Buongiorno.
Ho diversi problemi soprattutto con pagine iniziali cambiate e apertura di siti indesiderati.
Chiedo cortesemente un'analisi del log di hijackthis.
Grazie per l'attenzione.
gb


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:32:20, on 20/05/2017
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.14393.0953)
Boot mode: Safe mode with network support

Running processes:
C:\Users\Administrator\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~1\Office15\GROOVEEX.DLL
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKCU\..\Run: [OneDrive] "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup (User 'SERVIZIO DI RETE')
O4 - Global Startup: Avvio veloce di Adobe Acrobat.lnk = ?
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: I&nvia a OneNote - res://C:\PROGRA~1\MICROS~1\Office15\ONBttnIE.dll/105
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIE.dll
O9 - Extra button: Lync - Chiamata con un clic - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra 'Tools' menuitem: Lync - Chiamata con un clic - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll
O9 - Extra button: &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: &Note collegate di OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL
O18 - Protocol: tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Protocol: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll
O18 - Filter hijack: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL
O20 - Winlogon Notify: SDWinLogon - SDWinLogon.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device Service - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: aswbIDSAgent - AVAST Software s.r.o. - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.ServiceRes.dll,-1000 (diagnosticshub.standardcollector.service) - Unknown owner - C:\WINDOWS\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (file missing)
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Epson Scanner Service (EpsonScanSvc) - Unknown owner - C:\WINDOWS\system32\EscSvc64.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Container LS (NVDisplay.ContainerLocalSystem) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
O23 - Service: Reimage Real Time Protector (ReimageRealTimeProtector) - Reimage® - C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\SensorDataService.exe,-101 (SensorDataService) - Unknown owner - C:\WINDOWS\System32\SensorDataService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SpyHunter4 Service (SpyHunter 4 Service) - Enigma Software Group USA, LLC. - C:\Program Files\Enigma Software Group\SpyHunter\Sh4Service.exe
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) - DEVGURU Co., LTD. - C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
O23 - Service: @%SystemRoot%\system32\TieringEngineService.exe,-702 (TieringEngineService) - Unknown owner - C:\WINDOWS\system32\TieringEngineService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 9323 bytes

Ci saranno i soliti asware dirottatori che ti portano a siti non richiesti e modificano la pagina iniziale dei browser.
Il log non presenta problemi.
Controlla fra i componenti aggiuntivi del browser che usi se vi sono voci che non conosci e li elimini, poi controlla fra i motori di ricerca che non ci siano motori sconosciuti, nel caso elimina.
Poi fai le seguenti scansioni:
PULIZIE PC PAGINE PUBBLICITA' E INFEZIONI VARIE

Scarica ed installa MalwareBytes: clicca qui per il download: http://it.malwarebytes.org/
Clicca su: scarica la versione Gratuita alla destra, nella finestra che appare clic su Salva file,
poi per installarlo clic su: mbam-setup.exe, a completamento installazione togliere la spunta alla casella "Attiva la prova gratuita di Malwarebytes Pro" poi clic su fine.
Il programma è già in Italiano.
Nella parte alta cliccare sul menu Opzioni e nella sezione Rilevamento e protezione spuntare la casella Ricerca Rootkit
Prima di fare la scansione AGGIORNALO. (è molto importante)
Poi clic su SCANSIONE verrà fatta la ricerca di elementi nocivi., già selezionata di Default,.
Alla fine appariranno i risultati della ricerca, se ci sono elementi nocivi cliccare su Rimuovi selezionati che verranno messi in quarantena, poi clic su chiudi.
Durante le operazioni ignorare gli annunci che appaiono in basso, riguardano la vs Pro.
Posta il log.

Scarica Adwcleaner sul desktop: http://www.bleepingcomputer.com/download/adwcleaner/
Per il download cliccare su: Download now
Chiudi tutti i browser (è importante IE,Firefox Chrome ecc...)
Clicca sul pulsante "Analisi".
Finita la scansione clicca su "Pulizia"
Conferma con OK le varie finestre che ti compariranno.
Riavvia il pc e uscirà il log con le eliminazioni.
Postalo qui.
ADW crea un backup dei files e delle impostazioni eliminati, si trova in "C:\AdwCleaner\Quarantine" in modo da consentire l'eventuale ripristino di dati erroneamente cancellati.
Per il ripristino, aprire il programma>Strumenti>Gestione quarantena>Ripristino.

