|
|
|
|
Strumenti |
07-10-2017, 10:20 | #1 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
pc lento mi date una mano
Ho da un paio di giorni il pc lentissimo di seguito i log
grazie Malwarebytes www.malwarebytes.com -Dettagli log- Data scansione: 07/10/17 Ora scansione: 10:27 File di log: 61f653d6-ab39-11e7-9c48-002522d892c1.json Amministratore: Sì -Informazioni software- Versione: 3.2.2.2029 Versione componenti: 1.0.207 Aggiorna versione pacchetto: 1.0.2968 Licenza: Trial -Informazioni sistema- SO: Windows 7 Service Pack 1 CPU: x64 File system: NTFS Utente: Gigi-PC\Gigi -Riepilogo scansione- Tipo di scansione: Ricerca elementi nocivi Risultati: Completata Elementi analizzati: 372035 Minacce rilevate: 0 (Nessun elemento nocivo rilevato) Minacce messe in quarantena: 0 (Nessun elemento nocivo rilevato) Tempo impiegato: 12 min, 55 sec -Opzioni di scansione- Memoria: Attivata Esecuzioni automatiche: Attivata File system: Attivata Archivi compressi: Attivata Rootkit: Disattivata Analisi euristica: Attivata PUP: Rilevare PUM: Rilevare -Dettagli scansione- Processo: 0 (Nessun elemento nocivo rilevato) Modulo: 0 (Nessun elemento nocivo rilevato) Chiave di registro: 0 (Nessun elemento nocivo rilevato) Valore di registro: 0 (Nessun elemento nocivo rilevato) Dati di registro: 0 (Nessun elemento nocivo rilevato) Flusso di dati: 0 (Nessun elemento nocivo rilevato) Cartella: 0 (Nessun elemento nocivo rilevato) File: 0 (Nessun elemento nocivo rilevato) Settore fisico: 0 (Nessun elemento nocivo rilevato) (end) # AdwCleaner 7.0.3.1 - Logfile created on Sat Oct 07 08:44:09 2017 # Updated on 2017/29/09 by Malwarebytes # Database: 10-04-2017.1 # Running on Windows 7 Professional (X64) # Mode: scan # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services found. ***** [ Folders ] ***** No malicious folders found. ***** [ Files ] ***** No malicious files found. ***** [ DLL ] ***** No malicious DLLs found. ***** [ WMI ] ***** No malicious WMI found. ***** [ Shortcuts ] ***** No malicious shortcuts found. ***** [ Tasks ] ***** No malicious tasks found. ***** [ Registry ] ***** PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries. ************************* ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ########## # AdwCleaner 7.0.3.1 - Logfile created on Sat Oct 07 08:45:08 2017 # Updated on 2017/29/09 by Malwarebytes # Running on Windows 7 Professional (X64) # Mode: clean # Support: https://www.malwarebytes.com/support ***** [ Services ] ***** No malicious services deleted. ***** [ Folders ] ***** No malicious folders deleted. ***** [ Files ] ***** No malicious files deleted. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** No malicious shortcuts cleaned. ***** [ Tasks ] ***** No malicious tasks deleted. ***** [ Registry ] ***** Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced Deleted: [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries deleted. ***** [ Chromium (and derivatives) ] ***** No malicious Chromium entries deleted. ************************* ::Tracing keys deleted ::Winsock settings cleared ::Additional Actions: 0 ************************* C:/AdwCleaner/AdwCleaner[S0].txt - [1326 B] - [2017/10/7 8:44:9] ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ########## ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.1.4 (07.09.2017) Operating System: Windows 7 Professional x64 Ran by Gigi (Administrator) on 07/10/2017 at 10:57:20.23 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ File System: 8 Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFECWNJJ (Temporary Internet Files Folder) Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L77YPD3C (Temporary Internet Files Folder) Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N0Z2C9FY (Temporary Internet Files Folder) Successfully deleted: C:\Users\Gigi\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NLCTJ6EI (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HFECWNJJ (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L77YPD3C (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\N0Z2C9FY (Temporary Internet Files Folder) Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NLCTJ6EI (Temporary Internet Files Folder) Registry: 0 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 07/10/2017 at 10:59:57.55 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017 Ran by Gigi (07-10-2017 11:16:13) Running from C:\Users\Gigi\Desktop Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled) Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems) Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated) ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology) ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.) AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk) AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk) Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG) Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.) Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.) CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link) CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy)) Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook) DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp) Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft) eMule (HKLM-x32\...\eMule) (Version: - ) erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.) FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG) Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk) Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation) HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard) HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk) IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk) iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft) Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes) Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla) Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation) Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH) Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek) Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.) Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.) Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba) Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks) Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk) Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk) Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk) VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp) Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation) WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft) WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft) WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.) ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation) ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.) Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd) Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation) Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated) Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.) Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] () Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated) Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" ==================== Loaded Modules (Whitelisted) ============== 2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe 2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll 2017-10-02 08:35 - 2017-10-04 05:36 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-10-02 08:35 - 2017-10-04 05:36 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll 2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe 2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe 2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll 2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 208.67.222.222 - 208.67.220.220 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Faulty Device Manager Devices ============= Name: UNTLW WDM Device Description: UNTLW WDM Device Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d} Manufacturer: Schneider Automation Service: Duntlw Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. ==================== Event log errors: ========================= Application errors: ================== Error: (10/07/2017 11:00:56 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/07/2017 11:00:56 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/07/2017 10:57:47 AM) (Source: ESENT) (EventID: 489) (User: ) Description: taskhost (3228) Tentativo di apertura del file "C:\Users\Gigi\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" per accesso in sola lettura non riuscito con errore di sistema 32 (0x00000020): "Impossibile accedere al file. Il file è utilizzato da un altro processo. ". L'operazione di apertura file non verrà effettuata con errore -1032 (0xfffffbf8). Error: (10/07/2017 10:54:41 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/07/2017 10:49:28 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (10/07/2017 10:23:59 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2. L'elemento radice del file manifesto deve essere un assembly. Error: (10/07/2017 10:18:14 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/07/2017 10:16:20 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x77c Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f44697f815d Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: cc2f7184-ab37-11e7-8901-002522d892c1 Error: (10/07/2017 10:16:17 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: esu.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.IO.FileNotFoundException in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext() in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef) in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean) in Garmin.Omt.Service.Shared.Overrides..cctor() Informazioni sull'eccezione: System.TypeInitializationException in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl() in Garmin.Omt.Express.SelfUpdater.Program.RealMain() in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[]) Error: (10/07/2017 10:06:45 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: emule.exe, versione: 0.50.0.4, timestamp: 0x4bbc81c8 Nome del modulo che ha generato l'errore: emule.exe, versione: 0.50.0.4, timestamp: 0x4bbc81c8 Codice eccezione: 0xc0000005 Offset errore 0x002ce9b4 ID processo che ha generato l'errore: 0x518 Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f4204f96378 Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\eMule\emule.exe Percorso del modulo che ha generato l'errore: C:\Program Files (x86)\eMule\emule.exe ID segnalazione: 7529abf8-ab36-11e7-8901-002522d892c1 System errors: ============= Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:48 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:46 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:45 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:43 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:41 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:39 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. CodeIntegrity: =================================== Date: 2017-10-06 12:58:44.248 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. Date: 2017-10-06 12:58:44.060 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. ==================== Memory info =========================== Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics Percentage of memory in use: 83% Total physical RAM: 2025.64 MB Available physical RAM: 343.42 MB Total Virtual: 4051.29 MB Available Virtual: 965.55 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.87 GB) (Free:21 GB) NTFS Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS Drive j: (SAMSUNG) (Fixed) (Total:465.76 GB) (Free:244.28 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: D3DE9CA0) Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================ Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017 Ran by Gigi (administrator) on GIGI-PC (07-10-2017 11:16:59) Running from C:\Users\Gigi\Desktop Loaded Profiles: Gigi (Available Profiles: Gigi) Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe (Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (hxxp://www.emule-project.net) C:\Program Files (x86)\eMule\emule.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avcenter.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Telegram Messenger LLP) C:\Users\Gigi\AppData\Roaming\Telegram Desktop\Telegram.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] () HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries) HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = SearchScopes: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) FireFox: ======== FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] () FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation) Chrome: ======= CHR DefaultProfile: Profile 2 CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-07] CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28] CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29] CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29] CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29] CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12] CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28] CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15] CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30] CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29] CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22] CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx |
07-10-2017, 10:38 | #2 |
Member
Iscritto dal: Dec 2011
Messaggi: 118
|
malwarebytes un po di cose da eliminare le ha trovate. Ti consiglio di fare una scansione anche con combofix (in modalitá provvisoria) e una scansione completa poi con il tuo antivirus.
Poi controllerei i programmi che il pc esegue all avvio e i servizi di terze parti che esegue all avvio. Quando ti sembra un poco migliorato, dai una passata di pulizia registro con wisecleaner o ccleaner o simili Crei un punto di ripristino Fai la pulizia del disco Esegui una deframmentazione se non sei su ssd
__________________
Acquisti conclusi positivamente con kosta99, tremblay, skyline90, lupin382, c3sar3, Trokji |
07-10-2017, 19:59 | #3 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Ciao
il pc in questione è vecchiotto??? Poi è lento nel navigare o in generale??? Comunque.... il log frst.txt che mi hai copiato è incompleto... prima di ripostarmelo esegui tutti i passaggi sotto.. Facciamo delle prove... Controlla l integrita dei file di sistema: -clicca su Start -scrivi nella casella bianca (cerca programmi e file) cmd -tasto dx sopra cmd.exe -esegui come amministratore -quando si apre -scrivi o copia la seguente stringa: sfc /scannow -dai invio -poi sempre in cmd copia la seguente stringa: findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt" -posta il log sfcdetail.txt lo trovi sul desktop Fai un controllo del hd o ssd con uno scandisk...vedi qui https://www.aranzulla.it/come-esegui...dsk-27805.html O in alternativa usa o HDTune e CrystalDiskInfo... posta il risultato... Poi ho notato che hai il disco C (penso sia un disco ssd) cioè quello dove è installato win che comincia a essere pienotto e vicino all limite della funzionalita consentita (piu o meno devi avere circa il 20% di spazio libero su disco): Drive c: () (Fixed) (Total:111.87 GB) (Free:21 GB) NTFS Come puoi notare hai 21gb di spazio libero... Dovremo fare pulizia... anzitutto disinstalla le applicazioni che reputi inutili o che non ti servono piu... dopo la disinstallazione fai pulizia con ccleaner sia sistema che registro.. sempre con ccleaner ,portati alla scheda ripristino,se ne hai molti cancellali tutti tranne quello in grigio per motivi di sicurezza e uno ad una data dove il pc funzionava bene... Vedi una guida qui per ripulire il disco https://www.aranzulla.it/come-libera...co-940721.html Una altra cosa che ho notato ,è che hai installato il pacchetto autacad e inventor.... Ti faccio notare che sono programmi pesanti, e hai solo 2gb di ram(se sbaglio dimmelo) ,direi un po pochino, senza considerare poi il disegno 3d... Percentage of memory in use: 83% Total physical RAM: 2025.64 MB Available physical RAM: 343.42 MB Total Virtual: 4051.29 MB Available Virtual: 965.55 MB la percentuale di uso della ram era senza usare autocad o peggio inventor...(mi sbaglio???) Secondo me ,essendo poca la ram quando vai a utilizzare programmi come autocad o inventor, e poi ne apri in contemporanea altri, la ram va in saturazione e il controller di memoria accede alla memoria di paging o memoria virtuale allocata nel hd. Di conseguenza le prestazioni decadono drasticamente perché il tempo di accesso all' hd è notevolmente superiore rispetto alla ram... Questo sicuramente rallenta non poco il pc.. hai un portatile??? penso di si: Processor: AMD A8-3870 APU considerando che il procio non è il top, viene tutto da se... Adesso dopo aver eseguito il tutto e letto cancella i log frst.txt e addition.txt Rifai una nuova scansione aggiornata con frst facendo attenzione a spuntare addition(se gia non lo fosse)... posta i due nuovi log frst.txt e addition.txt (occhio a postarli completi).... Seguiranno pulizie dopo aver visionato i log... Ciao Ultima modifica di Dan1979 : 08-10-2017 alle 10:50. |
09-10-2017, 08:46 | #4 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
Ciao Dan1979
il pc in questione è vecchiotto??? è vecchiotto ma fino a pochi giorni fa non era cosi lento Poi è lento nel navigare o in generale??? in generale Ti faccio notare che sono programmi pesanti, e hai solo 2gb di ram(se sbaglio dimmelo) ho 4gb di ram non è un portatile ora faccio tutta la sequenza che mi hai indicato e dopo posto il log grazie!!!! |
09-10-2017, 09:34 | #5 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
ecco i log
2017-10-09 09:30:03, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:03, Info CSI 0000000a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:05, Info CSI 0000000c [SR] Verify complete 2017-10-09 09:30:06, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:06, Info CSI 0000000e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:07, Info CSI 00000010 [SR] Verify complete 2017-10-09 09:30:09, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:09, Info CSI 00000012 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:10, Info CSI 00000014 [SR] Verify complete 2017-10-09 09:30:12, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:12, Info CSI 00000016 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:14, Info CSI 00000018 [SR] Verify complete 2017-10-09 09:30:15, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:15, Info CSI 0000001a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:16, Info CSI 0000001c [SR] Verify complete 2017-10-09 09:30:18, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:18, Info CSI 0000001e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:19, Info CSI 00000020 [SR] Verify complete 2017-10-09 09:30:20, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:20, Info CSI 00000022 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:22, Info CSI 00000024 [SR] Verify complete 2017-10-09 09:30:23, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:23, Info CSI 00000026 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:24, Info CSI 00000028 [SR] Verify complete 2017-10-09 09:30:26, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:26, Info CSI 0000002a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:27, Info CSI 0000002c [SR] Verify complete 2017-10-09 09:30:28, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:28, Info CSI 0000002e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:30, Info CSI 00000030 [SR] Verify complete 2017-10-09 09:30:31, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:31, Info CSI 00000032 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:32, Info CSI 00000034 [SR] Verify complete 2017-10-09 09:30:33, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:33, Info CSI 00000036 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:35, Info CSI 00000038 [SR] Verify complete 2017-10-09 09:30:36, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:36, Info CSI 0000003a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:37, Info CSI 0000003c [SR] Verify complete 2017-10-09 09:30:39, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:39, Info CSI 0000003e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:40, Info CSI 00000040 [SR] Verify complete 2017-10-09 09:30:41, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:41, Info CSI 00000042 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:42, Info CSI 00000044 [SR] Verify complete 2017-10-09 09:30:44, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:44, Info CSI 00000046 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:45, Info CSI 00000048 [SR] Verify complete 2017-10-09 09:30:46, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:46, Info CSI 0000004a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:47, Info CSI 0000004c [SR] Verify complete 2017-10-09 09:30:49, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:49, Info CSI 0000004e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:50, Info CSI 00000050 [SR] Verify complete 2017-10-09 09:30:51, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:51, Info CSI 00000052 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:53, Info CSI 00000054 [SR] Verify complete 2017-10-09 09:30:54, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:54, Info CSI 00000056 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:55, Info CSI 00000058 [SR] Verify complete 2017-10-09 09:30:57, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:57, Info CSI 0000005a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:58, Info CSI 0000005c [SR] Verify complete 2017-10-09 09:30:59, Info CSI 0000005d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:59, Info CSI 0000005e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:01, Info CSI 00000060 [SR] Verify complete 2017-10-09 09:31:02, Info CSI 00000061 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:02, Info CSI 00000062 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:03, Info CSI 00000064 [SR] Verify complete 2017-10-09 09:31:05, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:05, Info CSI 00000066 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:06, Info CSI 00000068 [SR] Verify complete 2017-10-09 09:31:07, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:07, Info CSI 0000006a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:09, Info CSI 0000006c [SR] Verify complete 2017-10-09 09:31:10, Info CSI 0000006d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:10, Info CSI 0000006e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:11, Info CSI 00000070 [SR] Verify complete 2017-10-09 09:31:12, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:12, Info CSI 00000072 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:13, Info CSI 00000074 [SR] Verify complete 2017-10-09 09:31:14, Info CSI 00000075 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:14, Info CSI 00000076 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:16, Info CSI 00000078 [SR] Verify complete 2017-10-09 09:31:17, Info CSI 00000079 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:17, Info CSI 0000007a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:19, Info CSI 0000007c [SR] Verify complete 2017-10-09 09:31:20, Info CSI 0000007d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:20, Info CSI 0000007e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:26, Info CSI 00000080 [SR] Verify complete 2017-10-09 09:31:26, Info CSI 00000081 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:26, Info CSI 00000082 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:28, Info CSI 00000084 [SR] Verify complete 2017-10-09 09:31:29, Info CSI 00000085 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:29, Info CSI 00000086 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:31, Info CSI 00000088 [SR] Verify complete 2017-10-09 09:31:32, Info CSI 00000089 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:32, Info CSI 0000008a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:36, Info CSI 0000008c [SR] Verify complete 2017-10-09 09:31:37, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:37, Info CSI 0000008e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:38, Info CSI 00000090 [SR] Verify complete 2017-10-09 09:31:39, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:39, Info CSI 00000092 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:41, Info CSI 00000094 [SR] Verify complete 2017-10-09 09:31:42, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:42, Info CSI 00000096 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:45, Info CSI 00000098 [SR] Verify complete 2017-10-09 09:31:46, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:46, Info CSI 0000009a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:47, Info CSI 0000009c [SR] Verify complete 2017-10-09 09:31:48, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:48, Info CSI 0000009e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:49, Info CSI 000000a0 [SR] Verify complete 2017-10-09 09:31:50, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:50, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:53, Info CSI 000000a4 [SR] Verify complete 2017-10-09 09:31:54, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:54, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:56, Info CSI 000000a8 [SR] Verify complete 2017-10-09 09:31:57, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:57, Info CSI 000000aa [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:58, Info CSI 000000ac [SR] Verify complete 2017-10-09 09:31:59, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:59, Info CSI 000000ae [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:01, Info CSI 000000b0 [SR] Verify complete 2017-10-09 09:32:02, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:02, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:03, Info CSI 000000b4 [SR] Verify complete 2017-10-09 09:32:04, Info CSI 000000b5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:04, Info CSI 000000b6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:06, Info CSI 000000b8 [SR] Verify complete 2017-10-09 09:32:06, Info CSI 000000b9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:06, Info CSI 000000ba [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:13, Info CSI 000000bc [SR] Verify complete 2017-10-09 09:32:13, Info CSI 000000bd [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:13, Info CSI 000000be [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:19, Info CSI 000000c0 [SR] Verify complete 2017-10-09 09:32:19, Info CSI 000000c1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:19, Info CSI 000000c2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:23, Info CSI 000000c4 [SR] Verify complete 2017-10-09 09:32:24, Info CSI 000000c5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:24, Info CSI 000000c6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:33, Info CSI 000000c8 [SR] Verify complete 2017-10-09 09:32:35, Info CSI 000000c9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:35, Info CSI 000000ca [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:50, Info CSI 000000cd [SR] Verify complete 2017-10-09 09:32:51, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:51, Info CSI 000000cf [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:58, Info CSI 000000d4 [SR] Verify complete 2017-10-09 09:32:58, Info CSI 000000d5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:58, Info CSI 000000d6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:04, Info CSI 000000d9 [SR] Verify complete 2017-10-09 09:33:04, Info CSI 000000da [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:04, Info CSI 000000db [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:10, Info CSI 000000dd [SR] Verify complete 2017-10-09 09:33:11, Info CSI 000000de [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:11, Info CSI 000000df [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:20, Info CSI 000000eb [SR] Verify complete 2017-10-09 09:33:21, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:21, Info CSI 000000ed [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:31, Info CSI 00000108 [SR] Verify complete 2017-10-09 09:33:31, Info CSI 00000109 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:31, Info CSI 0000010a [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:38, Info CSI 0000010c [SR] Verify complete 2017-10-09 09:33:38, Info CSI 0000010d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:38, Info CSI 0000010e [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:44, Info CSI 00000110 [SR] Verify complete 2017-10-09 09:33:44, Info CSI 00000111 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:44, Info CSI 00000112 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:51, Info CSI 00000114 [SR] Verify complete 2017-10-09 09:33:51, Info CSI 00000115 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:51, Info CSI 00000116 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:59, Info CSI 00000118 [SR] Verify complete 2017-10-09 09:33:59, Info CSI 00000119 