~ ZHPDiag v2017.9.28.169 Da Nicolas Coolman (2017/09/28)
~ iniziato da DF (Administrator) (2017/10/04 18:28:19)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Stato della versione: Version KO
~ Modalità: Chercare
~ Report: C:\Users\DF\Contacts\Desktop\ZHPDiag.txt
~ Report: C:\Users\DF\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Avvio del sistema: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) =>.Microsoft Corporation

---\\ Browser Internet (3) - 1s
~ MFIE: Mozilla Firefox 57.0 (x64 en-US)
~ MSIE: Internet Explorer v11.0.9600.18792
~ OBIE: Comodo Dragon v33.1.0.1

---\\ Informazioni sul prodotto Windows (4) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Software di protezione del sistema (1) - 1s
Malwarebytes version 3.2.2.2029 v3.2.2.2029 (Protection)

---\\ Software di ottimizzazione del sistema (1) - 2s
~ CCleaner v4.15 (Optimize)

---\\ Software di sorveglianza (2) - 2s
~ Adobe Flash Player 25 NPAPI (Surveillance)
~ Adobe Acrobat Reader DC (Surveillance)

---\\ Informazioni sul sistema (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4053.716 MB (41% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 277 GB (60%) free of 461 GB : OK =>.Disk Space

---\\ Connessione alla modalità sistema (3) - 0s
~ Computer Name: DF-PC
~ User Name: DF
~ Logged in as Administrator

---\\ Enumerazione delle unità disco (2) - 0s
~ Drive C: has 277 GB free of 461 GB (System)
~ Drive E: has GB free of 0 GB

---\\ Stato di Windows Security Center (12) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Ricerca di particolari file generico (25) - 5s
[MD5.38AE1B3C38FAEF56FE4907922F0385BA] - 18/07/2017 - (.Microsoft Corporation - Esplora risorse.) -- C:\Windows\Explorer.exe [3229696] =>.Microsoft Corporation
[MD5.C36BB659F08F046B139C8D1B980BF1AC] - 18/07/2017 - (.Microsoft Corporation - Processo host di Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [46080] =>.Microsoft Corporation
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 18/07/2017 - (.Microsoft Corporation - Applicazione di avvio di Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation
[MD5.2A7DBD3AD83E8F72530816A99DE67636] - 18/07/2017 - (.Microsoft Corporation - Internet Extensions per Win32.) -- C:\Windows\System32\wininet.dll [3241472] =>.Microsoft Corporation
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 18/07/2017 - (.Microsoft Corporation - Applicazione Accesso a Windows.) -- C:\Windows\System32\Winlogon.exe [455168] =>.Microsoft Corporation
[MD5.067FA52BFB59A56110A12312EF9AF243] - 18/07/2017 - (.Microsoft Corporation - Libreria gestione licenze software.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation
[MD5.492D07D79E7024CA310867B526D9636D] - 18/07/2017 - (.Microsoft Corporation - DLL API client DNS.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 18/07/2017 - (.Microsoft Corporation - DLL API client DNS.) -- C:\Windows\Syswow64\dnsapi.dll [270336] =>.Microsoft Corporation
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 18/07/2017 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.0DC2A9882540DEA4A55B08785E09D8FC] - 18/07/2017 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [496128] =>.Microsoft Corporation
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 18/07/2017 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 18/07/2017 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 18/07/2017 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation
[MD5.9B38580063D281A99E68EF5813022A5F] - 18/07/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [106496] =>.Microsoft Corporation
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 18/07/2017 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 18/07/2017 - (.Microsoft Corporation - Driver della porta i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 18/07/2017 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation
[MD5.F77E8ABD746B93B9B4F9C13250302C47] - 18/07/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159744] =>.Microsoft Corporation
[MD5.734837208CAFD6E0959A7A0333C95C9D] - 18/07/2017 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262656] =>.Microsoft Corporation
[MD5.7FD5A7FB8F55254E9AF5666C653AF3CA] - 18/07/2017 - (.Microsoft Corporation - Driver file system NT.) -- C:\Windows\System32\drivers\ntfs.sys [1680616] =>.Microsoft Windows®
[MD5.0086431C29C35BE1DBC43F52CC273887] - 18/07/2017 - (.Microsoft Corporation - Driver della porta parallela.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 18/07/2017 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 18/07/2017 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation
[MD5.4DD986720F7CB7A8A5D1226793097B9A] - 18/07/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [117248] =>.Microsoft Corporation
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 18/07/2017 - (.Microsoft Corporation - Driver copia shadow del volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Servizi non Microsoft NT e non disabili (14) - 3s
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe =>.Adobe Systems Incorporated®
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD
O23 - Service: (AppMgmt) . (...) - C:\Windows\System32\appmgmts.dll (.not file.)
O23 - Service: COMODO Dragon Update Service (DragonUpdater) . (.Comodo Security Solutions, Inc. - dragon_updater.) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe =>.Comodo Security Solutions®
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.®
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Google Installer.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
O23 - Service: postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) . (.PostgreSQL Global Development Group - pg_ctl - starts/stops/restarts the PostgreS.) - c:/postgreSQL/bin/pg_ctl.exe =>.PostgreSQL Global Development Group
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
O23 - Service: Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®

---\\ Servizi non Microsoft (GSR) (SR = esecuzione, SS = fermato) (28) - 80s
SR - Auto [18/07/2017] [ 317408] Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe =>.Adobe Systems Incorporated®
SR - Auto [18/07/2017] [ 317408] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [18/07/2017] [ 317408] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [18/07/2017] [ 317408] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD
SS - Disabl [18/07/2017] [ 317408] DCService.exe (DCService.exe) . (.Copyright (C) 2008.) - C:\ProgramData\DatacardService\DCService.exe
SR - Auto [18/07/2017] [ 317408] COMODO Dragon Update Service (DragonUpdater) . (.Comodo Security Solutions, Inc..) - C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe =>.Comodo Security Solutions®
SR - Auto [18/07/2017] [ 317408] Dritek WMI Service (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.®
SS - Disabl [18/07/2017] [ 317408] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe =>.Acresso Software Inc.®
SS - Disabl [18/07/2017] [ 317408] GREGService (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe =>.Acer Incorporated®
SS - Auto [18/07/2017] [ 317408] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [18/07/2017] [ 317408] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [18/07/2017] [ 317408] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation®
SR - Auto [18/07/2017] [ 317408] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
SR - Auto [18/07/2017] [ 317408] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
SS - Demand [18/07/2017] [ 317408] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SS - Disabl [18/07/2017] [ 317408] Nero BackItUp Scheduler 4.0 (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe =>.Nero AG®
SS - Disabl [18/07/2017] [ 317408] NTI IScheduleSvc (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe =>.NewTech Infosystems, Inc®
SS - Demand [18/07/2017] [ 317408] OpenVPN Service (OpenVPNService) . (...) - C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe =>.OpenVPN Technologie
SS - Disabl [18/07/2017] [ 317408] PDF Architect Helper Service (PDF Architect Helper Service) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect\HelperService.exe =>.pdfforge GmbH®
SS - Disabl [18/07/2017] [ 317408] PDF Architect Service (PDF Architect Service) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect\ConversionService.exe =>.pdfforge GmbH®
SS - Auto [18/07/2017] [ 317408] postgresql-8.4 - PostgreSQL Server 8.4 (postgresql-8.4) . (.PostgreSQL Global Development Group.) - c:/postgreSQL/bin/pg_ctl.exe =>.PostgreSQL Global Development Group
SS - Disabl [18/07/2017] [ 317408] RealPlayer Cloud Service (RealPlayer Cloud Service) . (.RealNetworks, Inc..) - C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpdsvc.exe =>.RealNetworks, Inc.®
SS - Auto [18/07/2017] [ 317408] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl®
SR - Auto [18/07/2017] [ 317408] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe =>.Samsung Electronics CO., LTD.®
SR - Auto [18/07/2017] [ 317408] Intel(R) Management & Security Application User Notificatio (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®
SS - Disabl [18/07/2017] [ 317408] Updater Service (Updater Service) . (.Acer Group.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe =>.Acer Incorporated®
SS - Demand [18/07/2017] [ 317408] wampapache64 (wampapache64) . (.Apache Software Foundation.) - c:\wamp64\bin\apache\apache2.4.23\bin\httpd.exe =>.Apache Software Foundation
SS - Demand [18/07/2017] [ 317408] wampmysqld64 (wampmysqld64) . (...) - c:\wamp64\bin\mysql\mysql5.7.14\bin\mysqld.exe =>.MySQL

---\\ Attività pianificate in modo automatico (Registro) (18) - 3s
O40 - TASK: {0FAC4710-5291-422D-BA25-ED71BF109437} [64Bits][\{5EF0B267-6728-4AA1-9146-FD57F3F21FA1}] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [445904] =>.Mozilla Corporation®
O40 - TASK: {113310D4-59CA-457B-BB4F-AAA886A6D681} [64Bits][\GoogleUpdateTaskUserS-1-5-21-1286336489-1028466569-3393745925-1000UA] - (...) -- C:\Users\DF\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {145A4324-772A-4A1F-976F-D81BC628B04D} [64Bits][\GoogleUpdateTaskMachineUA1d3356085573eb8] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {2C01746D-96DD-4F32-8E1B-5FE4FC42EC4D} [64Bits][\Adobe Acrobat Update Task] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1165920] =>.Adobe Systems, Incorporated®
O40 - TASK: {3CC8F55E-5EB2-4DE2-BE09-A1CB1F8D3764} [64Bits][\{45CA06BB-DB9E-4D62-91B5-B0A0EB94EE8B}] - (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe [894776] =>.Mozilla Corporation®
O40 - TASK: {3D5076EC-AA97-416C-8F17-E35BE8A5F05B} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {4513471C-4795-457C-A96A-FBB894DF828A} [64Bits][\{2D763861-8D8F-49BD-9780-5962A2A4CB9E}] - (.Mozilla Corporation - Firefox.) -- c:\program files (x86)\mozilla firefox\firefox.exe [445904] =>.Mozilla Corporation®
O40 - TASK: {680BBB87-C776-4C8C-804B-8D4C5EDFDB54} [64Bits][\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 25.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [271448] =>.Adobe Systems Incorporated®
O40 - TASK: {6DB7008A-A54E-49E2-8C51-DBB985C069D6} [64Bits][\{20E3E361-DEC0-4511-AD18-70833B52E443}] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [445904] =>.Mozilla Corporation®
O40 - TASK: {7E9DFBDD-986E-4957-B025-963D275A0F34} [64Bits][\{400330FA-85FC-4308-B182-782E4526524F}] - (.Symantec, Inc. - WiseScript Uninstaller.) -- C:\PROGRA~2\POKERC~1\UNWISE.EXE [186464]
O40 - TASK: {8862D2AD-D070-4749-ABBD-E51D5996D4E6} [64Bits][\{1D956DDB-65FC-4CEF-BA43-F7ABFF106DC4}] - (.Mozilla Corporation - Firefox.) -- c:\program files (x86)\mozilla firefox\firefox.exe [445904] =>.Mozilla Corporation®
O40 - TASK: {91792999-1409-41EE-9A01-24B5E01DAC12} [64Bits][\CCleanerSkipUAC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [4624152] =>.Piriform Ltd®
O40 - TASK: {BBECA6D1-1897-4C71-93C7-1B837E238172} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {E51D94B3-5BF3-4BA7-BA58-541C81051C56} [64Bits][\GoogleUpdateTaskMachineCore1d33560853128b3] - (.Google Inc. - Google Installer.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc®
O40 - TASK: {E6392A10-C729-46A6-9688-C3E8365B72A6} [64Bits][\Product Updater] - (...) -- C:\Program Files (x86)\Free Sound Recorder\FFProductUpdater.exe [2628608]
O40 - TASK: {F3D2D8DA-A766-4029-9340-19EDF28C0F3E} [64Bits][\Recovery Management\Burn Notification] - (.Acer - NotificationCenter.) -- C:\Program Files\Packard Bell\Packard Bell Recovery Management\NotificationCenter\Notification.exe [701832] =>.Acer Incorporated®
O40 - TASK: {F8342B61-DA23-4CDF-BEB5-A973803545EC} [64Bits][\GoogleUpdateTaskUserS-1-5-21-1286336489-1028466569-3393745925-1000Core] - (...) -- C:\Users\DF\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0] (.Orphan.) =>.SUP.Orphan
O40 - TASK: {FE598438-C78C-4EB0-A979-4C4498762BDF} [64Bits][\{A0216EFB-4B48-4C4E-9528-1D29BB81A804}] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [445904] =>.Mozilla Corporation®

---\\ Iniziato da file e registro applicazioni (2) - 0s
O4 - HKCU\..\Run: [KiesPDLR.exe] . (.Samsung - .) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe =>.Samsung Electronics CO., LTD.®
O4 - HKUS\S-1-5-21-1286336489-1028466569-3393745925-1000\..\Run: [KiesPDLR.exe] . (.Samsung - .) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe =>.Samsung Electronics CO., LTD.®

---\\ Google Chrome, start, cerca, estensioni (2) - 0s
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}

---\\ Comodo Dragon, start, cerca, estensioni (5) - 1s
C2 - CDE: Preference [User Data\Default] [aneodkojaglhnkkdbbdnmmmgimlcaogo] Comodo Drag&Drop Service =>.Comodo Inc.
C2 - CDE: Preference [User Data\Default] [bdngekjahnmlkinegnhdmmbcfnmbclnn] Comodo Web Inspector =>.Comodo Inc.
C2 - CDE: Preference [User Data\Default] [dihmnpngfonlhjmgkflpnibiaaliendo] Comodo Media Downloader =>.Comodo Inc.
C2 - CDE: Preference [User Data\Default] [mcmdgbiocnkpnaccjkailibfgepaccgf] Comodo Share Page Service =>.Comodo Inc.
C2 - CDE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Comodo Dragon manifest =>.Comodo Inc. =>.Comodo Inc.