Scarica Junkware Removal Tool sul desktop.
http://junkware-removal-tool.it.uptodown.com/download
Il download dovrebbe partire entro 5 secondi
Disattiva temporaneamente l'antivirus per evitare potenziali conflitti.
Doppio click su JRT
Lo strumento si aprirà e avvierà la scansione del sistema.
Devi avere pazienza in quanto questo tool può richiedere del tempo per completare la scansione .
Al termine, un log (JRT.txt) viene salvato sul desktop e si aprirà automaticamente.

Poi fai una bella pulizia del Registro.

Per una pulizia profonda del registro, usa Eusing Free Registry Cleaner sw da usare saltuariamente, lo scarichi da qui: http://www.eusing.com/free_registry_cleaner/registry_cleaner.htm
clic su Download Site1, una volta lanciato appare una finestra che chiede il codice, clic su ignora e procedi, poi in alto a sinistra clic su Analizza Registro, lascia fare fino alla fine non ti preoccupare se trova molte voci, poi clicca su Ripara Registro, il sw è sicuro comunque crea un punto di ripristino e fa anche il backup dei file eliminati infatti in alto sotto ripara registro si trova la voce Ripristina Registro.
Per fare questa pulizia meglio chiudere tutti i programmi e disconnesso.
Il programma è compatibile con tutti i S.O. windows compreso win 10.
Fai sapere se ci sono migliorie. Ciao

E' cambiato poco o niente.
ti posto i log:

# AdwCleaner v3.211 - Rapporto creato 07/08/2016 in 19:07:24
# Aggiornato 26/05/2014 di Xplode
# Sistema operativo : Windows 10 Home (64 bits)
# Nome utente : batt - ACERCASA
# In esecuzione da : C:\Users\batt\Desktop\adwcleaner_3.211.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****


***** [ Collegamenti ] *****


***** [ Registro ] *****

Chiave Eliminati : HKCU\Software\AppDataLow\Software

***** [ Browser ] *****

-\\ Internet Explorer v11.0.10586.494


-\\ Google Chrome v52.0.2743.82

[ File : C:\Users\Cristina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\gian\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[C1].txt - [4931 octets] - [12/06/2016 21:45:08]
AdwCleaner[C2].txt - [6473 octets] - [27/12/2015 12:43:56]
AdwCleaner[C3].txt - [2918 octets] - [22/01/2016 12:39:34]
AdwCleaner[R0].txt - [28638 octets] - [27/05/2014 10:22:14]
AdwCleaner[R4].txt - [1795 octets] - [12/06/2016 10:33:08]
AdwCleaner[R5].txt - [1510 octets] - [05/08/2016 21:07:11]
AdwCleaner[R6].txt - [1568 octets] - [07/08/2016 19:05:33]
AdwCleaner[S0].txt - [23931 octets] - [27/05/2014 10:23:27]
AdwCleaner[S1].txt - [4600 octets] - [12/06/2016 21:43:15]
AdwCleaner[S2].txt - [6003 octets] - [27/12/2015 12:36:03]
AdwCleaner[S3].txt - [7805 octets] - [27/12/2015 12:42:26]
AdwCleaner[S4].txt - [4154 octets] - [22/01/2016 12:37:37]
AdwCleaner[S5].txt - [1488 octets] - [07/08/2016 19:07:24]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1548 octets] ##########
# AdwCleaner v3.211 - Rapporto creato 20/05/2017 in 19:53:57
# Aggiornato 26/05/2014 di Xplode
# Sistema operativo : Windows 10 Home (64 bits)
# Nome utente : batt - ACERCASA
# In esecuzione da : C:\Users\batt\Desktop\adwcleaner_3.211.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****


