014-07-09 01:10 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
    2014-07-09 01:05 - 2014-07-09 01:05 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSReset.exe
    2014-07-08 20:39 - 2014-01-13 18:41 - 00003866 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
    2014-07-01 00:45 - 2014-07-09 01:12 - 00688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
    2014-06-28 09:48 - 2014-07-09 01:12 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
    2014-06-28 09:07 - 2014-07-09 01:12 - 00385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
    2014-06-27 15:25 - 2014-06-27 15:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
    2014-06-27 15:25 - 2014-06-27 15:25 - 00000000 ____D () C:\Program Files\7-Zip

    Files to move or delete:
    ====================
    C:\ProgramData\SetStretch.exe
    C:\ProgramData\SetStretch.VBS


    Some content of TEMP:
    ====================
    C:\Users\simone\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpux4_2q.dll
    C:\Users\simone\AppData\Local\Temp\Quarantine.exe
    C:\Users\simone\AppData\Local\Temp\SHSetup.exe


    ==================== Bamital & volsnap Check =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\System32\winlogon.exe => File is digitally signed
    C:\Windows\System32\wininit.exe => File is digitally signed
    C:\Windows\explorer.exe => File is digitally signed
    C:\Windows\SysWOW64\explorer.exe => File is digitally signed
    C:\Windows\System32\svchost.exe => File is digitally signed
    C:\Windows\SysWOW64\svchost.exe => File is digitally signed
    C:\Windows\System32\services.exe => File is digitally signed
    C:\Windows\System32\User32.dll => File is digitally signed
    C:\Windows\SysWOW64\User32.dll => File is digitally signed
    C:\Windows\System32\userinit.exe => File is digitally signed
    C:\Windows\SysWOW64\userinit.exe => File is digitally signed
    C:\Windows\System32\rpcss.dll => File is digitally signed
    C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2014-07-26 02:01

    ==================== End Of Log ============================


    -Addition
    SPOILER (clicca per visualizzare)
    Additional scan result of Farbar Recovery Scan Tool (x64) Version: 26-07-2014
    Ran by Simone at 2014-07-27 11:55:25
    Running from C:\Users\simone\Downloads
    Boot Mode: Normal
    ==========================================================


    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
    AV: Bitdefender Antivirus Free Edition (Enabled - Up to date) {9B5F5313-CAF9-DD97-C460-E778420237B4}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
    AS: Bitdefender Antivirus Free Edition (Enabled - Up to date) {203EB2F7-ECC3-D219-FED0-DC0A39857D09}

