Torna indietro   Hardware Upgrade Forum > Networking e sicurezza > Antivirus e Sicurezza > Aiuto sono infetto! Cosa faccio?

La Formula E può correre su un tracciato vero? Reportage da Misano con Jaguar TCS Racing
La Formula E può correre su un tracciato vero? Reportage da Misano con Jaguar TCS Racing
Abbiamo visto ancora una volta la Formula E da vicino, ospiti di Jaguar TCS Racing. In questa occasione però curve e rettilinei erano quelli di un circuito permanente, molto diverso dagli stretti passaggi delle strade di Roma
Lenovo LEGION e LOQ: due notebook diversi, stessa anima gaming
Lenovo LEGION e LOQ: due notebook diversi, stessa anima gaming
Lenovo ha puntato forte sul gaming negli ultimi anni e lo testimoniano i marchi LEGION e LOQ, il primo per gli amanti delle massime prestazioni e dell'assenza di compromessi, il secondo per chi desidera soluzioni dal buon rapporto tra prestazioni e prezzo. Abbiamo provato due esponenti dell'offerta, così da capire l'effettiva differenza prestazionale.
Nothing Ear e Ear (a): gli auricolari per tutti i gusti! La ''doppia'' recensione
Nothing Ear e Ear (a): gli auricolari per tutti i gusti! La ''doppia'' recensione
Nothing propone sul mercato non uno ma ben due auricolari nuovi: Ear di terza generazione e Ear (a) ossia un nuovo modello a basso costo pronto a ritagliarsi una fetta di mercato. Entrambi rimangono fedeli al marchio per il design ancora trasparente ma fanno un balzo in avanti notevole per qualità e soppressione del rumore.  
Tutti gli articoli Tutte le news

Vai al Forum
Rispondi
 
Strumenti
Old 07-10-2017, 10:20   #1
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
pc lento mi date una mano

Ho da un paio di giorni il pc lentissimo di seguito i log
grazie

Malwarebytes
www.malwarebytes.com

-Dettagli log-
Data scansione: 07/10/17
Ora scansione: 10:27
File di log: 61f653d6-ab39-11e7-9c48-002522d892c1.json
Amministratore: Sì

-Informazioni software-
Versione: 3.2.2.2029
Versione componenti: 1.0.207
Aggiorna versione pacchetto: 1.0.2968
Licenza: Trial

-Informazioni sistema-
SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: Gigi-PC\Gigi

-Riepilogo scansione-
Tipo di scansione: Ricerca elementi nocivi
Risultati: Completata
Elementi analizzati: 372035
Minacce rilevate: 0
(Nessun elemento nocivo rilevato)
Minacce messe in quarantena: 0
(Nessun elemento nocivo rilevato)
Tempo impiegato: 12 min, 55 sec

-Opzioni di scansione-
Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Analisi euristica: Attivata
PUP: Rilevare
PUM: Rilevare

-Dettagli scansione-
Processo: 0
(Nessun elemento nocivo rilevato)

Modulo: 0
(Nessun elemento nocivo rilevato)

Chiave di registro: 0
(Nessun elemento nocivo rilevato)

Valore di registro: 0
(Nessun elemento nocivo rilevato)

Dati di registro: 0
(Nessun elemento nocivo rilevato)

Flusso di dati: 0
(Nessun elemento nocivo rilevato)

Cartella: 0
(Nessun elemento nocivo rilevato)

File: 0
(Nessun elemento nocivo rilevato)

Settore fisico: 0
(Nessun elemento nocivo rilevato)


(end)

# AdwCleaner 7.0.3.1 - Logfile created on Sat Oct 07 08:44:09 2017
# Updated on 2017/29/09 by Malwarebytes
# Database: 10-04-2017.1
# Running on Windows 7 Professional (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########

# AdwCleaner 7.0.3.1 - Logfile created on Sat Oct 07 08:45:08 2017
# Updated on 2017/29/09 by Malwarebytes
# Running on Windows 7 Professional (X64)
# Mode: clean
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services deleted.

***** [ Folders ] *****

No malicious folders deleted.

***** [ Files ] *****

No malicious files deleted.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks deleted.

***** [ Registry ] *****

Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries deleted.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries deleted.

*************************

::Tracing keys deleted
::Winsock settings cleared
::Additional Actions: 0



*************************

C:/AdwCleaner/AdwCleaner[S0].txt - [1326 B] - [2017/10/7 8:44:9]


########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 7 Professional x64
Ran by Gigi (Administrator) on 07/10/2017 at 10:57:20.23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 8

Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFECWNJJ (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L77YPD3C (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N0Z2C9FY (Temporary Internet Files Folder)
Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NLCTJ6EI (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFECWNJJ (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L77YPD3C (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N0Z2C9FY (Temporary Internet Files Folder)
Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NLCTJ6EI (Temporary Internet Files Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07/10/2017 at 10:59:57.55
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017
Ran by Gigi (07-10-2017 11:16:13)
Running from C:\Users\Gigi\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled)
Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi
Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology)
ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.)
Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk)
Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk)
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk)
Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG)
Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy))
Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook)
DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk)
Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited)
eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp)
Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
eMule (HKLM-x32\...\eMule) (Version: - )
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.)
FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG)
Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk)
Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation)
HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard)
HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk)
IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk)
iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla)
Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation)
Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH)
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.)
SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba)
Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk)
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks)
Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk)
Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk)
Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk)
VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp)
Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File
ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.)
ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File
ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)
ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd)
Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)
Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation)
Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it
Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION
Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop
Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll
2017-10-02 08:35 - 2017-10-04 05:36 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-10-02 08:35 - 2017-10-04 05:36 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll
2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe
2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe
MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe
FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: UNTLW WDM Device
Description: UNTLW WDM Device
Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d}
Manufacturer: Schneider Automation
Service: Duntlw
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/07/2017 11:00:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/07/2017 11:00:56 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/07/2017 10:57:47 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhost (3228) Tentativo di apertura del file "C:\Users\Gigi\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" per accesso in sola lettura non riuscito con errore di sistema 32 (0x00000020): "Impossibile accedere al file. Il file è utilizzato da un altro processo. ". L'operazione di apertura file non verrà effettuata con errore -1032 (0xfffffbf8).

Error: (10/07/2017 10:54:41 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/07/2017 10:49:28 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.

Error: (10/07/2017 10:23:59 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2.
L'elemento radice del file manifesto deve essere un assembly.

Error: (10/07/2017 10:18:14 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/07/2017 10:16:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x77c
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f44697f815d
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: cc2f7184-ab37-11e7-8901-002522d892c1

Error: (10/07/2017 10:16:17 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: esu.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.IO.FileNotFoundException
in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext()
in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef)
in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean)
in Garmin.Omt.Service.Shared.Overrides..cctor()

Informazioni sull'eccezione: System.TypeInitializationException
in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl()
in Garmin.Omt.Express.SelfUpdater.Program.RealMain()
in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[])

Error: (10/07/2017 10:06:45 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: emule.exe, versione: 0.50.0.4, timestamp: 0x4bbc81c8
Nome del modulo che ha generato l'errore: emule.exe, versione: 0.50.0.4, timestamp: 0x4bbc81c8
Codice eccezione: 0xc0000005
Offset errore 0x002ce9b4
ID processo che ha generato l'errore: 0x518
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f4204f96378
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\eMule\emule.exe
Percorso del modulo che ha generato l'errore: C:\Program Files (x86)\eMule\emule.exe
ID segnalazione: 7529abf8-ab36-11e7-8901-002522d892c1


System errors:
=============
Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:48 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:46 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:45 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:43 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:41 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:39 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.


CodeIntegrity:
===================================
Date: 2017-10-06 12:58:44.248
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.

Date: 2017-10-06 12:58:44.060
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.


==================== Memory info ===========================

Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 83%
Total physical RAM: 2025.64 MB
Available physical RAM: 343.42 MB
Total Virtual: 4051.29 MB
Available Virtual: 965.55 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.87 GB) (Free:21 GB) NTFS
Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS
Drive j: (SAMSUNG) (Fixed) (Total:465.76 GB) (Free:244.28 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: D3DE9CA0)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017
Ran by Gigi (administrator) on GIGI-PC (07-10-2017 11:16:59)
Running from C:\Users\Gigi\Desktop
Loaded Profiles: Gigi (Available Profiles: Gigi)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe
(© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(hxxp://www.emule-project.net) C:\Program Files (x86)\eMule\emule.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Telegram Messenger LLP) C:\Users\Gigi\AppData\Roaming\Telegram Desktop\Telegram.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] ()
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
SearchScopes: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx
DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-07]
CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28]
CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29]
CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29]
CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29]
CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12]
CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28]
CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15]
CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22]
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 07-10-2017, 10:38   #2
IlGrandeMatto88
Member
 
L'Avatar di IlGrandeMatto88
 
Iscritto dal: Dec 2011
Messaggi: 118
malwarebytes un po di cose da eliminare le ha trovate. Ti consiglio di fare una scansione anche con combofix (in modalitá provvisoria) e una scansione completa poi con il tuo antivirus.

Poi controllerei i programmi che il pc esegue all avvio e i servizi di terze parti che esegue all avvio.

Quando ti sembra un poco migliorato, dai una passata di pulizia registro con wisecleaner o ccleaner o simili

Crei un punto di ripristino

Fai la pulizia del disco

Esegui una deframmentazione se non sei su ssd
__________________
Acquisti conclusi positivamente con kosta99, tremblay, skyline90, lupin382, c3sar3, Trokji
IlGrandeMatto88 è offline   Rispondi citando il messaggio o parte di esso
Old 07-10-2017, 19:59   #3
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Ciao
il pc in questione è vecchiotto???
Poi è lento nel navigare o in generale???
Comunque....
il log frst.txt che mi hai copiato è incompleto...
prima di ripostarmelo esegui tutti i passaggi sotto..


Facciamo delle prove...

Controlla l integrita dei file di sistema:
-clicca su Start
-scrivi nella casella bianca (cerca programmi e file) cmd
-tasto dx sopra cmd.exe
-esegui come amministratore
-quando si apre
-scrivi o copia la seguente stringa:
sfc /scannow
-dai invio
-poi sempre in cmd copia la seguente stringa:
findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

-posta il log sfcdetail.txt lo trovi sul desktop

Fai un controllo del hd o ssd con uno scandisk...vedi qui https://www.aranzulla.it/come-esegui...dsk-27805.html
O in alternativa usa o HDTune e CrystalDiskInfo...
posta il risultato...

Poi ho notato che hai il disco C (penso sia un disco ssd) cioè quello dove è installato win che comincia a essere pienotto e vicino all limite della funzionalita consentita (piu o meno devi avere circa il 20% di spazio libero su disco):

Drive c: () (Fixed) (Total:111.87 GB) (Free:21 GB) NTFS

Come puoi notare hai 21gb di spazio libero...
Dovremo fare pulizia...
anzitutto disinstalla le applicazioni che reputi inutili o che non ti servono piu...
dopo la disinstallazione fai pulizia con ccleaner sia sistema che registro..
sempre con ccleaner ,portati alla scheda ripristino,se ne hai molti cancellali tutti tranne quello in grigio per motivi di sicurezza e uno ad una data dove il pc funzionava bene...
Vedi una guida qui per ripulire il disco https://www.aranzulla.it/come-libera...co-940721.html

Una altra cosa che ho notato ,è che hai installato il pacchetto autacad e inventor....
Ti faccio notare che sono programmi pesanti, e hai solo 2gb di ram(se sbaglio dimmelo) ,direi un po pochino, senza considerare poi il disegno 3d...

Percentage of memory in use: 83%
Total physical RAM: 2025.64 MB
Available physical RAM: 343.42 MB
Total Virtual: 4051.29 MB
Available Virtual: 965.55 MB

la percentuale di uso della ram era senza usare autocad o peggio inventor...(mi sbaglio???)
Secondo me ,essendo poca la ram quando vai a utilizzare programmi come autocad o inventor, e poi ne apri in contemporanea altri, la ram va in saturazione e il controller di memoria accede alla memoria di paging o memoria virtuale allocata nel hd.
Di conseguenza le prestazioni decadono drasticamente perché il tempo di accesso all' hd è notevolmente superiore rispetto alla ram...
Questo sicuramente rallenta non poco il pc..

hai un portatile???
penso di si:
Processor: AMD A8-3870 APU
considerando che il procio non è il top, viene tutto da se...

Adesso dopo aver eseguito il tutto e letto cancella i log frst.txt e addition.txt
Rifai una nuova scansione aggiornata con frst facendo attenzione a spuntare addition(se gia non lo fosse)...
posta i due nuovi log frst.txt e addition.txt (occhio a postarli completi)....

Seguiranno pulizie dopo aver visionato i log...

