Ciao, ho riscontrato vari virus e malwere sul pc ma non sapendo come procedere x la rimozione chiedo il vostro aiuto...ho scaricato il tool otl (ho i due file otl e extras) ho scaricato anche frst(ho i due file FRST e Additional)...nel caso che vi serva un allegato mi potreste spiegare come si allega?grazie in anticipo Configurazione: Windows XP / Chrome 42.0.2311.152

Ciao, Scarica e salva sull desktop ADW Cleaner =>https://toolslib.net Chiudi tutti i programmi e browser internet aperti Fa doppio clic su "AdwCleaner.exe" per eseguirlo Fa clic sul pulsante "Scan" e attendi la fine del processo Fa clic sul pulsante "Clean" e segui le istruzioni Il programma chiuderà tutti i programmi aperti, quindi salva i tuoi dati e lavori in corso prima di continuare Se viene chiesto di avviare il PC, accetta Un report verrà aperto automaticamente, Copia/incolla il contenuto del file nella tua risposta Puoi trovare il file log in "C:\AdwCleaner\AdwCleaner[Sn].txt" (nel quale "n" è un numero).

Come procedere dopo aver riscontrato virus e malwere sul pc [Risolto]

Risposta 1 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
22 mag 2015 alle 07:38

Figurati ,-)

Risposta 2 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
19 mag 2015 alle 20:41

Ciao,

Scarica e salva sull desktop ADW Cleaner =>https://toolslib.net
Chiudi tutti i programmi e browser internet aperti
Fa doppio clic su "AdwCleaner.exe" per eseguirlo
Fa clic sul pulsante "Scan" e attendi la fine del processo
Fa clic sul pulsante "Clean" e segui le istruzioni
Il programma chiuderà tutti i programmi aperti, quindi salva i tuoi dati e lavori in corso prima di continuare
Se viene chiesto di avviare il PC, accetta
Un report verrà aperto automaticamente, Copia/incolla il contenuto del file nella tua risposta
Puoi trovare il file log in "C:\AdwCleaner\AdwCleaner[Sn].txt" (nel quale "n" è un numero).

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 13:16

# AdwCleaner v4.204 - Logfile created 01/06/2015 at 13:10:14
# Updated 12/05/2015 by Xplode
# Database : 2015-05-12.2 [Server]
# Operating system : Microsoft Windows XP Service Pack 3 (x86)
# Username : Administrator - XPSP3
# Running from : C:\Documents and Settings\Administrator\Documenti\Downloads\adwcleaner_4.204.exe
# Option : Cleaning

- - - - [ Services ] *****
      - [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\BrowserProtect
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Iminent
Folder Deleted : C:\Programmi\Searchqu Toolbar
Folder Deleted : C:\Programmi\SiteLookup
Folder Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\AskSearch
Folder Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\Iminent
Folder Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\mt_ffx
Folder Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\Softonic
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\apn
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\lollipop
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\PackageAware
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\SoftwareUpdater
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Babylon
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Iminent
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\OfferBox
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\searchquband
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Searchqutoolbar
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\SearchYa
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\SimilarSites
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Toolbar4
File Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\Searchqu.ini
File Deleted : C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\Uninstall.exe
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\c4orbu10.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\c4orbu10.default\searchplugins\browsemngr.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\c4orbu10.default\searchplugins\Search_Results.xml
File Deleted : C:\Programmi\Mozilla Firefox\browser\searchplugins\SearchTheWeb.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\c4orbu10.default\searchplugins\SearchYa!.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\c4orbu10.default\user.js

