eccolo in formato xlm
<?xml version="1.0" encoding="Windows-1252" ?>
- <a2hijackfreelog>
<version>3.1.0.22</version>
<datecreated>2010-07-17 16:05</datecreated>
<language>it-it</language>
<ie_version>8.0.7600.16385</ie_version>
<os>Vista64</os>
<os_version>6.17600</os_version>
<programpath>C:\Program Files (x86)</programpath>
<startuppath>C:\Users\Utente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup</startuppath>
<systempath>C:\Windows\system32</systempath>
<winpath>C:\Windows\</winpath>
- <autoruns>
- <autorun Category="Registry">
<name>JMB36X IDE Setup</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>%winpath%RaidTool\xInsIDE.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>avast5</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>C:\Program Files\Alwil Software\Avast5\avastUI.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>TurboV EVO</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>C:\Program Files\ASUS\TurboV EVO\TurboV_EVO.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>Adobe ARM</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>%programpath%\Common Files\Adobe\ARM\1.0\AdobeARM.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>ISUSScheduler</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>%programpath%\Common Files\InstallShield\UpdateService\issch.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>Adobe Reader Speed Launcher</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>%programpath%\Adobe\Reader 9.0\Reader\Reader_sl.exe</filepath>
</autorun>
- <autorun Category="Registry">
<name>ISUSPM Startup</name>
<location>HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</location>
<filepath>c:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe</filepath>
</autorun>
- <autorun Category="startupfiles">
<location>system.ini</location>
<name>shell</name>
<filepath>explorer.exe</filepath>
</autorun>
- <autorun Category="autostartmenu">
<name>SA</name>
<location>%winpath%tasks\</location>
</autorun>
- <autorun Category="autostartmenu">
<name>SCHEDLGU</name>
<location>%winpath%tasks\</location>
</autorun>
- <autorun Category="tricky">
<name>Shell</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\</location>
<filepath>explorer.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>$GT;{22d6f312-b0f6-11d0-94ab-0080c74c7e95}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%systempath%\unregmp2.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>$GT;{26923b43-4d38-484f-9b9e-de460746276c}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%winpath%SysWOW64\ie4uinit.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>$GT;{60B49E34-C7CC-11D0-8953-00A0C90347FF}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%winpath%SysWOW64\rundll32.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{2C7339CF-2B09-4501-B3F3-F3508C9228ED}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%systempath%\regsvr32.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{44BBA840-CC51-11CF-AAFA-00AA00B6015C}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%programpath%\Windows Mail\WinMail.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{6BF52A52-394A-11d3-B153-00C04F79FAA6}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%systempath%\unregmp2.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{89820200-ECBD-11cf-8B85-00AA005B4340}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>regsvr32.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{89820200-ECBD-11cf-8B85-00AA005B4383}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%winpath%SysWOW64\ie4uinit.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>{89B4C1CD-B018-4511-B0A1-5476DBF70820}</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\</location>
<filepath>%winpath%SysWOW64\Rundll32.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>VBScript Script File</name>
<location>HKEY_CLASSES_ROOT\vbsfile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>VBScript Encoded File</name>
<location>HKEY_CLASSES_ROOT\vbefile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>JScript Script File</name>
<location>HKEY_CLASSES_ROOT\jsfile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>JScript Encoded File</name>
<location>HKEY_CLASSES_ROOT\jsefile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>Windows Script Host Settings File</name>
<location>HKEY_CLASSES_ROOT\wshfile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>Windows Script File</name>
<location>HKEY_CLASSES_ROOT\wsffile\shell\open\command\</location>
<filepath>%winpath%System32\WScript.exe</filepath>
</autorun>
- <autorun Category="tricky">
<name>Application</name>
<location>HKEY_CLASSES_ROOT\exefile\shell\open\command\</location>
<filepath>%1</filepath>
</autorun>
- <autorun Category="tricky">
<name>MS-DOS Application</name>
<location>HKEY_CLASSES_ROOT\comfile\shell\open\command\</location>
<filepath>%1</filepath>
</autorun>
- <autorun Category="tricky">
<name>Windows Batch File</name>
<location>HKEY_CLASSES_ROOT\batfile\shell\open\command\</location>
<filepath>%1</filepath>
</autorun>
- <autorun Category="tricky">
<name>Screen saver</name>
<location>HKEY_CLASSES_ROOT\scrfile\shell\open\command\</location>
<filepath>%1</filepath>
</autorun>
- <autorun Category="tricky">
<name>Shortcut to MS-DOS Program</name>
<location>HKEY_CLASSES_ROOT\piffile\shell\open\command\</location>
<filepath>%1</filepath>
</autorun>
- <autorun Category="tricky">
<name>WebCheck</name>
<location>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\</location>
<filepath />
</autorun>
</autoruns>
- <addons>
- <addon Category="bho">
<clsid>{18DF081C-E8AD-4283-A596-FA578C2EBDC3}</clsid>
<name>Adobe PDF Link Helper</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</location>