***** [ Collegamenti ] *****


***** [ Registro ] *****

Chiave Eliminati : HKCU\Software\AppDataLow\Software

***** [ Browser ] *****

-\\ Internet Explorer v11.0.14393.953


-\\ Google Chrome v57.0.2987.133

[ File : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Cristina\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\Elena\AppData\Local\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Users\gian\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[C1].txt - [4931 octets] - [12/06/2016 21:45:08]
AdwCleaner[C2].txt - [6473 octets] - [27/12/2015 12:43:56]
AdwCleaner[C3].txt - [2918 octets] - [22/01/2016 12:39:34]
AdwCleaner[C4].txt - [11318 octets] - [10/05/2017 19:01:51]
AdwCleaner[R0].txt - [31348 octets] - [27/05/2014 10:22:14]
AdwCleaner[R1].txt - [1690 octets] - [05/05/2017 20:04:03]
AdwCleaner[R2].txt - [1698 octets] - [05/05/2017 21:28:34]
AdwCleaner[R3].txt - [1810 octets] - [07/05/2017 11:55:04]
AdwCleaner[R4].txt - [3912 octets] - [12/06/2016 10:33:08]
AdwCleaner[R5].txt - [3627 octets] - [05/08/2016 21:07:11]
AdwCleaner[R6].txt - [1568 octets] - [07/08/2016 19:05:33]
AdwCleaner[S0].txt - [26667 octets] - [27/05/2014 10:23:27]
AdwCleaner[S1].txt - [6289 octets] - [12/06/2016 21:43:15]
AdwCleaner[S2].txt - [7694 octets] - [27/12/2015 12:36:03]
AdwCleaner[S3].txt - [9615 octets] - [27/12/2015 12:42:26]
AdwCleaner[S4].txt - [6271 octets] - [22/01/2016 12:37:37]
AdwCleaner[S5].txt - [3544 octets] - [07/08/2016 19:07:24]
AdwCleaner[S6].txt - [11972 octets] - [10/05/2017 18:17:02]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [3665 octets] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.3 (04.10.2017)
Operating System: Windows 10 Home x64
Ran by batt (Administrator) on 20/05/2017 at 20.01.33,45
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 2

Successfully deleted: C:\rei (Folder)
Successfully deleted: C:\Program Files\reimage (Folder)



Registry: 0





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 20/05/2017 at 20.03.27,29
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Malwarebytes Anti-Malware
www.malwarebytes.org

Data scansione: 20/05/2017
Ora scansione: 19.27.55
File di log: log mb.txt
Amministratore: Si

Versione: 2.00.2.1012
Database malware: v2017.05.20.05
Database rootkit: v2017.04.02.01
Licenza: Free
Protezione da malware: Disattivata
Protezione da siti web nocivi: Disattivata
Self-protection: Disattivata

SO: Windows 8
CPU: x64
File system: NTFS
Utente: batt

Tipo di scansione: Scansione elementi nocivi
Risultati: Completata
Elementi analizzati: 431605
Tempo impiegato: 8 min, 24 sec

Memoria: Attivata
Esecuzioni automatiche: Attivata
File system: Attivata
Archivi compressi: Attivata
Rootkit: Disattivata
Heuristics: Attivata
PUP: Attivata
PUM: Attivata

Processi: 0
(No malicious items detected)

Moduli: 0
(No malicious items detected)

