Chrome aiuto pubblicità si apre da sola [Chiuso]

lallina - 10 mar 2014 alle 10:25 - Ultima risposta: l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento
- 5 apr 2014 alle 14:11
Ciao, non so più che fare con il mio computer...ho windows 7...chrome ed explorer ...ma uso sempre chrome...appena apro internet mi continuano ad aprirsi pagine pubblicitarie sia da explorer cme
Sia da chrome...ho fatto scansione con avg..due minacce eliminate...con malwarebytes.. eliminate anche qull...con OTl...mi sn usciti due report...nn so che fare!

Altro... 

33 risposte

Casamarce 1350 Posti giovedì 21 novembre 2013Data di registrazione giovedì 29 gennaio 2015 Ultimo intervento - 10 mar 2014 alle 11:25
0
Grazie
Ciao,
hai un ad blocker? Qui per chrome: http://it.ccm.net/download/scaricare-102-google-chrome

Se la cosa continua prova a seguire queste guide :
* http://it.ccm.net/faq/2203-come-togliere-awesomehp
* http://it.ccm.net/faq/1767-ripristina-il-browser#q=resettare+browser&cur=1&url=%2F

Fammi sapere se hai risolto...
Ciau =)
0
Grazie
devi scaricare chrome??perche' ce lo già....
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 11 mar 2014 alle 13:59
0
Grazie
Ciao,
Scarica l'applicazione AD BLOCK PLUS nel Google store .
Si il problema di pagina di pub e ancora presente, scarica ADW Cleaner=>
http://it.ccm.net/download/scaricare-2337-adwcleaner

Avviarlo e scegliere l'opzione "Scan" poi "Delete".
Posta i report qui.
Si tu hai ancora i report di Malware bytes,posta lo qui.

Ubuntu 13.04 Firefox 21/ Magela 3 Opera 12.15
0
Grazie
allora AD BLOCK PLUS installato ma si aprono ancora pagine da explorer...
e da chrome anche!
comunque ho i report li ho di OTL...MALWAREBYTES E ADWCLEANER ma non so come postarli qui ... :))
Casamarce 1350 Posti giovedì 21 novembre 2013Data di registrazione giovedì 29 gennaio 2015 Ultimo intervento - 11 mar 2014 alle 14:58
seleziona tutto il testo e incollalo qui in un commento o in una risposta ^^
lallina1 3 Posti martedì 11 marzo 2014Data di registrazione martedì 11 marzo 2014 Ultimo intervento - 11 mar 2014 alle 16:14
fatto...giusto? :))
lallina1 3 Posti martedì 11 marzo 2014Data di registrazione martedì 11 marzo 2014 Ultimo intervento - 11 mar 2014 alle 15:17
0
Grazie
OTL REPORT

OTL logfile created on: 09/03/2014 15:03:50 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mamma e Papa\Downloads
Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16798)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy

1013,10 Mb Total Physical Memory | 184,66 Mb Available Physical Memory | 18,23% Memory free
1,99 Gb Paging File | 0,92 Gb Available in Paging File | 46,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 219,79 Gb Total Space | 142,73 Gb Free Space | 64,94% Space Free | Partition Type: NTFS

Computer Name: CRISTIAN-PC | User Name: Cristian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days

[color=#E56717]========== Processes (SafeList) ==========/color

PRC - C:\Users\Mamma e Papa\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programmi\GrabRez\updateGrabRez.exe ()
PRC - C:\Programmi\GrabRez\bin\utilGrabRez.exe ()
PRC - C:\Programmi\WinZipper\winzipersvc.exe (Taiwan Shui Mu Chih Ching Technology Limited.)
PRC - C:\ProgramData\WPM\wprotectmanager.exe (Cherished Technololgy LIMITED)
PRC - C:\Programmi\lsm\LSM.exe (MS)
PRC - C:\Programmi\Fortunitas\updateFortunitas.exe ()
PRC - C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED)
PRC - C:\Programmi\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\AVG\AVG2013\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\AVG\AVG2013\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Programmi\lsm\aus.exe (MS)
PRC - C:\Programmi\AVG\AVG2013\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\AVG\AVG2013\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programmi\Zune\ZuneLauncher.exe (Microsoft Corporation)
PRC - C:\Programmi\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
PRC - C:\Programmi\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programmi\Launch Manager\dsiwmis.exe (Dritek System Inc.)
PRC - C:\Programmi\Launch Manager\LMworker.exe (Dritek System Inc.)
PRC - C:\Programmi\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Programmi\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.)
PRC - C:\Programmi\EgisTec IPS\EgisUpdate.exe (Egis Technology Inc.)
PRC - C:\Programmi\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated)
PRC - C:\Programmi\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated)
PRC - C:\Programmi\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
PRC - C:\Programmi\Acer\Acer ePower Management\ePowerEvent.exe (Acer Incorporated)
PRC - C:\Programmi\Acer\Acer VCM\RS_Service.exe (Acer Incorporated)
PRC - C:\Programmi\Acer\Acer Updater\UpdaterService.exe (Acer Group)
PRC - C:\Programmi\Acer\Registration\GREGsvc.exe (Acer Incorporated)
PRC - C:\Programmi\Elantech\ETDCtrlHelper.exe (ELAN Microelectronic Corp.)
PRC - C:\Programmi\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
PRC - C:\Programmi\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
PRC - C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)


[color=#E56717]========== Modules (No Company Name) ==========/color

MOD - C:\Programmi\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programmi\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Programmi\Launch Manager\CdDirIo.dll ()


[color=#E56717]========== Services (SafeList) ==========/color

SRV - (Update GrabRez) -- C:\Programmi\GrabRez\updateGrabRez.exe ()
SRV - (Util GrabRez) -- C:\Programmi\GrabRez\bin\utilGrabRez.exe ()
SRV - (winzipersvc) -- C:\Programmi\WinZipper\winzipersvc.exe (Taiwan Shui Mu Chih Ching Technology Limited.)
SRV - (Wpm) -- C:\ProgramData\WPM\wprotectmanager.exe (Cherished Technololgy LIMITED)
SRV - (Log S.M.) -- C:\Programmi\lsm\LSM.exe (MS)
SRV - (Update Fortunitas) -- C:\Programmi\Fortunitas\updateFortunitas.exe ()
SRV - (IePluginService) -- C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED)
SRV - (BackupStack) -- C:\Programmi\MyPC Backup\BackupStack.exe (Just Develop It)
SRV - (avgwd) -- C:\Programmi\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (AUS) -- C:\Programmi\lsm\aus.exe (MS)
SRV - (AVGIDSAgent) -- C:\Programmi\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (WinDefend) -- C:\Programmi\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (MBAMService) -- C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (SoftwareUpd) -- C:\Users\Cristian\AppData\Local\SoftwareUpdater\SoftwareUpdService.exe (SoftwareUpdService)
SRV - (ZuneWlanCfgSvc) -- C:\Programmi\Zune\ZuneWlanCfgSvc.exe (Microsoft Corporation)
SRV - (WMZuneComm) -- C:\Programmi\Zune\WMZuneComm.exe (Microsoft Corporation)
SRV - (ZuneNetworkSvc) -- C:\Programmi\Zune\ZuneNss.exe (Microsoft Corporation)
SRV - (wlidsvc) -- C:\Programmi\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (WMPNetworkSvc) -- C:\Programmi\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (DsiWMIService) -- C:\Programmi\Launch Manager\dsiwmis.exe (Dritek System Inc.)
SRV - (ePowerSvc) -- C:\Programmi\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated)
SRV - (RS_Service) -- C:\Programmi\Acer\Acer VCM\RS_Service.exe (Acer Incorporated)
SRV - (Updater Service) -- C:\Programmi\Acer\Acer Updater\UpdaterService.exe (Acer Group)
SRV - (GREGService) -- C:\Programmi\Acer\Registration\GREGsvc.exe (Acer Incorporated)
SRV - (IAANTMON) -- C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Intel Corporation)


