C:\WINDOWS\system32\algsys.exe
C:\WINDOWS\winsock\csrss.exe
C:\WINDOWS\System32\svchost32.exe
C:\WINDOWS\System32\spoolsvc.exe
C:\Program Files\spkw.exe
C:\WINDOWS\System32\dcomcfg.exe
C:\Programmi\eMule\downloads.exe
C:\DOCUME~1\SERENA~1\DATIAP~1\FNTS~1\services.exe
C:\Documents and Settings\Serena Dorio\Documenti\?ecurity\m?config.exe
c:\xprtbb.exe
c:\Program Files\spkw.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://search.presario.net/scripts/r...search&ap=b204
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://search.presario.net/scripts/r...search&ap=b204
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
http://search.usefulware.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R3 - URLSearchHook: (no name) - {2F4A1189-A93A-83E2-1DD2-F3CA9D22EECA} - C:\WINDOWS\System32\mixt.dll
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\winsock\csrss.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\userinit.exe,C:\WINDOWS\winsock\csrss.exe
O2 - BHO: (no name) - {6D794CB4-C7CD-4c6f-BFDC-9B77AFBDC02C} - C:\WINDOWS\system32\mlljj.dll
O4 - HKLM\..\Run: [Service] svchost32.exe
O4 - HKLM\..\Run: [Systems] C:\WINDOWS\System32\spoolsvc.exe
O4 - HKLM\..\Run: [SysTray] c:\Program Files\spkw.exe
O4 - HKLM\..\Run: [Microsoft (R) Windows TCP/IP Socket Driver] C:\WINDOWS\winsock\csrss.exe
O4 - HKLM\..\RunServices: [Service] svchost32.exe
O4 - HKCU\..\Run: [Service] svchost32.exe
O4 - HKCU\..\Run: [Crdp] "C:\DOCUME~1\SERENA~1\DATIAP~1\FNTS~1\services.exe" -vt yazr
O4 - HKCU\..\Run: [Udlb] C:\Documents and Settings\Serena Dorio\Documenti\?ecurity\m?config.exe
O15 - Trusted Zone:
www.1987324.com
O20 - Winlogon Notify: mlljj - C:\WINDOWS\SYSTEM32\mlljj.dll
O20 - Winlogon Notify: ShellServiceObjectDelayLoad - C:\WINDOWS\system32\mv4ml9h11.dll
O23 - Service: Windows TCP/IP Socket Driver (winsck) - Unknown owner - C:\WINDOWS\winsock\csrss.exe
Aspetto vostre notizie
BYe
