Searchfst e log hijiackthis [Archivio]

Nicky

03-11-2004, 13:54

Una mia amica ha un problema...
Quando digita un url sbagliato viene rimandata a questo link: http://searchfst.com/keyword.php?installID=nome-3giu5ksm471098882111&keyword=/dnserror.htm e a quanto pare ogni tanto si aprono pop-up che rimandano a quel sito..

Le ho chiesto di fare un log con hijackthis per aiutarla..ho capito più o meno il problema, ma siccome è incasinatissimo voglio avere la certezza di non farle eliminare cose utili.

Chi mi può dare una mano?

Il log è questo:

Logfile of HijackThis v1.97.7
Scan saved at 14.36.36, on 03/11/2004
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\khooker.exe
C:\PROGRA~1\Grisoft\AVG6\avgserv.exe
C:\windows\redirect9.exe
C:\Programmi\WIDCOMM\Software Bluetooth\bin\btwdins.exe
C:\Programmi\Common files\updater\wupdater.exe
C:\Programmi\QuickTime\qttask.exe
C:\WINDOWS\System32\oahcapht.exe
C:\Programmi\Messenger Plus! 3\MsgPlus.exe
C:\Programmi\Winamp\winampa.exe
C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\PROGRA~1\FILECO~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\windows\180ax.exe
C:\Programmi\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programmi\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\FILECO~1\PCSuite\Services\SERVIC~1.EXE
C:\Programmi\OEM\Quick Button XP\QuickPB.exe
C:\Programmi\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Programmi\WIDCOMM\Software Bluetooth\BTTray.exe
C:\PROGRA~1\WIDCOMM\SOFTWA~1\BTSTAC~1.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\Soulseek\slsk.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Documents and Settings\Am\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://server224.smartbotpro.net/7search/?hklm
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.e-geo.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://searchbar.findthewebsiteyouneed.com/
R3 - URLSearchHook: (no name) - {CA0E28FA-1AFD-4C21-A8DC-70EB5BE2F076} - (no file)
O1 - Hosts: 80.69.74.15 auto.search.msn.com
O2 - BHO: (no name) - {000277A3-7D84-406a-9799-D12A81594693} - C:\WINDOWS\srchfst.dll
O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {291447BF-9732-9F64-59BB-5C3BE734F704} - C:\WINDOWS\System32\kqgmfrcw.dll
O2 - BHO: (no name) - {66E391D7-9566-F334-B90F-ECBD400605A7} - C:\WINDOWS\System32\dsgzmyog.dll
O2 - BHO: (no name) - {9C650F46-873C-E737-8BDD-F25DFEA44A34} - C:\WINDOWS\System32\lfluspzo.dll
O2 - BHO: (no name) - {A54FE615-DD27-449D-E593-22E84E953969} - C:\WINDOWS\System32\phcxrjsj.dll
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programmi\google\googletoolbar2.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Programmi\MSN Toolbar\01.01.1601.0\it\msntb.dll (file missing)
O3 - Toolbar: Searchfst Class - {000277A3-7D84-406a-9799-D12A81594693} - C:\WINDOWS\srchfst.dll
O3 - Toolbar: Games toolbar - {02ffc86e-283e-4faa-95d6-addca024f30a} - C:\Programmi\Games\tbGame.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programmi\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SiS KHooker] C:\WINDOWS\System32\khooker.exe
O4 - HKLM\..\Run: [zzzsfond001] c:\windows\sfondi[1].exe r
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [P2P Networking] C:\WINDOWS\System32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [redirect] C:\windows\redirect9.exe
O4 - HKLM\..\Run: [updater] C:\Programmi\Common files\updater\wupdater.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.c] c:\WINDOWS\System32\<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.com">
O4 - HKLM\..\Run: [<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#000] c:\WINDOWS\System32\<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#0000ff>
O4 - HKLM\..\Run: [ <td background="http://parked.directnic.com/images/top_bg.gif"><a href="http://directnic.com"><img src="http://parked.directnic.com/images/dnic.gif" width="372" height="41" border="0"></a><] c:\WINDOWS\System32\ <td background="http://parked.directnic.com/images/top_bg.gif"><a href="http://directnic.com"><img src="http://parked.directnic.com/images/dnic.gif" width="372" height="41" border="0"></a></td>
O4 - HKLM\..\Run: [ <td align="right" background="http://parked.directnic.com/images/top_bg.gif" class="head">beneditutti.com is under construction.<] c:\WINDOWS\System32\ <td align="right" background="http://parked.directnic.com/images/top_bg.gif" class="head">beneditutti.com is under construction.</td>
O4 - HKLM\..\Run: [ <td align="left" background="http://parked.directnic.com/images/btm_bg.gif" class="wtext"><img src="http://parked.directnic.com/images/btm_lt.gif" width="24" height="25" align="absmiddle"><] c:\WINDOWS\System32\ <td align="left" background="http://parked.directnic.com/images/btm_bg.gif" class="wtext"><img src="http://parked.directnic.com/images/btm_lt.gif" width="24" height="25" align="absmiddle"></td>
O4 - HKLM\..\Run: [ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfie] c:\WINDOWS\System32\ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfield">
O4 - HKLM\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+hosting&host=beneditutti.com&cat=1">Web Hosting</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+hosting&host=beneditutti.com&cat=1">Web Hosting</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+design&host=beneditutti.com&cat=1">Web Design</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+design&host=beneditutti.com&cat=1">Web Design</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer&host=beneditutti.com&cat=1">Computer</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer&host=beneditutti.com&cat=1">Computer</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+hardware&host=beneditutti.com&cat=1">Computer Hardware</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+hardware&host=beneditutti.com&cat=1">Computer Hardware</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=software&host=beneditutti.com&cat=1">Software</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=software&host=beneditutti.com&cat=1">Software</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+game&host=beneditutti.com&cat=1">Computer Game</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+game&host=beneditutti.com&cat=1">Computer Game</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=adventure+travel&host=beneditutti.com&cat=1">Adventure Travel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=adventure+travel&host=beneditutti.com&cat=1">Adventure