Valutazione 4.87/ 5 (100.00%) 5838 voti

Condividi:        

pagine che si aprono da sole

Come rimuovere virus e spyware? Le carte di credito sono davvero sicure in rete? È possibile navigare anonimi? Con quali programmi tutelare la propria privacy? Come proteggere i file importanti? Se volete una risposta a queste e altre domande questo è il luogo giusto!

Moderatori: kadosh, Luke57

pagine che si aprono da sole

Postdi demodemo » 26/10/14 08:32

Ciao, ho un problema si aprono ripetutamente pagine web da sole, spesso sono reidndirizzato su altri siti. Allego log combofix
ComboFix 14-09-12.01 - Utente 26/10/2014 8:08.2.4 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1252.39.1040.18.3798.2310 [GMT 1:00]
Eseguito da: c:\users\Utente\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Enabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Enabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Creato nuovo punto di ripristino
.
.
((((((((((((((((((((((((((((((((((((( Altre eliminazioni )))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\background.html
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\content.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\lsdb.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\manifest.json
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfmkncejaemmcobmaabfigljmnkeecdm\230\QsXNcDdI.js
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cfmkncejaemmcobmaabfigljmnkeecdm_0.localstorage
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_impaepofmnammebeenafgmllpnjaiime_0.localstorage
c:\users\Utente\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\bootstrap.js
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\chrome.manifest
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\content\bg.js
c:\users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\extensions\staged\bk@YMn.edu\install.rdf
.
.
((((((((((((((((((((((((( Files Creati Da 2014-09-26 al 2014-10-26 )))))))))))))))))))))))))))))))))))
.
.
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\HomeGroupUser$\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Guest\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-10-26 07:17 . 2014-10-26 07:17 -------- d-----w- c:\users\Administrator\AppData\Local\temp
2014-10-26 06:57 . 2014-10-26 06:57 -------- d-----w- c:\program files\CCleaner
2014-10-26 06:50 . 2014-10-26 06:50 -------- d-----w- c:\windows\ERUNT
2014-10-26 06:29 . 2014-10-26 06:29 75888 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8265EEE9-2603-4B3B-B17D-8F4E83D1148C}\offreg.dll
2014-10-26 06:23 . 2014-10-14 11:59 11627712 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8265EEE9-2603-4B3B-B17D-8F4E83D1148C}\mpengine.dll
2014-10-25 14:25 . 2014-09-10 14:30 1188440 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{8FACAF77-42C9-430B-AD79-5BBABE97FCC1}\gapaengine.dll
2014-10-25 14:00 . 2014-10-25 14:00 -------- d-----w- c:\program files (x86)\Microsoft Security Client
2014-10-25 14:00 . 2014-10-25 14:00 -------- d-----w- c:\program files\Microsoft Security Client
2014-10-25 14:00 . 2010-04-09 11:06 374664 ----a-w- c:\windows\system32\drivers\netio.sys
2014-10-25 13:53 . 2014-10-25 13:53 -------- d-----w- c:\program files (x86)\Trend Micro
2014-10-24 19:45 . 2014-10-24 19:45 -------- d-----w- c:\program files (x86)\Common Files\Java
2014-10-24 19:18 . 2014-10-24 19:18 -------- d-----w- c:\program files (x86)\VS Revo Group
2014-10-24 14:13 . 2014-10-14 19:59 11627712 ------w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{A6CA3D0D-7FBA-4572-9107-039B4EDF1B8F}\mpengine.dll
2014-10-19 07:10 . 2014-10-19 07:10 -------- d-----w- c:\windows\system32\SPReview
2014-10-18 15:50 . 2014-10-24 19:55 -------- d-----w- c:\users\Utente\AppData\Roaming\.minecraft
2014-10-16 16:46 . 2014-09-15 00:44 3195392 ----a-w- c:\windows\system32\win32k.sys
2014-10-14 15:48 . 2014-10-24 19:44 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-10-14 15:48 . 2014-10-24 19:45 -------- d-----w- c:\program files (x86)\Java
2014-10-14 15:47 . 2014-10-14 15:47 0 ----a-w- c:\windows\SysWow64\RENADDD.tmp