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:59, Info CSI 0000011a [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:07, Info CSI 0000011c [SR] Verify complete 2017-10-09 09:34:07, Info CSI 0000011d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:07, Info CSI 0000011e [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:16, Info CSI 00000120 [SR] Verify complete 2017-10-09 09:34:16, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:16, Info CSI 00000122 [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:45, Info CSI 00000145 [SR] Verify complete 2017-10-09 09:34:45, Info CSI 00000146 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:45, Info CSI 00000147 [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:54, Info CSI 00000149 [SR] Verify complete 2017-10-09 09:34:54, Info CSI 0000014a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:54, Info CSI 0000014b [SR] Beginning Verify and Repair transaction 2017-10-09 09:35:08, Info CSI 0000014d [SR] Verify complete 2017-10-09 09:35:10, Info CSI 0000014e [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:35:10, Info CSI 0000014f [SR] Beginning Verify and Repair transaction 2017-10-09 09:35:48, Info CSI 00000153 [SR] Verify complete 2017-10-09 09:35:49, Info CSI 00000154 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:35:49, Info CSI 00000155 [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:02, Info CSI 00000157 [SR] Verify complete 2017-10-09 09:36:02, Info CSI 00000158 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:02, Info CSI 00000159 [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:07, Info CSI 0000015b [SR] Verify complete 2017-10-09 09:36:07, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:07, Info CSI 0000015d [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:18, Info CSI 0000015f [SR] Verify complete 2017-10-09 09:36:20, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:20, Info CSI 00000161 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:11, Info CSI 00000174 [SR] Verify complete 2017-10-09 09:37:11, Info CSI 00000175 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:11, Info CSI 00000176 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:16, Info CSI 00000178 [SR] Verify complete 2017-10-09 09:37:18, Info CSI 00000179 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:18, Info CSI 0000017a [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:31, Info CSI 0000017c [SR] Verify complete 2017-10-09 09:37:33, Info CSI 0000017d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:33, Info CSI 0000017e [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:37, Info CSI 00000180 [SR] Verify complete 2017-10-09 09:37:38, Info CSI 00000181 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:38, Info CSI 00000182 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:44, Info CSI 00000184 [SR] Verify complete 2017-10-09 09:37:44, Info CSI 00000185 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:44, Info CSI 00000186 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:57, Info CSI 00000189 [SR] Verify complete 2017-10-09 09:37:57, Info CSI 0000018a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:57, Info CSI 0000018b [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:07, Info CSI 0000018e [SR] Verify complete 2017-10-09 09:38:07, Info CSI 0000018f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:07, Info CSI 00000190 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:12, Info CSI 00000192 [SR] Verify complete 2017-10-09 09:38:12, Info CSI 00000193 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:12, Info CSI 00000194 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:16, Info CSI 00000196 [SR] Verify complete 2017-10-09 09:38:16, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:16, Info CSI 00000198 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:28, Info CSI 0000019a [SR] Verify complete 2017-10-09 09:38:28, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:28, Info CSI 0000019c [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:37, Info CSI 0000019e [SR] Verify complete 2017-10-09 09:38:37, Info CSI 0000019f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:37, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:52, Info CSI 000001a2 [SR] Verify complete 2017-10-09 09:38:52, Info CSI 000001a3 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:52, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:03, Info CSI 000001bc [SR] Verify complete 2017-10-09 09:39:03, Info CSI 000001bd [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:03, Info CSI 000001be [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:12, Info CSI 000001c0 [SR] Verify complete 2017-10-09 09:39:13, Info CSI 000001c1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:13, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:50, Info CSI 000001c4 [SR] Verify complete 2017-10-09 09:39:50, Info CSI 000001c5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:50, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:12, Info CSI 000001c9 [SR] Verify complete 2017-10-09 09:40:12, Info CSI 000001ca [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:12, Info CSI 000001cb [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:23, Info CSI 000001cd [SR] Verify complete 2017-10-09 09:40:23, Info CSI 000001ce [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:23, Info CSI 000001cf [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:35, Info CSI 000001d1 [SR] Verify complete 2017-10-09 09:40:36, Info CSI 000001d2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:36, Info CSI 000001d3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:54, Info CSI 000001d5 [SR] Verify complete 2017-10-09 09:40:55, Info CSI 000001d6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:55, Info CSI 000001d7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:07, Info CSI 000001d9 [SR] Verify complete 2017-10-09 09:41:08, Info CSI 000001da [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:08, Info CSI 000001db [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:19, Info CSI 000001df [SR] Verify complete 2017-10-09 09:41:19, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:19, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:32, Info CSI 000001e3 [SR] Verify complete 2017-10-09 09:41:32, Info CSI 000001e4 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:32, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:38, Info CSI 000001e8 [SR] Verify complete 2017-10-09 09:41:39, Info CSI 000001e9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:39, Info CSI 000001ea [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:46, Info CSI 000001ec [SR] Verify complete 2017-10-09 09:41:46, Info CSI 000001ed [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:46, Info CSI 000001ee [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:54, Info CSI 000001f1 [SR] Verify complete 2017-10-09 09:41:54, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:54, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:05, Info CSI 000001f6 [SR] Verify complete 2017-10-09 09:42:05, Info CSI 000001f7 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:05, Info CSI 000001f8 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:14, Info CSI 000001fa [SR] Verify complete 2017-10-09 09:42:14, Info CSI 000001fb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:14, Info CSI 000001fc [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:21, Info CSI 000001fe [SR] Verify complete 2017-10-09 09:42:21, Info CSI 000001ff [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:21, Info CSI 00000200 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:27, Info CSI 00000202 [SR] Verify complete 2017-10-09 09:42:27, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:27, Info CSI 00000204 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:34, Info CSI 00000207 [SR] Verify complete 2017-10-09 09:42:34, Info CSI 00000208 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:34, Info CSI 00000209 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:41, Info CSI 0000020b [SR] Verify complete 2017-10-09 09:42:41, Info CSI 0000020c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:41, Info CSI 0000020d [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:45, Info CSI 00000210 [SR] Verify complete 2017-10-09 09:42:46, Info CSI 00000211 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:46, Info CSI 00000212 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:52, Info CSI 00000215 [SR] Verify complete 2017-10-09 09:42:52, Info CSI 00000216 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:52, Info CSI 00000217 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:58, Info CSI 00000219 [SR] Verify complete 2017-10-09 09:42:59, Info CSI 0000021a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:59, Info CSI 0000021b [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:05, Info CSI 0000021f [SR] Verify complete 2017-10-09 09:43:06, Info CSI 00000220 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:06, Info CSI 00000221 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:14, Info CSI 00000223 [SR] Verify complete 2017-10-09 09:43:14, Info CSI 00000224 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:14, Info CSI 00000225 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:27, Info CSI 00000228 [SR] Verify complete 2017-10-09 09:43:27, Info CSI 00000229 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:27, Info CSI 0000022a [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:36, Info CSI 0000022c [SR] Verify complete 2017-10-09 09:43:37, Info CSI 0000022d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:37, Info CSI 0000022e [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:43, Info CSI 00000230 [SR] Verify complete 2017-10-09 09:43:44, Info CSI 00000231 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:44, Info CSI 00000232 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:49, Info CSI 00000234 [SR] Verify complete 2017-10-09 09:43:49, Info CSI 00000235 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:49, Info CSI 00000236 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:55, Info CSI 00000238 [SR] Verify complete 2017-10-09 09:43:56, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:56, Info CSI 0000023a [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:03, Info CSI 0000023c [SR] Verify complete 2017-10-09 09:44:04, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:04, Info CSI 0000023e [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:13, Info CSI 00000240 [SR] Verify complete 2017-10-09 09:44:14, Info CSI 00000241 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:14, Info CSI 00000242 [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:18, Info CSI 00000244 [SR] Verify complete 2017-10-09 09:44:19, Info CSI 00000245 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:19, Info CSI 00000246 [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:27, Info CSI 00000248 [SR] Verify complete 2017-10-09 09:44:27, Info CSI 00000249 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:27, Info CSI 0000024a [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:54, Info CSI 0000024c [SR] Verify complete 2017-10-09 09:44:54, Info CSI 0000024d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:54, Info CSI 0000024e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:17, Info CSI 00000250 [SR] Verify complete 2017-10-09 09:45:17, Info CSI 00000251 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:17, Info CSI 00000252 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:25, Info CSI 00000254 [SR] Verify complete 2017-10-09 09:45:26, Info CSI 00000255 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:26, Info CSI 00000256 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:30, Info CSI 00000258 [SR] Verify complete 2017-10-09 09:45:30, Info CSI 00000259 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:30, Info CSI 0000025a [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:35, Info CSI 0000025c [SR] Verify complete 2017-10-09 09:45:35, Info CSI 0000025d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:35, Info CSI 0000025e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:40, Info CSI 00000260 [SR] Verify complete 2017-10-09 09:45:40, Info CSI 00000261 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:40, Info CSI 00000262 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:48, Info CSI 00000264 [SR] Verify complete 2017-10-09 09:45:49, Info CSI 00000265 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:49, Info CSI 00000266 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:50, Info CSI 00000268 [SR] Verify complete 2017-10-09 09:45:50, Info CSI 00000269 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:50, Info CSI 0000026a [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:51, Info CSI 0000026c [SR] Verify complete 2017-10-09 09:45:52, Info CSI 0000026d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:52, Info CSI 0000026e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:59, Info CSI 00000276 [SR] Verify complete 2017-10-09 09:46:00, Info CSI 00000277 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:00, Info CSI 00000278 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:07, Info CSI 0000027a [SR] Verify complete 2017-10-09 09:46:07, Info CSI 0000027b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:07, Info CSI 0000027c [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:14, Info CSI 0000027e [SR] Verify complete 2017-10-09 09:46:15, Info CSI 0000027f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:15, Info CSI 00000280 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:22, Info CSI 00000282 [SR] Verify complete 2017-10-09 09:46:23, Info CSI 00000283 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:23, Info CSI 00000284 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:31, Info CSI 00000286 [SR] Verify complete 2017-10-09 09:46:32, Info CSI 00000287 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:32, Info CSI 00000288 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:41, Info CSI 0000028b [SR] Verify complete 2017-10-09 09:46:42, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:42, Info CSI 0000028d [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:48, Info CSI 0000028f [SR] Verify complete 2017-10-09 09:46:49, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:49, Info CSI 00000291 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:53, Info CSI 00000293 [SR] Verify complete 2017-10-09 09:46:54, Info CSI 00000294 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:54, Info CSI 00000295 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:03, Info CSI 00000298 [SR] Verify complete 2017-10-09 09:47:03, Info CSI 00000299 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:03, Info CSI 0000029a [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:19, Info CSI 0000029e [SR] Verify complete 2017-10-09 09:47:19, Info CSI 0000029f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:19, Info CSI 000002a0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:31, Info CSI 000002a5 [SR] Verify complete 2017-10-09 09:47:32, Info CSI 000002a6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:32, Info CSI 000002a7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:41, Info CSI 000002ad [SR] Verify complete 2017-10-09 09:47:41, Info CSI 000002ae [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:41, Info CSI 000002af [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:52, Info CSI 000002ba [SR] Verify complete 2017-10-09 09:47:52, Info CSI 000002bb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:52, Info CSI 000002bc [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:01, Info CSI 000002c1 [SR] Verify complete 2017-10-09 09:48:01, Info CSI 000002c2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:01, Info CSI 000002c3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:09, Info CSI 000002c5 [SR] Verify complete 2017-10-09 09:48:09, Info CSI 000002c6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:09, Info CSI 000002c7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:15, Info CSI 000002cb [SR] Verify complete 2017-10-09 09:48:15, Info CSI 000002cc [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:15, Info CSI 000002cd [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:22, Info CSI 000002de [SR] Verify complete 2017-10-09 09:48:23, Info CSI 000002df [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:23, Info CSI 000002e0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:31, Info CSI 000002f6 [SR] Verify complete 2017-10-09 09:48:31, Info CSI 000002f7 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:31, Info CSI 000002f8 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:38, Info CSI 000002fa [SR] Verify complete 2017-10-09 09:48:39, Info CSI 000002fb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:39, Info CSI 000002fc [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:47, Info CSI 000002fe [SR] Verify complete 2017-10-09 09:48:47, Info CSI 000002ff [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:47, Info CSI 00000300 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:53, Info CSI 00000302 [SR] Verify complete 2017-10-09 09:48:53, Info CSI 00000303 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:53, Info CSI 00000304 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:59, Info CSI 00000312 [SR] Verify complete 2017-10-09 09:48:59, Info CSI 00000313 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:59, Info CSI 00000314 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:15, Info CSI 00000316 [SR] Verify complete 2017-10-09 09:49:15, Info CSI 00000317 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:15, Info CSI 00000318 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:22, Info CSI 00000326 [SR] Verify complete 2017-10-09 09:49:22, Info CSI 00000327 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:22, Info CSI 00000328 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:25, Info CSI 0000032a [SR] Verify complete 2017-10-09 09:49:26, Info CSI 0000032b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:26, Info CSI 0000032c [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:31, Info CSI 0000032e [SR] Verify complete 2017-10-09 09:49:32, Info CSI 0000032f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:32, Info CSI 00000330 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:39, Info CSI 00000333 [SR] Verify complete 2017-10-09 09:49:39, Info CSI 00000334 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:39, Info CSI 00000335 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:42, Info CSI 00000337 [SR] Verify complete 2017-10-09 09:49:42, Info CSI 00000338 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:42, Info CSI 00000339 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:51, Info CSI 0000033b [SR] Verify complete 2017-10-09 09:49:51, Info CSI 0000033c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:51, Info CSI 0000033d [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:59, Info CSI 0000033f [SR] Verify complete 2017-10-09 09:49:59, Info CSI 00000340 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:59, Info CSI 00000341 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:08, Info CSI 00000343 [SR] Verify complete 2017-10-09 09:50:08, Info CSI 00000344 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:08, Info CSI 00000345 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:16, Info CSI 0000035f [SR] Verify complete 2017-10-09 09:50:16, Info CSI 00000360 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:16, Info CSI 00000361 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:36, Info CSI 00000363 [SR] Verify complete 2017-10-09 09:50:37, Info CSI 00000364 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:37, Info CSI 00000365 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:42, Info CSI 00000367 [SR] Verify complete 2017-10-09 09:50:43, Info CSI 00000368 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:43, Info CSI 00000369 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:49, Info CSI 0000036b [SR] Verify complete 2017-10-09 09:50:49, Info CSI 0000036c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:49, Info CSI 0000036d [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:54, Info CSI 00000371 [SR] Verify complete 2017-10-09 09:50:54, Info CSI 00000372 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:54, Info CSI 00000373 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:00, Info CSI 00000375 [SR] Verify complete 2017-10-09 09:51:00, Info CSI 00000376 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:00, Info CSI 00000377 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:11, Info CSI 00000379 [SR] Verify complete 2017-10-09 09:51:11, Info CSI 0000037a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:11, Info CSI 0000037b [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:18, Info CSI 0000037d [SR] Verify complete 2017-10-09 09:51:19, Info CSI 0000037e [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:19, Info CSI 0000037f [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:25, Info CSI 00000382 [SR] Verify complete 2017-10-09 09:51:25, Info CSI 00000383 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:25, Info CSI 00000384 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:31, Info CSI 00000386 [SR] Verify complete 2017-10-09 09:51:31, Info CSI 00000387 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:31, Info CSI 00000388 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:39, Info CSI 0000038a [SR] Verify complete 2017-10-09 09:51:39, Info CSI 0000038b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:39, Info CSI 0000038c [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:47, Info CSI 0000038e [SR] Verify complete 2017-10-09 09:51:48, Info CSI 0000038f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:48, Info CSI 00000390 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:56, Info CSI 00000393 [SR] Verify complete 2017-10-09 09:51:56, Info CSI 00000394 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:56, Info CSI 00000395 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:02, Info CSI 00000397 [SR] Verify complete 2017-10-09 09:52:03, Info CSI 00000398 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:52:03, Info CSI 00000399 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:10, Info CSI 0000039b [SR] Verify complete 2017-10-09 09:52:11, Info CSI 0000039c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:52:11, Info CSI 0000039d [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:18, Info CSI 0000039f [SR] Verify complete 2017-10-09 09:52:19, Info CSI 000003a0 [SR] Verifying 90 (0x000000000000005a) components 2017-10-09 09:52:19, Info CSI 000003a1 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:24, Info CSI 000003a3 [SR] Verify complete 2017-10-09 09:52:24, Info CSI 000003a4 [SR] Repairing 0 components 2017-10-09 09:52:24, Info CSI 000003a5 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:24, Info CSI 000003a7 [SR] Repair complete ---------------------------------------------------------------------------- CrystalDiskInfo 7.1.1 (C) 2008-2016 hiyohiyo Crystal Dew World : http://crystalmark.info/ ---------------------------------------------------------------------------- OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64) Date : 2017/10/09 10:21:24 -- Controller Map ---------------------------------------------------------- + ATA Channel 0 (0) [ATA] - WDC WD5000AAKX-001CA0 ATA Device - ATA Channel 1 (1) [ATA] + Controller standard PCI IDE [ATA] + ATA Channel 0 (0) - Optiarc DVD RW AD-5280S ATA Device - ATA Channel 1 (1) + Controller standard PCI IDE [ATA] - ATA Channel 0 (0) - ATA Channel 1 (1) -- Disk List --------------------------------------------------------------- (1) WDC WD5000AAKX-001CA0 : 500.1 GB [0/0/0, pd1] - wd ---------------------------------------------------------------------------- (1) WDC WD5000AAKX-001CA0 ---------------------------------------------------------------------------- Model : WDC WD5000AAKX-001CA0 Firmware : 15.01H15 Serial Number : WD-WMAYUJ331702 Disk Size : 500.1 GB (8.4/137.4/500.1/500.1) Buffer Size : 16384 KB Queue Depth : 32 # of Sectors : 976773168 Rotation Rate : Sconosciuto Interface : Serial ATA Major Version : ATA8-ACS Minor Version : ---- Transfer Mode : SATA/600 | SATA/600 Power On Hours : 27849 ore Power On Count : 2117 volte Temperature : 34 C (93 F) Health Status : A rischio Features : S.M.A.R.T., 48bit LBA, NCQ APM Level : ---- AAM Level : ---- Drive Letter : C: D: -- S.M.A.R.T. -------------------------------------------------------------- ID Cur Wor Thr RawValues(6) Attribute Name 01 200 200 _51 000000000046 Errori lettura 03 144 140 _21 000000000ECF Tempo avvio motore 04 _98 _98 __0 000000000851 Avvia/ferma conteggio 05 200 200 140 000000000000 Settori riallocati 07 100 253 __0 000000000000 Errori seek 09 _62 _62 __0 000000006CC9 Acceso da (ore) 0A 100 100 __0 000000000000 Riavviammenti motore 0B 100 100 __0 000000000000 Tentativi ricalibrazione 0C _98 _98 __0 000000000845 Cicli ON/OFF dispositivo C0 200 200 __0 000000000074 Rientri allo spegnimento C1 200 200 __0 0000000007DC Cicli load/unload C2 109 102 __0 000000000022 Temperatura C4 200 200 __0 000000000000 Eventi riallocazione C5 200 200 __0 000000000003 Settori scrittura pendente C6 200 200 __0 000000000000 Settori non corregibili C7 200 200 __0 000000000000 Errori CRC UltraDMA C8 200 200 __0 000000000001 Errori scrittura -- IDENTIFY_DEVICE --------------------------------------------------------- 0 1 2 3 4 5 6 7 8 9 000: 427A 3FFF C837 0010 0000 0000 003F 0000 0000 0000 010: 2020 2020 2057 442D 574D 4159 554A 3333 3137 3032 020: 0000 8000 0032 3135 2E30 3148 3135 5744 4320 5744 030: 3530 3030 4141 4B58 2D30 3031 4341 3020 2020 2020 040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00 050: 4001 0000 0000 0007 3FFF 0010 003F FC10 00FB 0110 060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000 070: 0000 0000 0000 0000 0000 001F 170E 0006 0044 0040 080: 01FE 0000 746B 7D61 4123 7469 BC41 4123 407F 002A 090: 002A 0000 FFFE 0000 0000 0000 0000 0000 0000 0000 100: 6030 3A38 0000 0000 0000 0000 0000 0000 5001 4EE6 110: 5787 212D 0000 0000 0000 0000 0000 0000 0000 4018 120: 4018 0000 0000 0000 0000 0000 0000 0000 0029 0000 130: 0000 0000 0000 16FE 0125 0000 0000 0000 0000 0000 140: 0000 0000 0004 0000 0000 0000 0000 0000 0000 0000 150: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 200: 0000 0000 0000 0000 0000 0000 3037 0000 0000 0000 210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 220: 0000 0000 103E 0000 0000 0000 0000 0000 0000 0000 230: 0000 0000 0000 0000 0001 1000 0000 0000 0000 0000 240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 250: 0000 0000 0000 0000 0000 86A5 -- SMART_READ_DATA --------------------------------------------------------- +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F 000: 10 00 01 2F 00 C8 C8 46 00 00 00 00 00 00 03 27 010: 00 90 8C CF 0E 00 00 00 00 00 04 32 00 62 62 51 020: 08 00 00 00 00 00 05 33 00 C8 C8 00 00 00 00 00 030: 00 00 07 2E 00 64 FD 00 00 00 00 00 00 00 09 32 040: 00 3E 3E C9 6C 00 00 00 00 00 0A 32 00 64 64 00 050: 00 00 00 00 00 00 0B 32 00 64 64 00 00 00 00 00 060: 00 00 0C 32 00 62 62 45 08 00 00 00 00 00 C0 32 070: 00 C8 C8 74 00 00 00 00 00 00 C1 32 00 C8 C8 DC 080: 07 00 00 00 00 00 C2 22 00 6D 66 22 00 00 00 00 090: 00 00 C4 32 00 C8 C8 00 00 00 00 00 00 00 C5 32 0A0: 00 C8 C8 03 00 00 00 00 00 00 C6 30 00 C8 C8 00 0B0: 00 00 00 00 00 00 C7 32 00 C8 C8 00 00 00 00 00 0C0: 00 00 C8 08 00 C8 C8 01 00 00 00 00 00 00 00 00 0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 160: 00 00 00 00 00 00 00 00 00 00 82 00 D0 20 01 7B 170: 03 00 01 00 02 55 05 00 00 00 00 00 00 00 00 00 180: 00 00 01 02 00 00 00 00 00 00 00 00 00 00 00 00 190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 CC -- SMART_READ_THRESHOLD ---------------------------------------------------- +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F 000: 10 00 01 33 C8 C8 00 00 00 00 00 00 00 00 03 15 010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 020: 00 00 00 00 00 00 05 8C 00 00 00 00 00 00 00 00 030: 00 00 07 00 64 64 00 00 00 00 00 00 00 00 09 00 040: 00 00 00 00 00 00 00 00 00 00 0A 00 00 00 00 00 050: 00 00 00 00 00 00 0B 00 00 00 00 00 00 00 00 00 060: 00 00 0C 00 00 00 00 00 00 00 00 00 00 00 C0 00 070: 00 00 00 00 00 00 00 00 00 00 C1 00 00 00 00 00 080: 00 00 00 00 00 00 C2 00 00 00 00 00 00 00 00 00 090: 00 00 C4 00 00 00 00 00 00 00 00 00 00 00 C5 00 0A0: 00 00 00 00 00 00 00 00 00 00 C6 00 00 00 00 00 0B0: 00 00 00 00 00 00 C7 00 00 00 00 00 00 00 00 00 0C0: 00 00 C8 00 C8 C8 00 00 00 00 00 00 00 00 00 00 0D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 D5 Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017 Ran by Gigi (administrator) on GIGI-PC (09-10-2017 10:28:35) Running from C:\Users\Gigi\Desktop Loaded Profiles: Gigi (Available Profiles: Gigi) Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] () HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries) HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) FireFox: ======== FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] () FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation) Chrome: ======= CHR DefaultProfile: Profile 2 CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-09] CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28] CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29] CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29] CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29] CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12] CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28] CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15] CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30] CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29] CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22] CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-09-14] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-10-02] (Avira Operations GmbH & Co. KG) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761608 2017-09-08] (Microsoft Corporation) R2 CTERA Agent service; C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe [5535296 2017-07-30] () S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-04-07] (Freemake) [File not signed] S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes) R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848704 2011-08-03] (Autodesk, Inc.) R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.) R2 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [18432 2013-12-18] (Clarus, Inc.) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-20] (Avira Operations GmbH & Co. KG) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [194912 2017-09-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [151128 2017-09-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-03] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-03] (Avira Operations GmbH & Co. KG) S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-29] (Disc Soft Ltd) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-07] () R2 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-07] (Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-10-09] (Malwarebytes) R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-10-09] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-10-09] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-10-09] (Malwarebytes) R3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] () R3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] () S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.) S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2009-02-13] (Western Digital Technologies) [File not signed] S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Duntlw; System32\Drivers\DuntlwNT.sys [X] S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-09 10:28 - 2017-10-09 10:30 - 000021739 _____ C:\Users\Gigi\Desktop\FRST.txt 2017-10-09 10:19 - 2017-10-09 10:20 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo 2017-10-09 10:19 - 2017-10-09 10:19 - 000001200 _____ C:\Users\Gigi\Desktop\CrystalDiskInfo.lnk 2017-10-09 10:19 - 2017-10-09 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo 2017-10-09 10:12 - 2017-10-09 10:12 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\CrystalDiskInfo7_1_1 (1).exe 2017-10-09 10:11 - 2017-10-09 10:11 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\35415e15-f7e5-46ac-bd13-5c6e64038ab3.tmp 2017-10-09 09:53 - 2017-10-09 10:21 - 000058459 _____ C:\Users\Gigi\Desktop\sfcdetails.txt 2017-10-07 12:52 - 2017-10-09 10:17 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-10-07 12:52 - 2017-10-09 10:02 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2017-10-07 12:52 - 2017-10-07 12:52 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2017-10-07 11:30 - 2017-10-07 11:31 - 000000000 ____D C:\Users\Gigi\AppData\Local\Adobe 2017-10-07 11:30 - 2017-10-07 11:30 - 000475446 _____ C:\Users\Gigi\Desktop\giant-bicycles-bike-411.pdf 2017-10-07 11:10 - 2017-10-09 10:28 - 000000000 ____D C:\FRST 2017-10-07 10:42 - 2017-10-07 10:45 - 000000000 ____D C:\AdwCleaner 2017-10-07 10:39 - 2017-10-07 10:39 - 002400768 _____ (Farbar) C:\Users\Gigi\Desktop\FRST64.exe 2017-10-07 10:39 - 2017-10-07 10:39 - 000000000 ____D C:\Users\Gigi\AppData\Local\2BrightSparks 2017-10-07 10:36 - 2017-10-07 10:36 - 001790024 _____ (Malwarebytes) C:\Users\Gigi\Desktop\JRT.exe 2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp 2017-10-07 09:52 - 2017-10-09 10:03 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-10-07 09:52 - 2017-10-09 10:03 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt 2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe 2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe 2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe 2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox 2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt 2017-10-06 12:39 - 2017-10-07 10:37 - 000000000 ____D C:\Users\Gigi\Desktop\Nuova cartella 2017-10-04 17:13 - 2017-10-06 12:56 - 000000000 ____D C:\Users\Gigi\Desktop\cell antonio 2017-10-04 15:12 - 2017-10-04 15:16 - 000000048 _____ C:\Users\Gigi\Desktop\Nuovo documento di testo.txt 2017-10-04 10:52 - 2017-10-04 10:52 - 000008600 _____ C:\Users\Gigi\Desktop\Document.pdf 2017-10-04 09:29 - 2017-10-04 09:29 - 000000000 ____D C:\Users\Gigi\Desktop\temp cell p8 lite 2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt 2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT 2017-10-02 11:56 - 2017-10-09 10:28 - 000000000 ____D C:\Users\Gigi\Desktop\log 2017-10-02 08:48 - 2017-10-02 08:48 - 000001027 _____ C:\Users\Public\Desktop\MozBackup.lnk 2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup 2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\Program Files (x86)\MozBackup 2017-10-02 08:40 - 2017-10-02 08:43 - 001035926 _____ C:\Users\Gigi\Downloads\MozBackup-1.5.1-EN.exe 2017-10-02 08:35 - 2017-10-07 12:52 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-10-02 08:35 - 2017-10-02 08:35 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\Program Files\Malwarebytes 2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET 2017-09-18 19:39 - 2017-09-18 19:39 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive for PC is now Backup and Sync from Google.lnk 2017-09-18 19:39 - 2017-09-18 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google 2017-09-18 15:05 - 2017-09-18 15:07 - 000000000 ____D C:\Users\Gigi\Downloads\eni 2017-09-18 13:01 - 2017-09-18 13:01 - 000008579 _____ C:\Users\Gigi\Downloads\Document.pdf 2017-09-14 17:19 - 2017-09-14 17:19 - 000288067 _____ C:\Users\Gigi\Downloads\fattura-M177400469.pdf 2017-09-13 15:37 - 2017-09-13 15:37 - 000325621 _____ C:\Users\Gigi\Downloads\gcontactsync-2.0.12-sm+tb.xpi 2017-09-12 21:49 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2017-09-12 21:49 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2017-09-12 21:49 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2017-09-12 21:49 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2017-09-12 21:49 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-09-12 21:49 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-09-12 21:49 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-09-12 21:49 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-09-12 21:49 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-09-12 21:49 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-09-12 21:49 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-09-12 21:49 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-09-12 21:49 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll 2017-09-12 21:49 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll 2017-09-12 21:49 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe 2017-09-12 21:49 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe 2017-09-12 21:49 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-09-12 21:49 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-09-12 21:49 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-09-12 21:49 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-09-12 21:49 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-09-12 21:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-09-12 21:49 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-09-12 21:49 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-09-12 21:49 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-09-12 21:49 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-09-12 21:49 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-09-12 21:49 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-09-12 21:49 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-09-12 21:49 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-09-12 21:49 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-09-12 21:49 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-09-12 21:49 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-09-12 21:49 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-09-12 21:49 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-09-12 21:49 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-09-12 21:49 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-09-12 21:49 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-09-12 21:49 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-09-12 21:49 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-09-12 21:49 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-09-12 21:49 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-09-12 21:49 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-09-12 21:49 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-09-12 21:49 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-09-12 21:49 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-09-12 21:49 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-09-12 21:49 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-09-12 21:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-09-12 21:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-09-12 21:49 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-09-12 21:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-09-12 21:49 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-09-12 21:49 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-09-12 21:49 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-09-12 21:49 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-09-12 21:49 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-09-12 21:49 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-09-12 21:49 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-09-12 21:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-09-12 21:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-09-12 21:49 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-09-12 21:49 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-09-12 21:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-09-12 21:49 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-09-12 21:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-09-12 21:49 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-09-12 21:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-09-12 21:49 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-09-12 21:49 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-09-12 21:49 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-09-12 21:49 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-09-12 21:49 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-09-12 21:49 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-09-12 21:49 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-09-12 21:49 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-09-12 21:49 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe 2017-09-12 21:49 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe 2017-09-12 21:49 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe 2017-09-12 21:49 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2017-09-12 21:49 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe 2017-09-12 21:49 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-09-12 21:49 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-09-12 21:49 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-09-12 21:49 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-09-12 21:49 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-09-12 21:49 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2017-09-12 21:49 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-09-12 21:49 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll 2017-09-12 21:49 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2017-09-12 21:49 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-09-12 21:49 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-09-12 21:49 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-09-12 21:49 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-09-12 21:49 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-09-12 21:49 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys 2017-09-12 21:49 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-09-12 21:49 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-09-12 21:49 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-09-12 21:49 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-09-12 21:49 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-09-12 16:22 - 2017-09-12 16:35 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\AirDroid 2017-09-12 11:21 - 2017-10-03 08:11 - 000003122 _____ C:\Windows\System32\Tasks\Avira SystrayStartTrigger ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-09 10:29 - 2014-12-04 17:24 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job 2017-10-09 10:23 - 2017-01-20 16:38 - 000000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps 2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-10-09 10:23 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2017-10-09 10:19 - 2015-08-17 16:05 - 000000000 ____D C:\ProgramData\Skype 2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieUserList 2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieSiteList 2017-10-09 10:05 - 2016-02-26 16:06 - 000000000 ____D C:\Users\Gigi\Documents\File di Outlook 2017-10-09 10:01 - 2017-03-21 18:39 - 000001695 _____ C:\Users\Gigi\Desktop\Cloud Drive.lnk 2017-10-09 09:59 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-10-09 09:28 - 2017-04-06 16:39 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Mozilla 2017-10-09 08:58 - 2017-06-20 08:20 - 000000432 _____ C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job 2017-10-08 16:29 - 2014-12-04 17:24 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job 2017-10-07 11:31 - 2015-01-27 09:19 - 003715584 ___SH C:\Users\Gigi\Desktop\Thumbs.db 2017-10-07 11:22 - 2016-02-22 09:40 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\Telegram Desktop 2017-10-07 11:14 - 2016-09-15 09:30 - 000000000 ____D C:\Users\Gigi\Downloads\Telegram Desktop 2017-10-07 10:25 - 2014-09-02 11:16 - 000000000 ____D C:\Users\Gigi\AppData\Local\Autodesk 2017-10-06 17:45 - 2014-08-29 08:43 - 000000000 ____D C:\Program Files (x86)\Danea Easyfatt 2017-10-06 13:03 - 2009-07-14 04:34 - 000000215 _____ C:\Windows\system.ini 2017-10-06 12:58 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\Downloaded Program Files 2017-10-04 16:01 - 2016-05-13 08:31 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\WhatsApp 2017-10-03 12:15 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\system32\FxsTmp 2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Package Cache 2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-10-02 16:57 - 2014-09-02 11:21 - 000000000 ____D C:\Users\Gigi\Documents\Inventor 2017-10-02 12:24 - 2017-04-13 09:18 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Temp 2017-10-02 10:32 - 2010-11-21 17:30 - 000743956 _____ C:\Windows\system32\perfh010.dat 2017-10-02 10:32 - 2010-11-21 17:30 - 000148130 _____ C:\Windows\system32\perfc010.dat 2017-10-02 10:32 - 2009-07-14 07:13 - 001667988 _____ C:\Windows\system32\PerfStringBackup.INI 2017-10-02 08:35 - 2014-08-29 16:05 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-09-29 06:18 - 2016-11-03 14:41 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-09-29 06:14 - 2014-08-29 16:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2017-09-28 17:47 - 2014-10-03 08:16 - 000000866 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-09-27 05:41 - 2016-04-21 09:59 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-09-27 05:41 - 2016-04-21 09:59 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-09-26 16:17 - 2014-08-29 08:59 - 000000000 ____D C:\Program Files (x86)\Google 2017-09-25 07:53 - 2009-07-14 07:08 - 000032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2017-09-20 13:46 - 2017-07-18 08:25 - 000000000 ____D C:\Program Files\PDFCreator 2017-09-20 10:28 - 2016-01-29 11:42 - 000000000 ____D C:\Users\Gigi\Documents\AirDroid 2017-09-15 11:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache 2017-09-15 09:58 - 2009-07-14 06:45 - 000672504 _____ C:\Windows\system32\FNTCACHE.DAT 2017-09-15 09:51 - 2014-08-29 12:05 - 000000000 ____D C:\Windows\system32\MRT 2017-09-15 09:45 - 2014-08-29 12:05 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-09-15 09:40 - 2014-08-29 14:26 - 001641874 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-09-14 13:20 - 2014-08-29 11:56 - 000194912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2017-09-14 13:20 - 2014-08-29 11:56 - 000151128 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2017-09-13 09:34 - 2014-09-03 14:47 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-09-13 09:34 - 2014-09-03 14:47 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-09-13 09:34 - 2014-09-03 14:47 - 000004460 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\system32\Macromed 2017-09-12 16:26 - 2015-02-21 09:48 - 000000000 ____D C:\Users\Gigi\.android ==================== Files in the root of some directories ======= 2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-02-21 11:09 - 2017-02-21 11:09 - 000001673 _____ () C:\Users\Gigi\AppData\Local\recently-used.xbel 2014-10-03 15:19 - 2014-10-03 15:39 - 000007621 _____ () C:\Users\Gigi\AppData\Local\Resmon.ResmonCfg 2014-09-24 15:58 - 2014-09-24 15:58 - 000000057 _____ () C:\ProgramData\Ament.ini 2015-12-16 18:30 - 2015-12-16 18:30 - 000000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-10-02 13:18 ==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017 Ran by Gigi (09-10-2017 10:31:50) Running from C:\Users\Gigi\Desktop Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled) Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems) Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated) ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology) ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.) AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk) AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk) Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG) Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.) Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.) CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link) CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform) CrystalDiskInfo 7.1.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.1.1 - Crystal Dew World) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy)) Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook) DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp) Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft) eMule (HKLM-x32\...\eMule) (Version: - ) erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.) FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG) Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk) Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation) HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard) HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk) IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk) iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft) Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes) Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla) Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation) Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH) Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek) Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.) Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba) Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks) Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk) Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk) Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk) VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp) Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation) WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft) WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft) WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.) ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation) ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.) Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd) Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation) Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated) Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.) Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] () Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated) Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" ==================== Loaded Modules (Whitelisted) ============== 2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll 2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe 2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe 2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll 2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe 2017-10-02 08:35 - 2017-10-07 12:52 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2017-10-02 08:35 - 2017-10-07 12:52 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll 2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 208.67.222.222 - 208.67.220.220 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Faulty Device Manager Devices ============= Name: UNTLW WDM Device Description: UNTLW WDM Device Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d} Manufacturer: Schneider Automation Service: Duntlw Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. ==================== Event log errors: ========================= Application errors: ================== Error: (10/09/2017 10:05:32 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/09/2017 10:01:40 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (10/09/2017 04:05:23 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x264 Ora di avvio dell'applicazione che ha generato l'errore: 0x01d340a30686480e Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: 4ead81c1-ac96-11e7-959f-002522d892c1 Error: (10/09/2017 04:05:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: esu.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.IO.FileNotFoundException in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext() in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef) in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean) in Garmin.Omt.Service.Shared.Overrides..cctor() Informazioni sull'eccezione: System.TypeInitializationException in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl() in Garmin.Omt.Express.SelfUpdater.Program.RealMain() in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[]) Error: (10/09/2017 03:36:28 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2. L'elemento radice del file manifesto deve essere un assembly. Error: (10/09/2017 03:34:30 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/08/2017 04:48:06 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: FreemakeUtilsService.exe, versione: 1.0.0.0, timestamp: 0x57061917 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x78c Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f48f30a7cd3 Percorso dell'applicazione che ha generato l'errore: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: 1bec8fb9-abd3-11e7-959f-002522d892c1 Error: (10/08/2017 04:48:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: FreemakeUtilsService.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.ArgumentException in System.Security.Principal.SecurityIdentifier..ctor(System.String) in FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary() in FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo) in FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck() in FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs) in FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs) in System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs) in System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object) in System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) in System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) in System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) in System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() in System.Threading.ThreadPoolWorkQueue.Dispatch() in System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() Error: (10/08/2017 03:42:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x1008 Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33fd6b3ac9ed5 Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: f7c39f31-abc9-11e7-959f-002522d892c1 Error: (10/08/2017 03:42:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: esu.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.IO.FileNotFoundException in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext() in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef) in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean) in Garmin.Omt.Service.Shared.Overrides..cctor() Informazioni sull'eccezione: System.TypeInitializationException in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl() in Garmin.Omt.Express.SelfUpdater.Program.RealMain() in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[]) System errors: ============= Error: (10/09/2017 10:05:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della risposta alla transazione dal servizio ShellHWDetection. Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio Garmin Device Interaction Service non è stato avviato per il seguente errore: Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto. Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Garmin Device Interaction Service. Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio Freemake Improver non è stato avviato per il seguente errore: Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto. Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Freemake Improver. Error: (10/08/2017 04:48:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Arresto imprevista del servizio Freemake Improver. Questo evento si è già verificato 1 volta(e). Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. CodeIntegrity: =================================== Date: 2017-10-06 12:58:44.248 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. Date: 2017-10-06 12:58:44.060 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. ==================== Memory info =========================== Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics Percentage of memory in use: 70% Total physical RAM: 2025.64 MB Available physical RAM: 593.97 MB Total Virtual: 4051.29 MB Available Virtual: 1485.25 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.87 GB) (Free:21.65 GB) NTFS Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================ |
09-10-2017, 09:35 | #6 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Ciao
dal report di frst risultano 2gb di ram.. Total physical RAM: 2025.64 MB Controlla quanta ram ti vede il pc.. prova a fare start-->tasto dx sopra computer-->proprieta Quanti banchi di ram hai??? se hai 4gb o ti si è bruciato un banco o il controller non lo vede piu... Fai delle prove stacca un banco e avvia il pc... Se funziona quello è buono... poi stacca quello quono e prova con l altro e vedi come va... prova a invertire anche gli slot della ram prima in un modo poi viceversa... |
09-10-2017, 09:45 | #7 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
mi dice memoria installata 4 utilizzabile 2
|
09-10-2017, 10:12 | #8 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Prima di staccare le ram fisicamente come detto sopra prova come cè scritto sotto:
Prima di tutto prova a fare cosi: start > digita "msconfig" nel box di ricerca > Opzioni di avvio > Opzioni avanzate > nella finestra che comparirà se è spuntata la voce "Memoria Max" in alto a destra, deselezionala , dai OK e riavvia.. Verifica da bios quanta ram ti vede... Hai per caso un scheda grafica integrata e non una dedicata?? vedi qui https://www.ilsoftware.it/articoli.a...-Windows_14102 Fai anche quelle prove di staccare la ram banco per banco e provare.... fai sapere... Ultima modifica di Dan1979 : 09-10-2017 alle 11:00. |
09-10-2017, 10:56 | #9 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
ok risolto problema della memoria ho spostato i due banchi di memoria in altri slot liberi
|
09-10-2017, 11:45 | #10 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Ok perfetto...