- - - - [ Scheduled tasks ] *****
      - [ Shortcuts ] *****
      - [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Iminent
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\esrv.searchyaESrvc
Key Deleted : HKLM\SOFTWARE\Classes\esrv.searchyaESrvc.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
Key Deleted : HKCU\Software\5c68ddfb46feb10
Key Deleted : HKLM\SOFTWARE\5c68ddfb46feb10
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{15F6BCB7-BB0F-4A66-8762-4765B05597EB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{35B8892D-C3FB-4D88-990D-31DB2EBD72BD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6801410E-CC88-42D6-A93B-909E95645407}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3F607E46-0D3C-4442-B1DE-DE7FA4768F5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FE0273D1-99DF-4AC0-87D5-1371C6271785}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{15F6BCB7-BB0F-4A66-8762-4765B05597EB}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{93E3D79C-0786-48FF-9329-93BC9F6DC2B3}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D0F4A166-B8D4-48B8-9D63-80849FE137CB}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{819DC4CA-4FFF-4C2E-800D-F346471D99BC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{99079A25-328F-4BD4-BE04-00955ACAA0A7}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12}
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Cr_Installer
Key Deleted : HKCU\Software\Crossrider
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\IGearSettings
Key Deleted : HKCU\Software\Iminent
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Offerbox
Key Deleted : HKCU\Software\searchqutoolbar
Key Deleted : HKCU\Software\searchya
Key Deleted : HKCU\Software\searchya.com
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\SOFTWARE\AedgePerformanceBCN
Key Deleted : HKLM\SOFTWARE\Babylon
Key Deleted : HKLM\SOFTWARE\Offerbox
Key Deleted : HKLM\SOFTWARE\SearchquMediabarTb
Key Deleted : HKU\.DEFAULT\Software\AskToolbar
Key Deleted : HKU\.DEFAULT\Software\AVG Secure Search
Key Deleted : HKU\.DEFAULT\Software\I Want This
Key Deleted : HKU\.DEFAULT\Software\Offerbox
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\PDF Creator Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PDF Creator Packages
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{1AE46C09-2AB8-4EE5-88FB-08CD0FF7F2DF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\43C098337DB065A49B665D4EA7F16D1C
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>;*.offerbox.com

- - - - [ Web browsers ] *****

-\\ Internet Explorer v7.0.5730.13

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v37.0.2 (x86 it)