Chiavi di registro: 37
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, , [0e57bc5e5b4e64d2b1d2f84a9e623fc1],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\{28FF42B8-A0DA-4BE5-9B81-E26DD59B350A}, , [0e57bc5e5b4e64d2b1d2f84a9e623fc1],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{10ECCE17-29B5-4880-A8F5-EAD298611484}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\CLSID\{801B440B-1EE3-49B0-B05D-2AB076D4E8CB}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9BB31AD8-5DB2-459E-A901-DEA536F23BA4}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{BD51A48E-EB5F-4454-8774-EF962DF64546}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{FA6468D2-FAA4-4951-A53B-2A5CF9CC0A36}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine.1, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\REI_AxControl.ReiEngine, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\REI_AxControl.ReiEngine, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\REI_AxControl.ReiEngine.1, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, HKU\S-1-5-21-603388978-983995724-2000467024-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{10ECCE17-29B5-4880-A8F5-EAD298611484}, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.SpyHunter, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\SpyHunter, , [6ef72beff7b23afcc444f49a5ea2f10f],
PUP.Optional.Reimage, HKLM\SOFTWARE\CLASSES\APPID\REI_AxControl.DLL, , [f0757aa08128c373810ba48ae41cb848],
Adware.Elex, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Milimili, , [2e3751c90b9ee84e7f21d3c860a0946c],
PUP.Optional.Reimage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\Reimage Reminder, , [1055c951e0c940f64a99e5638878669a],
PUP.Optional.Reimage, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ReimageUpdater, , [b7ae7c9e29803204eddf073b17e9a65a],
PUP.Optional.SpyHunter, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SpyHunter4Startup, , [7fe6b862a8016cca5dd591ac817f25db],
PUP.Optional.Reimage, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\REIMAGE.EXE, , [8fd655c52f7a8ea8703131fd55ab2dd3],
PUP.Optional.Reimage, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Reimage Repair, , [9bca4cce3178b482cd341f147d83b848],
PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\Reimage Repair, , [184d37e3dacf39fdf1fad973cd33ab55],
PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\REIMAGE PROTECTOR, , [5a0b39e1ebbe181eba857bc8f7097789],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APPID\REI_AxControl.DLL, , [45207c9ec8e17fb7ccc06ac4c43cca36],
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\REIMAGE.EXE, , [7fe63bdfc2e71b1b4b56f03efb0550b0],
Adware.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\CWASRE, , [bfa6b4668524b3833314b3277e834eb2],
PUP.Optional.Reimage, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ReimageRealTimeProtector, , [c1a405158c1db68083df49f59c641ae6],
PUP.Optional.SpyHunter, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\SpyHunter 4 Service, , [93d23edc2782cf67b81b73c6d729e51b],
PUP.Optional.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinSAPSvc, , [620367b38e1bd95d44ea93c121df5da3],
PUP.Optional.SpyHunter, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ESGIGUARD, , [125358c27f2ada5cb99916288e72748c],
PUP.Optional.SpyHunter, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ESGSCANNER, , [6ef720fa60496ccaa6f5b8885fa1c33d],
Adware.Elex, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\CWASRE, , [8ed764b6a306cd6955f13b9fdd246997],
PUP.Optional.Reimage, HKU\S-1-5-21-603388978-983995724-2000467024-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Reimage, , [184d27f3bbee71c50acefe76f90753ad],
PUP.Optional.Reimage, HKU\S-1-5-21-603388978-983995724-2000467024-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\LOCAL APPWIZARD-GENERATED APPLICATIONS\Reimage - Windows Problem Relief., , [82e36bafdccd74c2b6858cb100003fc1],
PUP.Optional.Reimage, HKU\S-1-5-21-603388978-983995724-2000467024-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\REIMAGE\PC REPAIR, , [3035b466b7f259dd7c16f53d9868659b],

Valori di registro: 6
PUP.Optional.Reimage, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\REIMAGE.EXE, C:\Program Files\Reimage\Reimage Repair\Reimage.exe, , [8fd655c52f7a8ea8703131fd55ab2dd3]
PUP.Optional.Reimage, HKLM\SOFTWARE\REIMAGE\REIMAGE PROTECTOR|CflPath, C:\ProgramData\Reimage Protector\cfl.rei, , [5a0b39e1ebbe181eba857bc8f7097789]
PUP.Optional.Reimage, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\APP PATHS\REIMAGE.EXE, C:\Program Files\Reimage\Reimage Repair\Reimage.exe, , [7fe63bdfc2e71b1b4b56f03efb0550b0]
PUP.Optional.SpyHunter, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ESGIGUARD|ImagePath, \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys, , [125358c27f2ada5cb99916288e72748c]
PUP.Optional.SpyHunter, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\ESGSCANNER|ImagePath, system32\DRIVERS\EsgScanner.sys, , [6ef720fa60496ccaa6f5b8885fa1c33d]
PUP.Optional.Reimage, HKU\S-1-5-21-603388978-983995724-2000467024-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\REIMAGE\PC REPAIR|QuitMessage, , , [3035b466b7f259dd7c16f53d9868659b]