---\\ Mozilla Firefox, Plugin,Start,Cerca,Estensioni (27) - 4s
M0 - MFSP: prefs.js [DF - l1xs8snd.default] http://www.mozilla.org/ =>.Mozilla Corporation
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
M1 - SPR:Search Page Redirection - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
P2 - EXT FILE: (.Microsoft Corporation - np-mswmp.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\np-mswmp.dll =>.Microsoft Corporation®
P2 - EXT FILE: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated®
P2 - EXT FILE: (.Microsoft Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin License.rtf =>.Microsoft Corporation
P2 - EXT FILE: (.Microsoft Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\WMP Firefox Plugin RelNotes.txt =>.Microsoft Corporation
P2 - EXT FILE: (.Video DownloadHelper - Download Videos from the Web.) -- C:\Users\DF\AppData\Roaming\Mozilla\Firefox\Profiles\l1xs8snd.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi =>.Video DownloadHelper
P2 - EXT FILE: (.Adblock Plus - Ads were yesterday!.) -- C:\Users\DF\AppData\Roaming\Mozilla\Firefox\Profiles\l1xs8snd.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-it.xml
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-it.xml
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\hoepli.xml
P2 - EXT FILE: (.Wikipedia.) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-it.xml =>.Wikipedia
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-it.xml
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\aushelper@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\e10srollout@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\firefox@getpocket.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi =>.Mozilla Corporation
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi
P2 - EXT FILE: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.Mozilla Corporation
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Users\DF\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Users\DF\AppData\Local\Google\Update\1.3.28.1\npGoogleUpdate3.dll =>.Google Inc.
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_148.dll =>.Adobe Systems Incorporated

---\\ Internet Explorer, Start,Cerca,Phishing (11) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com =>.Microsoft Corporation
R0 - HKCU\SOFTWARE\Classes\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Browser Internet.) (11.00.9600.18793 (winblue_ltsb.170815-0600)) -- C:\Windows\SysWOW64\ieframe.dll =>.Microsoft Corporation

---\\ Internet Explorer, gestione Proxy (5) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ Analisi delle linee - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Hosts file redirection (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (24)

---\\ Browser Helper Object (BHO) (1) - 0s
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®

---\\ Scorciatoie globale Startup (178) - 19s
O4 - GS\Desktop [Administrator]: Amazon.it - Centro resi (1).lnk . (.Microsoft Corporation - Strumento di cattura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Desktop [Administrator]: Amazon.it - Centro resi (2).lnk . (.Media Converters - Video to Video.) C:\Program Files (x86)\Video to Video\vv.exe =>.Media Converters
O4 - GS\Desktop [Administrator]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Desktop [Administrator]: HiJackThis.lnk . (.Trend Micro Inc. - HijackThis.) C:\Users\DF\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe =>.Trend Micro Inc.
O4 - GS\Desktop [Administrator]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\Desktop [Administrator]: Should I Remove It.lnk . (.Reason Software Company Inc. - Should I Remove It?.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe =>.Reason Software Company Inc.®
O4 - GS\Desktop [Administrator]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\DF\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrator]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Quicklaunch [Administrator]: GD Poker.lnk . (...) C:\Programs\GiocoDigitale\giocodigitalePoker.exe -P=GiocoDigitalePoker
O4 - GS\Quicklaunch [Administrator]: ImTOO DVD Creator.lnk . (...) C:\Program Files (x86)\ImTOO\DVD Creator\SplashScreen.exe
O4 - GS\Quicklaunch [Administrator]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrator]: PartyPoker.it.lnk . (.Copyright (C) 2005 - PartyItalia MFC Application.) C:\Programs\PartyItalia\PartyItalia.exe -P=PartyPokerIt
O4 - GS\Quicklaunch [Administrator]: PokerStars.it.lnk . (.Rational Intellectual Holdings Ltd. - Rational Updater Client Software.) C:\Program Files (x86)\PokerStars.IT\PokerStarsUpdate.exe =>.Amaya Services Limited®
O4 - GS\Quicklaunch [Administrator]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Administrator]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Administrator]: Samsung Story Album Viewer.lnk . (.Copyright © 2013 - HTML5Viewer.) C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [Administrator]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Administrator]: Trasferimento file Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Administrator]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.®
O4 - GS\TaskBar [Administrator]: Lottomatica.it Poker.lnk . (...) C:\Program Files (x86)\Lottomatica.it Poker\poker.exe
O4 - GS\TaskBar [Administrator]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\TaskBar [Administrator]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrator]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Tastiera su schermo accessibilità.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrator]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [Administrator]: BetClic Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\BetClic Poker\casino.exe =>.Playtech Software Limited®
O4 - GS\Programs [Administrator]: ICMIZER.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 2539601351.www.pokericmcalculator.com =>.Microsoft Corporation®
O4 - GS\Programs [Administrator]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrator]: Microsoft OneDrive.lnk . (...) C:\Users\DF\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\Programs [Administrator]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [Administrator]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.®
O4 - GS\Desktop [DF]: Amazon.it - Centro resi (1).lnk . (.Microsoft Corporation - Strumento di cattura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Desktop [DF]: Amazon.it - Centro resi (2).lnk . (.Media Converters - Video to Video.) C:\Program Files (x86)\Video to Video\vv.exe =>.Media Converters
O4 - GS\Desktop [DF]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Desktop [DF]: HiJackThis.lnk . (.Trend Micro Inc. - HijackThis.) C:\Users\DF\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe =>.Trend Micro Inc.
O4 - GS\Desktop [DF]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\Desktop [DF]: Should I Remove It.lnk . (.Reason Software Company Inc. - Should I Remove It?.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe =>.Reason Software Company Inc.®
O4 - GS\Desktop [DF]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\DF\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [DF]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Quicklaunch [DF]: GD Poker.lnk . (...) C:\Programs\GiocoDigitale\giocodigitalePoker.exe -P=GiocoDigitalePoker
O4 - GS\Quicklaunch [DF]: ImTOO DVD Creator.lnk . (...) C:\Program Files (x86)\ImTOO\DVD Creator\SplashScreen.exe
O4 - GS\Quicklaunch [DF]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [DF]: PartyPoker.it.lnk . (.Copyright (C) 2005 - PartyItalia MFC Application.) C:\Programs\PartyItalia\PartyItalia.exe -P=PartyPokerIt
O4 - GS\Quicklaunch [DF]: PokerStars.it.lnk . (.Rational Intellectual Holdings Ltd. - Rational Updater Client Software.) C:\Program Files (x86)\PokerStars.IT\PokerStarsUpdate.exe =>.Amaya Services Limited®
O4 - GS\Quicklaunch [DF]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [DF]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [DF]: Samsung Story Album Viewer.lnk . (.Copyright © 2013 - HTML5Viewer.) C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [DF]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [DF]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [DF]: Trasferimento file Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [DF]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.®
O4 - GS\TaskBar [DF]: Lottomatica.it Poker.lnk . (...) C:\Program Files (x86)\Lottomatica.it Poker\poker.exe
O4 - GS\TaskBar [DF]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\TaskBar [DF]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [DF]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Tastiera su schermo accessibilità.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [DF]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [DF]: BetClic Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\BetClic Poker\casino.exe =>.Playtech Software Limited®
O4 - GS\Programs [DF]: ICMIZER.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 2539601351.www.pokericmcalculator.com =>.Microsoft Corporation®
O4 - GS\Programs [DF]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [DF]: Microsoft OneDrive.lnk . (...) C:\Users\DF\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\Programs [DF]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [DF]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.®
O4 - GS\Desktop [Guest]: Amazon.it - Centro resi (1).lnk . (.Microsoft Corporation - Strumento di cattura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Desktop [Guest]: Amazon.it - Centro resi (2).lnk . (.Media Converters - Video to Video.) C:\Program Files (x86)\Video to Video\vv.exe =>.Media Converters
O4 - GS\Desktop [Guest]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Desktop [Guest]: HiJackThis.lnk . (.Trend Micro Inc. - HijackThis.) C:\Users\DF\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe =>.Trend Micro Inc.
O4 - GS\Desktop [Guest]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\Desktop [Guest]: Should I Remove It.lnk . (.Reason Software Company Inc. - Should I Remove It?.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe =>.Reason Software Company Inc.®
O4 - GS\Desktop [Guest]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\DF\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Guest]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Quicklaunch [Guest]: GD Poker.lnk . (...) C:\Programs\GiocoDigitale\giocodigitalePoker.exe -P=GiocoDigitalePoker
O4 - GS\Quicklaunch [Guest]: ImTOO DVD Creator.lnk . (...) C:\Program Files (x86)\ImTOO\DVD Creator\SplashScreen.exe
O4 - GS\Quicklaunch [Guest]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Guest]: PartyPoker.it.lnk . (.Copyright (C) 2005 - PartyItalia MFC Application.) C:\Programs\PartyItalia\PartyItalia.exe -P=PartyPokerIt
O4 - GS\Quicklaunch [Guest]: PokerStars.it.lnk . (.Rational Intellectual Holdings Ltd. - Rational Updater Client Software.) C:\Program Files (x86)\PokerStars.IT\PokerStarsUpdate.exe =>.Amaya Services Limited®
O4 - GS\Quicklaunch [Guest]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Guest]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [Guest]: Samsung Story Album Viewer.lnk . (.Copyright © 2013 - HTML5Viewer.) C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [Guest]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Guest]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [Guest]: Trasferimento file Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [Guest]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.®
O4 - GS\TaskBar [Guest]: Lottomatica.it Poker.lnk . (...) C:\Program Files (x86)\Lottomatica.it Poker\poker.exe
O4 - GS\TaskBar [Guest]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\TaskBar [Guest]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [Guest]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Tastiera su schermo accessibilità.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Guest]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [Guest]: BetClic Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\BetClic Poker\casino.exe =>.Playtech Software Limited®
O4 - GS\Programs [Guest]: ICMIZER.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 2539601351.www.pokericmcalculator.com =>.Microsoft Corporation®
O4 - GS\Programs [Guest]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Guest]: Microsoft OneDrive.lnk . (...) C:\Users\DF\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\Programs [Guest]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [Guest]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.®
O4 - GS\Desktop [postgres]: Amazon.it - Centro resi (1).lnk . (.Microsoft Corporation - Strumento di cattura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Desktop [postgres]: Amazon.it - Centro resi (2).lnk . (.Media Converters - Video to Video.) C:\Program Files (x86)\Video to Video\vv.exe =>.Media Converters
O4 - GS\Desktop [postgres]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Desktop [postgres]: HiJackThis.lnk . (.Trend Micro Inc. - HijackThis.) C:\Users\DF\AppData\Roaming\Microsoft\Installer\{45A66726-69BC-466B-A7A4-12FCBA4883D7}\HiJackThis.exe =>.Trend Micro Inc.
O4 - GS\Desktop [postgres]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\Desktop [postgres]: Should I Remove It.lnk . (.Reason Software Company Inc. - Should I Remove It?.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe =>.Reason Software Company Inc.®
O4 - GS\Desktop [postgres]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\DF\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [postgres]: Free Sound Recorder.lnk . (...) C:\Program Files (x86)\Free Sound Recorder\FreeSoundRecorder.exe
O4 - GS\Quicklaunch [postgres]: GD Poker.lnk . (...) C:\Programs\GiocoDigitale\giocodigitalePoker.exe -P=GiocoDigitalePoker
O4 - GS\Quicklaunch [postgres]: ImTOO DVD Creator.lnk . (...) C:\Program Files (x86)\ImTOO\DVD Creator\SplashScreen.exe
O4 - GS\Quicklaunch [postgres]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [postgres]: PartyPoker.it.lnk . (.Copyright (C) 2005 - PartyItalia MFC Application.) C:\Programs\PartyItalia\PartyItalia.exe -P=PartyPokerIt
O4 - GS\Quicklaunch [postgres]: PokerStars.it.lnk . (.Rational Intellectual Holdings Ltd. - Rational Updater Client Software.) C:\Program Files (x86)\PokerStars.IT\PokerStarsUpdate.exe =>.Amaya Services Limited®
O4 - GS\Quicklaunch [postgres]: Samsung Kies (Lite).lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe /lite =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [postgres]: Samsung Kies.lnk . (...) C:\Program Files (x86)\Samsung\Kies\KiesAgent.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\Quicklaunch [postgres]: Samsung Story Album Viewer.lnk . (.Copyright © 2013 - HTML5Viewer.) C:\Program Files (x86)\Samsung\Story Album Viewer\HTML5Viewer.exe =>.Samsung Electronics CO., LTD.®
O4 - GS\sendTo [postgres]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [postgres]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl®
O4 - GS\sendTo [postgres]: Trasferimento file Bluetooth.LNK . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\sendTo [postgres]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe ShareFiles =>.Viber Media S.à r.l.®
O4 - GS\TaskBar [postgres]: Lottomatica.it Poker.lnk . (...) C:\Program Files (x86)\Lottomatica.it Poker\poker.exe
O4 - GS\TaskBar [postgres]: Mobile Partner.lnk . (...) C:\Program Files (x86)\Mobile Partner\Mobile Partner.exe
O4 - GS\TaskBar [postgres]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\TaskBar [postgres]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Tastiera su schermo accessibilità.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [postgres]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [postgres]: BetClic Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\BetClic Poker\casino.exe =>.Playtech Software Limited®
O4 - GS\Programs [postgres]: ICMIZER.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 2539601351.www.pokericmcalculator.com =>.Microsoft Corporation®
O4 - GS\Programs [postgres]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [postgres]: Microsoft OneDrive.lnk . (...) C:\Users\DF\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\Programs [postgres]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [postgres]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.®
O4 - GS\CommonDesktop [Public]: Amazon.it - Centro resi (1).lnk . (.MPC-HC Team - .) C:\Program Files (x86)\MPC-HC\mpc-hc64.exe =>.MPC-HC Team
O4 - GS\CommonDesktop [Public]: amcap.lnk . (...) C:\Program Files (x86)\GLPCCamera\amcap.exe
O4 - GS\CommonDesktop [Public]: FileZilla Client.lnk . (.FileZilla Project - .) C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe =>.FileZilla Project
O4 - GS\CommonDesktop [Public]: Malwarebytes.lnk . (.Malwarebytes - Malwarebytes.) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe =>.Malwarebytes Corporation®
O4 - GS\Programs [Public]: BetClic Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\BetClic Poker\casino.exe =>.Playtech Software Limited®
O4 - GS\Programs [Public]: ICMIZER.lnk . (.Microsoft Corporation - Microsoft Silverlight Out-of-Browser Launch.) C:\Program Files (x86)\Microsoft Silverlight\sllauncher.exe 2539601351.www.pokericmcalculator.com =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Microsoft OneDrive.lnk . (...) C:\Users\DF\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
O4 - GS\Programs [Public]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\DF\Contacts\Desktop\TOUT ECRAN\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation
O4 - GS\Programs [Public]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\DF\AppData\Local\Viber\Viber.exe =>.Viber Media S.à r.l.®
O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Processore dei comandi di Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Blocco note.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Esplora risorse.) C:\Windows\explorer.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Editor di caratteri personalizzati.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Bluetooth File Transfer Wizard.lnk . (.Microsoft Corporation - .) C:\Windows\System32\fsquirt.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Switch visualizzazione.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessorio pannello input penna espressioni.) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centro PC portatile Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connessione Desktop remoto.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Strumento di cattura.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Registratore di suoni Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Sticky Notes.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processo host di Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>..Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Applicazione WordPad di Windows.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Mappa caratteri.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Utilità di deframmentazione dischi Microsof.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestione pulizia disco per Windows.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Monitoraggio risorse e prestazioni.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - System Information.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Ripristino configurazione di sistema di Mic.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Applicazione post-migrazione Trasferimento.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Applicazione Trasferimento dati Windows.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\Windows\Installer\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC
O4 - GS\ProgramsCommon [Public]: Adobe Photoshop Elements 8.0.lnk . (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0.) C:\Program Files (x86)\Adobe\Elements Organizer 8.0\Photoshop Elements 8.0.exe =>.Adobe Systems Incorporated®
O4 - GS\ProgramsCommon [Public]: Contact a friend for assistance.lnk . (.Microsoft Corporation - Assistenza remota di Windows.) C:\Windows\System32\msra.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Eraser.lnk . (.The Eraser Project - .) C:\Program Files (x86)\Eraser\Eraser.exe =>.The Eraser Project
O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft Office 2010.lnk . (...) C:\Windows\Installer\{95140000-0070-0000-0000-0000000FF1CE}\oobeicon.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadget per il desktop di Windows.) C:\Program Files (x86)\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Titanbet.it Poker.lnk . (.Playtech - Playtech Client Engine Application.) C:\Poker\Titanbet.it Poker\casino.exe =>.Playtech
O4 - GS\ProgramsCommon [Public]: Welcome Center.lnk . (.Acer Incorporated - Welcome Center.) C:\Program Files (x86)\Packard Bell\Welcome Center\OEMWelcomeCenter.exe =>.Acer Incorporated®
O4 - GS\ProgramsCommon [Public]: Windows Anytime Upgrade.lnk . (.Microsoft Corporation - Interfaccia utente Windows Anytime Upgrade.) C:\Windows\system32\WindowsAnytimeUpgradeUI.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\DVD Maker\DVDMaker.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Windows Live Mail.lnk . (.Microsoft Corporation - Windows Live Mail.) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Live Messenger.lnk . (.Microsoft Corporation - Windows Live Messenger.) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Windows Media Player.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - XPS Viewer.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation

---\\ Modificare gli indirizzi DNS domain (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\..\{D91D5736-F2A2-4D70-8615-82DC3F7CC365}: NameServer = 212.52.97.25 193.70.152.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{4674C13B-2EB0-4B11-98E2-0249318AF9BD}: DhcpNameServer = 192.168.43.1 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{912A37D2-5134-4C9A-876C-BAE949965E3E}: DhcpNameServer = 192.168.42.129 =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{DF0C94EE-ECE1-4A7C-8824-DDDD4F4FED91}: DhcpNameServer = 192.168.42.129 =>.Local IP Adress

---\\ Protocollo addizionale (23) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizzatore HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Controllo ActiveX per streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizzatore HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizzatore HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Estensioni OLE32 per Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizzatore HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Controllo ActiveX per streaming video.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visualizzatore HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®

---\\ Software installato (150) - 27s
O42 - Logiciel: 7-Zip 9.22 (x64 edition) - (.Igor Pavlov.) [HKLM][64Bits] -- {23170F69-40C1-2702-0922-000001000000} =>.Igor Pavlov
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Acrobat Reader DC - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1033-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {77D28FF5-242F-488A-8215-937D6A4D69E0} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 18 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 25 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Photoshop Elements 8.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {17DFE37C-064E-4834-AD8F-A4B2B4DF68F8} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Photoshop Elements 8.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Photoshop Elements 8.0 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824237067} =>.Adobe Systems Incorporated
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM][64Bits] -- {B2EC4A38-B545-4A00-8214-13FE0E915E6D} =>.Nero AG
O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM][64Bits] -- WT088216 =>.WildTangent Inc
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {F5266D28-E0B2-4130-BFC5-EE155AD514DC} =>.Apple Inc.
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {BAF4695F-7867-D8B2-528A-A1EF2EE0A9EF} =>.ATI Technologies, Inc.
O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM][64Bits] -- {72B776E5-4530-4C4B-9453-751DF87D9D93} =>.NewTech Infosystems, Inc®
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT088226 =>.WildTangent Inc
O42 - Logiciel: BetClic Poker - (..) [HKCU][64Bits] -- BetClic Poker {2377638F84B41CE9745E716AA64ABF99}
O42 - Logiciel: Broadcom Gigabit NetLink Controller - (.Broadcom Corporation.) [HKLM][64Bits] -- {A84DB02B-9C2B-4272-9D2D-A80E00A56513} =>.Broadcom Corporation
O42 - Logiciel: Build-a-lot 2 - (.WildTangent.) [HKLM][64Bits] -- WT088228 =>.WildTangent Inc
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {1B192700-C368-49C1-BF81-D2F9BA065534} =>.ATI
O42 - Logiciel: Catalyst Control Center Graphics Previews Vista - (.ATI.) [HKLM][64Bits] -- {F177758C-B671-B885-A7DF-6BA84B51679C} =>.ATI
O42 - Logiciel: Catalyst Control Center InstallProxy - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {1D3CC42C-1F48-2CE4-65D9-ECA043A0A105} =>.ATI Technologies, Inc.
O42 - Logiciel: Catalyst Control Center Localization All - (.ATI.) [HKLM][64Bits] -- {4D328ECC-B82B-381E-6570-B55192EA54E5} =>.ATI
O42 - Logiciel: ccc-core-static - (.Nome società.) [HKLM][64Bits] -- {28849F27-E11E-F067-C4B5-7F4CDB75D473}
O42 - Logiciel: ccc-utility64 - (.ATI.) [HKLM][64Bits] -- {6A0B8EEF-41D4-FABD-BBC8-84397D53D1F2} =>.ATI
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT088235 =>.WildTangent Inc
O42 - Logiciel: Comodo Dragon - (.Comodo.) [HKLM][64Bits] -- Comodo Dragon =>.Comodo Security Solutions®
O42 - Logiciel: ConvertHelper 3.2 - (.DownloadHelper.) [HKLM][64Bits] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1 =>.DownloadHelper
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT088238 =>.WildTangent Inc
O42 - Logiciel: Driver dispositivo USB - (..) [HKLM][64Bits] -- {D2D77DC2-8299-11D1-8949-444553540000}_is1
O42 - Logiciel: e-express - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- e-express =>.Huawei Technologies Co.,Ltd
O42 - Logiciel: EhoCW Alpha 0.91n 06/12/2010 - (.F8EHO.) [HKLM][64Bits] -- EhoCW
O42 - Logiciel: Eraser 6.0.10.2620 - (.The Eraser Project.) [HKLM][64Bits] -- {6E5159B4-A519-41EF-80EF-AD58371515DF} =>.The Eraser Project
O42 - Logiciel: ETDWare PS/2-x64 7.0.6.5_WHQL - (.ELAN Microelectronics Corp..) [HKLM][64Bits] -- Elantech =>.ELAN Microelectronics Corporation®
O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WT088260 =>.WildTangent Inc
O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WT088416 =>.WildTangent Inc
O42 - Logiciel: FileZilla Client 3.23.0.2 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client =>.Tim Kosse
O42 - Logiciel: Final Drive Nitro - (.WildTangent.) [HKLM][64Bits] -- WT088420 =>.WildTangent Inc
O42 - Logiciel: FLV-Media Player 1.8 - (.HYBRIDWEB.) [HKLM][64Bits] -- FLV-Media Player
O42 - Logiciel: Free Sound Recorder v10.8.8 - (.Copyright(C) 2005-2015 FreeSoundRecorder Technologies, Inc..) [HKLM][64Bits] -- Free Sound Recorder_is1
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} =>.Microsoft Corporation
O42 - Logiciel: GD Poker - (.GiocoDigitale.) [HKLM][64Bits] -- GiocoDigitalePoker
O42 - Logiciel: GDpoker 1.0.0 - (.gd_poker.) [HKLM][64Bits] -- GDpoker_is1
O42 - Logiciel: GL USB2.0 UVC Camera Device - (.GenesysLogic.) [HKLM][64Bits] -- {9897BBD8-013A-49F3-928E-866A59B6E00C} =>.GenesysLogic
O42 - Logiciel: Google Earth Plug-in - (.Google.) [HKLM][64Bits] -- {4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E} =>.Google
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc.
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>.Google Inc.
O42 - Logiciel: HiJackThis - (.Trend Micro.) [HKLM][64Bits] -- {45A66726-69BC-466B-A7A4-12FCBA4883D7} =>.Trend Micro
O42 - Logiciel: HMA! Pro VPN 2.7.1.7 - (..) [HKLM][64Bits] -- HMA! Pro VPN {4AFE22469DFD57}
O42 - Logiciel: Holdem Manager 2 - (..) [HKLM][64Bits] -- HoldemManager2
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card =>.Acer Incorporated®
O42 - Logiciel: ImagXpress - (.Nero AG.) [HKLM][64Bits] -- {A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D} =>.Nero AG
O42 - Logiciel: ImTOO DVD Creator - (.ImTOO.) [HKLM][64Bits] -- ImTOO DVD Creator =>.ImTOO
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT088268 =>.WildTangent Inc
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} =>.Intel Corporation®
O42 - Logiciel: Java 8 Update 111 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F32180111F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WT088269 =>.WildTangent Inc
O42 - Logiciel: JLG Extended Keyboard Layout US (v1.1) - (.JLG Utilities.) [HKLM][64Bits] -- {0904AF3E-7420-42B7-9174-AB2F9070281B}
O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WT088448 =>.WildTangent Inc
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} =>.Microsoft Corporation
O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager =>.Dritek System Inc.®
O42 - Logiciel: LogProtect version 1.4.3 - (..) [HKLM][64Bits] -- LogProtect_is1
O42 - Logiciel: Lottomatica.it Poker - (.GTECH Corporation.) [HKLM][64Bits] -- Lottomatica.it Poker
O42 - Logiciel: Malwarebytes version 3.2.2.2029 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes Corporation®
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Mobile Partner - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Mobile Partner =>.Huawei Technologies Co.,Ltd
O42 - Logiciel: Mozilla Firefox 57.0 (x64 en-US) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 57.0 (x64 en-US) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MPC-HC 1.7.11 (64-bit) - (.MPC-HC Team.) [HKLM][64Bits] -- {2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1 =>.Fotis Zafiropoulos®
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation
O42 - Logiciel: NCPlot v2.32 - (.NCPlot Software LLC.) [HKLM][64Bits] -- NCPlot_is1
O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM][64Bits] -- {c68f25a7-43f0-423d-b5de-ca33885f1ba7} =>.Nero AG®
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A} =>.Nero AG
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {F4041DCE-3FE1-4E18-8A9E-9DE65231EE36} =>.Nero AG
O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM][64Bits] -- {869200DB-287A-4DC0-B02B-2B6787FBCD4C} =>.Nero AG
O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {CC019E3F-59D2-4486-8D4B-878105B62A71} =>.Nero AG
O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM][64Bits] -- {33CF58F5-48D8-4575-83D6-96F574E4D83A} =>.Nero AG
O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM][64Bits] -- {E5C7D048-F9B4-4219-B323-8BDB01A2563D} =>.Nero AG
O42 - Logiciel: Nero Express Help - (.Nero AG.) [HKLM][64Bits] -- {83202942-84B3-4C50-8622-B8C0AA2D2885} =>.Nero AG
O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM][64Bits] -- {FBCDFD61-7DCF-4E71-9226-873BA0053139} =>.Nero AG
O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM][64Bits] -- {20400DBD-E6DB-45B8-9B6B-1DD7033818EC} =>.Nero AG
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM][64Bits] -- {E8A80433-302B-4FF1-815D-FCC8EAC482FF} =>.Nero AG
O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM][64Bits] -- {C81A2FE0-3574-00A9-CED4-BDAA334CBE8E} =>.Nero AG
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM][64Bits] -- {7748AC8C-18E3-43BB-959B-088FAEA16FB2} =>.Nero AG
O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM][64Bits] -- {2348B586-C9AE-46CE-936C-A68E9426E214} =>.Nero AG
O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM][64Bits] -- {4D43D635-6FDA-4FA5-AA9B-23CF73D058EA} =>.Nero AG
O42 - Logiciel: NeroExpress - (.Nero AG.) [HKLM][64Bits] -- {595A3116-40BB-4E0F-A2E8-D7951DA56270} =>.Nero AG
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B} =>.Nero AG
O42 - Logiciel: OpenOffice 4.1.3 - (.Apache Software Foundation.) [HKLM][64Bits] -- {3E1679DA-5081-44AA-B4C2-BF8EE7E107E0} =>.Apache Software Foundation
O42 - Logiciel: Packard Bell Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent packardbell Master Uninstall =>.WildTangent Inc
O42 - Logiciel: Packard Bell MyBackup - (.NewTech Infosystems.) [HKLM][64Bits] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93} =>.NewTech Infosystems, Inc®
O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated®
O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Registration =>.Acer Incorporated®
O42 - Logiciel: Packard Bell ScreenSaver - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Screensaver =>.Acer Incorporated®
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- {64EF903E-D00A-414C-94A4-FBA368FFCDC9} =>.CyberLink®
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9} =>.CyberLink®
O42 - Logiciel: PandoraRecovery (Remove Only) - (..) [HKLM][64Bits] -- PandoraRecovery
O42 - Logiciel: PDF Architect - (.pdfforge GmbH.) [HKLM][64Bits] -- {86D8A96B-1911-4C3F-AA16-0B47E053E492} =>.pdfforge GmbH
O42 - Logiciel: Pencil - (.Evolus Co., Ltd..) [HKLM][64Bits] -- Pencil =>.Evolus Co., Ltd.
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT088452 =>.WildTangent Inc
O42 - Logiciel: Plants vs. Zombies - (.WildTangent.) [HKLM][64Bits] -- WT088283 =>.WildTangent Inc
O42 - Logiciel: Poker Club by Lottomatica - (.Boss Media AB.) [HKLM][64Bits] -- Poker Club by Lottomatica
O42 - Logiciel: PokerStars.it - (.PokerStars.it.) [HKLM][64Bits] -- PokerStars.it
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WT088456 =>.WildTangent Inc
O42 - Logiciel: Polar Golfer - (.WildTangent.) [HKLM][64Bits] -- WT088460 =>.WildTangent Inc
O42 - Logiciel: Pool Rebel for Windows - (.Compumaster Ltd.) [HKLM][64Bits] -- Pool Rebel for Windows_is1
O42 - Logiciel: PostgreSQL 8.4 - (.PostgreSQL Global Development Group.) [HKLM][64Bits] -- PostgreSQL 8.4 =>.PostgreSQL Global Development Group
O42 - Logiciel: PX Profile Update - (.AMD.) [HKLM][64Bits] -- {98A26988-E99C-2EA6-684A-3FFE6F3A90F9} =>.AMD
O42 - Logiciel: Raccolta foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {86A1CEAD-EF47-47BB-AE79-DA8C09E15382} =>.Microsoft Corporation
O42 - Logiciel: SafeZone Stable 1.51.2220.62 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 1.51.2220.62 =>.AVAST Software
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {758C8301-2696-4855-AF45-534B1200980A} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung Story Album Viewer - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {698BBAD8-B116-495D-B879-0F07A533E57F} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung Story Album Viewer - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F} =>.Samsung Electronics Co., Ltd.
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} =>.Samsung Electronics CO., LTD.®
O42 - Logiciel: Should I Remove It - (.Reason Software Company Inc..) [HKCU][64Bits] -- Should I Remove It 1.0.4 =>.Reason Software Company Inc.
O42 - Logiciel: Should I Remove It - (.Reason Software Company Inc..) [HKLM][64Bits] -- {4E62123C-4C0D-4123-A8A2-C0103B92D7EA} =>.Reason Software Company Inc.
O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B} =>.Microsoft Corporation
O42 - Logiciel: Skype™ 7.40 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A.
O42 - Logiciel: Smart PC Recorder - by freebird - (.Freebird.) [HKLM][64Bits] -- SmartPCRecorder
O42 - Logiciel: Sublime Text Build 3114 - (.Sublime HQ Pty Ltd.) [HKLM][64Bits] -- Sublime Text 3_is1 =>.Sublime HQ Pty Ltd®
O42 - Logiciel: Titanbet.it Poker - (..) [HKLM][64Bits] -- Titanpoker.it =>.Playtech Software Limited®
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber =>.Viber Media S.a.r.l®
O42 - Logiciel: Video to Video - (.Media Converters.) [HKLM][64Bits] -- {7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1 =>.Media Converters
O42 - Logiciel: Video Web Camera - (.Liteon.) [HKLM][64Bits] -- {83299633-1261-47A3-84F3-6F02B4B8CDB1} =>.Liteon
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WT088508 =>.WildTangent Inc
O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} =>.AVG Technologies
O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} =>.AVG Technologies CZ, s.r.o.
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Wampserver64 3.0.6 - (.Dominique Ottello aka Otomatic.) [HKLM][64Bits] -- {wampserver64}_is1 =>.Dominique Ottello aka Otomatic
O42 - Logiciel: Web Companion - (.Lavasoft.) [HKLM][64Bits] -- {67651c28-5e35-4bd7-849c-145c2062e619} =>.Lavasoft
O42 - Logiciel: WEBpatente 4.2 - (.Roberto Mastri.) [HKLM][64Bits] -- {29D4BDED-54EC-4FDA-B2E1-B6A5F8C4E5C2}}_is1
O42 - Logiciel: Welcome Center - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Welcome Center =>.Acer Incorporated®
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corp
O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst =>.CACE Technologies
O42 - Logiciel: WinRAR 5.21 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH®
O42 - Logiciel: ZTE Handset USB Driver - (.ZTE Corporation.) [HKLM][64Bits] -- {01D42BF0-ED08-463f-8A28-99EB6FEE962B} =>.ZTE Corporation
O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT088292 =>.WildTangent Inc
O42 - Logiciel: Zuma's Revenge - (.WildTangent.) [HKLM][64Bits] -- WT088531 =>.WildTangent Inc

