Pagina 1 di 5 1 2 3 ... ultimoultimo
Visualizzazione dei risultati da 1 a 10 su 41
  1. #1
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289

    Pagine che si aprono da sole.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15.34.03, on 24/09/2012
    Platform: Windows Vista SP2 (WinNT 6.00.1906)
    MSIE: Internet Explorer v9.00 (9.00.8112.16450)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Analog Devices\Core\smax4pnp.exe
    C:\Program Files\AVG Secure Search\vprot.exe
    C:\Program Files\Epson Software\Event Manager\EEventManager.exe
    C:\Program Files\AVG\AVG2012\avgtray.exe
    C:\Program Files\Common Files\Java\Java Update\jusched.exe
    C:\Program Files\Ask.com\Updater\Updater.exe
    C:\Program Files\Windows Media Player\wmpnscfg.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Program Files\Siber Systems\AI RoboForm\robotaskbaricon.exe
    C:\Users\micro\AppData\Local\Akamai\netsession_win .exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
    C:\Users\Public\Documents\AppData\PoApp\PService.e xe
    C:\Users\micro\AppData\Local\Akamai\netsession_win .exe
    C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\Windows\system32\wuauclt.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\rundll32.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.libero.it/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    R3 - URLSearchHook: (no name) - {4619105f-8f56-4dc3-bb47-ede6e2993355} - (no file)
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG2012\avgssie.dll
    O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
    O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
    O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll
    O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
    O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
    O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"
    O4 - HKLM\..\Run: [EEventManager] "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [ROC_roc_dec12] "C:\Program Files\AVG Secure Search\ROC_roc_dec12.exe" /PROMPT /CMPID=roc_dec12
    O4 - HKLM\..\Run: [AVG_TRAY] "C:\Program Files\AVG\AVG2012\avgtray.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
    O4 - HKLM\..\Run: [PosService] C:\Users\Public\Documents\AppData\PoApp\PLauncher. exe
    O4 - HKLM\..\Run: [ROC_ROC_JULY_P1] "C:\Program Files\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1
    O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe"
    O4 - HKCU\..\Run: [EPSON29B9D6 (Epson Stylus SX420W)] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIG CE.EXE /FU "C:\Windows\TEMP\E_S5D8A.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON29B9D6 (Epson Stylus SX420W) (Copia 1)] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIG CE.EXE /FU "C:\Windows\TEMP\E_SF5C8.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON SX420W Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIG CE.EXE /FU "C:\Windows\TEMP\E_SFCE8.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON SX420W Series (Copia 1)] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIG CE.EXE /FU "C:\Windows\TEMP\E_S4E6D.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [EPSON SX420W Series (Copia 2)] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIG CE.EXE /FU "C:\Windows\TEMP\E_SEAEC.tmp" /EF "HKCU"
    O4 - HKCU\..\Run: [Google Update] "C:\Users\micro\AppData\Local\Google\Update\Google Update.exe" /c
    O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
    O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\micro\AppData\Local\Akamai\netsession_wi n.exe"
    O4 - HKCU\..\Run: [Facebook Update] "C:\Users\micro\AppData\Local\Facebook\Update\Face bookUpdate.exe" /c /nocrashserver
    O4 - HKUS\S-1-5-18\..\RunOnce: [DeleteEngineAfterUpdate] reg DELETE HKCU\Software\AppDataLow\Software\ConduitEngine /f (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\RunOnce: [DeleteEngineAfterUpdate] reg DELETE HKCU\Software\AppDataLow\Software\ConduitEngine /f (User 'Default user')
    O4 - Startup: Facebook Messenger.lnk = C:\Users\micro\AppData\Local\Facebook\Messenger\2. 1.4631.0\FacebookMessenger.exe
    O4 - Global Startup: BTTray.lnk = ?
    O8 - Extra context menu item: Compila Modulo - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Invia immagine alla periferica &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Invia pagina alla periferica &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O8 - Extra context menu item: Personalizza - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
    O8 - Extra context menu item: RF Barra strumenti - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O8 - Extra context menu item: Salva Moduli - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra button: Compila - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O9 - Extra 'Tools' menuitem: Compila Modulo - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
    O9 - Extra button: Salva - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra 'Tools' menuitem: Salva Moduli - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
    O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O9 - Extra 'Tools' menuitem: RF Barra strumenti - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
    O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20614.www2.hp.com/ediags/gm...tDetection2.cab
    O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{6D6A2BB4-CE18-4D23-9E4B-7AD58DB0CA4E}: NameServer = 176.31.229.24,176.31.229.25
    O17 - HKLM\System\CCS\Services\Tcpip\..\{DEEEC86C-995F-47C5-9BE1-8ADE7D08288F}: NameServer = 176.31.229.24,176.31.229.25
    O17 - HKLM\System\CCS\Services\Tcpip\..\{F96D83CD-0DA1-4C9F-9E59-9D4863478E04}: NameServer = 176.31.229.24,176.31.229.25
    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll
    O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\Networ kLicenseServer.exe
    O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
    O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exe
    O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgfws.exe
    O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\AVGIDSAgent.exe
    O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2012\avgwdsvc.exe
    O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
    O23 - Service: ONDA Autorun CDROM Monitor - Unknown owner - C:\Windows\system32\SupportAppXL\onda_mon.exe
    O23 - Service: Pos Service (PowerOffer Service) - PowerOfferService - C:\Users\micro\AppData\Local\PosService\Pos.exe
    O23 - Service: Serv Updater (ServUpdater) - ServiceUpd - C:\Users\micro\AppData\Local\ServUpdater\ServiceUp d.exe
    O23 - Service: vToolbarUpdater12.2.6 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe

    --
    End of file - 12592 bytes

  2. #2
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    riesegui la scansione con hijackthis metti la spunta accanto alle caselle corrispondenti delle voci sotto e premi fix checked

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.findeer.com

    O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

    O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

    O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"

    R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll

    O17 - HKLM\System\CCS\Services\Tcpip\..\{6D6A2BB4-CE18-4D23-9E4B-7AD58DB0CA4E}: NameServer = 176.31.229.24,176.31.229.25

    O17 - HKLM\System\CCS\Services\Tcpip\..\{DEEEC86C-995F-47C5-9BE1-8ADE7D08288F}: NameServer = 176.31.229.24,176.31.229.25

    O17 - HKLM\System\CCS\Services\Tcpip\..\{F96D83CD-0DA1-4C9F-9E59-9D4863478E04}: NameServer = 176.31.229.24,176.31.229.25
    fai una scansione con adwcleaner clicca su delete e posta il log

    scarica e installa malwarebytes

    Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
    Esegui una "scansione completa" (seleziona l'opzione)
    A scansione completa, fai clic su OK => Mostra i Risultati.
    Assicurarti che tutto sia selezionato e clicca clic su Rimuovi selezionati.
    Se ti chiede di riavviare, riavvia per completare il processo di pulizia.
    Posta il rapporto .
    i log delle scansioni caricali = > QUI

    oppure = > QUI

  3. #3
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289
    Originariamente inviato da menatwork
    riesegui la scansione con hijackthis metti la spunta accanto alle caselle corrispondenti delle voci sotto e premi fix checked



    fai una scansione con adwcleaner clicca su delete e posta il log

    scarica e installa malwarebytes

    Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
    Esegui una "scansione completa" (seleziona l'opzione)
    A scansione completa, fai clic su OK => Mostra i Risultati.
    Assicurarti che tutto sia selezionato e clicca clic su Rimuovi selezionati.
    Se ti chiede di riavviare, riavvia per completare il processo di pulizia.
    Posta il rapporto .
    Menat la scansione con malwarebytes gia fatta ieri ed eliminato un solo elemento trovato! Riguardo adwcleaner non me lo fa scaricare in quanto dice che potrebbe danneggiare il pc! Cmq ho fixato le voci!