[color=#E56717]========== Driver Services (SafeList) ==========/color

DRV - (AVGIDSDriver) -- C:\Windows\System32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- C:\Windows\System32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgrkx86) -- C:\Windows\System32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avglogx) -- C:\Windows\System32\drivers\avglogx.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSHX) -- C:\Windows\System32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgldx86) -- C:\Windows\System32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\Windows\System32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (Avgtdix) -- C:\Windows\System32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (ssadmdm) -- C:\Windows\System32\drivers\ssadmdm.sys (MCCI Corporation)
DRV - (ssadbus) -- C:\Windows\System32\drivers\ssadbus.sys (MCCI Corporation)
DRV - (ssadserd) -- C:\Windows\System32\drivers\ssadserd.sys (MCCI Corporation)
DRV - (ssadmdfl) -- C:\Windows\System32\drivers\ssadmdfl.sys (MCCI Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (L1C) -- C:\Windows\System32\drivers\L1C62x86.sys (Atheros Communications, Inc.)
DRV - (EUCR) -- C:\Windows\System32\drivers\EUCR6SK.sys (ENE Technology Inc.)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (ewusbnet) -- C:\Windows\System32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwusbfake) -- C:\Windows\System32\drivers\ewusbfake.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)


[color=#E56717]========== Standard Registry (SafeList) ==========/color


[color=#E56717]========== Internet Explorer ==========/color

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.awesomehp.com/web/?type=ds&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.awesomehp.com/web/?type=ds&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
IE - HKLM\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKLM\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.awesomehp.com/web/?type=ds&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&q={searchTerms}


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [String data over 1000 bytes]
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\SearchScopes,DefaultScope = {33BB0A4E-99AF-4226-BDF6-49120163DE86}
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&ts=1393462027&type=default&q={searchTerms}
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0410&m=aod260&r=27b50111r125l04c4ww35w4862u266
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\SearchScopes,DefaultScope = {006ee092-9658-4fd6-bd8e-a21a348e59f5}
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}: "URL" = http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ACAW_itIT414
IE - HKU\S-1-5-21-1086111630-753300148-929318756-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


[color=#E56717]========== FireFox ==========/color

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Cristian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)


[2013/07/16 12:16:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programmi\Mozilla Firefox\extensions

[color=#E56717]========== Chrome ==========/color

CHR - default_search_provider: delta-homes (Enabled)
CHR - default_search_provider: search_url = http://search.delta-homes.com/web/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=ds&from=wpm0226&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&ts=1393462027&type=default&q={searchTerms}
CHR - default_search_provider: suggest_url = ,
CHR - homepage: http://www.delta-homes.com/?utm_source=b&utm_medium=wpm0226&utm_campaign=installer&utm_content=hp&from=wpm0226&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&ts=1393462027
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.146\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.146\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\33.0.1750.146\pdf.dll
CHR - plugin: Skype Toolbars (Enabled) = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.9.0.9216_0\npSkypeChromePlugin.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.9 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Cristian\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - Extension: New Tab Page = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl\1.4_0\
CHR - Extension: DealPly = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje\3.9.7.9_0\
CHR - Extension: Lightning Newtab = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo\1.1.8.5_0\
CHR - Extension: MediaPlayerEnhance = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\crossrider
CHR - Extension: MediaPlayerEnhance = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\
CHR - Extension: Skype Click to Call = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\7.0.14735.1561_0\
CHR - Extension: Helper extension = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla\2.0_0\
CHR - Extension: Google Wallet = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Extended Protection = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo\1.4.1_0\
CHR - Extension: Quick Start = C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma\3.1.5_0\

O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (IETabPage Class) - {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} - C:\Programmi\SupTab\SupTab.dll (Thinknice Co. Limited)
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Programmi\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Fortunitas) - {c6f3fc7b-d607-44ec-9caf-2a41d547137f} - C:\Programmi\Fortunitas\FortunitasBHO.dll (Fortunitas)
O3 - HKLM\..\Toolbar: (no name) - {ae07101b-46d4-4a98-af68-0333ea26e113} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\Toolbar\WebBrowser: (no name) - {2C965F3F-8EFD-4BFC-A2C5-1672845FDBBF} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\Toolbar\WebBrowser: (no name) - {2C965F3F-8EFD-4BFC-A2C5-1672845FDBBF} - No CLSID value found.
O3 - HKU\S-1-5-21-1086111630-753300148-929318756-1001\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [Acer ePower Management] C:\Programmi\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVG_UI] C:\Program Files\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [EgisUpdate] C:\Program Files\EgisTec IPS\EgisUpdate.exe (Egis Technology Inc.)
O4 - HKLM..\Run: [ETDWare] C:\Programmi\Elantech\ETDCtrl.exe (ELAN Microelectronic Corp.)
O4 - HKLM..\Run: [IAAnotif] C:\Programmi\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Programmi\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [SuiteTray] C:\Program Files\EgisTec MyWinLockerSuite\x86\SuiteTray.exe (Egis Technology Inc.)
O4 - HKLM..\Run: [tuto4pc_it_8] File not found
O4 - HKLM..\Run: [Zune Launcher] C:\Program Files\Zune\ZuneLauncher.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1000..\Run: [Facebook Update] C:\Users\Cristian\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1000..\Run: [NextLive] C:\Users\Cristian\AppData\Roaming\newnext.me\nengine.dll ()
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1000..\Run: [NTRedirect] C:\Users\Cristian\AppData\Roaming\BabSolution\Shared\enhancedNT.dll ()
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1001..\Run: [AVG-Secure-Search-Update_0913b] C:\Users\Mamma e Papa\AppData\Roaming\AVG 0913b Campaign\AVG-Secure-Search-Update-0913b.exe /PROMPT --mid bd5ac3fc03cb47d39011cd3c4ecc5c97-f21268d2230c48c7214d45009c1f96c808679e37 --CMPID 0913b File not found
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1001..\Run: [BearShare] "C:\Program Files\BearShare Applications\BearShare\BearShare.exe" --lightmode File not found
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1001..\Run: [Facebook Update] C:\Users\Mamma e Papa\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-1086111630-753300148-929318756-1001..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" File not found
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk = C:\Programmi\MyPC Backup\MyPC Backup.exe (MyPCBackup.com)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Programmi\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programmi\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Programmi\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programmi\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{35C67A1F-4B20-466C-903B-C07A8C320834}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3A4BB6E8-2876-4F3F-9603-685FE9B5C794}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3A4BB6E8-2876-4F3F-9603-685FE9B5C794}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4077E0E8-45D5-490A-95AE-09FA32B941A6}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4077E0E8-45D5-490A-95AE-09FA32B941A6}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programmi\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programmi\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programmi\Acer\Acer VCM\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programmi\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programmi\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{6fd0dbfe-185d-11e2-ad7b-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{6fd0dbfe-185d-11e2-ad7b-1c750828b564}\Shell\AutoRun\command - "" = D:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{81f588f4-1aae-11e2-b5e7-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{81f588f4-1aae-11e2-b5e7-1c750828b564}\Shell\AutoRun\command - "" = D:\LaunchU3.exe -a
O33 - MountPoints2\{89db194e-366e-11e2-b571-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{89db194e-366e-11e2-b571-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{a32a7ad7-1229-11e3-800f-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{a32a7ad7-1229-11e3-800f-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{a32a7aee-1229-11e3-800f-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{a32a7aee-1229-11e3-800f-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{d23805b0-588b-11e3-bf2d-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{d23805b0-588b-11e3-bf2d-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{d4d135b3-5860-11e3-8614-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{d4d135b3-5860-11e3-8614-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\{d4d135d4-5860-11e3-8614-1c750828b564}\Shell - "" = AutoRun
O33 - MountPoints2\{d4d135d4-5860-11e3-8614-1c750828b564}\Shell\AutoRun\command - "" = D:\AutoRun.exe
O33 - MountPoints2\D\Shell - "" = AutoRun
O33 - MountPoints2\D\Shell\AutoRun\command - "" = D:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