---\\ HKCU & HKLM Software Keys (209) - 27s
HKLM\SOFTWARE\Wow6432Node\AbiWord
HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner =>.Malwarebytes
HKLM\SOFTWARE\Wow6432Node\Apple Inc. =>.Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ATI =>.ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\Wow6432Node\Audible =>.Audible.com
HKLM\SOFTWARE\Wow6432Node\Auslogics =>.Auslogics
HKLM\SOFTWARE\Wow6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\Wow6432Node\AVG =>.AVG Software
HKLM\SOFTWARE\Wow6432Node\Avisynth =>.Ben Rudiak-Gold
HKLM\SOFTWARE\Wow6432Node\BetClic Poker
HKLM\SOFTWARE\Wow6432Node\Boss Media AB
HKLM\SOFTWARE\Wow6432Node\Bunndle =>.Unknown
HKLM\SOFTWARE\Wow6432Node\CDDB =>.Cddb Software
HKLM\SOFTWARE\Wow6432Node\Chromium =>.Chromium
HKLM\SOFTWARE\Wow6432Node\Comodo =>.Comodo
HKLM\SOFTWARE\Wow6432Node\ComodoGroup =>.ComodoGroup
HKLM\SOFTWARE\Wow6432Node\CyberLink =>.CyberLink Corporation
HKLM\SOFTWARE\Wow6432Node\Cygnus Solutions =>.Cygnus Solutions
HKLM\SOFTWARE\Wow6432Node\Cygwin =>.Cygwin
HKLM\SOFTWARE\Wow6432Node\Debug =>.Legitimate
HKLM\SOFTWARE\Wow6432Node\dotNetInstaller =>.InstallShield
HKLM\SOFTWARE\Wow6432Node\DownloadHelper =>.DownloadHelper
HKLM\SOFTWARE\Wow6432Node\Dritek =>.Dritek
HKLM\SOFTWARE\Wow6432Node\FileZilla 3 =>.FileZilla
HKLM\SOFTWARE\Wow6432Node\FileZilla Client =>.Tim Kosse
HKLM\SOFTWARE\Wow6432Node\Freemake =>.Freemake
HKLM\SOFTWARE\Wow6432Node\Full Tilt Poker
HKLM\SOFTWARE\Wow6432Node\Genesys Logic =>.Genesys Logic
HKLM\SOFTWARE\Wow6432Node\Google =>.Google
HKLM\SOFTWARE\Wow6432Node\GTECH Corporation
HKLM\SOFTWARE\Wow6432Node\HaaliMkx =>.Haali Media
HKLM\SOFTWARE\Wow6432Node\Huawei technologies =>.Huawei Technologies
HKLM\SOFTWARE\Wow6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\Wow6432Node\ImTOO =>.ImTOO
HKLM\SOFTWARE\Wow6432Node\InstallShield =>.InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel
HKLM\SOFTWARE\Wow6432Node\iWin =>.iWin
HKLM\SOFTWARE\Wow6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Wow6432Node\Lavasoft =>.Lavasoft
HKLM\SOFTWARE\Wow6432Node\Licenses =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\Liteon =>.Liteon
HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision =>.Macrovision
HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Wow6432Node\MarkAny =>.MarkAny
HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MSPG32
HKLM\SOFTWARE\Wow6432Node\Nero =>.Ahead Corporation
HKLM\SOFTWARE\Wow6432Node\NewTech Infosystems =>.NewTech Infosystems
HKLM\SOFTWARE\Wow6432Node\Notepad =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Wow6432Node\OEM =>.OEM
HKLM\SOFTWARE\Wow6432Node\OpenOffice =>.SourceForge
HKLM\SOFTWARE\Wow6432Node\OpenVPN =>.OpenVPN Technologie
HKLM\SOFTWARE\Wow6432Node\Packard Bell =>.Packard Bell
HKLM\SOFTWARE\Wow6432Node\PandoraRecovery
HKLM\SOFTWARE\Wow6432Node\PENSEWEB
HKLM\SOFTWARE\Wow6432Node\PostgreSQL =>.PostgreSQL
HKLM\SOFTWARE\Wow6432Node\PostgreSQL Global Development Group =>.PostgreSQL Global Development Group
HKLM\SOFTWARE\Wow6432Node\PowerOffer
HKLM\SOFTWARE\Wow6432Node\Privax =>.Privax
HKLM\SOFTWARE\Wow6432Node\RealNetworks =>.RealNetworks
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Remo Software =>.Remo Software
HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited =>.Safer Networking Limited
HKLM\SOFTWARE\Wow6432Node\Samsung =>.Samsung Electronics
HKLM\SOFTWARE\Wow6432Node\SecureDigitalServices
HKLM\SOFTWARE\Wow6432Node\Skype =>.Skype
HKLM\SOFTWARE\Wow6432Node\Sonic =>.Sonic
HKLM\SOFTWARE\Wow6432Node\Stellar information Systems ltd. =>.Stellar Systems
HKLM\SOFTWARE\Wow6432Node\SwanSoft
HKLM\SOFTWARE\Wow6432Node\Swearware =>.Swearware
HKLM\SOFTWARE\Wow6432Node\Titanpoker.it
HKLM\SOFTWARE\Wow6432Node\TrendMicro =>.TrendMicro
HKLM\SOFTWARE\Wow6432Node\TuneUp =>.TuneUp
HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\WildTangent =>.WildTangent
HKLM\SOFTWARE\Wow6432Node\Windows =>.Microsoft Corporation
HKLM\SOFTWARE\Wow6432Node\WinPcap =>.Riverbed Technology
HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp. =>.Xing Technology Corp.
HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! Inc.
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Ace Poker Solutions
HKCU\SOFTWARE\Acer =>.Acer
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Aidfile recovery professional
HKCU\SOFTWARE\AnvSoft =>.AnvSoft Inc
HKCU\SOFTWARE\Apowersoft =>.Apowersoft
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\Apple Computer, Inc. =>.Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc. =>.Apple Inc.
HKCU\SOFTWARE\AppWork =>.Appwork GmbH
HKCU\SOFTWARE\ATI =>.ATI
HKCU\SOFTWARE\AVG =>.AVG Software
HKCU\SOFTWARE\BetClic Poker
HKCU\SOFTWARE\Bitcoin
HKCU\SOFTWARE\Borland =>.Borland
HKCU\SOFTWARE\Bytescout =>.ByteScout
HKCU\SOFTWARE\Caphyon =>.Caphyon
HKCU\SOFTWARE\Casino
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\cks =>.Legitimate
HKCU\SOFTWARE\Clubic =>.Clubic
HKCU\SOFTWARE\CodeGear =>.CodeGear
HKCU\SOFTWARE\Compumaster Ltd
HKCU\SOFTWARE\Convar =>.Legitimate
HKCU\SOFTWARE\Cyberlink =>.CyberLink Corporation
HKCU\SOFTWARE\Cygnus Solutions =>.Cygnus Solutions
HKCU\SOFTWARE\Cygwin =>.Cygwin
HKCU\SOFTWARE\DivFix++ =>.DivFix
HKCU\SOFTWARE\DMGR1.25
HKCU\SOFTWARE\Dnldstr_Aggregator
HKCU\SOFTWARE\DownloadAstro =>.Download Astro
HKCU\SOFTWARE\Dritek =>.Dritek
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\Elantech =>.Elantech Inc.
HKCU\SOFTWARE\ElcomSoft =>.Elcomsoft
HKCU\SOFTWARE\Eraser =>.Sami Tolvanen
HKCU\SOFTWARE\Evolus
HKCU\SOFTWARE\Facebook =>.Facebook
HKCU\SOFTWARE\file repair =>.File Repair
HKCU\SOFTWARE\ForceInterfaceCOM
HKCU\SOFTWARE\freebird
HKCU\SOFTWARE\Freemake =>.Freemake
HKCU\SOFTWARE\FreeVPN
HKCU\SOFTWARE\Froggie
HKCU\SOFTWARE\Full Tilt Poker
HKCU\SOFTWARE\GiocoDigitale
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Haali =>.Haali Media
HKCU\SOFTWARE\HipSoft =>.HipSoft Games
HKCU\SOFTWARE\HoldemManager =>.HoldemManager
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\ImTOO =>.ImTOO
HKCU\SOFTWARE\In The Money
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\JEDI-VCL =>.JEDI Project
HKCU\SOFTWARE\kde.org =>.kde.org
HKCU\SOFTWARE\Licenses =>.Microsoft Corporation
HKCU\SOFTWARE\Liteon =>.Liteon
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\MainConcept =>.MainConcept AG
HKCU\SOFTWARE\MainConcept (Adobe2) =>.MainConcept AG
HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes
HKCU\SOFTWARE\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware
HKCU\SOFTWARE\Mediachance =>.Mediachance
HKCU\SOFTWARE\MetaQuotes Software =>.MetaQuotes Software
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\MP3DO =>.MP3DO
HKCU\SOFTWARE\MPC-HC =>.MPC-HC Team
HKCU\SOFTWARE\Nero =>.Ahead Corporation
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\Nico Mak Computing =>.Nico Mak Computing
HKCU\SOFTWARE\Norton =>.Symantec Corporation
HKCU\SOFTWARE\OEM =>.OEM
HKCU\SOFTWARE\OpenOffice =>.SourceForge
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\Packard Bell =>.Packard Bell
HKCU\SOFTWARE\PartyItalia
HKCU\SOFTWARE\PASG
HKCU\SOFTWARE\PDF Architect =>.pdfforge GmbH
HKCU\SOFTWARE\Philipp Schmieder =>.Philipp Schmieder
HKCU\SOFTWARE\Piriform =>.Piriform
HKCU\SOFTWARE\PokerStove
HKCU\SOFTWARE\PostgreSQL =>.PostgreSQL
HKCU\SOFTWARE\Privax =>.Privax
HKCU\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKCU\SOFTWARE\PTECH =>.Ptech
HKCU\SOFTWARE\QtProject =>.QtProject
HKCU\SOFTWARE\RealNetworks =>.RealNetworks
HKCU\SOFTWARE\Reason =>.Propellerhead
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\S.A.D
HKCU\SOFTWARE\Safer Networking Limited =>.Safer Networking Limited
HKCU\SOFTWARE\Samsung =>.Samsung Electronics
HKCU\SOFTWARE\Skype =>.Skype
HKCU\SOFTWARE\skypeapp-4bf53e199c15
HKCU\SOFTWARE\SkypeRS =>.Skype Technologies
HKCU\SOFTWARE\Swansoft
HKCU\SOFTWARE\SwanSoft CNC: FANUC 0MD
HKCU\SOFTWARE\SwanSoft CNC: FANUC 18i
HKCU\SOFTWARE\SwanSoft CNC: GTX3E
HKCU\SOFTWARE\Sysinternals =>.Sysinternals
HKCU\SOFTWARE\Titanpoker.it
HKCU\SOFTWARE\Trend Micro =>.Trend Micro
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation
HKCU\SOFTWARE\Viber =>.Viber
HKCU\SOFTWARE\Video Download Capture =>.Apowersoft
HKCU\SOFTWARE\VideoConverter-Media =>.ZJMedia Digital Technology Ltd.
HKCU\SOFTWARE\Windows Live Writer =>.Microsoft Corporation
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\WinZip Computing =>.WinZip Computing
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\COMODO =>.Comodo
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\MarkAny =>.MarkAny

