Come eliminare Babylon dal motore di ricerca iniziale - Sicurezza VIRUS

Benvenuto Ospite

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Come eliminare Babylon dal motore di ricerca iniziale

Come eliminare Babylon dal motore di ricerca iniziale

Opzioni

Topic Precedente · Topic Sucessivo

Erik71

Inviato: Monday, November 19, 2012 1:51:54 AM

Rank: AiutAmico

Iscritto dal : 12/21/2002
Posts: 63

Principalmente ultilizzo firefox dai ieri quando apro la pagina come motore di ricerca invece di goggle mi appare quello di Babylon Ho provato a segure diverse guide che ho trovato su google, inoltre ho provato a disinstallarlo facendo about:config su firefox andando in Keyword.url eliminando tutto quello che c'era su babylon. Ma non è servito a niente appena riavvio firefox torna a comparire babylon. Cosa posso fare ? Grazie

Torna in alto

Sponsor

Inviato: Monday, November 19, 2012 1:51:54 AM

Torna in alto

shapiro

Inviato: Monday, November 19, 2012 9:18:27 AM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164

fai queste scansioni per risolvere

scarica adwcleaner usa solo l'opzione delete e allega il log ottenuto

Scarica OTL e salvalo sul desktop

Metti la spunta su SCAN ALL USERS.

Sotto output, metti la spunta su minimal output

Clicca sulla freccettina di File Age e seleziona 60 Days

Metti la spunta a LOP Check e Purity Check.

Clicca su RUN SCAN

Lascia fare la scansione senza interferire.

Al termine della scansione trovi 2 log sul desktop. OTL.txt ed Extras.txt, salvali e caricali su Wikisend,

Torna in alto

Erik71

Inviato: Thursday, November 29, 2012 8:21:31 PM

Rank: AiutAmico

Iscritto dal : 12/21/2002
Posts: 63

shapiro ha scritto:

questo è il log di adwcleaner

# AdwCleaner v2.009 - Logfile creato il 29/11/2012 alle 20:11:31
# Aggiornamento 24/11/2012 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : USER - USER-1F8A550C92
# Modalità Avvio : Modalità Normale
# Eseguito da : C:\Documents and Settings\USER\Desktop\adwcleaner.exe
# Opzioni [Elimina]

***** [Servizi] *****

Fermato & Eliminato : Browser Manager

***** [File / Cartelle] *****

Cartella Eliminato : C:\DOCUME~1\USER\IMPOST~1\Temp\Iminent
Cartella Eliminato : C:\Documents and Settings\All Users\Dati applicazioni\AVG Secure Search
Cartella Eliminato : C:\Documents and Settings\All Users\Dati applicazioni\Babylon
Cartella Eliminato : C:\Documents and Settings\USER\Dati applicazioni\AVG Secure Search
Cartella Eliminato : C:\Documents and Settings\USER\Dati applicazioni\Babylon
Cartella Eliminato : C:\Documents and Settings\USER\Dati applicazioni\OfferBox
Cartella Eliminato : C:\Documents and Settings\USER\Dati applicazioni\PriceGong
Cartella Eliminato : C:\Documents and Settings\USER\Dati applicazioni\Toolbar4
Cartella Eliminato : C:\Documents and Settings\USER\Menu Avvio\Programmi\Browser Manager
Cartella Eliminato : C:\Programmi\AVG Secure Search
Cartella Eliminato : C:\Programmi\Conduit
Cartella Eliminato : C:\Programmi\DealPly
Cartella Eliminato : C:\Programmi\DVDVideoSoftTB
Cartella Eliminato : C:\Programmi\Hotspot_Shield
Cartella Eliminato : C:\Programmi\IMinent toolbar
Eliminato al riavvio : C:\Documents and Settings\All Users\Dati applicazioni\Browser Manager
Eliminato al riavvio : C:\Programmi\File comuni\AVG Secure Search
File Eliminato : C:\Documents and Settings\All Users\Menu Avvio\Programmi\Esecuzione automatica\Offerbox.lnk
File Eliminato : C:\Programmi\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Eliminato : C:\Programmi\Mozilla Firefox\searchplugins\babylon.xml
File Eliminato : C:\user.js
File Eliminato : C:\WINDOWS\system32\conduitEngine.tmp
File Eliminato : C:\WINDOWS\Tasks\OfferBoxUpdate.job