[color=#E56717]========== Files/Folders - Created Within 60 Days ==========/color

[2014/03/09 11:21:24 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\Malwarebytes
[2014/03/09 11:20:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2014/03/09 11:20:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2014/03/09 11:20:40 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2014/03/09 11:20:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2014/03/08 20:05:57 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{6793AC6D-C9FF-4DE4-990E-797C1CA75335}
[2014/03/03 12:59:16 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{B1046C27-946D-422E-BCA8-88B12DC5FF20}
[2014/03/02 18:32:06 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{A881BD22-95AF-4A0C-9544-E15F97B5EFF8}
[2014/02/27 01:48:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
[2014/02/27 01:48:30 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\WinZipper
[2014/02/27 01:42:11 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{9ECF7E22-8724-4C0F-8EB9-F1B197371B2F}
[2014/02/26 06:21:03 | 000,000,000 | ---D | C] -- C:\Windows\Migration
[2014/02/25 12:52:16 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{F3D97F80-0B89-44E9-82FF-B49EE9F40916}
[2014/02/23 19:42:34 | 000,052,920 | ---- | C] (StdLib) -- C:\Windows\System32\drivers\wStLibG.sys
[2014/02/22 00:59:34 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\BeamriseUninstall
[2014/02/22 00:55:36 | 000,692,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/02/22 00:51:49 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
[2014/02/22 00:50:31 | 000,000,000 | ---D | C] -- C:\Program Files\GrabRez
[2014/02/22 00:47:03 | 000,000,000 | ---D | C] -- C:\Program Files\hdvidcodec.com
[2014/02/21 20:16:30 | 000,000,000 | ---D | C] -- C:\Users\Cristian\.android
[2014/02/21 20:16:20 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\cache
[2014/02/21 20:15:30 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\newnext.me
[2014/02/21 20:15:29 | 000,000,000 | ---D | C] -- C:\Program Files\Fortunitas
[2014/02/21 20:15:21 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\genienext
[2014/02/21 20:14:55 | 000,000,000 | ---D | C] -- C:\Users\Cristian\Documents\Mobogenie
[2014/02/21 20:14:55 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\Mobogenie
[2014/02/21 20:14:40 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\SwvUpdater
[2014/02/21 20:12:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue
[2014/02/21 20:12:10 | 000,000,000 | ---D | C] -- C:\ProgramData\IePluginService
[2014/02/21 20:11:34 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\SupTab
[2014/02/21 20:11:18 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\Uniblue
[2014/02/21 20:11:18 | 000,000,000 | ---D | C] -- C:\Program Files\Uniblue
[2014/02/21 20:11:12 | 000,000,000 | ---D | C] -- C:\Program Files\SupTab
[2014/02/21 20:10:53 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
[2014/02/21 20:10:49 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM
[2014/02/21 20:10:35 | 000,000,000 | ---D | C] -- C:\Program Files\MyPC Backup
[2014/02/21 20:10:26 | 000,000,000 | ---D | C] -- C:\Program Files\MediaPlayerEnhance
[2014/02/21 20:09:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mobogenie
[2014/02/21 20:09:36 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Roaming\awesomehp
[2014/02/21 20:07:00 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\SearchProtect
[2014/02/18 13:25:58 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{3D07C38A-B49E-4D0F-9BA4-10A92DEB8398}
[2014/02/15 19:24:49 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{6D256F54-DC42-4AD6-9ECC-97B95F03D362}
[2014/02/14 13:17:00 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{AA2E7E1E-9A95-455C-A0DE-8CC7118DAE4F}
[2014/02/13 03:07:27 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/02/13 03:07:19 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/02/13 03:07:07 | 002,877,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/02/13 03:07:01 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/02/13 03:06:53 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/02/13 03:06:46 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/02/13 03:06:37 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/02/13 03:06:36 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/02/13 03:06:36 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/02/13 03:06:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014/02/13 03:06:35 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014/02/13 02:25:37 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msxml3r.dll
[2014/02/13 02:25:16 | 001,987,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2014/02/13 02:25:15 | 003,419,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
[2014/02/13 02:25:12 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2014/02/13 02:25:12 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2014/02/13 02:25:12 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2014/02/13 02:25:12 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2014/02/13 02:25:11 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2014/02/13 02:25:11 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2014/02/13 02:25:11 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2014/02/13 02:25:11 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2014/02/13 02:25:11 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2014/02/11 14:43:47 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{F92DE543-CFDB-482E-A722-0DA689A4FB7B}
[2014/02/08 19:52:47 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{F1A015EF-7656-43D7-8100-A816AD0FA10A}
[2014/02/08 14:19:41 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{A2FC1813-59B5-4F08-B713-5498D3E2CA45}
[2014/02/06 19:23:19 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{4DDCA226-D7D4-4A6E-AD4F-2F0EBF38D3A4}
[2014/02/06 14:16:20 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{6C0B67E2-3491-495C-97C6-4F34F3C6F528}
[2014/01/22 20:22:09 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{4615C4CF-DEF5-4E8E-9618-5A7914584875}
[2014/01/18 19:13:50 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{85068573-E701-4817-B84F-E56C0E5F3FBD}
[2014/01/16 01:50:30 | 002,349,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2014/01/16 01:50:26 | 000,240,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2014/01/16 01:50:19 | 000,284,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbport.sys
[2014/01/16 01:50:18 | 000,006,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbd.sys
[2014/01/11 19:46:19 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{CA65F0B2-46FE-4BA0-B0B6-26D0A007B187}
[2014/01/10 15:28:45 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{D0755AA3-B23A-4521-AF36-C64FBBC6F206}
[2014/01/09 12:47:11 | 000,000,000 | ---D | C] -- C:\Users\Cristian\AppData\Local\{86E2284A-5D68-48F2-AA2B-2BE90050F3CC}