2014-10-14 15:47 . 2014-10-14 15:47 0 ----a-w- c:\windows\SysWow64\RENADDC.tmp
2014-10-14 15:46 . 2014-10-24 19:45 -------- d-----w- c:\programdata\Oracle
2014-10-13 16:13 . 2014-10-13 16:13 -------- d-----w- c:\users\Default\AppData\Roaming\AVAST Software
2014-10-05 15:50 . 2014-10-26 06:57 -------- d-----w- c:\users\Utente\AppData\Local\CrashDumps
2014-10-05 15:39 . 2014-10-05 15:39 -------- d-----w- c:\users\Utente\AppData\Local\TechSmith
2014-10-05 15:38 . 2014-10-05 15:38 -------- d-----w- c:\users\Utente\AppData\Roaming\TechSmith
2014-10-05 15:26 . 2014-10-05 15:26 -------- d-----w- c:\programdata\regid.1995-08.com.techsmith
2014-10-05 15:25 . 2014-10-05 15:25 -------- d-----w- c:\program files (x86)\Common Files\TechSmith Shared
2014-10-05 15:25 . 2014-10-05 15:38 -------- d-----w- c:\programdata\TechSmith
2014-10-05 15:25 . 2014-10-05 15:25 -------- d-----w- c:\program files (x86)\TechSmith
2014-10-04 15:53 . 2006-09-28 14:05 3977496 ----a-w- c:\windows\system32\d3dx9_31.dll
2014-10-01 20:25 . 2014-10-01 20:41 -------- d-----w- C:\9268dd21d69d2551cc56f9
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-10-05 12:24 . 2014-08-29 05:42 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2014-10-05 12:24 . 2014-09-02 15:43 375632 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2014-10-04 10:55 . 2014-08-29 05:41 375632 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2014-09-22 06:42 . 2014-03-07 09:29 278152 ------w- c:\windows\system32\MpSigStub.exe
2014-09-02 15:44 . 2014-09-02 15:44 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2014-08-29 05:26 . 2012-07-17 12:37 23256 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
.
.
((((((((((((((((((((((((((((((((((((( Punti Reg Caricati ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Nota* i valori vuoti & legittimi/default non sono visualizzati.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-16 17:02 223432 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner64.exe" [2014-10-23 6501656]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R2 70e6ca8c;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
.
.
--- Altri Servizi/Drivers In Memoria ---
.
*NewlyCreated* - NISDRV
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-09-02 09:29 1096520 ----a-w- c:\program files (x86)\Google\Chrome\Application\37.0.2062.102\Installer\chrmstp.exe
.
Contenuto della cartella 'Scheduled Tasks'
.
2014-10-26 c:\windows\Tasks\0e8af300-df29-47e7-a036-fad02c1e9387.job
- c:\program files (x86)\CineDPV2\0e8af300-df29-47e7-a036-fad02c1e9387.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-1.job
- c:\program files (x86)\CineDPV2\CineDPV2-codedownloader.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-11.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-11.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-2.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-2.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-3.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-3.exe [2014-09-07 11:42]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-5.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-5.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-5_user.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-5.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-6.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-6.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-7.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-7.exe [2014-09-07 11:43]
.
2014-10-26 c:\windows\Tasks\2d38307b-5b60-427a-8742-2cbc4783657e-9.job
- c:\program files (x86)\CineDPV2\2d38307b-5b60-427a-8742-2cbc4783657e-9.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\4963af32-05a2-4ab9-8d81-31c73413ae54.job
- c:\program files (x86)\CineDPV2\4963af32-05a2-4ab9-8d81-31c73413ae54.exe [2014-09-07 11:44]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-1.job
