Problemi con pagine che si aprono da sole...Chiuso

Question

Salve, immagino che ora sia difficile che qualcuno mi risponda (Italia-Costarica), cmq segnalo il mio problema.
Dopo aver scaricato qualche programma di collage foto free, il mio computer non è più stato lo stesso.
Ogni volta che apro Internet e clicco su una pagina, mi si aprono mille pagine di pubblicità. Incontrollabile!
E' successo anche che un giorno non ho più trovato Google come motore di ricerca, ma un certo Omnia Plus (problema che ho risolto, leggendo su Internet).
Inoltre se apro una pagina in cui è presente un testo, alcune parole sono sottolineate due volte di verde.
E' un virus? Come posso fare?

Intanto allego il report di HijackThis appena fatto.


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 18:12:42, on 20/06/2014
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
Boot mode: Normal

Running processes:
C:\PROGRAM FILES (X86)\PANDA SECURITY\PANDA GLOBAL PROTECTION 2014\WebProxy.exe
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
C:\Users\user\AppData\Local\Akamai
etsession_win.exe
C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe
C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Hotspot\Modem 42.2 Wi-Fi\CancelAutoPlay.exe
C:\Users\user\AppData\Local\Akamai
etsession_win.exe
C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\ApVxdWin.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\PavBckPT.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbarUser_32.exe
C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\ToggleMark\bin\ToggleMark.BrowserAdapter.exe
C:\Users\user\Desktop\Manutenzione Pc\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1403181223&from=tt4u&uid=SAMSUNGXHM500JI_S208JD0S920908&aaa=aaa
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=89F3D4EE2FC4485B9349E9B7DD90579D
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.it/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://v9search.com/?type=hp&ts=1403181223&from=tt4u&uid=SAMSUNGXHM500JI_S208JD0S920908&aaa=aaa
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/webhp?gws_rd=ssl{searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://v9search.com/?type=hp&ts=1403181223&from=tt4u&uid=SAMSUNGXHM500JI_S208JD0S920908&aaa=aaa
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:14021;https=127.0.0.1:14021
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;127.0.0.1:9421;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: (no name) - {62d40876-df18-411f-9d34-a9dd7a197bc5} - (no file)
R3 - URLSearchHook: (no name) - {7a55cbb2-2b2e-4a41-9de1-6ac5d2c2be0a} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: ToggleMark - {24ac098d-eb44-41b3-abaa-f4bc67d4d64d} - C:\Program Files (x86)\ToggleMark\ToggleMarkbho.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Interest recogniser for Pixeasy (powered by Spointer) - {838b9725-b6d4-49d7-83a1-2f427efc4d42} - C:\Program Files (x86)\PixEasy\spointer\extensions\pixeasy_air_ie.dll
O2 - BHO: Guida per l'accesso a Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [ISBMgr.exe] "C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [NortonOnlineBackupReminder] "C:\Program Files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" UNATTENDED
O4 - HKLM\..\Run: [MarketingTools] C:\Program Files (x86)\Sony\Marketing Tools\MarketingTools.exe
O4 - HKLM\..\Run: [hpqSRMon] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [CancelAutoPlay] "C:\Program Files (x86)\Hotspot\Modem 42.2 Wi-Fi\CancelAutoPlay.exe" run
O4 - HKLM\..\Run: [fst_it_141] "C:\Program Files (x86)\fst_it_141\fst_it_141.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\Inicio.exe"
O4 - HKLM\..\RunOnce: [upfst_it_141.exe] C:\Users\user\AppData\Local\fst_it_141\upfst_it_141.exe -runonce
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\user\AppData\Local\Akamai
etsession_win.exe"
O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Users\user\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Invia a Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: Invia a periferica &Bluetooth... - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Visualizza o nasconde HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix: 
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (Bitdefender QuickScan Control) - https://www.bitdefender.com/toolbox/
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} (Facebook Photo Uploader 5 Control) - http://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - https://www.provincia.savona.it/turismo
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service:  Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ONDA Autorun CDROM Monitor - Unknown owner - C:\Windows\system32\SupportAppXL\onda_mon.exe
O23 - Service: Panda Software Controller - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\PsCtrls.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Unknown owner - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Unknown owner - C:\Program Files (x86)\Common Files\Panda Security\PavShld\pavprsrv.exe
O23 - Service: Panda On-Access Anti-Malware Service (PAVSRV) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\pavsrvx86.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Panda Host Service (PSHost) - Unknown owner - c:\program files (x86)\panda security\panda global protection 2014\firewall\PSHOST.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Security S.L. - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\PskSvc.exe
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe
O23 - Service: Roxio Upnp Server 10 - Sonic Solutions - C:\Program Files (x86)\Roxio\Digital Home 10\RoxioUpnpService10.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: Realtek Audio Service (RtkAudioService) - Realtek Semiconductor - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files (x86)\Photodex\ProShowGold\ScsiAccess.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: VAIO Media plus Content Importer (SOHCImp) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHCImp.exe
O23 - Service: VAIO Media plus Database Manager (SOHDBSvr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDBSvr.exe
O23 - Service: VAIO Media plus Digital Media Server (SOHDms) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
O23 - Service: VAIO Media plus Device Searcher (SOHDs) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
O23 - Service: VAIO Media plus Playlist Manager (SOHPlMgr) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHPlMgr.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Security, S.L. - C:\Program Files (x86)\Panda Security\Panda Global Protection 2014\TPSrvWow.exe
O23 - Service: CamMonitor (uCamMonitor) - ArcSoft, Inc. - C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Update ToggleMark - Unknown owner - C:\Program Files (x86)\ToggleMark\updateToggleMark.exe
O23 - Service: Util ToggleMark - Unknown owner - C:\Program Files (x86)\ToggleMark\bin\utilToggleMark.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzHardwareResourceManager\VzHardwareResourceManager\VzHardwareResourceManager.exe
O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files (x86)\Sony\VAIO Event Service\VESMgr.exe
O23 - Service: VAIO Power Management - Sony Corporation - C:\Program Files\Sony\VAIO Power Management\SPMService.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: VAIO Content Folder Watcher (VCFw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe
O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
O23 - Service: VAIO Content Metadata Intelligent Network Service Manager (VcmINSMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Network Service Manager\VcmINSMgr.exe
O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper64.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: VSNService - Sony Corporation - C:\Program Files\Sony\VAIO Smart Network\VSNService.exe
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files (x86)\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