Dati di registro: 0
(No malicious items detected)

Cartelle: 7
PUP.Optional.Reimage, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair, , [84e1f6245d4cb97d86b3240aa8588779],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results, , [0362b862397039fdbc21052a4cb44ab6],
Adware.Elex, C:\Windows\psgo, , [74f1b6648e1b37ff65183f9e41c04eb2],
Adware.Elex, C:\Users\batt\AppData\Roaming\WinSAPSvc, , [016462b8c6e3ab8beca41a491de4e61a],
Adware.Elex, C:\Users\batt\AppData\Local\CWASRE, , [0d58dc3e199078be4e2cf2e8d9281ce4],
Adware.Elex, C:\Terward, , [6df8b169fdac81b5bac1508a0ff247b9],

File: 43
Adware.Elex, C:\ProgramData\BIT\BIT.dll, , [bea79387dacf88ae6bff18c57d848b75],
PUP.Optional.Reimage, C:\Program Files\Reimage\Reimage Repair\REI_Axcontrol.dll, , [b5b0dd3d614888aeaa46d85a0ef243bd],
PUP.Optional.Reimage, C:\Users\batt\AppData\Local\Temp\ReimagePackage.exe, , [84e158c207a2f046f65a0a3117e952ae],
PUP.Optional.SpyHunter, C:\Users\batt\AppData\Roaming\Enigma Software Group\sh_installer.exe, , [6ef72beff7b23afcc444f49a5ea2f10f],
PUP.Optional.SpyHunter, C:\Program Files\Enigma Software Group\SpyHunter\SpyHunter4.exe, , [1c4912086643201616ca48dd67995ca4],
PUP.Optional.Reimage, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair\Reimage Repair.lnk, , [84e1f6245d4cb97d86b3240aa8588779],
PUP.Optional.Reimage, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair\Help & Support.lnk, , [84e1f6245d4cb97d86b3240aa8588779],
PUP.Optional.Reimage, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair\Run in safe mode.lnk, , [84e1f6245d4cb97d86b3240aa8588779],
PUP.Optional.Reimage, C:\Windows\System32\Tasks\ReimageUpdater, , [c5a052c8b6f36fc7ccb784aa817f8d73],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\cfl.rei, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\active_protection.txt, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\ProtectorPackage.log, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\ProtectorUpdater.log, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\ScanAgent.log, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\ScanAgentDebugRepair.log, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\scan_agent_result_log.txt, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\ProgramData\Reimage Protector\Results\url_setting_definitions.txt, , [0362b862397039fdbc21052a4cb44ab6],
PUP.Optional.Reimage, C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk, , [3530bf5bc6e3bd79b6fa1917c53b6d93],
PUP.Optional.Reimage, C:\Windows\System32\Tasks\Reimage Reminder, , [4124ef2b2d7c39fd7346032f40c002fe],
PUP.Optional.SpyHunter, C:\Windows\System32\Tasks\SpyHunter4Startup, , [d392ad6d1d8cf83e55092e0d40c049b7],
PUP.Optional.SpyHunter, C:\Users\batt\Desktop\SpyHunter.lnk, , [e283df3bbdec2511d3b7d26b1be5b54b],
PUP.Optional.Reimage, C:\Users\Administrator\AppData\Local\Temp\reimage.log, , [5a0bd941acfd41f5d2a7d374ee12f30d],
PUP.Optional.Reimage, C:\Users\batt\AppData\Local\Temp\Reimage.log, , [b3b2f1290c9d94a245346ed94fb17b85],
PUP.Optional.Reimage, C:\Windows\Temp\reimage.log, , [164fe6346d3cfa3c30493f086c941ae6],
Adware.Elex, C:\Windows\System32\Tasks\Milimili, , [afb6a97195144fe7d97ebae49e62a65a],
Adware.Elex, C:\Windows\psgo\psgo.ps1, , [74f1b6648e1b37ff65183f9e41c04eb2],
PUP.Optional.eShopComp, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage, , [db8a61b9efba7cba78795c960cf6cc34],
PUP.Optional.eShopComp, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage-journal, , [ef76e931b6f3280e569bed05c43ed22e],
PUP.Optional.eShopComp, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.eshopcomp.com_0.localstorage, , [481d24f6b5f42c0ab140e90923df768a],
PUP.Optional.eShopComp, C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pstatic.eshopcomp.com_0.localstorage-journal, , [5b0a8e8cf2b792a4648d539fec165fa1],
PUP.Optional.eShopComp, C:\Users\Cristina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage, , [1d48b268e4c548ee8c65945edb27fb05],
PUP.Optional.eShopComp, C:\Users\Cristina\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage-journal, , [80e5dc3e0b9eb97d7d74e50daa58fe02],
PUP.Optional.eShopComp, C:\Users\Elena\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage, , [82e3af6bb4f5d165be3348aa33cf01ff],
PUP.Optional.eShopComp, C:\Users\Elena\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_pstatic.eshopcomp.com_0.localstorage-journal, , [3c29b6648d1c072f7180c032010145bb],
Adware.Elex, C:\Users\batt\AppData\Local\CWASRE\Snare.dll, , [bfa6b4668524b3833314b3277e834eb2],
PUP.Optional.Reimage, C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe, , [c1a405158c1db68083df49f59c641ae6],
PUP.Optional.SpyHunter, C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe, , [93d23edc2782cf67b81b73c6d729e51b],
PUP.Optional.Elex, C:\Users\batt\AppData\Roaming\WinSAPSvc\WinSAP.dll, , [620367b38e1bd95d44ea93c121df5da3],
PUP.Optional.SpyHunter, C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys, , [125358c27f2ada5cb99916288e72748c],
PUP.Optional.SpyHunter, C:\Windows\System32\drivers\EsgScanner.sys, , [6ef720fa60496ccaa6f5b8885fa1c33d],
Adware.Elex, C:\Users\batt\AppData\Roaming\WinSAPSvc\WinSAP.dll, , [016462b8c6e3ab8beca41a491de4e61a],
Adware.Elex, C:\Terward\Cuwolenuosy.777, , [6df8b169fdac81b5bac1508a0ff247b9],
PUP.Optional.SpeedItUp, C:\Windows\Reimage.ini, , [1a4b2eec9514023464dece6240c0eb15],