---\\ Contenuto delle cartelle Programmi (465) - 58s
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files\ATI =>.ATI Technologies, Inc®
O43 - CFD: 27/09/2017 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files\Broadcom =>.Broadcom
O43 - CFD: 21/01/2017 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 25/01/2017 - [] D -- C:\Program Files\ConvertHelper3 =>.Downloadhelper.net
O43 - CFD: 16/03/2017 - [] D -- C:\Program Files\DVD Maker =>.Aone Software
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files\Elantech =>.ELAN Microelectronics Corporation®
O43 - CFD: 24/04/2013 - [] D -- C:\Program Files\Eraser =>.Joel Low - Open Source Developer®
O43 - CFD: 09/09/2011 - [0] SHD -- C:\Program Files\File comuni =>.Microsoft Corporation
O43 - CFD: 07/04/2017 - [] D -- C:\Program Files\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 21/01/2017 - [] D -- C:\Program Files\Handset USB Driver =>.ZTE CORPORATION ®
O43 - CFD: 13/09/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 02/10/2017 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 16/11/2011 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 24/06/2017 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 29/03/2017 - [] D -- C:\Program Files\MPC-HC =>.MPC-HC Team
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 03/05/2012 - [] D -- C:\Program Files\Packard Bell =>.Packard Bell
O43 - CFD: 09/09/2011 - [] D -- C:\Program Files\PB Accessory Store =>.PB Accessory Store
O43 - CFD: 08/08/2015 - [] D -- C:\Program Files\PostgreSQL =>.PostgreSQL
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files\Preload =>.Skype Technologies SA®
O43 - CFD: 16/12/2016 - [] D -- C:\Program Files\Recuva =>.Piriform
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 28/10/2016 - [] D -- C:\Program Files\Sublime Text 3 =>.Sublime HQ Pty Ltd®
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 01/07/2014 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 06/07/2014 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 22/01/2017 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 09/09/2011 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 13/09/2011 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 05/08/2014 - [] D -- C:\Program Files\WinPcap =>.Riverbed Technology
O43 - CFD: 15/05/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH®
O43 - CFD: 07/07/2014 - [] D -- C:\Program Files (x86)\7-Zip =>.Igor Pavlov
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\AbiWord =>.SourceGear
O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 16/12/2016 - [] D -- C:\Program Files (x86)\Adobe Download Assistant =>.Adobe Inc.
O43 - CFD: 29/08/2015 - [] D -- C:\Program Files (x86)\ATI Technologies =>.ATI Technologies
O43 - CFD: 25/10/2016 - [] D -- C:\Program Files (x86)\AVG =>.AVG Software
O43 - CFD: 14/10/2015 - [] D -- C:\Program Files (x86)\CNCSimulator.com
O43 - CFD: 16/04/2013 - [] D -- C:\Program Files (x86)\CodeMeter =>.Legitimate
O43 - CFD: 21/09/2017 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 30/08/2014 - [] D -- C:\Program Files (x86)\Comodo =>.Comodo Group.
O43 - CFD: 16/04/2013 - [] D -- C:\Program Files (x86)\Convar =>.Convar Deutschland GmbH
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files (x86)\Cyberlink =>.CyberLink Corporation
O43 - CFD: 31/08/2014 - [0] D -- C:\Program Files (x86)\DsNET Corp =>.DsNET Corp
O43 - CFD: 29/11/2012 - [] D -- C:\Program Files (x86)\e-express =>.HUAWEI Technologies Co., Ltd.®
O43 - CFD: 16/04/2013 - [] D -- C:\Program Files (x86)\East Imperial Soft =>.East Imperial Soft
O43 - CFD: 07/11/2011 - [] D -- C:\Program Files (x86)\EhoCW
O43 - CFD: 11/09/2016 - [] D -- C:\Program Files (x86)\Evolus =>.Evolus
O43 - CFD: 06/04/2013 - [] D -- C:\Program Files (x86)\File Recovery =>.File Recovery
O43 - CFD: 01/05/2017 - [] D -- C:\Program Files (x86)\FLV-Media Player
O43 - CFD: 16/09/2017 - [] D -- C:\Program Files (x86)\Free Sound Recorder =>.CoolMedia, LLC
O43 - CFD: 12/09/2017 - [] D -- C:\Program Files (x86)\freebird
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\Freemake =>.Freemake
O43 - CFD: 13/12/2012 - [] D -- C:\Program Files (x86)\FreeTime =>.FreeTime
O43 - CFD: 16/04/2013 - [] D -- C:\Program Files (x86)\GetData
O43 - CFD: 12/09/2017 - [] D -- C:\Program Files (x86)\GLPCCamera =>.Unknown
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 25/12/2012 - [] D -- C:\Program Files (x86)\HMA! Pro VPN =>.HMA!
O43 - CFD: 09/04/2017 - [] D -- C:\Program Files (x86)\Holdem Manager 2
O43 - CFD: 23/01/2012 - [] D -- C:\Program Files (x86)\ImTOO =>.ImTOO
O43 - CFD: 12/09/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.InstallShield
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation
O43 - CFD: 13/09/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 19/10/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle
O43 - CFD: 21/03/2017 - [] D -- C:\Program Files (x86)\JLG Utilities
O43 - CFD: 26/12/2016 - [] D -- C:\Program Files (x86)\Launch Manager =>.Legitimate
O43 - CFD: 25/10/2016 - [0] D -- C:\Program Files (x86)\Lavasoft =>.Lavasoft
O43 - CFD: 09/03/2014 - [] D -- C:\Program Files (x86)\LogProtect
O43 - CFD: 27/09/2017 - [] D -- C:\Program Files (x86)\Lottomatica.it Poker
O43 - CFD: 26/12/2016 - [] D -- C:\Program Files (x86)\Lottomatica.it Poker - PREVIEW
O43 - CFD: 15/11/2013 - [] D -- C:\Program Files (x86)\MarkAny =>.MarkAny
O43 - CFD: 24/04/2012 - [] D -- C:\Program Files (x86)\Microsoft =>.Microsoft Corporation
O43 - CFD: 13/05/2015 - [] D -- C:\Program Files (x86)\Microsoft Application Virtualization Client =>.Microsoft Corporation
O43 - CFD: 16/11/2011 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 06/07/2014 - [] D -- C:\Program Files (x86)\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 24/06/2017 - [] D -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 14/10/2011 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 01/07/2014 - [] D -- C:\Program Files (x86)\Mobile Partner =>.Mobile Partner
O43 - CFD: 04/10/2017 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 04/10/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 09/09/2011 - [0] D -- C:\Program Files (x86)\MSXML 4.0 =>.Microsoft Corporation
O43 - CFD: 16/10/2015 - [] D -- C:\Program Files (x86)\NCPlot v2.32
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files (x86)\Nero =>.Ahead Corporation
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files (x86)\NewTech Infosystems =>.NewTech Infosystems, Inc®
O43 - CFD: 16/10/2016 - [] D -- C:\Program Files (x86)\Notepad++ =>.Don Ho
O43 - CFD: 27/03/2017 - [] D -- C:\Program Files (x86)\OpenOffice 4 =>.OpenOffice.org
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\OpenOffice Beta 4 =>.SourceForge
O43 - CFD: 06/07/2014 - [] D -- C:\Program Files (x86)\OpenOffice.org 3 =>.SourceForge
O43 - CFD: 15/09/2015 - [] D -- C:\Program Files (x86)\Opera =>.Opera Software
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Packard Bell =>.Packard Bell
O43 - CFD: 08/03/2012 - [] D -- C:\Program Files (x86)\Packard Bell Games =>.WildTangent
O43 - CFD: 17/04/2013 - [] D -- C:\Program Files (x86)\Pandora Recovery =>.Pandora Corp®
O43 - CFD: 24/10/2016 - [] D -- C:\Program Files (x86)\PDF Architect =>.pdfforge GmbH
O43 - CFD: 26/12/2016 - [] D -- C:\Program Files (x86)\Poker Club by Lottomatica
O43 - CFD: 09/04/2017 - [] D -- C:\Program Files (x86)\PokerStars.IT =>.Amaya Services Limited®
O43 - CFD: 07/09/2012 - [] D -- C:\Program Files (x86)\PokerTracker 3
O43 - CFD: 07/09/2012 - [] D -- C:\Program Files (x86)\PokerTracker 4
O43 - CFD: 10/04/2012 - [] D -- C:\Program Files (x86)\Pool Rebel for Windows
O43 - CFD: 27/08/2012 - [] D -- C:\Program Files (x86)\PostgreSQL =>.PostgreSQL
O43 - CFD: 16/05/2016 - [] D -- C:\Program Files (x86)\Real =>.RealNetworks Inc.
O43 - CFD: 20/07/2017 - [] D -- C:\Program Files (x86)\Reason =>.Reason Software Company Inc.®
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 28/07/2013 - [] D -- C:\Program Files (x86)\Remo Repair AVI 2.0
O43 - CFD: 16/04/2013 - [] D -- C:\Program Files (x86)\Rene.e Laboratory =>.Rene.E Laboratory
O43 - CFD: 17/04/2013 - [] D -- C:\Program Files (x86)\Runtime Software =>.Runtime Software
O43 - CFD: 18/12/2013 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics
O43 - CFD: 13/11/2013 - [] D -- C:\Program Files (x86)\SecurityXploded =>.SecurityXploded
O43 - CFD: 15/09/2017 - [] RD -- C:\Program Files (x86)\Skype =>.Skype
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files (x86)\Social Networks =>.CyberLink®
O43 - CFD: 26/12/2016 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy =>.SaferNetworking
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\Stellar Phoenix Windows Data Recovery =>.Stellar Systems
O43 - CFD: 20/07/2017 - [0] HD -- C:\Program Files (x86)\Temp =>.Microsoft Corporation
O43 - CFD: 07/07/2014 - [0] D -- C:\Program Files (x86)\Trend Micro =>.Trend Micro
O43 - CFD: 14/07/2009 - [0] D -- C:\Program Files (x86)\Uninstall Information =>.Microsoft Corporation
O43 - CFD: 14/11/2013 - [] D -- C:\Program Files (x86)\Video to Video =>.Media Converters
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Video Web Camera =>.Video Web Camera
O43 - CFD: 31/08/2014 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team
O43 - CFD: 09/12/2013 - [] D -- C:\Program Files (x86)\WEBpatente4
O43 - CFD: 26/10/2015 - [] D -- C:\Program Files (x86)\WEBpatente42
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 06/07/2014 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 22/01/2017 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 13/09/2011 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 05/06/2016 - [] D -- C:\Program Files (x86)\XM MT4
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip =>.Igor Pavlov
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AbiWord Word Processor =>.SourceGear
O43 - CFD: 29/08/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aidfile recovery Professional
O43 - CFD: 27/04/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnvSoft =>.AnvSoft Inc
O43 - CFD: 28/03/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center =>.Advanced Micro Devices Inc
O43 - CFD: 26/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\e-express
O43 - CFD: 16/04/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\East Imperial Soft =>.East Imperial Soft
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EhoCW
O43 - CFD: 11/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evolus =>.Evolus
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Expresso =>.eXpresso
O43 - CFD: 07/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client =>.Tim Kosse
O43 - CFD: 01/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV-Media Player
O43 - CFD: 16/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Sound Recorder =>.CoolMedia, LLC
O43 - CFD: 21/01/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation
O43 - CFD: 21/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GD Poker
O43 - CFD: 12/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GLPCCamera =>.Unknown
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth =>.Google Earth
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HMA! Pro VPN =>.HMA!
O43 - CFD: 21/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Holdem Manager 2
O43 - CFD: 23/01/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImTOO =>.ImTOO
O43 - CFD: 29/08/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel =>.Intel Corporation
O43 - CFD: 19/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 21/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JLG Extended Keyboard Layout US (v1.1)
O43 - CFD: 19/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft =>.Lavasoft
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogProtect
O43 - CFD: 24/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lottomatica.it Poker
O43 - CFD: 26/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lottomatica.it Poker - PREVIEW
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes
O43 - CFD: 17/11/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Italiano) =>.Microsoft Corporation
O43 - CFD: 21/06/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile Partner =>.Mobile Partner
O43 - CFD: 29/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64 =>.MPC-HC Team
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPcCleaner
O43 - CFD: 16/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCPlot v2.32
O43 - CFD: 25/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero =>.Ahead Corporation
O43 - CFD: 27/03/2017 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.3 =>.SourceForge
O43 - CFD: 26/12/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support =>.Packard Bell
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pandora Recovery
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PartyPoker.it
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect =>.pdfforge GmbH
O43 - CFD: 26/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Poker Club by Lottomatica
O43 - CFD: 24/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerStars.IT
O43 - CFD: 05/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerTracker 3
O43 - CFD: 05/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PokerTracker 4
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pool Rebel for Windows
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostgreSQL 8.4
O43 - CFD: 16/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva =>.Piriform
O43 - CFD: 16/04/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.e Laboratory =>.Rene.E Laboratory
O43 - CFD: 15/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung =>.Samsung Electronics
O43 - CFD: 15/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype
O43 - CFD: 12/09/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart PC Recorder
O43 - CFD: 29/08/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Social Networks
O43 - CFD: 21/09/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 17/04/2013 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Windows Data Recovery =>.Stellar Systems
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Windows Data Recovery - Home =>.Stellar Systems
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video to Video =>.Media Converters
O43 - CFD: 29/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Web Camera =>.Video Web Camera
O43 - CFD: 01/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team
O43 - CFD: 31/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wampserver64 =>.Aestan Software
O43 - CFD: 30/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WEBpatente
O43 - CFD: 29/08/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live =>.Microsoft Corporation
O43 - CFD: 15/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 06/07/2014 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 16/10/2015 - [] D -- C:\ProgramData\Ange Softs =>.Ange Softs
O43 - CFD: 24/06/2012 - [] D -- C:\ProgramData\Apple =>.Apple Inc.
O43 - CFD: 24/06/2012 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc.
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 24/09/2011 - [] D -- C:\ProgramData\ATI =>.ATI
O43 - CFD: 27/09/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software
O43 - CFD: 17/02/2011 - [] D -- C:\ProgramData\BackupManager =>.BackupManager
O43 - CFD: 16/04/2013 - [] D -- C:\ProgramData\CrypKey =>.Kenonix
O43 - CFD: 05/12/2012 - [] D -- C:\ProgramData\CyberLink =>.CyberLink Corporation
O43 - CFD: 01/07/2014 - [] D -- C:\ProgramData\DatacardService =>.Entriq, Inc.
O43 - CFD: 09/09/2011 - [0] SHD -- C:\ProgramData\Dati applicazioni =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 09/09/2011 - [0] SHD -- C:\ProgramData\Documenti =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 23/11/2012 - [] D -- C:\ProgramData\e-express
O43 - CFD: 06/07/2014 - [0] D -- C:\ProgramData\eMule =>.Emule (P2P)
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation
O43 - CFD: 09/01/2012 - [] D -- C:\ProgramData\FLEXnet =>.Flexera Software
O43 - CFD: 22/09/2011 - [] D -- C:\ProgramData\FloodLightGames =>.Floodlight Games
O43 - CFD: 03/01/2017 - [0] D -- C:\ProgramData\Freemake =>.Freemake
O43 - CFD: 12/09/2017 - [] D -- C:\ProgramData\GLPCCamera =>.Unknown
O43 - CFD: 20/10/2014 - [] D -- C:\ProgramData\HipSoft =>.HipSoft Games
O43 - CFD: 23/01/2012 - [] D -- C:\ProgramData\ImTOO =>.ImTOO
O43 - CFD: 16/10/2015 - [] D -- C:\ProgramData\IsolatedStorage =>.id Software
O43 - CFD: 19/01/2017 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files =>.Kaspersky Lab
O43 - CFD: 25/10/2016 - [0] D -- C:\ProgramData\Lavasoft =>.Lavasoft
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes
O43 - CFD: 02/10/2017 - [] D -- C:\ProgramData\MB2Migration
O43 - CFD: 21/09/2017 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 09/09/2011 - [0] SHD -- C:\ProgramData\Menu Avvio =>.Microsoft Corporation
O43 - CFD: 19/03/2016 - [] D -- C:\ProgramData\MetaQuotes
O43 - CFD: 21/01/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 01/12/2012 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 06/07/2014 - [] D -- C:\ProgramData\Microsoft OneDrive =>.Microsoft Corporation
O43 - CFD: 09/09/2011 - [0] SHD -- C:\ProgramData\Modelli =>.Microsoft Corporation
O43 - CFD: 03/05/2012 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation
O43 - CFD: 25/09/2017 - [] D -- C:\ProgramData\Nero =>.Ahead Corporation
O43 - CFD: 09/09/2011 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation
O43 - CFD: 17/02/2011 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec
O43 - CFD: 09/09/2011 - [] D -- C:\ProgramData\oem =>.OEM
O43 - CFD: 29/11/2012 - [] D -- C:\ProgramData\OnlineUpdate =>.Huawei Technologies Co.,Ltd
O43 - CFD: 19/10/2016 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 08/05/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 17/02/2011 - [] D -- C:\ProgramData\Packard Bell =>.Packard Bell
O43 - CFD: 09/09/2011 - [0] SHD -- C:\ProgramData\Preferiti =>.Microsoft Corporation
O43 - CFD: 16/05/2016 - [] D -- C:\ProgramData\Real =>.RealNetworks Inc.
O43 - CFD: 26/12/2016 - [] D -- C:\ProgramData\RogueKiller =>.Adlice Software
O43 - CFD: 07/08/2013 - [] D -- C:\ProgramData\Samsung =>.Samsung Electronics
O43 - CFD: 15/09/2017 - [] D -- C:\ProgramData\Skype =>.Skype
O43 - CFD: 26/12/2016 - [] D -- C:\ProgramData\Spybot - Search & Destroy =>.SaferNetworking
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 02/11/2011 - [] D -- C:\ProgramData\Sun =>.Oracle
O43 - CFD: 29/01/2014 - [] AD -- C:\ProgramData\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 17/11/2011 - [] D -- C:\ProgramData\VirtualizedApplications =>.Microsoft Corporation