<filepath>%programpath%\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll</filepath>
</addon>
- <addon Category="bho">
<clsid>{DBC80044-A445-435b-BC74-9C25C1C588A9}</clsid>
<name>Java(tm) Plug-In 2 SSV Helper</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</location>
<filepath>%programpath%\Java\jre6\bin\jp2ssv.dll</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{00C6D95F-329C-409a-81D7-C46C66EA7F33}</clsid>
<name />
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath />
</addon>
- <addon Category="shellextension">
<clsid>{80009818-f38f-4af1-87b5-eadab9433e58}</clsid>
<name />
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath />
</addon>
- <addon Category="shellextension">
<clsid>{E0D79304-84BE-11CE-9641-444553540000}</clsid>
<name>WinZip</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\WINZIP\WZSHLSTB.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{E0D79305-84BE-11CE-9641-444553540000}</clsid>
<name>WinZip</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\WINZIP\WZSHLSTB.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{E0D79306-84BE-11CE-9641-444553540000}</clsid>
<name>WinZip</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\WINZIP\WZSHLSTB.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{E0D79307-84BE-11CE-9641-444553540000}</clsid>
<name>WinZip</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\WINZIP\WZSHLSTB.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{0006F045-0000-0000-C000-000000000046}</clsid>
<name>Outlook File Icon Extension</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\MICROS~1\Office12\OLKFSTUB.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{00020D75-0000-0000-C000-000000000046}</clsid>
<name>Microsoft Office Outlook</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\MICROS~1\Office12\MLSHEXT.DLL</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{42042206-2D85-11D3-8CFF-005004838597}</clsid>
<name />
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>%programpath%\Microsoft Office\Office12\msohevi.dll</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{472083B0-C522-11CF-8763-00608CC02F24}</clsid>
<name>avast</name>
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath>C:\Program Files\Alwil Software\Avast5\ashShell.dll</filepath>
</addon>
- <addon Category="shellextension">
<clsid>{83238FAE-D346-4E12-8734-D42F7554B3E6}</clsid>
<name />
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath />
</addon>
- <addon Category="shellextension">
<clsid>{D8D1CE8C-B1EB-4E95-B63B-1531BA60E992}</clsid>
<name />
<location>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</location>
<filepath />
</addon>
- <lsp>
<name>MSAFD Tcpip [TCP/IP]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>MSAFD Tcpip [UDP/IP]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>MSAFD Tcpip [RAW/IP]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>MSAFD Tcpip [TCP/IPv6]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>MSAFD Tcpip [UDP/IPv6]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>MSAFD Tcpip [RAW/IPv6]</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>Provider di servizi TCPv6 RSVP</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>Provider di servizi TCP RSVP</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>Provider di servizi UDPv6 RSVP</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
- <lsp>
<name>Provider di servizi UDP RSVP</name>
<location>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\</location>
<filepath>%SystemRoot%\system32\mswsock.dll</filepath>
</lsp>
</addons>
<ports />
- <processes>
- <process>
<name>[System Process]</name>
<processid>0</processid>
<filepath />
<threads>8</threads>
<priority>N/A</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>System</name>
<processid>4</processid>
<filepath />
<threads>139</threads>
<priority>N/A</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>smss.exe</name>
<processid>332</processid>
<filepath>%winpath%System32\smss.exe</filepath>
<threads>2</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>csrss.exe</name>
<processid>436</processid>
<filepath>%winpath%System32\csrss.exe</filepath>
<threads>10</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>wininit.exe</name>
<processid>504</processid>
<filepath>%winpath%System32\wininit.exe</filepath>
<threads>3</threads>
<priority>Alta</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>csrss.exe</name>
<processid>528</processid>
<filepath>%winpath%System32\csrss.exe</filepath>
<threads>11</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>winlogon.exe</name>
<processid>572</processid>
<filepath>%winpath%System32\winlogon.exe</filepath>
<threads>3</threads>
<priority>Alta</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>services.exe</name>
<processid>616</processid>
<filepath>%winpath%System32\services.exe</filepath>
<threads>13</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>lsass.exe</name>
<processid>628</processid>
<filepath>%winpath%System32\lsass.exe</filepath>
<threads>9</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>lsm.exe</name>
<processid>636</processid>
<filepath>%winpath%System32\lsm.exe</filepath>
<threads>10</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>744</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>11</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>nvvsvc.exe</name>
<processid>828</processid>
<filepath>%winpath%System32\nvvsvc.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>868</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>9</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>960</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>22</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>152</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>20</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>400</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>45</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>1040</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>24</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>nvvsvc.exe</name>