- c:\program files (x86)\TheGoPhoto.it V10\TheGoPhoto.it V10-codedownloader.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-11.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-11.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-3.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-3.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-4.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-4.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-5.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-5.exe [2014-09-02 18:40]
.
2014-10-26 c:\windows\Tasks\60f156db-223f-406c-a983-811b9af04682-7.job
- c:\program files (x86)\TheGoPhoto.it V10\60f156db-223f-406c-a983-811b9af04682-7.exe [2014-09-02 18:39]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-1.job
- c:\program files (x86)\TheTorntv V10\TheTorntv V10-codedownloader.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-11.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-11.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-2.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-2.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-3.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-3.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-4.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-4.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-5.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-5.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-5_user.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-5.exe [2014-09-04 07:49]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-6.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-6.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\65587f11-5bdf-47dd-be54-776421a7740f-7.job
- c:\program files (x86)\TheTorntv V10\65587f11-5bdf-47dd-be54-776421a7740f-7.exe [2014-09-04 07:48]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-11.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-11.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-2.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-2.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-3.job
- c:\program files (x86)\TheTorntv V10\974970fd-4f41-4161-b6fb-6aa6d78fa6e3-3.exe [2014-09-02 20:39]
.
2014-10-26 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-07 11:10]
.
2014-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-07 11:07]
.
2014-10-26 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2014-03-07 11:07]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2014-07-16 17:02 262344 ----a-w- c:\users\Utente\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2013-05-28 172016]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2013-05-28 399856]
"Persistence"="c:\windows\system32\igfxpers.exe" [2013-05-28 442352]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 1331288]
.
------- Scansione supplementare -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = https://www.google.it/
uDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mDefault_Search_URL = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mDefault_Page_URL = hxxp://www.google.com
mStart Page = hxxp://www.google.com
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mSearch Bar = hxxp://www.google.com
uInternet Settings,ProxyOverride = <-loopback>
uSearchAssistant = hxxp://www.google.com
mCustomizeSearch = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
mSearchAssistant = hxxp://www.sweet-page.com/web/?type=ds& ... D901388&q={searchTerms}
IE: E&sporta in Microsoft Excel - c:\progra~2\MICROS~2\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.254.1
.
- - - - CHIAVI ORFANE RIMOSSE - - - -
.
Toolbar-10 - (no file)
ShellIconOverlayIdentifiers-{472083B0-C522-11CF-8763-00608CC02F24} - (no file)
.
.
.
--------------------- CHIAVI DI REGISTRO BLOCCATE ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_117_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_117.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Ora fine scansione: 2014-10-26 08:26:35
ComboFix-quarantined-files.txt 2014-10-26 07:26
ComboFix2.txt 2014-10-25 13:38
.
Pre-Run: 444.590.034.944 byte disponibili
Post-Run: 444.493.500.416 byte disponibili
.
- - End Of File - - AB022C2E83836912A293D8FB4C95F994
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari

Sponsor
 

Re: pagine che si aprono da sole

Postdi davide72 » 26/10/14 14:09

salva sul desktop http://www.bleepingcomputer.com/downloa ... er/dl/125/
chiudi i browser e disattiva l' antivirus , esegui adwclear e clicca su scansione e attendi.... quindi clicca su pulizia , e conferma OK i seguenti messaggi e il riavvio del pc
Avatar utente
davide72
Utente Senior
 
Post: 5588
Iscritto il: 10/06/14 22:01

Re: pagine che si aprono da sole

Postdi demodemo » 26/10/14 19:42

Prima di tutto grazie davide, ho fatto come mi hai suggerito qualcosa è cambiata ma rimane che apre pubblicità sulle pagine web allego log
# AdwCleaner v4.001 - Rapporto creato 26/10/2014 in 19:34:47
# DB v2014-10-26.2
# Aggiornato 20/10/2014 di Xplode
# Sistema operativo : Windows 7 Professional (64 bits)
# Nome utente : Utente - UTENTE-PC
# In esecuzione da : C:\Users\Utente\Desktop\AdwCleaner (1).exe
# Opzione : Pulisci

***** [ Servizi ] *****

Servizio Eliminato : {29b136c9-938d-4d3d-8df8-d649d9b74d02}Gw64

***** [ File / Cartelle ] *****

Cartella Eliminato : C:\Users\Administrator\AppData\Local\Chromatic Browser
Cartella Eliminato : C:\Users\Guest\AppData\Local\Chromatic Browser
Cartella Eliminato : C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\eCyber
Cartella Eliminato : C:\Users\Utente\AppData\Local\Gameo
Cartella Eliminato : C:\Users\Utente\AppData\Local\Temp\iSafeRightKeyScan
Cartella Eliminato : C:\Program Files (x86)\Movies App
Cartella Eliminato : C:\ProgramData\NCH Software
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\NCH Software
Cartella Eliminato : C:\Program Files (x86)\PennyBee
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\Store
Cartella Eliminato : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Systweak
Cartella Eliminato : C:\Users\Administrator\AppData\Local\torch
Cartella Eliminato : C:\Users\Guest\AppData\Local\torch
Cartella Eliminato : C:\Users\HomeGroupUser$\AppData\Local\torch
[!] Cartella Eliminato : C:\Program Files (x86)\Elex-tech
[!] Cartella Eliminato : C:\Users\Utente\AppData\Roaming\Elex-tech
Cartella Eliminato : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC
Cartella Eliminato : C:\Program Files (x86)\Deal Keeper
Cartella Eliminato : C:\Users\Utente\AppData\Local\CrashRpt
Cartella Eliminato : C:\ProgramData\safEwEb
Cartella Eliminato : C:\Program Files (x86)\safEwEb
Cartella Eliminato : C:\Program Files (x86)\TheTorntv V10
Cartella Eliminato : C:\Users\Utente\AppData\LocalLow\TheTorntv V10
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\Extensions\staged\{ecaa9181-d92a-47b9-8e14-bef9680f204b}
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\Extensions\quick_start@gmail.com
Cartella Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\Extensions\a338c5448f724f94af2f11@cc4cdd6788a64e7ca7d83cb2cd.com
File Eliminato : C:\Users\Utente\AppData\Roaming\Bubble Dock.boostrap.log
File Eliminato : C:\Windows\System32\drivers\iSafeKrnlBoot.sys
File Eliminato : C:\Windows\System32\log\iSafeKrnlCall.log
File Eliminato : C:\Users\Utente\AppData\Roaming\WindApp.boostrap.log
File Eliminato : C:\Users\Utente\AppData\Roaming\Bubble Dock.installation.log
File Eliminato : C:\Users\Utente\AppData\Roaming\WindApp.installation.log
File Eliminato : C:\Users\Utente\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\YAC.lnk
File Eliminato : C:\Windows\System32\\drivers\{29b136c9-938d-4d3d-8df8-d649d9b74d02}Gw64.sys
File Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\searchplugins\Web Search.xml
File Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\searchplugins\WSE Rocket.xml
File Eliminato : C:\Users\Utente\AppData\Roaming\Mozilla\Firefox\Profiles\vkrhhbny.default\user.js
File Eliminato : C:\Users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Eliminato : C:\Users\Utente\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal

***** [ Compiti ] *****

Compito Eliminati : FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl
Compito Eliminati : fsupdate
Compito Eliminati : RegClean Pro
Compito Eliminati : WindApp Update
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-1
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-2
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-5
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-5_user
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-6
Compito Eliminati : 65587f11-5bdf-47dd-be54-776421a7740f-7
Compito Eliminati : 974970fd-4f41-4161-b6fb-6aa6d78fa6e3-2

