Fastidiosissimo adware

[keby]

salve ragazzi, anzitutto volevo ringraziarvi, perchè quando c'era in giro il sasser, sapevo con certezza a chi rivolgermi per risolvere il problema, e tanti amici grazie al link a questo forum hanno risolto il problema anch'essi.

Adesso l'aiuto che vi chiedo riguarda un problema che è sorto per l'installazione di un programma che si chiama Global DivX.
quando l'ho installato c'era scritto che era fornito del materiale in bundle pubblicitario. Me ne sono preoccupato ben poco perchè l'installazione doveva essere solo momentanea per provare a leggere un file asf.
Purtroppo quando ho provato a disinstallare il programma, è apparsa la scritta "il software pubblicitario non verrà rimosso".

come posso fare per disinstallarlo?

grazie anticipatamente.
Antonio

[amvinfe]

hai già provato con AdAware e SpyBot aggiornati?
Le scansioni falle dalla modalità provvisoria e riavvia sempre dopo ogni scansione.

Se non risolvi in Rilievo in links utili trovi HijackThis, mettilo all'interno di una nuova cartella, fai lo scan e posta il log (la scansione falla dalla modalità normale)

[keby]

grazie mille della velocissima risposta

ho provato con adaware 6.0 e il risultato è stato

33 Running processes
99 Objects recognized
0 Objects ignored

1 processes identified
17 Registry keys identified
3 Registry Values identified
74 Files identified
4 Folders identified

non saran mica dovuti tutti a Global Divx?



e adesso visualizzo tutti i 99 objects con l'opzione di spunta, pochi sono già spuntati, mi conviene spuntarli tutti e metterli in quarantine?

[amvinfe]

puoi fare così, fai una nuova scansione con AdAware, finita la scansione clicchi su "Mostra logfile" lo salvi e lo posti qui, se un post non basta lo dividi in due. Vediamo cosa AdAware ti ha trovato.

[keby]

amvinfe grazie per la grande disponibilità

ecco cosa adaware ha trovato


Lavasoft Ad-aware Personal Build 6.181
Logfile created on :mercoledì 21 luglio 2004 1.21.09
Created with Ad-aware Personal, free for private use.
Using reference-file :01R298 20.04.2004
__________________________________________________ ____

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan within archives
Set : Scan my Hosts file


21-07-2004 1.21.09 - Scan started. (Custom mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [smss.exe]
FilePath : \SystemRoot\System32\
ThreadCreationTime : 20-07-2004 22.54.09
BasePriority : Normal


#:2 [winlogon.exe]
FilePath : \??\C:\WINDOWS\system32\
ThreadCreationTime : 20-07-2004 22.54.14
BasePriority : High


#:3 [services.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-07-2004 22.54.15
BasePriority : Normal
FileSize : 99 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Applicazione Servizi e Controller
InternalName : services.exe
OriginalFilename : services.exe
ProductName : Sistema operativo Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:4 [lsass.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-07-2004 22.54.15
BasePriority : Normal
FileSize : 11 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : LSA Shell (Export Version)
InternalName : lsass.exe
OriginalFilename : lsass.exe
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:5 [svchost.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-07-2004 22.54.15
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:6 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.15
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:7 [ccsetmgr.exe]
FilePath : C:\Programmi\File comuni\Symantec Shared\
ThreadCreationTime : 20-07-2004 22.54.16
BasePriority : Normal
FileSize : 229 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client Settings Manager Service
InternalName : ccSetMgr
OriginalFilename : ccSetMgr.exe

ProductName : Common Client
Created on : 19/08/2003 21.36.26
Last accessed : 20/07/2004 22.54.09
Last modified : 19/08/2003 21.36.26

#:8 [ccevtmgr.exe]
FilePath : C:\Programmi\File comuni\Symantec Shared\
ThreadCreationTime : 20-07-2004 22.54.17
BasePriority : Normal
FileSize : 249 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Common Client Event Manager Service
InternalName : ccEvtMgr
OriginalFilename : ccEvtMgr.exe
ProductName : Common Client
Created on : 19/08/2003 21.32.02
Last accessed : 20/07/2004 22.54.09
Last modified : 19/08/2003 21.32.02

#:9 [spoolsv.exe]
FilePath : C:\WINDOWS\system32\
ThreadCreationTime : 20-07-2004 22.54.18
BasePriority : Normal
FileSize : 50 KB
FileVersion : 5.1.2600.0 (XPClient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Spooler SubSystem App
InternalName : spoolsv.exe
OriginalFilename : spoolsv.exe
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:10 [sagent2.exe]
FilePath : C:\Programmi\File comuni\EPSON\EBAPI\
ThreadCreationTime : 20-07-2004 22.54.18
BasePriority : Normal
FileSize : 92 KB
FileVersion : 2, 3, 0, 0
ProductVersion : 1, 0, 0, 0
Copyright : Copyright (C) SEIKO EPSON CORP. 2000-2001
CompanyName : SEIKO EPSON CORPORATION
FileDescription : EPSON Printer Status Agent
InternalName : SAgent2
OriginalFilename : SAgent2.exe
ProductName : EPSON Bidirectional Printer
Created on : 25/05/2004 18.33.26
Last accessed : 20/07/2004 22.54.09
Last modified : 17/07/2002 0.03.00