***** [Registro] *****

Chiave Eliminata : HKCU\Software\AVG Secure Search
Chiave Eliminata : HKCU\Software\Conduit
Chiave Eliminata : HKCU\Software\Cr_Installer
Chiave Eliminata : HKCU\Software\DataMngr
Chiave Eliminata : HKCU\Software\DataMngr_Toolbar
Chiave Eliminata : HKCU\Software\DealPly
Chiave Eliminata : HKCU\Software\DVDVideoSoftTB
Chiave Eliminata : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Chiave Eliminata : HKCU\Software\Hotspot_Shield
Chiave Eliminata : HKCU\Software\IGearSettings
Chiave Eliminata : HKCU\Software\Iminent
Chiave Eliminata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chiave Eliminata : HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\7EE743314C844C7F445B8B1D7617612DF1FDD50F
Chiave Eliminata : HKCU\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates\E6A6A4A475FCE37F8B5AC2F1244DEB2BFCA5615A
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4CB64075-23F1-4C4A-A74F-5F0617B4D95E}
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Chiave Eliminata : HKCU\Software\Offerbox
Chiave Eliminata : HKCU\Software\PriceGong
Chiave Eliminata : HKCU\Software\SmartBar
Chiave Eliminata : HKCU\Software\Softonic
Chiave Eliminata : HKCU\Software\TBSB01620
Chiave Eliminata : HKCU\Toolbar
Chiave Eliminata : HKLM\Software\AVG Secure Search
Chiave Eliminata : HKLM\Software\Babylon
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{1973277F-87B0-4EA3-9ED2-470A91D284CF}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\Iminent.WebBooster.InternetExplorer.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Chiave Eliminata : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Chiave Eliminata : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{4CB64075-23F1-4C4A-A74F-5F0617B4D95E}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Conduit.Engine
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.DownloadArgs
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.LinkToPromoteArgs
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.RawDataArgs
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.TinyUrlArgs
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Business.Tinyfying.ViralLinkArgs
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ClientCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ContractBase
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GameOverCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetCreditCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.GetVariableResult
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.InstallationContextResult
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.LogoutCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.MyAccountCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PlayContentCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.PostContentCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.SetVariableCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WarmUpCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.WelcomeCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerCommand
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.ServerResult
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightContent
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.LightUri
Chiave Eliminata : HKLM\SOFTWARE\Classes\Iminent.Mediator.MediatorServiceProxy
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandle.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.ActiveContentHandler
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.BrowserHelperObject.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.ScriptExtender.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler
Chiave Eliminata : HKLM\SOFTWARE\Classes\IminentWebBooster.TinyUrlHandler.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Prod.cap
Chiave Eliminata : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol
Chiave Eliminata : HKLM\SOFTWARE\Classes\S
Chiave Eliminata : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Chiave Eliminata : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\Toolbar.CT2269050
Chiave Eliminata : HKLM\SOFTWARE\Classes\Toolbar.CT2530241
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Chiave Eliminata : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Chiave Eliminata : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Chiave Eliminata : HKLM\Software\Conduit
Chiave Eliminata : HKLM\Software\DataMngr
Chiave Eliminata : HKLM\Software\DealPly
Chiave Eliminata : HKLM\Software\DVDVideoSoftTB
Chiave Eliminata : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Chiave Eliminata : HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
Chiave Eliminata : HKLM\SOFTWARE\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Chiave Eliminata : HKLM\Software\Hotspot_Shield
Chiave Eliminata : HKLM\Software\Iminent
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0AF350D9-3916-454B-AC53-0B0B65F41301}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{40DC5A6F-7269-4496-A072-F5A66E7F9C93}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E2013E1C-3063-451C-8997-DA3AD67D0225}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{E55E7026-EF2A-4A17-AAA7-DB98EA3FD1B1}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DealPly
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\DVDVideoSoftTB Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\I Want This
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBoosterARP
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4CB64075-23F1-4C4A-A74F-5F0617B4D95E}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A6E71E28-43CB-423E-B415-B7C00D77902E}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Chiave Eliminata : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Chiave Eliminata : HKLM\Software\Offerbox
Chiave Eliminata : HKU\S-1-5-21-602162358-725345543-682003330-1004\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Dato Eliminata : HKLM\..\Windows [AppInit_DLLs] = c:\docume~1\alluse~1\datiap~1\browse~1\23796~1.11\{16cdf~1\browse~1.dll
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Valore Eliminata : HKCU\Software\Mozilla\Firefox\Extensions [{b64982b1-d112-42b5-b1e4-d3867c4533f8}]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow [*.crossrider.com]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [Iminent]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [IminentMessenger]
Valore Eliminata : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]

