Pagine internet si aprono da sole, cosa fare Risolto/Chiuso

Question

Buongiorno a tutti, come si evince dal titolo mi si aprono pagine internet indesiderate, qualcuno mi sa dire come porre fine a questo problema? Mi scuso in anticipo se ho sbagliato sezione ma non sono praticissimo di forum... grazie e accorrete numerosi!!!

Tray-G · Accepted Answer

Ciao grazie per la risposta superveloce, ecco il report
# AdwCleaner v3.310 - Rapporto creato 15/09/2014 in 19:36:03
# Aggiornato 12/09/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nome utente : saverio - GEOSAVE
# In esecuzione da : C:\Users\saverio\Desktop\adwcleaner_3.310.exe
# Opzione : Pulisci

***** [ Servizi ] *****

Servizio Eliminato : BackupStack
[#] Servizio Eliminato : DatamngrCoordinator
[#] Servizio Eliminato : F06DEFF2-5B9C-490D-910F-35D3A91196222
[#] Servizio Eliminato : f1f78e38
Servizio Eliminato : LPTSystemUpdater
[#] Servizio Eliminato : SPPD
Servizio Eliminato : torchcrashhandler
Servizio Eliminato : WajamUpdater
[#] Servizio Eliminato : Update webporpoise
[#] Servizio Eliminato : Util webporpoise
Servizio Eliminato : {572f484b-455f-44b0-9d6a-da3ad2071365}w64
Servizio Eliminato : {646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64
Servizio Eliminato : {6fcd6092-9615-4f7f-8898-8df53980e5d2}w64

***** [ File / Cartelle ] *****

Cartella Eliminato : C:\ProgramData\374311380 
[!] Cartella Eliminato : C:\ProgramData\DataMngr
Cartella Eliminato : C:\ProgramData\IePluginServices
Cartella Eliminato : C:\ProgramData\Systweak
Cartella Eliminato : C:\ProgramData	orchcrashhandler
Cartella Eliminato : C:\ProgramData\WindowsMangerProtect
Cartella Eliminato : C:\ProgramData\WinSpeed
Cartella Eliminato : C:\ProgramData\websoavEar
Cartella Eliminato : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FrEeSoFtOdAy
Cartella Eliminato : C:\Program Files (x86)\ASP
Cartella Eliminato : C:\Program Files (x86)\Flowsurf
Cartella Eliminato : C:\Program Files (x86)\Free Video Converter
Cartella Eliminato : C:\Program Files (x86)\LPT
[!] Cartella Eliminato : C:\Program Files (x86)\Movies App
Cartella Eliminato : C:\Program Files (x86)\MyPC Backup
Cartella Eliminato : C:\Program Files (x86)\Mysearchdial
Cartella Eliminato : C:\Program Files (x86)\NetCrawl
Cartella Eliminato : C:\Program Files (x86)\SearchProtect
Cartella Eliminato : C:\Program Files (x86)\SupTab
Cartella Eliminato : C:\Program Files (x86)\Wajam
[!] Cartella Eliminato : C:\Program Files (x86)\webporpoise
Cartella Eliminato : C:\Users\saverio\AppData\Local\ContextFree
Cartella Eliminato : C:\Users\saverio\AppData\Local\LPT
Cartella Eliminato : C:\Users\saverio\AppData\Local\pgcchelper
Cartella Eliminato : C:\Users\saverio\AppData\Local\Smartbar
Cartella Eliminato : C:\Users\saverio\AppData\Local	orch
Cartella Eliminato : C:\Users\saverio\AppData\Local\Wajam
Cartella Eliminato : C:\Users\saverio\AppData\Local\fst_it_193
Cartella Eliminato : C:\Users\saverio\AppData\LocalLow\DataMngr
Cartella Eliminato : C:\Users\saverio\AppData\LocalLow\HPAppData
Cartella Eliminato : C:\Users\saverio\AppData\LocalLow\searchresultstb
Cartella Eliminato : C:\Users\saverio\AppData\LocalLow\Smartbar
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\dvdvideosoftiehelpers
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\Mysearchdial
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\OpenCandy
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\Systweak
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyPC Backup
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs	orch
Cartella Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wajam
Cartella Eliminato : C:\Users\saverio\Documents\Optimizer Pro
File Eliminato : C:\END
File Eliminato : C:\Users\Public\Desktop\advanced-System Protector.lnk
File Eliminato : C:\Windows\System32oboot64.exe
File Eliminato : C:\Windows\System32\sasnative64.exe
File Eliminato : C:\Windows\System32\drivers\{572f484b-455f-44b0-9d6a-da3ad2071365}w64.sys
File Eliminato : C:\Windows\System32\drivers\{646e947e-f0e6-4d0e-b21e-d62ca97183e2}w64.sys
File Eliminato : C:\Windows\System32\drivers\{6fcd6092-9615-4f7f-8898-8df53980e5d2}w64.sys
File Eliminato : C:\Users\saverio\AppData\Local\AnyProtectScannerSetup.exe
File Eliminato : C:\Users\saverio\AppData\Roaming\aps.uninstall.scan.results
File Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Torch.lnk
File Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
File Eliminato : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk
File Eliminato : C:\Users\saverio\Desktop\Continue VuuPC Installation.lnk
File Eliminato : C:\Users\saverio\Desktop\MyPC Backup.lnk
File Eliminato : C:\Users\saverio\Desktop\Sync Folder.lnk
File Eliminato : C:\Users\saverio\Desktop\Torch.lnk
File Eliminato : C:\Users\saverio\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage

***** [ Compiti ] *****

Compito Eliminati : advanced-System Protector_startup
Compito Eliminati : ASP
Compito Eliminati : fsupdate

***** [ Collegamenti ] *****

Collegamento Disinfetatti : C:\Users\saverio\Desktop\Search.lnk
Collegamento Disinfetatti : C:\Users\saverio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
Collegamento Disinfetatti : C:\Users\saverio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Search.lnk

***** [ Registro ] *****

Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\abfmigjiaapipflmopkaaooigcjjdojh
Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf
Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh
Chiave Eliminati : HKCU\Software\Google\Chrome\Extensions\iagcajndpnfncplednpbnkahadegklfa
Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\iagcajndpnfncplednpbnkahadegklfa
Chiave Eliminati : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\iagcajndpnfncplednpbnkahadegklfa
Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Chiave Eliminati : HKCU\Software\Google\Chrome\Extensions
ikpibnbobmbdbheedjfogjlikpgpnhp
Valore Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Browser Infrastructure Helper]
Valore Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [framei]
Valore Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pgcchelper]
Chiave Eliminati : HKCU\Software\SIEN SA
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\Applications\Torch.exe
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.bho
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Chiave Eliminati : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Chiave Eliminati : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Chiave Eliminati : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\speedupmypc
Chiave Eliminati : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Chiave Eliminati : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Chiave Eliminati : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\AdvancedSystemProtector_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\mypc backup
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths	orch.exe
Chiave Eliminati : HKLM\SOFTWARE\MozillaPlugins\TorchVLC
Valore Eliminati : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valore Eliminati : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valore Eliminati : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Valore Eliminati : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Chiave Eliminati : HKLM\SOFTWARE\Classes\wEBsaVer.wEBsaVer
Chiave Eliminati : HKLM\SOFTWARE\Classes\wEBsaVer.wEBsaVer.6.2
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\webporpoise_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\webporpoise_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updatewebporpoise_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updatewebporpoise_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\utilwebporpoise_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\utilwebporpoise_RASMANCS
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Update webporpoise
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Util webporpoise
Chiave Eliminati : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F189DF5-2D05-472B-9091-84D9848AE48B}{f1f78e38}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{A8018C54-B702-4D52-9ACC-8CA78911E633}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{C6A846C5-D67F-48B4-8552-C22354E56966}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{C321541F-B22D-4593-AC1A-9634812A4E40}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4F524A2D-5637-006A-76A7-7A786E7484D7}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E3F1CA13-EA0E-4617-8D03-3EAA6A94A7E0}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chiave Eliminati : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chiave Eliminati : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Valore Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{A8018C54-B702-4D52-9ACC-8CA78911E633}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{C6A846C5-D67F-48B4-8552-C22354E56966}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31AD400D-1B06-4E33-A59A-90C2C140CBA0}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4F524A2D-5637-006A-76A7-7A786E7484D7}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F90DB9D2-95E2-4477-5EF8-3DD59B3078E8}