#:11 [navapsvc.exe]
FilePath : C:\Programmi\Norton AntiVirus\
ThreadCreationTime : 20-07-2004 22.54.18
BasePriority : Normal
FileSize : 155 KB
FileVersion : 10.00.2
ProductVersion : 10.00.2
Copyright : Norton AntiVirus 2004 for Windows 98/ME/2000/XP Copyright (c) 2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Norton AntiVirus Auto-Protect Service
InternalName : NAVAPSVC
OriginalFilename : NAVAPSVC.EXE
ProductName : Norton AntiVirus
Created on : 20/05/2004 21.38.07
Last accessed : 20/07/2004 22.53.15
Last modified : 12/05/2004 11.44.02

#:12 [svchost.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.18
BasePriority : Normal
FileSize : 12 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Generic Host Process for Win32 Services
InternalName : svchost.exe
OriginalFilename : svchost.exe
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.09
Last modified : 31/08/2001 10.00.00

#:13 [savscan.exe]
FilePath : C:\Programmi\Norton AntiVirus\
ThreadCreationTime : 20-07-2004 22.54.19
BasePriority : Normal
FileSize : 189 KB
FileVersion : 9.2.1.14
ProductVersion : 9.2
Copyright : Copyright (c) 2003 Symantec Corporation
CompanyName : Symantec Corporation
FileDescription : Symantec AntiVirus Scanner
InternalName : SAVSCAN
OriginalFilename : SAVSCAN.EXE
ProductName : Symantec AntiVirus AutoProtect
Created on : 16/05/2004 17.16.29
Last accessed : 20/07/2004 22.54.09
Last modified : 07/11/2003 15.46.00

#:14 [explorer.exe]
FilePath : C:\WINDOWS\
ThreadCreationTime : 20-07-2004 22.54.28
BasePriority : Normal
FileSize : 980 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Esplora risorse
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Sistema operativo Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.55.22
Last modified : 31/08/2001 10.00.00

#:15 [gsicon.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.30
BasePriority : Normal
FileSize : 88 KB
FileVersion : 3.1.0
ProductVersion : 3.1.0
Copyright : Copyright
CompanyName : ERICSSON, Inc.
FileDescription : ADSL Modem Monitor
InternalName : GSICON.EXE
OriginalFilename : GSICON.EXE
ProductName : Ericsson ADSL Modem HM120dp
Created on : 16/05/2004 17.01.02
Last accessed : 20/07/2004 22.54.13
Last modified : 12/10/2001 6.53.30

#:16 [dslagent.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.30
BasePriority : Normal
FileSize : 16 KB
Created on : 16/05/2004 17.01.02
Last accessed : 20/07/2004 22.54.13
Last modified : 14/06/2001 14.52.36

#:17 [ccapp.exe]
FilePath : C:\Programmi\File comuni\Symantec Shared\
ThreadCreationTime : 20-07-2004 22.54.30
BasePriority : Normal
FileSize : 69 KB
FileVersion : 2.0.0.635
ProductVersion : 2.0.0.635
Copyright : Copyright (c) 2000-2003 Symantec Corporation. All rights reserved.
CompanyName : Symantec Corporation
FileDescription : Symantec Common Client User Session
InternalName : ccApp
OriginalFilename : ccApp.exe
ProductName : Common Client
Created on : 19/08/2003 21.31.46
Last accessed : 20/07/2004 22.54.13
Last modified : 19/08/2003 21.31.46

#:18 [hpqcmon.exe]
FilePath : C:\Programmi\Hewlett-Packard\Digital Imaging\Unload\
ThreadCreationTime : 20-07-2004 22.54.30
BasePriority : Normal
FileSize : 88 KB
FileVersion : 2.0.0.133
ProductVersion : 2.0.0.133
Copyright : Copyright (C) 2001
FileDescription : HpqCmon MFC Application
InternalName : HpqCmon
OriginalFilename : HpqCmon.EXE
ProductName : HpqCmon Application
Created on : 06/10/2002 22.23.20
Last accessed : 20/07/2004 22.54.13
Last modified : 06/10/2002 22.23.20