[color=#E56717]========== Files - Modified Within 60 Days ==========/color

[2014/03/09 15:09:15 | 000,009,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2014/03/09 15:09:15 | 000,009,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2014/03/09 15:03:00 | 000,000,368 | ---- | M] () -- C:\Windows\tasks\AmiUpdXp.job
[2014/03/09 15:01:10 | 000,001,134 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2014/03/09 15:01:05 | 000,003,114 | ---- | M] () -- C:\Windows\tasks\MediaPlayerEnhance-chromeinstaller.job
[2014/03/09 15:01:05 | 000,002,388 | ---- | M] () -- C:\Windows\tasks\MediaPlayerEnhance-firefoxinstaller.job
[2014/03/09 15:01:05 | 000,001,556 | ---- | M] () -- C:\Windows\tasks\MediaPlayerEnhance-codedownloader.job
[2014/03/09 15:01:05 | 000,000,266 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC Startup.job
[2014/03/09 15:00:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2014/03/09 15:00:40 | 796,733,440 | -HS- | M] () -- C:\hiberfil.sys
[2014/03/09 14:33:07 | 000,001,138 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2014/03/09 14:10:00 | 000,000,940 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1086111630-753300148-929318756-1000UA.job
[2014/03/09 14:10:00 | 000,000,918 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1086111630-753300148-929318756-1000Core.job
[2014/03/09 14:07:07 | 000,001,206 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1086111630-753300148-929318756-1001UA.job
[2014/03/09 14:00:00 | 000,000,272 | ---- | M] () -- C:\Windows\tasks\SpeedUpMyPC Maintenance.job
[2014/03/09 11:20:51 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/03/08 21:01:17 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2014/03/08 21:01:17 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2014/03/08 20:07:00 | 000,001,184 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1086111630-753300148-929318756-1001Core.job
[2014/02/28 20:11:33 | 000,744,268 | ---- | M] () -- C:\Windows\System32\perfh010.dat
[2014/02/28 20:11:33 | 000,657,096 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2014/02/28 20:11:33 | 000,148,888 | ---- | M] () -- C:\Windows\System32\perfc010.dat
[2014/02/28 20:11:33 | 000,123,566 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2014/02/23 19:42:34 | 000,052,920 | ---- | M] (StdLib) -- C:\Windows\System32\drivers\wStLibG.sys
[2014/02/21 20:20:54 | 000,001,358 | ---- | M] () -- C:\Windows\tasks\MediaPlayerEnhance-enabler.job
[2014/02/21 20:14:43 | 000,001,919 | ---- | M] () -- C:\Users\Cristian\Desktop\Sync Folder.lnk
[2014/02/21 20:10:58 | 000,001,059 | ---- | M] () -- C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/21 20:10:57 | 000,001,049 | ---- | M] () -- C:\Users\Cristian\Desktop\MyPC Backup.lnk
[2014/02/21 20:09:26 | 000,002,421 | ---- | M] () -- C:\Users\Cristian\Desktop\Google Chrome.lnk
[2014/02/21 20:07:10 | 000,000,000 | ---- | M] () -- C:\end
[2014/02/01 08:58:43 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2014/02/01 08:57:39 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2014/02/01 08:57:35 | 000,493,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2014/02/01 08:57:20 | 002,877,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2014/02/01 08:57:20 | 000,039,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2014/02/01 08:57:16 | 000,391,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2014/02/01 08:57:16 | 000,109,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2014/02/01 08:57:16 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2014/02/01 08:57:16 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2014/02/01 08:34:53 | 002,706,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2014/02/01 07:38:03 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2014/01/16 20:45:50 | 000,268,144 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT

[color=#E56717]========== Files Created - No Company Name ==========/color

[2014/03/09 11:20:51 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2014/02/21 20:17:54 | 000,001,358 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-enabler.job
[2014/02/21 20:16:37 | 000,000,272 | ---- | C] () -- C:\Windows\tasks\SpeedUpMyPC Maintenance.job
[2014/02/21 20:15:53 | 000,001,556 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-codedownloader.job
[2014/02/21 20:14:53 | 000,000,266 | ---- | C] () -- C:\Windows\tasks\SpeedUpMyPC Startup.job
[2014/02/21 20:14:52 | 000,000,368 | ---- | C] () -- C:\Windows\tasks\AmiUpdXp.job
[2014/02/21 20:14:43 | 000,001,919 | ---- | C] () -- C:\Users\Cristian\Desktop\Sync Folder.lnk
[2014/02/21 20:12:11 | 000,002,388 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-firefoxinstaller.job
[2014/02/21 20:10:58 | 000,001,059 | ---- | C] () -- C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
[2014/02/21 20:10:57 | 000,001,049 | ---- | C] () -- C:\Users\Cristian\Desktop\MyPC Backup.lnk
[2014/02/21 20:10:44 | 000,003,114 | ---- | C] () -- C:\Windows\tasks\MediaPlayerEnhance-chromeinstaller.job
[2013/11/25 20:57:20 | 000,000,317 | ---- | C] () -- C:\Windows\wininit.ini
[2013/09/10 18:23:00 | 000,268,144 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2013/02/07 13:58:06 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010/05/19 10:26:45 | 000,131,472 | ---- | C] () -- C:\ProgramData\FullRemove.exe

[color=#E56717]========== ZeroAccess Check ==========/color

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2013/07/26 02:55:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========/color

[2013/08/25 20:11:21 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\AVG2013
[2014/02/21 20:09:42 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\awesomehp
[2013/07/16 12:17:40 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\BabSolution
[2012/05/03 12:58:08 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Babylon
[2013/03/16 15:06:27 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\DealPly
[2013/07/16 16:28:41 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\eIntaller
[2014/02/22 00:51:49 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl
[2013/09/07 11:46:12 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Liteon
[2013/08/22 11:21:09 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Movdap
[2014/03/03 12:58:55 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\newnext.me
[2014/02/21 20:11:34 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\SupTab
[2013/08/25 20:09:44 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\TuneUp Software
[2014/02/21 20:11:18 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Uniblue
[2013/08/12 01:47:15 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Web Cake
[2012/12/05 20:48:45 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\Windows Live Writer
[2014/02/27 01:48:30 | 000,000,000 | ---D | M] -- C:\Users\Cristian\AppData\Roaming\WinZipper
[2013/09/15 12:19:12 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
[2013/09/15 12:19:12 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
[2013/08/25 20:11:45 | 000,000,000 | ---D | M] -- C:\Users\Mamma e Papa\AppData\Roaming\AVG2013
[2013/07/16 17:42:53 | 000,000,000 | ---D | M] -- C:\Users\Mamma e Papa\AppData\Roaming\Iminent

[color=#E56717]========== Purity Check ==========/color



[color=#E56717]========== Alternate Data Streams ==========/color

@Alternate Data Stream - 129 bytes -> C:\ProgramData\TEMP:AD022376

< End of report >








OTL Extras logfile created on: 09/03/2014 15:03:50 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Mamma e Papa\Downloads
Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16798)
Locale: 00000410 | Country: Italia | Language: ITA | Date Format: dd/MM/yyyy