Ciao

Ultima modifica di Dan1979 : 08-10-2017 alle 10:50.
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 08:46   #4
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
Ciao Dan1979

il pc in questione è vecchiotto??? è vecchiotto ma fino a pochi giorni fa non era cosi lento
Poi è lento nel navigare o in generale??? in generale


Ti faccio notare che sono programmi pesanti, e hai solo 2gb di ram(se sbaglio dimmelo) ho 4gb di ram

non è un portatile

ora faccio tutta la sequenza che mi hai indicato e dopo posto il log

grazie!!!!
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 09:34   #5
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
ecco i log

2017-10-09 09:30:03, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:03, Info CSI 0000000a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:05, Info CSI 0000000c [SR] Verify complete
2017-10-09 09:30:06, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:06, Info CSI 0000000e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:07, Info CSI 00000010 [SR] Verify complete
2017-10-09 09:30:09, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:09, Info CSI 00000012 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:10, Info CSI 00000014 [SR] Verify complete
2017-10-09 09:30:12, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:12, Info CSI 00000016 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:14, Info CSI 00000018 [SR] Verify complete
2017-10-09 09:30:15, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:15, Info CSI 0000001a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:16, Info CSI 0000001c [SR] Verify complete
2017-10-09 09:30:18, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:18, Info CSI 0000001e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:19, Info CSI 00000020 [SR] Verify complete
2017-10-09 09:30:20, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:20, Info CSI 00000022 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:22, Info CSI 00000024 [SR] Verify complete
2017-10-09 09:30:23, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:23, Info CSI 00000026 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:24, Info CSI 00000028 [SR] Verify complete
2017-10-09 09:30:26, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:26, Info CSI 0000002a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:27, Info CSI 0000002c [SR] Verify complete
2017-10-09 09:30:28, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:28, Info CSI 0000002e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:30, Info CSI 00000030 [SR] Verify complete
2017-10-09 09:30:31, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:31, Info CSI 00000032 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:32, Info CSI 00000034 [SR] Verify complete
2017-10-09 09:30:33, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:33, Info CSI 00000036 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:35, Info CSI 00000038 [SR] Verify complete
2017-10-09 09:30:36, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:36, Info CSI 0000003a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:37, Info CSI 0000003c [SR] Verify complete
2017-10-09 09:30:39, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:39, Info CSI 0000003e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:40, Info CSI 00000040 [SR] Verify complete
2017-10-09 09:30:41, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:41, Info CSI 00000042 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:42, Info CSI 00000044 [SR] Verify complete
2017-10-09 09:30:44, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:44, Info CSI 00000046 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:45, Info CSI 00000048 [SR] Verify complete
2017-10-09 09:30:46, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:46, Info CSI 0000004a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:47, Info CSI 0000004c [SR] Verify complete
2017-10-09 09:30:49, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:49, Info CSI 0000004e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:50, Info CSI 00000050 [SR] Verify complete
2017-10-09 09:30:51, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:51, Info CSI 00000052 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:53, Info CSI 00000054 [SR] Verify complete
2017-10-09 09:30:54, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:54, Info CSI 00000056 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:55, Info CSI 00000058 [SR] Verify complete
2017-10-09 09:30:57, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:57, Info CSI 0000005a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:58, Info CSI 0000005c [SR] Verify complete
2017-10-09 09:30:59, Info CSI 0000005d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:59, Info CSI 0000005e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:01, Info CSI 00000060 [SR] Verify complete
2017-10-09 09:31:02, Info CSI 00000061 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:02, Info CSI 00000062 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:03, Info CSI 00000064 [SR] Verify complete
2017-10-09 09:31:05, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:05, Info CSI 00000066 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:06, Info CSI 00000068 [SR] Verify complete
2017-10-09 09:31:07, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:07, Info CSI 0000006a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:09, Info CSI 0000006c [SR] Verify complete
2017-10-09 09:31:10, Info CSI 0000006d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:10, Info CSI 0000006e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:11, Info CSI 00000070 [SR] Verify complete
2017-10-09 09:31:12, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:12, Info CSI 00000072 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:13, Info CSI 00000074 [SR] Verify complete
2017-10-09 09:31:14, Info CSI 00000075 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:14, Info CSI 00000076 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:16, Info CSI 00000078 [SR] Verify complete
2017-10-09 09:31:17, Info CSI 00000079 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:17, Info CSI 0000007a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:19, Info CSI 0000007c [SR] Verify complete
2017-10-09 09:31:20, Info CSI 0000007d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:20, Info CSI 0000007e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:26, Info CSI 00000080 [SR] Verify complete
2017-10-09 09:31:26, Info CSI 00000081 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:26, Info CSI 00000082 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:28, Info CSI 00000084 [SR] Verify complete
2017-10-09 09:31:29, Info CSI 00000085 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:29, Info CSI 00000086 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:31, Info CSI 00000088 [SR] Verify complete
2017-10-09 09:31:32, Info CSI 00000089 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:32, Info CSI 0000008a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:36, Info CSI 0000008c [SR] Verify complete
2017-10-09 09:31:37, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:37, Info CSI 0000008e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:38, Info CSI 00000090 [SR] Verify complete
2017-10-09 09:31:39, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:39, Info CSI 00000092 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:41, Info CSI 00000094 [SR] Verify complete
2017-10-09 09:31:42, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:42, Info CSI 00000096 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:45, Info CSI 00000098 [SR] Verify complete
2017-10-09 09:31:46, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:46, Info CSI 0000009a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:47, Info CSI 0000009c [SR] Verify complete
2017-10-09 09:31:48, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:48, Info CSI 0000009e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:49, Info CSI 000000a0 [SR] Verify complete
2017-10-09 09:31:50, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:50, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:53, Info CSI 000000a4 [SR] Verify complete
2017-10-09 09:31:54, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:54, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:56, Info CSI 000000a8 [SR] Verify complete
2017-10-09 09:31:57, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:57, Info CSI 000000aa [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:58, Info CSI 000000ac [SR] Verify complete
2017-10-09 09:31:59, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:59, Info CSI 000000ae [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:01, Info CSI 000000b0 [SR] Verify complete
2017-10-09 09:32:02, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:02, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:03, Info CSI 000000b4 [SR] Verify complete
2017-10-09 09:32:04, Info CSI 000000b5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:04, Info CSI 000000b6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:06, Info CSI 000000b8 [SR] Verify complete
2017-10-09 09:32:06, Info CSI 000000b9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:06, Info CSI 000000ba [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:13, Info CSI 000000bc [SR] Verify complete
2017-10-09 09:32:13, Info CSI 000000bd [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:13, Info CSI 000000be [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:19, Info CSI 000000c0 [SR] Verify complete
2017-10-09 09:32:19, Info CSI 000000c1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:19, Info CSI 000000c2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:23, Info CSI 000000c4 [SR] Verify complete
2017-10-09 09:32:24, Info CSI 000000c5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:24, Info CSI 000000c6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:33, Info CSI 000000c8 [SR] Verify complete
2017-10-09 09:32:35, Info CSI 000000c9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:35, Info CSI 000000ca [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:50, Info CSI 000000cd [SR] Verify complete
2017-10-09 09:32:51, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:51, Info CSI 000000cf [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:58, Info CSI 000000d4 [SR] Verify complete
2017-10-09 09:32:58, Info CSI 000000d5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:58, Info CSI 000000d6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:04, Info CSI 000000d9 [SR] Verify complete
2017-10-09 09:33:04, Info CSI 000000da [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:04, Info CSI 000000db [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:10, Info CSI 000000dd [SR] Verify complete
2017-10-09 09:33:11, Info CSI 000000de [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:11, Info CSI 000000df [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:20, Info CSI 000000eb [SR] Verify complete
2017-10-09 09:33:21, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:21, Info CSI 000000ed [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:31, Info CSI 00000108 [SR] Verify complete
2017-10-09 09:33:31, Info CSI 00000109 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:31, Info CSI 0000010a [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:38, Info CSI 0000010c [SR] Verify complete
2017-10-09 09:33:38, Info CSI 0000010d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:38, Info CSI 0000010e [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:44, Info CSI 00000110 [SR] Verify complete
2017-10-09 09:33:44, Info CSI 00000111 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:44, Info CSI 00000112 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:51, Info CSI 00000114 [SR] Verify complete
2017-10-09 09:33:51, Info CSI 00000115 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:51, Info CSI 00000116 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:59, Info CSI 00000118 [SR] Verify complete
2017-10-09 09:33:59, Info CSI 00000119 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:59, Info CSI 0000011a [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:07, Info CSI 0000011c [SR] Verify complete
2017-10-09 09:34:07, Info CSI 0000011d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:07, Info CSI 0000011e [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:16, Info CSI 00000120 [SR] Verify complete
2017-10-09 09:34:16, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:16, Info CSI 00000122 [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:45, Info CSI 00000145 [SR] Verify complete
2017-10-09 09:34:45, Info CSI 00000146 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:45, Info CSI 00000147 [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:54, Info CSI 00000149 [SR] Verify complete
2017-10-09 09:34:54, Info CSI 0000014a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:54, Info CSI 0000014b [SR] Beginning Verify and Repair transaction
2017-10-09 09:35:08, Info CSI 0000014d [SR] Verify complete
2017-10-09 09:35:10, Info CSI 0000014e [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:35:10, Info CSI 0000014f [SR] Beginning Verify and Repair transaction
2017-10-09 09:35:48, Info CSI 00000153 [SR] Verify complete
2017-10-09 09:35:49, Info CSI 00000154 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:35:49, Info CSI 00000155 [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:02, Info CSI 00000157 [SR] Verify complete
2017-10-09 09:36:02, Info CSI 00000158 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:02, Info CSI 00000159 [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:07, Info CSI 0000015b [SR] Verify complete
2017-10-09 09:36:07, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:07, Info CSI 0000015d [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:18, Info CSI 0000015f [SR] Verify complete
2017-10-09 09:36:20, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:20, Info CSI 00000161 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:11, Info CSI 00000174 [SR] Verify complete
2017-10-09 09:37:11, Info CSI 00000175 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:11, Info CSI 00000176 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:16, Info CSI 00000178 [SR] Verify complete
2017-10-09 09:37:18, Info CSI 00000179 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:18, Info CSI 0000017a [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:31, Info CSI 0000017c [SR] Verify complete
2017-10-09 09:37:33, Info CSI 0000017d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:33, Info CSI 0000017e [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:37, Info CSI 00000180 [SR] Verify complete
2017-10-09 09:37:38, Info CSI 00000181 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:38, Info CSI 00000182 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:44, Info CSI 00000184 [SR] Verify complete
2017-10-09 09:37:44, Info CSI 00000185 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:44, Info CSI 00000186 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:57, Info CSI 00000189 [SR] Verify complete
2017-10-09 09:37:57, Info CSI 0000018a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:57, Info CSI 0000018b [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:07, Info CSI 0000018e [SR] Verify complete
2017-10-09 09:38:07, Info CSI 0000018f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:07, Info CSI 00000190 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:12, Info CSI 00000192 [SR] Verify complete
2017-10-09 09:38:12, Info CSI 00000193 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:12, Info CSI 00000194 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:16, Info CSI 00000196 [SR] Verify complete
2017-10-09 09:38:16, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:16, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:28, Info CSI 0000019a [SR] Verify complete
2017-10-09 09:38:28, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:28, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:37, Info CSI 0000019e [SR] Verify complete
2017-10-09 09:38:37, Info CSI 0000019f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:37, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:52, Info CSI 000001a2 [SR] Verify complete
2017-10-09 09:38:52, Info CSI 000001a3 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:52, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:03, Info CSI 000001bc [SR] Verify complete
2017-10-09 09:39:03, Info CSI 000001bd [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:03, Info CSI 000001be [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:12, Info CSI 000001c0 [SR] Verify complete
2017-10-09 09:39:13, Info CSI 000001c1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:13, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:50, Info CSI 000001c4 [SR] Verify complete
2017-10-09 09:39:50, Info CSI 000001c5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:50, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:12, Info CSI 000001c9 [SR] Verify complete
2017-10-09 09:40:12, Info CSI 000001ca [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:12, Info CSI 000001cb [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:23, Info CSI 000001cd [SR] Verify complete
2017-10-09 09:40:23, Info CSI 000001ce [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:23, Info CSI 000001cf [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:35, Info CSI 000001d1 [SR] Verify complete
2017-10-09 09:40:36, Info CSI 000001d2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:36, Info CSI 000001d3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:54, Info CSI 000001d5 [SR] Verify complete
2017-10-09 09:40:55, Info CSI 000001d6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:55, Info CSI 000001d7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:07, Info CSI 000001d9 [SR] Verify complete
2017-10-09 09:41:08, Info CSI 000001da [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:08, Info CSI 000001db [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:19, Info CSI 000001df [SR] Verify complete
2017-10-09 09:41:19, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:19, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:32, Info CSI 000001e3 [SR] Verify complete
2017-10-09 09:41:32, Info CSI 000001e4 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:32, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:38, Info CSI 000001e8 [SR] Verify complete
2017-10-09 09:41:39, Info CSI 000001e9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:39, Info CSI 000001ea [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:46, Info CSI 000001ec [SR] Verify complete
2017-10-09 09:41:46, Info CSI 000001ed [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:46, Info CSI 000001ee [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:54, Info CSI 000001f1 [SR] Verify complete
2017-10-09 09:41:54, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:54, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:05, Info CSI 000001f6 [SR] Verify complete
2017-10-09 09:42:05, Info CSI 000001f7 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:05, Info CSI 000001f8 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:14, Info CSI 000001fa [SR] Verify complete
2017-10-09 09:42:14, Info CSI 000001fb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:14, Info CSI 000001fc [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:21, Info CSI 000001fe [SR] Verify complete
2017-10-09 09:42:21, Info CSI 000001ff [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:21, Info CSI 00000200 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:27, Info CSI 00000202 [SR] Verify complete
2017-10-09 09:42:27, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:27, Info CSI 00000204 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:34, Info CSI 00000207 [SR] Verify complete
2017-10-09 09:42:34, Info CSI 00000208 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:34, Info CSI 00000209 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:41, Info CSI 0000020b [SR] Verify complete
2017-10-09 09:42:41, Info CSI 0000020c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:41, Info CSI 0000020d [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:45, Info CSI 00000210 [SR] Verify complete
2017-10-09 09:42:46, Info CSI 00000211 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:46, Info CSI 00000212 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:52, Info CSI 00000215 [SR] Verify complete
2017-10-09 09:42:52, Info CSI 00000216 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:52, Info CSI 00000217 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:58, Info CSI 00000219 [SR] Verify complete
2017-10-09 09:42:59, Info CSI 0000021a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:59, Info CSI 0000021b [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:05, Info CSI 0000021f [SR] Verify complete
2017-10-09 09:43:06, Info CSI 00000220 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:06, Info CSI 00000221 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:14, Info CSI 00000223 [SR] Verify complete
2017-10-09 09:43:14, Info CSI 00000224 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:14, Info CSI 00000225 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:27, Info CSI 00000228 [SR] Verify complete
2017-10-09 09:43:27, Info CSI 00000229 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:27, Info CSI 0000022a [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:36, Info CSI 0000022c [SR] Verify complete
2017-10-09 09:43:37, Info CSI 0000022d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:37, Info CSI 0000022e [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:43, Info CSI 00000230 [SR] Verify complete
2017-10-09 09:43:44, Info CSI 00000231 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:44, Info CSI 00000232 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:49, Info CSI 00000234 [SR] Verify complete
2017-10-09 09:43:49, Info CSI 00000235 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:49, Info CSI 00000236 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:55, Info CSI 00000238 [SR] Verify complete
2017-10-09 09:43:56, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:56, Info CSI 0000023a [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:03, Info CSI 0000023c [SR] Verify complete
2017-10-09 09:44:04, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:04, Info CSI 0000023e [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:13, Info CSI 00000240 [SR] Verify complete
2017-10-09 09:44:14, Info CSI 00000241 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:14, Info CSI 00000242 [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:18, Info CSI 00000244 [SR] Verify complete
2017-10-09 09:44:19, Info CSI 00000245 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:19, Info CSI 00000246 [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:27, Info CSI 00000248 [SR] Verify complete
2017-10-09 09:44:27, Info CSI 00000249 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:27, Info CSI 0000024a [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:54, Info CSI 0000024c [SR] Verify complete
2017-10-09 09:44:54, Info CSI 0000024d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:54, Info CSI 0000024e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:17, Info CSI 00000250 [SR] Verify complete
2017-10-09 09:45:17, Info CSI 00000251 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:17, Info CSI 00000252 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:25, Info CSI 00000254 [SR] Verify complete
2017-10-09 09:45:26, Info CSI 00000255 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:26, Info CSI 00000256 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:30, Info CSI 00000258 [SR] Verify complete
2017-10-09 09:45:30, Info CSI 00000259 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:30, Info CSI 0000025a [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:35, Info CSI 0000025c [SR] Verify complete
2017-10-09 09:45:35, Info CSI 0000025d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:35, Info CSI 0000025e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:40, Info CSI 00000260 [SR] Verify complete
2017-10-09 09:45:40, Info CSI 00000261 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:40, Info CSI 00000262 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:48, Info CSI 00000264 [SR] Verify complete
2017-10-09 09:45:49, Info CSI 00000265 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:49, Info CSI 00000266 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:50, Info CSI 00000268 [SR] Verify complete
2017-10-09 09:45:50, Info CSI 00000269 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:50, Info CSI 0000026a [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:51, Info CSI 0000026c [SR] Verify complete
2017-10-09 09:45:52, Info CSI 0000026d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:52, Info CSI 0000026e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:59, Info CSI 00000276 [SR] Verify complete
2017-10-09 09:46:00, Info CSI 00000277 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:00, Info CSI 00000278 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:07, Info CSI 0000027a [SR] Verify complete
2017-10-09 09:46:07, Info CSI 0000027b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:07, Info CSI 0000027c [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:14, Info CSI 0000027e [SR] Verify complete
2017-10-09 09:46:15, Info CSI 0000027f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:15, Info CSI 00000280 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:22, Info CSI 00000282 [SR] Verify complete
2017-10-09 09:46:23, Info CSI 00000283 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:23, Info CSI 00000284 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:31, Info CSI 00000286 [SR] Verify complete
2017-10-09 09:46:32, Info CSI 00000287 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:32, Info CSI 00000288 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:41, Info CSI 0000028b [SR] Verify complete
2017-10-09 09:46:42, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:42, Info CSI 0000028d [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:48, Info CSI 0000028f [SR] Verify complete
2017-10-09 09:46:49, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:49, Info CSI 00000291 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:53, Info CSI 00000293 [SR] Verify complete
2017-10-09 09:46:54, Info CSI 00000294 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:54, Info CSI 00000295 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:03, Info CSI 00000298 [SR] Verify complete
2017-10-09 09:47:03, Info CSI 00000299 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:03, Info CSI 0000029a [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:19, Info CSI 0000029e [SR] Verify complete
2017-10-09 09:47:19, Info CSI 0000029f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:19, Info CSI 000002a0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:31, Info CSI 000002a5 [SR] Verify complete
2017-10-09 09:47:32, Info CSI 000002a6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:32, Info CSI 000002a7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:41, Info CSI 000002ad [SR] Verify complete
2017-10-09 09:47:41, Info CSI 000002ae [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:41, Info CSI 000002af [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:52, Info CSI 000002ba [SR] Verify complete
2017-10-09 09:47:52, Info CSI 000002bb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:52, Info CSI 000002bc [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:01, Info CSI 000002c1 [SR] Verify complete
2017-10-09 09:48:01, Info CSI 000002c2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:01, Info CSI 000002c3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:09, Info CSI 000002c5 [SR] Verify complete
2017-10-09 09:48:09, Info CSI 000002c6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:09, Info CSI 000002c7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:15, Info CSI 000002cb [SR] Verify complete
2017-10-09 09:48:15, Info CSI 000002cc [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:15, Info CSI 000002cd [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:22, Info CSI 000002de [SR] Verify complete
2017-10-09 09:48:23, Info CSI 000002df [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:23, Info CSI 000002e0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:31, Info CSI 000002f6 [SR] Verify complete
2017-10-09 09:48:31, Info CSI 000002f7 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:31, Info CSI 000002f8 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:38, Info CSI 000002fa [SR] Verify complete
2017-10-09 09:48:39, Info CSI 000002fb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:39, Info CSI 000002fc [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:47, Info CSI 000002fe [SR] Verify complete
2017-10-09 09:48:47, Info CSI 000002ff [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:47, Info CSI 00000300 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:53, Info CSI 00000302 [SR] Verify complete
2017-10-09 09:48:53, Info CSI 00000303 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:53, Info CSI 00000304 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:59, Info CSI 00000312 [SR] Verify complete
2017-10-09 09:48:59, Info CSI 00000313 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:59, Info CSI 00000314 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:15, Info CSI 00000316 [SR] Verify complete
2017-10-09 09:49:15, Info CSI 00000317 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:15, Info CSI 00000318 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:22, Info CSI 00000326 [SR] Verify complete
2017-10-09 09:49:22, Info CSI 00000327 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:22, Info CSI 00000328 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:25, Info CSI 0000032a [SR] Verify complete
2017-10-09 09:49:26, Info CSI 0000032b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:26, Info CSI 0000032c [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:31, Info CSI 0000032e [SR] Verify complete
2017-10-09 09:49:32, Info CSI 0000032f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:32, Info CSI 00000330 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:39, Info CSI 00000333 [SR] Verify complete
2017-10-09 09:49:39, Info CSI 00000334 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:39, Info CSI 00000335 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:42, Info CSI 00000337 [SR] Verify complete
2017-10-09 09:49:42, Info CSI 00000338 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:42, Info CSI 00000339 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:51, Info CSI 0000033b [SR] Verify complete
2017-10-09 09:49:51, Info CSI 0000033c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:51, Info CSI 0000033d [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:59, Info CSI 0000033f [SR] Verify complete
2017-10-09 09:49:59, Info CSI 00000340 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:59, Info CSI 00000341 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:08, Info CSI 00000343 [SR] Verify complete
2017-10-09 09:50:08, Info CSI 00000344 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:08, Info CSI 00000345 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:16, Info CSI 0000035f [SR] Verify complete
2017-10-09 09:50:16, Info CSI 00000360 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:16, Info CSI 00000361 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:36, Info CSI 00000363 [SR] Verify complete
2017-10-09 09:50:37, Info CSI 00000364 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:37, Info CSI 00000365 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:42, Info CSI 00000367 [SR] Verify complete
2017-10-09 09:50:43, Info CSI 00000368 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:43, Info CSI 00000369 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:49, Info CSI 0000036b [SR] Verify complete
2017-10-09 09:50:49, Info CSI 0000036c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:49, Info CSI 0000036d [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:54, Info CSI 00000371 [SR] Verify complete
2017-10-09 09:50:54, Info CSI 00000372 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:54, Info CSI 00000373 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:00, Info CSI 00000375 [SR] Verify complete
2017-10-09 09:51:00, Info CSI 00000376 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:00, Info CSI 00000377 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:11, Info CSI 00000379 [SR] Verify complete
2017-10-09 09:51:11, Info CSI 0000037a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:11, Info CSI 0000037b [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:18, Info CSI 0000037d [SR] Verify complete
2017-10-09 09:51:19, Info CSI 0000037e [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:19, Info CSI 0000037f [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:25, Info CSI 00000382 [SR] Verify complete
2017-10-09 09:51:25, Info CSI 00000383 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:25, Info CSI 00000384 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:31, Info CSI 00000386 [SR] Verify complete
2017-10-09 09:51:31, Info CSI 00000387 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:31, Info CSI 00000388 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:39, Info CSI 0000038a [SR] Verify complete
2017-10-09 09:51:39, Info CSI 0000038b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:39, Info CSI 0000038c [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:47, Info CSI 0000038e [SR] Verify complete
2017-10-09 09:51:48, Info CSI 0000038f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:48, Info CSI 00000390 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:56, Info CSI 00000393 [SR] Verify complete
2017-10-09 09:51:56, Info CSI 00000394 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:56, Info CSI 00000395 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:02, Info CSI 00000397 [SR] Verify complete
2017-10-09 09:52:03, Info CSI 00000398 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:52:03, Info CSI 00000399 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:10, Info CSI 0000039b [SR] Verify complete
2017-10-09 09:52:11, Info CSI 0000039c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:52:11, Info CSI 0000039d [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:18, Info CSI 0000039f [SR] Verify complete
2017-10-09 09:52:19, Info CSI 000003a0 [SR] Verifying 90 (0x000000000000005a) components
2017-10-09 09:52:19, Info CSI 000003a1 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:24, Info CSI 000003a3 [SR] Verify complete
2017-10-09 09:52:24, Info CSI 000003a4 [SR] Repairing 0 components
2017-10-09 09:52:24, Info CSI 000003a5 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:24, Info CSI 000003a7 [SR] Repair complete