Settori fisici: 0
(No malicious items detected)


(end)

Oltre ai suggerimenti di Alfonso devi eliminare questi programmi:
Reimage Repair e SpyHunter, sono programmi commerciali o li acquisti o quello che trovano non si elimina e portano pubblicità dirottandoti in altri siti.
eSchop.com altro sito che porta a pubblicità e cambio di pagina del browser.
Anche psgo che dovrebbe essere legato a Elex, un gioco online, usare con molta attenzione altrimenti ti ritrovi sempre con un mucchio di POP.
Ho notato che hai il BonjourService\mDNSResponder.exe, solitamente viene installato assieme a iTunes, se non usi questa funzionalità è meglio disbilitare questo servizio.
Per farlo vai nei servizi scorri l'elenco e cerca BonjourService fai doppio clic sulla voce e nelle proprietà in tipo di Avvio metti Disabilitato ok esci.

Salve
Scusate,
domandina:
come mai l'antivirus non figura nelle stringhe 04?
Saluti
P.S. gli 04 sono i prog che partono all'avvio del PC.

Installato firefox. tutto ok.
Spyhunter non lo vedo nel pannello di controllo/programmi/disinstalla un programma, così come reimage.
Ho fatto una ricerca e ho eliminato tutto manualmente.
Spybot dici che è meglio toglierlo?
Lo uso da anni con cclleaner e mi sembrava buono...
Ancora una domanda: se disinstallo chrome, faccio pulizia e lo reinstallo pensi che possa funzionare?
Grazie ancora per la disponibilità.