  4. #4
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    adwcleaner e' un ottimo pulitore che si usa spessissimo nei forum e non ha mai creato problemi

    hai per caso un firewall?
    i log delle scansioni caricali = > QUI

    oppure = > QUI

  5. #5
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289
    Originariamente inviato da menatwork
    adwcleaner e' un ottimo pulitore che si usa spessissimo nei forum e non ha mai creato problemi

    hai per caso un firewall?
    Credo sia integrato nell'Avg.

  6. #6
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    Credo sia integrato nell'Avg.
    avg dovrebbe pensare al blocco dei virus non a quello dei programmini innocui

    vai con la scansione, tranquillo....sblocca il firewall e butta avg
    i log delle scansioni caricali = > QUI

    oppure = > QUI

  7. #7
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289
    # AdwCleaner v2.003 - Logfile created 09/24/2012 at 21:23:05
    # Updated 23/09/2012 by Xplode
    # Operating system : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
    # User : micro - PC-MICRO
    # Boot Mode : Normal
    # Running from : C:\Users\micro\AppData\Local\Microsoft\Windows\Tem porary Internet Files\Content.IE5\2ZXFHG2S\adwcleaner.exe
    # Option [Delete]


    ***** [Services] *****


    ***** [Files / Folders] *****

    Deleted on reboot : C:\Program Files\Common Files\AVG Secure Search
    File Deleted : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
    File Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\searchplugins\Askcom.xml
    Folder Deleted : C:\Program Files\Ask.com
    Folder Deleted : C:\Program Files\AVG Secure Search
    Folder Deleted : C:\Program Files\Conduit
    Folder Deleted : C:\Program Files\DAEMON Tools Toolbar
    Folder Deleted : C:\ProgramData\Ask
    Folder Deleted : C:\ProgramData\AVG Secure Search
    Folder Deleted : C:\ProgramData\Tarma Installer
    Folder Deleted : C:\Users\micro\AppData\Local\AVG Secure Search
    Folder Deleted : C:\Users\micro\AppData\Local\Conduit
    Folder Deleted : C:\Users\micro\AppData\LocalLow\AskToolbar
    Folder Deleted : C:\Users\micro\AppData\LocalLow\AVG Secure Search
    Folder Deleted : C:\Users\micro\AppData\LocalLow\Conduit
    Folder Deleted : C:\Users\micro\AppData\LocalLow\ConduitEngine
    Folder Deleted : C:\Users\micro\AppData\LocalLow\PriceGong
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\Conduit
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\ConduitEngine
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\extensions\avg@toolbar
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\extensions\engine@conduit.c om
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\extensions\staged
    Folder Deleted : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\extensions\toolbar@ask.com
    Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}

    ***** [Registry] *****

    Key Deleted : HKCU\Software\APN
    Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
    Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
    Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
    Key Deleted : HKCU\Software\Ask.com
    Key Deleted : HKCU\Software\AVG Secure Search
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uni nstall\{79A765E1-C399-405B-85AF-466F52E918B0}
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKLM\Software\APN
    Key Deleted : HKLM\Software\AskToolbar
    Key Deleted : HKLM\Software\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
    Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
    Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd
    Key Deleted : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd .1
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68D EBAA244EB686953B7074FEF
    Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68D EBAA244EB686953B7074FEF
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
    Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi .1
    Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2905319
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
    Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
    Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
    Key Deleted : HKLM\Software\Conduit
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ins taller\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
    Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uni nstall\AVG Secure Search
    Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Deleted : HKLM\Software\Tarma Installer
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32099AAC-C132-4136-9E9A-4E364A424E17}]
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
    Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

  8. #8
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289
    ***** [Internet Browsers] *****