----------------------------------------------------------------------------
CrystalDiskInfo 7.1.1 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)
Date : 2017/10/09 10:21:24

-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- WDC WD5000AAKX-001CA0 ATA Device
- ATA Channel 1 (1) [ATA]
+ Controller standard PCI IDE [ATA]
+ ATA Channel 0 (0)
- Optiarc DVD RW AD-5280S ATA Device
- ATA Channel 1 (1)
+ Controller standard PCI IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000AAKX-001CA0 : 500.1 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD5000AAKX-001CA0
----------------------------------------------------------------------------
Model : WDC WD5000AAKX-001CA0
Firmware : 15.01H15
Serial Number : WD-WMAYUJ331702
Disk Size : 500.1 GB (8.4/137.4/500.1/500.1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : Sconosciuto
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 27849 ore
Power On Count : 2117 volte
Temperature : 34 C (93 F)
Health Status : A rischio
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : C: D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 200 200 _51 000000000046 Errori lettura
03 144 140 _21 000000000ECF Tempo avvio motore
04 _98 _98 __0 000000000851 Avvia/ferma conteggio
05 200 200 140 000000000000 Settori riallocati
07 100 253 __0 000000000000 Errori seek
09 _62 _62 __0 000000006CC9 Acceso da (ore)
0A 100 100 __0 000000000000 Riavviammenti motore
0B 100 100 __0 000000000000 Tentativi ricalibrazione
0C _98 _98 __0 000000000845 Cicli ON/OFF dispositivo
C0 200 200 __0 000000000074 Rientri allo spegnimento
C1 200 200 __0 0000000007DC Cicli load/unload
C2 109 102 __0 000000000022 Temperatura
C4 200 200 __0 000000000000 Eventi riallocazione
C5 200 200 __0 000000000003 Settori scrittura pendente
C6 200 200 __0 000000000000 Settori non corregibili
C7 200 200 __0 000000000000 Errori CRC UltraDMA
C8 200 200 __0 000000000001 Errori scrittura

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2057 442D 574D 4159 554A 3333 3137 3032
020: 0000 8000 0032 3135 2E30 3148 3135 5744 4320 5744
030: 3530 3030 4141 4B58 2D30 3031 4341 3020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 170E 0006 0044 0040
080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 407F 002A
090: 002A 0000 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5001 4EE6
110: 5787 212D 0000 0000 0000 0000 0000 0000 0000 4018
120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000
130: 0000 0000 0000 16FE 0125 0000 0000 0000 0000 0000
140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000
150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3037 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 86A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 2F 00 C8 C8 46 00 00 00 00 00 00 03 27
010: 00 90 8C CF 0E 00 00 00 00 00 04 32 00 62 62 51
020: 08 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00
030: 00 00 07 2E 00 64 FD 00 00 00 00 00 00 00 09 32
040: 00 3E 3E C9 6C 00 00 00 00 00 0A 32 00 64 64 00
050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00
060: 00 00 0C 32 00 62 62 45 08 00 00 00 00 00 C0 32
070: 00 C8 C8 74 00 00 00 00 00 00 C1 32 00 C8 C8 DC
080: 07 00 00 00 00 00 C2 22 00 6D 66 22 00 00 00 00
090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32
0A0: 00 C8 C8 03 00 00 00 00 00 00 C6 30 00 C8 C8 00
0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00
0C0: 00 00 C8 08 00 C8 C8 01 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 82 00 D0 20 01 7B
170: 03 00 01 00 02 55 05 00 00 00 00 00 00 00 00 00
180: 00 00 01 02 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CC

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 10 00 01 33 C8 C8 00 00 00 00 00 00 00 00 03 15
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00
030: 00 00 07 00 64 64 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00
050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00
060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00
070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00
080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00
090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00
0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00
0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00
0C0: 00 00 C8 00 C8 C8 00 00 00 00 00 00 00 00 00 00
0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D5