#:19 [hpgs2wnd.exe]
FilePath : C:\Programmi\Hewlett-Packard\HP Share-to-Web\
ThreadCreationTime : 20-07-2004 22.54.30
BasePriority : Normal
FileSize : 68 KB
FileVersion : 2,3,0,0\
ProductVersion : 2,3,0,0\
Copyright : Copyright
CompanyName : Hewlett-Packard
FileDescription : hpgs2wnd
InternalName : hpgs2wnd
OriginalFilename : hpgs2wnd.exe
ProductName : Hewlett-Packard hpgs2wnd
Created on : 17/04/2002 8.42.56
Last accessed : 20/07/2004 22.54.13
Last modified : 17/04/2002 8.42.56

#:20 [e_s10ic2.exe]
FilePath : C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 74 KB
FileVersion : 3.06
ProductVersion : 3.06
Copyright : Copyright (C) SEIKO EPSON CORP. 2002
CompanyName : SEIKO EPSON CORPORATION
FileDescription : EPSON Status Monitor 3
InternalName : E_S10IC2
OriginalFilename : E_S10IC2.EXE
ProductName : EPSON Status Monitor 3
Created on : 25/05/2004 18.33.20
Last accessed : 20/07/2004 22.54.13
Last modified : 10/12/2002 3.06.00

[keby]

#:21 [qttask.exe]
FilePath : C:\Programmi\QuickTime\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 76 KB
FileVersion : 6.4
ProductVersion : QuickTime 6.4
CompanyName : Apple Computer, Inc.
InternalName : QuickTime Task
OriginalFilename : QTTask.exe
ProductName : QuickTime
Created on : 27/05/2004 21.40.12
Last accessed : 20/07/2004 22.54.13
Last modified : 27/05/2004 21.40.12

#:22 [winampa.exe]
FilePath : C:\Programmi\Winamp\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 33 KB
Created on : 13/12/2003 0.50.34
Last accessed : 20/07/2004 22.54.13
Last modified : 13/12/2003 0.50.34

#:23 [save.exe]
FilePath : C:\PROGRA~1\Save\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 308 KB
FileVersion : 2, 6, 0, 1
ProductVersion : 2, 6, 0, 1
Copyright : Copyright 2001
CompanyName : WhenU.com, Inc.
FileDescription : Save!
InternalName : WhenUSave
OriginalFilename : Save.exe
ProductName : Save!
Created on : 20/07/2004 17.38.31
Last accessed : 20/07/2004 22.54.31
Last modified : 12/04/2004 11.48.18

#:24 [rundll32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 31 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : Modulo di esecuzione DLL come applicazioni
InternalName : rundll
OriginalFilename : RUNDLL.EXE
ProductName : Sistema operativo Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.31
Last modified : 31/08/2001 10.00.00

#:25 [ctfmon.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.54.31
BasePriority : Normal
FileSize : 13 KB
FileVersion : 5.1.2600.0 (xpclient.010817-1148)
ProductVersion : 5.1.2600.0
CompanyName : Microsoft Corporation
FileDescription : CTF Loader
InternalName : CTFMON
OriginalFilename : CTFMON.EXE
ProductName : Microsoft
Created on : 31/08/2001 10.00.00
Last accessed : 20/07/2004 22.54.13
Last modified : 31/08/2001 10.00.00

#:26 [msmsgs.exe]
FilePath : C:\Programmi\Messenger\
ThreadCreationTime : 20-07-2004 22.54.32
BasePriority : Normal
FileSize : 1052 KB
FileVersion : 4.0.0155
ProductVersion : Version 4.0
Copyright : Copyright (c) Microsoft Corporation 1997-2001
CompanyName : Microsoft Corporation
FileDescription : Messenger Client
InternalName : msmsgs
OriginalFilename : msmsgs.exe
ProductName : Messenger
Created on : 16/05/2004 16.45.14
Last accessed : 20/07/2004 22.54.13
Last modified : 02/08/2001 5.14.34

#:27 [hpgs2wnf.exe]
FilePath : C:\Programmi\Hewlett-Packard\HP Share-to-Web\
ThreadCreationTime : 20-07-2004 22.54.33
BasePriority : Normal
FileSize : 76 KB
FileVersion : 2, 6, 0,
ProductVersion : 2, 6, 0,
Copyright : Copyright 2001
FileDescription : hpgs2wnf Module
InternalName : hpgs2wnf
OriginalFilename : hpgs2wnf.EXE
ProductName : hpgs2wnf Module
Created on : 17/04/2002 8.49.16
Last accessed : 20/07/2004 22.54.13
Last modified : 17/04/2002 8.49.16