1013,10 Mb Total Physical Memory | 184,66 Mb Available Physical Memory | 18,23% Memory free
1,99 Gb Paging File | 0,92 Gb Available in Paging File | 46,24% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 219,79 Gb Total Space | 142,73 Gb Free Space | 64,94% Space Free | Partition Type: NTFS

Computer Name: CRISTIAN-PC | User Name: Cristian | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days

[color=#E56717]========== Extra Registry (SafeList) ==========/color


[color=#E56717]========== File Associations ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[color=#E56717]========== Shell Spawning ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========/color

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[color=#E56717]========== Firewall Settings ==========/color

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[color=#E56717]========== Authorized Applications List ==========/color


[color=#E56717]========== Vista Active Open Ports Exception List ==========/color

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{5AF3A097-92F6-4E72-A2B2-CBBBA8816503}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) |
"{73FE17C1-2A00-4FAD-A20C-9F21182A8BFE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{7A703F27-9987-4B81-88D3-8FD80C5F1D94}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) |
"{9ADC8C70-9DF6-47A0-B04E-7CBF93B92077}" = lport=2869 | protocol=6 | dir=in | app=system |

[color=#E56717]========== Vista Active Application Exception List ==========/color

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{095FEC9E-2FE0-4ECF-973E-7B6A767A44C5}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{0F98A621-0B38-4280-9777-116F96B3DA3F}" = protocol=17 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe |
"{2DFC4E68-07EB-4C71-B41E-C86A026C6E5A}" = dir=in | app=c:\program files\acer\acer vcm\vc.exe |
"{36FF173B-3F10-4F06-8CAD-B9B2923631DC}" = protocol=6 | dir=in | app=c:\users\cristian\appdata\local\beamrise\application\31.0.1650.7639\services\windows-x86-skypekit.exe |
"{4148C01F-D9A3-4579-B81C-15F896C0D0A9}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe |
"{45B89B65-538D-43E8-94A4-EC540F7AAE18}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{54BB17DA-F7CE-4920-8436-1489279FE618}" = dir=in | app=c:\users\cristian\appdata\local\facebook\video\skype\facebookvideocalling.exe |
"{5F6629CA-0952-4611-95EC-629D35824C41}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgnsx.exe |
"{7761C8A9-1A03-4EC0-89E9-E5B84F428C88}" = protocol=6 | dir=in | app=c:\program files\avg\avg2013\avgmfapx.exe |
"{7BCF97BA-0603-4467-A5DB-A61B15B59B18}" = protocol=6 | dir=in | app=c:\users\cristian\appdata\local\beamrise\application\31.0.1650.
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 11 mar 2014 alle 16:16
0
Grazie
Ciao,
Posta i report di Maleware e di ADW,i tuoi navigatori sono pieni di adware.
lallina1 3 Posti martedì 11 marzo 2014Data di registrazione martedì 11 marzo 2014 Ultimo intervento - 11 mar 2014 alle 16:18
# AdwCleaner v3.021 - Report created 11/03/2014 at 13:39:02
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Starter Service Pack 1 (32 bits)
# Username : Cristian - CRISTIAN-PC
# Running from : C:\Users\Mamma e Papa\Downloads\adwcleaner (1).exe
# Option : Scan

***** [ Services ] *****

Service Found : BackupStack
Service Found : IePluginService
Service Found : winzipersvc
Service Found : Wpm

***** [ Files / Folders ] *****

File Found : \END
File Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtab.crx
File Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
File Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.babylon.com_0.localstorage
File Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_search.babylon.com_0.localstorage-journal
File Found : C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Found : C:\Users\Cristian\Desktop\MyPC Backup.lnk
File Found : C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Found : C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Found : C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
File Found : C:\Windows\System32\Tasks\AmiUpdXp
File Found : C:\Windows\System32\Tasks\DealPlyUpdate
File Found : C:\Windows\System32\Tasks\EPUpdater
File Found : C:\Windows\System32\Tasks\SpeedUpMyPC Maintenance
File Found : C:\Windows\Tasks\AmiUpdXp.job
File Found : C:\Windows\Tasks\SpeedUpMyPC Maintenance.job
Folder Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Folder Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Folder Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Folder Found : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchpfiddbhbdnagofhkjlaiaejmkdcla
Folder Found : C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Folder Found C:\Program Files\DealPly
Folder Found C:\Program Files\HDvidCodec.com
Folder Found C:\Program Files\Mobogenie
Folder Found C:\Program Files\MyPC Backup
Folder Found C:\Program Files\SupTab
Folder Found C:\Program Files\uniblue
Folder Found C:\Program Files\Uniblue\SpeedUpMyPC
Folder Found C:\Program Files\WinZipper
Folder Found C:\ProgramData\Ask
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\eSafe
Folder Found C:\ProgramData\IePluginService
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Uniblue\SpeedUpMyPC
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZipper
Folder Found C:\ProgramData\Partner
Folder Found C:\ProgramData\Tarma Installer
Folder Found C:\ProgramData\WPM
Folder Found C:\Users\Cristian\AppData\Local\BeamriseUninstall
Folder Found C:\Users\Cristian\AppData\Local\EoRezo
Folder Found C:\Users\Cristian\AppData\Local\genienext
Folder Found C:\Users\Cristian\AppData\Local\lollipop
Folder Found C:\Users\Cristian\AppData\Local\Mobogenie
Folder Found C:\Users\Cristian\AppData\Local\SearchProtect
Folder Found C:\Users\Cristian\AppData\Local\SoftwareUpdater
Folder Found C:\Users\Cristian\AppData\Local\SwvUpdater
Folder Found C:\Users\Cristian\AppData\Local\Temp\Iminent
Folder Found C:\Users\Cristian\AppData\LocalLow\Delta
Folder Found C:\Users\Cristian\AppData\LocalLow\PriceGong
Folder Found C:\Users\Cristian\AppData\Roaming\awesomehp
Folder Found C:\Users\Cristian\AppData\Roaming\BabSolution
Folder Found C:\Users\Cristian\AppData\Roaming\Babylon
Folder Found C:\Users\Cristian\AppData\Roaming\DealPly
Folder Found C:\Users\Cristian\AppData\Roaming\eIntaller
Folder Found C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Folder Found C:\Users\Cristian\AppData\Roaming\Movdap
Folder Found C:\Users\Cristian\AppData\Roaming\newnext.me
Folder Found C:\Users\Cristian\AppData\Roaming\SupTab
Folder Found C:\Users\Cristian\AppData\Roaming\uniblue
Folder Found C:\Users\Cristian\AppData\Roaming\Uniblue\SpeedUpMyPC
Folder Found C:\Users\Cristian\AppData\Roaming\Web Cake
Folder Found C:\Users\Cristian\AppData\Roaming\WinZipper
Folder Found C:\Users\Cristian\Documents\Mobogenie
Folder Found C:\Users\Mamma e Papa\AppData\Local\EoRezo
Folder Found C:\Users\Mamma e Papa\AppData\Local\Temp\Iminent
Folder Found C:\Users\Mamma e Papa\AppData\Local\tuto4pc_it_8
Folder Found C:\Users\Mamma e Papa\AppData\LocalLow\Conduit
Folder Found C:\Users\Mamma e Papa\AppData\LocalLow\ConduitEngine
Folder Found C:\Users\Mamma e Papa\AppData\LocalLow\PriceGong
Folder Found C:\Users\Mamma e Papa\AppData\Roaming\Iminent