O43 - CFD: 21/01/2017 - [] D -- C:\ProgramData\WildTangent =>.WildTangent
O43 - CFD: 03/01/2017 - [0] D -- C:\ProgramData\WinZip =>.WinZip
O43 - CFD: 07/01/2012 - [] D -- C:\ProgramData\XHEO INC
O43 - CFD: 05/08/2014 - [] SHD -- C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 15/05/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR =>.Adobe Inc.
O43 - CFD: 03/01/2017 - [] D -- C:\Program Files (x86)\Common Files\Apple =>.Apple Inc.
O43 - CFD: 03/12/2015 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast
O43 - CFD: 14/05/2014 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Common Files\InstallShield =>.InstallShield
O43 - CFD: 19/10/2016 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared =>.Rovi Corporation
O43 - CFD: 12/05/2017 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared =>.Microsoft Corporation
O43 - CFD: 25/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Nero =>.Ahead Corporation
O43 - CFD: 12/11/2013 - [0] D -- C:\Program Files (x86)\Common Files\PDF Architect =>.pdfforge GmbH
O43 - CFD: 17/02/2011 - [] D -- C:\Program Files (x86)\Common Files\postureAgent =>.Microsoft Corporation
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine =>.Sonic Solutions
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 15/09/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype =>.Skype
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared =>.Sonic
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines =>.Microsoft Corporation
O43 - CFD: 15/01/2014 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 28/03/2011 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation
O43 - CFD: 06/03/2013 - [] D -- C:\Users\DF\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 27/04/2013 - [] D -- C:\Users\DF\AppData\Roaming\AnvSoft =>.AnvSoft Inc
O43 - CFD: 17/04/2016 - [] D -- C:\Users\DF\AppData\Roaming\Apowersoft =>.Apowersoft
O43 - CFD: 15/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 24/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\ATI =>.ATI
O43 - CFD: 05/08/2014 - [] D -- C:\Users\DF\AppData\Roaming\AVG =>.AVG Software
O43 - CFD: 10/04/2015 - [] D -- C:\Users\DF\AppData\Roaming\cef-cache
O43 - CFD: 07/01/2017 - [] D -- C:\Users\DF\AppData\Roaming\cef3-cache
O43 - CFD: 02/12/2016 - [] D -- C:\Users\DF\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant =>.Adobe Inc.
O43 - CFD: 23/01/2012 - [] D -- C:\Users\DF\AppData\Roaming\DVD Flick =>.Dennis Meuwissen
O43 - CFD: 02/03/2015 - [] D -- C:\Users\DF\AppData\Roaming\dvdcss =>.VideoLan Team
O43 - CFD: 25/09/2017 - [] D -- C:\Users\DF\AppData\Roaming\Electrum =>.Electrum
O43 - CFD: 25/09/2017 - [] D -- C:\Users\DF\AppData\Roaming\FileZilla =>.FileZilla
O43 - CFD: 22/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\FloodLightGames =>.Floodlight Games
O43 - CFD: 16/09/2017 - [] D -- C:\Users\DF\AppData\Roaming\Free Sound Recorder =>.CoolMedia, LLC
O43 - CFD: 12/03/2013 - [] D -- C:\Users\DF\AppData\Roaming\FreeCall
O43 - CFD: 10/04/2015 - [] D -- C:\Users\DF\AppData\Roaming\GIOCODIGITALE
O43 - CFD: 07/01/2012 - [] D -- C:\Users\DF\AppData\Roaming\HEM Data
O43 - CFD: 20/09/2017 - [] D -- C:\Users\DF\AppData\Roaming\HoldemManager =>.HoldemManager
O43 - CFD: 09/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Identities =>.Microsoft Corporation
O43 - CFD: 23/01/2012 - [] D -- C:\Users\DF\AppData\Roaming\ImTOO =>.ImTOO
O43 - CFD: 09/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Intel Corporation =>.Intel Corporation
O43 - CFD: 31/08/2014 - [] D -- C:\Users\DF\AppData\Roaming\KastorAllVideoDownloader =>.KastorSoft
O43 - CFD: 14/05/2016 - [0] D -- C:\Users\DF\AppData\Roaming\Lavasoft =>.Lavasoft
O43 - CFD: 09/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 18/07/2012 - [] D -- C:\Users\DF\AppData\Roaming\Malwarebytes =>.Malwarebytes
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\DF\AppData\Roaming\Media Center Programs =>.Microsoft Corporation
O43 - CFD: 19/03/2016 - [] D -- C:\Users\DF\AppData\Roaming\MetaQuotes
O43 - CFD: 21/01/2017 - [] SD -- C:\Users\DF\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 06/10/2014 - [] D -- C:\Users\DF\AppData\Roaming\ML =>.ML
O43 - CFD: 09/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 03/01/2012 - [] D -- C:\Users\DF\AppData\Roaming\Mozilla-Cache =>.Mozilla
O43 - CFD: 29/03/2017 - [] D -- C:\Users\DF\AppData\Roaming\MPC-HC =>.MPC-HC Team
O43 - CFD: 16/10/2015 - [] D -- C:\Users\DF\AppData\Roaming\NCPlot Software
O43 - CFD: 18/09/2011 - [] D -- C:\Users\DF\AppData\Roaming\Nero =>.Ahead Corporation
O43 - CFD: 14/10/2015 - [] D -- C:\Users\DF\AppData\Roaming\NJSTC
O43 - CFD: 17/10/2016 - [] D -- C:\Users\DF\AppData\Roaming\Notepad++ =>.Don Ho
O43 - CFD: 07/08/2012 - [] D -- C:\Users\DF\AppData\Roaming\Nyzop
O43 - CFD: 11/07/2014 - [] D -- C:\Users\DF\AppData\Roaming\OpenOffice =>.SourceForge
O43 - CFD: 02/11/2011 - [] D -- C:\Users\DF\AppData\Roaming\OpenOffice.org =>.OpenOffice.org
O43 - CFD: 18/01/2015 - [] D -- C:\Users\DF\AppData\Roaming\OpenOfficeBeta =>.SourceForge
O43 - CFD: 12/09/2015 - [] D -- C:\Users\DF\AppData\Roaming\Opera Software =>.Opera Software
O43 - CFD: 18/03/2013 - [] D -- C:\Users\DF\AppData\Roaming\PandoraRecovery
O43 - CFD: 07/07/2013 - [] D -- C:\Users\DF\AppData\Roaming\PartyItalia
O43 - CFD: 07/07/2014 - [] D -- C:\Users\DF\AppData\Roaming\PDF Architect =>.pdfforge GmbH
O43 - CFD: 11/09/2016 - [] D -- C:\Users\DF\AppData\Roaming\Pencil =>.Duong Thanh
O43 - CFD: 14/05/2012 - [] D -- C:\Users\DF\AppData\Roaming\Pool Rebel
O43 - CFD: 24/07/2016 - [] D -- C:\Users\DF\AppData\Roaming\qBittorrent
O43 - CFD: 13/09/2017 - [0] D -- C:\Users\DF\AppData\Roaming\QuickScan =>.Bitdefender
O43 - CFD: 16/05/2016 - [] D -- C:\Users\DF\AppData\Roaming\Real =>.RealNetworks Inc.
O43 - CFD: 16/11/2014 - [] D -- C:\Users\DF\AppData\Roaming\Roaming =>.Microsoft Corporation
O43 - CFD: 03/01/2017 - [] D -- C:\Users\DF\AppData\Roaming\Samsung =>.Samsung Electronics
O43 - CFD: 03/03/2015 - [] D -- C:\Users\DF\AppData\Roaming\SitNGoWizard
O43 - CFD: 03/10/2017 - [] D -- C:\Users\DF\AppData\Roaming\Skype =>.Skype
O43 - CFD: 19/12/2012 - [] D -- C:\Users\DF\AppData\Roaming\SNS =>.SNS
O43 - CFD: 01/08/2017 - [] D -- C:\Users\DF\AppData\Roaming\SoftGrid Client =>.Microsoft Corporation
O43 - CFD: 05/09/2016 - [] D -- C:\Users\DF\AppData\Roaming\Sublime Text 2
O43 - CFD: 02/09/2016 - [] D -- C:\Users\DF\AppData\Roaming\Sublime Text 3
O43 - CFD: 06/10/2015 - [] D -- C:\Users\DF\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 16/11/2011 - [0] D -- C:\Users\DF\AppData\Roaming\TP =>.TP
O43 - CFD: 01/10/2017 - [] D -- C:\Users\DF\AppData\Roaming\Update available
O43 - CFD: 03/07/2014 - [] D -- C:\Users\DF\AppData\Roaming\uTorrent
O43 - CFD: 27/03/2017 - [] D -- C:\Users\DF\AppData\Roaming\ViberPC =>.Viber
O43 - CFD: 24/09/2017 - [] D -- C:\Users\DF\AppData\Roaming\vlc =>.VideoLan Team
O43 - CFD: 04/10/2011 - [] D -- C:\Users\DF\AppData\Roaming\VoipCheapCom
O43 - CFD: 24/04/2013 - [] D -- C:\Users\DF\AppData\Roaming\WildTangent =>.WildTangent
O43 - CFD: 22/10/2012 - [0] D -- C:\Users\DF\AppData\Roaming\Windows Live Writer =>.Microsoft Corporation
O43 - CFD: 29/12/2013 - [] D -- C:\Users\DF\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 01/02/2013 - [] D -- C:\Users\DF\AppData\Roaming\www.rmastri.it
O43 - CFD: 15/09/2012 - [] D -- C:\Users\DF\AppData\Roaming\Youtube Downloader HD =>.Regensoft
O43 - CFD: 04/10/2017 - [] D -- C:\Users\DF\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 29/11/2012 - [] D -- C:\Users\DF\AppData\Roaming\ZTEEVDO
O43 - CFD: 02/05/2017 - [] D -- C:\Users\DF\AppData\Local\Adobe =>.Adobe
O43 - CFD: 06/07/2014 - [] D -- C:\Users\DF\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 02/05/2016 - [] D -- C:\Users\DF\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 22/01/2015 - [] D -- C:\Users\DF\AppData\Local\ATI =>.ATI
O43 - CFD: 19/02/2016 - [] D -- C:\Users\DF\AppData\Local\AVG =>.AVG Software
O43 - CFD: 25/10/2016 - [] D -- C:\Users\DF\AppData\Local\AvgSetupLog =>.AVG Software
O43 - CFD: 24/01/2017 - [] D -- C:\Users\DF\AppData\Local\Boss Media
O43 - CFD: 23/02/2017 - [] D -- C:\Users\DF\AppData\Local\Bossmedia
O43 - CFD: 25/08/2014 - [] D -- C:\Users\DF\AppData\Local\cache =>.Legitimate
O43 - CFD: 07/07/2016 - [] D -- C:\Users\DF\AppData\Local\CEF =>.CEF
O43 - CFD: 30/08/2014 - [] D -- C:\Users\DF\AppData\Local\Comodo =>.Comodo Group.
O43 - CFD: 28/09/2017 - [] D -- C:\Users\DF\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 17/09/2017 - [] D -- C:\Users\DF\AppData\Local\CrashRpt
O43 - CFD: 09/09/2011 - [0] SHD -- C:\Users\DF\AppData\Local\Dati applicazioni =>.Microsoft Corporation
O43 - CFD: 16/05/2016 - [0] D -- C:\Users\DF\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 11/08/2014 - [0] D -- C:\Users\DF\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 23/03/2015 - [] D -- C:\Users\DF\AppData\Local\Eclipse =>.Eclipse
O43 - CFD: 24/09/2017 - [] D -- C:\Users\DF\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 29/06/2015 - [0] SHD -- C:\Users\DF\AppData\Local\EmieBrowserModeList =>.Enterprise mode Site List Mgr
O43 - CFD: 29/06/2015 - [0] SHD -- C:\Users\DF\AppData\Local\EmieSiteList =>.Enterprise mode Site List Mgr
O43 - CFD: 29/06/2015 - [0] SHD -- C:\Users\DF\AppData\Local\EmieUserList =>.Enterprise mode Site List Mgr
O43 - CFD: 13/11/2013 - [] D -- C:\Users\DF\AppData\Local\Eraser 6 =>.Sami Tolvanen
O43 - CFD: 26/12/2016 - [] D -- C:\Users\DF\AppData\Local\Facebook =>.Facebook
O43 - CFD: 30/12/2016 - [] D -- C:\Users\DF\AppData\Local\FileZilla =>.FileZilla
O43 - CFD: 05/08/2014 - [] D -- C:\Users\DF\AppData\Local\FreemakeVideoDownloader =>.Ellora Assets Corporation
O43 - CFD: 25/08/2014 - [] D -- C:\Users\DF\AppData\Local\FullTiltPoker
O43 - CFD: 02/10/2017 - [] D -- C:\Users\DF\AppData\Local\Google =>.Google
O43 - CFD: 12/06/2015 - [] D -- C:\Users\DF\AppData\Local\GWX =>.GWX
O43 - CFD: 07/01/2012 - [] D -- C:\Users\DF\AppData\Local\Hold'em_Manager
O43 - CFD: 23/01/2012 - [] D -- C:\Users\DF\AppData\Local\ImTOO =>.ImTOO
O43 - CFD: 17/09/2013 - [] D -- C:\Users\DF\AppData\Local\In The Money
O43 - CFD: 07/01/2012 - [] D -- C:\Users\DF\AppData\Local\IsolatedStorage =>.id Software
O43 - CFD: 22/07/2016 - [] D -- C:\Users\DF\AppData\Local\JDownloader v2.0 =>.JDownloader
O43 - CFD: 19/02/2016 - [] D -- C:\Users\DF\AppData\Local\Lavasoft =>.Lavasoft
O43 - CFD: 16/06/2012 - [] D -- C:\Users\DF\AppData\Local\Macromedia =>.Macromedia
O43 - CFD: 26/12/2016 - [] D -- C:\Users\DF\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/04/2012 - [] D -- C:\Users\DF\AppData\Local\Microsoft Games =>.Microsoft Corporation
O43 - CFD: 09/06/2012 - [0] D -- C:\Users\DF\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 01/10/2013 - [] D -- C:\Users\DF\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 12/09/2015 - [] D -- C:\Users\DF\AppData\Local\Opera Software =>.Opera Software
O43 - CFD: 20/08/2012 - [] D -- C:\Users\DF\AppData\Local\P5
O43 - CFD: 11/09/2016 - [] D -- C:\Users\DF\AppData\Local\Pencil =>.Duong Thanh
O43 - CFD: 21/05/2016 - [] D -- C:\Users\DF\AppData\Local\PokerStars =>.PokerStars
O43 - CFD: 09/04/2017 - [] D -- C:\Users\DF\AppData\Local\PokerStars.IT
O43 - CFD: 28/08/2012 - [] D -- C:\Users\DF\AppData\Local\PokerTracker 4
O43 - CFD: 26/12/2016 - [] D -- C:\Users\DF\AppData\Local\PosService
O43 - CFD: 04/04/2012 - [] D -- C:\Users\DF\AppData\Local\PowerOffer
O43 - CFD: 16/09/2017 - [] D -- C:\Users\DF\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 22/07/2016 - [] D -- C:\Users\DF\AppData\Local\qBittorrent
O43 - CFD: 19/04/2013 - [] D -- C:\Users\DF\AppData\Local\Rohos
O43 - CFD: 14/08/2013 - [] D -- C:\Users\DF\AppData\Local\Samsung =>.Samsung Electronics
O43 - CFD: 14/06/2016 - [0] D -- C:\Users\DF\AppData\Local\Skype =>.Skype
O43 - CFD: 16/11/2011 - [] D -- C:\Users\DF\AppData\Local\SoftGrid Client =>.Microsoft Corporation
O43 - CFD: 28/10/2016 - [] D -- C:\Users\DF\AppData\Local\Sublime Text 3
O43 - CFD: 23/09/2011 - [] D -- C:\Users\DF\AppData\Local\Sunugraf
O43 - CFD: 04/10/2017 - [] D -- C:\Users\DF\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 09/09/2011 - [0] SHD -- C:\Users\DF\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 23/03/2017 - [] D -- C:\Users\DF\AppData\Local\Viber =>.Viber
O43 - CFD: 02/01/2016 - [] D -- C:\Users\DF\AppData\Local\Viber Media S.à r.l =>.Viber Media S.à r.l
O43 - CFD: 01/07/2014 - [] D -- C:\Users\DF\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 07/12/2013 - [] D -- C:\Users\DF\AppData\Local\VLC Links
O43 - CFD: 20/03/2014 - [] D -- C:\Users\DF\AppData\Local\Windows Live =>.Microsoft Corporation
O43 - CFD: 17/05/2015 - [] D -- C:\Users\DF\AppData\Local\Windows Live Writer =>.Microsoft Corporation
O43 - CFD: 01/02/2013 - [] D -- C:\Users\DF\AppData\Local\www.rmastri.it
O43 - CFD: 29/09/2017 - [] D -- C:\Users\DF\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 19/07/2016 - [] D -- C:\Users\DF\AppData\Local\{D07DE621-F4D5-8A99-994D-AF71BD2553E9}
O43 - CFD: 08/03/2013 - [0] D -- C:\Users\DF\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 20/09/2017 - [] D -- C:\Users\DF\AppData\Local\Programs\Opera =>.Opera Software
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 13/09/2017 - [] RD -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 28/04/2013 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar =>.Convar Deutschland GmbH
O43 - CFD: 16/04/2013 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\East Imperial Soft =>.East Imperial Soft
O43 - CFD: 07/11/2011 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EhoCW
O43 - CFD: 11/09/2016 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Evolus =>.Evolus
O43 - CFD: 15/09/2015 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome =>.Google Inc.
O43 - CFD: 14/09/2017 - [0] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HiJackThis =>.Trend Micro
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 26/12/2016 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Poker Club by Lottomatica
O43 - CFD: 20/07/2017 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Should I Remove It
O43 - CFD: 13/09/2017 - [] RD -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 15/05/2016 - [] D -- C:\Users\DF\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 30/03/2016 - [] D -- C:\Users\Default\AppData\Local\AVG =>.AVG Software
O43 - CFD: 09/09/2011 - [0] SHD -- C:\Users\Default\AppData\Local\Dati applicazioni =>.Microsoft Corporation
O43 - CFD: 28/06/2013 - [] D -- C:\Users\Default\AppData\Local\Google =>.Google
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 30/03/2016 - [] D -- C:\Users\Default User\AppData\Local\AVG =>.AVG Software
O43 - CFD: 09/09/2011 - [0] SHD -- C:\Users\Default User\AppData\Local\Dati applicazioni =>.Microsoft Corporation
O43 - CFD: 28/06/2013 - [] D -- C:\Users\Default User\AppData\Local\Google =>.Google
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 19/02/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\AVG =>.AVG Software
O43 - CFD: 25/10/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\AvgSetupLog =>.AVG Software
O43 - CFD: 02/04/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\CrashDumps =>.Microsoft Corporation
O43 - CFD: 25/09/2011 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Google =>.Google
O43 - CFD: 04/03/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Lavasoft =>.Lavasoft
O43 - CFD: 14/07/2009 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 29/10/2016 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\SoftGrid Client =>.Microsoft Corporation
O43 - CFD: 30/09/2017 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 03/11/2013 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 01/07/2014 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 05/08/2014 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\AVG =>.AVG Software
O43 - CFD: 21/03/2014 - [0] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\LogProtect
O43 - CFD: 07/07/2016 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 16/12/2014 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Real =>.RealNetworks Inc.
O43 - CFD: 04/10/2017 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\SoftGrid Client =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 1s
O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\DF\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\DF\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\DF\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL di estensione della shell per Archiviaz.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Estensioni shell per la condivisione.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Enumerazione della chiave StartupReg (16) - 1s
O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] [64Bits] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.
O53 - SMSR:HKLM\...\startupreg\AvgUi [Key] [64Bits] . (...) -- C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\EDAHelper [Key] [64Bits] . (...) -- C:\Users\DF\AppData\Local\Temp\Rar$EXa0.073\ZXW\SETUP\EDAHelper.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Eraser [Key] [64Bits] . (.The Eraser Project - Eraser.) -- C:\PROGRA~1\Eraser\Eraser.exe =>.The Eraser Project
O53 - SMSR:HKLM\...\startupreg\ETDWare [Key] [64Bits] . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe =>.ELAN Microelectronic Corp.
O53 - SMSR:HKLM\...\startupreg\FreeCall [Key] [64Bits] . (...) -- C:\Program Files (x86)\FreeCall.com\FreeCall\freecall.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\GLSystray [Key] [64Bits] . (...) -- C:\Program Files (x86)\GLPCCamera\monitorpad.exe
O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] [64Bits] . (...) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\KiesPDLR.exe [Key] [64Bits] . (.Samsung - .) -- C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe =>.Samsung
O53 - SMSR:HKLM\...\startupreg\KiesPreload [Key] [64Bits] . (.Samsung - Kies.) -- C:\Program Files (x86)\Samsung\Kies\Kies.exe =>.Samsung
O53 - SMSR:HKLM\...\startupreg\Norton Online Backup [Key] [64Bits] . (...) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\ProductUpdater [Key] [64Bits] . (...) -- C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] [64Bits] . (...) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Skype [Key] [64Bits] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] [64Bits] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation
O53 - SMSR:HKLM\...\startupreg\VoipCheapCom [Key] [64Bits] . (...) -- C:\Program Files (x86)\VoipCheapCom.com\VoipCheapCom\voipcheapcom.exe (.not file.)

