Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Help yontoo Opzioni
bonpi
Inviato: Friday, April 26, 2013 1:09:11 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Non riesco a disinstallare Yontoo. Ho scaricato una versione di media player home cinema insieme a un codec pack, molto probabilmente era nel pack. Ho lanciato Malwerebites e ha rilevato 8 minacce gia eliminate. Ho provato a disinstallarlo anche con Revo unistaller ma rimane, esiste un modo per eliminarlo?
Sponsor
Inviato: Friday, April 26, 2013 1:09:11 PM

 
miticoalex
Inviato: Saturday, April 27, 2013 12:15:36 AM

Rank: AiutAmico

Iscritto dal : 10/19/2010
Posts: 14,635
Ciao

Prova in questo modo.

Se non ne vieni a capo, utilizza adwcleaner.



bonpi
Inviato: Saturday, April 27, 2013 12:02:37 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
OK Miticoalex ora ci provo, Grazie.
bonpi
Inviato: Sunday, April 28, 2013 9:45:50 AM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Miticoalex, non ho risolto nulla,il primo non si apre la versione free, il secondo è a pagamento. Nel frattempo la situazione è di molto peggiorata, sono sommerso da pubblicità mentre navigo o sto su facebook, mi si installano programmi da soli, mi si apre google e va alle pagine di pubblicità da solo, il mio antivirus microsoft security essentials si è bloccato. NON CI CAPISCO PIU NULLA, AIUTATEMI. Ti prego Miticoalex o altri che in passato mi avete risolto molti problemi trovate una soluzione free. AIUTATEMI
miticoalex
Inviato: Sunday, April 28, 2013 10:40:46 AM

Rank: AiutAmico

Iscritto dal : 10/19/2010
Posts: 14,635
Adwcleaner è assolutamente gratuito. Rifai la scansione, e clicca su delete o elimina.

Posta il log che rilascia dopo il riavvio assieme a quello di hijackthis.





cbbusto
Inviato: Sunday, April 28, 2013 11:10:51 AM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Scusa mitico, meglio spiegare chiaramente come usare ADW, non tutti lo conoscono.

Bonpi fai in questo modo.
Scarica Adwcleaner sul desktop:
http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/2-adwcleaner
Avvialo e clicca sul pulsante "Elimina".
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà, e uscirà il log con le eliminazioni.
Postalo qui.
Fai anche la scansione di HJT e posta il suo log, il programma lo dovresti conoscere altrimenti trovi la scheda nella sezione software. Ciao
miticoalex
Inviato: Sunday, April 28, 2013 12:09:36 PM

Rank: AiutAmico

Iscritto dal : 10/19/2010
Posts: 14,635
cbbusto ha scritto:
Scusa mitico, meglio spiegare chiaramente come usare ADW, non tutti lo conoscono.


No scusami tu! Però io avevo postato la guida di megalab, dove veniva spiegato in modo puntiglioso il suo funzionamento.

Speak to the hand



bonpi
Inviato: Sunday, April 28, 2013 4:10:48 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Grazie , oggi ho da fare, ma domani appena torno dal lavoro, ci provo. Ringrazio vivamente tutti e due.
bonpi
Inviato: Monday, April 29, 2013 5:26:34 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Questo è il post di ADW
# AdwCleaner v2.300 - Logfile creato il 29/04/2013 alle 17:14:40
# Aggiornamento 28/04/2013 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : Piero - ILARIA1
# Modalità Avvio : Modalità Normale
# Eseguito da : D:\Documenti - Piero\Downloads\adwcleaner (1).exe
# Opzioni [Cerca]


***** [Servizi] *****


***** [File / Cartelle] *****

Cartella Trovato : C:\Documents and Settings\All Users.WINDOWS\Dati applicazioni\Babylon
Cartella Trovato : C:\Documents and Settings\All Users.WINDOWS\Dati applicazioni\Tarma Installer
Cartella Trovato : C:\Documents and Settings\NetworkService.NT AUTHORITY\Impostazioni locali\Dati applicazioni\ToggleEN
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Babylon
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\eIntaller
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\freeTVRadio
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\Conduit
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\ConduitEngine
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\CT1750559
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\CT2776682
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\{51a86bb3-6602-4c85-92a5-130ee4864f13}
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\engine@conduit.com
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\ffxtlbr@babylon.com
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\ffxtlbr@incredibar.com
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\extensions\OneClickDownload@OneClickDownload.com
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Nosibay
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\OpenCandy
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\PriceGong
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Search Settings
Cartella Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Toolbar4
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\APN
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Babylon
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Conduit
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\freetvradio Air
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Ilivid Player
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\OpenCandy
Cartella Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\PackageAware
Cartella Trovato : C:\Programmi\1ClickDownload
Cartella Trovato : C:\Programmi\Application Updater
Cartella Trovato : C:\Programmi\File comuni\spigot
Cartella Trovato : C:\Programmi\Mozilla Firefox\Extensions\ffxtlbr@babylon.com
Cartella Trovato : C:\Programmi\ToggleEN
File Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\searchplugins\Askcom.xml
File Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\searchplugins\Conduit.xml
File Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\searchplugins\MyStart Search.xml
File Trovato : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\searchplugins\softonic.xml
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq.dat
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq.dat
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq_nav.dat
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq_nav.dat
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq_navps.dat
File Trovato : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\kiqiq_navps.dat
File Trovato : C:\END
File Trovato : C:\Programmi\Mozilla Firefox\.autoreg
File Trovato : C:\Programmi\Mozilla FireFox\Components\AskSearch.js
File Trovato : C:\Programmi\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Trovato : C:\Programmi\Mozilla Firefox\searchplugins\babylon.xml
File Trovato : C:\user.js
File Trovato : C:\WINDOWS\system32\conduitEngine.tmp