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017
Ran by Gigi (administrator) on GIGI-PC (09-10-2017 10:28:35)
Running from C:\Users\Gigi\Desktop
Loaded Profiles: Gigi (Available Profiles: Gigi)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe
(© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] ()
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx
DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-09]
CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28]
CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29]
CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29]
CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29]
CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12]
CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28]
CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15]
CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22]
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-10-02] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761608 2017-09-08] (Microsoft Corporation)
R2 CTERA Agent service; C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe [5535296 2017-07-30] ()
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-04-07] (Freemake) [File not signed]
S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848704 2011-08-03] (Autodesk, Inc.)
R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
R2 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [18432 2013-12-18] (Clarus, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-20] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [194912 2017-09-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [151128 2017-09-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-29] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-07] ()
R2 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-07] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-10-09] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-10-09] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-10-09] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-10-09] (Malwarebytes)
R3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] ()
R3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2009-02-13] (Western Digital Technologies) [File not signed]
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Duntlw; System32\Drivers\DuntlwNT.sys [X]
S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-09 10:28 - 2017-10-09 10:30 - 000021739 _____ C:\Users\Gigi\Desktop\FRST.txt
2017-10-09 10:19 - 2017-10-09 10:20 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-10-09 10:19 - 2017-10-09 10:19 - 000001200 _____ C:\Users\Gigi\Desktop\CrystalDiskInfo.lnk
2017-10-09 10:19 - 2017-10-09 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-10-09 10:12 - 2017-10-09 10:12 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\CrystalDiskInfo7_1_1 (1).exe
2017-10-09 10:11 - 2017-10-09 10:11 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\35415e15-f7e5-46ac-bd13-5c6e64038ab3.tmp
2017-10-09 09:53 - 2017-10-09 10:21 - 000058459 _____ C:\Users\Gigi\Desktop\sfcdetails.txt
2017-10-07 12:52 - 2017-10-09 10:17 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-10-07 12:52 - 2017-10-09 10:02 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-10-07 12:52 - 2017-10-07 12:52 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-10-07 11:30 - 2017-10-07 11:31 - 000000000 ____D C:\Users\Gigi\AppData\Local\Adobe
2017-10-07 11:30 - 2017-10-07 11:30 - 000475446 _____ C:\Users\Gigi\Desktop\giant-bicycles-bike-411.pdf
2017-10-07 11:10 - 2017-10-09 10:28 - 000000000 ____D C:\FRST
2017-10-07 10:42 - 2017-10-07 10:45 - 000000000 ____D C:\AdwCleaner
2017-10-07 10:39 - 2017-10-07 10:39 - 002400768 _____ (Farbar) C:\Users\Gigi\Desktop\FRST64.exe
2017-10-07 10:39 - 2017-10-07 10:39 - 000000000 ____D C:\Users\Gigi\AppData\Local\2BrightSparks
2017-10-07 10:36 - 2017-10-07 10:36 - 001790024 _____ (Malwarebytes) C:\Users\Gigi\Desktop\JRT.exe
2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp
2017-10-07 09:52 - 2017-10-09 10:03 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-10-07 09:52 - 2017-10-09 10:03 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt
2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe
2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe
2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe
2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox
2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt
2017-10-06 12:39 - 2017-10-07 10:37 - 000000000 ____D C:\Users\Gigi\Desktop\Nuova cartella
2017-10-04 17:13 - 2017-10-06 12:56 - 000000000 ____D C:\Users\Gigi\Desktop\cell antonio
2017-10-04 15:12 - 2017-10-04 15:16 - 000000048 _____ C:\Users\Gigi\Desktop\Nuovo documento di testo.txt
2017-10-04 10:52 - 2017-10-04 10:52 - 000008600 _____ C:\Users\Gigi\Desktop\Document.pdf
2017-10-04 09:29 - 2017-10-04 09:29 - 000000000 ____D C:\Users\Gigi\Desktop\temp cell p8 lite
2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt
2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT
2017-10-02 11:56 - 2017-10-09 10:28 - 000000000 ____D C:\Users\Gigi\Desktop\log
2017-10-02 08:48 - 2017-10-02 08:48 - 000001027 _____ C:\Users\Public\Desktop\MozBackup.lnk
2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\Program Files (x86)\MozBackup
2017-10-02 08:40 - 2017-10-02 08:43 - 001035926 _____ C:\Users\Gigi\Downloads\MozBackup-1.5.1-EN.exe
2017-10-02 08:35 - 2017-10-07 12:52 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-10-02 08:35 - 2017-10-02 08:35 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET
2017-09-18 19:39 - 2017-09-18 19:39 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive for PC is now Backup and Sync from Google.lnk
2017-09-18 19:39 - 2017-09-18 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2017-09-18 15:05 - 2017-09-18 15:07 - 000000000 ____D C:\Users\Gigi\Downloads\eni
2017-09-18 13:01 - 2017-09-18 13:01 - 000008579 _____ C:\Users\Gigi\Downloads\Document.pdf
2017-09-14 17:19 - 2017-09-14 17:19 - 000288067 _____ C:\Users\Gigi\Downloads\fattura-M177400469.pdf
2017-09-13 15:37 - 2017-09-13 15:37 - 000325621 _____ C:\Users\Gigi\Downloads\gcontactsync-2.0.12-sm+tb.xpi
2017-09-12 21:49 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-12 21:49 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-12 21:49 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-12 21:49 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-12 21:49 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-12 21:49 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-12 21:49 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-12 21:49 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-12 21:49 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-12 21:49 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-12 21:49 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-12 21:49 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-12 21:49 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-12 21:49 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-12 21:49 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-12 21:49 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-12 21:49 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-12 21:49 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-12 21:49 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-12 21:49 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-12 21:49 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-12 21:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-12 21:49 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-12 21:49 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-12 21:49 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-12 21:49 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-12 21:49 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-12 21:49 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-12 21:49 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-12 21:49 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-12 21:49 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-12 21:49 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-12 21:49 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-12 21:49 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-12 21:49 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-12 21:49 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-12 21:49 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-12 21:49 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-12 21:49 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-12 21:49 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-12 21:49 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-12 21:49 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-12 21:49 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-12 21:49 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-12 21:49 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-12 21:49 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-12 21:49 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-12 21:49 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-12 21:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-12 21:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-12 21:49 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-12 21:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-12 21:49 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-12 21:49 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-12 21:49 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-12 21:49 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-12 21:49 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-12 21:49 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-12 21:49 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-12 21:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-12 21:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-12 21:49 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-12 21:49 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-12 21:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-12 21:49 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-12 21:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-12 21:49 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-12 21:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-12 21:49 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-09-12 21:49 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-12 21:49 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-09-12 21:49 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-12 21:49 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-12 21:49 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-12 21:49 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-12 21:49 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-12 21:49 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-12 21:49 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-12 21:49 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-12 21:49 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-12 21:49 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-12 21:49 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-12 21:49 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-12 21:49 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-12 21:49 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-12 21:49 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-12 21:49 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-12 21:49 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-12 21:49 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-12 21:49 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-12 21:49 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-12 21:49 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-12 21:49 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-12 21:49 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-12 21:49 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-12 21:49 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-12 21:49 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-12 21:49 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-12 21:49 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-12 21:49 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-12 21:49 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-12 16:22 - 2017-09-12 16:35 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\AirDroid
2017-09-12 11:21 - 2017-10-03 08:11 - 000003122 _____ C:\Windows\System32\Tasks\Avira SystrayStartTrigger

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-09 10:29 - 2014-12-04 17:24 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job
2017-10-09 10:23 - 2017-01-20 16:38 - 000000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps
2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-09 10:23 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-10-09 10:19 - 2015-08-17 16:05 - 000000000 ____D C:\ProgramData\Skype
2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieUserList
2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieSiteList
2017-10-09 10:05 - 2016-02-26 16:06 - 000000000 ____D C:\Users\Gigi\Documents\File di Outlook
2017-10-09 10:01 - 2017-03-21 18:39 - 000001695 _____ C:\Users\Gigi\Desktop\Cloud Drive.lnk
2017-10-09 09:59 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-09 09:28 - 2017-04-06 16:39 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Mozilla
2017-10-09 08:58 - 2017-06-20 08:20 - 000000432 _____ C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job
2017-10-08 16:29 - 2014-12-04 17:24 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job
2017-10-07 11:31 - 2015-01-27 09:19 - 003715584 ___SH C:\Users\Gigi\Desktop\Thumbs.db
2017-10-07 11:22 - 2016-02-22 09:40 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\Telegram Desktop
2017-10-07 11:14 - 2016-09-15 09:30 - 000000000 ____D C:\Users\Gigi\Downloads\Telegram Desktop
2017-10-07 10:25 - 2014-09-02 11:16 - 000000000 ____D C:\Users\Gigi\AppData\Local\Autodesk
2017-10-06 17:45 - 2014-08-29 08:43 - 000000000 ____D C:\Program Files (x86)\Danea Easyfatt
2017-10-06 13:03 - 2009-07-14 04:34 - 000000215 _____ C:\Windows\system.ini
2017-10-06 12:58 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2017-10-04 16:01 - 2016-05-13 08:31 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\WhatsApp
2017-10-03 12:15 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\system32\FxsTmp
2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-10-02 16:57 - 2014-09-02 11:21 - 000000000 ____D C:\Users\Gigi\Documents\Inventor
2017-10-02 12:24 - 2017-04-13 09:18 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Temp
2017-10-02 10:32 - 2010-11-21 17:30 - 000743956 _____ C:\Windows\system32\perfh010.dat
2017-10-02 10:32 - 2010-11-21 17:30 - 000148130 _____ C:\Windows\system32\perfc010.dat
2017-10-02 10:32 - 2009-07-14 07:13 - 001667988 _____ C:\Windows\system32\PerfStringBackup.INI
2017-10-02 08:35 - 2014-08-29 16:05 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-29 06:18 - 2016-11-03 14:41 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-09-29 06:14 - 2014-08-29 16:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-09-28 17:47 - 2014-10-03 08:16 - 000000866 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-09-27 05:41 - 2016-04-21 09:59 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-27 05:41 - 2016-04-21 09:59 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-26 16:17 - 2014-08-29 08:59 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-25 07:53 - 2009-07-14 07:08 - 000032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-09-20 13:46 - 2017-07-18 08:25 - 000000000 ____D C:\Program Files\PDFCreator
2017-09-20 10:28 - 2016-01-29 11:42 - 000000000 ____D C:\Users\Gigi\Documents\AirDroid
2017-09-15 11:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2017-09-15 09:58 - 2009-07-14 06:45 - 000672504 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-15 09:51 - 2014-08-29 12:05 - 000000000 ____D C:\Windows\system32\MRT
2017-09-15 09:45 - 2014-08-29 12:05 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-09-15 09:40 - 2014-08-29 14:26 - 001641874 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-14 13:20 - 2014-08-29 11:56 - 000194912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-09-14 13:20 - 2014-08-29 11:56 - 000151128 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-09-13 09:34 - 2014-09-03 14:47 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-13 09:34 - 2014-09-03 14:47 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-13 09:34 - 2014-09-03 14:47 - 000004460 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-12 16:26 - 2015-02-21 09:48 - 000000000 ____D C:\Users\Gigi\.android

==================== Files in the root of some directories =======

2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-21 11:09 - 2017-02-21 11:09 - 000001673 _____ () C:\Users\Gigi\AppData\Local\recently-used.xbel
2014-10-03 15:19 - 2014-10-03 15:39 - 000007621 _____ () C:\Users\Gigi\AppData\Local\Resmon.ResmonCfg
2014-09-24 15:58 - 2014-09-24 15:58 - 000000057 _____ () C:\ProgramData\Ament.ini
2015-12-16 18:30 - 2015-12-16 18:30 - 000000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-10-02 13:18

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017
Ran by Gigi (09-10-2017 10:31:50)
Running from C:\Users\Gigi\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled)
Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi
Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology)
ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.)
Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk)
Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk)
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk)
Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG)
Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform)
CrystalDiskInfo 7.1.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.1.1 - Crystal Dew World)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy))
Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook)
DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk)
Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited)
eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp)
Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
eMule (HKLM-x32\...\eMule) (Version: - )
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.)
FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG)
Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk)
Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation)
HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard)
HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk)
IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk)
iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla)
Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation)
Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH)
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.)
SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba)
Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk)
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks)
Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk)
Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk)
Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk)
VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp)
Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File
ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.)
ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File
ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)
ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd)
Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)
Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation)
Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it
Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION
Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop
Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll
2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll
2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe
2017-10-02 08:35 - 2017-10-07 12:52 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-10-02 08:35 - 2017-10-07 12:52 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe
MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe
FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: UNTLW WDM Device
Description: UNTLW WDM Device
Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d}
Manufacturer: Schneider Automation
Service: Duntlw
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/09/2017 10:05:32 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/09/2017 10:01:40 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.

Error: (10/09/2017 04:05:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x264
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d340a30686480e
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: 4ead81c1-ac96-11e7-959f-002522d892c1

Error: (10/09/2017 04:05:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: esu.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.IO.FileNotFoundException
in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext()
in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef)
in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean)
in Garmin.Omt.Service.Shared.Overrides..cctor()

Informazioni sull'eccezione: System.TypeInitializationException
in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl()
in Garmin.Omt.Express.SelfUpdater.Program.RealMain()
in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[])

Error: (10/09/2017 03:36:28 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2.
L'elemento radice del file manifesto deve essere un assembly.

Error: (10/09/2017 03:34:30 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/08/2017 04:48:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: FreemakeUtilsService.exe, versione: 1.0.0.0, timestamp: 0x57061917
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x78c
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f48f30a7cd3
Percorso dell'applicazione che ha generato l'errore: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: 1bec8fb9-abd3-11e7-959f-002522d892c1

Error: (10/08/2017 04:48:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: FreemakeUtilsService.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.ArgumentException
in System.Security.Principal.SecurityIdentifier..ctor(System.String)
in FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary()
in FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo)
in FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck()
in FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs)
in FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
in System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
in System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
in System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
in System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
in System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
in System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
in System.Threading.ThreadPoolWorkQueue.Dispatch()
in System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (10/08/2017 03:42:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x1008
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33fd6b3ac9ed5
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: f7c39f31-abc9-11e7-959f-002522d892c1

Error: (10/08/2017 03:42:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: esu.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.IO.FileNotFoundException
in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext()
in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef)
in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean)
in Garmin.Omt.Service.Shared.Overrides..cctor()

Informazioni sull'eccezione: System.TypeInitializationException
in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl()
in Garmin.Omt.Express.SelfUpdater.Program.RealMain()
in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[])


System errors:
=============
Error: (10/09/2017 10:05:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della risposta alla transazione dal servizio ShellHWDetection.

Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Il servizio Garmin Device Interaction Service non è stato avviato per il seguente errore:
Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto.

Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Garmin Device Interaction Service.

Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Il servizio Freemake Improver non è stato avviato per il seguente errore:
Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto.

Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Freemake Improver.

Error: (10/08/2017 04:48:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio Freemake Improver. Questo evento si è già verificato 1 volta(e).

Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.


CodeIntegrity:
===================================
Date: 2017-10-06 12:58:44.248
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.

Date: 2017-10-06 12:58:44.060
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.


==================== Memory info ===========================

Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 70%
Total physical RAM: 2025.64 MB
Available physical RAM: 593.97 MB
Total Virtual: 4051.29 MB
Available Virtual: 1485.25 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.87 GB) (Free:21.65 GB) NTFS
Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 09:35   #6
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Ciao
dal report di frst risultano 2gb di ram..

Total physical RAM: 2025.64 MB

Controlla quanta ram ti vede il pc..
prova a fare start-->tasto dx sopra computer-->proprieta

Quanti banchi di ram hai???
se hai 4gb o ti si è bruciato un banco o il controller non lo vede piu...

Fai delle prove stacca un banco e avvia il pc...
Se funziona quello è buono...
poi stacca quello quono e prova con l altro e vedi come va...
prova a invertire anche gli slot della ram prima in un modo poi viceversa...
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 09:45   #7
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
mi dice memoria installata 4 utilizzabile 2
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 10:12   #8
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Prima di staccare le ram fisicamente come detto sopra prova come cè scritto sotto:

Prima di tutto prova a fare cosi:
start > digita "msconfig" nel box di ricerca >
Opzioni di avvio > Opzioni avanzate > nella finestra che comparirà se è spuntata la voce "Memoria Max" in alto a destra, deselezionala , dai OK e riavvia..