    ==================== Installed Programs ======================

    (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32126 - BitTorrent Inc.)
    7-Zip 9.25 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0925-000001000000}) (Version: 9.25.00.0 - Igor Pavlov)
    Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
    Adobe Reader XI (11.0.07) - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
    ASUS FaceKey (HKLM-x32\...\{ACE24C70-743B-43B0-8045-817FF050800B}) (Version: 4.1.0.0 - )
    ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.3 - ASUS)
    ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.4 - ASUS)
    ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 2.2.0 - ASUS)
    ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0010 - ASUS)
    ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 2.1.5 - ASUS)
    ASUS Video DSP (HKLM-x32\...\{B80DB514-46E5-43AA-B68C-1EBBF5CF7D34}) (Version: 1.0.000 - )
    ASUS WebStorage Sync Agent (HKLM-x32\...\ASUS WebStorage) (Version: 1.1.18.159 - ASUS Cloud Corporation)
    ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5230.52 - CyberLink Corp.)
    ASUSDVD (x32 Version: 10.0.5230.52 - CyberLink Corp.) Hidden
    AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.309 - ASUSTEK)
    ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0030 - ASUS)
    aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)
    avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
    Azteca (x32 Version: 2.2.0.97 - WildTangent) Hidden
    Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
    Bejeweled 3 (x32 Version: 2.2.0.97 - WildTangent) Hidden
    Bitdefender Antivirus Free Edition (HKLM\...\BitDefender Gonzales) (Version: 1.0.21.1099 - Bitdefender)
    Custom Engineering - Driver Installation Wizard (HKLM-x32\...\{E41F83B6-DA02-4DB6-9D90-2F7C4DA1338F}) (Version: 2.31 - Custom Engineering S.p.A.)
    Cut the Rope (x32 Version: 3.0.2.38 - WildTangent) Hidden
    CyberLink LabelPrint 2.5 (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.5415 - CyberLink Corp.)
    CyberLink LabelPrint 2.5 (x32 Version: 2.5.5415 - CyberLink Corp.) Hidden
    CyberLink Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 7.0.0.3625 - CyberLink Corp.)
    CyberLink Power2Go (x32 Version: 7.0.0.3625 - CyberLink Corp.) Hidden
    D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
    Dropbox (HKCU\...\Dropbox) (Version: 2.10.3 - Dropbox, Inc.)
    File Repair (HKLM-x32\...\File Repair_is1) (Version: - File Repair)
    Fotogalerie (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Giochi WildTangent (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
    Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
    Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3308 - Intel Corporation)
    Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
    Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
    Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.650 - Oracle)
    Java Auto Updater (x32 Version: 2.1.65.20 - Oracle, Inc.) Hidden
    K-Lite Codec Pack 10.6.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.6.0 - )
    Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
    Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
    Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
    Microsoft Office Access MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
    Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Excel 2007 Help - Aggiornamento (KB963678) (HKLM-x32\...\{90120000-0016-0410-0000-0000000FF1CE}_ENTERPRISE_{9F57BDED-B51B-4D2F-B360-5B4EFAAF0F1A}) (Version: - Microsoft)
    Microsoft Office Excel MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
    Microsoft Office Groove MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office InfoPath MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office OneNote MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Outlook 2007 Help - Aggiornamento (KB963677) (HKLM-x32\...\{90120000-001A-0410-0000-0000000FF1CE}_ENTERPRISE_{2278E02A-AB15-4BF7-B2B4-5C0EEB4B7EEB}) (Version: - Microsoft)
    Microsoft Office Outlook MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Powerpoint 2007 Help - Aggiornamento (KB963669) (HKLM-x32\...\{90120000-0018-0410-0000-0000000FF1CE}_ENTERPRISE_{C76C02F1-B07F-4974-876A-A18DEC9887C8}) (Version: - Microsoft)
    Microsoft Office PowerPoint MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Proofing (Italian) 2007 (x32 Version: 12.0.4518.1018 - Microsoft Corporation) Hidden
    Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version: - Microsoft) Hidden
    Microsoft Office Publisher MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared 64-bit MUI (Italian) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Shared MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Office Word 2007 Help - Aggiornamento (KB963665) (HKLM-x32\...\{90120000-001B-0410-0000-0000000FF1CE}_ENTERPRISE_{E5B82DB3-DD7D-4C45-BC5E-09864B26F9BC}) (Version: - Microsoft)
    Microsoft Office Word MUI (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
    Microsoft SkyDrive (HKCU\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
    Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Mozilla Firefox 31.0 (x86 it) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 it)) (Version: 31.0 - Mozilla)
    Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0 - Mozilla)
    Mp3tag v2.61a (HKLM-x32\...\Mp3tag) (Version: v2.61a - Florian Heidenreich)
    MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
    MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
    MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
    MyBitCast 2.0 (HKLM-x32\...\MyBitCast) (Version: 2.0 - ASUS)
    Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.7 - Pando Networks Inc.)
    Peggle (x32 Version: 2.2.0.95 - WildTangent) Hidden
    Penguins! (x32 Version: 2.2.0.98 - WildTangent) Hidden
    Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Photo Gallery (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
    Raccolta foto (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.14.327.2013 - Realtek)
    Realtek PCIE Card Reader (HKLM-x32\...\{C9661090-C134-46E8-90B2-76D72355C2A6}) (Version: 6.2.9200.27038 - Realtek Semiconductor Corp.)
    SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.4.103.0 - SAMSUNG Electronics Co., Ltd.)
    Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
    Tales of Lagoona (x32 Version: 2.2.0.110 - WildTangent) Hidden
    Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
    Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft)
    Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{A024FC7B-77DE-45DE-A058-1C049A17BFB3}) (Version: - Microsoft)
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
    Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{CB68A5B0-3508-4193-AEB9-AF636DAECE0F}) (Version: - Microsoft)
    Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{E9A82945-BA29-4EE8-8F2A-2F49545E9CF2}) (Version: - Microsoft)
    Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (HKLM-x32\...\{90120000-001A-0410-0000-0000000FF1CE}_ENTERPRISE_{9D702FFD-3C2B-44D0-9B8B-CA1A30CA555B}) (Version: - Microsoft)
    Update for Microsoft Office Outlook 2007 (KB2863811) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{53DEC068-4690-4F6B-9946-7D21EF02236B}) (Version: - Microsoft)
    Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2883030) 32-Bit Edition (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{F5DCAB53-C2FD-4E5A-8C83-0F37485E5E89}) (Version: - Microsoft)
    Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
    VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
    WildTangent Games App (x32 Version: 4.0.11.2 - WildTangent) Hidden
    Windows Live (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live Communications Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
    Windows Live Essentials (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live Installer (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live Photo Common (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live PIMT Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live SOXE (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live UX Platform (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
    WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
    WinRAR 5.10 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.1 - win.rar GmbH)