***** [Browser Internet] *****

-\\ Internet Explorer v8.0.6001.18702

Sostituito : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.babylon.com/?affID=110183&tt=4612_6&babsrc=HP_ss&mntrId=842b9023000000000000001320b76efc --> hxxp://www.google.com
Eliminata : [HKCU\Software\Microsoft\Internet Explorer\Main - Backup.Old.Start Page]
Sostituito : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=110183&tt=4612_6&babsrc=NT_ss&mntrId=842b9023000000000000001320b76efc --> hxxp://www.google.com
Sostituito : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://searchya.com/?s=0&chnl=tst-214&cd=2XzutAtN2Y1L1QzutDtDtCyBtAyB0BzzzztCzyyDzytDtBtAtN0D0TzutBtDtCtBtDyDtDtA&cr=145499784 --> hxxp://www.google.com

*************************

AdwCleaner[S1].txt - [16810 octets] - [29/11/2012 20:11:31]

########## EOF - C:\AdwCleaner[S1].txt - [16871 octets] ##########

Torna in alto

Erik71

Inviato: Thursday, November 29, 2012 8:54:48 PM

Rank: AiutAmico

Iscritto dal : 12/21/2002
Posts: 63

shapiro ha scritto:

Io ho appena salvato i 2 log su wikisend, adesso cosa debbo fare ?

Torna in alto

Erik71

Inviato: Thursday, November 29, 2012 8:57:14 PM

Rank: AiutAmico

Iscritto dal : 12/21/2002
Posts: 63

Erik71 ha scritto:

shapiro ha scritto:

Babylon sembra essere scomparso, io ho appena salvato i 2 log su wikisend, adesso cosa debbo fare ? Grazie di tutto

Torna in alto

r16

Inviato: Thursday, November 29, 2012 8:58:26 PM

Rank: AiutAmico

Iscritto dal : 8/7/2007
Posts: 11,016

Ciao Erik71.
Non serve quotare le risposte.

Se non sai postarli con Wikisend, fai così:

Collegati ad internet e vai alla pagina WikiSend: http://www.wikisend.com/
Clicca sul bottone "Sfoglia"
Seleziona il file appena salvato
Clicca su Upload file
Dopo qualche secondo, vieni spostato su una nuova pagina con il link in diversi formati:
Download Link / Forum Link
Seleziona Forum Link, copialo e incollalo in un nuovo messaggio per il forum.

Torna in alto

housex

Inviato: Friday, November 30, 2012 8:00:01 PM

Rank: Newbie

Iscritto dal : 10/19/2010
Posts: 8

Ringrazio tutti gli amici del forum... leggendo i vostri consigli mi sono sempre trovato bene. Anche questa volta mi siete stati di aiuto risolvendomi un problema con claro serch invece di babylon..... Non riuscivo a non scrivere questo post per ringraziarvi !!!!!!

Daniele

Torna in alto

Erik71

Inviato: Saturday, December 01, 2012 1:18:18 AM

Rank: AiutAmico

Iscritto dal : 12/21/2002
Posts: 63

File otl.txt

OTL.Txt

File Extras.txt

Extras.Txt

Torna in alto

shapiro

Inviato: Saturday, December 01, 2012 10:44:26 AM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164

apri otl e copia nel box bianco questo codice

Code:

:OTL
SRV - (vToolbarUpdater13.2.0) -- C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\13.2.0\ToolbarUpdater.exe File not found
SRV - (ICM_UpdaterService) -- C:\Programmi\SAMSUNG\Samsung Networking Wizard\ICM_Service.exe File not found
SRV - (HssTrayService) -- C:\Programmi\Hotspot Shield\bin\HssTrayService.EXE File not found
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (ACDaemon) -- C:\Programmi\File comuni\ArcSoft\Connection Service\Bin\ACService.exe File not found
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (GMSIPCI) -- D:\INSTALL\GMSIPCI.SYS File not found
DRV - (Changer) -- File not found
DRV - (Avgfwdx) -- system32\DRIVERS\avgfwdx.sys File not found
IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://searchya.com/?q={searchTerms}&s=1&chnl=tst-214&cd=2XzutAtN2Y1L1QzutDtDtCyBtAyB0BzzzztCzyyDzytDtBtAtN0D0TzutBtDtCtBtDyDtDtA&cr=145499784
IE - HKLM\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = http://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
IE - HKU\S-1-5-21-602162358-725345543-682003330-1004\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = http://search.babylon.com/?affID=110183&tt=4612_6&babsrc=HP_ss&mntrId=842b9023000000000000001320b76efc
IE - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\SearchScopes,Backup.Old.DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\SearchScopes\{2DD9B133-9475-2290-7263-3A952309DE8C}: "URL" = http://search.babylon.com/?q={searchTerms}&affID=110819&babsrc=SP_ss&mntrId=842b9023000000000000001320b76efc
IE - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
[2012/05/08 20.24.52 | 000,000,000 | ---D | M] ("I Want This") -- C:\Documents and Settings\USER\Dati applicazioni\Mozilla\Firefox\Profiles\0vzzpmya.default\extensions\crossriderapp2258@crossrider(2).com
[2012/05/03 19.01.48 | 000,000,000 | ---D | M] (searchya.com) -- C:\Documents and Settings\USER\Dati applicazioni\Mozilla\Firefox\Profiles\0vzzpmya.default\extensions\ffxtlbr@searchya.com
[2008/09/19 23.59.19 | 000,000,273 | ---- | M] () -- C:\Documents and Settings\USER\Dati applicazioni\Mozilla\Firefox\Profiles\0vzzpmya.default\searchplugins\search.xml
[2012/05/03 19.00.27 | 000,005,421 | ---- | M] () -- C:\Documents and Settings\USER\Dati applicazioni\Mozilla\Firefox\Profiles\0vzzpmya.default\searchplugins\Searchya! Web Search.xml
CHR - homepage: http://search.babylon.com/?affID=110183&tt=4612_6&babsrc=HP_ss&mntrId=842b9023000000000000001320b76efc
CHR - homepage: http://search.babylon.com/?affID=110183&tt=4612_6&babsrc=HP_ss&mntrId=842b9023000000000000001320b76efc
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Programmi\AVG\AVG2012\avgssie.dll File not found
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll File not found
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Programmi\Iminent\Iminent.WebBooster.InternetExplorer.dll File not found
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Programmi\DealPly\DealPlyIE.dll File not found
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG Secure Search\13.2.0.5\AVG Secure Search_toolbar.dll File not found
O3 - HKLM\..\Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - No CLSID value found.
O3 - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\Toolbar\ShellBrowser: (no name) - {C95A4E8E-816D-4655-8C79-D736DA1ADB6D} - No CLSID value found.
O3 - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O3 - HKU\S-1-5-21-602162358-725345543-682003330-1004\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O4 - HKLM..\Run: [HF_G_Jul] "C:\Programmi\AVG Secure Search\HF_G_Jul.exe" /DoAction File not found
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [ROC_ROC_JULY_P1] "C:\Programmi\AVG Secure Search\ROC_ROC_JULY_P1.exe" / /PROMPT /CMPID=ROC_JULY_P1 File not found
O4 - HKLM..\Run: [ROC_roc_ssl_v12] "C:\Programmi\AVG Secure Search\ROC_roc_ssl_v12.exe" / /PROMPT /CMPID=roc_ssl_v12 File not found
O4 - HKLM..\Run: [vProt] "C:\Programmi\AVG Secure Search\vprot.exe" File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programmi\AVG\AVG2012\avgpp.dll File not found
O20 - AppInit_DLLs: (c:\docume~1\alluse~1\datiap~1\browse~1\23796~1.11\{16cdf~1\browse~1.dll) - c:\Documents and Settings\All Users\Dati applicazioni\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.dll ()

:Files
C:\WINDOWS\imsins.BAK
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\opxihp_nav.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\opxihp.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\opxihp_navps.dat
C:\Documents and Settings\USER\Dati applicazioni\mainhst.zgh
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\aicma_nav.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\aicma.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\aicma_navps.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\gukkcyg_nav.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\gukkcyg.dat
C:\Documents and Settings\USER\Impostazioni locali\Dati applicazioni\gukkcyg_navps.dat
ipconfig /flushdns /c

:commands
[purity]
[Reboot]

clicca su run fix e allega il log che rilascia

fai anche questa scansione

Scarica Combofix
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
(non installare la recovery console)
Lascia lavorare il programma senza interferire
Allega il rapporto C:\ComboFix.txt nella tua risposta.

Torna in alto

Utenti presenti in questo topic

Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » Come eliminare Babylon dal motore di ricerca iniziale

Salta al Forum

Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Invia topic via Email

RSS Feed

Watch this topic

Stampa topic

Normale

Threaded