Valore Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2FA28606-DE77-4029-AF96-B231E3B8F827}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE0-8AFD-255E89CF9671}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D43B3890-80C7-4010-A95D-1E77B5924DC3}
Chiave Eliminati : HKCU\Software\AnyProtect
Chiave Eliminati : HKCU\Software\APNDTX
Chiave Eliminati : HKCU\Software\ContextFree
Chiave Eliminati : HKCU\Software\DataMngr
Chiave Eliminati : HKCU\Software\FlowSurf
Chiave Eliminati : HKCU\Software\FreeSoftToday
Chiave Eliminati : HKCU\Software\ilivid
Chiave Eliminati : HKCU\Software\InstallCore
Chiave Eliminati : HKCU\Software\mysearchdial
Chiave Eliminati : HKCU\Software\Optimizer Pro
Chiave Eliminati : HKCU\Software\SmartBar
Chiave Eliminati : HKCU\Software\smartbarbackup
Chiave Eliminati : HKCU\Software\smartbarlog
Chiave Eliminati : HKCU\Software\Softonic
Chiave Eliminati : HKCU\Software\systweak
Chiave Eliminati : HKCU\Software	orch
Chiave Eliminati : HKCU\Software\Tutorials
Chiave Eliminati : HKCU\Software\TutoTag
Chiave Eliminati : HKCU\Software\Wajam
Chiave Eliminati : HKCU\Software\webporpoise
Chiave Eliminati : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Chiave Eliminati : HKCU\Software\AppDataLow\Software\LyricsContainer
Chiave Eliminati : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Chiave Eliminati : HKLM\SOFTWARE\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Chiave Eliminati : HKLM\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Chiave Eliminati : HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Chiave Eliminati : HKLM\SOFTWARE\DataMngr
Chiave Eliminati : HKLM\SOFTWARE\FrEeSoFtOdAy
Chiave Eliminati : HKLM\SOFTWARE\Iminent
Chiave Eliminati : HKLM\SOFTWARE\InstallCore
Chiave Eliminati : HKLM\SOFTWARE\SearchProtect
Chiave Eliminati : HKLM\SOFTWARE\SupDp
Chiave Eliminati : HKLM\SOFTWARE\SupTab
Chiave Eliminati : HKLM\SOFTWARE\supWindowsMangerProtect
Chiave Eliminati : HKLM\SOFTWARE\supWPM
Chiave Eliminati : HKLM\SOFTWARE\sweet-pageSoftware
Chiave Eliminati : HKLM\SOFTWARE\systweak
Chiave Eliminati : HKLM\SOFTWARE	orch
Chiave Eliminati : HKLM\SOFTWARE\Tutorials
Chiave Eliminati : HKLM\SOFTWARE\Wajam
Chiave Eliminati : HKLM\SOFTWARE\webporpoise
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\ContextFree
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Free Video Converter
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall	orch
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3BC7022B-CDE0-4664-9AB6-E3EC25CE644A}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BC0BF363-63AB-4FF7-8EF1-AE0D7F711B24}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FreeSoftToday_is1
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mysearchdial
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5CDF2354-26AF-2DBC-1012-44FEDFCC75BB}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyPC Backup
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\webporpoise
Dato Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll
Dato Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\WinSpeed\WINSPE~1.DLL
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A71991503412AEB42838B02C5ED9F9CD
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2E0D3DD9E5E4B74CA43BCE77815E287
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\5E8031606EB60A64C882918F8FF38DD4
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe

***** [ Browser ] *****

-\ Internet Explorer v11.0.9600.17239

Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Impostazioni Ripristinato : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\ Google Chrome v37.0.2062.120

[ File : C:\Users\saverio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Eliminati [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=IT&userid=2f562c5f-37cb-d96f-78de-50c2ca34c773&searchtype=ds&q={searchTerms}&installDate=31/08/2013

*************************

AdwCleaner[R0].txt - [42242 octets] - [15/09/2014 18:54:30]
AdwCleaner[R1].txt - [42097 octets] - [15/09/2014 19:31:49]
AdwCleaner[S0].txt - [37008 octets] - [15/09/2014 19:36:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [37069 octets] ##########

n00r · Answer

Ciao,

usa AdwCleaner:

=AdwCleaner=
* Scarica e salva sul desktop AdwCleaner di Xplode
* Chiudi tutti i programmi e browser internet aperti
* Fa doppio clic su "AdwCleaner.exe" per eseguirlo
* Fa clic sul pulsante "Scan" e attendi la fine del processo
* Fa clic sul pulsante "Clean" e segui le istruzioni
* Il programma chiuderà tutti i programmi aperti, quindi salva i tuoi dati e lavori in corso prima di continuare
* Se viene chiesto di avviare il PC, accetta
* Un report verrà aperto automaticamente, Copia/incolla il contenuto del file nella tua risposta
* Puoi trovare il file log in "C:\AdwCleaner\AdwCleaner[Sn].txt" (nel quale "n" è un numero).

====

poi Malwarebytes:

=Malwarebytes=
*Scarica Malwarebytes ed installalo
*Disattiva l'antivirus (durante la scansione)
*Avvia il programma 
*Aspetta che finisca l'aggiornamento del database; se non si fa in automatico, clic su "Aggiornamento"
*Clic su "Opzione" 
**Cambia la lingua in italiano
**Clic su "Rilevamento e protezione" (a sinistra), in "Protezione da 'non-malware'" seleziona "Gestisci rilevamenti come malware" in entrambe le voci Rilevamenti "PUP" e "PUM"
*Clic su "Scansione"
*Seleziona la voce "Ricerca elementi nocivi"
*Una volta finita clic su "Applica azioni"
*Se viene chiesto di riavviare "Accetta"
*Apri il programma e clic su "Cronologia" poi "Log applicazione"
*Seleziona l'ultimo log quindi "Vedi"
* Clic su "Copia negli appunti" (non succede niente ma il report verrà copiato)
* Fa incolla nella tua risposta

Tray-G · Answer

Ed ecco l'altro report
Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 15/09/2014
Ora scansione: 19:59:17
File di log: log malwarebytes.txt
Amministratore: Si

Versione: 2.00.2.1012
Database malware: v2014.09.15.05
Database rootkit: v2014.09.13.01
Licenza: Free
Protezione da malware: Disattivata
Protezione da siti web nocivi: Disattivata
Self-protection: Disattivata

SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: saverio

Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 313901
Tempo impiegato: 24 min, 48 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Heuristics: Attivata
PUP: Attivata
PUM: Attivata

Processi: 0
(No malicious items detected)

Moduli: 0
(No malicious items detected)