[c4orbu10.default\prefs.js] - Line Deleted : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?affID=119556&babsrc=HP_ss&mntrId=70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("avg.install.userSPSettings", "Delta Search");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("browser.newtab.url", "hxxp://search.iminent.com/?ref=NewTab&appId=C882DDEC-C069-4DA5-ACE9-9CE6CD9A6ECF");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.admin", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.aflt", "babsst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.dfltLng", "en");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.excTlbr", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.id", "70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.instlDay", "15638");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.instlRef", "sst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=70c60c7a000000000000582c80139263&q=");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.vrsn", "1.8.3.8");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar.vrsni", "1.8.3.8");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.babExt", "");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112860&tt=4312_6");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.hardId", "70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.id", "70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.instlDay", "15482");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.newTab", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?affID=119556&babsrc=NT_ss&mntrId=70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.srcExt", "ss' /noXPI");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.3.817:43:06");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.autoRvrt", "false");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.dfltSrch", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=13&cc=");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.hpOld0", "hxxp://search.findeer.com");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=2&cc=&q=");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=15&cc=");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.rvrt", "true");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic_i.dnsErr", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic_i.hmpg", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.Softonic_i.newTab", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.admin", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.aflt", "babsst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.dfltLng", "en");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.excTlbr", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.id", "70c60c7a000000000000582c80139263");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.instlDay", "15764");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.instlRef", "sst");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.newTab", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.prdct", "delta");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.rvrt", "false");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.smplGrp", "none");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.tlbrId", "base");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsn", "1.8.10.0");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.10.010:02:37");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.delta.vrsni", "1.8.10.0");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.iminent.newTab", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.iminent.rvrt", "false");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.aflt", "grupo1y");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.appId", "{1973277F-87B0-4EA3-9ED2-470A91D284CF}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.cntry", "IT");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.dfltLng", "");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.dfltSrch", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.dnsErr", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.dspFFXOld", "StartWeb");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.excTlbr", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.hdrMd5", "2E18D498DC65236C8B4A734A35E0AB4C");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.hmpg", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.hmpgUrl", "hxxp://www.searchya.com/?f=1&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.hpFFXOld", "hxxp://start.iminent.com/?appId=C882DDEC-C069-4DA5-ACE9-9CE6CD9A6ECF");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.id", "582C801392630C7A");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.instlDay", "15749");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.instlRef", "");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.lastVrsnTs", "1.8.8.016:14:29");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.newTabUrl", "hxxp://www.searchya.com/?f=2&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&c[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.pnu_base", "{\"newVrsn\":\"35\",\"lastVrsn\":\"35\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.prdct", "searchya");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.prtnrId", "searchya");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.sg", "none");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.srchPrvdr", "SearchYa!");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.tlbrId", "base");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.tlbrSrchUrl", "hxxp://www.searchya.com/?f=3&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.vrsn", "1.8.8.0");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya.vrsni", "1.8.8.0");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya_i.hmpg", true);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya_i.newTab", false);
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya_i.smplGrp", "none");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("extensions.searchya_i.vrsnTs", "1.8.8.016:14:29");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.LayoutId", "1");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.ShowThankyouPixel", "0");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0.7929388823205448,\"s\":8,\"es\":4}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.adapters", "{\"google\":{\"CountryCode\":\"IT\",\"NoAds\":false,\"Status\":1,\"expireTime\":\"1385033898278259200\"},\"groupon\":{\"CountryCode\":\"IT\",\"NoAds\":false,\"Status\":2[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.enabledAds", "obsolete");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"addonId\":1,\"url\":\"//i.imitinjs.info/imitin/javascript.js\",\"querySt[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.externalScripts.iRobinHood.IROBPKG", "{\"pkgid\":\"wrDCtMK2wrjCtMKwwrLCucKz\",\"raw_pkgid\":\"157951382\"}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.externalScripts.iRobinHood.irobsettings", "[{\"TM\":\"61590.7\",\"IA\":\"1\",\"HU\":\"hxxp://iminent.donation-tools.org/home.aspx\",\"CC\":\"Fight Cancer\",\"CI\":\"5719\",\"AU\":\"[...]
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.externalScripts.iRobinHood.menuURL", "hxxp://iminent.donation-tools.org/home.aspx?pkgId=wrDCtMK2wrjCtMKwwrLCucKz");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.newtabredirect", "true");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent100", "1410449370523");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent101", "1392886631421");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent102", "1412244974973");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent105", "1390557192398");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent109", "1412324606254");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent110", "1411666969502");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent111", "1412324605618");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent112", "1412324607737");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent122", "1412324606387");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent136", "1399042241156");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.registerToolbarEvent140", "1412255054460");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.searchindex", "2");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.trackExternalScripts1", "1397212826905");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.trackExternalScripts2", "1397212828622");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.trackExternalScripts3", "1397224115468");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.trackingInfo", "{\"state\":0,\"samplingRate\":0}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.version", "8.26.4.1");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.versioning", "{\"CurrentVersion\":\"8.26.4.1\",\"InstallEventCTime\":1411034809371,\"InstallEvent\":\"True\"}");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent109", "1360773418927");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent111", "1360773418940");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent112", "1360773437057");
[c4orbu10.default\prefs.js] - Line Deleted : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent122", "1360773418951");