#:28 [devldr32.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.55.43
BasePriority : Normal
FileSize : 23 KB
FileVersion : 1, 0, 0, 17
ProductVersion : 1, 0, 0, 17
Copyright : Copyright (C) Creative Technology Ltd. 1998-2001
CompanyName : Creative Technology Ltd.
FileDescription : DevLdr32
InternalName : DevLdr
OriginalFilename : DevLdr32.exe
ProductName : Creative Ring3 NT Inteface
Created on : 16/05/2004 17.40.12
Last accessed : 20/07/2004 22.54.13
Last modified : 30/08/2001 22.08.08

#:29 [wuauclt.exe]
FilePath : C:\WINDOWS\System32\
ThreadCreationTime : 20-07-2004 22.55.49
BasePriority : Normal
FileSize : 111 KB
FileVersion : 5.4.2600.0 (XPClient.010817-1148)
ProductVersion : 5.4.2600.0
CompanyName : Microsoft Corporation
FileDescription : Client dell'aggiornamento automatico di Windows Update
InternalName : wuauclt.exe
OriginalFilename : wuauclt.exe
ProductName : Sistema operativo Microsoft
Created on : 16/05/2004 16.44.51
Last accessed : 20/07/2004 22.55.49
Last modified : 31/08/2001 10.00.00

#:30 [iexplore.exe]
FilePath : C:\Programmi\Internet Explorer\
ThreadCreationTime : 20-07-2004 23.16.05
BasePriority : Normal
FileSize : 89 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Sistema operativo Microsoft
Created on : 16/05/2004 16.46.18
Last accessed : 20/07/2004 23.16.30
Last modified : 31/08/2001 10.00.00

#:31 [iexplore.exe]
FilePath : C:\Programmi\Internet Explorer\
ThreadCreationTime : 20-07-2004 23.16.29
BasePriority : Normal
FileSize : 89 KB
FileVersion : 6.00.2600.0000 (xpclient.010817-1148)
ProductVersion : 6.00.2600.0000
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Sistema operativo Microsoft
Created on : 16/05/2004 16.46.18
Last accessed : 20/07/2004 23.16.30
Last modified : 31/08/2001 10.00.00

#:32 [ad-aware.exe]
FilePath : C:\Programmi\Lavasoft\Ad-aware 6\
ThreadCreationTime : 20-07-2004 23.21.02
BasePriority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 20/07/2004 20.34.08
Last accessed : 20/07/2004 22.55.33
Last modified : 12/07/2003 19.00.20

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Alexa Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a}


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : CLSID\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E}


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer \Browser Helper Objects\{4A2AACF3-ADF6-11D5-98A9-00E018981B9E}


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstal l\New.net


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\New.net


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CURRENT_USER
Object : software\new.net


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Tldctl2.URLLink


New.Net Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : Tldctl2.URLLink.1


WhenU Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstal l\WeatherCast


WhenU Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CURRENT_USER
Object : Software\WhenU


WhenU Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\WhenUSave


WhenU Object recognized!
Type : RegKey
Data :
Rootkey : HKEY_CLASSES_ROOT
Object : WUSN.1


New.Net Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value : New.net Startup


WhenU Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_LOCAL_MACHINE
Object : Software\Microsoft\Windows\CurrentVersion\Run
Value : WhenUSave


WhenU Object recognized!
Type : RegValue
Data :
Rootkey : HKEY_CURRENT_USER
Object : SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value : WeatherCast


Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 15
Objects found so far: 15


Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 15


Deep scanning and examining files (C
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Tracking Cookie Object recognized!
Type : File
Data : antonio@04[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 21/05/2004 20.22.37
Last accessed : 20/07/2004 22.57.06
Last modified : 21/05/2004 20.22.37



Tracking Cookie Object recognized!
Type : File
Data : antonio@2o7[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 01/06/2004 11.39.28
Last accessed : 20/07/2004 22.57.06
Last modified : 20/07/2004 21.49.14



Tracking Cookie Object recognized!
Type : File
Data : antonio@a.as-eu.falkag[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 03/07/2004 7.57.28
Last accessed : 20/07/2004 22.57.06
Last modified : 03/07/2004 7.57.28

[keby]

Tracking Cookie Object recognized!
Type : File
Data : antonio@a.as-us.falkag[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 07/06/2004 11.49.22
Last accessed : 20/07/2004 22.57.06
Last modified : 07/06/2004 11.49.22



Tracking Cookie Object recognized!
Type : File
Data : antonio@ads.addynamix[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 13/06/2004 19.18.07
Last accessed : 20/07/2004 22.57.06
Last modified : 13/06/2004 19.18.07



Tracking Cookie Object recognized!
Type : File
Data : antonio@adserver.akqa[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 09/06/2004 12.41.18
Last accessed : 20/07/2004 22.57.06
Last modified : 09/06/2004 12.41.18



Tracking Cookie Object recognized!
Type : File
Data : antonio@adserver.interfree[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 04/06/2004 17.02.56
Last accessed : 20/07/2004 22.57.06
Last modified : 04/06/2004 17.02.56





