Newsgroup: it.comp.os.win.xp
Titolo: Problema con MSCONFIG

Riprovo a postare la mia richiesta di aiuto, dato che non sono riuscito a 
venirne fuori da solo, nemmeno cercando su Google.
In pratica ho un problema che si verifica quando cerco di apportare 
modifiche all'avvio del PC tramite l'utility MsConfig.exe, ovvero il sistema 
mi avverte con un impietoso "Errore di accesso negato durante il tentativo 
di modificare un servizio. Per apportare le modifiche specificate potrebbe 
essere necessario accedere tramite un account amministratore".
L'account in mio possesso è amministratore, ma pur avviando in modalità 
povvisoria ed accedendo ad XP come Administrator il problema persiste.
Come ne posso uscire da questa grana? C'è qualche riferimento a qualche 
chiave di registro da controllare? Digitando "Start-Esegui-control 
userpassword2" non rilevo la presenza di alcun account sospetto, non ci sono 
restrizioni di sorta su questo PC, insomma come faccio per eliminare questo 
inconveniente?
Grazie a chi mi aiuterà. 

 povvisoria ed accedendo ad XP come Administrator il problema persiste.
apri regedt32 e sistema i permessi sulla chiave col nome del servizio (che puoi
ricavare in services.msc) in HKLM\System\CurrentControlSet\Services
puzza molto di malware, ovviamente

 puzza molto di malware, ovviamente
Ho scansionato il PC con tutto il materiale disponibile, senza che mi venga 
segnalato nulla. Ho anche scoperto di una tringa con nome casuale che appare 
nel file Win.ini; se rimuovo manualmente tale stringa la stessa ripare 
all'avvio successivo con un altro nome, sempre causale. Non riesco a capire 
da dove venga e dove punti tale comando. 

 puzza molto di malware, ovviamente
A me serve inoltre sapere qual'č la chiave di registro che "si occupa" di 
MsConfig.exe, per poter verificare alcuni dettagli circa autorizzazioni e 
simili. 

 simili. 
http://www.google.it/search?hl=it&q=MsConfig.exe%2Bcorrupt&meta=
-- 
Fosco

Fosco:

a memoria qui sotto da qualche parte c'e' una fix :
http://www.kellys-korner-xp.com/xp_u.htm#xp_util
www.kellys-korner-xp.com/xp_tweaks.htm
http://www.dougknox.com/
http://www.dougknox.com/xp/xp_fixes.html
http://www.onecomputerguy.com/windowsxp_tips.htm
-- 
Fosco

 modifiche all'avvio del PC tramite l'utility MsConfig.exe
alternative :
AutoRuns
http://www.sysinternals.com/Utilities/autoruns.html
StartUp CPL
http://www.mlin.net/StartupCPL.shtml
STARTUP LIST
http://www.3feetunder.com/krick/startup/list.html
http://www.sysinfo.org/startupinfo.html
http://www.answersthatwork.com/Tasklist_pages/tasklist.htm
-- 
Fosco

 da dove venga e dove punti tale comando. 
se è esadecimale racchiuso tra parentesi graffe, non
e` un comando
a parte che non ho capito il contenuto del messaggio
iniziale a rileggerti (nemmeno le risposte di fosco,
a dire il vero), forse potresti postare il contenuto
del log di hijackthis e dell'esecuzione di net start
(che elenca i servizi attivi) e chiarire cosa volevi
modificare

iniziale a rileggerti (nemmeno le risposte di fosco,
A memoria avevo visto problemi simili e la relativa fix
su dougknox , IMHO un tentativo da fare.
--
Fosco