***** [Registro] *****

Chiave Trovata : HKCU\Software\1ClickDownload
Chiave Trovata : HKCU\Software\APN PIP
Chiave Trovata : HKCU\Software\AppDataLow\Software\Search Settings
Chiave Trovata : HKCU\Software\Conduit
Chiave Trovata : HKCU\Software\IM
Chiave Trovata : HKCU\Software\ImInstaller
Chiave Trovata : HKCU\Software\InstallCore
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{18EAB056-9057-F224-FD4C-1F6569C4D8D2}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{DCDBBF03-BC10-457D-911F-EFB0321D22BE}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{011128A7-C075-46C9-9604-B2F7E97DA0F8}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{038CB5C7-48EA-4AF9-94E0-A1646542E62B}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{336D0C35-8A85-403A-B9D2-65C292C39087}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Chiave Trovata : HKCU\Software\Nosibay
Chiave Trovata : HKCU\Software\Official-eMule
Chiave Trovata : HKCU\Software\PriceGong
Chiave Trovata : HKCU\Software\Search Settings
Chiave Trovata : HKCU\Software\Softonic
Chiave Trovata : HKCU\Software\ToggleEN
Chiave Trovata : HKCU\Software\Web Assistant
Chiave Trovata : HKCU\Toolbar
Chiave Trovata : HKLM\Software\Application Updater
Chiave Trovata : HKLM\Software\Babylon
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{B302A1BD-0157-49FA-90F1-4E94F22C7B4B}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\Extension.DLL
Chiave Trovata : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Chiave Trovata : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Chiave Trovata : HKLM\SOFTWARE\Classes\CLSID\{9AFB8248-617F-460D-9366-D71CDEDA3179}
Chiave Trovata : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{A36867C6-302D-49FC-9D8E-1EB037B5F1AB}
Chiave Trovata : HKLM\SOFTWARE\Classes\oneclick
Chiave Trovata : HKLM\SOFTWARE\Classes\oneclickmg
Chiave Trovata : HKLM\SOFTWARE\Classes\Prod.cap
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{1D5A4199-956E-49BC-B89F-6A35C57C0D13}
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Chiave Trovata : HKLM\Software\Conduit
Chiave Trovata : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Chiave Trovata : HKLM\SOFTWARE\Google\Chrome\Extensions\pmlghpafmmnmmkjdhacccolfgnkiboco
Chiave Trovata : HKLM\Software\Iminent
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DEA8195-391D-4583-916B-845F68328A34}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA3300DC-21A4-4968-B4B7-EB027232C0AC}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\SearchSettings
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{011128A7-C075-46C9-9604-B2F7E97DA0F8}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ToggleEN Toolbar
Chiave Trovata : HKLM\SOFTWARE\MozillaPlugins\@funwebproducts.com/Plugin
Chiave Trovata : HKLM\Software\Official-eMule
Chiave Trovata : HKLM\Software\PIP
Chiave Trovata : HKLM\Software\Search Settings
Chiave Trovata : HKLM\Software\Tarma Installer
Chiave Trovata : HKLM\Software\ToggleEN
Chiave Trovata : HKLM\Software\Web Assistant
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{18EAB056-9057-F224-FD4C-1F6569C4D8D2}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Chiave Trovata : HKU\S-1-5-21-484763869-1303643608-839522115-1005\Software\Microsoft\Internet Explorer\SearchScopes\{DCDBBF03-BC10-457D-911F-EFB0321D22BE}
Valore Trovata : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{038CB5C7-48EA-4AF9-94E0-A1646542E62B}]
Valore Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{038CB5C7-48EA-4AF9-94E0-A1646542E62B}]
Valore Trovata : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]
Valore Trovata : HKLM\SOFTWARE\Mozilla\Firefox\extensions [{336D0C35-8A85-403a-B9D2-65C292C39087}]

***** [Browser Internet] *****

-\\ Internet Explorer v7.0.6000.17128

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://www2.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId=08910011099FCE36

-\\ Mozilla Firefox v3.0.14 (it)

File : C:\Documents and Settings\Piero\Dati applicazioni\Mozilla\Firefox\Profiles\b4ghwarf.default\prefs.js