Tracking Cookie Object recognized!
Type : File
Data : antonio@adtech[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/06/2004 18.34.25
Last accessed : 20/07/2004 22.57.07
Last modified : 16/06/2004 18.34.25



Tracking Cookie Object recognized!
Type : File
Data : antonio@advertising[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 06/06/2004 14.19.13
Last accessed : 20/07/2004 22.57.07
Last modified : 06/07/2004 20.25.55



Tracking Cookie Object recognized!
Type : File
Data : antonio@adviva[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/06/2004 18.34.03
Last accessed : 20/07/2004 22.57.07
Last modified : 16/06/2004 18.34.06



Tracking Cookie Object recognized!
Type : File
Data : antonio@as-us.falkag[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 07/06/2004 11.12.05
Last accessed : 20/07/2004 22.57.07
Last modified : 07/06/2004 11.12.05



Tracking Cookie Object recognized!
Type : File
Data : antonio@as1.falkag[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 20/07/2004 15.18.56
Last accessed : 20/07/2004 22.57.07
Last modified : 20/07/2004 15.19.01



Tracking Cookie Object recognized!
Type : File
Data : antonio@atdmt[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 18/05/2004 22.44.16
Last accessed : 20/07/2004 22.57.07
Last modified : 18/05/2004 22.44.16



Tracking Cookie Object recognized!
Type : File
Data : antonio@bfast[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 18/05/2004 23.29.10
Last accessed : 20/07/2004 22.57.07
Last modified : 18/05/2004 23.29.10



Tracking Cookie Object recognized!
Type : File
Data : antonio@bluestreak[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 15/06/2004 23.20.14
Last accessed : 20/07/2004 22.57.07
Last modified : 28/06/2004 19.16.17



Tracking Cookie Object recognized!
Type : File
Data : antonio@bravenet[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 25/05/2004 17.19.26
Last accessed : 20/07/2004 22.57.07
Last modified : 29/06/2004 19.41.16



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/06/2004 19.02.36
Last accessed : 20/07/2004 22.57.07
Last modified : 16/06/2004 19.02.36



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 01/07/2004 7.41.48
Last accessed : 20/07/2004 22.57.07
Last modified : 01/07/2004 7.41.59



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[3].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 06/07/2004 10.04.46
Last accessed : 20/07/2004 22.57.07
Last modified : 06/07/2004 10.04.46



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[4].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/06/2004 18.32.41
Last accessed : 20/07/2004 22.57.07
Last modified : 16/06/2004 18.32.41



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[5].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 28/05/2004 12.29.24
Last accessed : 20/07/2004 22.57.07
Last modified : 28/05/2004 12.29.24



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[6].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 02/06/2004 10.24.52
Last accessed : 20/07/2004 22.57.07
Last modified : 02/06/2004 10.24.52



Tracking Cookie Object recognized!
Type : File
Data : antonio@cgi-bin[7].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 05/06/2004 15.41.12
Last accessed : 20/07/2004 22.57.07
Last modified : 05/06/2004 15.41.12



Tracking Cookie Object recognized!
Type : File
Data : antonio@doubleclick[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/05/2004 17.24.06
Last accessed : 20/07/2004 22.57.07
Last modified : 16/05/2004 17.26.08



Tracking Cookie Object recognized!
Type : File
Data : antonio@ehg-autodesk.hitbox[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\
FileSize : 1 KB
Created on : 18/06/2004 8.52.44
Last accessed : 20/07/2004 22.57.07
Last modified : 18/06/2004 8.52.46



Tracking Cookie Object recognized!
Type : File
Data : antonio@ehg-dig.hitbox[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\
FileSize : 4 KB
Created on : 02/06/2004 10.54.07
Last accessed : 20/07/2004 22.57.07
Last modified : 02/06/2004 10.54.08



Tracking Cookie Object recognized!
Type : File
Data : antonio@ehg-sonyeu.hitbox[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\
FileSize : 1 KB
Created on : 17/05/2004 23.13.38
Last accessed : 20/07/2004 22.57.07
Last modified : 18/06/2004 10.55.39



Tracking Cookie Object recognized!
Type : File
Data : antonio@ehg-sonyny.hitbox[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 17/05/2004 22.55.40
Last accessed : 20/07/2004 22.57.07
Last modified : 17/05/2004 22.55.40



Tracking Cookie Object recognized!
Type : File
Data : antonio@excite[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 22/06/2004 22.22.41
Last accessed : 20/07/2004 22.57.07
Last modified : 22/06/2004 22.25.08



Tracking Cookie Object recognized!
Type : File
Data : antonio@fastclick[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 05/07/2004 6.26.26
Last accessed : 20/07/2004 22.57.07
Last modified : 05/07/2004 6.26.29