Chiavi di registro: 22
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\CLASSES\CLSID\{c0caa5fe-7c9c-4dca-a265-63cf55379d1a}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKU\S-1-5-21-2734799693-2951989701-1667478298-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Elimina al riavvio, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKU\S-1-5-21-2734799693-2951989701-1667478298-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Elimina al riavvio, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\PREAPPROVED\{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1], 
PUP.Optional.Snapdo.T, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, Elimina al riavvio, [42afcb22ec8ff640441b556cad55a55b], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${dtUserElevationPolicyID}, Spostato in quarantena, [2ac739b47dfe40f688430961bf4535cb], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}, Spostato in quarantena, [06eb6885accf181edf05c1ab08fc7b85], 
PUP.Optional.SearchProtect, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\APPCOMPATFLAGS\INSTALLEDSDB\{cf2797aa-b7ec-e311-8ed9-005056c00008}, Spostato in quarantena, [6988e20b82f9b086499a610ba65e19e7], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\Datamngr, Spostato in quarantena, [8f620fde98e344f2a9b943d2a45ff60a], 
PUP.Optional.Webporpoise.A, HKLM\SOFTWARE\WOW6432NODE\webporpoise, Spostato in quarantena, [40b15499df9c5adc31c632f18b781ae6], 
PUP.Optional.Bandoo.A, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\aaaaaigjndjblmpeckabiffcpogflfgl, Spostato in quarantena, [00f1d815e497e4526a5f72f841c3a957], 
PUP.Optional.DataMangr.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\${dtUserElevationPolicyID}, Spostato in quarantena, [ea07d419a8d3f046d0fb0d5d9173fc04], 
PUP.Optional.Bandoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ilividbandoomoviestoolbarCR, Spostato in quarantena, [20d1c32adba071c59a3083e751b30bf5], 
PUP.Optional.Bandoo.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ilividbandoomoviestoolbarIE, Spostato in quarantena, [e9080ce1a6d575c13d8db5b5ea1a7b85], 
PUP.Optional.FlowSurf.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\FLOWSURF, Elimina al riavvio, [d71ac9244338340239ce055e4aba32ce], 
PUP.Optional.MoviesToolBar.A, HKU\S-1-5-21-2734799693-2951989701-1667478298-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\ilividbandoomoviestoolbar, Elimina al riavvio, [cb2698554d2e8fa78b66d06226dd03fd], 
PUP.Optional.Bandoo.A, HKU\S-1-5-21-2734799693-2951989701-1667478298-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\APPDATALOW\SOFTWARE\ilividbandoomoviestoolbar, Elimina al riavvio, [836e0ce128531e181dab3436857f8878], 

Valori di registro: 8
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Movies Search App (Dist. by Bandoo Media, Inc.), Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1]
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR|{C0CAA5FE-7C9C-4DCA-A265-63CF55379D1A}, Movies Search App (Dist. by Bandoo Media, Inc.), Spostato in quarantena, [d71a698436454ceab6c3dae720e20ff1]
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{c0caa5fe-7c9c-4dca-a265-63cf55379d1a}, Spostato in quarantena, [d819dc11700bd75fd9a020a1738f59a7], 
PUP.Optional.SearchApp.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\{c0caa5fe-7c9c-4dca-a265-63cf55379d1a}, Spostato in quarantena, [48a94da04734ad897504d3ee17eb18e8], 
PUP.Optional.MySearchDial.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY|AppPath, C:\Program Files (x86)\Mysearchdial\1.8.29.0\, Spostato in quarantena, [e70aae3f84f78bab1dceed7abe460ff1]
PUP.Optional.DataMangr.A, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x64, c:\program files (x86)\movies app\datamngr\x64\apcrtldr.dll, Spostato in quarantena, [2bc6638ab6c596a09f2de684ba4ae020]
PUP.Optional.DataMangr.A, HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\SESSION MANAGER\APPCERTDLLS|x86, c:\program files (x86)\movies app\datamngr\apcrtldr.dll, Spostato in quarantena, [1bd668850477c076d0fc3634a262c739]
PUP.Optional.FlowSurf.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\FLOWSURF|chrid, oglkiljdmflopemijdadoiepkhcaodjn, Elimina al riavvio, [d71ac9244338340239ce055e4aba32ce]