Trovata : user_pref("CT1750559..clientLogIsEnabled", false);
Trovata : user_pref("CT1750559..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Trovata : user_pref("CT1750559..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Trovata : user_pref("CT1750559.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Trovata : user_pref("CT1750559.CTID", "CT1750559");
Trovata : user_pref("CT1750559.CurrentServerDate", "11-9-2011");
Trovata : user_pref("CT1750559.DialogsAlignMode", "LTR");
Trovata : user_pref("CT1750559.DialogsGetterLastCheckTime", "Mon Sep 05 2011 15:26:38 GMT+0200 (ora legale Eur[...]
Trovata : user_pref("CT1750559.DownloadReferralCookieData", "");
Trovata : user_pref("CT1750559.FirstServerDate", "24-6-2011");
Trovata : user_pref("CT1750559.FirstTime", true);
Trovata : user_pref("CT1750559.FirstTimeFF3", true);
Trovata : user_pref("CT1750559.FixPageNotFoundErrors", true);
Trovata : user_pref("CT1750559.GroupingServerCheckInterval", 1440);
Trovata : user_pref("CT1750559.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Trovata : user_pref("CT1750559.HasUserGlobalKeys", true);
Trovata : user_pref("CT1750559.Initialize", true);
Trovata : user_pref("CT1750559.InitializeCommonPrefs", true);
Trovata : user_pref("CT1750559.InstallationAndCookieDataSentCount", 3);
Trovata : user_pref("CT1750559.InstallationType", "UnknownIntegration");
Trovata : user_pref("CT1750559.InstalledDate", "Thu Jun 23 2011 23:19:58 GMT+0200 (ora legale Europa occidenta[...]
Trovata : user_pref("CT1750559.InvalidateCache", false);
Trovata : user_pref("CT1750559.IsGrouping", false);
Trovata : user_pref("CT1750559.IsMulticommunity", false);
Trovata : user_pref("CT1750559.IsOpenThankYouPage", true);
Trovata : user_pref("CT1750559.IsOpenUninstallPage", true);
Trovata : user_pref("CT1750559.LanguagePackLastCheckTime", "Sun Sep 11 2011 16:52:30 GMT+0200 (ora legale Euro[...]
Trovata : user_pref("CT1750559.LanguagePackReloadIntervalMM", 1440);
Trovata : user_pref("CT1750559.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Trovata : user_pref("CT1750559.LastLogin_3.2.5.2", "Thu Jun 23 2011 23:19:58 GMT+0200 (ora legale Europa occid[...]
Trovata : user_pref("CT1750559.LastLogin_3.3.3.2", "Sun Sep 11 2011 16:52:30 GMT+0200 (ora legale Europa occid[...]
Trovata : user_pref("CT1750559.LatestVersion", "3.6.0.10");
Trovata : user_pref("CT1750559.Locale", "en-us");
Trovata : user_pref("CT1750559.MCDetectTooltipHeight", "83");
Trovata : user_pref("CT1750559.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Trovata : user_pref("CT1750559.MCDetectTooltipWidth", "295");
Trovata : user_pref("CT1750559.RadioIsPodcast", false);
Trovata : user_pref("CT1750559.RadioLastCheckTime", "Sun Sep 11 2011 16:52:30 GMT+0200 (ora legale Europa occi[...]
Trovata : user_pref("CT1750559.RadioLastUpdateIPServer", "3");
Trovata : user_pref("CT1750559.RadioLastUpdateServer", "128929877726170000");
Trovata : user_pref("CT1750559.RadioMediaID", "11237206");
Trovata : user_pref("CT1750559.RadioMediaType", "Media Player");
Trovata : user_pref("CT1750559.RadioMenuSelectedID", "EBRadioMenu_CT175055911237206");
Trovata : user_pref("CT1750559.RadioStationName", "1.FM%20Dance");
Trovata : user_pref("CT1750559.RadioStationURL", "hxxp://dance.1.fm/energydance128k?MSWMExt=.asf");
Trovata : user_pref("CT1750559.SavedHomepage", "hxxp://search.conduit.com/?ctid=CT1750559&SearchSource=13");
Trovata : user_pref("CT1750559.SearchFromAddressBarIsInit", true);
Trovata : user_pref("CT1750559.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT175[...]
Trovata : user_pref("CT1750559.SearchInNewTabEnabled", true);
Trovata : user_pref("CT1750559.SearchInNewTabIntervalMM", 1440);
Trovata : user_pref("CT1750559.SearchInNewTabLastCheckTime", "Sun Sep 11 2011 16:52:29 GMT+0200 (ora legale Eu[...]
Trovata : user_pref("CT1750559.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Trovata : user_pref("CT1750559.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Trovata : user_pref("CT1750559.ServiceMapLastCheckTime", "Sun Sep 11 2011 16:52:28 GMT+0200 (ora legale Europa[...]
Trovata : user_pref("CT1750559.SettingsLastCheckTime", "Sun Sep 11 2011 16:52:26 GMT+0200 (ora legale Europa o[...]
Trovata : user_pref("CT1750559.SettingsLastUpdate", "1314518554");
Trovata : user_pref("CT1750559.ThirdPartyComponentsInterval", 504);
Trovata : user_pref("CT1750559.ThirdPartyComponentsLastCheck", "Mon Sep 05 2011 15:26:32 GMT+0200 (ora legale [...]
Trovata : user_pref("CT1750559.ThirdPartyComponentsLastUpdate", "1246786978");
Trovata : user_pref("CT1750559.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1750559");
Trovata : user_pref("CT1750559.UserID", "UN84727136075255491");
Trovata : user_pref("CT1750559.WeatherNetwork", "");
Trovata : user_pref("CT1750559.WeatherPollDate", "Sun Sep 11 2011 16:52:30 GMT+0200 (ora legale Europa occiden[...]
Trovata : user_pref("CT1750559.WeatherUnit", "C");
Trovata : user_pref("CT1750559.alertChannelId", "31130");
Trovata : user_pref("CT1750559.backendstorage.amazonnew_all", "313534363639312C313534353539312C313533363035312[...]
Trovata : user_pref("CT1750559.backendstorage.appbuttondisablenull", "30");
Trovata : user_pref("CT1750559.backendstorage.hxxp://cmg1_conduit-widgets_com/pitsi.state", "4F50454E");
Trovata : user_pref("CT1750559.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Trovata : user_pref("CT1750559.globalFirstTimeInfoLastCheckTime", "Sun Sep 11 2011 16:52:33 GMT+0200 (ora lega[...]
Trovata : user_pref("CT1750559.isAppTrackingManagerOn", true);
Trovata : user_pref("CT1750559.myStuffEnabled", true);
Trovata : user_pref("CT1750559.myStuffPublihserMinWidth", 400);