-\\ Google Chrome v42.0.2311.152

[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.softonic.com/MOY00010/tb_v1?q={searchTerms}&SearchSource=49&cc=
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-3&o=APN10401&locale=it_IT&apn_uid=9351918a-ec6b-4310-93b3-0072a8bae74c&apn_ptnrs=%5EABZ&apn_sauid=6E5F94AA-28B9-4BDE-AFC8-9A60CD14A14B&apn_dtid=%5EYYYYYY%5EYY%5EIT&q={searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://dts.search-results.com/sr?src=crb&appid=0&systemid=410&sr=0&q={searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.babylon.com/?q={searchTerms}&affID=110824&tt=4312_4&babsrc=SP_ss&mntrId=70c60c7a000000000000582c80139263
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.searchya.com/?q={searchTerms}&f=4&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=1117602795&ir=
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://www.delta-search.com/?q={searchTerms}&affID=119556&babsrc=SP_ss&mntrId=70c60c7a000000000000582c80139263
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://feed.snap.do/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=IT&userid=33610115-2e67-448f-abde-edfd22fb154d&searchtype=ds&q={searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://start.iminent.com/?appId=C882DDEC-C069-4DA5-ACE9-9CE6CD9A6ECF&ref=toolbox&q={searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://search.iminent.com/?appId=C882DDEC-C069-4DA5-ACE9-9CE6CD9A6ECF&ref=toolbox&q={searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Web Data] - Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : cjpglkicenollcignonpgiafdgfeehoj
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : eooncjejnppfjjklapaamhcdmjbilmde
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Extension] : jpmbfleldcgkldadpdinhjjopdfpjfjp
[C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Secure Preferences] - Deleted [Homepage] : hxxp://search.iminent.com/?appId=C882DDEC-C069-4DA5-ACE9-9CE6CD9A6ECF

AdwCleaner[R0].txt - [37494 bytes] - [01/06/2015 13:01:04]
AdwCleaner[S0].txt - [39118 bytes] - [01/06/2015 13:10:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [39178 bytes] ##########

Risposta 3 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 14:27

Ciao,
Scarica ZHP cleaner e registralo sull desktop:
http://www.nicolascoolman.fr/download/zhpcleaner-2/
Sceglie Italiano come lingua di utilisazzione.
Acceta il contrato di licenza del utilizzatore finale
Avvia il programma,clicca su il pulsante SCAN.
Quando il scan e finito clicca su il pulsante PULISCE.
Posta i report qui.

Ubuntu 14.04 LTS Firefox / Magela 3 Opera 12.15
Support Paul Watson and Sea Shepherd

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 15:40

l analisi è completata devo fare RIPARAZIONE? cioè il pulsante a fianco a scan?

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 15:46

ho cliccato su RIPARAZIONE adesso è uscito un elenco ed in basso ci sono tre pulsanti
Deselezionare Convalidare Riparazione

Risposta 4 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 15:43

Ciaio,
Si avevo sbagliato,clicca su riparazione,e mandaci il report

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 15:57

la riparazione avvenuta con successo...adesso quando faccio il riavvio del pc lui mi da il report?

Risposta 5 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 15:48

Clicca su riparazione

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 16:05

il report me lo da appena faccio il riavvio?oppure lo devo prendere all'interno del programma dove ce scritto report?

Risposta 6 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 16:16

Quando il computer si riavvio,il report sara sull desktop.
Copia / incollalo nella tua risposta

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 16:28

mi è uscito il report ma non rieso a fare niente perchè sono sparite tutte le icone sul desktop...cosa faccio adesso?

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 16:29

infatti ti stò rispondendo con il cell

Risposta 7 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 16:46

Riavvia il computer,e dimmi se ci sono le icone

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 17:10

le icone sono ritornate

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 17:10

~ ZHPCleaner v2015.5.19.246 by Nicolas Coolman (2015\05\19)
~ Run by Administrator (Administrator) (01/06/2015 15:53:18)
~ Forum : http://forum.nicolascoolman.fr
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Riparare
~ Report : C:\Documents and Settings\Administrator\Desktop\ZHPCleaner.txt
~ Quarantine : C:\Documents and Settings\Administrator\Dati applicazioni\ZHP\ZHPCleaner_Quarantine.txt
~ UAC : Deactivate
~ Boot Mode : Normal (Normal boot)
~ Windows XP, 32-bit Service Pack 3 (Build 2600)

---\\ Servizi (0)
~ Nessun elemento malevolo trovato.