Dati di registro: 6
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, https://www.google.com/ Buono: (www.google.com), Cattivo (https://www.google.com/ al riavvio,[be33f8f549324fe77adaf3019d678e72]
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Bar, https://search.safefinder.com/?st=ds&q={searchTerms}, Buono: (www.google.com), Cattivo (https://search.safefinder.com/?st=ds&q={searchTerms}),Elimina al riavvio,[4ba6ec0196e5b383e270ec08f50f6b95]
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Search Page, https://search.safefinder.com/?st=ds&q={searchTerms}, Buono: (www.google.com), Cattivo (https://search.safefinder.com/?st=ds&q={searchTerms}),Elimina al riavvio,[569b965733486fc74e0521d324e0b54b]
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|Default_Search_URL, https://search.safefinder.com/?st=ds&q={searchTerms}, Buono: (www.google.com), Cattivo (https://search.safefinder.com/?st=ds&q={searchTerms}),Elimina al riavvio,[38b93db099e2989e4e07559f5ca8ab55]
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCH|SearchAssistant, https://search.safefinder.com/?st=ds&q={searchTerms}, Buono: (www.google.com), Cattivo (https://search.safefinder.com/?st=ds&q={searchTerms}),Elimina al riavvio,[2bc641ac2d4edb5bfa5cb341d133dd23]
PUP.Optional.HelperBar.A, HKU\S-1-5-18-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHURL|Default, https://search.safefinder.com/?st=ds&q={searchTerms}, Buono: (www.google.com), Cattivo (https://search.safefinder.com/?st=ds&q={searchTerms}),Elimina al riavvio,[a44d2cc1b0cb0036460bfcf8ff05c040]

Cartelle: 4
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\search, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar\GC, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 

File: 23
PUP.Adware.Agent, C:\Users\saverio\Downloads\Dick_Wadd_-_Hard_Hat_Pigs.exe, Spostato in quarantena, [935ed6178bf081b5fd0c6366d927af51], 
PUP.Optional.OpenCandy, C:\Users\saverio\Downloads\FreemakeVideoDownloaderSetup.exe, Spostato in quarantena, [876ae8052a51de585da8a4d844bee11f], 
PUP.Optional.Koyote.A, C:\Users\saverio\Downloads\FreeVideoConverterSetup-r135-n-bi.exe.7a0b3cb.partial, Spostato in quarantena, [a34e11dc25563cfaa74f420d9d64f40c], 
PUP.Optional.Bandoo, C:\Users\saverio\Downloads\iLividSetup-r2141-n-bc (1).exe, Spostato in quarantena, [9f525d90d8a3aa8cddc426f300016997], 
PUP.Optional.Bandoo, C:\Users\saverio\Downloads\iLividSetup-r2141-n-bc.exe, Spostato in quarantena, [b63b8b62f7840333a2ff2feaf11048b8], 
PUP.Optional.SearchProtect.A, C:\Windows\AppPatch\AppPatch64\SPVCLdr64.dll, Spostato in quarantena, [02efc9243744d85e90d98418a9584fb1], 
PUP.Optional.SnapDo.A, C:\Windows\Installer\216270.msi, Spostato in quarantena, [6988d914601b66d0129d8211a55c3bc5], 
PUP.Optional.SearchProtect, C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb, Spostato in quarantena, [05ec20cd95e64beb6186c7a5b54fe917], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\apnuserid.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\appid.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\dtx.ini, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\geodata.xml, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\guid.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\log.txt, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\preferences.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\setupCfg.xml, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\sysid.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar	rackid.dat, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\LocalLow\ilividbandoomoviestoolbar\search\ilividbandoomoviestoolbar-search-history.xml, Spostato in quarantena, [27ca905d0e6d0531139040afed15d729], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar\GC\com.apn.native_messaging_host_aaaaafeopjhkcolncjbedbhofpocmdbn.json, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar\GC\com.apn.native_messaging_host_aaaaaigjndjblmpeckabiffcpogflfgl.json, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar\GC\IACNativeMsgHost.exe, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 
PUP.Optional.Bandoo.A, C:\Users\saverio\AppData\Local\ilividbandoomoviestoolbar\GC	oolbar.crx, Spostato in quarantena, [32bfd31ad2a94beb4a5afaf5de24bd43], 

Settori fisici: 0
(No malicious items detected)


(end)

n00r · Answer

si aprono ancora delle pagine ?