Trovata : user_pref("CT1750559.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Trovata : user_pref("CT1750559.myStuffServiceIntervalMM", 1440);
Trovata : user_pref("CT1750559.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Trovata : user_pref("CT1750559.testingCtid", "");
Trovata : user_pref("CT1750559.toolbarAppMetaDataLastCheckTime", "Sun Sep 11 2011 16:52:30 GMT+0200 (ora legal[...]
Trovata : user_pref("CT1750559.toolbarContextMenuLastCheckTime", "Thu Jun 23 2011 23:20:01 GMT+0200 (ora legal[...]
Trovata : user_pref("CT2776682..clientLogIsEnabled", true);
Trovata : user_pref("CT2776682..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Trovata : user_pref("CT2776682..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Trovata : user_pref("CT2776682.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Trovata : user_pref("CT2776682.AppTrackingLastCheckTime", "Sun Sep 11 2011 16:52:36 GMT+0200 (ora legale Europ[...]
Trovata : user_pref("CT2776682.CTID", "CT2776682");
Trovata : user_pref("CT2776682.CurrentServerDate", "11-9-2011");
Trovata : user_pref("CT2776682.DialogsAlignMode", "LTR");
Trovata : user_pref("CT2776682.DialogsGetterLastCheckTime", "Mon Sep 05 2011 15:26:52 GMT+0200 (ora legale Eur[...]
Trovata : user_pref("CT2776682.DownloadReferralCookieData", "");
Trovata : user_pref("CT2776682.FirstServerDate", "5-9-2011");
Trovata : user_pref("CT2776682.FirstTime", true);
Trovata : user_pref("CT2776682.FirstTimeFF3", true);
Trovata : user_pref("CT2776682.FixPageNotFoundErrors", true);
Trovata : user_pref("CT2776682.GroupingServerCheckInterval", 1440);
Trovata : user_pref("CT2776682.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Trovata : user_pref("CT2776682.HasUserGlobalKeys", true);
Trovata : user_pref("CT2776682.Initialize", true);
Trovata : user_pref("CT2776682.InitializeCommonPrefs", true);
Trovata : user_pref("CT2776682.InstallationAndCookieDataSentCount", 3);
Trovata : user_pref("CT2776682.InstallationId", "BrotherSoftExtreme_CT2776682.exe");
Trovata : user_pref("CT2776682.InstallationType", "ConduitIntegration");
Trovata : user_pref("CT2776682.InstalledDate", "Mon Sep 05 2011 15:26:50 GMT+0200 (ora legale Europa occidenta[...]
Trovata : user_pref("CT2776682.InvalidateCache", false);
Trovata : user_pref("CT2776682.IsGrouping", false);
Trovata : user_pref("CT2776682.IsMulticommunity", false);
Trovata : user_pref("CT2776682.IsOpenThankYouPage", false);
Trovata : user_pref("CT2776682.IsOpenUninstallPage", true);
Trovata : user_pref("CT2776682.LanguagePackLastCheckTime", "Sun Sep 11 2011 16:52:26 GMT+0200 (ora legale Euro[...]
Trovata : user_pref("CT2776682.LanguagePackReloadIntervalMM", 1440);
Trovata : user_pref("CT2776682.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Trovata : user_pref("CT2776682.LastLogin_3.3.3.2", "Sun Sep 11 2011 16:52:26 GMT+0200 (ora legale Europa occid[...]
Trovata : user_pref("CT2776682.LatestVersion", "3.6.0.10");
Trovata : user_pref("CT2776682.Locale", "en");
Trovata : user_pref("CT2776682.MCDetectTooltipHeight", "83");
Trovata : user_pref("CT2776682.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Trovata : user_pref("CT2776682.MCDetectTooltipWidth", "295");
Trovata : user_pref("CT2776682.RadioIsPodcast", false);
Trovata : user_pref("CT2776682.RadioLastCheckTime", "Sun Sep 11 2011 16:52:25 GMT+0200 (ora legale Europa occi[...]
Trovata : user_pref("CT2776682.RadioLastUpdateIPServer", "3");
Trovata : user_pref("CT2776682.RadioLastUpdateServer", "3");
Trovata : user_pref("CT2776682.RadioMediaID", "9962");
Trovata : user_pref("CT2776682.RadioMediaType", "Media Player");
Trovata : user_pref("CT2776682.RadioMenuSelectedID", "EBRadioMenu_CT27766829962");
Trovata : user_pref("CT2776682.RadioStationName", "California%20Rock");
Trovata : user_pref("CT2776682.RadioStationURL", "hxxp://feedlive.net/california.asx");
Trovata : user_pref("CT2776682.SavedHomepage", "hxxp://search.babylon.com/?babsrc=HP_ss&affID=19948&mntrId=089[...]
Trovata : user_pref("CT2776682.SearchFromAddressBarIsInit", true);
Trovata : user_pref("CT2776682.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT277[...]
Trovata : user_pref("CT2776682.SearchInNewTabEnabled", true);
Trovata : user_pref("CT2776682.SearchInNewTabIntervalMM", 1440);
Trovata : user_pref("CT2776682.SearchInNewTabLastCheckTime", "Sun Sep 11 2011 16:52:23 GMT+0200 (ora legale Eu[...]
Trovata : user_pref("CT2776682.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Trovata : user_pref("CT2776682.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
Trovata : user_pref("CT2776682.ServiceMapLastCheckTime", "Sun Sep 11 2011 16:52:23 GMT+0200 (ora legale Europa[...]
Trovata : user_pref("CT2776682.SettingsLastCheckTime", "Sun Sep 11 2011 16:52:23 GMT+0200 (ora legale Europa o[...]
Trovata : user_pref("CT2776682.SettingsLastUpdate", "1315473672");
Trovata : user_pref("CT2776682.ThirdPartyComponentsInterval", 504);
Trovata : user_pref("CT2776682.ThirdPartyComponentsLastCheck", "Mon Sep 05 2011 15:26:33 GMT+0200 (ora legale [...]
Trovata : user_pref("CT2776682.ThirdPartyComponentsLastUpdate", "1312887586");
Trovata : user_pref("CT2776682.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2776682");
Trovata : user_pref("CT2776682.UserID", "UN03216264246619749");
Trovata : user_pref("CT2776682.ValidationData_Toolbar", 0);
Trovata : user_pref("CT2776682.alertChannelId", "1168776");
Trovata : user_pref("CT2776682.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D4[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C474[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e.:2z527", "2423");