    ==================== Custom CLSID (selected items): ==========================

    (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\simone\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-1133505190-2844704603-3595659071-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\simone\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll (Dropbox, Inc.)

    ==================== Restore Points =========================

    10-07-2014 11:07:40 Windows Update
    20-07-2014 10:23:20 Installed Java 7 Update 65
    23-07-2014 15:31:54 Windows Update
    26-07-2014 20:53:35 Installed SpyHunter

    ==================== Hosts content: ==========================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

    ==================== Scheduled Tasks (whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

    Task: {012D9637-910D-4ACC-B1E5-FCABFD4C3ED8} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-07-10] (AVAST Software)
    Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
    Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
    Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
    Task: {20D945BA-5BAF-47AC-AA91-8C9C007F4240} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
    Task: {212E5CED-11EA-4D9A-8450-717F20530C8E} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-06-03] (ASUSTeK Computer Inc.)
    Task: {21EB521B-F224-4603-972D-E74A0EA7E1F0} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2013-06-28] (AsusTek)
    Task: {29A11D5B-456D-41C2-A9BF-A4168B561213} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-05-21] (ASUSTeK Computer Inc.)
    Task: {2B332CD4-E63A-4A46-9761-B989D8B300CD} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-06-19] (ASUS)
    Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
    Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
    Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
    Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
    Task: {4A4F420C-0919-4D39-A87F-5DDE99A31381} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
    Task: {67771314-121A-47F4-9557-594B39330B98} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
    Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
    Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
    Task: {6F2792F4-F9B0-4AB0-923C-6A84BBC11BC9} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-10] (Microsoft Corporation)
    Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
    Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
    Task: {79904A4D-6388-4B70-ADCC-CF54C12362E0} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2012-09-18] (ASUSTek Computer Inc.)
    Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
    Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %­windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
    Task: {99EFD7B2-E892-44ED-B2CB-FCEED8345488} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-06-03] (ASUS)
    Task: {9F9DE995-7BFF-4D65-9A94-0EC5D6FB49CA} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-01-04] ()
    Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
    Task: {ADAA6CCD-FA89-43AE-A542-A7A58F4B75A5} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
    Task: {B715B16F-7A71-4AFA-967D-329AB271EB74} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
    Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
    Task: {D227681A-EE3D-44A8-9D8A-9D5C9F8C8713} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
    Task: {D6FD82E4-79CD-4963-B126-3CB33D2833FD} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
    Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
    Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
    Task: {DC7D4A05-961D-407C-AED6-0B6E2618B050} - System32\Tasks\AutoKMS => C:\WINDOWS\AutoKMS\AutoKMS.exe
    Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
    Task: {F1B32D26-65F3-4BCC-95F3-26BA87BD1792} - \UpdaterEX No Task File <==== ATTENTION
    Task: {F5B52353-C0C9-4365-8E81-EBACB32EB821} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-13] (Google Inc.)
    Task: {F7F92791-1BDD-4819-A254-AEC460481C25} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-05-21] (ASUSTeK Computer Inc.)
    Task: {FB53EF8C-1FEB-40DE-83D4-A35027163478} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
    Task: {FDB2CAA1-05D8-42C4-9689-F8DDFBF7BB2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-01-13] (Google Inc.)
    Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Loaded Modules (whitelisted) =============