elisd · Answer

Sto facendo anche quello di OTL, ma ci vuole più tempo.
Grazie a chiunque presta attenzione al mio post.
Eli

n00r · Answer

ciao e benvenuto,

c'è gente a chi non piace il calcio e non segue i mondiali  :-)

c'è meglio di HijackThis (che per anni è stato il miglior per analizzare e eliminare le schifezze che si incollano nei browser), cominciamo con AdwCleaner: 

=AdwCleaner=
* Scarica e salva sul desktop AdwCleaner di Xplode
* Chiudi tutti i programmi e browser internet aperti
* Fa doppio clic su "AdwCleaner.exe" per eseguirlo
* Fa clic sul pulsante "Scan" e attendi la fine del processo
* Fa clic sul pulsante "Clean" e segui le istruzioni
* Il programma chiuderà tutti i programmi aperti, quindi salva i tuoi dati e lavori in corso prima di continuare
* Se viene chiesto di avviare il PC, accetta
* Un report verrà aperto automaticamente, Copia/incolla il contenuto del file nella tua risposta
* Puoi trovare il file log in "C:\AdwCleaner\AdwCleaner[Sn].txt" (nel quale "n" è un numero).

elisd · Answer

Ok.
Grazie.
Scarico e faccio tutto.
Eli

elisd · Answer

Eccolo di seguito.

# AdwCleaner v3.212 - Rapporto creato 20/06/2014 in 

18:37:43
# Aggiornato 05/06/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service 

Pack 1 (64 bits)
# Nome utente : user - ELISA
# In esecuzione da : C:\Users\user\Desktop

\adwcleaner_3.212.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****

Cartella Eliminato : C:\ProgramData\Microsoft

\Windows\Start Menu\Programs\free_soft_today
Cartella Eliminato : C:\ProgramData\Microsoft

\Windows\Start Menu\Programs\PixEasy
Cartella Eliminato : C:\Program Files (x86)\PixEasy
Cartella Eliminato : C:\Program Files 