Trovata : user_pref("CT2776682.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F5[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C434[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e06cg5el8:", "6E6D706D6C6F736F7274");
Trovata : user_pref("CT2776682.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A7473767372757975787A242F4B4947[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E4129554[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D322934435[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A5[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D495[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B3[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A31283347474[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E7823322934495[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A3027324948554[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B3[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A355[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A5[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7ebe3gSpeak to the handd9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B26[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E31283353515[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C4[...]
Trovata : user_pref("CT2776682.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215[...]
Trovata : user_pref("CT2776682.backendstorage./9b-0?3g>d", "3D3A3E713E7071457A7443764A20757D4A4A257C50504F2A27[...]
Trovata : user_pref("CT2776682.backendstorage./9b-0?3g@6:5;", "");
Trovata : user_pref("CT2776682.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332[...]
Trovata : user_pref("CT2776682.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");
Trovata : user_pref("CT2776682.backendstorage./9b3=>@44i48?", "372C2D32697576334236334148477A213F3E484F4E4D464[...]
Trovata : user_pref("CT2776682.backendstorage./9b5ba==9cjag", "686F703F716E43737A4373717A4B4A787C20797921");
Trovata : user_pref("CT2776682.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706D6C6F736F7273717377");
Trovata : user_pref("CT2776682.backendstorage./9b9643g3/9e", "6A");
Trovata : user_pref("CT2776682.backendstorage./9b<:222h64<", "393F352F3E");
Trovata : user_pref("CT2776682.backendstorage./9b=+03eh8h8j?:", "4443");
Trovata : user_pref("CT2776682.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B26514649[...]
Trovata : user_pref("CT2776682.backendstorage./9b?b0d:8aj62<h", "6D");
Trovata : user_pref("CT2776682.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Trovata : user_pref("CT2776682.backendstorage.2776682a129520874668948567000000paramsgk0", "7B22757064617465526[...]
Trovata : user_pref("CT2776682.backendstorage.2776682a129573487812170065000000paramsgk0", "7B22757064617465526[...]
Trovata : user_pref("CT2776682.backendstorage.rss_pub_config", "7B2273657474696E6773223A7B2269636F6E223A226874[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000cat0", "253542253742253232[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000embeddedversion", "312E312[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000feedsobj", "25374225323263[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000lastreporttime", "31333135[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000newfeeds", "6E657746656564[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129520874668948567000000readitemsarr", "2537422532[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000cat0", "253542253742253232[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000embeddedversion", "322E322[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000feedsobj", "25374225323263[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000lastreporttime", "31333135[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000newfeeds", "6E657746656564[...]
Trovata : user_pref("CT2776682.backendstorage.rssapp2776682a129573487812170065000000readitemsarr", "2537422532[...]
Trovata : user_pref("CT2776682.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Trovata : user_pref("CT2776682.globalFirstTimeInfoLastCheckTime", "Sun Sep 11 2011 16:52:28 GMT+0200 (ora lega[...]
Trovata : user_pref("CT2776682.isAppTrackingManagerOn", true);
Trovata : user_pref("CT2776682.myStuffEnabled", true);
Trovata : user_pref("CT2776682.myStuffPublihserMinWidth", 400);
Trovata : user_pref("CT2776682.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Trovata : user_pref("CT2776682.myStuffServiceIntervalMM", 1440);
Trovata : user_pref("CT2776682.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Trovata : user_pref("CT2776682.oldAppsList", "129288498392881552,129288498393350308,129572679306107576,1295983[...]
Trovata : user_pref("CT2776682.testingCtid", "");
Trovata : user_pref("CT2776682.toolbarAppMetaDataLastCheckTime", "Sun Sep 11 2011 16:52:26 GMT+0200 (ora legal[...]
Trovata : user_pref("CT2776682.toolbarContextMenuLastCheckTime", "Mon Sep 05 2011 15:26:53 GMT+0200 (ora legal[...]
Trovata : user_pref("CT2776682.usagesFlag", 2);
Trovata : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2776682");
Trovata : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1168776/1164461/IT", "\"0\"[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/31130/30609/IT", "\"0\"");
Trovata : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/IT", "\"0\"")[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1750559", [...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2776682", [...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.2.[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2776682",[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63451341546747[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT1750559&octid=[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2776682&octid=[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1750559/CT1750559[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Mint/equalizer_dea[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Mint/minimize.gif"[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Mint/play.gif", "\[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Mint/stop.gif", "\[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Mint/vol.gif", "\"[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"634[...]