Verifica da bios quanta ram ti vede...

Hai per caso un scheda grafica integrata e non una dedicata?? vedi qui https://www.ilsoftware.it/articoli.a...-Windows_14102

Fai anche quelle prove di staccare la ram banco per banco e provare....

fai sapere...

Ultima modifica di Dan1979 : 09-10-2017 alle 11:00.
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 10:56   #9
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
ok risolto problema della memoria ho spostato i due banchi di memoria in altri slot liberi
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 11:45   #10
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Ok perfetto...
Il pc si è velocizzato un po??
Comunque esegui i vari passaggi che ti ho detto...
Ricordati di postare i log frst.txt e addition.txt..
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 11:57   #11
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
pc velocizzato un pò

2017-10-09 09:30:03, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:03, Info CSI 0000000a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:05, Info CSI 0000000c [SR] Verify complete
2017-10-09 09:30:06, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:06, Info CSI 0000000e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:07, Info CSI 00000010 [SR] Verify complete
2017-10-09 09:30:09, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:09, Info CSI 00000012 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:10, Info CSI 00000014 [SR] Verify complete
2017-10-09 09:30:12, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:12, Info CSI 00000016 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:14, Info CSI 00000018 [SR] Verify complete
2017-10-09 09:30:15, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:15, Info CSI 0000001a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:16, Info CSI 0000001c [SR] Verify complete
2017-10-09 09:30:18, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:18, Info CSI 0000001e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:19, Info CSI 00000020 [SR] Verify complete
2017-10-09 09:30:20, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:20, Info CSI 00000022 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:22, Info CSI 00000024 [SR] Verify complete
2017-10-09 09:30:23, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:23, Info CSI 00000026 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:24, Info CSI 00000028 [SR] Verify complete
2017-10-09 09:30:26, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:26, Info CSI 0000002a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:27, Info CSI 0000002c [SR] Verify complete
2017-10-09 09:30:28, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:28, Info CSI 0000002e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:30, Info CSI 00000030 [SR] Verify complete
2017-10-09 09:30:31, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:31, Info CSI 00000032 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:32, Info CSI 00000034 [SR] Verify complete
2017-10-09 09:30:33, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:33, Info CSI 00000036 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:35, Info CSI 00000038 [SR] Verify complete
2017-10-09 09:30:36, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:36, Info CSI 0000003a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:37, Info CSI 0000003c [SR] Verify complete
2017-10-09 09:30:39, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:39, Info CSI 0000003e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:40, Info CSI 00000040 [SR] Verify complete
2017-10-09 09:30:41, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:41, Info CSI 00000042 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:42, Info CSI 00000044 [SR] Verify complete
2017-10-09 09:30:44, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:44, Info CSI 00000046 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:45, Info CSI 00000048 [SR] Verify complete
2017-10-09 09:30:46, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:46, Info CSI 0000004a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:47, Info CSI 0000004c [SR] Verify complete
2017-10-09 09:30:49, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:49, Info CSI 0000004e [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:50, Info CSI 00000050 [SR] Verify complete
2017-10-09 09:30:51, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:51, Info CSI 00000052 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:53, Info CSI 00000054 [SR] Verify complete
2017-10-09 09:30:54, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:54, Info CSI 00000056 [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:55, Info CSI 00000058 [SR] Verify complete
2017-10-09 09:30:57, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:57, Info CSI 0000005a [SR] Beginning Verify and Repair transaction
2017-10-09 09:30:58, Info CSI 0000005c [SR] Verify complete
2017-10-09 09:30:59, Info CSI 0000005d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:30:59, Info CSI 0000005e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:01, Info CSI 00000060 [SR] Verify complete
2017-10-09 09:31:02, Info CSI 00000061 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:02, Info CSI 00000062 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:03, Info CSI 00000064 [SR] Verify complete
2017-10-09 09:31:05, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:05, Info CSI 00000066 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:06, Info CSI 00000068 [SR] Verify complete
2017-10-09 09:31:07, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:07, Info CSI 0000006a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:09, Info CSI 0000006c [SR] Verify complete
2017-10-09 09:31:10, Info CSI 0000006d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:10, Info CSI 0000006e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:11, Info CSI 00000070 [SR] Verify complete
2017-10-09 09:31:12, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:12, Info CSI 00000072 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:13, Info CSI 00000074 [SR] Verify complete
2017-10-09 09:31:14, Info CSI 00000075 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:14, Info CSI 00000076 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:16, Info CSI 00000078 [SR] Verify complete
2017-10-09 09:31:17, Info CSI 00000079 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:17, Info CSI 0000007a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:19, Info CSI 0000007c [SR] Verify complete
2017-10-09 09:31:20, Info CSI 0000007d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:20, Info CSI 0000007e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:26, Info CSI 00000080 [SR] Verify complete
2017-10-09 09:31:26, Info CSI 00000081 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:26, Info CSI 00000082 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:28, Info CSI 00000084 [SR] Verify complete
2017-10-09 09:31:29, Info CSI 00000085 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:29, Info CSI 00000086 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:31, Info CSI 00000088 [SR] Verify complete
2017-10-09 09:31:32, Info CSI 00000089 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:32, Info CSI 0000008a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:36, Info CSI 0000008c [SR] Verify complete
2017-10-09 09:31:37, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:37, Info CSI 0000008e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:38, Info CSI 00000090 [SR] Verify complete
2017-10-09 09:31:39, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:39, Info CSI 00000092 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:41, Info CSI 00000094 [SR] Verify complete
2017-10-09 09:31:42, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:42, Info CSI 00000096 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:45, Info CSI 00000098 [SR] Verify complete
2017-10-09 09:31:46, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:46, Info CSI 0000009a [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:47, Info CSI 0000009c [SR] Verify complete
2017-10-09 09:31:48, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:48, Info CSI 0000009e [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:49, Info CSI 000000a0 [SR] Verify complete
2017-10-09 09:31:50, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:50, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:53, Info CSI 000000a4 [SR] Verify complete
2017-10-09 09:31:54, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:54, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:56, Info CSI 000000a8 [SR] Verify complete
2017-10-09 09:31:57, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:57, Info CSI 000000aa [SR] Beginning Verify and Repair transaction
2017-10-09 09:31:58, Info CSI 000000ac [SR] Verify complete
2017-10-09 09:31:59, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:31:59, Info CSI 000000ae [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:01, Info CSI 000000b0 [SR] Verify complete
2017-10-09 09:32:02, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:02, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:03, Info CSI 000000b4 [SR] Verify complete
2017-10-09 09:32:04, Info CSI 000000b5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:04, Info CSI 000000b6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:06, Info CSI 000000b8 [SR] Verify complete
2017-10-09 09:32:06, Info CSI 000000b9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:06, Info CSI 000000ba [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:13, Info CSI 000000bc [SR] Verify complete
2017-10-09 09:32:13, Info CSI 000000bd [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:13, Info CSI 000000be [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:19, Info CSI 000000c0 [SR] Verify complete
2017-10-09 09:32:19, Info CSI 000000c1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:19, Info CSI 000000c2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:23, Info CSI 000000c4 [SR] Verify complete
2017-10-09 09:32:24, Info CSI 000000c5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:24, Info CSI 000000c6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:33, Info CSI 000000c8 [SR] Verify complete
2017-10-09 09:32:35, Info CSI 000000c9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:35, Info CSI 000000ca [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:50, Info CSI 000000cd [SR] Verify complete
2017-10-09 09:32:51, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:51, Info CSI 000000cf [SR] Beginning Verify and Repair transaction
2017-10-09 09:32:58, Info CSI 000000d4 [SR] Verify complete
2017-10-09 09:32:58, Info CSI 000000d5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:32:58, Info CSI 000000d6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:04, Info CSI 000000d9 [SR] Verify complete
2017-10-09 09:33:04, Info CSI 000000da [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:04, Info CSI 000000db [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:10, Info CSI 000000dd [SR] Verify complete
2017-10-09 09:33:11, Info CSI 000000de [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:11, Info CSI 000000df [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:20, Info CSI 000000eb [SR] Verify complete
2017-10-09 09:33:21, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:21, Info CSI 000000ed [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:31, Info CSI 00000108 [SR] Verify complete
2017-10-09 09:33:31, Info CSI 00000109 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:31, Info CSI 0000010a [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:38, Info CSI 0000010c [SR] Verify complete
2017-10-09 09:33:38, Info CSI 0000010d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:38, Info CSI 0000010e [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:44, Info CSI 00000110 [SR] Verify complete
2017-10-09 09:33:44, Info CSI 00000111 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:44, Info CSI 00000112 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:51, Info CSI 00000114 [SR] Verify complete
2017-10-09 09:33:51, Info CSI 00000115 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:51, Info CSI 00000116 [SR] Beginning Verify and Repair transaction
2017-10-09 09:33:59, Info CSI 00000118 [SR] Verify complete
2017-10-09 09:33:59, Info CSI 00000119 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:33:59, Info CSI 0000011a [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:07, Info CSI 0000011c [SR] Verify complete
2017-10-09 09:34:07, Info CSI 0000011d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:07, Info CSI 0000011e [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:16, Info CSI 00000120 [SR] Verify complete
2017-10-09 09:34:16, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:16, Info CSI 00000122 [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:45, Info CSI 00000145 [SR] Verify complete
2017-10-09 09:34:45, Info CSI 00000146 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:45, Info CSI 00000147 [SR] Beginning Verify and Repair transaction
2017-10-09 09:34:54, Info CSI 00000149 [SR] Verify complete
2017-10-09 09:34:54, Info CSI 0000014a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:34:54, Info CSI 0000014b [SR] Beginning Verify and Repair transaction
2017-10-09 09:35:08, Info CSI 0000014d [SR] Verify complete
2017-10-09 09:35:10, Info CSI 0000014e [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:35:10, Info CSI 0000014f [SR] Beginning Verify and Repair transaction
2017-10-09 09:35:48, Info CSI 00000153 [SR] Verify complete
2017-10-09 09:35:49, Info CSI 00000154 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:35:49, Info CSI 00000155 [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:02, Info CSI 00000157 [SR] Verify complete
2017-10-09 09:36:02, Info CSI 00000158 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:02, Info CSI 00000159 [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:07, Info CSI 0000015b [SR] Verify complete
2017-10-09 09:36:07, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:07, Info CSI 0000015d [SR] Beginning Verify and Repair transaction
2017-10-09 09:36:18, Info CSI 0000015f [SR] Verify complete
2017-10-09 09:36:20, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:36:20, Info CSI 00000161 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:11, Info CSI 00000174 [SR] Verify complete
2017-10-09 09:37:11, Info CSI 00000175 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:11, Info CSI 00000176 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:16, Info CSI 00000178 [SR] Verify complete
2017-10-09 09:37:18, Info CSI 00000179 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:18, Info CSI 0000017a [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:31, Info CSI 0000017c [SR] Verify complete
2017-10-09 09:37:33, Info CSI 0000017d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:33, Info CSI 0000017e [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:37, Info CSI 00000180 [SR] Verify complete
2017-10-09 09:37:38, Info CSI 00000181 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:38, Info CSI 00000182 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:44, Info CSI 00000184 [SR] Verify complete
2017-10-09 09:37:44, Info CSI 00000185 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:44, Info CSI 00000186 [SR] Beginning Verify and Repair transaction
2017-10-09 09:37:57, Info CSI 00000189 [SR] Verify complete
2017-10-09 09:37:57, Info CSI 0000018a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:37:57, Info CSI 0000018b [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:07, Info CSI 0000018e [SR] Verify complete
2017-10-09 09:38:07, Info CSI 0000018f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:07, Info CSI 00000190 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:12, Info CSI 00000192 [SR] Verify complete
2017-10-09 09:38:12, Info CSI 00000193 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:12, Info CSI 00000194 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:16, Info CSI 00000196 [SR] Verify complete
2017-10-09 09:38:16, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:16, Info CSI 00000198 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:28, Info CSI 0000019a [SR] Verify complete
2017-10-09 09:38:28, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:28, Info CSI 0000019c [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:37, Info CSI 0000019e [SR] Verify complete
2017-10-09 09:38:37, Info CSI 0000019f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:37, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:38:52, Info CSI 000001a2 [SR] Verify complete
2017-10-09 09:38:52, Info CSI 000001a3 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:38:52, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:03, Info CSI 000001bc [SR] Verify complete
2017-10-09 09:39:03, Info CSI 000001bd [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:03, Info CSI 000001be [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:12, Info CSI 000001c0 [SR] Verify complete
2017-10-09 09:39:13, Info CSI 000001c1 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:13, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction
2017-10-09 09:39:50, Info CSI 000001c4 [SR] Verify complete
2017-10-09 09:39:50, Info CSI 000001c5 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:39:50, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:12, Info CSI 000001c9 [SR] Verify complete
2017-10-09 09:40:12, Info CSI 000001ca [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:12, Info CSI 000001cb [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:23, Info CSI 000001cd [SR] Verify complete
2017-10-09 09:40:23, Info CSI 000001ce [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:23, Info CSI 000001cf [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:35, Info CSI 000001d1 [SR] Verify complete
2017-10-09 09:40:36, Info CSI 000001d2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:36, Info CSI 000001d3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:40:54, Info CSI 000001d5 [SR] Verify complete
2017-10-09 09:40:55, Info CSI 000001d6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:40:55, Info CSI 000001d7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:07, Info CSI 000001d9 [SR] Verify complete
2017-10-09 09:41:08, Info CSI 000001da [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:08, Info CSI 000001db [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:19, Info CSI 000001df [SR] Verify complete
2017-10-09 09:41:19, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:19, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:32, Info CSI 000001e3 [SR] Verify complete
2017-10-09 09:41:32, Info CSI 000001e4 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:32, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:38, Info CSI 000001e8 [SR] Verify complete
2017-10-09 09:41:39, Info CSI 000001e9 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:39, Info CSI 000001ea [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:46, Info CSI 000001ec [SR] Verify complete
2017-10-09 09:41:46, Info CSI 000001ed [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:46, Info CSI 000001ee [SR] Beginning Verify and Repair transaction
2017-10-09 09:41:54, Info CSI 000001f1 [SR] Verify complete
2017-10-09 09:41:54, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:41:54, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:05, Info CSI 000001f6 [SR] Verify complete
2017-10-09 09:42:05, Info CSI 000001f7 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:05, Info CSI 000001f8 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:14, Info CSI 000001fa [SR] Verify complete
2017-10-09 09:42:14, Info CSI 000001fb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:14, Info CSI 000001fc [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:21, Info CSI 000001fe [SR] Verify complete
2017-10-09 09:42:21, Info CSI 000001ff [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:21, Info CSI 00000200 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:27, Info CSI 00000202 [SR] Verify complete
2017-10-09 09:42:27, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:27, Info CSI 00000204 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:34, Info CSI 00000207 [SR] Verify complete
2017-10-09 09:42:34, Info CSI 00000208 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:34, Info CSI 00000209 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:41, Info CSI 0000020b [SR] Verify complete
2017-10-09 09:42:41, Info CSI 0000020c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:41, Info CSI 0000020d [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:45, Info CSI 00000210 [SR] Verify complete
2017-10-09 09:42:46, Info CSI 00000211 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:46, Info CSI 00000212 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:52, Info CSI 00000215 [SR] Verify complete
2017-10-09 09:42:52, Info CSI 00000216 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:52, Info CSI 00000217 [SR] Beginning Verify and Repair transaction
2017-10-09 09:42:58, Info CSI 00000219 [SR] Verify complete
2017-10-09 09:42:59, Info CSI 0000021a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:42:59, Info CSI 0000021b [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:05, Info CSI 0000021f [SR] Verify complete
2017-10-09 09:43:06, Info CSI 00000220 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:06, Info CSI 00000221 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:14, Info CSI 00000223 [SR] Verify complete
2017-10-09 09:43:14, Info CSI 00000224 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:14, Info CSI 00000225 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:27, Info CSI 00000228 [SR] Verify complete
2017-10-09 09:43:27, Info CSI 00000229 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:27, Info CSI 0000022a [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:36, Info CSI 0000022c [SR] Verify complete
2017-10-09 09:43:37, Info CSI 0000022d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:37, Info CSI 0000022e [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:43, Info CSI 00000230 [SR] Verify complete
2017-10-09 09:43:44, Info CSI 00000231 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:44, Info CSI 00000232 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:49, Info CSI 00000234 [SR] Verify complete
2017-10-09 09:43:49, Info CSI 00000235 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:49, Info CSI 00000236 [SR] Beginning Verify and Repair transaction
2017-10-09 09:43:55, Info CSI 00000238 [SR] Verify complete
2017-10-09 09:43:56, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:43:56, Info CSI 0000023a [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:03, Info CSI 0000023c [SR] Verify complete
2017-10-09 09:44:04, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:04, Info CSI 0000023e [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:13, Info CSI 00000240 [SR] Verify complete
2017-10-09 09:44:14, Info CSI 00000241 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:14, Info CSI 00000242 [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:18, Info CSI 00000244 [SR] Verify complete
2017-10-09 09:44:19, Info CSI 00000245 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:19, Info CSI 00000246 [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:27, Info CSI 00000248 [SR] Verify complete
2017-10-09 09:44:27, Info CSI 00000249 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:27, Info CSI 0000024a [SR] Beginning Verify and Repair transaction
2017-10-09 09:44:54, Info CSI 0000024c [SR] Verify complete
2017-10-09 09:44:54, Info CSI 0000024d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:44:54, Info CSI 0000024e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:17, Info CSI 00000250 [SR] Verify complete
2017-10-09 09:45:17, Info CSI 00000251 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:17, Info CSI 00000252 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:25, Info CSI 00000254 [SR] Verify complete
2017-10-09 09:45:26, Info CSI 00000255 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:26, Info CSI 00000256 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:30, Info CSI 00000258 [SR] Verify complete
2017-10-09 09:45:30, Info CSI 00000259 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:30, Info CSI 0000025a [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:35, Info CSI 0000025c [SR] Verify complete
2017-10-09 09:45:35, Info CSI 0000025d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:35, Info CSI 0000025e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:40, Info CSI 00000260 [SR] Verify complete
2017-10-09 09:45:40, Info CSI 00000261 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:40, Info CSI 00000262 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:48, Info CSI 00000264 [SR] Verify complete
2017-10-09 09:45:49, Info CSI 00000265 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:49, Info CSI 00000266 [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:50, Info CSI 00000268 [SR] Verify complete
2017-10-09 09:45:50, Info CSI 00000269 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:50, Info CSI 0000026a [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:51, Info CSI 0000026c [SR] Verify complete
2017-10-09 09:45:52, Info CSI 0000026d [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:45:52, Info CSI 0000026e [SR] Beginning Verify and Repair transaction
2017-10-09 09:45:59, Info CSI 00000276 [SR] Verify complete
2017-10-09 09:46:00, Info CSI 00000277 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:00, Info CSI 00000278 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:07, Info CSI 0000027a [SR] Verify complete
2017-10-09 09:46:07, Info CSI 0000027b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:07, Info CSI 0000027c [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:14, Info CSI 0000027e [SR] Verify complete
2017-10-09 09:46:15, Info CSI 0000027f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:15, Info CSI 00000280 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:22, Info CSI 00000282 [SR] Verify complete
2017-10-09 09:46:23, Info CSI 00000283 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:23, Info CSI 00000284 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:31, Info CSI 00000286 [SR] Verify complete
2017-10-09 09:46:32, Info CSI 00000287 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:32, Info CSI 00000288 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:41, Info CSI 0000028b [SR] Verify complete
2017-10-09 09:46:42, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:42, Info CSI 0000028d [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:48, Info CSI 0000028f [SR] Verify complete
2017-10-09 09:46:49, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:49, Info CSI 00000291 [SR] Beginning Verify and Repair transaction
2017-10-09 09:46:53, Info CSI 00000293 [SR] Verify complete
2017-10-09 09:46:54, Info CSI 00000294 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:46:54, Info CSI 00000295 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:03, Info CSI 00000298 [SR] Verify complete
2017-10-09 09:47:03, Info CSI 00000299 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:03, Info CSI 0000029a [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:19, Info CSI 0000029e [SR] Verify complete
2017-10-09 09:47:19, Info CSI 0000029f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:19, Info CSI 000002a0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:31, Info CSI 000002a5 [SR] Verify complete
2017-10-09 09:47:32, Info CSI 000002a6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:32, Info CSI 000002a7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:41, Info CSI 000002ad [SR] Verify complete
2017-10-09 09:47:41, Info CSI 000002ae [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:41, Info CSI 000002af [SR] Beginning Verify and Repair transaction
2017-10-09 09:47:52, Info CSI 000002ba [SR] Verify complete
2017-10-09 09:47:52, Info CSI 000002bb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:47:52, Info CSI 000002bc [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:01, Info CSI 000002c1 [SR] Verify complete
2017-10-09 09:48:01, Info CSI 000002c2 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:01, Info CSI 000002c3 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:09, Info CSI 000002c5 [SR] Verify complete
2017-10-09 09:48:09, Info CSI 000002c6 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:09, Info CSI 000002c7 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:15, Info CSI 000002cb [SR] Verify complete
2017-10-09 09:48:15, Info CSI 000002cc [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:15, Info CSI 000002cd [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:22, Info CSI 000002de [SR] Verify complete
2017-10-09 09:48:23, Info CSI 000002df [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:23, Info CSI 000002e0 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:31, Info CSI 000002f6 [SR] Verify complete
2017-10-09 09:48:31, Info CSI 000002f7 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:31, Info CSI 000002f8 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:38, Info CSI 000002fa [SR] Verify complete
2017-10-09 09:48:39, Info CSI 000002fb [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:39, Info CSI 000002fc [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:47, Info CSI 000002fe [SR] Verify complete
2017-10-09 09:48:47, Info CSI 000002ff [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:47, Info CSI 00000300 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:53, Info CSI 00000302 [SR] Verify complete
2017-10-09 09:48:53, Info CSI 00000303 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:53, Info CSI 00000304 [SR] Beginning Verify and Repair transaction
2017-10-09 09:48:59, Info CSI 00000312 [SR] Verify complete
2017-10-09 09:48:59, Info CSI 00000313 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:48:59, Info CSI 00000314 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:15, Info CSI 00000316 [SR] Verify complete
2017-10-09 09:49:15, Info CSI 00000317 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:15, Info CSI 00000318 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:22, Info CSI 00000326 [SR] Verify complete
2017-10-09 09:49:22, Info CSI 00000327 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:22, Info CSI 00000328 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:25, Info CSI 0000032a [SR] Verify complete
2017-10-09 09:49:26, Info CSI 0000032b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:26, Info CSI 0000032c [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:31, Info CSI 0000032e [SR] Verify complete
2017-10-09 09:49:32, Info CSI 0000032f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:32, Info CSI 00000330 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:39, Info CSI 00000333 [SR] Verify complete
2017-10-09 09:49:39, Info CSI 00000334 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:39, Info CSI 00000335 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:42, Info CSI 00000337 [SR] Verify complete
2017-10-09 09:49:42, Info CSI 00000338 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:42, Info CSI 00000339 [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:51, Info CSI 0000033b [SR] Verify complete
2017-10-09 09:49:51, Info CSI 0000033c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:51, Info CSI 0000033d [SR] Beginning Verify and Repair transaction
2017-10-09 09:49:59, Info CSI 0000033f [SR] Verify complete
2017-10-09 09:49:59, Info CSI 00000340 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:49:59, Info CSI 00000341 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:08, Info CSI 00000343 [SR] Verify complete
2017-10-09 09:50:08, Info CSI 00000344 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:08, Info CSI 00000345 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:16, Info CSI 0000035f [SR] Verify complete
2017-10-09 09:50:16, Info CSI 00000360 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:16, Info CSI 00000361 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:36, Info CSI 00000363 [SR] Verify complete
2017-10-09 09:50:37, Info CSI 00000364 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:37, Info CSI 00000365 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:42, Info CSI 00000367 [SR] Verify complete
2017-10-09 09:50:43, Info CSI 00000368 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:43, Info CSI 00000369 [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:49, Info CSI 0000036b [SR] Verify complete
2017-10-09 09:50:49, Info CSI 0000036c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:49, Info CSI 0000036d [SR] Beginning Verify and Repair transaction
2017-10-09 09:50:54, Info CSI 00000371 [SR] Verify complete
2017-10-09 09:50:54, Info CSI 00000372 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:50:54, Info CSI 00000373 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:00, Info CSI 00000375 [SR] Verify complete
2017-10-09 09:51:00, Info CSI 00000376 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:00, Info CSI 00000377 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:11, Info CSI 00000379 [SR] Verify complete
2017-10-09 09:51:11, Info CSI 0000037a [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:11, Info CSI 0000037b [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:18, Info CSI 0000037d [SR] Verify complete
2017-10-09 09:51:19, Info CSI 0000037e [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:19, Info CSI 0000037f [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:25, Info CSI 00000382 [SR] Verify complete
2017-10-09 09:51:25, Info CSI 00000383 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:25, Info CSI 00000384 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:31, Info CSI 00000386 [SR] Verify complete
2017-10-09 09:51:31, Info CSI 00000387 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:31, Info CSI 00000388 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:39, Info CSI 0000038a [SR] Verify complete
2017-10-09 09:51:39, Info CSI 0000038b [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:39, Info CSI 0000038c [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:47, Info CSI 0000038e [SR] Verify complete
2017-10-09 09:51:48, Info CSI 0000038f [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:48, Info CSI 00000390 [SR] Beginning Verify and Repair transaction
2017-10-09 09:51:56, Info CSI 00000393 [SR] Verify complete
2017-10-09 09:51:56, Info CSI 00000394 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:51:56, Info CSI 00000395 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:02, Info CSI 00000397 [SR] Verify complete
2017-10-09 09:52:03, Info CSI 00000398 [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:52:03, Info CSI 00000399 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:10, Info CSI 0000039b [SR] Verify complete
2017-10-09 09:52:11, Info CSI 0000039c [SR] Verifying 100 (0x0000000000000064) components
2017-10-09 09:52:11, Info CSI 0000039d [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:18, Info CSI 0000039f [SR] Verify complete
2017-10-09 09:52:19, Info CSI 000003a0 [SR] Verifying 90 (0x000000000000005a) components
2017-10-09 09:52:19, Info CSI 000003a1 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:24, Info CSI 000003a3 [SR] Verify complete
2017-10-09 09:52:24, Info CSI 000003a4 [SR] Repairing 0 components
2017-10-09 09:52:24, Info CSI 000003a5 [SR] Beginning Verify and Repair transaction
2017-10-09 09:52:24, Info CSI 000003a7 [SR] Repair complete