***** [ Collegamenti ] *****


***** [ Registro ] *****

Valore Eliminati : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [quick_start@gmail.com]
Chiave Eliminati : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\ibnjmihbbanannlbobkbmnmckjnmdnom
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Chiave Eliminati : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\Genesis_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MYSEAR~1_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\MySearchDial_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\updateDealKeeper_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\vopackage_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\vopackage_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancerService_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\WajamInternetEnhancerService_RASMANCS
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v18_RASAPI32
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Tracing\wpm_v18_RASMANCS
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginService
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Wpm
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\CLSID\{5411D116-5A37-47D4-B154-5F7FCD9062F0}
Chiave Eliminati : HKCU\Software\Deal Keeper
Chiave Eliminati : HKCU\Software\GlobalUpdate
Chiave Eliminati : HKCU\Software\RocketUpdater
Chiave Eliminati : HKCU\Software\Store
Chiave Eliminati : HKCU\Software\TheTorntv V10
Chiave Eliminati : HKCU\Software\WSE Rocket
Chiave Eliminati : HKCU\Software\TornTv Downloader
Chiave Eliminati : HKCU\Software\AppDataLow\Software\TheTorntv V10
Chiave Eliminati : HKLM\SOFTWARE\Deal Keeper
Chiave Eliminati : HKLM\SOFTWARE\GlobalUpdate
Chiave Eliminati : HKLM\SOFTWARE\TheTorntv V10
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\TheTorntv V10
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3152E1F19977892449DC968802CE8964
Chiave Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe

***** [ Browser ] *****

-\\ Internet Explorer v9.0.8112.16421

Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar]
Impostazioni Ripristinato : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [CustomizeSearch]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [SearchAssistant]
Impostazioni Ripristinato : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)]

-\\ Mozilla Firefox v


-\\ Google Chrome v38.0.2125.104


*************************

AdwCleaner[R0].txt - [12434 octets] - [26/10/2014 19:33:02]
AdwCleaner[S0].txt - [10355 octets] - [26/10/2014 19:34:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10416 octets] ##########
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari

Re: pagine che si aprono da sole

Postdi davide72 » 26/10/14 20:42

controlla nei programmi installati e disinstalla cine dpv2 e torn tv, poi installa adblock plus per chrome e firefox cosi ti proteggi dalle pubblicità
Avatar utente
davide72
Utente Senior
 
Post: 5588
Iscritto il: 10/06/14 22:01

Re: pagine che si aprono da sole

Postdi demodemo » 27/10/14 13:53

davide cine dpv2 l' ho disinstallato ieri in modalita provvisoria e adesso non compare tra i programmi, torn tv non c'è tra i programmi come posso fare? grazie
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari

Re: pagine che si aprono da sole

Postdi davide72 » 27/10/14 15:10

apri cclenaer >strumenti > clicca su "salva come testo" in basso a destra e posta il log install.txt
Avatar utente
davide72
Utente Senior
 