Tracking Cookie Object recognized!
Type : File
Data : antonio@fortunecity[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 06/07/2004 14.23.30
Last accessed : 20/07/2004 22.57.07
Last modified : 06/07/2004 14.23.30



Tracking Cookie Object recognized!
Type : File
Data : antonio@fortunecity[3].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 03/07/2004 7.52.26
Last accessed : 20/07/2004 22.57.07
Last modified : 03/07/2004 7.52.29


Tracking Cookie Object recognized!
Type : File
Data : antonio@gator[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 09/06/2004 12.39.34
Last accessed : 20/07/2004 22.57.08
Last modified : 03/07/2004 7.52.29



Tracking Cookie Object recognized!
Type : File
Data : antonio@hc2.humanclick[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 16/06/2004 18.32.39
Last accessed : 20/07/2004 22.57.08
Last modified : 16/06/2004 18.32.45



Tracking Cookie Object recognized!
Type : File
Data : antonio@hitbox[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 02/06/2004 10.23.36
Last accessed : 20/07/2004 22.57.08
Last modified : 18/06/2004 10.55.39



Tracking Cookie Object recognized!
Type : File
Data : antonio@maxserving[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 06/07/2004 21.40.26
Last accessed : 20/07/2004 22.57.08
Last modified : 06/07/2004 21.40.26



Tracking Cookie Object recognized!
Type : File
Data : antonio@mediaplex[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 20/07/2004 21.46.36
Last accessed : 20/07/2004 22.57.08
Last modified : 20/07/2004 21.46.36



Tracking Cookie Object recognized!
Type : File
Data : antonio@overture[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 07/06/2004 22.58.33
Last accessed : 20/07/2004 22.57.08
Last modified : 07/06/2004 22.58.33



Tracking Cookie Object recognized!
Type : File
Data : antonio@peel[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 11/06/2004 13.58.45
Last accessed : 20/07/2004 22.57.08
Last modified : 11/06/2004 13.58.45



Tracking Cookie Object recognized!
Type : File
Data : antonio@qksrv[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 18/05/2004 23.29.10
Last accessed : 20/07/2004 22.57.08
Last modified : 18/05/2004 23.29.10

[keby]

Tracking Cookie Object recognized!
Type : File
Data : antonio@questionmarket[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 01/07/2004 7.23.35
Last accessed : 20/07/2004 22.57.08
Last modified : 01/07/2004 7.41.49



Tracking Cookie Object recognized!
Type : File
Data : antonio@realmedia[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 15/06/2004 23.20.13
Last accessed : 20/07/2004 22.57.08
Last modified : 15/06/2004 23.20.14





Tracking Cookie Object recognized!
Type : File
Data : antonio@realmedia[3].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 29/06/2004 21.01.23
Last accessed : 20/07/2004 22.57.08
Last modified : 29/06/2004 21.01.23



Tracking Cookie Object recognized!
Type : File
Data : antonio@servedby.advertising[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\
FileSize : 2 KB
Created on : 06/07/2004 21.59.42
Last accessed : 20/07/2004 22.57.09
Last modified : 19/07/2004 12.05.34



Tracking Cookie Object recognized!
Type : File
Data : antonio@server.iad.liveperson[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 10/06/2004 16.23.21
Last accessed : 20/07/2004 22.57.09
Last modified : 10/06/2004 16.23.21



Tracking Cookie Object recognized!
Type : File
Data : antonio@targetnet[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 09/06/2004 12.41.08
Last accessed : 20/07/2004 22.57.09
Last modified : 09/06/2004 12.41.19



Tracking Cookie Object recognized!
Type : File
Data : antonio@tmpad[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 09/06/2004 12.40.40
Last accessed : 20/07/2004 22.57.09
Last modified : 09/06/2004 12.40.40



Tracking Cookie Object recognized!
Type : File
Data : antonio@tradedoubler[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 20/07/2004 19.24.34
Last accessed : 20/07/2004 22.57.09
Last modified : 20/07/2004 19.24.34



Tracking Cookie Object recognized!
Type : File
Data : antonio@trafficmp[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 24/06/2004 18.54.07
Last accessed : 20/07/2004 22.57.09
Last modified : 29/06/2004 21.00.45



Tracking Cookie Object recognized!
Type : File
Data : antonio@tribalfusion[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 29/06/2004 21.00.29
Last accessed : 20/07/2004 22.57.09
Last modified : 29/06/2004 21.00.29



Tracking Cookie Object recognized!
Type : File
Data : antonio@valueclick[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 14/06/2004 19.53.19
Last accessed : 20/07/2004 22.57.09
Last modified : 14/06/2004 19.57.01



Tracking Cookie Object recognized!
Type : File
Data : antonio@z1.adserver[1].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 25/06/2004 11.06.37
Last accessed : 20/07/2004 22.57.11
Last modified : 25/06/2004 11.06.38