----------------------------------------------------------------------------
CrystalDiskInfo 7.1.1 (C) 2008-2016 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64)
Date : 2017/10/09 10:21:24

-- Controller Map ----------------------------------------------------------
+ ATA Channel 0 (0) [ATA]
- WDC WD5000AAKX-001CA0 ATA Device
- ATA Channel 1 (1) [ATA]
+ Controller standard PCI IDE [ATA]
+ ATA Channel 0 (0)
- Optiarc DVD RW AD-5280S ATA Device
- ATA Channel 1 (1)
+ Controller standard PCI IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) WDC WD5000AAKX-001CA0 : 500.1 GB [0/0/0, pd1] - wd

----------------------------------------------------------------------------
(1) WDC WD5000AAKX-001CA0
----------------------------------------------------------------------------
Model : WDC WD5000AAKX-001CA0
Firmware : 15.01H15
Serial Number : WD-WMAYUJ331702
Disk Size : 500.1 GB (8.4/137.4/500.1/500.1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : Sconosciuto
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ----
Transfer Mode : SATA/600 | SATA/600
Power On Hours : 27849 ore
Power On Count : 2117 volte
Temperature : 34 C (93 F)
Health Status : A rischio
Features : S.M.A.R.T., 48bit LBA, NCQ
APM Level : ----
AAM Level : ----
Drive Letter : C: D:

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017
Ran by Gigi (administrator) on GIGI-PC (09-10-2017 10:28:35)
Running from C:\Users\Gigi\Desktop
Loaded Profiles: Gigi (Available Profiles: Gigi)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe
(Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe
(© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] ()
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation)
HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: []
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220
Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx
DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation)