***** [ Shortcuts ] *****

Shortcut Found : C:\Users\Cristian\Desktop\Google Chrome.lnk ( hxxp://www.awesomehp.com/?type=sc&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX )
Shortcut Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk ( hxxp://www.awesomehp.com/?type=sc&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX )
Shortcut Found : C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk ( hxxp://www.awesomehp.com/?type=sc&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX )
Shortcut Found : C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk ( hxxp://www.awesomehp.com/?type=sc&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX )
Shortcut Found : C:\Users\Cristian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk ( hxxp://www.awesomehp.com/?type=sc&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX )

***** [ Registry ] *****

Data Found : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://www.qvo6.com/?utm_source=b&utm_medium=cor&from=cor&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&ts=1373988580
Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\AppDataLow\Software\Crossrider
Key Found : HKCU\Software\AppDataLow\Software\PriceGong
Key Found : HKCU\Software\BabSolution
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DealPly
Key Found : HKCU\Software\e57d688e26fb944
Key Found : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Found : HKCU\Software\InstallCore
Key Found : HKCU\Software\lollipop
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Key Found : HKCU\Software\Optimizer Pro
Key Found : HKCU\Software\PIP
Key Found : HKCU\Software\SmartBar
Key Found : HKCU\Software\Softonic
Key Found : HKCU\Software\Tuto4PC
Key Found : HKCU\Software\Tutorials
Key Found : HKCU\Software\TutoTag
Key Found : HKLM\Software\AVG Nation toolbar
Key Found : HKLM\Software\AVG Security Toolbar
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
Key Found : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
Key Found : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220422412250}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0044150.BHO
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0044150.BHO.1
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0044150.Sandbox
Key Found : HKLM\SOFTWARE\Classes\CrossriderApp0044150.Sandbox.1
Key Found : HKLM\SOFTWARE\Classes\Iminent
Key Found : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Found : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Found : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455415550}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466416650}
Key Found : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Found : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\speedupmypc
Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2102507
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440444414450}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd
Key Found : HKLM\SOFTWARE\Classes\Updater.AmiUpd.1
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\DealPly
Key Found : HKLM\Software\delta-homesSoftware
Key Found : HKLM\Software\eSafeSecControl
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\ifohbjbgfchkkfhphahclmkpgejiplfo
Key Found : HKLM\Software\hdcode
Key Found : HKLM\Software\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_ares_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_ares_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_atube-catcher_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_atube-catcher_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_avg-antivirus-free-2013_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_avg-antivirus-free-2013_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_emule_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_emule_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_quicktime_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_quicktime_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_spotify_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_spotify_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_vdownloader_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_vdownloader_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_windows-live-messenger-2011_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_per_windows-live-messenger-2011_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\speedupmypc_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajam_download_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\AmiUpdXp
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\DealPlyUpdate
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\EPUpdater
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\SpeedUpMyPC Maintenance
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{565544E9-7BDF-48EE-AC0B-ECBF9B1A6634}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CD77EF6-426C-4EC2-9A6F-8E8DDDB09FE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5CD77EF6-426C-4EC2-9A6F-8E8DDDB09FE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{980D0F41-0EAA-43E2-8D53-1412D1B41253}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C014F86E-FB17-4116-BED9-BA356B8208A7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C014F86E-FB17-4116-BED9-BA356B8208A7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CEC51279-9A85-4609-8B35-6FAA3C73FBE6}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IePlugins
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\supTab
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winzipper
Key Found : HKLM\Software\PIP
Key Found : HKLM\Software\qvo6Software
Key Found : HKLM\Software\supTab
Key Found : HKLM\Software\supWPM
Key Found : HKLM\Software\Tarma Installer
Key Found : HKLM\Software\Uniblue
Key Found : HKLM\Software\Uniblue\SpeedUpMyPC
Key Found : HKLM\Software\V9
Key Found : HKLM\Software\winzipersvc
Key Found : HKLM\Software\Wpm
Key Found : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WsysSvc
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{84FF7BD6-B47F-46F8-9130-01B2696B36CB}]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NTRedirect]
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [tuto4pc_it_8]

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16798

Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.awesomehp.com/web/?type=ds&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&q={searchTerms}
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - hxxp://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.awesomehp.com/?type=hp&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.awesomehp.com/web/?type=ds&ts=1393009738&from=tugs&uid=HitachiXHTS545025B9A300_101010PBN204CSDDK12TX&q={searchTerms}
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
Setting Found : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snapdo.com/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=TJ&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013
Setting Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013

-\\ Google Chrome v33.0.1750.146

[ File : C:\Users\Cristian\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found : homepage
Found : search_url
Found : keyword

[ File : C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Found : homepage

*************************

AdwCleaner[R0].txt - [26852 octets] - [11/03/2014 13:31:05]
AdwCleaner[R1].txt - [26777 octets] - [11/03/2014 13:39:02]

########## EOF - \AdwCleaner\AdwCleaner[R1].txt - [26838 octets] ##########
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 11 mar 2014 alle 16:30
0
Grazie
Re,
Non hai cancellato niente !
Deve rifare la scansione con ADW Clicca su scan quando e finito clicca su delete
Posta i report qui

Casamarce 1350 Posti giovedì 21 novembre 2013Data di registrazione giovedì 29 gennaio 2015 Ultimo intervento - 12 mar 2014 alle 09:51
l'embrouille ha completamente ragione... se fai solo la scansione trovi i problemi ma non li risolvi , devi cancellare tutto quello che non va =)
rifallo e se non hai più problemi metti risolto al post =)
Casamarce 1350 Posti giovedì 21 novembre 2013Data di registrazione giovedì 29 gennaio 2015 Ultimo intervento - 12 mar 2014 alle 11:14
se hai ancora problemi controlla se hai settato i tuoi browser come descritto in questa guida : http://it.ccm.net/faq/2170-come-bloccare-i-popup
A ho canecellato tutto...ho rifatto la scansione selezionato tt e cliccato clean...rifatta di nuovo scansione e non virne fuori più niente da cancellare....ma il problema rimane....oggi riprovo a fare scans cn malware bytes vediamo! Ufff :(
Casamarce 1350 Posti giovedì 21 novembre 2013Data di registrazione giovedì 29 gennaio 2015 Ultimo intervento - 12 mar 2014 alle 15:29
controlla anche le estensioni installate in google chrome dato che ci sei, magari c'è qualche estensione che si è intrufolata e che ti apre le pubblicità, a volte se non si è attenti quando si installa qualcosa, queste estensioni si installano a nostra insaputa.
Trovi le estensioni come da immagine :


oppure scrivendo chrome://extensions/ nella barra degli indirizzi.
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 11 mar 2014 alle 16:40
0
Grazie
Re,
Dopo questo,riavia Malware bytes,aggiornalo,e fa una scansione rapida
Una volta che la scansione è completata, selezionare tutto poi clic su Cancella (Se viene richiesto di riavviare il PC, accettare!)
Posta i report.