Il pc si è velocizzato un po?? Comunque esegui i vari passaggi che ti ho detto... Ricordati di postare i log frst.txt e addition.txt.. |
09-10-2017, 11:57 | #11 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
pc velocizzato un pò
2017-10-09 09:30:03, Info CSI 00000009 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:03, Info CSI 0000000a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:05, Info CSI 0000000c [SR] Verify complete 2017-10-09 09:30:06, Info CSI 0000000d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:06, Info CSI 0000000e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:07, Info CSI 00000010 [SR] Verify complete 2017-10-09 09:30:09, Info CSI 00000011 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:09, Info CSI 00000012 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:10, Info CSI 00000014 [SR] Verify complete 2017-10-09 09:30:12, Info CSI 00000015 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:12, Info CSI 00000016 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:14, Info CSI 00000018 [SR] Verify complete 2017-10-09 09:30:15, Info CSI 00000019 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:15, Info CSI 0000001a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:16, Info CSI 0000001c [SR] Verify complete 2017-10-09 09:30:18, Info CSI 0000001d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:18, Info CSI 0000001e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:19, Info CSI 00000020 [SR] Verify complete 2017-10-09 09:30:20, Info CSI 00000021 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:20, Info CSI 00000022 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:22, Info CSI 00000024 [SR] Verify complete 2017-10-09 09:30:23, Info CSI 00000025 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:23, Info CSI 00000026 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:24, Info CSI 00000028 [SR] Verify complete 2017-10-09 09:30:26, Info CSI 00000029 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:26, Info CSI 0000002a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:27, Info CSI 0000002c [SR] Verify complete 2017-10-09 09:30:28, Info CSI 0000002d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:28, Info CSI 0000002e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:30, Info CSI 00000030 [SR] Verify complete 2017-10-09 09:30:31, Info CSI 00000031 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:31, Info CSI 00000032 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:32, Info CSI 00000034 [SR] Verify complete 2017-10-09 09:30:33, Info CSI 00000035 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:33, Info CSI 00000036 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:35, Info CSI 00000038 [SR] Verify complete 2017-10-09 09:30:36, Info CSI 00000039 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:36, Info CSI 0000003a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:37, Info CSI 0000003c [SR] Verify complete 2017-10-09 09:30:39, Info CSI 0000003d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:39, Info CSI 0000003e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:40, Info CSI 00000040 [SR] Verify complete 2017-10-09 09:30:41, Info CSI 00000041 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:41, Info CSI 00000042 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:42, Info CSI 00000044 [SR] Verify complete 2017-10-09 09:30:44, Info CSI 00000045 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:44, Info CSI 00000046 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:45, Info CSI 00000048 [SR] Verify complete 2017-10-09 09:30:46, Info CSI 00000049 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:46, Info CSI 0000004a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:47, Info CSI 0000004c [SR] Verify complete 2017-10-09 09:30:49, Info CSI 0000004d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:49, Info CSI 0000004e [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:50, Info CSI 00000050 [SR] Verify complete 2017-10-09 09:30:51, Info CSI 00000051 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:51, Info CSI 00000052 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:53, Info CSI 00000054 [SR] Verify complete 2017-10-09 09:30:54, Info CSI 00000055 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:54, Info CSI 00000056 [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:55, Info CSI 00000058 [SR] Verify complete 2017-10-09 09:30:57, Info CSI 00000059 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:57, Info CSI 0000005a [SR] Beginning Verify and Repair transaction 2017-10-09 09:30:58, Info CSI 0000005c [SR] Verify complete 2017-10-09 09:30:59, Info CSI 0000005d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:30:59, Info CSI 0000005e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:01, Info CSI 00000060 [SR] Verify complete 2017-10-09 09:31:02, Info CSI 00000061 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:02, Info CSI 00000062 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:03, Info CSI 00000064 [SR] Verify complete 2017-10-09 09:31:05, Info CSI 00000065 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:05, Info CSI 00000066 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:06, Info CSI 00000068 [SR] Verify complete 2017-10-09 09:31:07, Info CSI 00000069 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:07, Info CSI 0000006a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:09, Info CSI 0000006c [SR] Verify complete 2017-10-09 09:31:10, Info CSI 0000006d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:10, Info CSI 0000006e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:11, Info CSI 00000070 [SR] Verify complete 2017-10-09 09:31:12, Info CSI 00000071 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:12, Info CSI 00000072 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:13, Info CSI 00000074 [SR] Verify complete 2017-10-09 09:31:14, Info CSI 00000075 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:14, Info CSI 00000076 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:16, Info CSI 00000078 [SR] Verify complete 2017-10-09 09:31:17, Info CSI 00000079 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:17, Info CSI 0000007a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:19, Info CSI 0000007c [SR] Verify complete 2017-10-09 09:31:20, Info CSI 0000007d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:20, Info CSI 0000007e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:26, Info CSI 00000080 [SR] Verify complete 2017-10-09 09:31:26, Info CSI 00000081 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:26, Info CSI 00000082 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:28, Info CSI 00000084 [SR] Verify complete 2017-10-09 09:31:29, Info CSI 00000085 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:29, Info CSI 00000086 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:31, Info CSI 00000088 [SR] Verify complete 2017-10-09 09:31:32, Info CSI 00000089 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:32, Info CSI 0000008a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:36, Info CSI 0000008c [SR] Verify complete 2017-10-09 09:31:37, Info CSI 0000008d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:37, Info CSI 0000008e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:38, Info CSI 00000090 [SR] Verify complete 2017-10-09 09:31:39, Info CSI 00000091 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:39, Info CSI 00000092 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:41, Info CSI 00000094 [SR] Verify complete 2017-10-09 09:31:42, Info CSI 00000095 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:42, Info CSI 00000096 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:45, Info CSI 00000098 [SR] Verify complete 2017-10-09 09:31:46, Info CSI 00000099 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:46, Info CSI 0000009a [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:47, Info CSI 0000009c [SR] Verify complete 2017-10-09 09:31:48, Info CSI 0000009d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:48, Info CSI 0000009e [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:49, Info CSI 000000a0 [SR] Verify complete 2017-10-09 09:31:50, Info CSI 000000a1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:50, Info CSI 000000a2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:53, Info CSI 000000a4 [SR] Verify complete 2017-10-09 09:31:54, Info CSI 000000a5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:54, Info CSI 000000a6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:56, Info CSI 000000a8 [SR] Verify complete 2017-10-09 09:31:57, Info CSI 000000a9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:57, Info CSI 000000aa [SR] Beginning Verify and Repair transaction 2017-10-09 09:31:58, Info CSI 000000ac [SR] Verify complete 2017-10-09 09:31:59, Info CSI 000000ad [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:31:59, Info CSI 000000ae [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:01, Info CSI 000000b0 [SR] Verify complete 2017-10-09 09:32:02, Info CSI 000000b1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:02, Info CSI 000000b2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:03, Info CSI 000000b4 [SR] Verify complete 2017-10-09 09:32:04, Info CSI 000000b5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:04, Info CSI 000000b6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:06, Info CSI 000000b8 [SR] Verify complete 2017-10-09 09:32:06, Info CSI 000000b9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:06, Info CSI 000000ba [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:13, Info CSI 000000bc [SR] Verify complete 2017-10-09 09:32:13, Info CSI 000000bd [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:13, Info CSI 000000be [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:19, Info CSI 000000c0 [SR] Verify complete 2017-10-09 09:32:19, Info CSI 000000c1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:19, Info CSI 000000c2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:23, Info CSI 000000c4 [SR] Verify complete 2017-10-09 09:32:24, Info CSI 000000c5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:24, Info CSI 000000c6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:33, Info CSI 000000c8 [SR] Verify complete 2017-10-09 09:32:35, Info CSI 000000c9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:35, Info CSI 000000ca [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:50, Info CSI 000000cd [SR] Verify complete 2017-10-09 09:32:51, Info CSI 000000ce [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:51, Info CSI 000000cf [SR] Beginning Verify and Repair transaction 2017-10-09 09:32:58, Info CSI 000000d4 [SR] Verify complete 2017-10-09 09:32:58, Info CSI 000000d5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:32:58, Info CSI 000000d6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:04, Info CSI 000000d9 [SR] Verify complete 2017-10-09 09:33:04, Info CSI 000000da [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:04, Info CSI 000000db [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:10, Info CSI 000000dd [SR] Verify complete 2017-10-09 09:33:11, Info CSI 000000de [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:11, Info CSI 000000df [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:20, Info CSI 000000eb [SR] Verify complete 2017-10-09 09:33:21, Info CSI 000000ec [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:21, Info CSI 000000ed [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:31, Info CSI 00000108 [SR] Verify complete 2017-10-09 09:33:31, Info CSI 00000109 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:31, Info CSI 0000010a [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:38, Info CSI 0000010c [SR] Verify complete 2017-10-09 09:33:38, Info CSI 0000010d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:38, Info CSI 0000010e [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:44, Info CSI 00000110 [SR] Verify complete 2017-10-09 09:33:44, Info CSI 00000111 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:44, Info CSI 00000112 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:51, Info CSI 00000114 [SR] Verify complete 2017-10-09 09:33:51, Info CSI 00000115 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:51, Info CSI 00000116 [SR] Beginning Verify and Repair transaction 2017-10-09 09:33:59, Info CSI 00000118 [SR] Verify complete 2017-10-09 09:33:59, Info CSI 00000119 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:33:59, Info CSI 0000011a [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:07, Info CSI 0000011c [SR] Verify complete 2017-10-09 09:34:07, Info CSI 0000011d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:07, Info CSI 0000011e [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:16, Info CSI 00000120 [SR] Verify complete 2017-10-09 09:34:16, Info CSI 00000121 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:16, Info CSI 00000122 [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:45, Info CSI 00000145 [SR] Verify complete 2017-10-09 09:34:45, Info CSI 00000146 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:45, Info CSI 00000147 [SR] Beginning Verify and Repair transaction 2017-10-09 09:34:54, Info CSI 00000149 [SR] Verify complete 2017-10-09 09:34:54, Info CSI 0000014a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:34:54, Info CSI 0000014b [SR] Beginning Verify and Repair transaction 2017-10-09 09:35:08, Info CSI 0000014d [SR] Verify complete 2017-10-09 09:35:10, Info CSI 0000014e [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:35:10, Info CSI 0000014f [SR] Beginning Verify and Repair transaction 2017-10-09 09:35:48, Info CSI 00000153 [SR] Verify complete 2017-10-09 09:35:49, Info CSI 00000154 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:35:49, Info CSI 00000155 [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:02, Info CSI 00000157 [SR] Verify complete 2017-10-09 09:36:02, Info CSI 00000158 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:02, Info CSI 00000159 [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:07, Info CSI 0000015b [SR] Verify complete 2017-10-09 09:36:07, Info CSI 0000015c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:07, Info CSI 0000015d [SR] Beginning Verify and Repair transaction 2017-10-09 09:36:18, Info CSI 0000015f [SR] Verify complete 2017-10-09 09:36:20, Info CSI 00000160 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:36:20, Info CSI 00000161 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:11, Info CSI 00000174 [SR] Verify complete 2017-10-09 09:37:11, Info CSI 00000175 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:11, Info CSI 00000176 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:16, Info CSI 00000178 [SR] Verify complete 2017-10-09 09:37:18, Info CSI 00000179 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:18, Info CSI 0000017a [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:31, Info CSI 0000017c [SR] Verify complete 2017-10-09 09:37:33, Info CSI 0000017d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:33, Info CSI 0000017e [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:37, Info CSI 00000180 [SR] Verify complete 2017-10-09 09:37:38, Info CSI 00000181 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:38, Info CSI 00000182 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:44, Info CSI 00000184 [SR] Verify complete 2017-10-09 09:37:44, Info CSI 00000185 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:44, Info CSI 00000186 [SR] Beginning Verify and Repair transaction 2017-10-09 09:37:57, Info CSI 00000189 [SR] Verify complete 2017-10-09 09:37:57, Info CSI 0000018a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:37:57, Info CSI 0000018b [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:07, Info CSI 0000018e [SR] Verify complete 2017-10-09 09:38:07, Info CSI 0000018f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:07, Info CSI 00000190 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:12, Info CSI 00000192 [SR] Verify complete 2017-10-09 09:38:12, Info CSI 00000193 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:12, Info CSI 00000194 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:16, Info CSI 00000196 [SR] Verify complete 2017-10-09 09:38:16, Info CSI 00000197 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:16, Info CSI 00000198 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:28, Info CSI 0000019a [SR] Verify complete 2017-10-09 09:38:28, Info CSI 0000019b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:28, Info CSI 0000019c [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:37, Info CSI 0000019e [SR] Verify complete 2017-10-09 09:38:37, Info CSI 0000019f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:37, Info CSI 000001a0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:38:52, Info CSI 000001a2 [SR] Verify complete 2017-10-09 09:38:52, Info CSI 000001a3 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:38:52, Info CSI 000001a4 [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:03, Info CSI 000001bc [SR] Verify complete 2017-10-09 09:39:03, Info CSI 000001bd [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:03, Info CSI 000001be [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:12, Info CSI 000001c0 [SR] Verify complete 2017-10-09 09:39:13, Info CSI 000001c1 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:13, Info CSI 000001c2 [SR] Beginning Verify and Repair transaction 2017-10-09 09:39:50, Info CSI 000001c4 [SR] Verify complete 2017-10-09 09:39:50, Info CSI 000001c5 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:39:50, Info CSI 000001c6 [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:12, Info CSI 000001c9 [SR] Verify complete 2017-10-09 09:40:12, Info CSI 000001ca [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:12, Info CSI 000001cb [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:23, Info CSI 000001cd [SR] Verify complete 2017-10-09 09:40:23, Info CSI 000001ce [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:23, Info CSI 000001cf [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:35, Info CSI 000001d1 [SR] Verify complete 2017-10-09 09:40:36, Info CSI 000001d2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:36, Info CSI 000001d3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:40:54, Info CSI 000001d5 [SR] Verify complete 2017-10-09 09:40:55, Info CSI 000001d6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:40:55, Info CSI 000001d7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:07, Info CSI 000001d9 [SR] Verify complete 2017-10-09 09:41:08, Info CSI 000001da [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:08, Info CSI 000001db [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:19, Info CSI 000001df [SR] Verify complete 2017-10-09 09:41:19, Info CSI 000001e0 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:19, Info CSI 000001e1 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:32, Info CSI 000001e3 [SR] Verify complete 2017-10-09 09:41:32, Info CSI 000001e4 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:32, Info CSI 000001e5 [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:38, Info CSI 000001e8 [SR] Verify complete 2017-10-09 09:41:39, Info CSI 000001e9 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:39, Info CSI 000001ea [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:46, Info CSI 000001ec [SR] Verify complete 2017-10-09 09:41:46, Info CSI 000001ed [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:46, Info CSI 000001ee [SR] Beginning Verify and Repair transaction 2017-10-09 09:41:54, Info CSI 000001f1 [SR] Verify complete 2017-10-09 09:41:54, Info CSI 000001f2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:41:54, Info CSI 000001f3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:05, Info CSI 000001f6 [SR] Verify complete 2017-10-09 09:42:05, Info CSI 000001f7 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:05, Info CSI 000001f8 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:14, Info CSI 000001fa [SR] Verify complete 2017-10-09 09:42:14, Info CSI 000001fb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:14, Info CSI 000001fc [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:21, Info CSI 000001fe [SR] Verify complete 2017-10-09 09:42:21, Info CSI 000001ff [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:21, Info CSI 00000200 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:27, Info CSI 00000202 [SR] Verify complete 2017-10-09 09:42:27, Info CSI 00000203 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:27, Info CSI 00000204 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:34, Info CSI 00000207 [SR] Verify complete 2017-10-09 09:42:34, Info CSI 00000208 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:34, Info CSI 00000209 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:41, Info CSI 0000020b [SR] Verify complete 2017-10-09 09:42:41, Info CSI 0000020c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:41, Info CSI 0000020d [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:45, Info CSI 00000210 [SR] Verify complete 2017-10-09 09:42:46, Info CSI 00000211 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:46, Info CSI 00000212 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:52, Info CSI 00000215 [SR] Verify complete 2017-10-09 09:42:52, Info CSI 00000216 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:52, Info CSI 00000217 [SR] Beginning Verify and Repair transaction 2017-10-09 09:42:58, Info CSI 00000219 [SR] Verify complete 2017-10-09 09:42:59, Info CSI 0000021a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:42:59, Info CSI 0000021b [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:05, Info CSI 0000021f [SR] Verify complete 2017-10-09 09:43:06, Info CSI 00000220 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:06, Info CSI 00000221 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:14, Info CSI 00000223 [SR] Verify complete 2017-10-09 09:43:14, Info CSI 00000224 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:14, Info CSI 00000225 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:27, Info CSI 00000228 [SR] Verify complete 2017-10-09 09:43:27, Info CSI 00000229 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:27, Info CSI 0000022a [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:36, Info CSI 0000022c [SR] Verify complete 2017-10-09 09:43:37, Info CSI 0000022d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:37, Info CSI 0000022e [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:43, Info CSI 00000230 [SR] Verify complete 2017-10-09 09:43:44, Info CSI 00000231 