Trovata : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
Trovata : user_pref("CommunityToolbar.EngineHiddenByUser", false);
Trovata : user_pref("CommunityToolbar.EngineOwner", "CT1750559");
Trovata : user_pref("CommunityToolbar.EngineOwnerGuid", "{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}");
Trovata : user_pref("CommunityToolbar.EngineOwnerToolbarId", "bs_player");
Trovata : user_pref("CommunityToolbar.IsEngineShown", false);
Trovata : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Trovata : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_e[...]
Trovata : user_pref("CommunityToolbar.OriginalEngineOwner", "CT1750559");
Trovata : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}");
Trovata : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "bs_player");
Trovata : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
Trovata : user_pref("CommunityToolbar.ToolbarsList", "CT1750559,ConduitEngine,CT2776682");
Trovata : user_pref("CommunityToolbar.ToolbarsList2", "CT1750559,CT2776682");
Trovata : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Wed Feb 06 2013 17:32:37 GMT+01[...]
Trovata : user_pref("CommunityToolbar.alert.alertInfoInterval", 60);
Trovata : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Wed Feb 06 2013 17:32:46 GMT+0100 (ora s[...]
Trovata : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Trovata : user_pref("CommunityToolbar.alert.locale", "en");
Trovata : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Trovata : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Feb 06 2013 17:32:35 GMT+0100 (ora solar[...]
Trovata : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Trovata : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Trovata : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Trovata : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Trovata : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Trovata : user_pref("CommunityToolbar.alert.userId", "cb76b3d0-a925-4c83-ad53-039e35b90d85");
Trovata : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sun Sep 11 2011 16:52:29 GMT+0200 (ora[...]
Trovata : user_pref("CommunityToolbar.globalUserId", "caa40ec0-2369-497d-bf2f-bdb796186115");
Trovata : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Trovata : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Trovata : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2776682");
Trovata : user_pref("ConduitEngine.AppTrackingLastCheckTime", "Wed Feb 06 2013 17:32:58 GMT+0100 (ora solare E[...]
Trovata : user_pref("ConduitEngine.DialogsGetterLastCheckTime", "Sun Sep 11 2011 16:52:33 GMT+0200 (ora legale[...]
Trovata : user_pref("ConduitEngine.FirstServerDate", "error: Insufficient resources to perform operation.");
Trovata : user_pref("ConduitEngine.FirstTime", true);
Trovata : user_pref("ConduitEngine.FirstTimeFF3", true);
Trovata : user_pref("ConduitEngine.HasUserGlobalKeys", true);
Trovata : user_pref("ConduitEngine.Initialize", true);
Trovata : user_pref("ConduitEngine.InitializeCommonPrefs", true);
Trovata : user_pref("ConduitEngine.InstalledDate", "Mon Sep 05 2011 15:26:41 GMT+0200 (ora legale Europa occid[...]
Trovata : user_pref("ConduitEngine.IsMulticommunity", false);
Trovata : user_pref("ConduitEngine.IsOpenThankYouPage", false);
Trovata : user_pref("ConduitEngine.IsOpenUninstallPage", true);
Trovata : user_pref("ConduitEngine.LanguagePackLastCheckTime", "Sun Sep 11 2011 16:52:34 GMT+0200 (ora legale [...]
Trovata : user_pref("ConduitEngine.LastLogin_3.3.3.2", "Sun Sep 11 2011 16:52:35 GMT+0200 (ora legale Europa o[...]
Trovata : user_pref("ConduitEngine.PublisherContainerWidth", 0);
Trovata : user_pref("ConduitEngine.SearchFromAddressBarIsInit", true);
Trovata : user_pref("ConduitEngine.SettingsLastCheckTime", "Sun Sep 11 2011 16:52:33 GMT+0200 (ora legale Euro[...]
Trovata : user_pref("ConduitEngine.UserID", "UN42282564843955495");
Trovata : user_pref("ConduitEngine.engineLocale", "it");
Trovata : user_pref("ConduitEngine.enngineContextMenuLastCheckTime", "Sun Sep 11 2011 16:52:33 GMT+0200 (ora l[...]
Trovata : user_pref("ConduitEngine.globalFirstTimeInfoLastCheckTime", "Sun Sep 11 2011 16:52:36 GMT+0200 (ora [...]
Trovata : user_pref("ConduitEngine.initDone", true);
Trovata : user_pref("ConduitEngine.isAppTrackingManagerOn", true);
Trovata : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Trovata : user_pref("browser.search.defaultthis.engineName", "BrotherSoft Extreme Customized Web Search");
Trovata : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2776682&Sea[...]
Trovata : user_pref("extensions.BabylonToolbar.admin", false);
Trovata : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
Trovata : user_pref("extensions.BabylonToolbar.bbDpng", 6);
Trovata : user_pref("extensions.BabylonToolbar.dfltSrch", false);
Trovata : user_pref("extensions.BabylonToolbar.excTlbr", false);
Trovata : user_pref("extensions.BabylonToolbar.firstRun", false);
Trovata : user_pref("extensions.BabylonToolbar.lastActv", "6");
Trovata : user_pref("extensions.BabylonToolbar.lastDP", 6);
Trovata : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