    2014-05-29 15:14 - 2013-03-19 12:07 - 00696632 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\sqlite3.dll
    2014-05-29 15:14 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Antivirus Free Edition\BDMetrics.dll
    2012-12-19 08:10 - 2012-12-19 08:10 - 00072192 _____ () C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
    2013-06-19 21:49 - 2013-06-19 21:49 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
    2014-07-10 13:17 - 2014-07-10 13:17 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
    2014-07-26 21:22 - 2014-07-26 21:22 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14072602\algo.dll
    2014-07-27 11:54 - 2014-07-27 11:54 - 02795008 _____ () C:\Program Files\AVAST Software\Avast\defs\14072700\algo.dll
    2013-09-13 18:20 - 2012-06-25 11:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
    2012-05-24 22:19 - 2012-05-24 22:19 - 00627216 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
    2011-03-09 15:21 - 2011-03-09 15:21 - 00013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
    2014-07-10 13:17 - 2014-07-10 13:17 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
    2014-07-27 11:49 - 2014-07-27 11:49 - 00043008 _____ () c:\users\simone\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpux4_2q.dll
    2013-10-19 01:55 - 2013-10-19 01:55 - 25100288 _____ () C:\Users\simone\AppData\Roaming\Dropbox\bin\libcef.dll
    2014-07-18 12:29 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
    2014-07-18 12:29 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
    2014-07-18 12:29 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
    2014-07-18 12:29 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
    2014-07-18 12:29 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
    2013-04-29 15:17 - 2013-04-29 15:17 - 00587264 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll

    ==================== Alternate Data Streams (whitelisted) =========

    (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

    AlternateDataStreams: C:\Users\simone\SkyDrive:ms-properties
    AlternateDataStreams: C:\Users\simone\Downloads\file-repair-setup.exe:BDU
    AlternateDataStreams: C:\Users\simone\Downloads\FRST64.exe:BDU
    AlternateDataStreams: C:\Users\simone\Downloads\K-Lite_Codec_Pack_1060_Full.exe:BDU
    AlternateDataStreams: C:\Users\simone\Downloads\mbam-setup-2.0.2.1012.exe:BDU
    AlternateDataStreams: C:\Users\simone\Downloads\mp3tagv261asetup.exe:BDU
    AlternateDataStreams: C:\Users\simone\Downloads\toycon.exe:BDU

    ==================== Safe Mode (whitelisted) ===================

    (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (whitelisted) =============

    (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


    ==================== MSCONFIG/TASK MANAGER disabled items =========

    (Currently there is no automatic fix for this section.)

    MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
    MSCONFIG\startupreg: ASUSPRP => "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
    MSCONFIG\startupreg: ASUSWebStorage => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
    MSCONFIG\startupreg: DisableS3S4 => c:\windows\temp\DisableS3S464\sethigh.cmd
    MSCONFIG\startupreg: HotKeysCmds => "C:\WINDOWS\system32\hkcmd.exe"
    MSCONFIG\startupreg: IgfxTray => "C:\WINDOWS\system32\igfxtray.exe"
    MSCONFIG\startupreg: mcpltui_exe => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
    MSCONFIG\startupreg: RemoteControl10 => "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
    MSCONFIG\startupreg: RtHDVBg => "C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /MAXX4
    MSCONFIG\startupreg: RTHDVCPL => "C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s

    ==================== Faulty Device Manager Devices =============


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (07/27/2014 02:28:30 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Simone)
    Description: Attivazione dell'app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 non riuscita con errore: -2144927141 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

    Error: (07/26/2014 11:03:45 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Il programma adwcleaner_3.215.exe versione 3.2.1.5 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo.

    ID processo: 730

    Ora di avvio: 01cfa914aada0bc7

    Ora di chiusura: 4294967295

    Percorso applicazione: C:\Users\simone\Downloads\adwcleaner_3.215.exe

    ID segnalazione: 537ff362-1508-11e4-beb3-d850e637cfc5

    Nome completo pacchetto che ha generato l'errore:

    ID applicazione relativo al pacchetto che ha generato l'errore:

    Error: (07/26/2014 10:53:34 PM) (Source: MsiInstaller) (EventID: 1002) (User: Simone)
    Description: Valore mancante o imprevisto (nome: "PackageCode", valore: "GUID") nella chiave "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

    Error: (07/26/2014 10:52:55 PM) (Source: MsiInstaller) (EventID: 1002) (User: Simone)
    Description: Valore mancante o imprevisto (nome: "PackageCode", valore: "GUID") nella chiave "HKLM\Software\Classes\Installer\Products\B476F94747628E7478C965620AB6A219".