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16]
CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-09]
CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28]
CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29]
CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29]
CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29]
CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12]
CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28]
CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15]
CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30]
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29]
CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22]
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-09-14] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-10-02] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761608 2017-09-08] (Microsoft Corporation)
R2 CTERA Agent service; C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe [5535296 2017-07-30] ()
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-04-07] (Freemake) [File not signed]
S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848704 2011-08-03] (Autodesk, Inc.)
R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
R2 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [18432 2013-12-18] (Clarus, Inc.) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-20] (Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [194912 2017-09-14] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [151128 2017-09-14] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-03] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-03] (Avira Operations GmbH & Co. KG)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-29] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-07] ()
R2 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-07] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-10-09] (Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-10-09] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-10-09] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-10-09] (Malwarebytes)
R3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] ()
R3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] ()
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2009-02-13] (Western Digital Technologies) [File not signed]
S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Duntlw; System32\Drivers\DuntlwNT.sys [X]
S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-09 10:28 - 2017-10-09 10:30 - 000021739 _____ C:\Users\Gigi\Desktop\FRST.txt
2017-10-09 10:19 - 2017-10-09 10:20 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-10-09 10:19 - 2017-10-09 10:19 - 000001200 _____ C:\Users\Gigi\Desktop\CrystalDiskInfo.lnk
2017-10-09 10:19 - 2017-10-09 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-10-09 10:12 - 2017-10-09 10:12 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\CrystalDiskInfo7_1_1 (1).exe
2017-10-09 10:11 - 2017-10-09 10:11 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\35415e15-f7e5-46ac-bd13-5c6e64038ab3.tmp
2017-10-09 09:53 - 2017-10-09 10:21 - 000058459 _____ C:\Users\Gigi\Desktop\sfcdetails.txt
2017-10-07 12:52 - 2017-10-09 10:17 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-10-07 12:52 - 2017-10-09 10:02 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-10-07 12:52 - 2017-10-07 12:52 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-10-07 11:30 - 2017-10-07 11:31 - 000000000 ____D C:\Users\Gigi\AppData\Local\Adobe
2017-10-07 11:30 - 2017-10-07 11:30 - 000475446 _____ C:\Users\Gigi\Desktop\giant-bicycles-bike-411.pdf
2017-10-07 11:10 - 2017-10-09 10:28 - 000000000 ____D C:\FRST
2017-10-07 10:42 - 2017-10-07 10:45 - 000000000 ____D C:\AdwCleaner
2017-10-07 10:39 - 2017-10-07 10:39 - 002400768 _____ (Farbar) C:\Users\Gigi\Desktop\FRST64.exe
2017-10-07 10:39 - 2017-10-07 10:39 - 000000000 ____D C:\Users\Gigi\AppData\Local\2BrightSparks
2017-10-07 10:36 - 2017-10-07 10:36 - 001790024 _____ (Malwarebytes) C:\Users\Gigi\Desktop\JRT.exe
2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp
2017-10-07 09:52 - 2017-10-09 10:03 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-10-07 09:52 - 2017-10-09 10:03 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt
2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe
2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe
2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe
2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox
2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt
2017-10-06 12:39 - 2017-10-07 10:37 - 000000000 ____D C:\Users\Gigi\Desktop\Nuova cartella
2017-10-04 17:13 - 2017-10-06 12:56 - 000000000 ____D C:\Users\Gigi\Desktop\cell antonio
2017-10-04 15:12 - 2017-10-04 15:16 - 000000048 _____ C:\Users\Gigi\Desktop\Nuovo documento di testo.txt
2017-10-04 10:52 - 2017-10-04 10:52 - 000008600 _____ C:\Users\Gigi\Desktop\Document.pdf
2017-10-04 09:29 - 2017-10-04 09:29 - 000000000 ____D C:\Users\Gigi\Desktop\temp cell p8 lite
2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt
2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT
2017-10-02 11:56 - 2017-10-09 10:28 - 000000000 ____D C:\Users\Gigi\Desktop\log
2017-10-02 08:48 - 2017-10-02 08:48 - 000001027 _____ C:\Users\Public\Desktop\MozBackup.lnk
2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup
2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\Program Files (x86)\MozBackup
2017-10-02 08:40 - 2017-10-02 08:43 - 001035926 _____ C:\Users\Gigi\Downloads\MozBackup-1.5.1-EN.exe
2017-10-02 08:35 - 2017-10-07 12:52 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-10-02 08:35 - 2017-10-02 08:35 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET
2017-09-18 19:39 - 2017-09-18 19:39 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive for PC is now Backup and Sync from Google.lnk
2017-09-18 19:39 - 2017-09-18 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2017-09-18 15:05 - 2017-09-18 15:07 - 000000000 ____D C:\Users\Gigi\Downloads\eni
2017-09-18 13:01 - 2017-09-18 13:01 - 000008579 _____ C:\Users\Gigi\Downloads\Document.pdf
2017-09-14 17:19 - 2017-09-14 17:19 - 000288067 _____ C:\Users\Gigi\Downloads\fattura-M177400469.pdf
2017-09-13 15:37 - 2017-09-13 15:37 - 000325621 _____ C:\Users\Gigi\Downloads\gcontactsync-2.0.12-sm+tb.xpi
2017-09-12 21:49 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2017-09-12 21:49 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2017-09-12 21:49 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-09-12 21:49 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-09-12 21:49 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-09-12 21:49 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-09-12 21:49 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-09-12 21:49 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-09-12 21:49 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-09-12 21:49 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-09-12 21:49 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-09-12 21:49 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-09-12 21:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-09-12 21:49 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll
2017-09-12 21:49 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll
2017-09-12 21:49 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll
2017-09-12 21:49 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe
2017-09-12 21:49 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe
2017-09-12 21:49 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-09-12 21:49 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-09-12 21:49 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-09-12 21:49 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-09-12 21:49 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-09-12 21:49 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-09-12 21:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-09-12 21:49 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-09-12 21:49 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-09-12 21:49 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-09-12 21:49 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-09-12 21:49 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-09-12 21:49 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-09-12 21:49 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-09-12 21:49 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-09-12 21:49 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-09-12 21:49 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-09-12 21:49 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-09-12 21:49 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-09-12 21:49 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-09-12 21:49 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-09-12 21:49 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-09-12 21:49 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-09-12 21:49 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-09-12 21:49 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-09-12 21:49 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-09-12 21:49 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-09-12 21:49 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-09-12 21:49 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-09-12 21:49 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-09-12 21:49 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-09-12 21:49 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-09-12 21:49 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-09-12 21:49 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-09-12 21:49 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-09-12 21:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-09-12 21:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-09-12 21:49 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-09-12 21:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-09-12 21:49 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-09-12 21:49 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-09-12 21:49 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-09-12 21:49 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-09-12 21:49 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-09-12 21:49 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-09-12 21:49 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-09-12 21:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-09-12 21:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-09-12 21:49 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-09-12 21:49 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-09-12 21:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-09-12 21:49 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-09-12 21:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-09-12 21:49 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-09-12 21:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-09-12 21:49 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-09-12 21:49 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-09-12 21:49 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-09-12 21:49 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-09-12 21:49 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-09-12 21:49 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-09-12 21:49 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-09-12 21:49 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-09-12 21:49 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe
2017-09-12 21:49 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2017-09-12 21:49 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2017-09-12 21:49 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2017-09-12 21:49 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe
2017-09-12 21:49 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-09-12 21:49 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-09-12 21:49 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-09-12 21:49 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-09-12 21:49 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-09-12 21:49 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2017-09-12 21:49 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-09-12 21:49 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2017-09-12 21:49 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2017-09-12 21:49 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-09-12 21:49 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-09-12 21:49 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-09-12 21:49 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-09-12 21:49 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-09-12 21:49 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-09-12 21:49 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys
2017-09-12 21:49 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-09-12 21:49 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-09-12 21:49 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-09-12 21:49 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-09-12 21:49 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-09-12 21:49 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-09-12 16:22 - 2017-09-12 16:35 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\AirDroid
2017-09-12 11:21 - 2017-10-03 08:11 - 000003122 _____ C:\Windows\System32\Tasks\Avira SystrayStartTrigger

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-10-09 10:29 - 2014-12-04 17:24 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job
2017-10-09 10:23 - 2017-01-20 16:38 - 000000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps
2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-09 10:23 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-10-09 10:19 - 2015-08-17 16:05 - 000000000 ____D C:\ProgramData\Skype
2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieUserList
2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieSiteList
2017-10-09 10:05 - 2016-02-26 16:06 - 000000000 ____D C:\Users\Gigi\Documents\File di Outlook
2017-10-09 10:01 - 2017-03-21 18:39 - 000001695 _____ C:\Users\Gigi\Desktop\Cloud Drive.lnk
2017-10-09 09:59 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-09 09:28 - 2017-04-06 16:39 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Mozilla
2017-10-09 08:58 - 2017-06-20 08:20 - 000000432 _____ C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job
2017-10-08 16:29 - 2014-12-04 17:24 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job
2017-10-07 11:31 - 2015-01-27 09:19 - 003715584 ___SH C:\Users\Gigi\Desktop\Thumbs.db
2017-10-07 11:22 - 2016-02-22 09:40 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\Telegram Desktop
2017-10-07 11:14 - 2016-09-15 09:30 - 000000000 ____D C:\Users\Gigi\Downloads\Telegram Desktop
2017-10-07 10:25 - 2014-09-02 11:16 - 000000000 ____D C:\Users\Gigi\AppData\Local\Autodesk
2017-10-06 17:45 - 2014-08-29 08:43 - 000000000 ____D C:\Program Files (x86)\Danea Easyfatt
2017-10-06 13:03 - 2009-07-14 04:34 - 000000215 _____ C:\Windows\system.ini
2017-10-06 12:58 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\Downloaded Program Files
2017-10-04 16:01 - 2016-05-13 08:31 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\WhatsApp
2017-10-03 12:15 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\system32\FxsTmp
2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-10-02 16:57 - 2014-09-02 11:21 - 000000000 ____D C:\Users\Gigi\Documents\Inventor
2017-10-02 12:24 - 2017-04-13 09:18 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Temp
2017-10-02 10:32 - 2010-11-21 17:30 - 000743956 _____ C:\Windows\system32\perfh010.dat
2017-10-02 10:32 - 2010-11-21 17:30 - 000148130 _____ C:\Windows\system32\perfc010.dat
2017-10-02 10:32 - 2009-07-14 07:13 - 001667988 _____ C:\Windows\system32\PerfStringBackup.INI
2017-10-02 08:35 - 2014-08-29 16:05 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-29 06:18 - 2016-11-03 14:41 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-09-29 06:14 - 2014-08-29 16:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-09-28 17:47 - 2014-10-03 08:16 - 000000866 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-09-27 05:41 - 2016-04-21 09:59 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-27 05:41 - 2016-04-21 09:59 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-26 16:17 - 2014-08-29 08:59 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-25 07:53 - 2009-07-14 07:08 - 000032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-09-20 13:46 - 2017-07-18 08:25 - 000000000 ____D C:\Program Files\PDFCreator
2017-09-20 10:28 - 2016-01-29 11:42 - 000000000 ____D C:\Users\Gigi\Documents\AirDroid
2017-09-15 11:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache
2017-09-15 09:58 - 2009-07-14 06:45 - 000672504 _____ C:\Windows\system32\FNTCACHE.DAT
2017-09-15 09:51 - 2014-08-29 12:05 - 000000000 ____D C:\Windows\system32\MRT
2017-09-15 09:45 - 2014-08-29 12:05 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-09-15 09:40 - 2014-08-29 14:26 - 001641874 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2017-09-14 13:20 - 2014-08-29 11:56 - 000194912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-09-14 13:20 - 2014-08-29 11:56 - 000151128 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-09-13 09:34 - 2014-09-03 14:47 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-09-13 09:34 - 2014-09-03 14:47 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-09-13 09:34 - 2014-09-03 14:47 - 000004460 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\system32\Macromed
2017-09-12 16:26 - 2015-02-21 09:48 - 000000000 ____D C:\Users\Gigi\.android

==================== Files in the root of some directories =======

2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-21 11:09 - 2017-02-21 11:09 - 000001673 _____ () C:\Users\Gigi\AppData\Local\recently-used.xbel
2014-10-03 15:19 - 2014-10-03 15:39 - 000007621 _____ () C:\Users\Gigi\AppData\Local\Resmon.ResmonCfg
2014-09-24 15:58 - 2014-09-24 15:58 - 000000057 _____ () C:\ProgramData\Ament.ini
2015-12-16 18:30 - 2015-12-16 18:30 - 000000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-10-02 13:18

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017
Ran by Gigi (09-10-2017 10:31:50)
Running from C:\Users\Gigi\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled)
Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi
Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology)
ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.)
AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk)
AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden
Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.)
Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.)
Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk)
Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden
Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk)
Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk)
Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk)
Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.)
Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden
Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG)
Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform)
CrystalDiskInfo 7.1.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.1.1 - Crystal Dew World)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy))
Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook)
DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden
DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk)
Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited)
eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp)
Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft)
eMule (HKLM-x32\...\eMule) (Version: - )
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)
FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.)
FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG)
Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk)
Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries)
Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation)
HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard)
HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk)
IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk)
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation)
Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk)
iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden
Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden
Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft)
Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden
Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla)
Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation)
Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH)
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden
Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek)
Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.)
SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba)
Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.)
Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk)
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks)
Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk)
Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk)
Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk)
VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp)
Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation)
WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft)
WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft)
WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll ()
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File
ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.)
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.)
ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation)
ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File
ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] ()
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)
ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd)
Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)
Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation)
Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated)
Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)
Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe
Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it
Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION
Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.)
Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] ()
Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop
Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2"
ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1"

==================== Loaded Modules (Whitelisted) ==============

2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll
2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe
2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe
2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll
2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe
2017-10-02 08:35 - 2017-10-07 12:52 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-10-02 08:35 - 2017-10-07 12:52 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup
MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start
MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices
MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe"
MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide
MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe
MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe
FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe
FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe
FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============

Name: UNTLW WDM Device
Description: UNTLW WDM Device
Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d}
Manufacturer: Schneider Automation
Service: Duntlw
Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39)
Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded.
Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.


==================== Event log errors: =========================

Application errors:
==================
Error: (10/09/2017 10:05:32 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/09/2017 10:01:40 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema.