Trovata : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Trovata : user_pref("extensions.BabylonToolbar.propectorlck", 98728363);
Trovata : user_pref("extensions.BabylonToolbar.smplGrp", "free");
Trovata : user_pref("extensions.Softonic.admin", false);
Trovata : user_pref("extensions.Softonic.aflt", "SD");
Trovata : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
Trovata : user_pref("extensions.Softonic.autoRvrt", "false");
Trovata : user_pref("extensions.Softonic.dfltLng", "");
Trovata : user_pref("extensions.Softonic.dfltSrch", true);
Trovata : user_pref("extensions.Softonic.excTlbr", false);
Trovata : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=13&[...]
Trovata : user_pref("extensions.Softonic.hpOld0", "hxxp://mystart.incredibar.com/mb165?a=6OyEVFts3p&i=26");
Trovata : user_pref("extensions.Softonic.id", "089190770000000000000011099fce36");
Trovata : user_pref("extensions.Softonic.instlDay", "15742");
Trovata : user_pref("extensions.Softonic.instlRef", "MOY00010");
Trovata : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=2&cc[...]
Trovata : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource=1[...]
Trovata : user_pref("extensions.Softonic.prdct", "Softonic");
Trovata : user_pref("extensions.Softonic.prtnrId", "softonic");
Trovata : user_pref("extensions.Softonic.rvrt", "true");
Trovata : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
Trovata : user_pref("extensions.Softonic.tlbrId", "BASEirobinhoodActive");
Trovata : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/MOY00010/tb_v1?SearchSource[...]
Trovata : user_pref("extensions.Softonic.vrsn", "1.8.8.11");
Trovata : user_pref("extensions.Softonic.vrsni", "1.8.8.11");
Trovata : user_pref("extensions.Softonic_i.dnsErr", true);
Trovata : user_pref("extensions.Softonic_i.excTlbr", false);
Trovata : user_pref("extensions.Softonic_i.hmpg", true);
Trovata : user_pref("extensions.Softonic_i.newTab", true);
Trovata : user_pref("extensions.Softonic_i.smplGrp", "none");
Trovata : user_pref("extensions.Softonic_i.vrsnTs", "1.8.8.1117:32:09");
Trovata : user_pref("extensions.incredibar.admin", false);
Trovata : user_pref("extensions.incredibar.aflt", "orgnl");
Trovata : user_pref("extensions.incredibar.cntry", "IT");
Trovata : user_pref("extensions.incredibar.dfltLng", "");
Trovata : user_pref("extensions.incredibar.dfltSrch", false);
Trovata : user_pref("extensions.incredibar.did", "10665");
Trovata : user_pref("extensions.incredibar.excTlbr", false);
Trovata : user_pref("extensions.incredibar.hdrMd5", "B1B968E6E73E2700E402DCA00795238C");
Trovata : user_pref("extensions.incredibar.hmpg", false);
Trovata : user_pref("extensions.incredibar.id", "089190770000000000000011099fce36");
Trovata : user_pref("extensions.incredibar.installerproductid", "26");
Trovata : user_pref("extensions.incredibar.instlDay", "15505");
Trovata : user_pref("extensions.incredibar.instlRef", "");
Trovata : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1415:55:19");
Trovata : user_pref("extensions.incredibar.newTab", false);
Trovata : user_pref("extensions.incredibar.noFFXTlbr", false);
Trovata : user_pref("extensions.incredibar.ppd", "");
Trovata : user_pref("extensions.incredibar.prdct", "incredibar");
Trovata : user_pref("extensions.incredibar.productid", "26");
Trovata : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Trovata : user_pref("extensions.incredibar.sg", "none");
Trovata : user_pref("extensions.incredibar.smplGrp", "none");
Trovata : user_pref("extensions.incredibar.tlbrId", "base");
Trovata : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyEVFts3p&loc=IB_T[...]
Trovata : user_pref("extensions.incredibar.upn2", "6OyEVFts3p");
Trovata : user_pref("extensions.incredibar.upn2n", "92261584295281099");
Trovata : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Trovata : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1415:55:19");
Trovata : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Trovata : user_pref("extensions.incredibar_i.aflt", "orgnl");
Trovata : user_pref("extensions.incredibar_i.dfltLng", "");
Trovata : user_pref("extensions.incredibar_i.did", "10665");
Trovata : user_pref("extensions.incredibar_i.excTlbr", false);
Trovata : user_pref("extensions.incredibar_i.id", "089190770000000000000011099fce36");
Trovata : user_pref("extensions.incredibar_i.installerproductid", "26");
Trovata : user_pref("extensions.incredibar_i.instlDay", "15505");
Trovata : user_pref("extensions.incredibar_i.instlRef", "");
Trovata : user_pref("extensions.incredibar_i.ms_url_id", "");
Trovata : user_pref("extensions.incredibar_i.newTab", false);
Trovata : user_pref("extensions.incredibar_i.ppd", "");
Trovata : user_pref("extensions.incredibar_i.prdct", "incredibar");
Trovata : user_pref("extensions.incredibar_i.productid", "26");
Trovata : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Trovata : user_pref("extensions.incredibar_i.smplGrp", "none");
Trovata : user_pref("extensions.incredibar_i.tlbrId", "base");
Trovata : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6OyEVFts3p&loc=IB[...]
Trovata : user_pref("extensions.incredibar_i.upn2", "6OyEVFts3p");
Trovata : user_pref("extensions.incredibar_i.upn2n", "92261584295281099");
Trovata : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Trovata : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1415:55:19");
Trovata : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
Trovata : user_pref("extensions.newAddons", "{336D0C35-8A85-403a-B9D2-65C292C39087},{C9B68337-E93A-44EA-94DC-C[...]
Trovata : user_pref("browser.startup.homepage", "hxxp://www2.delta-search.com/?affID=119370&babsrc=HP_ss&mntrI[...]
Trovata : user_pref("browser.search.selectedEngine", "Delta Search");