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:44, Info CSI 00000232 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:49, Info CSI 00000234 [SR] Verify complete 2017-10-09 09:43:49, Info CSI 00000235 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:49, Info CSI 00000236 [SR] Beginning Verify and Repair transaction 2017-10-09 09:43:55, Info CSI 00000238 [SR] Verify complete 2017-10-09 09:43:56, Info CSI 00000239 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:43:56, Info CSI 0000023a [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:03, Info CSI 0000023c [SR] Verify complete 2017-10-09 09:44:04, Info CSI 0000023d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:04, Info CSI 0000023e [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:13, Info CSI 00000240 [SR] Verify complete 2017-10-09 09:44:14, Info CSI 00000241 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:14, Info CSI 00000242 [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:18, Info CSI 00000244 [SR] Verify complete 2017-10-09 09:44:19, Info CSI 00000245 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:19, Info CSI 00000246 [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:27, Info CSI 00000248 [SR] Verify complete 2017-10-09 09:44:27, Info CSI 00000249 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:27, Info CSI 0000024a [SR] Beginning Verify and Repair transaction 2017-10-09 09:44:54, Info CSI 0000024c [SR] Verify complete 2017-10-09 09:44:54, Info CSI 0000024d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:44:54, Info CSI 0000024e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:17, Info CSI 00000250 [SR] Verify complete 2017-10-09 09:45:17, Info CSI 00000251 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:17, Info CSI 00000252 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:25, Info CSI 00000254 [SR] Verify complete 2017-10-09 09:45:26, Info CSI 00000255 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:26, Info CSI 00000256 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:30, Info CSI 00000258 [SR] Verify complete 2017-10-09 09:45:30, Info CSI 00000259 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:30, Info CSI 0000025a [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:35, Info CSI 0000025c [SR] Verify complete 2017-10-09 09:45:35, Info CSI 0000025d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:35, Info CSI 0000025e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:40, Info CSI 00000260 [SR] Verify complete 2017-10-09 09:45:40, Info CSI 00000261 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:40, Info CSI 00000262 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:48, Info CSI 00000264 [SR] Verify complete 2017-10-09 09:45:49, Info CSI 00000265 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:49, Info CSI 00000266 [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:50, Info CSI 00000268 [SR] Verify complete 2017-10-09 09:45:50, Info CSI 00000269 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:50, Info CSI 0000026a [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:51, Info CSI 0000026c [SR] Verify complete 2017-10-09 09:45:52, Info CSI 0000026d [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:45:52, Info CSI 0000026e [SR] Beginning Verify and Repair transaction 2017-10-09 09:45:59, Info CSI 00000276 [SR] Verify complete 2017-10-09 09:46:00, Info CSI 00000277 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:00, Info CSI 00000278 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:07, Info CSI 0000027a [SR] Verify complete 2017-10-09 09:46:07, Info CSI 0000027b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:07, Info CSI 0000027c [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:14, Info CSI 0000027e [SR] Verify complete 2017-10-09 09:46:15, Info CSI 0000027f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:15, Info CSI 00000280 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:22, Info CSI 00000282 [SR] Verify complete 2017-10-09 09:46:23, Info CSI 00000283 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:23, Info CSI 00000284 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:31, Info CSI 00000286 [SR] Verify complete 2017-10-09 09:46:32, Info CSI 00000287 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:32, Info CSI 00000288 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:41, Info CSI 0000028b [SR] Verify complete 2017-10-09 09:46:42, Info CSI 0000028c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:42, Info CSI 0000028d [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:48, Info CSI 0000028f [SR] Verify complete 2017-10-09 09:46:49, Info CSI 00000290 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:49, Info CSI 00000291 [SR] Beginning Verify and Repair transaction 2017-10-09 09:46:53, Info CSI 00000293 [SR] Verify complete 2017-10-09 09:46:54, Info CSI 00000294 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:46:54, Info CSI 00000295 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:03, Info CSI 00000298 [SR] Verify complete 2017-10-09 09:47:03, Info CSI 00000299 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:03, Info CSI 0000029a [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:19, Info CSI 0000029e [SR] Verify complete 2017-10-09 09:47:19, Info CSI 0000029f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:19, Info CSI 000002a0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:31, Info CSI 000002a5 [SR] Verify complete 2017-10-09 09:47:32, Info CSI 000002a6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:32, Info CSI 000002a7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:41, Info CSI 000002ad [SR] Verify complete 2017-10-09 09:47:41, Info CSI 000002ae [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:41, Info CSI 000002af [SR] Beginning Verify and Repair transaction 2017-10-09 09:47:52, Info CSI 000002ba [SR] Verify complete 2017-10-09 09:47:52, Info CSI 000002bb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:47:52, Info CSI 000002bc [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:01, Info CSI 000002c1 [SR] Verify complete 2017-10-09 09:48:01, Info CSI 000002c2 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:01, Info CSI 000002c3 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:09, Info CSI 000002c5 [SR] Verify complete 2017-10-09 09:48:09, Info CSI 000002c6 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:09, Info CSI 000002c7 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:15, Info CSI 000002cb [SR] Verify complete 2017-10-09 09:48:15, Info CSI 000002cc [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:15, Info CSI 000002cd [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:22, Info CSI 000002de [SR] Verify complete 2017-10-09 09:48:23, Info CSI 000002df [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:23, Info CSI 000002e0 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:31, Info CSI 000002f6 [SR] Verify complete 2017-10-09 09:48:31, Info CSI 000002f7 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:31, Info CSI 000002f8 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:38, Info CSI 000002fa [SR] Verify complete 2017-10-09 09:48:39, Info CSI 000002fb [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:39, Info CSI 000002fc [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:47, Info CSI 000002fe [SR] Verify complete 2017-10-09 09:48:47, Info CSI 000002ff [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:47, Info CSI 00000300 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:53, Info CSI 00000302 [SR] Verify complete 2017-10-09 09:48:53, Info CSI 00000303 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:53, Info CSI 00000304 [SR] Beginning Verify and Repair transaction 2017-10-09 09:48:59, Info CSI 00000312 [SR] Verify complete 2017-10-09 09:48:59, Info CSI 00000313 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:48:59, Info CSI 00000314 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:15, Info CSI 00000316 [SR] Verify complete 2017-10-09 09:49:15, Info CSI 00000317 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:15, Info CSI 00000318 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:22, Info CSI 00000326 [SR] Verify complete 2017-10-09 09:49:22, Info CSI 00000327 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:22, Info CSI 00000328 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:25, Info CSI 0000032a [SR] Verify complete 2017-10-09 09:49:26, Info CSI 0000032b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:26, Info CSI 0000032c [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:31, Info CSI 0000032e [SR] Verify complete 2017-10-09 09:49:32, Info CSI 0000032f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:32, Info CSI 00000330 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:39, Info CSI 00000333 [SR] Verify complete 2017-10-09 09:49:39, Info CSI 00000334 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:39, Info CSI 00000335 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:42, Info CSI 00000337 [SR] Verify complete 2017-10-09 09:49:42, Info CSI 00000338 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:42, Info CSI 00000339 [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:51, Info CSI 0000033b [SR] Verify complete 2017-10-09 09:49:51, Info CSI 0000033c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:51, Info CSI 0000033d [SR] Beginning Verify and Repair transaction 2017-10-09 09:49:59, Info CSI 0000033f [SR] Verify complete 2017-10-09 09:49:59, Info CSI 00000340 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:49:59, Info CSI 00000341 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:08, Info CSI 00000343 [SR] Verify complete 2017-10-09 09:50:08, Info CSI 00000344 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:08, Info CSI 00000345 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:16, Info CSI 0000035f [SR] Verify complete 2017-10-09 09:50:16, Info CSI 00000360 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:16, Info CSI 00000361 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:36, Info CSI 00000363 [SR] Verify complete 2017-10-09 09:50:37, Info CSI 00000364 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:37, Info CSI 00000365 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:42, Info CSI 00000367 [SR] Verify complete 2017-10-09 09:50:43, Info CSI 00000368 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:43, Info CSI 00000369 [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:49, Info CSI 0000036b [SR] Verify complete 2017-10-09 09:50:49, Info CSI 0000036c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:49, Info CSI 0000036d [SR] Beginning Verify and Repair transaction 2017-10-09 09:50:54, Info CSI 00000371 [SR] Verify complete 2017-10-09 09:50:54, Info CSI 00000372 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:50:54, Info CSI 00000373 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:00, Info CSI 00000375 [SR] Verify complete 2017-10-09 09:51:00, Info CSI 00000376 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:00, Info CSI 00000377 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:11, Info CSI 00000379 [SR] Verify complete 2017-10-09 09:51:11, Info CSI 0000037a [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:11, Info CSI 0000037b [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:18, Info CSI 0000037d [SR] Verify complete 2017-10-09 09:51:19, Info CSI 0000037e [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:19, Info CSI 0000037f [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:25, Info CSI 00000382 [SR] Verify complete 2017-10-09 09:51:25, Info CSI 00000383 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:25, Info CSI 00000384 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:31, Info CSI 00000386 [SR] Verify complete 2017-10-09 09:51:31, Info CSI 00000387 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:31, Info CSI 00000388 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:39, Info CSI 0000038a [SR] Verify complete 2017-10-09 09:51:39, Info CSI 0000038b [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:39, Info CSI 0000038c [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:47, Info CSI 0000038e [SR] Verify complete 2017-10-09 09:51:48, Info CSI 0000038f [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:48, Info CSI 00000390 [SR] Beginning Verify and Repair transaction 2017-10-09 09:51:56, Info CSI 00000393 [SR] Verify complete 2017-10-09 09:51:56, Info CSI 00000394 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:51:56, Info CSI 00000395 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:02, Info CSI 00000397 [SR] Verify complete 2017-10-09 09:52:03, Info CSI 00000398 [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:52:03, Info CSI 00000399 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:10, Info CSI 0000039b [SR] Verify complete 2017-10-09 09:52:11, Info CSI 0000039c [SR] Verifying 100 (0x0000000000000064) components 2017-10-09 09:52:11, Info CSI 0000039d [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:18, Info CSI 0000039f [SR] Verify complete 2017-10-09 09:52:19, Info CSI 000003a0 [SR] Verifying 90 (0x000000000000005a) components 2017-10-09 09:52:19, Info CSI 000003a1 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:24, Info CSI 000003a3 [SR] Verify complete 2017-10-09 09:52:24, Info CSI 000003a4 [SR] Repairing 0 components 2017-10-09 09:52:24, Info CSI 000003a5 [SR] Beginning Verify and Repair transaction 2017-10-09 09:52:24, Info CSI 000003a7 [SR] Repair complete ---------------------------------------------------------------------------- CrystalDiskInfo 7.1.1 (C) 2008-2016 hiyohiyo Crystal Dew World : http://crystalmark.info/ ---------------------------------------------------------------------------- OS : Windows 7 Professional SP1 [6.1 Build 7601] (x64) Date : 2017/10/09 10:21:24 -- Controller Map ---------------------------------------------------------- + ATA Channel 0 (0) [ATA] - WDC WD5000AAKX-001CA0 ATA Device - ATA Channel 1 (1) [ATA] + Controller standard PCI IDE [ATA] + ATA Channel 0 (0) - Optiarc DVD RW AD-5280S ATA Device - ATA Channel 1 (1) + Controller standard PCI IDE [ATA] - ATA Channel 0 (0) - ATA Channel 1 (1) -- Disk List --------------------------------------------------------------- (1) WDC WD5000AAKX-001CA0 : 500.1 GB [0/0/0, pd1] - wd ---------------------------------------------------------------------------- (1) WDC WD5000AAKX-001CA0 ---------------------------------------------------------------------------- Model : WDC WD5000AAKX-001CA0 Firmware : 15.01H15 Serial Number : WD-WMAYUJ331702 Disk Size : 500.1 GB (8.4/137.4/500.1/500.1) Buffer Size : 16384 KB Queue Depth : 32 # of Sectors : 976773168 Rotation Rate : Sconosciuto Interface : Serial ATA Major Version : ATA8-ACS Minor Version : ---- Transfer Mode : SATA/600 | SATA/600 Power On Hours : 27849 ore Power On Count : 2117 volte Temperature : 34 C (93 F) Health Status : A rischio Features : S.M.A.R.T., 48bit LBA, NCQ APM Level : ---- AAM Level : ---- Drive Letter : C: D: -- S.M.A.R.T. -------------------------------------------------------------- ID Cur Wor Thr RawValues(6) Attribute Name Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2017 Ran by Gigi (administrator) on GIGI-PC (09-10-2017 10:28:35) Running from C:\Users\Gigi\Desktop Loaded Profiles: Gigi (Available Profiles: Gigi) Platform: Windows 7 Professional Service Pack 1 (X64) Language: Italiano (Italia) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic...ery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AMD) C:\Windows\System32\atieclxx.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe (Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 7500 E910\Bin\HPNetworkCommunicator.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAAgent.exe (Hewlett-Packard Company) C:\Program Files (x86)\HP\Common\HPSupportSolutionsFrameworkService.exe (Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe (© pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (Clarus, Inc.) C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe (Microsoft Corporation) C:\Windows\System32\msiexec.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\nacl64.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [919032 2017-09-14] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [CTERA Agent] => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe [714816 2017-07-30] () HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [HP Officejet 7500 E910 (NET)] => C:\Program Files\HP\HP Officejet 7500 E910\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9855192 2017-09-07] (Piriform Ltd) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23602880 2017-09-29] (Microsoft Corporation) HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: [] HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1421736 2017-03-28] (Garmin Ltd. or its subsidiaries) HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [NameServer] 208.67.222.222,208.67.220.220 Tcpip\..\Interfaces\{AA6669E4-F350-4191-942D-E63E9E1B57C7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Guida per l'accesso all'account Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\URLREDIR.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-29] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-20] (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2012-09-23] (Adobe Systems Incorporated) Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File DPF: HKLM-x32 {57AF0810-BDA7-47A5-B02D-FDA1073C04B0} hxxps://eu.mydlink.com/8D/activeX//TunnelX.ocx DPF: HKLM-x32 {721700FE-7F0E-49C5-BDED-CA92B7CB1245} hxxps://127.0.0.1:58570/camclictrl.cab Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-29] (Microsoft Corporation) FireFox: ======== FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-17] [not signed] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] () FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] () FF Plugin-x32: @D-Link.com/camclictrl -> C:\Program Files (x86)\D-Link\Plugin\npCamCliCtrl.dll [2015-09-10] (D-Link Corp.) FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-20] (Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-29] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2013-05-11] (Adobe Systems Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Gigi\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: SkypePlugin64 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\npGatewayNpapi-x64.dll [2015-07-17] (Skype Technologies S.A.) FF Plugin HKU\S-1-5-21-477265285-3796326774-168570957-1000: www.mydlink.com/Uplayer -> C:\Users\Gigi\AppData\Roaming\D-Link\mydlink services plugin\1.0.2.7\npUplayer.dll [2015-12-11] (D-Link Corporation) Chrome: ======= CHR DefaultProfile: Profile 2 CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Default [2017-10-07] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-03-16] CHR Profile: C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-10-09] CHR Extension: (Presentazioni Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-28] CHR Extension: (Documenti Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-29] CHR Extension: (Google Drive) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-29] CHR Extension: (YouTube) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-29] CHR Extension: (CTERA Edit) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\clcanilindnkpmffpdadmihenpagcpin [2017-06-12] CHR Extension: (Fogli Google) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-28] CHR Extension: (Google Documenti offline) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-29] CHR Extension: (LastPass: Free Password Manager) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2017-09-15] CHR Extension: (mydlink services plugin) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ldibdoepbjbkkcbgndfljnphngpglhbb [2016-11-30] CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] CHR Extension: (Gmail) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-29] CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Gigi\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-04-22] CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [clcanilindnkpmffpdadmihenpagcpin] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [1128432 2017-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [490968 2017-09-14] (Avira Operations GmbH & Co. KG) S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1525240 2017-09-14] (Avira Operations GmbH & Co. KG) R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-10-02] (Avira Operations GmbH & Co. KG) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [7761608 2017-09-08] (Microsoft Corporation) R2 CTERA Agent service; C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe [5535296 2017-07-30] () S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2016-04-07] (Freemake) [File not signed] S2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1099280 2017-03-28] (Garmin Ltd. or its subsidiaries) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [89840 2015-03-28] (Hewlett-Packard Company) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes) R2 mitsijm2012; C:\Program Files\Autodesk\Inventor 2012\Moldflow\bin\mitsijm.exe [848704 2011-08-03] (Autodesk, Inc.) R2 PDF Architect 5 Manager; C:\Program Files (x86)\PDF Architect 5 Manager\PDF Architect 5\Architect Manager.exe [985848 2017-05-16] (© pdfforge GmbH.) R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.) R2 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [18432 2013-12-18] (Clarus, Inc.) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [64504 2017-06-20] (Avira Operations GmbH & Co. KG) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [194912 2017-09-14] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [151128 2017-09-14] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-03-03] (Avira Operations GmbH & Co. KG) R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-03-03] (Avira Operations GmbH & Co. KG) S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [131712 2017-01-16] (Samsung Electronics Co., Ltd.