salve a tutti,ho problemi durante la navigazione dovuti a pagine pubblicitarie che si aprono da sole!vi posto il log ottenuto con hijackthis premettendo che durante la scansione è uscito un avviso che diceva che era impossibile scansionare i file host.
hijackthis.log
mi aiutereste a risolvere il mio problema?grazie
Ciao,
Scarica adwcleaner , avvialo, premi delete e attendi la fine dell'operazione.
Posta il log generato.
La vita è fatta a scale, c'è chi scende e c'è chi cade.
Se avrei studiato, avessi imparato. [Cit. Leone di Lernia ]
# AdwCleaner v3.003 - Report created 14/09/2013 at 18:21:43
# Updated 07/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Downloads\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
File Found : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\user.js
Folder Found C:\ProgramData\Ask
Folder Found C:\ProgramData\Tarma Installer
Folder Found C:\Users\hp\AppData\Local\PutLockerDownloader
Folder Found C:\Users\hp\AppData\Local\SoftwareUpdater
Folder Found C:\Users\hp\AppData\Roaming\iWin
Folder Found C:\Users\hp\AppData\Roaming\Microsoft\Windows\Star t Menu\Programs\PutLockerDownloader.com
Folder Found C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\jetpack
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Found : HKCU\Software\1ClickDownload
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap\Domains\grusskartencenter.com
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap\EscDomains\grusskartencenter.com
Key Found : HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\1ClickDownload
Key Found : [x64] HKCU\Software\Softonic
Key Found : HKLM\Software\ChatZum Toolbar
Key Found : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Found : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Found : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}
Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinod ckpcehhdhjlgiphgnbfci
Key Found : HKLM\Software\Iminent
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloade r_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloade r_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_emule_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_emule_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_inssider_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_inssider_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_portable-artweaver_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_portable-artweaver_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_utorrent_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_utorrent_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_winrar_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_winrar_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASA PI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASM ANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Found : [x64] HKLM\SOFTWARE\Tarma Installer
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16686
nn so se ho capito bene,scaricato,fatto scan preso il log faccio delete?
-\\ Mozilla Firefox v23.0.1 (it)
[ File : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\prefs.js ]
Line Found : user_pref("extentions.y2layers.defaultEnableAppsLi st", "DropDownDeals,buzzdock,YontooNewOffers");
Line Found : user_pref("extentions.y2layers.installId", "8110134d-a66f-4b05-b296-ac0ffff12a90");
-\\ Google Chrome v
[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4458 octets] - [14/09/2013 18:21:43]
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [4518 octets] ##########
scusa ho scritto nel mezzo del log...allora ho fatto lo scan cn adwclean copiato il log,premo clean?
si premi clean o delete, ora non ricordo bene, e posta il nuovo log
ps. non scaricare nulla dal sito di softonic; molto probabilmente, il problema si è generato tramite il download di uno dei suoi installer.
ma io mi tengo sempre a debita distanza da softonic...cmq mi ha riavviato il computer,e quando s'è riacceso ho trovato qst log aperto
# AdwCleaner v3.003 - Report created 14/09/2013 at 19:02:12
# Updated 07/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\Ask
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\Users\hp\AppData\Local\PutLockerDownloader
Folder Deleted : C:\Users\hp\AppData\Local\SoftwareUpdater
Folder Deleted : C:\Users\hp\AppData\Roaming\iWin
Folder Deleted : C:\Users\hp\AppData\Roaming\Microsoft\Windows\Star t Menu\Programs\PutLockerDownloader.com
Folder Deleted : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\jetpack
File Deleted : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\user.js
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\apfdadfinod ckpcehhdhjlgiphgnbfci
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap\Domains\grusskartencenter.com
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap\EscDomains\grusskartencenter.com
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloade r_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\PutlockerDownloade r_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASA PI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASM ANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_emule_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_emule_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_inssider_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_inssider_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_portable-artweaver_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_portable-artweaver_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_utorrent_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_utorrent_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_winrar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader _per_winrar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{162E06EC-4E38-4809-AE76-BF2400D34334}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Settings\{F1AF26F8-1828-4279-ABCE-074EF3235BD7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKLM\Software\ChatZum Toolbar
Key Deleted : HKLM\Software\Iminent
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v23.0.1 (it)
[ File : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\prefs.js ]
Line Deleted : user_pref("extentions.y2layers.defaultEnableAppsLi st", "DropDownDeals,buzzdock,YontooNewOffers");
Line Deleted : user_pref("extentions.y2layers.installId", "8110134d-a66f-4b05-b296-ac0ffff12a90");
-\\ Google Chrome v
[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4610 octets] - [14/09/2013 18:21:43]
AdwCleaner[S0].txt - [4541 octets] - [14/09/2013 19:02:12]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4601 octets] ##########
comunque sto ripetendo la scansione e appena fatta ti invio il nuovo log
ecco il nuovo log # AdwCleaner v3.003 - Report created 14/09/2013 at 19:06:10
# Updated 07/09/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : hp - HP-PC
# Running from : C:\Users\hp\Downloads\adwcleaner.exe
# Option : Scan
***** [ Services ] *****
***** [ Files / Folders ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
***** [ Browsers ] *****
-\\ Internet Explorer v10.0.9200.16686
-\\ Mozilla Firefox v23.0.1 (it)
[ File : C:\Users\hp\AppData\Roaming\Mozilla\Firefox\Profil es\wem9mr09.default\prefs.js ]
-\\ Google Chrome v
[ File : C:\Users\hp\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [4610 octets] - [14/09/2013 18:21:43]
AdwCleaner[R1].txt - [791 octets] - [14/09/2013 19:06:10]
AdwCleaner[S0].txt - [4685 octets] - [14/09/2013 19:02:12]
ok ora è pulito.
naviga un po' e vedi se il problema si ripresenta, altrimenti siamo a posto.
nel caso si ripresentasse, ti lascio le indicazioni da seguire
Scarica e installa Malwarebytes . Aggiornalo e fai una scansione completa del computer. Nel caso rilevi qualche infezione, salva il log, elimina le minacce rilevate (occhio alla fine della scansione, devi selezionare le caselle dei rilevamenti e premere elimina selezionati), riavvia il pc per completare la pulizia. Posta il rapporto ottenuto.
ok grazie di tutto!
Permessi di invio
Rispondi quotando