fa una nuova scansione con entrambi e posta i nuovi report

Tray-G · Answer

Wow grazie non si aprono piu! Ho rifatto la scansione con entrambi ma non mi ha trovato niente!!! ti posto comunque i risultati
# AdwCleaner v3.310 - Rapporto creato 16/09/2014 in 11:10:28
# Aggiornato 12/09/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nome utente : saverio - GEOSAVE
# In esecuzione da : C:\Users\saverio\Desktop\adwcleaner_3.310.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****

Cartella Eliminato : C:\Program Files (x86)\webporpoise

***** [ Compiti ] *****


***** [ Collegamenti ] *****


***** [ Registro ] *****

Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}

***** [ Browser ] *****

-\ Internet Explorer v11.0.9600.17280


-\ Google Chrome v37.0.2062.120

[ File : C:\Users\saverio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Eliminati [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=IT&userid=2f562c5f-37cb-d96f-78de-50c2ca34c773&searchtype=ds&q={searchTerms}&installDate=31/08/2013

*************************

AdwCleaner[R0].txt - [42242 octets] - [15/09/2014 18:54:30]
AdwCleaner[R1].txt - [42097 octets] - [15/09/2014 19:31:49]
AdwCleaner[R2].txt - [1338 octets] - [16/09/2014 11:04:33]
AdwCleaner[S0].txt - [37522 octets] - [15/09/2014 19:36:03]
AdwCleaner[S1].txt - [1262 octets] - [16/09/2014 11:10:28]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [1322 octets] ##########

Tray-G · Answer

Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 16/09/2014
Ora scansione: 11:23:05
File di log: malw.txt
Amministratore: Si

Versione: 2.00.2.1012
Database malware: v2014.09.16.03
Database rootkit: v2014.09.15.01
Licenza: Free
Protezione da malware: Disattivata
Protezione da siti web nocivi: Disattivata
Self-protection: Disattivata

SO: Windows 7 Service Pack 1
CPU: x64
File system: NTFS
Utente: saverio

Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 313742
Tempo impiegato: 23 min, 31 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Heuristics: Attivata
PUP: Attivata
PUM: Attivata

Processi: 0
(No malicious items detected)

Moduli: 0
(No malicious items detected)

Chiavi di registro: 0
(No malicious items detected)

Valori di registro: 0
(No malicious items detected)

Dati di registro: 0
(No malicious items detected)

Cartelle: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Settori fisici: 0
(No malicious items detected)


(end)

n00r · Answer

figurati!

riavvi il computer e fa una nuova scansione con adwcleaner mandaci il report

Tray-G · Answer

Eccomi,ho riavviato e fatto la scansione ecco il report
# AdwCleaner v3.310 - Rapporto creato 16/09/2014 in 13:01:57
# Aggiornato 12/09/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nome utente : saverio - GEOSAVE
# In esecuzione da : C:\Users\saverio\Desktop\adwcleaner_3.310.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****


***** [ Compiti ] *****


***** [ Collegamenti ] *****


***** [ Registro ] *****


***** [ Browser ] *****

-\ Internet Explorer v11.0.9600.17280


-\ Google Chrome v37.0.2062.120

[ File : C:\Users\saverio\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Eliminati [Search Provider] : hxxp://feed.snapdo.com/?publisher=SnapdoOCYB&dpid=SnapdoOCYB&co=IT&userid=2f562c5f-37cb-d96f-78de-50c2ca34c773&searchtype=ds&q={searchTerms}&installDate=31/08/2013

*************************

AdwCleaner[R0].txt - [42242 octets] - [15/09/2014 18:54:30]
AdwCleaner[R1].txt - [42097 octets] - [15/09/2014 19:31:49]
AdwCleaner[R2].txt - [1338 octets] - [16/09/2014 11:04:33]
AdwCleaner[R3].txt - [1318 octets] - [16/09/2014 12:52:13]
AdwCleaner[R4].txt - [1378 octets] - [16/09/2014 12:59:35]
AdwCleaner[S0].txt - [37522 octets] - [15/09/2014 19:36:03]
AdwCleaner[S1].txt - [1402 octets] - [16/09/2014 11:10:28]
AdwCleaner[S2].txt - [1298 octets] - [16/09/2014 13:01:57]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [1358 octets] ##########

n00r · Answer

c'è ancora snapdo che non si toglie 

riavvia il pc di nuovo
apri chrome e incolla questo
chrome://settings/searchEngines
dai invio

nella finestra Motori di ricerca cancella tutti i provider lascia solo quelli che usi spesso (tipo google, wikipedia, yahoo)