-\\ Google Chrome v26.0.1410.64

File : C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Preferences

Trovata [l.80] : icon_url = "hxxp://www.delta-search.com/favicon.ico",
Trovata [l.83] : keyword = "delta-search.com",
Trovata [l.87] : search_url = "hxxp://www2.delta-search.com/?q={searchTerms}&affID=119370&babsrc=SP_ss&mntrId=08910011099FCE36",

*************************

AdwCleaner[R1].txt - [49135 octets] - [29/04/2013 17:13:13]
AdwCleaner[R2].txt - [49038 octets] - [29/04/2013 17:14:40]
AdwCleaner[S1].txt - [394 octets] - [29/04/2013 17:13:46]

########## EOF - C:\AdwCleaner[R2].txt - [49158 octets] ##########
bonpi
Inviato: Monday, April 29, 2013 5:39:03 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Questo è il post di hijackthis mentre adware ho eliminato come ha detto ccbusto ma qua cosa elimino? Comunque la prima cosa che ho fatto oggi è rilanciare Malwarebites, HO trovato ed eliminato ben 16 minacce. poi ho lanciato ed eliminato ADW, la situazione dopo il riavvio del computer è di molto migliorata, sembra normale ora non so cosa eliminare di questa roba.
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17.33.18, on 29/04/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.17128)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Microsoft Security Client\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\SUPERAntiSpyware\SASCORE.EXE
C:\Programmi\Java\jre7\bin\jqs.exe
C:\Programmi\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\devldr32.exe
C:\Programmi\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Programmi\VIA\RAID\vialogsv.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Programmi\Raxco\PerfectDisk\PDEngine.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
D:\Documenti - Piero\Downloads\SoftonicDownloader_per_hijackthis.exe
C:\Documents and Settings\Piero\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://it.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://it.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = ${SEARCH_URL_IE7}
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users.WINDOWS\Dati applicazioni\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Programmi\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar.dll
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://D:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Scarica con Mipony - file://C:\Programmi\MiPony\Browser\IEContext.htm
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Programmi\SUPERAntiSpyware\SASCORE.EXE
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Servizio di Google Update (gupdate1c9aa576ebba43c) (gupdate1c9aa576ebba43c) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Programmi\Java\jre7\bin\jqs.exe
O23 - Service: LiveUpSC - SoftwareUpdService - C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Programmi\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Programmi\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ssupd Service (SsupdService) - SsupdService - C:\Documents and Settings\Piero\Impostazioni locali\Dati applicazioni\ssupd\ssupd.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Programmi\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: VRAID Log Service - Unknown owner - C:\Programmi\VIA\RAID\vialogsv.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Piero/IMPOST~1/Temp/msohtml1/01/clip_image001.jpg

--
End of file - 7491 bytes
bonpi
Inviato: Monday, April 29, 2013 5:40:16 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
quali sono i file maligni? Grazie anticipate a ccbusto e a miticoalex
cbbusto
Inviato: Monday, April 29, 2013 11:15:58 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
bonpi ha scritto:
quali sono i file maligni? Grazie anticipate a ccbusto e a miticoalex


Eccomi, certo che ne avevi di porcherie nel pc, ADW ha fatto veramente una bella pulizia, ti eri beccato pure Spigot un brutto virus dirottatore e molte toolbar, mi domando come riuscisse a funzionare il pc ?????
Primo consiglio, evita di scaricare qualsiasi software da Softonic in particolare non usare SoftonicDownloader, che invece hai usato per scaricare HJT, ti beccherai solo spazzatura.

Nel log di HJT ci sono dei servizi da disabilitare, sono dei rimasugli, il resto è a posto.

Vai in Pannello di Controllo>Strumenti di Amministrazione>Servizi, cerca queste voci:
LiveUpSC - SoftwareUpdService
Ssupd Service (SsupdService)

una volta trovate fai doppio clic su ognuna e poi nella pagina seguente in Tipo di Avvio metti Disabilitato, ok esci e riavvia.

Ora facciamo un pò di pulizie.
Installa Ccleaner QUI clic su Pulizia, analizza e poi Avvia pulizia, poi clicca su Registro spunta tutte le voci poi clic su trova problemi, quindi clic su ripara selezionati, acconsenti al backup quando richiesto, sempre in Ccleaner vai in Strumenti>Ripristino Sistema seleziona tutte le voci, rimane l'ultima che non è selezionabile e rimane, poi clic su rimuovi, ok esci.
Poi vai in C:\windows cerca la cartella Prefetch aprila ed elimina tutto il contenuto, non eliminare la cartella.
Dovresti essere a posto, fammi sapere come va il pc, yontoo è sparito ? Ciao


bonpi
Inviato: Wednesday, May 01, 2013 5:51:54 PM

Rank: AiutAmico

Iscritto dal : 11/25/2009
Posts: 145
Evviva problema risolto yontoo è stato disinstallato. Grazie cbbusto e Miticoalex siete MITICI!!!!! CIAO e di nuovo grazie.
Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.