 modificare
Qui lo screenshot di "net stat" 
http://www.imagewoof.com/view_image/a17a0828/NetStart.jpg
E qui di seguito il log di HiJackThis:
Logfile of HijackThis v1.99.1
Scan saved at 14.15.39, on 21/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Acronis\Schedule2\schedul2.exe
C:\Programmi\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Programmi\Comodo\Firewall\cmdagent.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Eset\nod32krn.exe
C:\Programmi\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\UPHClean\uphclean.exe
C:\Programmi\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\System32\Fast.exe
C:\Programmi\Timbuktu Pro\tb2launch.exe
C:\Programmi\Timbuktu Pro\TimbuktuRemoteConsole.exe
C:\Programmi\Raxco\PerfectDisk\PDEngine.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\taskswitch.exe
C:\Programmi\File comuni\Logitech\QCDriver\LVCOMS.EXE
C:\Programmi\ScanSoft\OmniPage15.0\Opware15.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fpdisp5a.exe
C:\Programmi\Eset\nod32kui.exe
C:\Programmi\Acronis\TrueImageEnterpriseServer\TrueImageMonitor.exe
C:\Programmi\Acronis\TrueImageEnterpriseServer\TimounterMonitor.exe
C:\Programmi\File comuni\Acronis\Schedule2\schedhlp.exe
C:\Programmi\AdMuncher\AdMunch.exe
C:\Programmi\Comodo\Firewall\CPF.exe
C:\Programmi\BillP Studios\WinPatrol\winpatrol.exe
C:\Programmi\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
C:\Programmi\PopTray\PopTray.exe
C:\Programmi\AdunanzA\eMule_AdnzA.exe
C:\Programmi\MSN Messenger\usnsvc.exe
C:\Programmi\File comuni\Ahead\Lib\NMIndexingService.exe
C:\Programmi\Outlook Express\msimn.exe
C:\Programmi\OE-QuoteFix\oequotefix.exe
C:\Programmi\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cmd.exe
C:\Programmi\Adobe\Adobe Photoshop CS2\Photoshop.exe
C:\DOCUME~1\Mauro\IMPOST~1\Temp\Adobelm_Cleanup.0001
C:\Programmi\File comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\Mauro\IMPOST~1\Temp\Adobelm_Cleanup.0001
C:\Documents and Settings\Mauro\Desktop\Anti rootkits vari\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.e636.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
http://www.google.it
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = 
60.214.155.43:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
Collegamenti
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no
file)
O2 - BHO: IE7pro BHO - {00011268-E188-40DF-A514-835FCD78B1BF} -
C:\Programmi\IE7pro\IE7pro.dll
O2 - BHO: (no name) - {02DCA195-602B-4B1F-83FF-381B7E804BDB} -
C:\WINDOWS\system32\HDBHO.dll
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-
4D59-B87D-784B7D6BE0B3} - C:\Programmi\File
comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C}
- C:\PROGRA~2\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} -
C:\Programmi\FlashGet\Jccatch.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2
\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} -
C:\Programmi\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\Programmi\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} -
C:\Programmi\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O2 - BHO: Trixie.Bho - {B0744341-96E0-4341-9ED2-8BC36CE0CCD0} - mscoree.dll
(file missing)
O2 - BHO: FlashGet GetFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} -
C:\Programmi\FlashGet\getflash.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} -
C:\Programmi\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [CoolSwitch] C:\WINDOWS\system32\taskswitch.exe
O4 - HKLM\..\Run: [Tweak UI] "RUNDLL32.EXE" TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [LVCOMS] "C:\Programmi\File
comuni\Logitech\QCDriver\LVCOMS.EXE"
O4 - HKLM\..\Run: [Opware15] "C:\Programmi\ScanSoft\OmniPage15.0
\Opware15.exe"
O4 - HKLM\..\Run: [FinePrint Dispatcher v5] "C:\WINDOWS\System32
\spool\DRIVERS\W32X86\3\fpdisp5a.exe" /source=HKLM
O4 - HKLM\..\Run: [nod32kui] "C:\Programmi\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [OSSelectorReinstall] "C:\Programmi\File
comuni\Acronis\Acronis Disk Director\oss_reinstall.exe"
O4 - HKLM\..\Run: [TrueImageMonitor.exe]
C:\Programmi\Acronis\TrueImageEnterpriseServer\TrueImageMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor]
C:\Programmi\Acronis\TrueImageEnterpriseServer\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programmi\File
comuni\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Ad Muncher] C:\Programmi\AdMuncher\AdMunch.exe /bt
O4 - HKLM\..\Run: [COMODO Firewall Pro]
"C:\Programmi\Comodo\Firewall\CPF.exe" /background
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [WinPatrol] "C:\Programmi\BillP
Studios\WinPatrol\winpatrol.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Programmi\Windows
Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Programmi\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [RoboForm] "C:\Programmi\Siber Systems\AI
RoboForm\RoboTaskBarIcon.exe"
O4 - Startup: PopTray.lnk = C:\Programmi\PopTray\PopTray.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel 
present
O8 - Extra context menu item: &Google - 
file://C:\Programmi\IEToys\Google.htm
O8 - Extra context menu item: &MSN - file://C:\Programmi\IEToys\MSN.htm
O8 - Extra context menu item: &Scarica con FlashGet -
C:\Programmi\FlashGet\jc_link.htm
O8 - Extra context menu item: &Scarica tutto con FlashGet -
C:\Programmi\FlashGet\jc_all.htm
O8 - Extra context menu item: Add to Windows &Live Favorites -
http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Block frame with Ad Muncher -
http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserext
ensions.pl?exbrowser=ie&exversion=0.4&pass=1O510U2V&id=menu_ie_frame
O8 - Extra context menu item: Block image with Ad Muncher -
http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserext
ensions.pl?exbrowser=ie&exversion=0.4&pass=1O510U2V&id=menu_ie_image
O8 - Extra context menu item: Block link with Ad Muncher -
http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserext
ensions.pl?exbrowser=ie&exversion=0.4&pass=1O510U2V&id=menu_ie_link
O8 - Extra context menu item: Compila Modulo - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Don't filter page with Ad Muncher -
http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserext
ensions.pl?exbrowser=ie&exversion=0.4&pass=1O510U2V&id=menu_ie_exclude
O8 - Extra context menu item: E&sporta in Microsoft Excel -
res://C:\PROGRA~2\MI1933~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Encyclopedia &Lookup -
file://C:\Programmi\IEToys\WebEncyc.htm
O8 - Extra context menu item: Open Frame in &New Window -
C:\WINDOWS\WEB\frm2new.htm
O8 - Extra context menu item: Open with Scansoft PDF Converter 3.0 -
res://C:\Programmi\ScanSoft\OmniPage15.0\PDFConverter3\IEShellExt.dll /100
O8 - Extra context menu item: Personalizza - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: Report page to the Ad Muncher developers -
http://www.admuncher.com/request_will_be_intercepted_by/Ad_Muncher/browserext
ensions.pl?exbrowser=ie&exversion=0.4&pass=1O510U2V&id=menu_ie_report
O8 - Extra context menu item: RF Barra strumenti - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Salva Moduli - file://C:\Programmi\Siber
Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Zoom &In - C:\WINDOWS\WEB\zoomin.htm
O8 - Extra context menu item: Zoom O&ut - C:\WINDOWS\WEB\zoomout.htm
O9 - Extra button: IE7pro Preferences - {0026439F-A980-4f18-8C95-
4F1CBBF9C1D8} - C:\Programmi\IE7pro\IE7pro.dll
O9 - Extra 'Tools' menuitem: IE7pro Preferences - {0026439F-A980-4f18-8C95-
4F1CBBF9C1D8} - C:\Programmi\IE7pro\IE7pro.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\Programmi\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Programmi\Java\jre1.6.0\bin\ssv.dll
O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} -
C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Launch Copernic Agent - {193B17B0-7C9F-4D5B-
AEAB-8D3605EFC084} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} -
C:\WINDOWS\system32\mscoree.DLL
O9 - Extra 'Tools' menuitem: Tri&xie Options... - {20CCCFEC-D26F-4ffe-996B-
388B39C8CCCA} - C:\WINDOWS\system32\mscoree.DLL
O9 - Extra button: Compila - {320AF880-6646-11D3-ABEE-C5DBF3571F46} -
file://C:\Programmi\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Compila Modulo - {320AF880-6646-11D3-ABEE-
C5DBF3571F46} - file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComFillForms.html
O9 - Extra button: Salva - {320AF880-6646-11D3-ABEE-C5DBF3571F49} -
file://C:\Programmi\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Salva Moduli - {320AF880-6646-11D3-ABEE-
C5DBF3571F49} - file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {4E660F19-E91E-41e1-88EF-D1DFAB118F67} -
C:\Programmi\Internet Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra 'Tools' menuitem: Mouse Gestures... - {4E660F19-E91E-41e1-88EF-
D1DFAB118F67} - C:\Programmi\Internet
Explorer\Plugins\Drowse\MouseGestures.dll
O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} -
C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} -
file://C:\Programmi\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Barra strumenti - {724d43aa-0d85-11d4-9908-
00400523e39a} - file://C:\Programmi\Siber Systems\AI
RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} -
C:\PROGRA~2\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~2\MI1933~1\Office12\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -
C:\Programmi\FlashGet\FlashGet.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-
0050BA6940E3} - C:\Programmi\FlashGet\FlashGet.exe
O9 - Extra button: ProxyPick - {FFFFF28F-A66E-4D5D-996F-1A4450298FFF} -
"C:\Programmi\IEToys\ProxyPick.exe" (file missing)
O9 - Extra 'Tools' menuitem: ProxyPick - {FFFFF28F-A66E-4D5D-996F-
1A4450298FFF} - "C:\Programmi\IEToys\ProxyPick.exe" (file missing)
O9 - Extra button: Clear all browsing history - {FFFFFF9F-A66E-4D5D-996F-
1A4450298FFF} - C:\Programmi\IEToys\ClearTracks.dll
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: 
www.allfreenet.it
O15 - Trusted Zone: 
http://webmail.aruba.it
O15 - Trusted Zone: 
http://www.e636.it
O15 - Trusted Zone: 
www.internetmonitor.it
O15 - Trusted Zone: 
http://www.internetmonitor.it
O16 - DPF: {01010E00-5E80-11D8-9E86-0007E96C65AE} (SupportSoft SmartIssue) -
http://www.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {01012101-5E80-11D8-9E86-0007E96C65AE} (SupportSoft Script Runner
Class) - 
http://www.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) -
http://www.forum.fastwebnet.org/home/font/tdserver.cab
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) -
http://housecall60.trendmicro.com/housecall/xscan60.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software
AutoUpdate) - 
http://www.creative.com/su/ocx/15007/CTSUEng.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -
http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan
Agent 6.6) - 
http://eu-housecall.trendmicro-
europe.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {594ECDD4-A991-4208-A7B7-00DDAD9BE328} (Photosynth Class) -
http://media.labs.live.com/all/ps/_code_/Photosynth.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} -
http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}
(MsnMessengerSetupDownloadControl Class) -
http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {C3DFA998-A486-11D4-AA25-00C04F72DAEB} (MSN Photo Upload Tool) -
http://sc.groups.msn.com/controls/PhotoUC/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {DEA5C682-8F39-47C0-B765-1D2154C4586B} -
http://mufxggfi.com/797f8624/55000/1/xp/Eep.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) -
http://chat.msn.com/controls/msnchat45.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software
AutoUpdate Support Package) - 
http://www.creative.com/su/ocx/15008/CTPID.cab
O17 - HKLM\System\CS5\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS6\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS7\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS8\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS9\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS10\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O17 - HKLM\System\CS11\Services\Tcpip\..\{182295D7-56F8-41AD-ADB0-
C81999A3D611}: NameServer =
213.156.54.80,213.156.54.81,213.140.2.12,212.140.2.21
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} -
C:\PROGRA~2\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} -
C:\Programmi\File comuni\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2
\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\PROGRA~2\FILECO~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: Timbuktu Pro - C:\Programmi\Timbuktu Pro\Hook32.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} -
C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis -
C:\Programmi\File comuni\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Programmi\File
comuni\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: APC UPS Service - American Power Conversion Corporation -
C:\Programmi\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Comodo Application Agent (CmdAgent) - COMODO -
C:\Programmi\Comodo\Firewall\cmdagent.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision
Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32
\IDriverT.exe
O23 - Service: NBService - Nero AG - C:\Programmi\Nero\Nero 7\Nero
BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Programmi\File
comuni\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  -
C:\Programmi\Eset\nod32krn.exe
O23 - Service: PDAgent - Raxco Software, Inc. -
C:\Programmi\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. -
C:\Programmi\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: StyleXPService - Unknown owner -
C:\Programmi\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: Tb2 Launch (Tb2Launch) - Netopia, Inc. - 
C:\Programmi\Timbuktu
Pro\tb2launch.exe
O23 - Service: Sistema Webroot Spy Sweeper (WebrootSpySweeperService) -
Webroot Software, Inc. - C:\Programmi\Webroot\Spy Sweeper\SpySweeper.exe