<processid>1100</processid>
<filepath>%winpath%System32\nvvsvc.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>1152</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>28</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>AvastSvc.exe</name>
<processid>1232</processid>
<filepath>C:\Program Files\Alwil Software\Avast5\AvastSvc.exe</filepath>
<threads>76</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>dwm.exe</name>
<processid>1352</processid>
<filepath>%winpath%System32\dwm.exe</filepath>
<threads>3</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>explorer.exe</name>
<processid>1364</processid>
<filepath>%winpath%explorer.exe</filepath>
<threads>51</threads>
<priority>Normale</priority>
<visible>Sì</visible>
<caption>Computer</caption>
</process>
- <process>
<name>AvastUI.exe</name>
<processid>1860</processid>
<filepath>C:\Program Files\Alwil Software\Avast5\AvastUI.exe</filepath>
<threads>9</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>taskhost.exe</name>
<processid>1332</processid>
<filepath>%winpath%System32\taskhost.exe</filepath>
<threads>10</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>spoolsv.exe</name>
<processid>1012</processid>
<filepath>%winpath%System32\spoolsv.exe</filepath>
<threads>13</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>1812</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>18</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>taskeng.exe</name>
<processid>1696</processid>
<filepath>%winpath%System32\taskeng.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>AsSysCtrlService.exe</name>
<processid>1912</processid>
<filepath>%programpath%\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>TurboVHelp.exe</name>
<processid>1956</processid>
<filepath>C:\Program Files\ASUS\TurboV EVO\TurboVHelp.exe</filepath>
<threads>1</threads>
<priority>SottoNormale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>DVMExportService.exe</name>
<processid>1412</processid>
<filepath>C:\ASUS.SYS\config\DVMExportService.exe</filepath>
<threads>4</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>mdm.exe</name>
<processid>2072</processid>
<filepath>%programpath%\Common Files\microsoft shared\VS7DEBUG\mdm.exe</filepath>
<threads>8</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>nTuneService.exe</name>
<processid>2104</processid>
<filepath>%programpath%\NVIDIA Corporation\nTune\nTuneService.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>PDAgent.exe</name>
<processid>2196</processid>
<filepath>C:\Program Files\Raxco\PerfectDisk\PDAgent.exe</filepath>
<threads>9</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>2228</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>6</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>nTuneCmd.exe</name>
<processid>2396</processid>
<filepath>%programpath%\NVIDIA Corporation\nTune\nTuneCmd.exe</filepath>
<threads>2</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>SearchIndexer.exe</name>
<processid>2764</processid>
<filepath>%winpath%System32\SearchIndexer.exe</filepath>
<threads>21</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>PDAgentS1.exe</name>
<processid>2320</processid>
<filepath>C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe</filepath>
<threads>3</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>3320</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>15</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>svchost.exe</name>
<processid>3512</processid>
<filepath>%winpath%System32\svchost.exe</filepath>
<threads>8</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>everest.exe</name>
<processid>2208</processid>
<filepath>%programpath%\Lavalys\EVEREST Ultimate Edition\everest.exe</filepath>
<threads>2</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>wmpnetwk.exe</name>
<processid>688</processid>
<filepath>C:\Program Files\Windows Media Player\wmpnetwk.exe</filepath>
<threads>11</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>taskhost.exe</name>
<processid>4084</processid>
<filepath>%winpath%System32\taskhost.exe</filepath>
<threads>5</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>audiodg.exe</name>
<processid>1212</processid>
<filepath>%winpath%System32\audiodg.exe</filepath>
<threads>6</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>SearchProtocolHost.exe</name>
<processid>2636</processid>
<filepath>%winpath%System32\SearchProtocolHost.exe</filepath>
<threads>8</threads>
<priority>Bassa</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>SearchFilterHost.exe</name>
<processid>3724</processid>
<filepath>%winpath%System32\SearchFilterHost.exe</filepath>
<threads>5</threads>
<priority>Bassa</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>SearchProtocolHost.exe</name>
<processid>3012</processid>
<filepath>%winpath%System32\SearchProtocolHost.exe</filepath>
<threads>8</threads>
<priority>Bassa</priority>
<visible>No</visible>
<caption />
</process>
- <process>
<name>a2hijackfree.exe</name>
<processid>864</processid>
<filepath>%programpath%\a-squared HiJackFree\a2hijackfree.exe</filepath>
<threads>20</threads>
<priority>Normale</priority>
<visible>Sì</visible>
<caption>a-squared HiJackFree 3.1</caption>
</process>
- <process>
<name>dllhost.exe</name>
<processid>2876</processid>
<filepath>%winpath%SysWOW64\dllhost.exe</filepath>
<threads>7</threads>
<priority>Normale</priority>
<visible>No</visible>
<caption />
</process>
</processes>
</a2hijackfreelog>