Ubuntu 13.04 Firefox 21/ Magela 3 Opera 12.15
Ho rifatto scans con malware ora vi metto il report..ah e ho cancellato tutto! :)
0
Grazie
ecco i report di malwarebytes

Malwarebytes Anti-Malware (Trial) 1.75.0.1300
www.malwarebytes.org

Database version: v2014.03.12.13

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16844
Mamma e Papa :: CRISTIAN-PC [limited]

Protection: Enabled

13/03/2014 14:00:05
mbam-log-2014-03-13 (14-00-05).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 159159
Time elapsed: 17 minute(s), 18 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 23
HKLM\SYSTEM\CurrentControlSet\Services\Update GrabRez (PUP.Optional.GrabRez.A) -> Delete on reboot.
HKLM\SYSTEM\CurrentControlSet\Services\Update Fortunitas (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKLM\SYSTEM\CurrentControlSet\Services\Util GrabRez (PUP.Optional.GrabRez.A) -> Delete on reboot.
HKCR\CLSID\{c6f3fc7b-d607-44ec-9caf-2a41d547137f} (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKCR\TypeLib\{eff4f283-3c8b-4a01-8297-ddc839210b86} (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKCR\Interface\{94F1FD29-FDC2-4BF9-B008-AFB0452634E6} (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C6F3FC7B-D607-44EC-9CAF-2A41D547137F} (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C6F3FC7B-D607-44EC-9CAF-2A41D547137F} (PUP.Optional.Fortunitas.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C6F3FC7B-D607-44EC-9CAF-2A41D547137F} (PUP.Optional.Fortunitas.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0} (PUP.Optional.QuickShare.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MediaPlayerEnhance (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GrabRez (PUP.Optional.GrabRez.A) -> Delete on reboot.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} (PUP.Optional.Qone8) -> Quarantined and deleted successfully.
HKCU\Software\Iminent (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
HKCU\Software\AppDataLow\Software\MediaPlayerEnhance (PUP.Optional.MediaPlayerEnhance.A) -> Quarantined and deleted successfully.
HKCU\Software\AppDataLow\Software\PriceGong (PUP.Optional.PriceGong.A) -> Quarantined and deleted successfully.
HKCU\Software\InstalledBrowserExtensions\installdaddy (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\BPROTECTSETTINGS (PUP.Optional.BProtector.A) -> Quarantined and deleted successfully.
HKLM\Software\awesomehpSoftware (PUP.Optional.Awesomehp.A) -> Delete on reboot.
HKLM\Software\Fortunitas (PUP.Optional.Fortunitas.A) -> Delete on reboot.
HKLM\Software\GrabRez (PUP.Optional.GrabRez.A) -> Delete on reboot.
HKLM\Software\MediaPlayerEnhance (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 4
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Page (PUP.Optional.Snapdo) -> Bad: (http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main|Search Bar (PUP.Optional.Snapdo) -> Bad: (http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|Default_Search_URL (PUP.Optional.Snapdo) -> Bad: (http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013) Good: (http://www.google.com) -> Quarantined and repaired successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\Search|SearchAssistant (PUP.Optional.Snapdo) -> Bad: (http://feed.snap.do/?publisher=SnapdoSoftonicYB&dpid=SnapdoSoftonicYB&co=IT&userid=0d593339-7a7b-480f-8d51-822a6aacfe36&searchtype=ds&q={searchTerms}&installDate=06/04/2013) Good: (http://www.google.com) -> Quarantined and repaired successfully.

Folders Detected: 16
C:\Program Files\MediaPlayerEnhance (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\GrabRez (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\plugins (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\TEMP (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0 (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\actions (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.

Files Detected: 143
C:\Program Files\GrabRez\updateGrabRez.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\Fortunitas\updateFortunitas.exe (PUP.Optional.Fortunitas.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\utilGrabRez.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\Fortunitas\FortunitasBHO.dll (PUP.Optional.Fortunitas.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\umbrella.exefc2b0a (PUP.Optional.Iminent) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\becd44bd-1e34-479c-99bd-71ff1660d999\spidentifierimpl.exe (PUP.Optional.Conduit.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\becd44bd-1e34-479c-99bd-71ff1660d999\software\fortunitassetup.exe (PUP.Optional.Fortunitas.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\becd44bd-1e34-479c-99bd-71ff1660d999\software\launcher.exe (PUP.Optional.Amonetize) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\becd44bd-1e34-479c-99bd-71ff1660d999\software\speedupmypc.exe (PUP.Optional.SpeedUpMyPC) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\becd44bd-1e34-479c-99bd-71ff1660d999\software\tugs_awesomehp.exe (PUP.Optional.SkyTech.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\bus1525\crxupdater_d.exe (PUP.Optional.CRX.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\bus2912\crxupdater_d.exe (PUP.Optional.CRX.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\bus3429\crxupdater_d.exe (PUP.Optional.CRX.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\bus60d4\crxupdater_d.exe (PUP.Optional.CRX.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\fullpackage_temp1393009667\package1.zip (PUP.Optional.SkyTech.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\fullpackage_temp1393009667\qqbrowserframe.dll (PUP.Optional.SkyTech.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\fullpackage_temp1393009667\tmp\suptab.exe (PUP.Optional.SupTab.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\fullpackage_temp1393009667\tmp\wpm.exe (PUP.Optional.WpManager) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\is-imvef.tmp\speedupmypc-standalone-setup.exe (PUP.Optional.SpeedUpMyPC) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\nste6fb.tmp\iminentsetup.exe (PUP.Optional.Iminent.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\nsy1ec8.tmp\temp_file_after.tmp (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
c:\users\cristian\appdata\local\temp\xxciggjbphjiu\parent.txt (PUP.Optional.BundleInstaller.A) -> Delete on reboot.
C:\Users\Mamma e Papa\Downloads\BearShareSetup-r698-w-bc (1).exe (PUP.Optional.MusicToolbar.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\BearShareSetup-r698-w-bc.exe (PUP.Optional.MusicToolbar.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\FlashPlayerSetup__3149_i82969879_il3.exe (PUP.Optional.Amonetize.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (1).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (10).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (2).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (3).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (4).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (5).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (6).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (7).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (8).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome (9).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\HDvid-codec-Chrome.exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\hdvid_codec_chrome (1).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\hdvid_codec_chrome (2).exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\hdvid_codec_chrome.exe (PUP.Optional.OneClickDownloader.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\install_setup.exe (PUP.Optional.ViddyHD.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\Java.exe (PUP.Optional.BundleInstaller.NS) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\SoftonicDownloader_per_avg-antivirus-free-2013.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\SoftonicDownloader_per_spotify.exe (PUP.Optional.Softonic) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player (1).exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player (2).exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player (3).exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player (4).exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player (5).exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\Downloads\vlc-player.exe (PUP.Optional.Montiera) -> Quarantined and deleted successfully.
C:\Program Files\MediaPlayerEnhance\background.html (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\MediaPlayerEnhance\44150.crx (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\MediaPlayerEnhance\44150.xpi (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\MediaPlayerEnhance\MediaPlayerEnhance.ico (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\MediaPlayerEnhance\Uninstall.exe (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\MediaPlayerEnhance\utils.exe (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Windows\Tasks\MediaPlayerEnhance-chromeinstaller.job (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Windows\Tasks\MediaPlayerEnhance-codedownloader.job (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Windows\Tasks\MediaPlayerEnhance-enabler.job (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Windows\Tasks\MediaPlayerEnhance-firefoxinstaller.job (PUP.Optional.MediaPlayerEnhance.A) -> Delete on reboot.
C:\Program Files\GrabRez\GrabRez.ico (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\7za.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\GrabRezUninstall.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\updateGrabRez.InstallState (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\FilterApp_C.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\GrabRez.BrowserFilter.Helper.dll (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\GrabRez.BrowserFilter.Helper.dll.old.ef738383-f164-4129-bb12-c5661d87e088 (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\GrabRezBrowserFilter.exe (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\utilGrabRez.InstallState (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\plugins\GrabRez.BrowserFilter.dll (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\plugins\GrabRez.FFUpdate.dll (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\plugins\GrabRez.IEUpdate.dll (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Program Files\GrabRez\bin\plugins\GrabRez.PurBrowseG.dll (PUP.Optional.GrabRez.A) -> Delete on reboot.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\background.html (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\chromeCoreFilesIndex.txt (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\crossriderManifest.json (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\manifest.json (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\popup.html (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\manifest.xml (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins.json (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\102_dealply_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\103_intext_5_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\104_jollywallet_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\13_CrossriderAppUtils.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\14_CrossriderUtils.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\155_ibario_pops_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\177_crossriderDashboard.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\17_jQuery.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\182_openUrl.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\183_tabsWrapper.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\184_noproblemppc_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\190_pops_5_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\191_ciuvo_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\19_CHAppAPIWrapper.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\1_base.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\207_dbWrapper.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\21_debug.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\22_resources.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\28_initializer.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\47_resources_background.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\4_jquery_1_7_1.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\64_appApiMessage.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\72_appApiValidation.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\78_CrossriderInfo.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\80_CHPopupAppAPI.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\91_monetizationLoader.js.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\93_superfish_no_coupons_m.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\plugins\97_resourceApiWrapper.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\background.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\extensionData\userCode\extension.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon128.png (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon16.png (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\icon48.png (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\icons\actions\1.png (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\background.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\main.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\platformVersion.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\chrome.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\cookie.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\message.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\monitor.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageAction.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\api\pageActionBG.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\app_api.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\bg_app_api.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\consts.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\cookie_store.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\crossriderAPI.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\delegate.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\events.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\extensionDataStore.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\installer.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logFile.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\logging.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\onBGDocumentLoad.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\reports.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\storageWrapper.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\updateManager.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\util.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\xhr.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\newPopup.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.
C:\Users\Mamma e Papa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lekgiimbfodefdaoofhlckefjbgpeilo\1.26.69_0\js\lib\popupResource\popup.js (PUP.Optional.CrossRider.A) -> Quarantined and deleted successfully.