(x86)\UtilityChest_49
Cartella Eliminato : C:\Program Files 

(x86)\fst_it_141
Cartella Eliminato : C:\Program Files (x86)\Common 

Files\DVDVideoSoft\TB
Cartella Eliminato : C:\users\user\AppData\Local

\Babylon
Cartella Eliminato : C:\users\user\AppData\Local

\Conduit
Cartella Eliminato : C:\users\user\AppData\Local

\PackageAware
Cartella Eliminato : C:\users\user\AppData\Local

\pixeasy Air
Cartella Eliminato : C:\users\user\AppData\Local

\fst_it_141
Cartella Eliminato : C:\users\user\AppData\LocalLow

\Conduit
Cartella Eliminato : C:\users\user\AppData\LocalLow

\PriceGong
Cartella Eliminato : C:\users\user\AppData\LocalLow

\SweetIM
Cartella Eliminato : C:\users\user\AppData\Roaming

\Babylon
Cartella Eliminato : C:\users\user\AppData\Roaming

\dvdvideosoftiehelpers
Cartella Eliminato : C:\users\user\AppData\Roaming

\OpenCandy
Cartella Eliminato : C:\users\user\AppData\Roaming

\Systweak
Cartella Eliminato : C:\users\user\AppData\Roaming

\VOPackage
Cartella Eliminato : C:\users\user\AppData\Roaming

\Microsoft\Windows\Start Menu\Programs\VOPackage
Cartella Eliminato : C:\users\user\Documents\Updater
File Eliminato : C:\Windows\System32oboot64.exe
File Eliminato : C:\users\user\AppData\Roaming

\Mozilla\Firefox\Profiles\j7i8xr7v.default\user.js

***** [ Collegamenti ] *****

Collegamento Disinfetatti : C:\ProgramData

\Microsoft\Windows\Start Menu\Programs\Google 

Chrome\Google Chrome.lnk
Collegamento Disinfetatti : C:\Users\user\AppData

\Roaming\Microsoft\Windows\Start Menu\Programs

\Internet Explorer.lnk
Collegamento Disinfetatti : C:\Users\user\AppData

\Roaming\Microsoft\Windows\Start Menu\Programs

\Accessories\System Tools\Internet Explorer (No 

Add-ons).lnk
Collegamento Disinfetatti : C:\Users\user\AppData

\Roaming\Microsoft\Internet Explorer\Quick Launch

\Google Chrome.lnk
Collegamento Disinfetatti : C:\Users\user\AppData

\Roaming\Microsoft\Internet Explorer\Quick Launch

\Launch Internet Explorer Browser.lnk
Collegamento Disinfetatti : C:\Users\user\AppData

\Roaming\Microsoft\Internet Explorer\Quick Launch

\User Pinned\StartMenu\Internet Explorer.lnk

***** [ Registro ] *****

Chiave Eliminati : HKCU\Software\Google\Chrome

\Extensions
ikpibnbobmbdbheedjfogjlikpgpnhp
Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome

\Extensions\poagplbogcmifmmjdlphdlglclpdkigg
Chiave Eliminati : HKLM\SOFTWARE\Classes

\protector_dll.protectorbho
Chiave Eliminati : HKLM\SOFTWARE\Classes

\protector_dll.protectorbho.1
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\AskInstallChecker_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\AskInstallChecker_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\au__rasapi32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\au__rasmancs
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\CToolbar_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\sweetimsetup_rasapi32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\sweetimsetup_rasmancs
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader49024_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader49024_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader96626[1]_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader96626[1]_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_ad-aware[1]_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_ad-aware[1]_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-mp3-wma-

converter_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-mp3-wma-

converter_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-pdf-to-word-doc-

converter_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-pdf-to-word-doc-

converter_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-youtube-

download_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_free-youtube-

download_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_jdownloader[1]_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_jdownloader[1]_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_nitro-pdf-reader_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_nitro-pdf-reader_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_pdfcreator[1]_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_pdfcreator[1]_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_spyware-terminator_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing

\SoftonicDownloader_per_spyware-terminator_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{4AA46D49-459F-4358-B4D1-169048547C23}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{838B9725-B6D4-49D7-83A1-2F427EFC4D42}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID

\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface

\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface

\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface

\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface

\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib

\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib

\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows

\CurrentVersion\Explorer\Browser Helper Objects

\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows

\CurrentVersion\Explorer\Browser Helper Objects

\{838B9725-B6D4-49D7-83A1-2F427EFC4D42}
Chiave Eliminati : HKCU\Software\Microsoft\Windows