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-08-29] (Disc Soft Ltd) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-07] () R2 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-07] (Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-10-09] (Malwarebytes) R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-10-09] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [252232 2017-10-09] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-10-09] (Malwarebytes) R3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] () R3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] () S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [165504 2017-01-16] (Samsung Electronics Co., Ltd.) S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64.sys [14464 2009-02-13] (Western Digital Technologies) [File not signed] S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Duntlw; System32\Drivers\DuntlwNT.sys [X] S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-09 10:28 - 2017-10-09 10:30 - 000021739 _____ C:\Users\Gigi\Desktop\FRST.txt 2017-10-09 10:19 - 2017-10-09 10:20 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo 2017-10-09 10:19 - 2017-10-09 10:19 - 000001200 _____ C:\Users\Gigi\Desktop\CrystalDiskInfo.lnk 2017-10-09 10:19 - 2017-10-09 10:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo 2017-10-09 10:12 - 2017-10-09 10:12 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\CrystalDiskInfo7_1_1 (1).exe 2017-10-09 10:11 - 2017-10-09 10:11 - 003928200 _____ (Crystal Dew World ) C:\Users\Gigi\Downloads\35415e15-f7e5-46ac-bd13-5c6e64038ab3.tmp 2017-10-09 09:53 - 2017-10-09 10:21 - 000058459 _____ C:\Users\Gigi\Desktop\sfcdetails.txt 2017-10-07 12:52 - 2017-10-09 10:17 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-10-07 12:52 - 2017-10-09 10:02 - 000252232 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2017-10-07 12:52 - 2017-10-07 12:52 - 000192952 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2017-10-07 11:30 - 2017-10-07 11:31 - 000000000 ____D C:\Users\Gigi\AppData\Local\Adobe 2017-10-07 11:30 - 2017-10-07 11:30 - 000475446 _____ C:\Users\Gigi\Desktop\giant-bicycles-bike-411.pdf 2017-10-07 11:10 - 2017-10-09 10:28 - 000000000 ____D C:\FRST 2017-10-07 10:42 - 2017-10-07 10:45 - 000000000 ____D C:\AdwCleaner 2017-10-07 10:39 - 2017-10-07 10:39 - 002400768 _____ (Farbar) C:\Users\Gigi\Desktop\FRST64.exe 2017-10-07 10:39 - 2017-10-07 10:39 - 000000000 ____D C:\Users\Gigi\AppData\Local\2BrightSparks 2017-10-07 10:36 - 2017-10-07 10:36 - 001790024 _____ (Malwarebytes) C:\Users\Gigi\Desktop\JRT.exe 2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp 2017-10-07 09:52 - 2017-10-09 10:03 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-10-07 09:52 - 2017-10-09 10:03 - 000045504 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt 2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe 2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe 2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe 2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox 2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt 2017-10-06 12:39 - 2017-10-07 10:37 - 000000000 ____D C:\Users\Gigi\Desktop\Nuova cartella 2017-10-04 17:13 - 2017-10-06 12:56 - 000000000 ____D C:\Users\Gigi\Desktop\cell antonio 2017-10-04 15:12 - 2017-10-04 15:16 - 000000048 _____ C:\Users\Gigi\Desktop\Nuovo documento di testo.txt 2017-10-04 10:52 - 2017-10-04 10:52 - 000008600 _____ C:\Users\Gigi\Desktop\Document.pdf 2017-10-04 09:29 - 2017-10-04 09:29 - 000000000 ____D C:\Users\Gigi\Desktop\temp cell p8 lite 2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt 2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT 2017-10-02 11:56 - 2017-10-09 10:28 - 000000000 ____D C:\Users\Gigi\Desktop\log 2017-10-02 08:48 - 2017-10-02 08:48 - 000001027 _____ C:\Users\Public\Desktop\MozBackup.lnk 2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MozBackup 2017-10-02 08:48 - 2017-10-02 08:48 - 000000000 ____D C:\Program Files (x86)\MozBackup 2017-10-02 08:40 - 2017-10-02 08:43 - 001035926 _____ C:\Users\Gigi\Downloads\MozBackup-1.5.1-EN.exe 2017-10-02 08:35 - 2017-10-07 12:52 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-10-02 08:35 - 2017-10-02 08:35 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-10-02 08:35 - 2017-10-02 08:35 - 000000000 ____D C:\Program Files\Malwarebytes 2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET 2017-09-18 19:39 - 2017-09-18 19:39 - 000001118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive for PC is now Backup and Sync from Google.lnk 2017-09-18 19:39 - 2017-09-18 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google 2017-09-18 15:05 - 2017-09-18 15:07 - 000000000 ____D C:\Users\Gigi\Downloads\eni 2017-09-18 13:01 - 2017-09-18 13:01 - 000008579 _____ C:\Users\Gigi\Downloads\Document.pdf 2017-09-14 17:19 - 2017-09-14 17:19 - 000288067 _____ C:\Users\Gigi\Downloads\fattura-M177400469.pdf 2017-09-13 15:37 - 2017-09-13 15:37 - 000325621 _____ C:\Users\Gigi\Downloads\gcontactsync-2.0.12-sm+tb.xpi 2017-09-12 21:49 - 2017-08-19 17:28 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll 2017-09-12 21:49 - 2017-08-19 17:10 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll 2017-09-12 21:49 - 2017-08-16 17:29 - 000806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2017-09-12 21:49 - 2017-08-16 17:10 - 000629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2017-09-12 21:49 - 2017-08-16 16:57 - 003224576 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-09-12 21:49 - 2017-08-16 03:10 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-09-12 21:49 - 2017-08-16 02:25 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2017-09-12 21:49 - 2017-08-15 17:29 - 014182400 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-09-12 21:49 - 2017-08-15 17:29 - 001867264 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-09-12 21:49 - 2017-08-15 17:10 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-09-12 21:49 - 2017-08-15 17:10 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-09-12 21:49 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2017-09-12 21:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2017-09-12 21:49 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 003203584 _____ (Microsoft Corporation) C:\Windows\system32\mmcndmgr.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 002150912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcndmgr.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000355328 _____ (Microsoft Corporation) C:\Windows\system32\mmcbase.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000303104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcbase.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000172544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cic.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\mmcshext.dll 2017-09-12 21:49 - 2017-08-14 19:35 - 000128512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmcshext.dll 2017-09-12 21:49 - 2017-08-14 19:34 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\cic.dll 2017-09-12 21:49 - 2017-08-13 23:37 - 002144256 _____ (Microsoft Corporation) C:\Windows\system32\mmc.exe 2017-09-12 21:49 - 2017-08-13 23:30 - 001401344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmc.exe 2017-09-12 21:49 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-09-12 21:49 - 2017-08-13 19:24 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-09-12 21:49 - 2017-08-13 19:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-09-12 21:49 - 2017-08-13 19:06 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-09-12 21:49 - 2017-08-13 19:05 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-09-12 21:49 - 2017-08-13 19:05 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-09-12 21:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-09-12 21:49 - 2017-08-13 18:56 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-09-12 21:49 - 2017-08-13 18:55 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-09-12 21:49 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-09-12 21:49 - 2017-08-13 18:52 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-09-12 21:49 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-09-12 21:49 - 2017-08-13 18:51 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-09-12 21:49 - 2017-08-13 18:51 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-09-12 21:49 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-09-12 21:49 - 2017-08-13 18:50 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-09-12 21:49 - 2017-08-13 18:46 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2017-09-12 21:49 - 2017-08-13 18:41 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-09-12 21:49 - 2017-08-13 18:38 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-09-12 21:49 - 2017-08-13 18:30 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2017-09-12 21:49 - 2017-08-13 18:29 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-09-12 21:49 - 2017-08-13 18:29 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-09-12 21:49 - 2017-08-13 18:29 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2017-09-12 21:49 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2017-09-12 21:49 - 2017-08-13 18:27 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-09-12 21:49 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-09-12 21:49 - 2017-08-13 18:24 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-09-12 21:49 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-09-12 21:49 - 2017-08-13 18:22 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2017-09-12 21:49 - 2017-08-13 18:21 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2017-09-12 21:49 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-09-12 21:49 - 2017-08-13 18:19 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2017-09-12 21:49 - 2017-08-13 18:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2017-09-12 21:49 - 2017-08-13 18:17 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2017-09-12 21:49 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-09-12 21:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-09-12 21:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-09-12 21:49 - 2017-08-13 18:02 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-09-12 21:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-09-12 21:49 - 2017-08-13 18:01 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2017-09-12 21:49 - 2017-08-13 18:01 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2017-09-12 21:49 - 2017-08-13 18:00 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2017-09-12 21:49 - 2017-08-13 17:57 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2017-09-12 21:49 - 2017-08-13 17:53 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2017-09-12 21:49 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-09-12 21:49 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2017-09-12 21:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2017-09-12 21:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2017-09-12 21:49 - 2017-08-13 17:43 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2017-09-12 21:49 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-09-12 21:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-09-12 21:49 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-09-12 21:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2017-09-12 21:49 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2017-09-12 21:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-09-12 21:49 - 2017-08-11 08:42 - 000631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2017-09-12 21:49 - 2017-08-11 08:38 - 005547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-09-12 21:49 - 2017-08-11 08:38 - 000706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2017-09-12 21:49 - 2017-08-11 08:38 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-09-12 21:49 - 2017-08-11 08:38 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-09-12 21:49 - 2017-08-11 08:36 - 001732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 002065408 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 001212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000512000 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000346112 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Wldap32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\nsisvc.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\winnsi.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2017-09-12 21:49 - 2017-08-11 08:35 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\nsi.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 001460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 001163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000971776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000731648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000166400 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:34 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:24 - 004001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2017-09-12 21:49 - 2017-08-11 08:24 - 003945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2017-09-12 21:49 - 2017-08-11 08:21 - 001314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2017-09-12 21:49 - 2017-08-11 08:20 - 000071680 _____ C:\Windows\system32\PrintBrmUi.exe 2017-09-12 21:49 - 2017-08-11 08:20 - 000061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe 2017-09-12 21:49 - 2017-08-11 08:20 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe 2017-09-12 21:49 - 2017-08-11 08:19 - 001417728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000554496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000299008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000271360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Wldap32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winnsi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nsi.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:19 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 08:12 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe 2017-09-12 21:49 - 2017-08-11 08:09 - 000061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntprint.exe 2017-09-12 21:49 - 2017-08-11 08:07 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-09-12 21:49 - 2017-08-11 08:07 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-09-12 21:49 - 2017-08-11 08:07 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-09-12 21:49 - 2017-08-11 08:06 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-09-12 21:49 - 2017-08-11 08:03 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2017-09-12 21:49 - 2017-08-11 08:03 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe 2017-09-12 21:49 - 2017-08-11 08:02 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-09-12 21:49 - 2017-08-11 08:01 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll 2017-09-12 21:49 - 2017-08-11 08:00 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2017-09-12 21:49 - 2017-08-11 08:00 - 000159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-09-12 21:49 - 2017-08-11 08:00 - 000050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2017-09-12 21:49 - 2017-08-11 07:59 - 000460800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000168448 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-09-12 21:49 - 2017-08-11 07:59 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-09-12 21:49 - 2017-08-11 07:58 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-09-12 21:49 - 2017-08-11 07:58 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-09-12 21:49 - 2017-08-11 07:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nsiproxy.sys 2017-09-12 21:49 - 2017-08-11 07:56 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2017-09-12 21:49 - 2017-08-11 07:56 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2017-09-12 21:49 - 2017-08-11 07:56 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2017-09-12 21:49 - 2017-08-11 07:56 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2017-09-12 21:49 - 2017-08-11 07:55 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2017-09-12 21:49 - 2017-08-11 07:55 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2017-09-12 16:22 - 2017-09-12 16:35 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\AirDroid 2017-09-12 11:21 - 2017-10-03 08:11 - 000003122 _____ C:\Windows\System32\Tasks\Avira SystrayStartTrigger ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2017-10-09 10:29 - 2014-12-04 17:24 - 000000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job 2017-10-09 10:23 - 2017-01-20 16:38 - 000000000 ____D C:\Users\Gigi\AppData\Local\CrashDumps 2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-10-09 10:23 - 2009-07-14 06:45 - 000021696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-10-09 10:23 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf 2017-10-09 10:19 - 2015-08-17 16:05 - 000000000 ____D C:\ProgramData\Skype 2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieUserList 2017-10-09 10:19 - 2014-08-29 16:02 - 000000000 __SHD C:\Users\Gigi\AppData\LocalLow\EmieSiteList 2017-10-09 10:05 - 2016-02-26 16:06 - 000000000 ____D C:\Users\Gigi\Documents\File di Outlook 2017-10-09 10:01 - 2017-03-21 18:39 - 000001695 _____ C:\Users\Gigi\Desktop\Cloud Drive.lnk 2017-10-09 09:59 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-10-09 09:28 - 2017-04-06 16:39 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Mozilla 2017-10-09 08:58 - 2017-06-20 08:20 - 000000432 _____ C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job 2017-10-08 16:29 - 2014-12-04 17:24 - 000000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job 2017-10-07 11:31 - 2015-01-27 09:19 - 003715584 ___SH C:\Users\Gigi\Desktop\Thumbs.db 2017-10-07 11:22 - 2016-02-22 09:40 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\Telegram Desktop 2017-10-07 11:14 - 2016-09-15 09:30 - 000000000 ____D C:\Users\Gigi\Downloads\Telegram Desktop 2017-10-07 10:25 - 2014-09-02 11:16 - 000000000 ____D C:\Users\Gigi\AppData\Local\Autodesk 2017-10-06 17:45 - 2014-08-29 08:43 - 000000000 ____D C:\Program Files (x86)\Danea Easyfatt 2017-10-06 13:03 - 2009-07-14 04:34 - 000000215 _____ C:\Windows\system.ini 2017-10-06 12:58 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\Downloaded Program Files 2017-10-04 16:01 - 2016-05-13 08:31 - 000000000 ____D C:\Users\Gigi\AppData\Roaming\WhatsApp 2017-10-03 12:15 - 2009-07-14 07:32 - 000000000 ____D C:\Windows\system32\FxsTmp 2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Package Cache 2017-10-03 08:12 - 2014-08-29 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2017-10-02 16:57 - 2014-09-02 11:21 - 000000000 ____D C:\Users\Gigi\Documents\Inventor 2017-10-02 12:24 - 2017-04-13 09:18 - 000000000 ____D C:\Users\Gigi\AppData\LocalLow\Temp 2017-10-02 10:32 - 2010-11-21 17:30 - 000743956 _____ C:\Windows\system32\perfh010.dat 2017-10-02 10:32 - 2010-11-21 17:30 - 000148130 _____ C:\Windows\system32\perfc010.dat 2017-10-02 10:32 - 2009-07-14 07:13 - 001667988 _____ C:\Windows\system32\PerfStringBackup.INI 2017-10-02 08:35 - 2014-08-29 16:05 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-09-29 06:18 - 2016-11-03 14:41 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-09-29 06:14 - 2014-08-29 16:54 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2017-09-28 17:47 - 2014-10-03 08:16 - 000000866 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-09-27 05:41 - 2016-04-21 09:59 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-09-27 05:41 - 2016-04-21 09:59 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-09-26 16:17 - 2014-08-29 08:59 - 000000000 ____D C:\Program Files (x86)\Google 2017-09-25 07:53 - 2009-07-14 07:08 - 000032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2017-09-20 13:46 - 2017-07-18 08:25 - 000000000 ____D C:\Program Files\PDFCreator 2017-09-20 10:28 - 2016-01-29 11:42 - 000000000 ____D C:\Users\Gigi\Documents\AirDroid 2017-09-15 11:07 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\rescache 2017-09-15 09:58 - 2009-07-14 06:45 - 000672504 _____ C:\Windows\system32\FNTCACHE.DAT 2017-09-15 09:51 - 2014-08-29 12:05 - 000000000 ____D C:\Windows\system32\MRT 2017-09-15 09:45 - 2014-08-29 12:05 - 138202976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-09-15 09:40 - 2014-08-29 14:26 - 001641874 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-09-14 13:20 - 2014-08-29 11:56 - 000194912 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys 2017-09-14 13:20 - 2014-08-29 11:56 - 000151128 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys 2017-09-13 09:34 - 2014-09-03 14:47 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-09-13 09:34 - 2014-09-03 14:47 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-09-13 09:34 - 2014-09-03 14:47 - 000004460 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-09-13 09:34 - 2014-09-03 14:47 - 000000000 ____D C:\Windows\system32\Macromed 2017-09-12 16:26 - 2015-02-21 09:48 - 000000000 ____D C:\Users\Gigi\.android ==================== Files in the root of some directories ======= 2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-02-21 11:09 - 2017-02-21 11:09 - 000001673 _____ () C:\Users\Gigi\AppData\Local\recently-used.xbel 2014-10-03 15:19 - 2014-10-03 15:39 - 000007621 _____ () C:\Users\Gigi\AppData\Local\Resmon.ResmonCfg 2014-09-24 15:58 - 2014-09-24 15:58 - 000000057 _____ () C:\ProgramData\Ament.ini 2015-12-16 18:30 - 2015-12-16 18:30 - 000000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2017-10-02 13:18 ==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 06-10-2017 Ran by Gigi (09-10-2017 10:31:50) Running from C:\Users\Gigi\Desktop Windows 7 Professional Service Pack 1 (X64) (2014-08-29 06:23:41) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-477265285-3796326774-168570957-500 - Administrator - Disabled) Gigi (S-1-5-21-477265285-3796326774-168570957-1000 - Administrator - Enabled) => C:\Users\Gigi Guest (S-1-5-21-477265285-3796326774-168570957-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-477265285-3796326774-168570957-1007 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) µTorrent (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\uTorrent) (Version: 3.4.5.41372 - BitTorrent Inc.) 7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Italiano (HKLM-x32\...\{AC76BA86-7AD7-1040-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.03 - Adobe Systems) Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.130 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.130 - Adobe Systems Incorporated) ANT Drivers Installer x64 (HKLM\...\{7664AF65-7B0D-4171-9F0F-50455278B428}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden Asmedia ASM104x USB 3.0 Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.10.1.0 - Asmedia Technology) ATI Catalyst Install Manager (HKLM\...\{A0FD3D5E-5E58-9CFB-9DFA-85D8F8BD668A}) (Version: 3.0.829.0 - ATI Technologies, Inc.) AutoCAD 2012 - Italiano (HKLM\...\{5783F2D7-A001-0410-0102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden AutoCAD 2012 - Italiano (HKLM\...\AutoCAD 2012 - Italiano) (Version: 18.2.51.0 - Autodesk) AutoCAD 2012 Language Pack - Italiano (HKLM\...\{5783F2D7-A001-0410-1102-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden Autodesk Design Review 2012 (HKLM-x32\...