Error: (10/09/2017 04:05:23 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x264
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d340a30686480e
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: 4ead81c1-ac96-11e7-959f-002522d892c1

Error: (10/09/2017 04:05:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: esu.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.IO.FileNotFoundException
in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext()
in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef)
in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean)
in Garmin.Omt.Service.Shared.Overrides..cctor()

Informazioni sull'eccezione: System.TypeInitializationException
in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl()
in Garmin.Omt.Express.SelfUpdater.Program.RealMain()
in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[])

Error: (10/09/2017 03:36:28 AM) (Source: SideBySide) (EventID: 9) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2.
L'elemento radice del file manifesto deve essere un assembly.

Error: (10/09/2017 03:34:30 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1.
L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto.
Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata.

Error: (10/08/2017 04:48:06 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: FreemakeUtilsService.exe, versione: 1.0.0.0, timestamp: 0x57061917
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x78c
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f48f30a7cd3
Percorso dell'applicazione che ha generato l'errore: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: 1bec8fb9-abd3-11e7-959f-002522d892c1

Error: (10/08/2017 04:48:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: FreemakeUtilsService.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.ArgumentException
in System.Security.Principal.SecurityIdentifier..ctor(System.String)
in FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary()
in FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo)
in FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck()
in FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs)
in FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
in System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
in System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
in System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
in System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
in System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
in System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
in System.Threading.ThreadPoolWorkQueue.Dispatch()
in System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (10/08/2017 03:42:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5
Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26
Codice eccezione: 0xe0434352
Offset errore 0x0000c54f
ID processo che ha generato l'errore: 0x1008
Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33fd6b3ac9ed5
Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe
Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll
ID segnalazione: f7c39f31-abc9-11e7-959f-002522d892c1

Error: (10/08/2017 03:42:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Applicazione: esu.exe
Versione framework: v4.0.30319
Descrizione: il processo è stato terminato a causa di un'eccezione non gestita.
Informazioni sull'eccezione: System.IO.FileNotFoundException
in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext()
in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef)
in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean)
in Garmin.Omt.Service.Shared.Overrides..cctor()

Informazioni sull'eccezione: System.TypeInitializationException
in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl()
in Garmin.Omt.Express.SelfUpdater.Program.RealMain()
in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[])


System errors:
=============
Error: (10/09/2017 10:05:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della risposta alla transazione dal servizio ShellHWDetection.

Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Il servizio Garmin Device Interaction Service non è stato avviato per il seguente errore:
Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto.

Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Garmin Device Interaction Service.

Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Il servizio Freemake Improver non è stato avviato per il seguente errore:
Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto.

Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Freemake Improver.

Error: (10/08/2017 04:48:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Arresto imprevista del servizio Freemake Improver. Questo evento si è già verificato 1 volta(e).

Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.

Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: )
Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0.


CodeIntegrity:
===================================
Date: 2017-10-06 12:58:44.248
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.

Date: 2017-10-06 12:58:44.060
Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta.


==================== Memory info ===========================

Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 70%
Total physical RAM: 2025.64 MB
Available physical RAM: 593.97 MB
Total Virtual: 4051.29 MB
Available Virtual: 1485.25 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.87 GB) (Free:21.65 GB) NTFS
Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 12:13   #12
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Scusa non avevo visto i report...
Appena posso li controllo e seguiranno istruzioni...
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 09-10-2017, 18:25   #13
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Ciao

Disinstalla combofix
Per disinstallare ComboFix da Windows7:

Cliccca su Start e nel campo Cerca Programmi e file inserite combofix /uninstall ( notare lo spazio tra combofix e /uninstall )

Fatto questo, premi Invio. Comparirà un avviso di protezione che chiederà se volete eseguire ComboFix. Clicca su Esegui per avviare la disinstallazione.

ComboFix verrà disinstallato dal computer e rimuoverà i backups ed i files in quarantena e, terminato il processo di disinstallazione, comparirà un messaggio che indicherà che ComboFix è stato disinstallato. A questo puoi cancellare il file ComboFix.exe.

Dai log risulta il system restore disabilitato:

ATTENTION: System Restore is disabled

Riabilita il system restore:

Vai su Start, Pannello di controllo, Sistema e sicurezza > Sistema) e clic su Protezione sistema a sinistra:

Seleziona l'unità disco, e fa clic su Configura...,

Nella finestra seguente:
metti la spunta su:
ripristina inpostazioni del sistema e versioni precedenti dei file

clicca su applica e poi su ok..

Poi posiziona frst sul desktop assieme al file allegato in fondo al post fixlist.txt (mi raccomando mettili sul desktop)
Tasto dx sopra frst-->esegui come amministratore
Clicca sul pulsante FIX
Attendi che finisca e che il pc si riavvii (se non si riavvia fallo te)
Posta il file scaturito fixlog.txt (lo trovi sul desktop)


Fai pulizia con ccleaner sia sistema che registro

resetta i browser vedi qui http://it.ccm.net/faq/1767-come-ripristinare-il-browser


Poi prova a effettuare un avvio pulito di windows:

1.Clicca su Start >

2. Digitare :
msconfig e dare invio nel box di ricerca del menu start.
Andare alla sezione Avvio.
Togliere tutte le spunte meno quelle relative all'antivirus (Se è Microsoft Security Essentials)
Dare ok.
Non riavviare.

3. Riaprire msconfig e cliccare sulla sezione Servizi.
Mettere la spunta nell apposita casella per nascondere tutti i servizi Microsoft (Attenzione , i servizi Microsoft vanno nascosti e non toccati)
Disabilitare tutti gli altri.
Dare ok.
Non riavviare.

4. Andare in C:\windows\prefetch.
Cancellare tutti i file (compresa la cartella ReadyBoot che verrà ricreata) meno il file layout.ini che non va toccato (il file è nascosto e quindi potrebbe non essere visibile).

5. Andare in C:\windows\temp.
Cancellare tutti i file cancellabili (molti file potrebbero essere in uso e quindi non possono essere eliminati quindi vanno mantenuti).

6. Pannello di controllo > opzioni internet , cliccare su Elimina per ripulire I Temporanei e la Cronologia.
Dare ok.

7. Vuotare il cestino e riavviare.


A questo punto esegui verifica se ci sono miglioramenti...

Fai sapere
Ciao
Allegati
File Type: txt fixlist.txt (20.5 KB, 4 visite)

Ultima modifica di Dan1979 : 09-10-2017 alle 20:25.
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 10-10-2017, 08:51   #14
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
fatto tutto tranne disinstallare combofix....non lo trova

Fix result of Farbar Recovery Scan Tool (x64) Version: 08-10-2017
Ran by Gigi (10-10-2017 09:00:04) Run:1
Running from C:\Users\Gigi\Desktop
Loaded Profiles: Gigi & (Available Profiles: Gigi)
Boot Mode: Normal
==============================================

fixlist content:
*****************
start

CreateRestorePoint:
EmptyTemp:
CloseProcesses:

HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: []
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL =
Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File

CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28]
CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27]
CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 Duntlw; System32\Drivers\DuntlwNT.sys [X]
S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION

2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt
2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe
2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe
2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe
2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe
2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox
2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt
2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt
2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT
2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp
2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET
2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File
CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File
ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File

Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it
Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION

AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114]

C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip

HOSTS:
Removeproxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset C:\resettcpip.txt
CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i"
CMD: Bitsadmin /Reset /Allusers
Reboot:

End
*****************

Restore point was successfully created.
Processes closed successfully.
HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully
HKLM\Software\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => key removed successfully
CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] => Error: No automatic fix found for this entry.
CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] => Error: No automatic fix found for this entry.
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh => key removed successfully
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => key removed successfully
HKLM\System\CurrentControlSet\Services\AsrCDDrv => key removed successfully
AsrCDDrv => service removed successfully
HKLM\System\CurrentControlSet\Services\catchme => key removed successfully
catchme => service removed successfully
HKLM\System\CurrentControlSet\Services\Duntlw => key removed successfully
Duntlw => service removed successfully
HKLM\System\CurrentControlSet\Services\QDrive => key removed successfully
QDrive => service removed successfully
"C:\ComboFix.txt" => not found.
"C:\Windows\PEV.exe" => not found.
"C:\Windows\MBR.exe" => not found.
"C:\Windows\NIRCMD.exe" => not found.
"C:\Windows\SWREG.exe" => not found.
"C:\Windows\SWSC.exe" => not found.
"C:\Windows\sed.exe" => not found.
"C:\Windows\grep.exe" => not found.
"C:\Windows\zip.exe" => not found.
"C:\Qoobox" => not found.
C:\Windows\erdnt => moved successfully
C:\DelFix.txt => moved successfully
C:\Windows\ERUNT => moved successfully
C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp => moved successfully
C:\Users\Gigi\AppData\Local\ESET => moved successfully
C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220} => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1} => key removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => key removed successfully
HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} => key not found.
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => key removed successfully
HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} => key not found.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE => key removed successfully
HKLM\Software\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D09808C-5B26-433E-B62B-8420AEE5F1C6} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D09808C-5B26-433E-B62B-8420AEE5F1C6} => key removed successfully
C:\Windows\System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7AAD6B62-AADF-4C68-9723-9A2E76F42C37} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AAD6B62-AADF-4C68-9723-9A2E76F42C37} => key removed successfully
C:\Windows\System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => key removed successfully
C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully.
"C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip" => not found.
Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot.

========= RemoveProxy: =========

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


========= End of RemoveProxy: =========


========= netsh advfirewall reset =========

OK.


========= End of CMD: =========


========= netsh advfirewall set allprofiles state ON =========

OK.


========= End of CMD: =========


========= ipconfig /flushdns =========


Configurazione IP di Windows

Cache del resolver DNS svuotata.

========= End of CMD: =========


========= netsh winsock reset catalog =========


Reimpostazione catalogo Winsock completata.
Ô necessario riavviare il computer per completare l'operazione.


========= End of CMD: =========


========= netsh int ip reset C:\resettcpip.txt =========

Reimpostazione di Globale in corso. Completata.
Reimpostazione di Interfaccia in corso. Completata.
Riavviare il computer per completare l'azione.


========= End of CMD: =========


========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" =========


========= End of CMD: =========


========= Bitsadmin /Reset /Allusers =========


BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8171085 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 359848 B
Edge => 0 B
Chrome => 284321015 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 0 B
Gigi => 9299885 B

RecycleBin => 1729088 B
EmptyTemp: => 297.8 MB temporary data Removed.

================================

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 10-10-2017 09:15:15)

"C:\Windows\System32\Drivers\etc\hosts" => Could not move
Could not restore Hosts.

==== End of Fixlog 09:15:16 ====
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 10-10-2017, 09:20   #15
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Combofix lo hai provato a eliminare prima o dopo aver eseguito il fix???
Non importa comunque ci ho pensato io con il fix...
Il pc come va adesso???
E' piu veloce???
Hai eseguito anche l avvio pulito??

Comunque quando hai eseguito crystaldisk che valori erano in giallo??:
i problemi Crystal te li mostra in GIALLO o ROSSO .
Quelli più critici sono il 05 ed il C5 , il C4 è dipendente da questi due.
Complessivamente il report dei valori SMART dice ha rischio, quindi vuol dire che l hd non è piu tanto performante....
Anche quello puo incidere sulla velocita...

Se non riscontri piu problemi seguiranno pulizie dei programmi usati per fare le scansioni...

Ciao

Ultima modifica di Dan1979 : 10-10-2017 alle 09:41.
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 10-10-2017, 09:32   #16
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
provato prima del fix
va molto meglio ...solo che ho notato che autocad e anche inventor non sia apre più
si ho eseguito anche l'avvio pulito

si il pulsante era giallo a rischio

Ultima modifica di speed73 : 10-10-2017 alle 09:35.
speed73 è offline   Rispondi citando il messaggio o parte di esso
Old 10-10-2017, 09:52   #17
Dan1979
Member
 
Iscritto dal: Jun 2017
Messaggi: 175
Che errore riscontri??
Prova a fare l avvio pulito all incontarrio ,cioè riabilita tutto!!!

Ultima modifica di Dan1979 : 10-10-2017 alle 10:07.
Dan1979 è offline   Rispondi citando il messaggio o parte di esso
Old 10-10-2017, 10:01   #18
speed73
Member
 
L'Avatar di speed73
 
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
parte sia autocad che inventor...ma non si aprono

ok ora provo

Ultima modifica di speed73 : 10-10-2017 alle 10:10.
speed73 è offline   Rispondi citando il messaggio o parte di esso
 Rispondi


La Formula E può correre su un tracciato vero? Reportage da Misano con Jaguar TCS Racing La Formula E può correre su un tracciato ...
Lenovo LEGION e LOQ: due notebook diversi, stessa anima gaming Lenovo LEGION e LOQ: due notebook diversi, stess...
Nothing Ear e Ear (a): gli auricolari per tutti i gusti! La ''doppia'' recensione Nothing Ear e Ear (a): gli auricolari per tutti ...
Sony FE 16-25mm F2.8 G: meno zoom, più luce Sony FE 16-25mm F2.8 G: meno zoom, più lu...
Motorola edge 50 Pro: design e display al top, meno il prezzo! Recensione Motorola edge 50 Pro: design e display al top, m...
HiSolution amplia i propri servizi e pun...
F1 24 introdurrà migliorie al mod...
Arriva Omnissa, che prenderà in c...
Turista americano torna dall'Europa e si...
Larian al lavoro su due nuovi giochi, cr...
Microsoft Office LTSC 2024 disponibile i...
Fallout 4 è il gioco più v...
Razer Kishi Ultra: ecco il controller pe...
Il Dimensity 6300 di MediaTek porta il 5...
Google combina i team Android, Chrome e ...
Axiante vuole indagare come le imprese i...
Italia quinto mercato europeo per i vide...
Apple celebra la Giornata della Terra co...
La funzionalità 'AI Explorer' di ...
ASUS ROG Ally: la versione più potente c...
Chromium
GPU-Z
OCCT
LibreOffice Portable
Opera One Portable
Opera One 106
CCleaner Portable
CCleaner Standard
Cpu-Z
Driver NVIDIA GeForce 546.65 WHQL
SmartFTP
Trillian
Google Chrome Portable
Google Chrome 120
VirtualBox
Tutti gli articoli Tutte le news Tutti i download

Strumenti

Regole
Non Puoi aprire nuove discussioni
Non Puoi rispondere ai messaggi
Non Puoi allegare file
Non Puoi modificare i tuoi messaggi

Il codice vB è On
Le Faccine sono On
Il codice [IMG] è On
Il codice HTML è Off
Vai al Forum


Tutti gli orari sono GMT +1. Ora sono le: 02:58.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Served by www2v