    Error: (07/26/2014 10:18:02 PM) (Source: .NET Runtime) (EventID: 1022) (User: )
    Description: .NET Runtime version 4.0.30319.34014 - Errore durante l'inizializzazione dell'infrastruttura di connessione dell'API di profilo. Questo processo non consentirà la connessione di un profiler. HRESULT: 0x80004005. ID processo (decimale): 1776. ID messaggio: [0x2509].

    Error: (07/26/2014 04:30:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Simone)
    Description: Attivazione dell'app 41259MassimilianoFrigerio.SmartTVItalia_pzhdgb3dznxna!App non riuscita con errore: -2147023170 Per ulteriori informazioni, consulta il registro Microsoft-Windows-TWinUI/Operativo.

    Error: (07/26/2014 04:30:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: Simone)
    Description: Il pacchetto 41259MassimilianoFrigerio.SmartTVItalia_1.3.0.1_x64__pzhdgb3dznxna+App è stato interrotto perché la sospensione richiedeva troppo tempo.

    Error: (07/26/2014 03:36:48 PM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Nome dell'applicazione che ha generato l'errore: AnimeItalia.exe, versione: 1.0.0.0, timestamp: 0x52dff6be
    Nome del modulo che ha generato l'errore: twinapi.appcore.dll, versione: 6.3.9600.17195, timestamp: 0x53894a69
    Codice eccezione: 0xc000027b
    Offset errore 0x00000000000547ac
    ID processo che ha generato l'errore: 0x1ea4
    Ora di avvio dell'applicazione che ha generato l'errore: 0xAnimeItalia.exe0
    Percorso dell'applicazione che ha generato l'errore: AnimeItalia.exe1
    Percorso del modulo che ha generato l'errore: AnimeItalia.exe2
    ID segnalazione: AnimeItalia.exe3
    Nome completo pacchetto che ha generato l'errore: AnimeItalia.exe4
    ID applicazione relativo al pacchetto che ha generato l'errore: AnimeItalia.exe5

    Error: (07/26/2014 03:20:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Il programma YouTube.exe versione 1.0.0.0 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo.

    ID processo: 1bb8

    Ora di avvio: 01cfa8d3ce776742

    Ora di chiusura: 30

    Percorso applicazione: C:\Program Files\WindowsApps\16903ArthurVY.YouTubeforWindows8_3.4.0.12_neutral__rcaetwb0seggj\YouTube.exe

    ID segnalazione: 8e879b87-14c7-11e4-beb3-d850e637cfc5

    Nome completo pacchetto che ha generato l'errore: 16903ArthurVY.YouTubeforWindows8_3.4.0.12_neutral__rcaetwb0seggj

    ID applicazione relativo al pacchetto che ha generato l'errore: App

    Error: (07/26/2014 02:54:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
    Description: Il programma AvastUI.exe versione 9.0.2021.515 non interagisce più con Windows ed è stato chiuso. Per vedere se sono disponibili ulteriori informazioni sul problema, verificare la cronologia del problema in Centro operativo nel Pannello di controllo.

    ID processo: ca4

    Ora di avvio: 01cfa8ceaf8ff030

    Ora di chiusura: 60000

    Percorso applicazione: C:\Program Files\AVAST Software\Avast\AvastUI.exe

    ID segnalazione: cb279896-14c3-11e4-beb3-d850e637cfc5

    Nome completo pacchetto che ha generato l'errore:

    ID applicazione relativo al pacchetto che ha generato l'errore:


    System errors:
    =============
    Error: (07/27/2014 02:28:25 AM) (Source: DCOM) (EventID: 10010) (User: Simone)
    Description: Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca

    Error: (07/27/2014 00:30:45 AM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni predefinite del computerLocaleAttivazione{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)41259MassimilianoFrigerio.SmartTVItalia_1.3.0.1_x64__pzhdgb3dznxnaS-1-15-2-3180871047-1817075384-2120617525-4193807997-2053773910-2439855780-1816463015

    Error: (07/26/2014 11:38:21 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: Timeout (30000 millisecondi) durante l'attesa della risposta alla transazione dal servizio gzserv.

