Salve,sono nuovo.
Volevo sapere come posso risolvere il mio problema che ora vi esponerò.
Sicuramente sono infetto da un Malware Pubblicitario e/o Porno(Sesso a Pagamento Ecc...).
L'apertura del Browser e la ricerca da Google,non da problemi. Però,nelle mi ricerche e talvolta nei link,vengo reindirizzato a pagine SPAM provenienti da una casa CPCADNET , che mi reindirizza a altri siti Random.Talvolta Porno. Siccome ho un figlio vorrei risolvere il problema (Porno prevalentemente) e anche dello SPAM visto che sono fastidiosi.Noto il reindirizzamento visto che c'è un caricamento piu lento rispetto al normale e subito cambia il link .
Ho già Scansionato il PC con Malware Byte's , Spybot : Search & Destroy e in questo momento con Ad-Aware. Ha eliminato molti Malware Spybot (Nominato Redirecters) ma il problema persiste,ora,se non produco risultati con Ad-Aware,credo di scansionare con Avast.
Report Hijackthis
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10.49.04, on 20/03/2011
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.19019)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Intel\IntelDH\NMS\Support\IntelHCTAgent.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\SysMonitor.exe
C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\IncrediMail\Bin\ImApp.exe
C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE
C:\Program Files\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Users\Alessandro\AppData\Local\Google\Chrome\Ap plication\chrome.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://it.rd.yahoo.com/customize/yco...//it.yahoo.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://mystart.incredimail.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://it.intl.acer.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.intl.acer.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://it.rd.yahoo.com/customize/yco...//it.yahoo.com
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.4.12.6.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} -
Rispondi quotando