Travel</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=vacation&host=beneditutti.com&cat=1">Vacation</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=vacation&host=beneditutti.com&cat=1">Vacation</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=airline+ticket&host=beneditutti.com&cat=1">Airline Ticket</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=airline+ticket&host=beneditutti.com&cat=1">Airline Ticket</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=craft&host=beneditutti.com&cat=1">Craft</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=craft&host=beneditutti.com&cat=1">Craft</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=cooking&host=beneditutti.com&cat=1">Cooking</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=cooking&host=beneditutti.com&cat=1">Cooking</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+decorating&host=beneditutti.com&cat=1">Home Decorating</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+decorating&host=beneditutti.com&cat=1">Home Decorating</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=sports&host=beneditutti.com&cat=1">Sports</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=sports&host=beneditutti.com&cat=1">Sports</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gambling&host=beneditutti.com&cat=1">Gambling</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gambling&host=beneditutti.com&cat=1">Gambling</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=movie&host=beneditutti.com&cat=1">Movie</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=movie&host=beneditutti.com&cat=1">Movie</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=music&host=beneditutti.com&cat=1">Music</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=music&host=beneditutti.com&cat=1">Music</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=game&host=beneditutti.com&cat=1">Game</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=game&host=beneditutti.com&cat=1">Game</a> 
O4 - HKLM\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=loan&host=beneditutti.com&cat=1">Loan</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=loan&host=beneditutti.com&cat=1">Loan</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=investing&host=beneditutti.com&cat=1">Investing</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=investing&host=beneditutti.com&cat=1">Investing</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=insurance&host=beneditutti.com&cat=1">Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=insurance&host=beneditutti.com&cat=1">Insurance</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=credit+card&host=beneditutti.com&cat=1">Credit Card</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=credit+card&host=beneditutti.com&cat=1">Credit Card</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=stock&host=beneditutti.com&cat=1">Stock</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=stock&host=beneditutti.com&cat=1">Stock</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=real+estate&host=beneditutti.com&cat=1">Real Estate</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=real+estate&host=beneditutti.com&cat=1">Real Estate</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+basket&host=beneditutti.com&cat=1">Gift Basket</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+basket&host=beneditutti.com&cat=1">Gift Basket</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+certificate&host=beneditutti.com&cat=1">Gift Certificate</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+certificate&host=beneditutti.com&cat=1">Gift Certificate</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=flower&host=beneditutti.com&cat=1">Flower</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=flower&host=beneditutti.com&cat=1">Flower</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=wedding+gift&host=beneditutti.com&cat=1">Wedding Gift</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=wedding+gift&host=beneditutti.com&cat=1">Wedding Gift</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=wine&host=beneditutti.com&cat=1">Wine</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=wine&host=beneditutti.com&cat=1">Wine</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=jewelry&host=beneditutti.com&cat=1">Jewelry</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=jewelry&host=beneditutti.com&cat=1">Jewelry</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1">Gift</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1">Gift</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=car&host=beneditutti.com&cat=1">Car</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=car&host=beneditutti.com&cat=1">Car</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=book&host=beneditutti.com&cat=1">Book</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=book&host=beneditutti.com&cat=1">Book</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=electronics&host=beneditutti.com&cat=1">Electronics</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=electronics&host=beneditutti.com&cat=1">Electronics</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=toy&host=beneditutti.com&cat=1">Toy</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=toy&host=beneditutti.com&cat=1">Toy</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&cat=1" class="wheader">Home</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+loan&host=beneditutti.com&cat=1">Home Loan</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+loan&host=beneditutti.com&cat=1">Home Loan</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+improvement&host=beneditutti.com&cat=1">Home Improvement</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+improvement&host=beneditutti.com&cat=1">Home Improvement</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+buying&host=beneditutti.com&cat=1">Home Buying</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+buying&host=beneditutti.com&cat=1">Home Buying</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=interior+design&host=beneditutti.com&cat=1">Interior Design</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=interior+design&host=beneditutti.com&cat=1">Interior Design</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=pets&host=beneditutti.com&cat=1">Pets</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=pets&host=beneditutti.com&cat=1">Pets</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&cat=1" class="wheader">Health</a></td>