---\\ Browser Internet (17)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var1", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var10", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var2", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var3", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var4", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var5", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var6", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var7", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var8", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.Var9", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.cache.tbs_include_xml_006938", "14/16/14/1/113"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.firstlaunch", "0"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.guid", "%7B83E7CE08-01C8-3E8A-9FF4-EE2E48413277%7D"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.stored_historysearch", "////meches%20"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6.userId", "%12"); (Adware.IMBooster)
ELIMINATO: [c4orbu10.default] - user_pref("id_imbooster4web_v6_installed_version", "1.0.1018.0"); (Adware.IMBooster)
ELIMINATO dati: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyHttp1.1 [Bad : 1] (Hijacker.Proxy)

---\\ File hosts (1)
~ Il file hosts è legittimo (19)

---\\ Operazioni pianificate automatiche. (0)
~ Nessun elemento malevolo trovato.

---\\ Esploratore ( File, Cartelle) (193)
SPOSTATO file: C:\WINDOWS\System32\update.exe [Aedge Performance BCN SL - OfferBox setup] (PUP.PCSpeedUp)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF10.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF11.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF12.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF13.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF14.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF15.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF3.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF4.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF5.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF6.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF7.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF8.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\.1488140\FirefoxExtension\components\DataMngrHlpFF9.dll [Bandoo Media Inc - Data Manager] (Adware.Bandoo)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\iMesh_setup.exe [iMesh Inc. - iMesh] (PUP.iMesh)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\OB.exe [Aedge Performance BCN SL - OfferBox setup] (PUP.PCSpeedUp)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\datamngrUI.exe.1487890 [Bandoo Media, inc - Data Manager] (PUP.Datamngr)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\iMesh.ico (PUP.iMesh)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\NAG_iMesh.ini (PUP.iMesh)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\OfferBoxSetup.exe (PUP.OfferBox)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\Softonic_chr_1-8-8-11.exe [Softonic - ] (PUP.Softonic)
SPOSTATO file: C:\DOCUME~1\ADMINI~1\IMPOST~1\Temp\wajam_install.exe [© Wajam. All right reserved. - ] (PUP.Wajam)
SPOSTATO cartelle^: C:\Documents and Settings\All Users\Dati applicazioni\Mobile Partner (Toolbar.YahooPartner)
SPOSTATO cartelle: C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Temp\Iminent (Adware.IMBooster)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI10.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI10.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI11.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI11.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI12.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI12.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI13.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI13.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI14.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI14.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI14.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI14.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI15.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI15.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI15.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI15.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI16.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI16.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI16.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI16.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI17.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI17.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI17.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI17.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI18.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI18.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI18.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI18.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI19.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI19.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI19.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI19.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1A.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1A.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1A.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1A.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1B.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1B.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1B.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1B.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1C.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1C.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1C.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1C.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1D.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1D.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1D.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1E.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1E.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1E.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1E.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1F.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1F.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1F.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI1F.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI20.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI20.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI20.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI20.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI21.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI21.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI22.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI22.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI23.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI23.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI23.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI24.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI24.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI24.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI24.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI25.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI26.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI26.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI27.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI28.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI28.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI28.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI29.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI29.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI29.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2A.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2BA.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2BB.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2BF.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2B.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2C0.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2C3.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2C.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2E.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI2F.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI30.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI34.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI36D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI376.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI376.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI377.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI378.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI379.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI379.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI37A.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI37B.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI37C.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI37D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI37E.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI382.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI384.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI388.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI389.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38B.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38C.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38D.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38E.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38E.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI38F.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI390.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI390.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI393.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI394.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI394.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI395.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI396.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI397.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI398.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI39A.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI39B.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI39C.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3A0.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3A1.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3A4.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3A5.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3A9.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B2.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B3.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B5.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B6.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B7.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B8.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3B9.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3BA.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI3BE.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI5.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI5.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI5.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI5.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI6.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI6.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI6.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI6.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI7.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI7.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI96.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI9A.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSI9D.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIA.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIB.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIB.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIB.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIB.tmp-2 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIC.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIC.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIC.tmp-1 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSID.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIE.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIE.tmp-0 (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIF.tmp- (Empty)
SPOSTATO cartelle: C:\WINDOWS\Installer\MSIF.tmp-0 (Empty)