    -\\ Internet Explorer v9.0.8112.16421

    Restored : [HKCU\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-18\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-19\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Restored : [HKU\S-1-5-20\Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope]
    Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={7F374998-3E26-4B77-8073-F293AA711270}&mid=7612807bccc847d18fd6d157710e2381-cc6d22c8a768088eab90cf6c7521165901319969&lang=it&d s=AVG&pr=pr&d=2011-09-09 23:08:59&v=9.0.0.22&sap=nt --> hxxp://www.google.com

    -\\ Mozilla Firefox v13.0.1 (it)

    Profile name : default
    File : C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\prefs.js

    C:\Users\micro\AppData\Roaming\Mozilla\Firefox\Pro files\q6l988lt.default\user.js ... Deleted !

    Deleted : user_pref("CT2905319..clientLogIsEnabled", true);
    Deleted : user_pref("CT2905319..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT2905319..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT2905319.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT2905319.CTID", "CT2905319");
    Deleted : user_pref("CT2905319.CurrentServerDate", "9-5-2011");
    Deleted : user_pref("CT2905319.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT2905319.DownloadReferralCookieData", "");
    Deleted : user_pref("CT2905319.EMailNotifierPollDate", "Mon May 09 2011 18:27:07 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("CT2905319.FirstServerDate", "7-4-2011");
    Deleted : user_pref("CT2905319.FirstTime", true);
    Deleted : user_pref("CT2905319.FirstTimeFF3", true);
    Deleted : user_pref("CT2905319.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT2905319.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT2905319.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT2905319.HasUserGlobalKeys", true);
    Deleted : user_pref("CT2905319.Initialize", true);
    Deleted : user_pref("CT2905319.InitializeCommonPrefs", true);
    Deleted : user_pref("CT2905319.InstallationAndCookieDataSent Count", 3);
    Deleted : user_pref("CT2905319.InstallationId", "Messenger_Plus_IT.exe");
    Deleted : user_pref("CT2905319.InstallationType", "ConduitIntegration");
    Deleted : user_pref("CT2905319.InstalledDate", "Thu Apr 07 2011 09:14:18 GMT+0200 (ora legale Europa occidenta[...]
    Deleted : user_pref("CT2905319.InvalidateCache", false);
    Deleted : user_pref("CT2905319.IsGrouping", false);
    Deleted : user_pref("CT2905319.IsMulticommunity", false);
    Deleted : user_pref("CT2905319.IsOpenThankYouPage", false);
    Deleted : user_pref("CT2905319.IsOpenUninstallPage", true);
    Deleted : user_pref("CT2905319.LanguagePackLastCheckTime", "Mon May 09 2011 18:27:12 GMT+0200 (ora legale Euro[...]
    Deleted : user_pref("CT2905319.LanguagePackReloadIntervalMM" , 1440);
    Deleted : user_pref("CT2905319.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT2905319.LastLogin_3.2.5.2", "Mon May 09 2011 18:27:16 GMT+0200 (ora legale Europa occid[...]
    Deleted : user_pref("CT2905319.LatestVersion", "3.3.3.2");
    Deleted : user_pref("CT2905319.Locale", "it");
    Deleted : user_pref("CT2905319.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT2905319.MCDetectTooltipShow", false);
    Deleted : user_pref("CT2905319.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT2905319.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT2905319.RadioIsPodcast", false);
    Deleted : user_pref("CT2905319.RadioLastCheckTime", "Mon May 09 2011 18:27:09 GMT+0200 (ora legale Europa occi[...]
    Deleted : user_pref("CT2905319.RadioLastUpdateIPServer", "3");
    Deleted : user_pref("CT2905319.RadioLastUpdateServer", "129406033977030000");
    Deleted : user_pref("CT2905319.RadioMediaID", "21761729");
    Deleted : user_pref("CT2905319.RadioMediaType", "Media Player");
    Deleted : user_pref("CT2905319.RadioMenuSelectedID", "EBRadioMenu_CT290531921761729");
    Deleted : user_pref("CT2905319.RadioStationName", "Rock104%20-%20The%20Hard%20Rock%20Channel");
    Deleted : user_pref("CT2905319.RadioStationURL", "hxxp://wma3.cdn.radiostorm.com/rock104hr");
    Deleted : user_pref("CT2905319.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT2905319.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT290[...]
    Deleted : user_pref("CT2905319.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT2905319.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT2905319.SearchInNewTabLastCheckTime", "Mon May 09 2011 18:27:06 GMT+0200 (ora legale Eu[...]
    Deleted : user_pref("CT2905319.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT2905319.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Deleted : user_pref("CT2905319.ServiceMapLastCheckTime", "Mon May 09 2011 18:27:06 GMT+0200 (ora legale Europa[...]
    Deleted : user_pref("CT2905319.SettingsLastCheckTime", "Mon May 09 2011 18:27:04 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("CT2905319.SettingsLastUpdate", "1304433925");
    Deleted : user_pref("CT2905319.ThirdPartyComponentsInterval" , 504);
    Deleted : user_pref("CT2905319.ThirdPartyComponentsLastCheck ", "Mon May 09 2011 18:27:04 GMT+0200 (ora legale [...]
    Deleted : user_pref("CT2905319.ThirdPartyComponentsLastUpdat e", "1291279838");
    Deleted : user_pref("CT2905319.TrusteLinkUrl", "hxxp://trust.conduit.com/EB_ORIGINAL_CTID");
    Deleted : user_pref("CT2905319.UserID", "UN70674562723418390");
    Deleted : user_pref("CT2905319.WeatherNetwork", "");
    Deleted : user_pref("CT2905319.WeatherPollDate", "Mon May 09 2011 18:27:10 GMT+0200 (ora legale Europa occiden[...]
    Deleted : user_pref("CT2905319.WeatherUnit", "C");
    Deleted : user_pref("CT2905319.alertChannelId", "1297244");
    Deleted : user_pref("CT2905319.backendstorage._fb_dailyactiv ity", "31333032313630343730313737");
    Deleted : user_pref("CT2905319.backendstorage._fb_lifetimese nt", "54525545");
    Deleted : user_pref("CT2905319.backendstorage.ct2905319ads1" , "253742253232616473253232253341253542253742253 23[...]
    Deleted : user_pref("CT2905319.backendstorage.ct2905319curre nt_term", "6772656173656D6F6E6B6579");
    Deleted : user_pref("CT2905319.backendstorage.ct2905319sdate ", "39");
    Deleted : user_pref("CT2905319.backendstorage.facebook_ctid_ connect_send", "73656E646564");
    Deleted : user_pref("CT2905319.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");