Post: 5588
Iscritto il: 10/06/14 22:01

Re: pagine che si aprono da sole

Postdi demodemo » 27/10/14 18:05

ciao ecco il log install txt:
Adobe Flash Player 11 ActiveX Adobe Systems Incorporated 07/03/2014 16,4MB 11.9.900.117
Adobe Flash Player 11 Plugin Adobe Systems Incorporated 07/03/2014 16,9MB 11.9.900.117
Adobe Reader XI - Italiano Adobe Systems Incorporated 07/03/2014 123MB 11.0.00
Apple Software Update Apple Inc. 07/03/2014 2,38MB 2.1.3.127
Camtasia Studio 8 TechSmith Corporation 05/10/2014 220MB 8.1.0.1281
CCleaner Piriform 26/10/2014 4.19
Epson Event Manager Seiko Epson Corporation 30/03/2014 42,4MB 3.01.0005
Epson FAX Utility SEIKO EPSON CORPORATION 06/04/2014 1.31.00
EPSON WF-2530 Series Printer Uninstall SEIKO EPSON Corporation 03/08/2014
EpsonNet Config V4 SEIKO EPSON CORPORATION 01/04/2014 18,8MB 4.1.0
EpsonNet Print SEIKO EPSON CORPORATION 30/03/2014 2.6.0
Google Chrome Google Inc. 26/10/2014 38.0.2125.104
HiJackThis Trend Micro 27/10/2014 369KB 1.0.0
Java 7 Update 40 Oracle 07/03/2014 120MB 7.0.400
Java 8 Update 25 Oracle Corporation 24/10/2014 73,3MB 8.0.250
Malwarebytes Anti-Malware versione 2.0.3.1025 Malwarebytes Corporation 27/10/2014 56,6MB 2.0.3.1025
Microsoft .NET Framework 4 Client Profile Microsoft Corporation 07/03/2014 38,8MB 4.0.30319
Microsoft Office Outlook Connector Microsoft Corporation 02/04/2014 3,35MB 14.0.5118.5000
Microsoft OneDrive Microsoft Corporation 16/07/2014 26,7MB 17.0.4035.0328
Microsoft Security Essentials Microsoft Corporation 25/10/2014 4.6.305.0
Microsoft Silverlight Microsoft Corporation 22/08/2014 57,7MB 5.1.30514.0
Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Corporation 05/04/2014 1,69MB 3.1.0000
Microsoft Visual C++ 2005 Redistributable Microsoft Corporation 01/04/2014 298KB 8.0.59193
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Corporation 20/07/2014 786KB 9.0.30729.6161
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 Microsoft Corporation 18/04/2014 13,8MB 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Corporation 18/04/2014 11,1MB 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 Microsoft Corporation 25/04/2014 20,5MB 11.0.61030.0
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Corporation 25/04/2014 17,3MB 11.0.61030.0
MSXML 4.0 SP2 (KB954430) Microsoft Corporation 13/04/2014 1,27MB 4.20.9870.0
MSXML 4.0 SP2 (KB973688) Microsoft Corporation 13/04/2014 1,33MB 4.20.9876.0
Offertz Offertz.com 16/07/2014 11,7MB 1.0.6.1
Realtek High Definition Audio Driver Realtek Semiconductor Corp. 07/03/2014 6.0.1.6954
Software Updater SEIKO EPSON CORPORATION 06/04/2014 8,22MB 4.2.7
Supporto applicazioni Apple Apple Inc. 07/03/2014 64,7MB 2.3.4
TheGoPhoto.it V10 joep 02/09/2014 1.34.8.12
Windows Live Essentials Microsoft Corporation 02/04/2014 16.4.3522.0110
µTorrent BitTorrent Inc. 24/10/2014 3.4.2.34944
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari

Re: pagine che si aprono da sole

Postdi davide72 » 27/10/14 18:16

allora....disinstalla offertz.com e the go photo.it
Avatar utente
davide72
Utente Senior
 
Post: 5588
Iscritto il: 10/06/14 22:01

Re: pagine che si aprono da sole

Postdi demodemo » 27/10/14 20:34

ok fatto, adesso va ok grazie
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari

Re: pagine che si aprono da sole

Postdi davide72 » 27/10/14 21:32

bene, salva sul desktop http://www.bleepingcomputer.com/download/otl/ quindi esegui OTL e clicca su cleanup
questo serve per disinstallare correttamente combofix, al termine riavvia il pc e cestina otl
Avatar utente
davide72
Utente Senior
 
Post: 5588
Iscritto il: 10/06/14 22:01

Re: pagine che si aprono da sole

Postdi demodemo » 29/10/14 18:25

ok fatto grazie
Avatar utente
demodemo
Utente Junior
 
Post: 83
Iscritto il: 26/03/08 17:15
Località: lecce e bari


Torna a Sicurezza e Privacy


Topic correlati a "pagine che si aprono da sole":


Chi c’è in linea

Visitano il forum: Nessuno e 7 ospiti