\CurrentVersion\Ext\Stats\{838B9725-B6D4-49D7-83A1-

2F427EFC4D42}
Chiave Eliminati : HKCU\Software\Microsoft\Windows

\CurrentVersion\Ext\Settings\{838B9725-B6D4-49D7-

83A1-2F427EFC4D42}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows

\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2

-892F-0090271D4F88}
Chiave Eliminati : HKCU\Software\Microsoft\Internet 

Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-

49120163DE86}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet 

Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-

49120163DE86}
Valore Eliminati : HKCU\Software\Microsoft\Internet 

Explorer\Toolbar\WebBrowser [{C55BBCD6-41AD-48AD-

9953-3609C48EACC7}]
Valore Eliminati : HKCU\Software\Microsoft\Internet 

Explorer\URLSearchHooks [{7A55CBB2-2B2E-4A41-9DE1-

6AC5D2C2BE0A}]
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes

\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes

\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes

\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes

\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes

\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft

\Windows\CurrentVersion\Explorer\Browser Helper 

Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft

\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226

-BDF6-49120163DE86}
Dato Ripristinati : HKEY_LOCAL_MACHINE\SOFTWARE

\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open

\command
Dato Ripristinati : HKEY_LOCAL_MACHINE\SOFTWARE

\Clients\StartMenuInternet\Google Chrome\shell\open

\command
Chiave Eliminati : HKCU\Software\Softonic
Chiave Eliminati : HKCU\Software\systweak
Chiave Eliminati : HKCU\Software\Tutorials
Chiave Eliminati : HKCU\Software\TutoTag
Chiave Eliminati : HKCU\Software\UtilityChest_49
Chiave Eliminati : HKCU\Software\YahooPartnerToolbar
Chiave Eliminati : HKCU\Software\AppDataLow

\Software\blockAndSurf
Chiave Eliminati : HKCU\Software\AppDataLow

\Software\UtilityChest_49
Chiave Eliminati : HKLM\Software\DeviceVM
Chiave Eliminati : HKLM\Software\Free_soft_today
Chiave Eliminati : HKLM\Software\SweetIM
Chiave Eliminati : HKLM\Software\systweak
Chiave Eliminati : HKLM\Software\Tutorials
Chiave Eliminati : HKLM\Software\UtilityChest_49
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows

\CurrentVersion\Uninstall\VOPackage
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows

\CurrentVersion\Uninstall\fst_it_141_is1
Chiave Eliminati : [x64] HKLM\SOFTWARE\DeviceVM
Chiave Eliminati : HKLM\Software\Classes\Installer

\Features\467F76FB6B590634BB752B5EAAC618B4
Chiave Eliminati : HKLM\Software\Classes\Installer

\Products\467F76FB6B590634BB752B5EAAC618B4

***** [ Browser ] *****

-\ Internet Explorer v11.0.9600.17126

Impostazioni Ripristinato : HKCU\Software\Microsoft

\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft

\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft

\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft

\Internet Explorer\Main [Start Page]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft

\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE

\Microsoft\Internet Explorer\Main 

[Default_Search_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE

\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE

\Microsoft\Internet Explorer\Main [Start Page]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE

\Microsoft\Internet Explorer\Main [Search Page]

-\ Mozilla Firefox v

[ File : C:\users\user\AppData\Roaming\Mozilla

\Firefox\Profiles\j7i8xr7v.default\prefs.js ]

Riga eliminata : user_pref

("browser.startup.homepage", "hxxp://isearch.omiga-

plus.com/?

type=hp&ts=1403181223&from=tt4u&uid=SAMSUNGXHM500JI_

S208JD0S920908");

-\ Google Chrome v0.0.0.0

*************************

AdwCleaner[R0].txt - [13257 octets] - [20/06/2014 

18:34:36]
AdwCleaner[S0].txt - [11068 octets] - [20/06/2014 

18:37:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - 

[11129 octets] ##########

elisd · Answer

Aggiungo che sul desktop mi sono comparse file nascosti (in trasparenza).
Devo eliminarli?

n00r · Answer

come si presenta il PC ora continuano ad aprirsi delle pagine ?


continuano con Malwarebytes : 