  9. #9
    Utente di HTML.it
    Registrato dal
    Nov 2006
    Messaggi
    289
    Deleted : user_pref("CT2905319.backendstorage.hxxp://www_blabbers_com/app/conduit.bbrs_affid", "6272617A696C")[...]
    Deleted : user_pref("CT2905319.backendstorage.hxxp://www_blabbers_com/app/conduit.bbrs_bguid", "6272617A696C2D[...]
    Deleted : user_pref("CT2905319.backendstorage.hxxp://www_blabbers_com/app/conduit.bbrs_lba", "3231373439333037[...]
    Deleted : user_pref("CT2905319.backendstorage.hxxp://www_blabbers_com/app/conduit.bbrs_lba1", "323031312D352D3[...]
    Deleted : user_pref("CT2905319.backendstorage.ytapp_dailyact ivity", "31333034393538343535343831");
    Deleted : user_pref("CT2905319.backendstorage.ytapp_lifetime sent", "54525545");
    Deleted : user_pref("CT2905319.myStuffEnabled", true);
    Deleted : user_pref("CT2905319.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT2905319.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT2905319.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT2905319.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT2905319.testingCtid", "");
    Deleted : user_pref("CT2905319.toolbarAppMetaDataLastCheckTi me", "Mon May 09 2011 18:27:12 GMT+0200 (ora legal[...]
    Deleted : user_pref("CT2905319.toolbarContextMenuLastCheckTi me", "Thu Apr 07 2011 09:14:21 GMT+0200 (ora legal[...]
    Deleted : user_pref("CT2905319.usagesFlag", 1);
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1297244/1292915/IT", "\"0\"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/IT", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2905319", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63440294476430[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2905319/CT2905319[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/minimize.gif[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/play.gif", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/stop.gif", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/stopped.GIF"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Funky/vol.gif", "\[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=it", "\"634[...]
    Deleted : user_pref("CommunityToolbar.EngineOwner", "CT2905319");
    Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{4619105f-8f56-4dc3-bb47-ede6e2993355}");
    Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "messenger_plus_it");
    Deleted : user_pref("CommunityToolbar.IsEngineShown", false);
    Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEng ine", true);
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2905319");
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGui d", "{4619105f-8f56-4dc3-bb47-ede6e2993355}");
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToo lbarId", "messenger_plus_it");
    Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSa vedUrl", "chrome://browser-region/locale/region.pr[...]
    Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2905319,ConduitEngine");
    Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2905319");
    Deleted : user_pref("CommunityToolbar.alert.alertDialogsGett erLastCheckTime", "Mon May 09 2011 20:24:28 GMT+02[...]
    Deleted : user_pref("CommunityToolbar.alert.alertInfoInterva l", 1440);
    Deleted : user_pref("CommunityToolbar.alert.alertInfoLastChe ckTime", "Sun Jul 24 2011 02:39:26 GMT+0200 (ora l[...]
    Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl ", "hxxp://alert.client.conduit.com");