---\\ Elenco dei driver del sistema (99) - 84s
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows®
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows®
O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows®
O58 - SDL:2011/08/15 18:43:38 A . (.Google Inc - ADB Interface.) -- C:\Windows\System32\drivers\androidusb.sys [38424] =>.ZTE CORPORATION ®
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows®
O58 - SDL:2010/05/11 12:11:38 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [2229608] =>.Atheros Communications Inc.®
O58 - SDL:2010/08/25 18:50:48 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [6856192] =>.ATI Technologies Inc.
O58 - SDL:2010/08/25 16:05:44 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [264192] =>.Advanced Micro Devices, Inc.
O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd.
O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Driver I/F seriale Brother (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation
O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2015/06/19 12:25:44 A . (.Connectify - NDISRD helper driver.) -- C:\Windows\System32\drivers\cnnctfy3.sys [42152] =>.Connectify®
O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows®
O58 - SDL:2010/04/13 12:15:04 A . (.ELAN Microelectronic Corp. - ETD Control Center.) -- C:\Windows\System32\drivers\ETD.sys [135560] =>.ELAN Microelectronics Corporation®
O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation
O58 - SDL:2010/01/18 18:48:12 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\drivers\ewdcsc.sys [32768] =>.Huawei Tech. Co., Ltd.
O58 - SDL:2010/03/25 10:08:46 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [120704] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/04/30 16:53:10 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ewusbnet.sys [252928] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2012/11/29 13:39:35 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ewusbwwan.sys [417280] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/03/20 11:56:56 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys [114560] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/05/22 14:49:30 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\drivers\ew_jubusenum.sys [83456] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/05/22 14:49:30 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys [78848] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/05/22 14:49:32 A . (.Huawei Technologies Co., Ltd. - ew_jucdcecm Driver.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys [54784] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/05/22 14:49:34 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\drivers\ew_juextctrl.sys [29696] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/05/22 14:50:12 A . (.Huawei Technologies Co., Ltd. - ew_jucdcecm Driver.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys [195584] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2010/03/20 12:06:58 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys [13952] =>.Huawei Technologies Co., Ltd.
O58 - SDL:2011/08/15 18:43:38 A . (.Google Inc - ADB Interface.) -- C:\Windows\System32\drivers\ghsandroid.sys [38424] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ghsdiag.sys [129304] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ghsmdm.sys [129304] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ghsnmea.sys [129304] =>.ZTE CORPORATION ®
O58 - SDL:2015/10/14 05:02:30 A . (.Windows (R) Codename Longhorn DDK provider - GL USB camera.) -- C:\Windows\System32\drivers\glavcam.sys [3468032] =>.Windows (R) Codename Longhorn DDK provider
O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2009/09/17 07:54:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation®
O58 - SDL:2010/11/20 15:33:35 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows®
O58 - SDL:2012/08/01 20:13:42 A . (.AnchorFree Inc. - Hotspot Shield Routing Driver.) -- C:\Windows\System32\drivers\hssdrv6.sys [41704] =>.AnchorFree Inc®
O58 - SDL:2010/04/13 19:44:22 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [540696] =>.Intel Corporation®
O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows®
O58 - SDL:2010/05/15 15:48:28 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\Windows\System32\drivers\k57nd60a.sys [384040] =>.Broadcom Corporation®
O58 - SDL:2009/04/29 16:28:30 A . (.Windows (R) Codename Longhorn DDK provider - KMWDFilter Driver from UASSOFT.COM.) -- C:\Windows\System32\drivers\KMWDFILTER.sys [30208] =>.MLK Technologies Limited®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows®
O58 - SDL:2011/08/15 18:43:38 A . (.HandSet Incorporated - HandSet CDROM Filter.) -- C:\Windows\System32\drivers\massfilter_hs.sys [18456] =>.ZTE CORPORATION ®
O58 - SDL:2017/09/27 09:37:48 A . (...) -- C:\Windows\System32\drivers\mbae64.sys [77440] =>.Malwarebytes Corporation®
O58 - SDL:2017/10/04 18:18:40 A . (.Malwarebytes - Malwarebytes Real-Time Protection.) -- C:\Windows\System32\drivers\mbam.sys [45504] =>.Malwarebytes Corporation®
O58 - SDL:2017/10/02 18:03:34 A . (.Malwarebytes - Malwarebytes Chameleon.) -- C:\Windows\System32\drivers\MbamChameleon.sys [192952] =>.Malwarebytes Corporation®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows®
O58 - SDL:2011/02/11 23:23:34 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [35344] =>.CACE Technologies, Inc.®
O58 - SDL:2009/05/06 02:46:08 A . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [18432] =>.NewTech Infosystems, Inc®
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows®
O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows®
O58 - SDL:2008/06/16 03:00:00 A . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\System32\drivers\PxHlpa64.sys [55024] =>.Sonic Solutions®
O58 - SDL:2017/03/15 05:12:06 A . (.QUALCOMM Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\qcusbser.sys [254520] =>.Microsoft Windows Hardware Compatibility Publisher®
O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows®
O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows®
O58 - SDL:2016/01/08 10:51:46 A . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\System32\drivers\ssadbus.sys [169288] =>.MCCI Corporation®
O58 - SDL:2014/06/16 08:01:30 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcm.sys [17224] =>.MCCI Corporation®
O58 - SDL:2016/01/08 10:51:46 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcmnt.sys [17224] =>.MCCI Corporation®
O58 - SDL:2016/01/08 10:51:46 A . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\System32\drivers\ssadmdfl.sys [21320] =>.MCCI Corporation®
O58 - SDL:2016/01/08 10:51:46 A . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\System32\drivers\ssadmdm.sys [188232] =>.MCCI Corporation®
O58 - SDL:2014/06/16 08:01:30 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwh.sys [17736] =>.MCCI Corporation®
O58 - SDL:2016/01/08 10:51:46 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwhnt.sys [17736] =>.MCCI Corporation®
O58 - SDL:2010/04/27 04:25:20 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdcm.sys [15432] =>.MCCI Corporation®
O58 - SDL:2010/04/27 04:25:20 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdwh.sys [15944] =>.MCCI Corporation®
O58 - SDL:2016/01/08 10:51:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [120416] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/01/08 10:51:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [213088] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2016/01/08 10:51:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile OBEX Device Driver (MSS.) -- C:\Windows\System32\drivers\ssudobex.sys [213088] =>.Samsung Electronics CO., LTD.®
O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows®
O58 - SDL:2011/07/13 16:00:14 A . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [30720] =>.The OpenVPN Project
O58 - SDL:2012/08/01 20:13:40 A . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\taphss.sys [38632] =>.AnchorFree Inc®
O58 - SDL:2010/06/14 10:32:54 A . (.Teruten Inc - File System Mini Filter Drvier.) -- C:\Windows\System32\drivers\TFsExDisk.sys [16448] =>.Teruten, Inc.®
O58 - SDL:2017/09/28 20:01:34 A . (...) -- C:\Windows\System32\drivers\TrueSight.sys [24688] =>.Adlice®
O58 - SDL:2009/05/06 02:46:08 A . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [16896] =>.NewTech Infosystems, Inc®
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsat.sys [129432] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsdiag.sys [129432] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsdiagmdm.sys [129432] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsmdm.sys [129432] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsnmea.sys [129432] =>.ZTE CORPORATION ®
O58 - SDL:2011/08/15 18:43:38 A . (.ZTE Incorporated - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\zghsvousb.sys [129432] =>.ZTE CORPORATION ®