Tray-G · Answer

Ok ho fatto come dici e ho tolto snapdo "manualmente", ho riavviato e fatto un altra scansione con adwcleaner,che non ha trovato niente(snapdo sparito!) ma ho fatto clean lo stesso! ti posto comunque il log
# AdwCleaner v3.310 - Rapporto creato 16/09/2014 in 14:54:00
# Aggiornato 12/09/2014 di Xplode
# Sistema operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nome utente : saverio - GEOSAVE
# In esecuzione da : C:\Users\saverio\Desktop\adwcleaner_3.310.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****


***** [ Compiti ] *****


***** [ Collegamenti ] *****


***** [ Registro ] *****


***** [ Browser ] *****

-\ Internet Explorer v11.0.9600.17280


-\ Google Chrome v37.0.2062.120

[ File : C:\Users\saverio\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [42242 octets] - [15/09/2014 18:54:30]
AdwCleaner[R1].txt - [42097 octets] - [15/09/2014 19:31:49]
AdwCleaner[R2].txt - [1338 octets] - [16/09/2014 11:04:33]
AdwCleaner[R3].txt - [1318 octets] - [16/09/2014 12:52:13]
AdwCleaner[R4].txt - [1378 octets] - [16/09/2014 12:59:35]
AdwCleaner[R5].txt - [1304 octets] - [16/09/2014 14:42:38]
AdwCleaner[S0].txt - [37522 octets] - [15/09/2014 19:36:03]
AdwCleaner[S1].txt - [1402 octets] - [16/09/2014 11:10:28]
AdwCleaner[S2].txt - [1438 octets] - [16/09/2014 13:01:57]
AdwCleaner[S3].txt - [1223 octets] - [16/09/2014 14:54:00]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1283 octets] ##########

n00r · Answer

ok ora sembra a posto 

ti lascio questi articoli per evitare altri guai di questo tipo in futuro:
*Come scaricare su internet senza prendere virus e malware vari
*Evitare di installare programmi indesiderati (Eazel)

Tray-G · Answer

Grazie ancora per avermi risolto il problema in modo facile e veloce, complimenti a te e al forum. Ciaoooo

Piticu28 · Answer

# AdwCleaner v4.106 - Report created 03/01/2015 at 19:53:13
# Updated 21/12/2014 by Xplode
# Database : 2015-01-03.1 [Live]
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : Piticu - PITICU-PC
# Running from : C:\Users\Piticu\Downloads\adwcleaner_4.106.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : IePluginServices
Service Deleted : WindowsMangerProtect

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IePluginServices
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Users\Piticu\AppData\Local\BoBrowser

***** [ Scheduled Tasks ] *****

Task Deleted : Run_Bobby_Browser

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\SupHpUISoft
Key Deleted : HKCU\Software\BoBrowser
Key Deleted : HKLM\SOFTWARE\SupTab
Key Deleted : HKLM\SOFTWARE\supWindowsMangerProtect
Key Deleted : HKLM\SOFTWARE\supWPM
Key Deleted : HKLM\SOFTWARE\Clara
Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware

***** [ Browsers ] *****

-\ Internet Explorer v8.0.7601.17514

Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\ Mozilla Firefox v34.0.5 (x86 en-US)

[xxc27wam.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.enable_search1", false);
[xxc27wam.default\prefs.js] - Line Deleted : user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", true);

*************************

AdwCleaner[R0].txt - [2940 octets] - [03/01/2015 19:51:15]
AdwCleaner[S0].txt - [2146 octets] - [03/01/2015 19:53:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2206 octets] ##########

Pagine internet si aprono da sole, cosa fare

13 risposte

Discussioni simili