(end)
Estensioni ho adblock plus e .mediaplayer enhance...
e ho controllatto tt le impostazioni del browser e sono a posto...cosa devo fare : il problema c'è ancora...poi non capisco perche' si apre explorer quando io uso solo chrome...
0
Grazie
ah e da quando sto facendo queste scansioni va piu' lento e si è spento 3 volte mentre lo usavo....e ora mi ha chiesto di reimpostare il browser predefinito ...e i ha cancellato adblock plus.....come mai??
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 13 mar 2014 alle 16:08
0
Grazie
Ciao,
Desinstalla completamente Chrome, e scarica la nuova versione qui=> http://it.ccm.net/download/scaricare-102-google-chrome.
Quando ti chiedera se vuoi che se il browser preferito clicca OK
Dopo nell Google store,scarica l'app AD BLOCK PLUS.

fatto tutto..ma di nuove ste cavolo di pubblicità mi si aprono....tipo meet incontri....o robe simili! :(
0
Grazie
ok ora lo faccio..ma malware lo tengo o lo cancello?e come antivirus va bene avg?
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 13 mar 2014 alle 21:03
0
Grazie
Ciao,
Si,Malware,lo tengo.Ogni tanto puoi fare una scansione per vedere si non hai adware
che viene inquinare il PC.
Purtroppo,quando scarica un programma ,deve ben leggere si non e niente di spuntato:
Caselle come : Tool bar ,Estensione ,...Ect. Deve sempre rifiutare tutto quale che e proposta in supplemente .
Scaricare sempre su un sito ufficiale del progama desiderato .
Evitare di scaricare su SOFTONIC .

Per AVG,tengolo aggiornato,non e male come free anti-virus.

ciao scs se nn ho piu scritto ma nn avevo piu internet cmq il problema nn e risolto...anche se ho rinstallato google chrome ...le pagine continuano ad aprirsi da sole...ed e ancora piu lento!!!!cs devo fare ancora?
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 19 mar 2014 alle 08:17
0
Grazie
Ciao,
Deve rifare una scabsione con ADW Cleaner,apri il programa,clicca su scan,quando il scan e finito clicca su delete.
Posta i report
ok domani ci riprovo!...cmq ora si aprono solo le pagine di chrome....quelle di explorer non piu'....pero' e' lentissimooo :((
0
Grazie
Il problema é rimasto...x quanto riguarda explorer nn le apre più le pagine..ma su chrome sono raddoppiate....ho fatto e rifatto tt i passaggi elencati....ma niente!!...ma cavoliiiiiii :((( non posso neanke portarlo da un tecnico che purtroppo i cash mancano....nn so più a ki chiedere...e cs fare.. é super lento..più di prima...e ste pagine che si aprono ma tantissime...anche tre alla volta..o anche sopra la pagina che apro io...boh..
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 28 mar 2014 alle 14:05
0
Grazie
Ciao,
Bene,allora proviamo di eliminare questo problema con COMBOFIX;
:/!\Questo programa e molto potente,e deve seguire esattamente le modalita di uso /!\.
La prima cosa da fare e di stampare le modalita qui=> http://www.bleepingcomputer.com/combofix/it/come-usare-combofix
Scarica il programma cliicando su il link fornito di questo sito.
/!\ Non toccare a niente durante la scansione /!\
Posta i report qui
fatto!!!allora nn trovo il log!!...ho fatto salva alla fine ma e' sparito!!mi sa ke nn la salvato!!cmq appena finita la scansione ho riavviato...e reinstallato adblockplus...perche' era sparito....cavoli volevo postare i report!! :(
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 5 apr 2014 alle 11:53
0
Grazie
Ciao,
Hai ancora problemi con le pagine di pub ???

0
Grazie
ciao.....si...cioe' x il momento sembra meno...rispetto al solito...oggi solo 4...tra cui meet...groupon...giochi...ecc....ho provato a cercare il log ma nn c'è....non l'avro'salvato...che disastro!ahah
l'embrouille 75 5405 Posti lunedì 4 luglio 2011Data di registrazione mercoledì 30 maggio 2018 Ultimo intervento - 5 apr 2014 alle 14:11
0
Grazie
Ciao,
Riprova a fare le scansioni con ADW,e con Malwarebytes in questo ordine.
Posta i 2report qui dopo che avrai fatto tutto