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=life+insurance&host=beneditutti.com&cat=1">Life Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=life+insurance&host=beneditutti.com&cat=1">Life Insurance</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=health+insurance&host=beneditutti.com&cat=1">Health Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=health+insurance&host=beneditutti.com&cat=1">Health Insurance</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=weight+loss&host=beneditutti.com&cat=1">Weight Loss</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=weight+loss&host=beneditutti.com&cat=1">Weight Loss</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=nutrition&host=beneditutti.com&cat=1">Nutrition</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=nutrition&host=beneditutti.com&cat=1">Nutrition</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a> 
O4 - HKLM\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=womens+health&host=beneditutti.com&cat=1">Womens Health</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=womens+health&host=beneditutti.com&cat=1">Womens Health</a> </td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.directnic.com/images/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.directnic.com/images/spacer.gif" height=1 width=174></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel</a></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing</A></td>
O4 - HKLM\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies</A></td>
O4 - HKLM\..\Run: [oahcapht] C:\WINDOWS\System32\oahcapht.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Programmi\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Programmi\Winamp\winampa.exe
O4 - HKLM\..\Run: [AVG_CC] C:\PROGRA~1\Grisoft\AVG6\avgcc32.exe /STARTUP
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\FILECO~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [180ax] c:\windows\180ax.exe
O4 - HKLM\..\Run: [cfixkj] C:\WINDOWS\cfixkj.exe
O4 - HKLM\..\Run: [SrchfstUpdate] C:\WINDOWS\srchupdt.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Internet Washer Pro] C:\PROGRA~1\INTERN~2\iw.exe min
O4 - HKCU\..\Run: [<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.c] c:\WINDOWS\System32\<meta name="description" content="beneditutti.com is under construction. This page is courtesy of directNIC.com">
O4 - HKCU\..\Run: [<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#000] c:\WINDOWS\System32\<BODY TOPMARGIN="0" LEFTMARGIN="0" MARGINHEIGHT="0" MARGINWIDTH="0" BGCOLOR="#FFFFFF" TEXT="#000000" vLink=#0000ff>
O4 - HKCU\..\Run: [ <td background="http://parked.directnic.com/images/top_bg.gif"><a href="http://directnic.com"><img src="http://parked.directnic.com/images/dnic.gif" width="372" height="41" border="0"></a><] c:\WINDOWS\System32\ <td background="http://parked.directnic.com/images/top_bg.gif"><a href="http://directnic.com"><img src="http://parked.directnic.com/images/dnic.gif" width="372" height="41" border="0"></a></td>
O4 - HKCU\..\Run: [ <td align="right" background="http://parked.directnic.com/images/top_bg.gif" class="head">beneditutti.com is under construction.<] c:\WINDOWS\System32\ <td align="right" background="http://parked.directnic.com/images/top_bg.gif" class="head">beneditutti.com is under construction.</td>
O4 - HKCU\..\Run: [ <td align="left" background="http://parked.directnic.com/images/btm_bg.gif" class="wtext"><img src="http://parked.directnic.com/images/btm_lt.gif" width="24" height="25" align="absmiddle"><] c:\WINDOWS\System32\ <td align="left" background="http://parked.directnic.com/images/btm_bg.gif" class="wtext"><img src="http://parked.directnic.com/images/btm_lt.gif" width="24" height="25" align="absmiddle"></td>
O4 - HKCU\..\Run: [ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfie] c:\WINDOWS\System32\ <td align="center" class=search>search the web: <input type=text name="Keywords" value="" class="textfield">
O4 - HKCU\..\Run: [ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&cat=1" class="wheader">Computing</a><] c:\WINDOWS\System32\ <td bgcolor="#333333" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&cat=1" class="wheader">Computing</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+hosting&host=beneditutti.com&cat=1">Web Hosting</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+hosting&host=beneditutti.com&cat=1">Web Hosting</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+design&host=beneditutti.com&cat=1">Web Design</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=web+design&host=beneditutti.com&cat=1">Web Design</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer&host=beneditutti.com&cat=1">Computer</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer&host=beneditutti.com&cat=1">Computer</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+hardware&host=beneditutti.com&cat=1">Computer Hardware</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+hardware&host=beneditutti.com&cat=1">Computer Hardware</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=software&host=beneditutti.com&cat=1">Software</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=software&host=beneditutti.com&cat=1">Software</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+game&host=beneditutti.com&cat=1">Computer Game</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=computer+game&host=beneditutti.com&cat=1">Computer Game</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1" class="wheader">Travel</a><] c:\WINDOWS\System32\ <td bgcolor="#99CC66" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1" class="wheader">Travel</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=adventure+travel&host=beneditutti.com&cat=1">Adventure Travel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=adventure+travel&host=beneditutti.com&cat=1">Adventure Travel</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=vacation&host=beneditutti.com&cat=1">Vacation</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=vacation&host=beneditutti.com&cat=1">Vacation</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=airline+ticket&host=beneditutti.com&cat=1">Airline Ticket</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=airline+ticket&host=beneditutti.com&cat=1">Airline