=Malwarebytes=
*Scarica Malwarebytes ed installalo
*Disattiva l'antivirus (durante la scansione)
*Avvia il programma 
*Aspetta che finisca l'aggiornamento del database; se non si fa in automatico, clic su "Aggiornamento"
*Clic su "Opzione" 
**Cambia la lingua in italiano
**Clic su "Rilevamento e protezione" (a sinistra), in "Protezione da 'non-malware'" seleziona "Gestisci rilevamenti come malware" in entrambe le voci Rilevamenti "PUP" e "PUM"
*Clic su "Scansione"
*Seleziona la voce "Ricerca elementi nocivi"
*Una volta finita clic su "Applica azioni"
*Se viene chiesto di riavviare "Accetta"
*Apri il programma e clic su "Cronologia" poi "Log applicazione"
*Seleziona l'ultimo log quindi "Vedi"
* Clic su "Copia negli appunti" (non succede niente ma il report verrà copiato)
* Fa incolla nella tua risposta

elisd · Answer

Ho fatto una prova.
Allora di solito non mi capitava mai, ma sulla pagina di un normale sito di moda, tanto per fare una prova, mi compaiono piccole finestre.

Ora scarico.

elisd · Answer

Madonna!!!
Me ne ha trovati 22 e non ha ancora finito!!!

elisd · Answer

Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 20/06/2014
Ora scansione: 19:11:05
File di log: 
Amministratore: Si

Versione: 2.00.2.1012
Database malware: v2014.06.20.08
Database rootkit: v2014.06.19.01
Licenza: Prova
Protezione da malware: Attivata
Protezione da siti web nocivi: Attivata
Self-protection: Disattivata

SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: user

Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 294598
Tempo impiegato: 15 min, 6 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Heuristics: Attivata
PUP: Attivata
PUM: Attivata

Processi: 4
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\updateToggleMark.exe, 3016, Elimina al riavvio, [a8101565fe7d31059fc6b6b9ef127a86]
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\utilToggleMark.exe, 2000, Elimina al riavvio, [d2e6403a413ae94d7bea81eec43d3fc1]
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMark.BrowserAdapter.exe, 6724, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd]
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMark.PurBrowse64.exe, 6224, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd]

Moduli: 4
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMarkBHO.dll, Elimina al riavvio, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMarkBHO.dll, Elimina al riavvio, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMarkBHO.dll, Elimina al riavvio, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\{af16abf4-eac1-49b4-93fc-58f6ca799135}.dll, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 

Chiavi di registro: 24
PUP.Optional.ToggleMark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Update ToggleMark, Spostato in quarantena, [a8101565fe7d31059fc6b6b9ef127a86], 
PUP.Optional.ToggleMark.A, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\Util ToggleMark, Spostato in quarantena, [d2e6403a413ae94d7bea81eec43d3fc1], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{24ac098d-eb44-41b3-abaa-f4bc67d4d64d}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{0ea930ca-41da-4b13-aad5-bc86c2a8ea17}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{E2D6EC1B-0DB2-4B28-BBCB-FE6025A7A966}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{E2D6EC1B-0DB2-4B28-BBCB-FE6025A7A966}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{0ea930ca-41da-4b13-aad5-bc86c2a8ea17}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{24AC098D-EB44-41B3-ABAA-F4BC67D4D64D}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKU\S-1-5-21-3842233508-1258166116-3062468207-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{24AC098D-EB44-41B3-ABAA-F4BC67D4D64D}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.ToggleMark.A, HKU\S-1-5-21-3842233508-1258166116-3062468207-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{24AC098D-EB44-41B3-ABAA-F4BC67D4D64D}, Spostato in quarantena, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.Skytech.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\omiga-plus uninstaller, Spostato in quarantena, [6157acceb2c99a9cb9b2c2c7ab56926e], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ToggleMark, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ISearch.A, HKLM\SOFTWARE\WOW6432NODE\omiga-plusSoftware, Spostato in quarantena, [ffb9b9c1adced5610b6fe01645be8b75], 
PUP.Optional.ToggleMark.A, HKLM\SOFTWARE\WOW6432NODE\ToggleMark, Spostato in quarantena, [6157fa802a514aec1ee011a90101fd03], 
PUP.Optional.MindSpark.A, HKLM\SOFTWARE\WOW6432NODE\MOZILLAPLUGINS\@UtilityChest_49.com/Plugin, Spostato in quarantena, [8137077354270a2cc6320ca5b949a35d], 
PUP.Optional.ToggleMark.A, HKU\S-1-5-21-3842233508-1258166116-3062468207-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ToggleMark, Spostato in quarantena, [1e9a7307b3c83bfbbb443e7c20e2c53b], 
PUP.Optional.BlockAndSurf.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\8576CBF2-6027-C45B-A9F3-4EBFF4A2F6B6, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 

Valori di registro: 0
(No malicious items detected)