Tracking Cookie Object recognized!
Type : File
Data : antonio@zedo[2].txt
Object : C:\Documents and Settings\Antonio\Cookies\

Created on : 11/06/2004 13.58.44
Last accessed : 20/07/2004 22.57.11
Last modified : 11/06/2004 13.58.44



WhenU Object recognized!
Type : File
Data : weathercast.lnk
Object : C:\Documents and Settings\Antonio\Menu Avvio\Programmi\WeatherCast\
FileSize : 1 KB
Created on : 20/07/2004 15.32.31
Last accessed : 20/07/2004 22.54.33
Last modified : 20/07/2004 15.32.46



WhenU Object recognized!
Type : Folder
Object : C:\Documents and Settings\Antonio\Menu Avvio\Programmi\WeatherCast



Tracking Cookie Object recognized!
Type : File
Data : elvio@as1.falkag[1].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 08/06/2004 15.02.02
Last accessed : 20/07/2004 22.59.42
Last modified : 08/06/2004 15.02.02



Tracking Cookie Object recognized!
Type : File
Data : elvio@bravenet[1].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 23/06/2004 17.38.48
Last accessed : 20/07/2004 22.59.42
Last modified : 28/06/2004 16.39.51



Tracking Cookie Object recognized!
Type : File
Data : elvio@cgi-bin[1].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 01/06/2004 18.28.15
Last accessed : 20/07/2004 22.59.42
Last modified : 01/06/2004 18.28.15



Tracking Cookie Object recognized!
Type : File
Data : elvio@mediaplex[1].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 16/07/2004 8.48.12
Last accessed : 20/07/2004 22.59.42
Last modified : 16/07/2004 8.48.12



Tracking Cookie Object recognized!
Type : File
Data : elvio@overture[2].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 31/05/2004 12.43.38
Last accessed : 20/07/2004 22.59.42
Last modified : 31/05/2004 12.43.38



Tracking Cookie Object recognized!
Type : File
Data : elvio@tradedoubler[2].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 28/06/2004 16.41.58
Last accessed : 20/07/2004 22.59.43
Last modified : 28/06/2004 16.44.22



Tracking Cookie Object recognized!
Type : File
Data : elvio@webads[2].txt
Object : C:\Documents and Settings\Elvio\Cookies\

Created on : 31/05/2004 10.45.06
Last accessed : 20/07/2004 22.59.43
Last modified : 31/05/2004 10.45.06



New.Net Object recognized!
Type : Folder
Object : C:\Programmi\NewDotNet



WhenU Object recognized!
Type : File
Data : saveuninst.exe
Object : C:\Programmi\Save\
FileSize : 23 KB
FileVersion : 2, 6, 0, 1
ProductVersion : 2, 6, 0, 1
Copyright : Copyright 2001
CompanyName : WhenU.com, Inc.
FileDescription : Save! Uninstall
InternalName : SaveUninst
OriginalFilename : SaveUninst.exe
ProductName : Save! Uninstall
Created on : 20/07/2004 17.38.32
Last accessed : 20/07/2004 23.01.17
Last modified : 12/04/2004 8.49.36



WhenU Object recognized!
Type : File
Data : weather.exe
Object : C:\Programmi\WeatherCast\
FileSize : 129 KB
FileVersion : 1, 5, 1, 1
ProductVersion : 1, 5, 1, 1
Copyright : Copyright 2002
FileDescription : Weather
InternalName : Weather
OriginalFilename : Weather.exe
ProductName : Weather
Created on : 20/07/2004 15.32.45
Last accessed : 20/07/2004 22.54.32
Last modified : 09/10/2003 10.13.06



WhenU Object recognized!
Type : File
Data : weatherupdate.exe
Object : C:\Programmi\WeatherCast\
FileSize : 121 KB
FileVersion : 1, 5, 1, 1
ProductVersion : 1, 5, 1, 1
Copyright : Copyright 2000
CompanyName : WhenU.com, Inc.
FileDescription : WeatherCast Setup
InternalName : WeatherInst
OriginalFilename : WeatherInst.exe
ProductName : WeatherCast Setup
Created on : 20/07/2004 15.32.39
Last accessed : 20/07/2004 23.01.24
Last modified : 20/07/2004 15.32.44



WhenU Object recognized!
Type : Folder
Object : C:\Programmi\WeatherCast



Disk scan result for C:\
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 82


Scanning Hosts file(C:\WINDOWS\System32\drivers\etc\hosts)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Hosts file scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
1 entries scanned.
New objects :0
Objects found so far: 82




Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

New.Net Object recognized!
Type : File
Data : newdotnet6_30.dll
Object : c:\programmi\newdotnet\
FileSize : 224 KB
FileVersion : 6, 0, 0, 30
ProductVersion : 6, 0, 0, 30
Copyright : Copyright 2000-2002 New.net, Inc.
CompanyName : New.net, Inc.
FileDescription : New.net Domains
InternalName : tldctl2
OriginalFilename : tldctl2.dll
ProductName : New.net Domains
Created on : 20/07/2004 15.33.31
Last accessed : 20/07/2004 23.21.40
Last modified : 20/07/2004 15.33.29



New.Net Object recognized!
Type : File
Data : readme.html
Object : c:\programmi\newdotnet\
FileSize : 6 KB
Created on : 20/07/2004 15.33.31
Last accessed : 20/07/2004 23.05.19
Last modified : 20/07/2004 15.33.31



New.Net Object recognized!
Type : File
Data : uninstall6_30.exe
Object : c:\programmi\newdotnet\
FileSize : 49 KB
Created on : 20/07/2004 15.33.31
Last accessed : 20/07/2004 23.05.19
Last modified : 20/07/2004 15.33.31

[keby]

WhenU Object recognized!
Type : Folder
Object : c:\programmi\Save


WhenU Object recognized!
Type : File
Data : readme.txt
Object : c:\programmi\save\
FileSize : 3 KB
Created on : 20/07/2004 17.38.32
Last accessed : 20/07/2004 23.05.18
Last modified : 05/09/2003 9.24.26



WhenU Object recognized!
Type : File
Data : save.db
Object : c:\programmi\save\
FileSize : 6880 KB
Created on : 20/07/2004 17.38.33
Last accessed : 20/07/2004 22.55.06
Last modified : 20/07/2004 22.55.06



WhenU Object recognized!
Type : File
Data : save.exe
Object : c:\programmi\save\
FileSize : 308 KB
FileVersion : 2, 6, 0, 1
ProductVersion : 2, 6, 0, 1
Copyright : Copyright 2001
CompanyName : WhenU.com, Inc.
FileDescription : Save!
InternalName : WhenUSave
OriginalFilename : Save.exe
ProductName : Save!
Created on : 20/07/2004 17.38.31
Last accessed : 20/07/2004 22.54.31
Last modified : 12/04/2004 11.48.18



WhenU Object recognized!
Type : File
Data : save.htm
Object : c:\programmi\save\
FileSize : 83 KB
Created on : 20/07/2004 17.38.32
Last accessed : 20/07/2004 22.54.58
Last modified : 20/07/2004 17.38.39



WhenU Object recognized!
Type : File
Data : uninst.exe
Object : c:\programmi\weathercast\
FileSize : 18 KB
FileVersion : 1, 5, 1, 1
ProductVersion : 1, 5, 1, 1
Copyright : Copyright 2001
CompanyName : WhenU.com, Inc.
FileDescription : WeatherCast Uninstall
InternalName : Uninst
OriginalFilename : Uninst.exe
ProductName : WeatherCast Uninstall
Created on : 20/07/2004 15.32.46
Last accessed : 20/07/2004 23.01.24
Last modified : 09/10/2003 10.12.42



Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 9
Objects found so far: 91


1.30.14 Scan complete

Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00.09.04.332
Objects scanned :125012
Objects identified :91
Objects ignored :0
New objects :91

[amvinfe]

I valori che AdAware ti ha trovato sono da eliminare, riavvia in modalità provvisoria, assicurati che AdAware sia settato in questo modo

Come settare AdAware:
dalla finestra principale del programma portarsi in alto e cliccare sull'icona Configurazione (icona ingranaggio), ci saranno 4 voci mettere la spunta selle ultime tre (devono diventare verdi)
A) salva log file
B) in quarantena prima di rimuovere
C) Modo sicuro
Ora cliccare su Personalizza (sempre dalla stessa finestra)
Mettere la spunta su "Usa la mia configurazione di default" e cliccare al suo fianco su Personalizza
Mettere la spunata su
"Controlla all'interno delle cartelle"
Nella parte "Memoria & Registro" mettere la spunta a tutte e 5 le voci (devono sempre diventare verdi)
Cliccare su Continua (in basso)

finita la scansione metti la spunta al fianco dei valori che ti ha trovato e mettili in quarantena.
Riavvia, se usando il pc noti che non ci sono problemi e che tutto funziona correttamente, puoi anche eliminare dalla quarantena i files.

Ecco da cosa è infettato il pc
http://sarc.com/avcenter/venc/data/adware.savenow.html
(nella scheda Sarc, viene descritta la procedura di rimozione servendosi del file SaveUninst.exe, non so quanto effettivamente utile possa essere, in quanto leggevo in altri forums che la procedura non sempre va a buon fine)
e poi da questo
http://sarc.com/avcenter/venc/data/adware.ndotnet.html