Ticket</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=hotel&host=beneditutti.com&cat=1">Hotel</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&cat=1">Travel</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=map&host=beneditutti.com&cat=1">Map</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&cat=1" class="wheader">Hobbies</a><] c:\WINDOWS\System32\ <td bgcolor="#00CC99" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&cat=1" class="wheader">Hobbies</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=craft&host=beneditutti.com&cat=1">Craft</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=craft&host=beneditutti.com&cat=1">Craft</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=cooking&host=beneditutti.com&cat=1">Cooking</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=cooking&host=beneditutti.com&cat=1">Cooking</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+decorating&host=beneditutti.com&cat=1">Home Decorating</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+decorating&host=beneditutti.com&cat=1">Home Decorating</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=sports&host=beneditutti.com&cat=1">Sports</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=sports&host=beneditutti.com&cat=1">Sports</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&cat=1" class="wheader">Entertainment</a><] c:\WINDOWS\System32\ <td bgcolor="#999999" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&cat=1" class="wheader">Entertainment</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gambling&host=beneditutti.com&cat=1">Gambling</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gambling&host=beneditutti.com&cat=1">Gambling</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=movie&host=beneditutti.com&cat=1">Movie</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=movie&host=beneditutti.com&cat=1">Movie</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=music&host=beneditutti.com&cat=1">Music</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=music&host=beneditutti.com&cat=1">Music</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=game&host=beneditutti.com&cat=1">Game</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=game&host=beneditutti.com&cat=1">Game</a> 
O4 - HKCU\..\Run: [ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&cat=1" class="wheader">Finance</a><] c:\WINDOWS\System32\ <td bgcolor="#990000" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&cat=1" class="wheader">Finance</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=loan&host=beneditutti.com&cat=1">Loan</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=loan&host=beneditutti.com&cat=1">Loan</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=investing&host=beneditutti.com&cat=1">Investing</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=investing&host=beneditutti.com&cat=1">Investing</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=insurance&host=beneditutti.com&cat=1">Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=insurance&host=beneditutti.com&cat=1">Insurance</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=credit+card&host=beneditutti.com&cat=1">Credit Card</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=credit+card&host=beneditutti.com&cat=1">Credit Card</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=stock&host=beneditutti.com&cat=1">Stock</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=stock&host=beneditutti.com&cat=1">Stock</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=real+estate&host=beneditutti.com&cat=1">Real Estate</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=real+estate&host=beneditutti.com&cat=1">Real Estate</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1" class="wheader">Gifts</a><] c:\WINDOWS\System32\ <td bgcolor="#3399FF" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1" class="wheader">Gifts</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+basket&host=beneditutti.com&cat=1">Gift Basket</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+basket&host=beneditutti.com&cat=1">Gift Basket</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+certificate&host=beneditutti.com&cat=1">Gift Certificate</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift+certificate&host=beneditutti.com&cat=1">Gift Certificate</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=flower&host=beneditutti.com&cat=1">Flower</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=flower&host=beneditutti.com&cat=1">Flower</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=wedding+gift&host=beneditutti.com&cat=1">Wedding Gift</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=wedding+gift&host=beneditutti.com&cat=1">Wedding Gift</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=wine&host=beneditutti.com&cat=1">Wine</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=wine&host=beneditutti.com&cat=1">Wine</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=jewelry&host=beneditutti.com&cat=1">Jewelry</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=jewelry&host=beneditutti.com&cat=1">Jewelry</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&cat=1" class="wheader">Shopping</a><] c:\WINDOWS\System32\ <td bgcolor="#FF6600" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&cat=1" class="wheader">Shopping</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1">Gift</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&cat=1">Gift</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=car&host=beneditutti.com&cat=1">Car</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=car&host=beneditutti.com&cat=1">Car</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=book&host=beneditutti.com&cat=1">Book</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=book&host=beneditutti.com&cat=1">Book</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=electronics&host=beneditutti.com&cat=1">Electronics</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=electronics&host=beneditutti.com&cat=1">Electronics</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=toy&host=beneditutti.com&cat=1">Toy</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=toy&host=beneditutti.com&cat=1">Toy</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&cat=1" class="wheader">Home</a><] c:\WINDOWS\System32\ <td bgcolor="#333399" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&cat=1" class="wheader">Home</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+loan&host=beneditutti.com&cat=1">Home Loan</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+loan&host=beneditutti.com&cat=1">Home Loan</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+improvement&host=beneditutti.com&cat=1">Home Improvement</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+improvement&host=beneditutti.com&cat=1">Home Improvement</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+buying&host=beneditutti.com&cat=1">Home Buying</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=home+buying&host=beneditutti.com&cat=1">Home Buying</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=interior+design&host=beneditutti.com&cat=1">Interior Design</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=interior+design&host=beneditutti.com&cat=1">Interior Design</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=pets&host=beneditutti.com&cat=1">Pets</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=pets&host=beneditutti.com&cat=1">Pets</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=gardening&host=beneditutti.com&cat=1">Gardening</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&cat=1" class="wheader">Health</a><] c:\WINDOWS\System32\ <td bgcolor="#FF0033" valign=top height="16"><a href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&cat=1" class="wheader">Health</a></td>
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=life+insurance&host=beneditutti.com&cat=1">Life Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=life+insurance&host=beneditutti.com&cat=1">Life Insurance</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=health+insurance&host=beneditutti.com&cat=1">Health Insurance</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=health+insurance&host=beneditutti.com&cat=1">Health Insurance</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=weight+loss&host=beneditutti.com&cat=1">Weight Loss</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=weight+loss&host=beneditutti.com&cat=1">Weight Loss</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=nutrition&host=beneditutti.com&cat=1">Nutrition</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=nutrition&host=beneditutti.com&cat=1">Nutrition</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a>] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=fitness&host=beneditutti.com&cat=1">Fitness</a> 
O4 - HKCU\..\Run: [ __·_<a href="http://parked.directnic.com/result.php?Keywords=womens+health&host=beneditutti.com&cat=1">Womens Health</a> <] c:\WINDOWS\System32\ __·_<a href="http://parked.directnic.com/result.php?Keywords=womens+health&host=beneditutti.com&cat=1">Womens Health</a> </td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=finance&host=beneditutti.com&side=1" class=category>Finance</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#D3DBE4><img src="http://parked.directnic.com/images/spacer.gif" height=1 width=174><] c:\WINDOWS\System32\ <td bgcolor=#D3DBE4><img src="http://parked.directnic.com/images/spacer.gif" height=1 width=174></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel</a><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><a href="http://parked.directnic.com/result.php?Keywords=travel&host=beneditutti.com&side=1" class="category">Travel</a></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=gift&host=beneditutti.com&side=1" class=category>Gifts</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=home&host=beneditutti.com&side=1" class=category>Home</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=health&host=beneditutti.com&side=1" class=category>Health</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=entertainment&host=beneditutti.com&side=1" class=category>Entertainment</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=shopping&host=beneditutti.com&side=1" class=category>Shopping</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=computing&host=beneditutti.com&side=1" class=category>Computing</A></td>
O4 - HKCU\..\Run: [ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies</A><] c:\WINDOWS\System32\ <td bgcolor=#F4F6F8 onMouseover="this.style.backgroundColor='#CCCCCC'" onMouseout="this.style.backgroundColor='#F4F6F8'"><img src="http://parked.directnic.com/images/arrow.gif" width=4 height=7 hspace=12 vspace=7 align=absmiddle><A href="http://parked.directnic.com/result.php?Keywords=hobby&host=beneditutti.com&side=1" class=category>Hobbies</A></td>
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Programmi\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: TipicIM.lnk = C:\Documents and Settings\Am\Desktop\TipicIM\TipicIM.exe
O4 - Global Startup: QuickPB.lnk = C:\Programmi\OEM\Quick Button XP\QuickPB.exe
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Programmi\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Controllo del Calendario di Ulead Photo Express.lnk = C:\Documents and Settings\Am\Desktop\ulead\CalCheck.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: &Google Search - res://c:\programmi\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Collegamenti a ritroso - res://c:\programmi\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Invia a &Bluetooth - C:\Programmi\WIDCOMM\Software Bluetooth\btsendto_ie_ctx.htm
O8 - Extra context menu item: Pagine simili - res://c:\programmi\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Versione cache della pagina - res://c:\programmi\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: @btrez.dll,-4015 (HKLM)
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 (HKLM)
O9 - Extra button: Messenger (HKLM)
O9 - Extra 'Tools' menuitem: Messenger (HKLM)
O9 - Extra button: Portale Diete (HKLM)
O9 - Extra 'Tools' menuitem: Portale Diete (HKLM)
O14 - IERESET.INF: START_PAGE_URL=http://www.e-geo.net
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://www.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab30149.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {79849612-A98F-45B8-95E9-4D13C7B6B35C} (Loader2 Control) - http://static.topconverting.com/activex/loader2.ocx
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab30149.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7BBA3CD8-2826-4692-9BD6-B4DC2EF573DC}: NameServer = 80.19.114.21 151.99.125.1