    Deleted : user_pref("CommunityToolbar.alert.locale", "en");
    Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin ", 1440);
    Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTi me", "Sun Jul 24 2011 01:40:40 GMT+0200 (ora legal[...]
    Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateT ime", "1305622559");
    Deleted : user_pref("CommunityToolbar.alert.messageShowTimeS ec", 20);
    Deleted : user_pref("CommunityToolbar.alert.servicesServerUr l", "hxxp://alert.services.conduit.com");
    Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
    Deleted : user_pref("CommunityToolbar.alert.userCloseInterva lMin", 300);
    Deleted : user_pref("CommunityToolbar.alert.userId", "dcd18426-0281-48ce-9696-32da9f61b3be");
    Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedI temTable", true);
    Deleted : user_pref("CommunityToolbar.isClickActionAddedToFe edItemTable", true);
    Deleted : user_pref("ConduitEngine.AppTrackingLastCheckTime" , "Tue Jun 28 2011 14:15:42 GMT+0200 (ora legale E[...]
    Deleted : user_pref("ConduitEngine.DialogsGetterLastCheckTim e", "Mon May 09 2011 20:23:52 GMT+0200 (ora legale[...]
    Deleted : user_pref("ConduitEngine.FirstServerDate", "04/07/2011 10");
    Deleted : user_pref("ConduitEngine.FirstTime", true);
    Deleted : user_pref("ConduitEngine.FirstTimeFF3", true);
    Deleted : user_pref("ConduitEngine.HasUserGlobalKeys", true);
    Deleted : user_pref("ConduitEngine.Initialize", true);
    Deleted : user_pref("ConduitEngine.InitializeCommonPrefs", true);
    Deleted : user_pref("ConduitEngine.InstalledDate", "Thu Apr 07 2011 09:14:20 GMT+0200 (ora legale Europa occid[...]
    Deleted : user_pref("ConduitEngine.IsMulticommunity", false);
    Deleted : user_pref("ConduitEngine.IsOpenThankYouPage", false);
    Deleted : user_pref("ConduitEngine.IsOpenUninstallPage", true);
    Deleted : user_pref("ConduitEngine.LanguagePackLastCheckTime ", "Mon May 09 2011 18:27:14 GMT+0200 (ora legale [...]
    Deleted : user_pref("ConduitEngine.LastLogin_3.2.5.2", "Mon May 09 2011 18:27:30 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("ConduitEngine.PublisherContainerWidth", 0);
    Deleted : user_pref("ConduitEngine.SearchFromAddressBarIsIni t", true);
    Deleted : user_pref("ConduitEngine.SettingsLastCheckTime", "Mon May 09 2011 18:27:14 GMT+0200 (ora legale Euro[...]
    Deleted : user_pref("ConduitEngine.UserID", "UN09788382520359642");
    Deleted : user_pref("ConduitEngine.engineLocale", "it");
    Deleted : user_pref("ConduitEngine.enngineContextMenuLastChe ckTime", "Mon May 09 2011 18:27:14 GMT+0200 (ora l[...]
    Deleted : user_pref("ConduitEngine.globalFirstTimeInfoLastCh eckTime", "Mon May 09 2011 20:23:46 GMT+0200 (ora [...]
    Deleted : user_pref("ConduitEngine.initDone", true);
    Deleted : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
    Deleted : user_pref("ConduitEngine.usagesFlag", 2);
    Deleted : user_pref("browser.search.defaultengine", "Ask.com");
    Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
    Deleted : user_pref("browser.search.order.1", "Ask.com");
    Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");
    Deleted : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://isearch.avg.com/search?cid=%7B7fa1d35f[...]
    Deleted : user_pref("keyword.URL", "hxxps://isearch.avg.com/search?cid={7F374998-3E26-4B77-8073-F293AA711270}&[...]