Dati di registro: 1
PUP.Optional.Qone8, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES|DefaultScope, {33BB0A4E-99AF-4226-BDF6-49120163DE86}, Buono: ({0633EE93-D776-472f-A0FF-E1416B8B2E3A}), Cattivo ({33BB0A4E-99AF-4226-BDF6-49120163DE86}),Sostituito,[c9efd0aaef8c989eb023017ecb39ba46]

Cartelle: 6
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\TEMP, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0, Spostato in quarantena, [33855228e794053114bedcba768c9868], 

File: 42
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\updateToggleMark.exe, Elimina al riavvio, [a8101565fe7d31059fc6b6b9ef127a86], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\utilToggleMark.exe, Elimina al riavvio, [d2e6403a413ae94d7bea81eec43d3fc1], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMarkBHO.dll, Elimina al riavvio, [6355304aadce4ee8085cfe71f40d7e82], 
PUP.Optional.Skytech.A, C:\Users\user\AppData\Roaming\omiga-plus\UninstallManager.exe, Spostato in quarantena, [6157acceb2c99a9cb9b2c2c7ab56926e], 
PUP.Optional.Softonic.A, C:\Users\user\Documents\Downloads\SoftonicDownloader_per_free-youtube-download.exe, Spostato in quarantena, [f2c696e48cef4aec68b125ffbf42e61a], 
PUP.Optional.FreeSoft, C:\Users\user\AppData\Local\Temp\is-1CUJD.tmp\gentlemjfst_iit.exe, Spostato in quarantena, [0cacccaeaecd3df9ec82fd80b34e13ed], 
PUP.Optional.SweetIM, C:\Windows\Installer\1677817.msi, Spostato in quarantena, [883049316813033386138023fb097888], 
PUP.Optional.SweetIM, C:\Windows\Installer\167781c.msi, Spostato in quarantena, [a0180b6fc0bb00361b7e049f5ba9d927], 
PUP.Optional.ToggleMark.A, C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\j7i8xr7v.default\extensions\{af16abf4-eac1-49b4-93fc-58f6ca799135}.xpi, Spostato in quarantena, [6058205a136896a0026553527a88cc34], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMark.ico, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\0, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\7za.exe, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMark.FirstRun.exe, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\ToggleMarkUninstall.exe, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\updateToggleMark.InstallState, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\7za.exe, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\BrowserAdapterS.7z, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMark.BrowserAdapter.exe, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMark.PurBrowse64.exe, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMark.PurBrowseG.zip, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\ToggleMarkBAApp.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\utilToggleMark.InstallState, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\{af16abf4-eac1-49b4-93fc-58f6ca799135}.dll, Elimina al riavvio, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.Bromon.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.BroStats.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.BrowserAdapterS.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.CompatibilityChecker.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.FFUpdate.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.IEUpdate.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ToggleMark.A, C:\Program Files (x86)\ToggleMark\bin\plugins\ToggleMark.PurBrowseG.dll, Spostato in quarantena, [09af31494d2e122436c75c5efb0743bd], 
PUP.Optional.ISearch.A, C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\omiga-plus.xml, Spostato in quarantena, [3088304a87f42d09039614d9897a42be], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\174.crx, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\174.dat, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\174.xpi, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\a.db, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\b.db, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.bin, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.dll, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\BlockAndSurfbx174.ini, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\Sqlite3.dll, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.BlockAndSurf.A, C:\Program Files (x86)\BlockAndSurfS\Uninstall.exe, Spostato in quarantena, [605899e1d7a447efe4453b5ac0422cd4], 
PUP.Optional.CrossRider.A, C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_mpfapcdfbbledbojijcbcclmlieaoogk_0\3, Spostato in quarantena, [33855228e794053114bedcba768c9868], 

Settori fisici: 0
(No malicious items detected)


(end)

elisd · Answer

Vado a cibarmi.
Ora ho fatto qualche prova e sembrano scomparsi i problemi.
Certo è che ero piena di virus o come cavolo sono.
C'è dell'altro che posso fare?
Cmq grazie mille!!!
Non parlo troppo forte...
Continuerò a seguire il vostro sito di sicuro!!!!

n00r · Answer

ok benissimo...

se non hai ancora riavviato il PC, riavvialo ora e fa una nuova scansione con Adwcleaner poi un'altra nuova con Mlawarebytes e posta i report

Problemi con pagine che si aprono da sole...

11 risposte

Discussioni simili