wgator

03-11-2004, 17:17

Ciao,

spero comprenderai che analizzare un log del genere (lunghissimo ed intricato) ci vorrebbe mezza giornata :eek:

Ho comunque notato parecchi spyware.
Il mio consiglio: innanzitutto scarica la versione più recente di hijackthis (http://www.majorgeeks.com/download3155.html) poi posta un nuovo log

Prima però fai una scansione con la versione trial di spysweeper (http://www.spyware-removal.com/free-spyware-removal.html) così ti leva un bel po' di schifezze ed io (o chiunque altro) faccio prima ad interpretare il log

Quando fai il prossimo log, chiudi tutti i programmi, fai in modo di avere attivo soltanto hijackthis

Nicky

03-11-2004, 21:01

Originariamente inviato da wgator
Ciao,

spero comprenderai che analizzare un log del genere (lunghissimo ed intricato) ci vorrebbe mezza giornata :eek:

Ho comunque notato parecchi spyware.
Il mio consiglio: innanzitutto scarica la versione più recente di hijackthis (http://www.majorgeeks.com/download3155.html) poi posta un nuovo log

Prima però fai una scansione con la versione trial di spysweeper (http://www.spyware-removal.com/free-spyware-removal.html) così ti leva un bel po' di schifezze ed io (o chiunque altro) faccio prima ad interpretare il log

Quando fai il prossimo log, chiudi tutti i programmi, fai in modo di avere attivo soltanto hijackthis

Gli ho fatto scaricare il programma per gli spyware ed in effetti era piena.
Per il log no problem: ho immaginato che fosse impossibile.

Ti ringrazio per l'aiuto ;)

canapa

03-11-2004, 21:43

Originariamente inviato da wgator
Ciao,

spero comprenderai che analizzare un log del genere (lunghissimo ed intricato) ci vorrebbe mezza giornata :eek:

Concordo.
E Dio solo sà cosa c'è in quel PC.:D :D
Ed in questi casi una soluzione, forse la più veloce, potrebbe essere il format c:

Nicky

03-11-2004, 22:52

Originariamente inviato da canapa
Concordo.
E Dio solo sà cosa c'è in quel PC.:D :D
Ed in questi casi una soluzione, forse la più veloce, potrebbe essere il format c:

Naaaa...un'occhiata al log l'ho data io e le ho fatto togliere le cose più evidenti.
Per il resto è bastato l'antispyware.
Ora il pc è lindo come il culo di un bambino e funziona benone. [i problemi non ci sono più]