    Error: (07/26/2014 09:52:34 PM) (Source: DCOM) (EventID: 10010) (User: Simone)
    Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

    Error: (07/26/2014 03:42:27 PM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni predefinite del computerLocaleAttivazione{9BA05972-F6A8-11CF-A442-00A0C90A8F39}{9BA05972-F6A8-11CF-A442-00A0C90A8F39}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)41259MassimilianoFrigerio.SmartTVItalia_1.3.0.1_x64__pzhdgb3dznxnaS-1-15-2-3180871047-1817075384-2120617525-4193807997-2053773910-2439855780-1816463015

    Error: (07/26/2014 03:38:59 PM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni predefinite del computerLocaleAttivazione{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)41259MassimilianoFrigerio.SmartTVItalia_1.3.0.1_x64__pzhdgb3dznxnaS-1-15-2-3180871047-1817075384-2120617525-4193807997-2053773910-2439855780-1816463015

    Error: (07/26/2014 03:19:21 PM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni specifiche dell'applicazioneLocaleAttivazione{0C0A3666-30C9-11D0-8F20-00805F2CD064}{9209B1A6-964A-11D0-9372-00A0C9034910}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)16903ArthurVY.YouTubeforWindows8_3.4.0.12_neutral__rcaetwb0seggjS-1-15-2-972692338-2311998795-184656705-2172347818-2632487528-642026465-2084390077

    Error: (07/26/2014 03:16:53 PM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni predefinite del computerLocaleAttivazione{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)16903ArthurVY.YouTubeforWindows8_3.4.0.12_neutral__rcaetwb0seggjS-1-15-2-972692338-2311998795-184656705-2172347818-2632487528-642026465-2084390077

    Error: (07/26/2014 03:16:53 PM) (Source: DCOM) (EventID: 10016) (User: Simone)
    Description: impostazioni predefinite del computerLocaleAttivazione{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}SimoneSimoneS-1-5-21-1133505190-2844704603-3595659071-1001LocalHost (tramite LRPC)16903ArthurVY.YouTubeforWindows8_3.4.0.12_neutral__rcaetwb0seggjS-1-15-2-972692338-2311998795-184656705-2172347818-2632487528-642026465-2084390077

    Error: (07/26/2014 11:54:11 AM) (Source: DCOM) (EventID: 10010) (User: Simone)
    Description: {1B1F472E-3221-4826-97DB-2C2324D389AE}


    Microsoft Office Sessions:
    =========================

    ==================== Memory info ===========================

    Percentage of memory in use: 47%
    Total physical RAM: 3981.74 MB
    Available physical RAM: 2108.38 MB
    Total Pagefile: 4685.74 MB
    Available Pagefile: 2386.95 MB
    Total Virtual: 131072 MB
    Available Virtual: 131071.78 MB

    ==================== Drives ================================

    Drive c: (OS) (Fixed) (Total:185.96 GB) (Free:123.26 GB) NTFS ==>[System with boot components (obtained from reading drive)]
    Drive d: (Data) (Fixed) (Total:258.34 GB) (Free:256.22 GB) NTFS
    Drive f: (Simone) (Fixed) (Total:931.48 GB) (Free:836.61 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 466 GB) (Disk ID: 57788C0B)

    Partition: GPT Partition Type.

    ========================================================
    Disk: 1 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 6CC1604F)
    Partition 1: (Not Active) - (Size=931 GB) - (Type=07 NTFS)

    ==================== End Of Log ============================

    La scansione fatta con avast nn trova nessuna minaccia però un paio di settimane fa feci una scansione e ne trovo un bel po'
     
    .
  10. vicky67
    Posted on 27/7/2014, 15:34
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Non mi hai detto se i download corrotti riguardano anche altri files.