\{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}) (Version: 12.0.0.93 - Autodesk, Inc.) Hidden Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.) Autodesk Inventor Content Center Libraries 2012 (Desktop Content) (HKLM\...\{B46DECD1-1664-4EF1-0000-22D71E81877C}) (Version: 16.0.16000.0000 - Autodesk, Inc.) Autodesk Inventor Fusion 2012 (HKLM\...\{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Autodesk Inventor Fusion for Inventor 2012 Add-in (HKLM\...\Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012) (Version: 1.0.0.18 - Autodesk) Autodesk Inventor Professional 2012 (HKLM\...\{7F4DD591-1664-0409-0000-7107D70F3DB4}) (Version: 16.2.21900.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 Italiano (HKLM\...\Autodesk Inventor Professional 2012) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 Language Pack - Italiano (HKLM\...\{7F4DD591-1664-0409-0001-7107D70F3DB4}) (Version: 16.0.16000.0000 - Autodesk) Hidden Autodesk Inventor Professional 2012 SP1 (HKLM\...\Autodesk Inventor Professional 2012 SP1) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor Professional 2012 SP2 (HKLM\...\Autodesk Inventor Professional 2012 SP2) (Version: 16.2.21900.0000 - Autodesk) Autodesk Inventor View 2012 (HKLM\...\{76D6189D-1664-0400-0000-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Autodesk Inventor View 2012 Italiano (HKLM\...\Autodesk Inventor View 2012) (Version: 16.0.15600.0000 - Autodesk) Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk) Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk) Autodesk Sync (HKLM\...\{EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F}) (Version: 3.5.24.0 - Autodesk, Inc.) Autodesk Vault 2012 (Client) (HKLM\...\{CF526A26-1664-0000-0000-02E95019B628}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Autodesk Vault 2012 (Client) (HKLM-x32\...\Autodesk Vault 2012 (Client)) (Version: 16.0.56.200 - Autodesk, Inc.) Autodesk Vault 2012 (Client) English Language Pack (HKLM\...\{266597A9-1664-0000-0100-DCBF2B69166B}) (Version: 16.0.56.200 - Autodesk, Inc.) Hidden Avira (HKLM-x32\...\{bbae0e09-4839-446f-8900-db9dfd443c62}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{F0142122-F47D-4003-8747-7096FEC87429}) (Version: 1.2.97.30459 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.30.29 - Avira Operations GmbH & Co. KG) Backup and Sync from Google (HKLM-x32\...\{9AC75ED0-A54A-4AEA-9563-87572879D91C}) (Version: 3.36.6721.3394 - Google, Inc.) Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.) CamCliCtrl (HKLM-x32\...\{1B5862A5-6471-4902-B838-4ACC6F151C5D}) (Version: 1.0.10210 - D-Link) CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform) CrystalDiskInfo 7.1.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.1.1 - Crystal Dew World) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Danea Easyfatt (HKLM-x32\...\Danea Easyfatt) (Version: 2015.31b - Danea Soft (Italy)) Data Space Easy (HKLM-x32\...\{4f72b3d0-b595-41e2-90cb-2cc3888b144b}) (Version: 5.6.2831 - TelecomItalia_Outlook) DWG TrueView 2012 (HKLM\...\{5783F2D7-A028-0409-0100-0060B0CE6BBA}) (Version: 18.2.51.0 - Autodesk) Hidden DWG TrueView 2012 (HKLM\...\DWG TrueView 2012) (Version: 18.2.51.0 - Autodesk) Eco Materials Adviser (x64) (HKLM\...\{E027C59C-4C47-4BE8-8078-BCD3D2680EC3}) (Version: 1.32.0.0 - Granta Design Limited) eDrawings 2016 x64 (HKLM\...\{2B937F73-CCCC-486C-BD34-EE22A18ED63B}) (Version: 16.4.0053 - Dassault Systèmes SolidWorks Corp) Elevated Installer (HKLM-x32\...\{1052502B-4C91-43F9-B160-AE39ED57C9F0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Emergency Download Driver (HKLM-x32\...\{3F0F5AB4-C9CE-4226-8393-E9CFF8369D9D}) (Version: 1.1.16.1526 - Microsoft) eMule (HKLM-x32\...\eMule) (Version: - ) erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Hidden Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology) Export IDW to AutoCAD DWG duplicates text in the Title Block (DL19379513) (HKLM\...\Autodesk Inventor Professional 2012_12201) (Version: 1 - Autodesk) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production) FastStone Photo Resizer 3.3 (HKLM-x32\...\FastStone Photo Resizer) (Version: 3.3 - FastStone Soft.) FILEminimizer Pictures (HKLM-x32\...\FILEminimizer Pictures_is1) (Version: - balesio AG) Frame Generator length results are inaccurate (DL22499412) (HKLM\...\Autodesk Inventor Professional 2012_16243) (Version: 1 - Autodesk) Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{BCC7CA85-E57F-452D-BB44-15A1CE018BD0}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin Express (HKLM-x32\...\{bd8bd200-9a60-4969-b267-6b565f36e3da}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Garmin Express Tray (HKLM-x32\...\{DA9C865D-6762-4931-8588-0B13B7A0796B}) (Version: 5.3.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin MapInstall (HKLM-x32\...\{F0D44E64-51EE-4888-A1FD-F13108B75A43}) (Version: 4.0.4 - Garmin Ltd or its subsidiaries) Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries) Geometry fails after Rebuild All on Migrated data (DL19764656) (HKLM\...\Autodesk Inventor Professional 2012_12202) (Version: 1 - Autodesk) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Hotfix per Microsoft Visual Studio 2007 Tools for Applications - ENU (KB947789) (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}.KB947789) (Version: 1 - Microsoft Corporation) HP Officejet 7500 E910 ? (HKLM-x32\...\{24DC9885-E759-4BD2-8A20-D4AC509A7FDE}) (Version: 140.0.93.93 - Hewlett Packard) HP Officejet 7500 E910 Software di base dispositivo (HKLM\...\{B39E806C-718C-4716-9537-5816D131CD40}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP) HP Support Solutions Framework (HKLM-x32\...\{FC3C2B77-6800-48C6-A15D-9D1031130C16}) (Version: 11.51.0049 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP) iAssembly stability and performance issue with multi-selection and work-axis dependent members (DL20133738) (HKLM\...\Autodesk Inventor Professional 2012_12206) (Version: 1 - Autodesk) IDW view does not reflect correct Design view (DL19816487) (HKLM\...\Autodesk Inventor Professional 2012_12203) (Version: 1 - Autodesk) ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Inventor Unexpectedly exits after updating to Windows 8.1 (DL22506876) (HKLM\...\Autodesk Inventor Professional 2012_16244) (Version: 1 - Autodesk) iPart member fails to generate for some iParts (DL19829603) (HKLM\...\Autodesk Inventor Professional 2012_12204) (Version: 1 - Autodesk) Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation) Language Pack di Autodesk Inventor Fusion 2012 (HKLM\...\{FFF7F80F-929E-497F-A112-B070DE816128}) (Version: 1.0.0.79 - Autodesk, Inc.) Hidden Language Pack di Autodesk Inventor View 2012 - Italiano (HKLM\...\{76D6189D-1664-0400-0001-DFC2EE337EAC}) (Version: 16.0.15600.0000 - Autodesk) Hidden Lumia UEFI Blue Driver (HKLM-x32\...\{9D2A75FE-8CE1-4297-AEC1-A097D47BACE9}) (Version: 1.1.10.1526 - Microsoft) Malwarebytes versione 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes) Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft .NET Framework 4.7 (Italiano) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1040) (Version: 4.7.02053 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Office 365 Business - it-it (HKLM\...\O365BusinessRetail - it-it) (Version: 16.0.8431.2079 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools per Office Runtime (x64) - Language Pack - ITA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ITA) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 - ENU (HKLM-x32\...\{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Language Pack - ITA (HKLM-x32\...\{90E6C0AA-3DF3-31E2-97B1-B91DB28E46B7}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - ITA (HKLM-x32\...\{8BFB850C-AD23-326D-99C8-D42DFDCF7EA0}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation) Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 - Language Pack (HKLM\...\{4E1A54A9-FFB3-4BE6-B59B-3CC94C3B31D2}) (Version: 1.0.0.18 - Autodesk) Hidden Modulo aggiuntivo Autodesk Inventor Fusion per Inventor 2012 (HKLM\...\{4E3B47F2-21EB-4F20-87C8-5A0E4D5F3858}) (Version: 1.0.0.18 - Autodesk) Hidden Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0.6436 - Mozilla) Mozilla Thunderbird 52.3.0 (x86 it) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 it)) (Version: 52.3.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) mydlink services plugin (HKLM-x32\...\{1A9B665A-5F27-4F71-BF90-22FDFE7A1635}) (Version: 1.0.2.7 - D-Link Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden OnPopulateFileMetadata suggests same name for different occurrences in Copy command (DL22499409) (HKLM\...\Autodesk Inventor Professional 2012_16242) (Version: 1 - Autodesk) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Pacchetto driver Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Pacchetto driver Windows - Microsoft Corporation (WinUSB) WP8 UEFI USB Simple I/O (HKLM\...\CDB8F0F7651C37FE7AF56513C9A6E940426B66F2) (Version: - Microsoft Corporation) Pacchetto driver Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH) Plug-in Autodesk Inventor Fusion per AutoCAD 2012 - Language Pack (HKLM\...\{E552C39C-C70E-464F-9733-8311331BDD90}) (Version: 0.0.1.138 - Autodesk) Hidden Plug-in Autodesk Inventor Fusion per AutoCAD 2012 (HKLM\...\{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}) (Version: 0.0.1.138 - Autodesk) Hidden Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.44.421.2011 - Realtek) Samsung Drive Manager (HKLM-x32\...\{9F1A6A24-4901-42F6-A355-5DD2B82E62AE}) (Version: 1.0.172 - Clarus, Inc.) Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.) Skype Web Plugin (HKLM-x32\...\{75BBD24C-C19A-4885-B8FD-EB15009277D3}) (Version: 7.5.0.123 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) SMPlayer 14.9.0 (HKLM-x32\...\SMPlayer) (Version: 14.9.0 - Ricardo Villalba) Software della webcam Logitech (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.51 - Logitech Inc.) Strumento per la disinstallazione rapida di Autodesk Inventor 2012 (HKLM\...\{D25FF5C1-1664-469A-9794-69309387C193}) (Version: 16.0.16000.0000 - Autodesk) SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 8.2.11.0 - 2BrightSparks) Unexpected exit when generating iAssembly member (DL20040206) (HKLM\...\Autodesk Inventor Professional 2012_12205) (Version: 1 - Autodesk) Update 3 for Inventor 2012 SP2 (See readme for detail) (DL21311440) (HKLM\...\Autodesk Inventor Professional 2012_16230) (Version: 1 - Autodesk) Update 4 for Inventor 2012 SP2 (See readme for detail) (DL21989500) (HKLM\...\Autodesk Inventor Professional 2012_16240) (Version: 1 - Autodesk) VBA (2627.01) (HKLM-x32\...\{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VBA (2627.3) (HKLM-x32\...\{5545EEE8-FA36-4F76-B6BE-5696E7F4E2D6}) (Version: 6.03.00.9402 - Microsoft Corporation) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN) WhatsApp (HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\WhatsApp) (Version: 0.2.5863 - WhatsApp) Windows Device Recovery Tool 3.0.2 (HKLM-x32\...\{daf9681f-317d-4c7a-81ce-1dcdbfdad17c}) (Version: 3.0.2 - Microsoft) Windows Driver Package - Garmin (grmnusb) GARMIN Devices (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Phone app for desktop (HKLM-x32\...\{CFF220E2-642C-4B41-87FA-9A634C6E01CF}) (Version: 1.1.2726.0 - Microsoft Corporation) WinUsb CoInstallers (HKLM-x32\...\{9755918A-CDF8-4F1E-8453-6359CF1A330A}) (Version: 1.1.12.1526 - Microsoft) WinUSB Compatible ID Drivers (HKLM-x32\...\{A4A0B236-6046-4CAB-8177-1EAF61112C75}) (Version: 1.1.11.1526 - Microsoft) WinUSB Drivers ext (HKLM-x32\...\{B7F55FF1-607A-4E12-BF64-8770BC618D12}) (Version: 1.1.23.1526 - Microsoft) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1029ABC3-2457-11D5-8E9D-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{17A14094-F274-44E2-B54B-FC0E966AE5C7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxClientSink.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{21DB88B0-BFBF-11D4-8DE6-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\iDrop.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{244298EC-E661-11d4-BC13-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2D5C6B27-86B3-4E81-9F8B-9C68887F5BE6}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\LUxUIMgr.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3897B445-D5B8-410d-899A-9789B8ADB643}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3C3F63EA-C7BA-11d4-8E60-0010B541CD80}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridge.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2012\dwgviewrficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppDocView.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4D29B490-49B2-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59CA9673-A08B-489C-8932-1C3E0CF244D8}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{62FBB030-24C7-11D3-B78D-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtCp.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{714D325C-E9CE-44ab-A72A-36BB410BA19B}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\FEAFilesHandler.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{76283A80-50DD-11D3-A7E3-00C04F79D7BC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxAppCtrl.Ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\UCxTextBtn.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\SolidObject.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{97E17F04-17DF-11d5-BC38-0010B5891E89}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\BodyReceiver.dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B982932A-124D-489C-A7B3-8BCD1FDB8DD3}\InprocServer32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF9FDF1-52DC-11D0-8C04-0800090BE8EC}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C0E7110B-2136-11D4-8DD0-0010B541CAA8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorMarshal.Dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxApprenticeServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Gigi\AppData\Local\SkypePlugin\7.5.0.123\EdgeCalling.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acad.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987D-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D7A1987E-4A73-11D1-9A4B-080009DCE505}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ColorButton.ocx (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\AcInetUI.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\RxInventorUtilities.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - Italiano\acadficn.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\TestServer.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E60F81E1-49B3-11D0-93C3-7E0706000000}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\Inventor.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E6E92821-2731-4AA3-B919-D2BC514FEC64}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Compatibility\Bin\DbxBridgePS.Dll () CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvResc.dll (Autodesk) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\ServiceModule.dll (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2012\Bin\InvTXTStack.exe (Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File ShellIconOverlayIdentifiers: [ CTERA_Backup] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_error] -> {2541846f-31fd-4811-91db-6d78bf3e43b9} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_IncludeBackup] -> {07E032ED-45F7-424A-86B9-DF916F1245CD} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_NotSynced] -> {2074142E-089E-4CA3-9842-4B0C5220D466} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ CTERA_Synced] -> {B2B81867-2E6F-402A-8962-EF878D403262} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-08-31] (Google) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ShellIconOverlayIdentifiers: [Gestore icona firma digitale di AutoCAD] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2014-02-07] (Autodesk, Inc.) ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2014-02-07] (Autodesk) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2010-12-29] (Autodesk, Inc.) ContextMenuHandlers1-x32: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers1-x32: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-21] (Microsoft Corporation) ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers2: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-08-31] (Google) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File ContextMenuHandlers5: [CTERA] -> {42782684-F29F-4425-ADFF-39050E37105E} => C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll [2017-07-30] () ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6_.DEFAULT: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ContextMenuHandlers6_S-1-5-21-477265285-3796326774-168570957-1000: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2012\Bin\DtBridge.dll [2012-04-28] (Autodesk, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1DD75536-4E63-4E50-80E7-B36DAB0B9514} - System32\Tasks\HP Officejet 7500 E910.exe_{7A224289-62E9-4164-8A10-BBA519251741} => C:\Program Files\HP\HP Officejet 7500 E910\Bin\HP Officejet 7500 E910.exe [2012-10-17] (Hewlett-Packard Co.) Task: {2D8FB6FF-2D89-4FBA-A3DD-E151FC0718FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-07] (Piriform Ltd) Task: {359743DF-C4F4-4B5A-BDB1-C769C225D2F5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) Task: {3C05BE22-B28E-4D67-8DA3-A8F4F670B703} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-29] (Microsoft Corporation) Task: {47CBF347-C597-4577-8059-5B7F67E90FB4} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-09-13] (Adobe Systems Incorporated) Task: {49C318A2-F825-4D72-90D5-D36821BFE2BC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {53537B57-5389-4174-9A32-0BE33BC17B31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {565FA271-784B-4A44-8E45-BC26918E20B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.) Task: {5C42109B-C20E-420A-A80D-E10295F733E2} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it Task: {69DDC577-8FEB-42E1-BA95-E7F7E090E94E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION Task: {95B46157-4496-43F3-87A4-ABED2369FEA7} - System32\Tasks\FaxArchive_MY46C410C105JB => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe [2012-10-17] (Hewlett-Packard Co.) Task: {AC6CC980-72EC-4020-85C0-2794B3D55CA1} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2017-03-28] () Task: {B78890A0-E350-4068-8CB0-867CACD3A73C} - System32\Tasks\{D4151361-D130-442D-9D4F-CF179981F2B0} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Desktop\mp610swin64101ej.exe -d C:\Users\Gigi\Desktop Task: {C383583B-52CC-4C7C-B544-BD77B357AAF7} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] () Task: {E10FC189-D09B-4EB8-8140-E22FAA31B48E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {EF83EEB0-295C-4A16-98D1-0874017F835C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated) Task: {FF26373D-F1BF-459B-A2BE-F1F0B66CF596} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-12-04] (Facebook Inc.) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000Core.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-477265285-3796326774-168570957-1000UA.job => C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\Windows\Tasks\FaxArchive_MY46C410C105JB.job => C:\Program Files\HP\HP Officejet 7500 E910\Bin\FaxApplications.exe ==================== Shortcuts & WMI ======================== (The entries could be listed to be restored or removed.) ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applicazioni Chrome\mydlink services plugin.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" --app-id=ldibdoepbjbkkcbgndfljnphngpglhbb ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 2" ShortcutWithArgument: C:\Users\Gigi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 1" ==================== Loaded Modules (Whitelisted) ============== 2017-07-30 14:30 - 2017-07-30 14:30 - 002335808 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CTERAShell64.dll 2017-07-30 14:30 - 2017-07-30 14:30 - 005535296 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\BackupService.exe 2017-07-30 14:30 - 2017-07-30 14:30 - 000714816 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgentWD.exe 2017-09-07 18:12 - 2017-09-07 18:12 - 000073728 _____ () C:\Program Files\CCleaner\lang\lang-1040.dll 2017-07-30 14:30 - 2017-07-30 14:30 - 001142336 _____ () C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\CteraAgent.exe 2017-10-02 08:35 - 2017-10-07 12:52 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2017-10-02 08:35 - 2017-10-07 12:52 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-09-27 05:41 - 2017-09-21 06:57 - 003011928 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll 2017-09-27 05:41 - 2017-09-21 06:57 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\sharepoint.com -> hxxps://progecasas-files.sharepoint.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2017-10-06 13:03 - 000000027 _____ C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-477265285-3796326774-168570957-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gigi\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 208.67.222.222 - 208.67.220.220 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk => C:\Windows\pss\Samsung Drive Manager Real-Time.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Gigi^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Monitora avvisi inchiostro - .lnk => C:\Windows\pss\Monitora avvisi inchiostro - .lnk.Startup MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" MSCONFIG\startupreg: AirDroid 3 => C:\Program Files (x86)\AirDroid\AirDroid.exe /start MSCONFIG\startupreg: ArcSoft Connection Service => C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe MSCONFIG\startupreg: BCSSync => "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices MSCONFIG\startupreg: Clarus Drive Manager => C:\Program Files (x86)\Clarus\Samsung Drive Manager\Drive Manager.exe -Hide MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: Facebook Update => "C:\Users\Gigi\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: GarminExpressTrayApp => "C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe" MSCONFIG\startupreg: GoogleDriveSync => "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: LWS => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide MSCONFIG\startupreg: OfficeAutoActivation => C:\Program Files (x86)\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\Startup.exe MSCONFIG\startupreg: OneDrive => "C:\Users\Gigi\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background MSCONFIG\startupreg: ProductUpdater => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe MSCONFIG\startupreg: Qsync => "C:\Program Files (x86)\QNAP\Qsync\Qsync.exe" /launch_qsync MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [TCP Query User{A4DECA09-10F0-45D8-A195-9B0966947D41}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [UDP Query User{222DEEDD-D779-4D59-AFFD-A5E369B5D8BE}C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe] => (Allow) C:\program files\hp\hp officejet 7500 e910\bin\hpnetworkcommunicator.exe FirewallRules: [TCP Query User{91FB5DA7-81FB-4392-8646-E512B7DF9422}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [UDP Query User{FFAD7286-231A-49E1-940B-75639D87D5E0}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [TCP Query User{D5962D27-5A51-4635-95D4-2B3E5F77819D}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [UDP Query User{BBABF1B7-2DF6-47AD-8C56-8A7C9BC4573F}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe FirewallRules: [{EB1817BF-7B80-4DC8-B658-300A51F247E8}] => (Block) C:\program files (x86)\emule\emule.exe FirewallRules: [{0CFDB7E8-489C-45B0-9440-2391E5F2D94F}] => (Block) C:\program files (x86)\emule\emule.exe ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Faulty Device Manager Devices ============= Name: UNTLW WDM Device Description: UNTLW WDM Device Class Guid: {8bc6ef72-6c15-11d3-ad11-00105a3a873d} Manufacturer: Schneider Automation Service: Duntlw Problem: : Windows cannot load the device driver for this hardware. The driver may be corrupted or missing. (Code 39) Resolution: Reasons for this error include a driver that is not present; a binary file that is corrupt; a file I/O problem, or a driver that references an entry point in another binary file that could not be loaded. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. ==================== Event log errors: ========================= Application errors: ================== Error: (10/09/2017 10:05:32 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/09/2017 10:01:40 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Impossibile riattivare il filtro eventi con query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" nello spazio dei nomi "//./root/CIMV2". Errore 0x80041003. Impossibile recapitare gli eventi tramite questo filtro fino alla risoluzione del problema. Error: (10/09/2017 04:05:23 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x264 Ora di avvio dell'applicazione che ha generato l'errore: 0x01d340a30686480e Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: 4ead81c1-ac96-11e7-959f-002522d892c1 Error: (10/09/2017 04:05:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: esu.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.IO.FileNotFoundException in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext() in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef) in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean) in Garmin.Omt.Service.Shared.Overrides..cctor() Informazioni sull'eccezione: System.TypeInitializationException in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl() in Garmin.Omt.Express.SelfUpdater.Program.RealMain() in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[]) Error: (10/09/2017 03:36:28 AM) (Source: SideBySide) (EventID: 9) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\TelecomItalia_Outlook\Data Space Easy\outlookAddin\adxloader.dll.Manifest", riga 2. L'elemento radice del file manifesto deve essere un assembly. Error: (10/09/2017 03:34:30 AM) (Source: SideBySide) (EventID: 35) (User: ) Description: Generazione del contesto di attivazione non riuscita per "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Errore nel file manifesto o dei criteri "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL", riga 1. L'identità del componente trovata nel manifesto non corrisponde all'identità del componente richiesto. Il riferimento è UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0". La definizione è UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0". Utilizzare sxstrace.exe per ottenere una diagnosi dettagliata. Error: (10/08/2017 04:48:06 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: FreemakeUtilsService.exe, versione: 1.0.0.0, timestamp: 0x57061917 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x78c Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33f48f30a7cd3 Percorso dell'applicazione che ha generato l'errore: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: 1bec8fb9-abd3-11e7-959f-002522d892c1 Error: (10/08/2017 04:48:00 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: FreemakeUtilsService.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.ArgumentException in System.Security.Principal.SecurityIdentifier..ctor(System.String) in FreemakeUtilsService.Common.ToolbarInstallationChecker.GetSidToUsernameDictionary() in FreemakeUtilsService.Common.ToolbarInstallationChecker.CheckInfo(FreemakeUtilsService.Common.FreemakeToolbarsInfo) in FreemakeUtilsService.Statistics.Manager.StartToolbarInfoCheck() in FreemakeUtilsService.Statistics.Manager.SettingsSyncFailed(System.Object, System.EventArgs) in FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs) in System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs) in System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object) in System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) in System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) in System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) in System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() in System.Threading.ThreadPoolWorkQueue.Dispatch() in System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() Error: (10/08/2017 03:42:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nome dell'applicazione che ha generato l'errore: esu.exe, versione: 1.0.0.0, timestamp: 0x58dac8d5 Nome del modulo che ha generato l'errore: KERNELBASE.dll, versione: 6.1.7601.23889, timestamp: 0x598d4d26 Codice eccezione: 0xe0434352 Offset errore 0x0000c54f ID processo che ha generato l'errore: 0x1008 Ora di avvio dell'applicazione che ha generato l'errore: 0x01d33fd6b3ac9ed5 Percorso dell'applicazione che ha generato l'errore: C:\Program Files (x86)\Garmin\Express SelfUpdater\esu.exe Percorso del modulo che ha generato l'errore: C:\Windows\syswow64\KERNELBASE.dll ID segnalazione: f7c39f31-abc9-11e7-959f-002522d892c1 Error: (10/08/2017 03:42:38 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Applicazione: esu.exe Versione framework: v4.0.30319 Descrizione: il processo è stato terminato a causa di un'eccezione non gestita. Informazioni sull'eccezione: System.IO.FileNotFoundException in Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61.MoveNext() in System.Runtime.CompilerServices.AsyncTaskMethodBuilder.Start[[Garmin.Omt.Service.Shared.Overrides+<UpdateDatacenterOverridesAsync>d__61, ExpressSelfUpdater, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null]](<UpdateDatacenterOverridesAsync>d__61 ByRef) in Garmin.Omt.Service.Shared.Overrides.UpdateDatacenterOverridesAsync(Boolean) in Garmin.Omt.Service.Shared.Overrides..cctor() Informazioni sull'eccezione: System.TypeInitializationException in Garmin.Omt.Service.Shared.Overrides.get_OmtBaseUrl() in Garmin.Omt.Express.SelfUpdater.Program.RealMain() in Garmin.Omt.Express.SelfUpdater.Program.Main(System.String[]) System errors: ============= Error: (10/09/2017 10:05:15 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della risposta alla transazione dal servizio ShellHWDetection. Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio Garmin Device Interaction Service non è stato avviato per il seguente errore: Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto. Error: (10/09/2017 10:00:45 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Garmin Device Interaction Service. Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Il servizio Freemake Improver non è stato avviato per il seguente errore: Il servizio non ha risposto alla richiesta di avvio o controllo nel tempo previsto. Error: (10/09/2017 10:00:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Timeout (30000 millisecondi) durante l'attesa della connessione del servizio Freemake Improver. Error: (10/08/2017 04:48:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Arresto imprevista del servizio Freemake Improver. Questo evento si è già verificato 1 volta(e). Error: (10/07/2017 11:08:55 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:53 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:52 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. Error: (10/07/2017 11:08:50 AM) (Source: Disk) (EventID: 7) (User: ) Description: Rilevato blocco danneggiato sul dispositivo \Device\Harddisk0\DR0. CodeIntegrity: =================================== Date: 2017-10-06 12:58:44.248 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. Date: 2017-10-06 12:58:44.060 Description: Impossibile verificare l'integrità dell'immagine del file \Device\HarddiskVolume2\ComboFix\catchme.sys. Impossibile trovare l'hash del file nel sistema. Causa possibile: installazione di un file danneggiato o con firma non corretta in seguito a una modifica hardware o software o malware di origine sconosciuta. ==================== Memory info =========================== Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics Percentage of memory in use: 70% Total physical RAM: 2025.64 MB Available physical RAM: 593.97 MB Total Virtual: 4051.29 MB Available Virtual: 1485.25 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:111.87 GB) (Free:21.65 GB) NTFS Drive d: (Dati) (Fixed) (Total:353.8 GB) (Free:115.85 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E0A4E53B) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=353.8 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================ |
09-10-2017, 12:13 | #12 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Scusa non avevo visto i report...
Appena posso li controllo e seguiranno istruzioni... |
09-10-2017, 18:25 | #13 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Ciao
Disinstalla combofix Per disinstallare ComboFix da Windows7: Cliccca su Start e nel campo Cerca Programmi e file inserite combofix /uninstall ( notare lo spazio tra combofix e /uninstall ) Fatto questo, premi Invio. Comparirà un avviso di protezione che chiederà se volete eseguire ComboFix. Clicca su Esegui per avviare la disinstallazione. ComboFix verrà disinstallato dal computer e rimuoverà i backups ed i files in quarantena e, terminato il processo di disinstallazione, comparirà un messaggio che indicherà che ComboFix è stato disinstallato. A questo puoi cancellare il file ComboFix.exe. Dai log risulta il system restore disabilitato: ATTENTION: System Restore is disabled Riabilita il system restore: Vai su Start, Pannello di controllo, Sistema e sicurezza > Sistema) e clic su Protezione sistema a sinistra: Seleziona l'unità disco, e fa clic su Configura..., Nella finestra seguente: metti la spunta su: ripristina inpostazioni del sistema e versioni precedenti dei file clicca su applica e poi su ok.. Poi posiziona frst sul desktop assieme al file allegato in fondo al post fixlist.txt (mi raccomando mettili sul desktop) Tasto dx sopra frst-->esegui come amministratore Clicca sul pulsante FIX Attendi che finisca e che il pc si riavvii (se non si riavvia fallo te) Posta il file scaturito fixlog.txt (lo trovi sul desktop) Fai pulizia con ccleaner sia sistema che registro resetta i browser vedi qui http://it.ccm.net/faq/1767-come-ripristinare-il-browser Poi prova a effettuare un avvio pulito di windows: 1.Clicca su Start > 2. Digitare : msconfig e dare invio nel box di ricerca del menu start. Andare alla sezione Avvio. Togliere tutte le spunte meno quelle relative all'antivirus (Se è Microsoft Security Essentials) Dare ok. Non riavviare. 3. Riaprire msconfig e cliccare sulla sezione Servizi. Mettere la spunta nell apposita casella per nascondere tutti i servizi Microsoft (Attenzione , i servizi Microsoft vanno nascosti e non toccati) Disabilitare tutti gli altri. Dare ok. Non riavviare. 4. Andare in C:\windows\prefetch. Cancellare tutti i file (compresa la cartella ReadyBoot che verrà ricreata) meno il file layout.ini che non va toccato (il file è nascosto e quindi potrebbe non essere visibile). 5. Andare in C:\windows\temp. Cancellare tutti i file cancellabili (molti file potrebbero essere in uso e quindi non possono essere eliminati quindi vanno mantenuti). 6. Pannello di controllo > opzioni internet , cliccare su Elimina per ripulire I Temporanei e la Cronologia. Dare ok. 7. Vuotare il cestino e riavviare. A questo punto esegui verifica se ci sono miglioramenti... Fai sapere Ciao Ultima modifica di Dan1979 : 09-10-2017 alle 20:25. |
10-10-2017, 08:51 | #14 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
fatto tutto tranne disinstallare combofix....non lo trova
Fix result of Farbar Recovery Scan Tool (x64) Version: 08-10-2017 Ran by Gigi (10-10-2017 09:00:04) Run:1 Running from C:\Users\Gigi\Desktop Loaded Profiles: Gigi & (Available Profiles: Gigi) Boot Mode: Normal ============================================== fixlist content: ***************** start CreateRestorePoint: EmptyTemp: CloseProcesses: HKU\S-1-5-21-477265285-3796326774-168570957-1000\...\Policies\Explorer: [] HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = Toolbar: HKU\S-1-5-21-477265285-3796326774-168570957-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] CHR HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx S3 AsrCDDrv; \??\C:\Windows\SysWOW64\Drivers\AsrCDDrv.sys [X] S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 Duntlw; System32\Drivers\DuntlwNT.sys [X] S3 QDrive; \??\C:\Users\Gigi\AppData\Local\Temp\QDrive.sys [X] <==== ATTENTION 2017-10-06 13:20 - 2017-10-06 13:20 - 000029421 _____ C:\ComboFix.txt 2017-10-06 12:45 - 2011-06-26 08:45 - 000256000 _____ C:\Windows\PEV.exe 2017-10-06 12:45 - 2010-11-07 19:20 - 000208896 _____ C:\Windows\MBR.exe 2017-10-06 12:45 - 2009-04-20 06:56 - 000060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000098816 _____ C:\Windows\sed.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000080412 _____ C:\Windows\grep.exe 2017-10-06 12:45 - 2000-08-31 02:00 - 000068096 _____ C:\Windows\zip.exe 2017-10-06 12:44 - 2017-10-06 13:20 - 000000000 ____D C:\Qoobox 2017-10-06 12:43 - 2017-10-06 13:14 - 000000000 ____D C:\Windows\erdnt 2017-10-02 12:36 - 2017-10-02 12:37 - 000001018 _____ C:\DelFix.txt 2017-10-02 12:36 - 2017-10-02 12:36 - 000000000 ____D C:\Windows\ERUNT 2017-10-07 10:32 - 2017-10-07 10:32 - 006134400 _____ (ESET) C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp 2017-09-26 08:26 - 2017-10-02 08:04 - 000000000 ____D C:\Users\Gigi\AppData\Local\ESET 2016-01-18 16:00 - 2016-02-19 17:56 - 000003584 _____ () C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => No File CustomCLSID: HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => No File ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> No File Task: {5D09808C-5B26-433E-B62B-8420AEE5F1C6} - System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\Downloads\lide60vst6411111a_64it\SetupSG.exe -d C:\Users\Gigi\Downloads\lide60vst6411111a_64it Task: {7AAD6B62-AADF-4C68-9723-9A2E76F42C37} - System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => C:\Windows\system32\pcalua.exe -a C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip\VijeoDesignerLite13.part01.exe <==== ATTENTION AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939 [114] C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip HOSTS: Removeproxy: CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: ipconfig /flushdns CMD: netsh winsock reset catalog CMD: netsh int ip reset C:\resettcpip.txt CMD: FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" CMD: Bitsadmin /Reset /Allusers Reboot: End ***************** Restore point was successfully created. Processes closed successfully. HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => value removed successfully HKLM\Software\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => key not found. HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => key removed successfully CHR Extension: (Pagamenti Chrome Web Store) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-28] => Error: No automatic fix found for this entry. CHR Extension: (Chrome Media Router) - C:\Users\Gigi\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-09-27] => Error: No automatic fix found for this entry. HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Google\Chrome\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh => key removed successfully HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk => key removed successfully HKLM\System\CurrentControlSet\Services\AsrCDDrv => key removed successfully AsrCDDrv => service removed successfully HKLM\System\CurrentControlSet\Services\catchme => key removed successfully catchme => service removed successfully HKLM\System\CurrentControlSet\Services\Duntlw => key removed successfully Duntlw => service removed successfully HKLM\System\CurrentControlSet\Services\QDrive => key removed successfully QDrive => service removed successfully "C:\ComboFix.txt" => not found. "C:\Windows\PEV.exe" => not found. "C:\Windows\MBR.exe" => not found. "C:\Windows\NIRCMD.exe" => not found. "C:\Windows\SWREG.exe" => not found. "C:\Windows\SWSC.exe" => not found. "C:\Windows\sed.exe" => not found. "C:\Windows\grep.exe" => not found. "C:\Windows\zip.exe" => not found. "C:\Qoobox" => not found. C:\Windows\erdnt => moved successfully C:\DelFix.txt => moved successfully C:\Windows\ERUNT => moved successfully C:\Users\Gigi\Downloads\f7465315-d6d7-4b4a-80f1-f6e82055cecc.tmp => moved successfully C:\Users\Gigi\AppData\Local\ESET => moved successfully C:\Users\Gigi\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini => moved successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220} => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1} => key removed successfully HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => key removed successfully HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} => key not found. HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => key removed successfully HKLM\Software\Classes\CLSID\{0229E5E7-09E9-45CF-9228-0228EC7D5F17} => key not found. HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ACE => key removed successfully HKLM\Software\Classes\CLSID\{5E2121EE-0300-11D4-8D3B-444553540000} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5D09808C-5B26-433E-B62B-8420AEE5F1C6} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D09808C-5B26-433E-B62B-8420AEE5F1C6} => key removed successfully C:\Windows\System32\Tasks\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F17AD937-52AF-41F6-8523-41C9FB4B7377} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7AAD6B62-AADF-4C68-9723-9A2E76F42C37} => key removed successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7AAD6B62-AADF-4C68-9723-9A2E76F42C37} => key removed successfully C:\Windows\System32\Tasks\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => moved successfully HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{AA34CAA6-2810-416D-9C2D-A6BC38ADE87A} => key removed successfully C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully. "C:\Users\Gigi\AppData\Local\Temp\Temp1_Readme_VijeoDesignerLite13.zip" => not found. Could not move "C:\Windows\System32\Drivers\etc\hosts" => Scheduled to move on reboot. ========= RemoveProxy: ========= HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Policies\Microsoft\Internet Explorer => key removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully HKU\S-1-5-21-477265285-3796326774-168570957-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10102017020005363\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully ========= End of RemoveProxy: ========= ========= netsh advfirewall reset ========= OK. ========= End of CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= OK. ========= End of CMD: ========= ========= ipconfig /flushdns ========= Configurazione IP di Windows Cache del resolver DNS svuotata. ========= End of CMD: ========= ========= netsh winsock reset catalog ========= Reimpostazione catalogo Winsock completata. Ô necessario riavviare il computer per completare l'operazione. ========= End of CMD: ========= ========= netsh int ip reset C:\resettcpip.txt ========= Reimpostazione di Globale in corso. Completata. Reimpostazione di Interfaccia in corso. Completata. Riavviare il computer per completare l'azione. ========= End of CMD: ========= ========= FOR /F "usebackq delims==" %i IN (`wevtutil el`) DO wevtutil cl "%i" ========= ========= End of CMD: ========= ========= Bitsadmin /Reset /Allusers ========= BITSADMIN version 3.0 [ 7.5.7601 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. 0 out of 0 jobs canceled. ========= End of CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 8388608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 8171085 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 359848 B Edge => 0 B Chrome => 284321015 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Users => 0 B Default => 0 B Public => 0 B ProgramData => 0 B systemprofile => 0 B systemprofile32 => 128 B LocalService => 0 B NetworkService => 0 B Gigi => 9299885 B RecycleBin => 1729088 B EmptyTemp: => 297.8 MB temporary data Removed. ================================ Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 10-10-2017 09:15:15) "C:\Windows\System32\Drivers\etc\hosts" => Could not move Could not restore Hosts. ==== End of Fixlog 09:15:16 ==== |
10-10-2017, 09:20 | #15 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Combofix lo hai provato a eliminare prima o dopo aver eseguito il fix???
Non importa comunque ci ho pensato io con il fix... Il pc come va adesso??? E' piu veloce??? Hai eseguito anche l avvio pulito?? Comunque quando hai eseguito crystaldisk che valori erano in giallo??: i problemi Crystal te li mostra in GIALLO o ROSSO . Quelli più critici sono il 05 ed il C5 , il C4 è dipendente da questi due. Complessivamente il report dei valori SMART dice ha rischio, quindi vuol dire che l hd non è piu tanto performante.... Anche quello puo incidere sulla velocita... Se non riscontri piu problemi seguiranno pulizie dei programmi usati per fare le scansioni... Ciao Ultima modifica di Dan1979 : 10-10-2017 alle 09:41. |
10-10-2017, 09:32 | #16 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
provato prima del fix
va molto meglio ...solo che ho notato che autocad e anche inventor non sia apre più si ho eseguito anche l'avvio pulito si il pulsante era giallo a rischio Ultima modifica di speed73 : 10-10-2017 alle 09:35. |
10-10-2017, 09:52 | #17 |
Member
Iscritto dal: Jun 2017
Messaggi: 175
|
Che errore riscontri??
Prova a fare l avvio pulito all incontarrio ,cioè riabilita tutto!!! Ultima modifica di Dan1979 : 10-10-2017 alle 10:07. |
10-10-2017, 10:01 | #18 |
Member
Iscritto dal: Jan 2005
Città: Boscoreale
Messaggi: 147
|
parte sia autocad che inventor...ma non si aprono
ok ora provo Ultima modifica di speed73 : 10-10-2017 alle 10:10. |
Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 13:55.