---\\ Ultimi file modificati o creati (utente) (3) - 211s
O61 - LFC: 2017/10/01 11:39:49 A . (..) -- C:\Users\DF\Contacts\Desktop\AdwCleaner.exe [0]
O61 - LFC: 2017/09/29 14:06:41 A . (..) -- C:\Users\DF\Contacts\Desktop\CKScanner.exe [468480]
O61 - LFC: 2017/09/29 14:33:48 A . (..) -- C:\Users\DF\Contacts\Desktop\winchk_2.0.exe [315000]

---\\ Associazioni Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Utilità di avvio snap-in Visualizzatore eve.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- %1" %*
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Editor del Registro di sistema.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu Start Internet (16) - 0s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe =>.Comodo Security Solutions®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\DF\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe =>.Comodo
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\DF\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilità di inizializzazione Per utente di I.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe =>.Comodo
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Users\DF\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilità di inizializzazione Per utente di I.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Comodo - Comodo Dragon.) -- C:\Program Files (x86)\Comodo\Dragon\dragon.exe =>.Comodo
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\DF\AppData\Local\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilità di inizializzazione Per utente di I.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ Cerca infezione su browser internet (6) - 20s
O69 - SBI: prefs.js [DF - l1xs8snd.default] user_pref("browser.search.defaultenginename", "Search Provided by Bing"); =>.SUP.SearchProvided
O69 - SBI: prefs.js [DF - l1xs8snd.default] user_pref("browser.search.hiddenOneOffs", "Google,Search Provided by Bing,Wikipedia (en)"); =>.SUP.SearchProvided
O69 - SBI: prefs.js [DF - l1xs8snd.default] user_pref("browser.search.selectedEngine", "Search Provided by Bing"); =>.SUP.SearchProvided
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Search Provided by Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{7E47FF51-FABA-454E-ACEE-CF91DBDB654F} - (Yahoo Search) - http://it.search.yahoo.com/ =>.Yahoo! Inc.
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Search Provided by Bing) - http://www.bing.com/ =>.Bing.com

---\\ Enumera l''avvio del servizio Svchost (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Servizio verifica compatibilità applicazion.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Servizio Propagazione certificati smart car.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Servizio Propagazione certificati smart car.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL di servizio server.) -- C:\Windows\System32\srvsvc.dll [236032] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client di Criteri di gruppo.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Estensione IKE.) -- C:\Windows\System32\ikeext.dll [859648] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Servizio Audio di Windows.) -- C:\Windows\System32\Audiosrv.dll [680448] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestione composizione automatica di accesso.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Connection Manager di Accesso remoto.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestione interfaccia dinamica.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Servizio di notifica eventi di sistema (SEN.) -- C:\Windows\System32\sens.dll [64512] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Componenti helper NAT Microsoft.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Server di Telefonia Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestione connessioni remote server Host ses.) -- C:\Windows\System32\termsrv.dll [683520] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agente di Windows Update.) -- C:\Windows\System32\wuaueng.dll [2651136] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Servizio trasferimento intelligente in back.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll di servizi shell di Windows.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Servizio che offre connettività IPv6 su una.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL del Servizio di accesso secondario.) -- C:\Windows\system32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Servizio Informazioni applicazioni.) -- C:\Windows\System32\appinfo.dll [70144] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Servizio di individuazione iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Servizio Utilità di pianificazione classi m.) -- C:\Windows\System32\mmcss.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Servizio Configurazione Desktop remoto.) -- C:\Windows\System32\sessenv.dll [121856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL servizio Browser di computer.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Servizio Microsoft EAPHost.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Servizio Utilità di pianificazione.) -- C:\Windows\System32\schedsvc.dll [1110016] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Servizio di gestione delle chiavi.) -- C:\Windows\System32\kmsvc.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Segnalazioni di problemi e soluzioni.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [210432] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL servizio temi shell di Windows.) -- C:\Windows\System32\themeservice.dll [44544] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Servizio BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation

---\\ Scansione aggiuntive (1) - 1s
~ Nessun elemento malevolo o inutili trovato.

---\\ Riepilogo dei elementi trovato sulla workstation (2) - 0s
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.SearchProvided

~ Unselected Options:
~ End of the scan, 49417 items in 09mn34s (1488)(0)