    Disinstalla bitdefender non può coesistere con avas t.
    Poi cancella in C:\program data i 2 files setstretch
    Effettua una scansione con malwareby tes antimalware ed allrga il log

    Se dopo queste operazioni i filmati danno ancora problemi disinstalla vlc e scarica dal sito ufficiale l'ultima versione.
     
    .
  11. lachitarra96
    Posted on 27/7/2014, 15:38
     
    .

    Principiante

    Group
    Member
    Posts
    19
    Location
    Sicilia

    Status
    Offline
    ok ora provo (se riesco), ops dimenticato :D comunque anche altri download tipo musica e archivi sono danneggiati a volte
     
    .
  12. vicky67
    Posted on 27/7/2014, 17:43
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Fai anche quest'altra operazione:
    Prendi dei file danneggiati e falli scansionare su virustotal.
    in caso vengono rilevate infezioni allegami il log.
     
    .
  13. lachitarra96
    Posted on 27/7/2014, 22:41
     
    .

    Principiante

    Group
    Member
    Posts
    19
    Location
    Sicilia

    Status
    Offline
    Quindi ecco il log di malwerebytes
    SPOILER (clicca per visualizzare)
    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Data scansione: 27/07/2014
    Ora scansione: 17:03:20
    File di log: log.txt
    Amministratore: Si

    Versione: 2.00.2.1012
    Database malware: v2014.07.27.05
    Database rootkit: v2014.07.17.01
    Licenza: Free
    Protezione da malware: Disattivata
    Protezione da siti web nocivi: Disattivata
    Self-protection: Disattivata

    SO: Windows 8.1
    CPU: x64
    File system: NTFS
    Utente: Simone

    Tipo di scansione: Scansione elementi nocivi
    Risultati: Completata
    Elementi analizzati: 296423
    Tempo impiegato: 15 min, 47 sec

    Memoria: Attivata
    Esecuzioni automatiche: Attivata
    File system: Attivata
    Archivi compressi: Attivata
    Rootkit: Disattivata
    Heuristics: Attivata
    PUP: Attivata
    PUM: Attivata

    Processi: 0
    (No malicious items detected)

    Moduli: 0
    (No malicious items detected)

    Chiavi di registro: 1
    PUP.Optional.weDownload.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\The weDownload Manager, , [1a67b2f22a517cbafdf7df093fc39967],

    Valori di registro: 0
    (No malicious items detected)

    Dati di registro: 0
    (No malicious items detected)

    Cartelle: 2
    PUP.Optional.SoftwareUpdater.A, C:\Users\simone\AppData\Local\SwvUpdater, , [572aaafae39841f59a67ede014ee16ea],
    PUP.Optional.Updater.A, C:\Users\simone\AppData\Roaming\UpdaterEX\UpdateProc, , [f68bd6ce047763d3fed722a44eb4b34d],

    File: 8
    PUP.Optional.InstallCore, C:\Users\simone\Downloads\toycon.exe, , [6d14f9ab0f6caf878fe0f2b6be4612ee],
    PUP.Optional.SoftwareUpdater.A, C:\Users\simone\AppData\Local\SwvUpdater\Updater.xml, , [572aaafae39841f59a67ede014ee16ea],
    PUP.Optional.SoftwareUpdater.A, C:\Users\simone\AppData\Local\SwvUpdater\status.cfg, , [572aaafae39841f59a67ede014ee16ea],
    PUP.Optional.Bubbledock.A, C:\Users\simone\AppData\Roaming\Bubble Dock.boostrap.log, , [b2cf1193562578be7fe5a450c63cd62a],
    PUP.Optional.Updater.A, C:\Users\simone\AppData\Roaming\UpdaterEX\UpdateProc\config.dat, , [f68bd6ce047763d3fed722a44eb4b34d],
    PUP.Optional.Updater.A, C:\Users\simone\AppData\Roaming\UpdaterEX\UpdateProc\prod.dat, , [f68bd6ce047763d3fed722a44eb4b34d],
    PUP.Optional.Updater.A, C:\Users\simone\AppData\Roaming\UpdaterEX\UpdateProc\STTL.DAT, , [f68bd6ce047763d3fed722a44eb4b34d],
    PUP.Optional.Updater.A, C:\Users\simone\AppData\Roaming\UpdaterEX\UpdateProc\TTL.DAT, , [f68bd6ce047763d3fed722a44eb4b34d],

    Settori fisici: 0
    (No malicious items detected)


    (end)


    Per file danneggiati intendi i video? Perchè quelli superano le dimensioni consentite dal video
     
    .
  14. vicky67
    Posted on 28/7/2014, 06:46
     
    .

