Aiuto per Spyware pubblicitari!!!

[animal2001]

Ciao amici

Ho un problema, non come ma ho preso qualche genere di spyware, mentre navigo su internet mi si aprono dei popup di pubblicità, e molto spesso se visito o scrivo ad esempio su google, na determinata frase tipo calcio "poco dopo mi si aprono popup d scommesse sportive!!!

Allora,ho provato a fare scansione sia con avira antivirus che con avg ma niente, poi ho installato spybot search & distroy.. idem!! ho provato anche malwareytes - anti mlware, che l'ho trovato facendo una ricerca si google.. ma niente di niente! Help!!

Devo per forza formattare???

[Deifobe]

Scarica navilog1.exe_il mafioso sul desktop e installalo.

Esegui Navilog1, scegli la lingua e, al menù di scelta, seleziona l'opzione 1 (non scegliere le altre). Ad un certo punto uscirà una scritta "Analysis ... Terminate", premi un tasto come richiesto e si aprirà un file di testo (il rapporto della scansione che dovrai postare).

===========

se hai Vista, prima di eseguire navilog1 (come amministratore) disattiva l'UAC (qui viene spiegato come disattivarlo microsoft.com)

Start => Pannello di controllo => Account Utente e protezione per la famiglia (User Accounts and Family Safety) => Account Utente

Se viene richiesto una password di amministratore, digitare il nome di utente di amministratore e la password e quindi scegliere OK. Se si richiede la conferma, scegliere Continua.

Deselezionare la casella di controllo Use User Account Control (UAC) .... quindi scegliere OK.

Riavvia il computer.

[animal2001]

Search Navipromo version 3.7.6 began on 04/05/2009 at 14.27.36,05

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!

Fix running from C:\Programmi\navilog1

Updated on 14.03.2009 at 18h00 by IL-MAFIOSO

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) Processor )
BIOS : Award Modular BIOS v6.00PG
USER : Lorenz ( Administrator )
BOOT : Normal boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)


C:\ (Local Disk) - NTFS - Total:76 Go (Free:13 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)


Search done in normal mode


*** Search folders in "C:\WINDOWS" ***


*** Search folders in "C:\Programmi" ***


*** Search folders in "C:\Documents and Settings\All Users\menuav~1\progra~1" ***


*** Search folders in "C:\Documents and Settings\All Users\menuav~1" ***


*** Search folders in "c:\docume~1\alluse~1\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Lorenz\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Lorenz\impost~1\datiap~1" ***


*** Search folders in "C:\Documents and Settings\Lorenz\menuav~1\progra~1" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\WINDOWS\system32" *

* Scan in "C:\Documents and Settings\Lorenz\impost~1\datiap~1" *



*** Search files ***


C:\WINDOWS\prefetch\WEBMEDIAPLAYER.EXE-3676FD4D.pf found !
C:\WINDOWS\prefetch\LIVE-PLAYER_SETUP.EXE-265FAB3A.pf found !
C:\WINDOWS\prefetch\LIVE-PLAYER.EXE-3038A3C9.pf found !

*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!


[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"osgigga"="\"c:\\documents and settings\\lorenz\\impostazioni locali\\dati applicazioni\\osgigga.exe\" osgigga"


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\WINDOWS\system32" :


* In "C:\Documents and Settings\Lorenz\impost~1\datiap~1" :

osgigga.exe found !
osgigga.dat found !
osgigga_nav.dat found !
osgigga_navps.dat found !

3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate not found !
Montorgueil certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !

4)Search others known folders and files :



*** Search completed on 04/05/2009 at 14.44.24,97 ***

[Deifobe]

Riavvia il computer in modalità provvisoria: all'avvio del pc, prima che inizi a caricare Windows, premi ripetutamente F8. Uscirà la finestra del menu Opzioni avanzate di Windows => scegli modalità provvisoria (usa il tasto freccia ^).
Esegui Navilog1 e scegli l'opzione 2 (Automatic Cleaning) e dai l'ok (eseguirà la pulizia dei files infetti trovati)
Quando finisce, riavvia il pc in modalità normale, posta il rapporto cleannavi.txt

ciao

[animal2001]

Ciao ti posto il risultato!! di popup non ne vedo piu sei un grande!!"





Navipromo Removal version 3.7.6 started on 06/05/2009 at 12.16.25,88

Fix running from C:\Programmi\navilog1

Updated on 14.03.2009 at 18h00 by IL-MAFIOSO

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 2
X86-based PC ( Uniprocessor Free : AMD Athlon(tm) Processor )
BIOS : Award Modular BIOS v6.00PG
USER : Lorenz ( Administrator )
BOOT : Fail-safe boot

Antivirus : Avira AntiVir PersonalEdition 8.0.1.30 (Activated)


C:\ (Local Disk) - NTFS - Total:76 Go (Free:14 Go)
D:\ (CD or DVD)
E:\ (Local Disk) - NTFS - Total:19 Go (Free:5 Go)


Automatic removal
with Catchme and GNS results


Cleanning stage done in safe mode


*** fsbl1.txt not found ***
(Check that Catchme found nothing in Search Mode)


*** Deleting with Backups GenericNaviSearch results ***

* Deletion in "C:\WINDOWS\System32" *


* Deletion in "C:\Documents and Settings\Lorenz\impost~1\datiap~1" *



*** Deleting folders in "C:\WINDOWS" ***


*** Deleting folders in "C:\Programmi" ***


*** Deleting folders in "C:\Documents and Settings\All Users\menuav~1\progra~1" ***


*** Deleting folders in "C:\Documents and Settings\All Users\menuav~1" ***


*** Deleting folders in "c:\docume~1\alluse~1\datiap~1" ***


*** Deleting folders in "C:\Documents and Settings\Lorenz\datiap~1" ***


*** Deleting folders in "C:\Documents and Settings\Lorenz\impost~1\datiap~1" ***


*** Deleting folders in "C:\Documents and Settings\Lorenz\menuav~1\progra~1" ***



*** Deleting files ***


*** Deleting temporary files ***

Cleaning of C:\WINDOWS\Temp done !
Cleaning of C:\Documents and Settings\Lorenz\impost~1\Temp done !

*** Complementary Search ***
(Search specific files)

1)Deletion with backups new Instant Access files:

2)Heuristic search and deletion with backups :


* In "C:\WINDOWS\system32" *



* In "C:\Documents and Settings\Lorenz\impost~1\datiap~1" *


osgigga.exe found !
Copy osgigga.exe done !
osgigga.exe deleted !

osgigga.dat found !
Copy osgigga.dat done !
osgigga.dat deleted !

osgigga_nav.dat found !
Copy osgigga_nav.dat done !
osgigga_nav.dat deleted !

osgigga_navps.dat found !
Copy osgigga_navps.dat done !
osgigga_navps.dat deleted !


*** Copy Registry to Safebackup folder ***

Backing up Registry done !

*** Cleaning Registry ***

Registry cleaned


*** Certificates ***

Egroup Certificate not found !
Electronic-Group Certificate not found !
Montorgueil Certificate not found !
OOO-Favorit Certificate not found !
Sunny-Day-Design-Ltd Certificate not found !

*** Search others known folders and files ***



*** Cleaning stage complete on 06/05/2009 at 12.18.39,05 ***

[Deifobe]

ho eliminato l'altro thread aperto nessun problema

ok.. dovessi notare altro, stiamo qui....

ciao...

Dei

[animal2001]

Ciao ok grazie mille!