---\\ Registro ( Chiavi, Valori, Dati ) (18)
ELIMINATO chiave: HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12} [https://fr.yahoo.com/?p=us{searchTerms}&f=4&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD[...]] [SearchYa!] (Adware.SearchYa)
ELIMINATO chiave: HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12} http://www.searchya.com/?q={searchTerms}&f=4&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=1117602795&ir= (Adware.SearchYa)
ELIMINATO chiave: HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes\{30F5AB16-9F1E-4E99-93F2-ECB9ABB0EC12} http://www.searchya.com/?q={searchTerms}&f=4&a=grupo1y&cd=2XzuyEtN2Y1L1QzuyDzztB0CzztDtCtAzytByCtAtD0CyB0AtN0D0Tzu0CyEtCtDtN1L2XzutBtFtBtFtCtFyDtDtAtN1L1Czu1N1C2Y1E1FtC2U&cr=1117602795&ir= (Adware.SearchYa)
ELIMINATO chiave*: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011221158} [] (Adware.CrossRider)
ELIMINATO chiave*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011221158} [] (Adware.CrossRider)
ELIMINATO chiave*: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011221158} [] (Adware.CrossRider)
ELIMINATO chiave*: HKEY_USERS\S-1-5-21-725345543-73586283-1177238915-500\Software\Smartbar [] (PUP.QuickShare)
ELIMINATO chiave: HKCU\Software\Smartbar [] (PUP.QuickShare)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\Search.PugiObj [AVG Security Toolbar] (Toolbar.AVGSearch)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\Search.PugiObj.1 [AVG Security Toolbar] (Toolbar.AVGSearch)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC [SearchAssistantOC] (PUP.SearchAssist)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\SearchAssistantOC.SearchAssistantOC.1 [SearchAssistantOC] (PUP.SearchAssist)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\CLSID\{2E71FD0F-AAB1-42c0-9146-6D2C4EDCF07D} [SearchAssistantOC] (PUP.SearchAssist)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\CLSID\{B45FF030-4447-11D2-85DE-00C04FA35C89} [SearchAssistantOC] (PUP.SearchAssist)
ELIMINATO chiave*: HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Iminent [] (Adware.IMBooster)
ELIMINATO chiave*: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1478992D-7717-4054-8AAE-FB9C906D70ED} [C:\PROGRA~1\SEARCH~1\Datamngr\ToolBar (Not File)] (PUP.Datamngr)
ELIMINATO chiave*: HKLM\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF} [BrowserWndAPI Class] (Toolbar.AVGSearch)
ELIMINATO chiave: HKLM\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}\InprocServer32 [C:\Programmi\AVG Secure Search\10.2.0.3\AVG Secure Search_toolbar.dll (Not File)] (Toolbar.AVGSearch)

---\\ Risultato di riparazione
~ Riparazione effettuata con successo
~ Browser non trovato (Opera Software)
~ Il sistema è stato riavviato.

---\\ Statistiche
~ Elementi analizzati : 5840
~ Elementi trovati : 0
~ Elementi cancellati : 0
~ Elementi riparati : 228

End of clean at 15:53:43
===================
ZHPCleaner-[R]-01062015-15_53_43.txt
ZHPCleaner-[S]-01062015-15_38_05.txt

Risposta 8 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 17:21

OK,
E adesso come si comporta il PC ??

massimodeg Posti 50 Data di registrazione giovedì 6 febbraio 2014 Stato Membri Ultimo intervento lunedì 25 dicembre 2017
20 mag 2015 alle 17:27

quando cerco di aprire un browser è molto lento

Risposta 9 / 9

l'embrouille 75 Posti 5307 Data di registrazione lunedì 4 luglio 2011 Stato Membri Ultimo intervento giovedì 5 luglio 2018 749
20 mag 2015 alle 19:31

Ciao,
Mandaci i 3 report FRST come spiegato nell tutorial di utilizzo ( Cjoint)

massimodeg
21 mag 2015 alle 16:57

ciao grazie del tuo aiuto si è normalizzato

Come procedere dopo aver riscontrato virus e malwere sul pc

9 risposte

Discussioni simili