    Master Malware Expert

    Group
    Administrator
    Posts
    4,519
    Location
    Poggio Mirteto(RI)

    Status
    Anonymous
    Basta che ne carichi qualcuno anche archivi o altro, così escludiamo che quei file non siano stati infettati.
    fai anche una scansione con rogue killer e minitoolbox allegando i log.Esegui anche adwcleanet per la presenza di adware
    Hai disinstalla to e reinstallato vlc così escludiamo un altra possibile causa della non lettura dei video.
     
    .
  15. lachitarra96
    Posted on 28/7/2014, 21:05
     
    .

    Principiante

    Group
    Member
    Posts
    19
    Location
    Sicilia

    Status
    Offline
    Ecco il log di rogue killer
    SPOILER (clicca per visualizzare)
    RogueKiller V9.2.4.0 [Jul 11 2014] by Adlice Software
    mail : www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : www.adlice.com/softwares/roguekiller/
    Blog : www.adlice.com

    Operating System : Windows 8.1 (6.3.9200 ) 64 bits version
    Started in : Normal mode
    User : Simone [Admin rights]
    Mode : Scan -- Date : 07/28/2014 20:54:34

    ¤¤¤ Bad processes : 0 ¤¤¤

    ¤¤¤ Registry Entries : 10 ¤¤¤
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{CC0031BE-3F30-4287-A3A3-F765CECD7325} | DhcpNameServer : 40.52.1.201 40.52.1.203 -> Trovato
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{CC0031BE-3F30-4287-A3A3-F765CECD7325} | DhcpNameServer : 40.52.1.201 40.52.1.203 -> Trovato
    [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> Trovato
    [PUM.Policies] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> Trovato
    [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableTaskMgr : 0 -> Trovato
    [PUM.Policies] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | DisableRegistryTools : 0 -> Trovato
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Trovato
    [PUM.DesktopIcons] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Trovato
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {20D04FE0-3AEA-1069-A2D8-08002B30309D} : 1 -> Trovato
    [PUM.DesktopIcons] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel | {59031a47-3f72-44a7-89c5-5595fe6b30ee} : 1 -> Trovato

    ¤¤¤ Le attività pianificate : 0 ¤¤¤

    ¤¤¤ Files : 0 ¤¤¤

    ¤¤¤ HOSTS File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: NOT LOADED [0xc000036b]) ¤¤¤

    ¤¤¤ I browser Web : 0 ¤¤¤

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: HGST HTS545050A7E680 +++++
    --- User ---
    [MBR] 6d75e4daf265fd8cb5916371d9f5d770
    [BSP] b28f9ccf5e643f887d2ae2ce8da4c758 : Empty MBR Code
    Partition table:
    0 - [XXXXXX] UNKNOWN (0x0) [VISIBLE] Offset (sectors): 1 | Size: 2097151 MB
    User = LL1 ... OK
    User = LL2 ... OK

    +++++ PhysicalDrive1: WD Elements 10A8 USB Device +++++
    --- User ---
    [MBR] 91b64f52d8e95e6ea197731bd990c1e3
    [BSP] 1e192cf85af8a1f02581bb92e2fb8766 : Windows XP MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 953836 MB
    User = LL1 ... OK
    Error reading LL2 MBR! ([32] Richiesta non supportata. )


    Quindi ho scansionato i fle e nn sono infetti, ho fatto anche la scansione con adw cleaner, ed ho anche disinstallato e reistallato vlc ma nn vanno lo stesso e minitoolbox non sono riuscito a scaricarlo perchè avast lo blocca
     
    .
23 replies since 9/10/2013, 21:23   3079 views
  Share  
.
 
.
Rimozione malware
Create your forum and your blog! · Top Forum · Categories · Help · Status · Contacts · Powered by ForumFree