    -\\ Google Chrome v21.0.1180.89

    File : C:\Users\micro\AppData\Local\Google\Chrome\User Data\Default\Preferences

    Deleted [l.54] : icon_url = "hxxp://isearch.avg.com/favicon.ico",
    Deleted [l.57] : keyword = "isearch.avg.com",
    Deleted [l.60] : search_url = "hxxp://isearch.avg.com/search?cid={7F374998-3E26-4B77-8073-F293AA711270}&mid=7612807bccc847d18fd6d157710e2381-cc6d22c8a768088eab90cf6c7521165901319969&lang=it&d s=AVG&pr=pr&d=2011-09-09 23:08:59&v=11.1.0.12&sap=dsp&q={searchTerms}",

    *************************

    AdwCleaner[S1].txt - [24587 octets] - [24/09/2012 21:23:06]

    ########## EOF - C:\AdwCleaner[S1].txt - [24648 octets] ##########

  10. #10
    Utente di HTML.it L'avatar di menatwork
    Registrato dal
    May 2009
    Messaggi
    4,330
    visto ? non e' successo niente anzi....hai un quintale di porcheria in meno grazie ad adwcleaner

    eliminiamo i rimasugli

    Scarica OTL e salvalo sul desktop

    Metti la spunta su SCAN ALL USERS.

    Sotto output, metti la spunta su minimal output

    Clicca sulla freccettina di File Age e seleziona 60 Days

    Metti la spunta a LOP Check e Purity Check.

    Clicca su RUN SCAN

    Lascia fare la scansione senza interferire.

    Al termine della scansione trovi 2 log sul desktop. OTL.txt ed Extras.txt, salvali e caricali su Wikisend oppure qui = > http://www.freefilehosting.net/
    i log delle scansioni caricali = > QUI

    oppure = > QUI

Permessi di invio

  • Non puoi inserire discussioni
  • Non puoi inserire repliche
  • Non puoi inserire allegati
  • Non puoi modificare i tuoi messaggi
  •  
Powered by vBulletin® Version 4.2.1
Copyright © 2024 vBulletin Solutions, Inc. All rights reserved.