Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » non riesco a liberarmi di DELTA

non riesco a liberarmi di DELTA Opzioni
Topic Precedente · Topic Sucessivo
laura_rita
Inviato: Monday, March 25, 2013 11:40:11 AM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
Buongiorno. Questa mattina dopo aver cercato d'installare un programma di conversione video, NOD mi ha avvertito di una minaccia potenziale (W32 mi pare), ho interrotto l'installazione ma da quel momento pur avendo Chrome come browser predefinito mi si apre un fantomatico delta search, ho tentato di pulire con Malware bytes ma non me lo trova (è vero che per ora ho fatto la scansione veloce).
Il mio Win è XP, l'antivirus NOD.
Conoscete delta? E' un malware? Grazie per l'aiuto che potrete darmi.
Torna in alto
 
Sponsor
Inviato: Monday, March 25, 2013 11:40:11 AM

 
Torna in alto
 
cbbusto
Inviato: Monday, March 25, 2013 12:09:09 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Delta search è un virus che ti dirotta verso siti malevoli, può anche sostituire la pagina iniziale del tuo browser.
Se usi Chrome fai così:
Apri Google Chrome, fai clic sull’icona Wench, vai su impostazioni e scegli ‘Gestisci motori di ricerca’. Cambia il motore di ricerca e metti il tuo preferito, es. google o altri ed elimina Delta.

Poi fai questa scansione:
Scarica Adwcleaner sul desktop:
http://general-changelog-team.fr/en/downloads/finish/20-outils-de-xplode/2-adwcleaner
Avvialo e clicca sul pulsante "Elimina". Importante cliccare su elimina e non su Cerca:
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà, e uscirà il log con le eliminazioni.
Postalo qui.

Poi fai una scansione con Hijack This QUI attendi qualche secondo e appare la finestra di Salva il sw. Se non conosci il programma una volta scaricato clicchi sull'eseguibile HijackThis.exe, (non richiede installazione), nella finestra che compare clicca sul primo pulsante Do a systemscan and save a logfile. farà la scansione automatica e ci presenterà la lista con il Blocco Note di Windows questo è il LOG lo copi tutto e poi lo incolli quì per la verifica. Ciao
Torna in alto
 
laura_rita
Inviato: Monday, March 25, 2013 12:29:34 PM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
Prima di tutto: grazie.
Il primo è il log di Adwcleaner, il secondo di Hijack.

# AdwCleaner v2.115 - Logfile creato il 25/03/2013 alle 12:17:30
# Aggiornamento 17/03/2013 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : Laura - X58M
# Modalità Avvio : Modalità Normale
# Eseguito da : D:\Documenti\Downloads\adwcleaner.exe
# Opzioni [Elimina]


***** [Servizi] *****

Fermato & Eliminato : WajamUpdater

***** [File / Cartelle] *****

Cartella Eliminato : C:\Documents and Settings\All Users\Dati applicazioni\Babylon
Cartella Eliminato : C:\Documents and Settings\All Users\Dati applicazioni\Trymedia
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\BabSolution
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Babylon
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Delta
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\iWin
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\Conduit
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\ConduitCommon
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\CT2863002
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\extensions\{9d1a02c3-7d31-4c4f-ba7e-ccf1cafa1bf5}
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\extensions\ffxtlbr@babylon.com
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\extensions\ffxtlbr@delta.com
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\extensions\staged
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\FCTB
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\pdfforge
Cartella Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\PriceGong
Cartella Eliminato : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Conduit
Cartella Eliminato : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Softonic_Italia
Cartella Eliminato : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Wajam
Cartella Eliminato : C:\Documents and Settings\Laura\Menu Avvio\Programmi\Wajam
Cartella Eliminato : C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Softonic_Italia
Cartella Eliminato : C:\Programmi\Conduit
Cartella Eliminato : C:\Programmi\Delta
Cartella Eliminato : C:\Programmi\Softonic_Italia
Cartella Eliminato : C:\Programmi\Wajam
Eliminato al riavvio : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Eliminato al riavvio : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
File Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\extensions\HelperFramework@ZoneMedia.com.xpi
File Eliminato : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\searchplugins\delta.xml
File Eliminato : C:\Programmi\Mozilla Firefox\searchplugins\babylon.xml
File Eliminato : C:\WINDOWS\system32\conduitEngine.tmp

***** [Registro] *****

Chiave Eliminata : HKCU\Software\BabylonToolbar
Chiave Eliminata : HKCU\Software\Conduit
Chiave Eliminata : HKCU\Software\Delta
Chiave Eliminata : HKCU\Software\InstallCore
Chiave Eliminata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1FAD373C-72D3-4B01-9CDE-6608A5111DF2}
Chiave Eliminata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}
Chiave Eliminata : HKCU\Software\PriceGong
Chiave Eliminata : HKCU\Software\SmartBar
Chiave Eliminata : HKCU\Software\Softonic
Chiave Eliminata : HKCU\Software\Softonic_Italia
Chiave Eliminata : HKCU\Software\Wajam
Chiave Eliminata : HKCU\Toolbar
Chiave Eliminata : HKLM\Software\Babylon
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{1FAEE6D5-34F4-42AA-8025-3FD8F3EC4634}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Chiave Eliminata : HKLM\SOFTWARE\Classes\AppID\priam_bho.DLL
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{1FAD373C-72D3-4B01-9CDE-6608A5111DF2}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{5D64294B-1341-4FE7-B6D8-7C36828D4DD5}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chiave Eliminata : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Conduit.Engine
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltaappCore
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Chiave Eliminata : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\escort.escortIEPane
Chiave Eliminata : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Chiave Eliminata : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
Chiave Eliminata : HKLM\SOFTWARE\Classes\Prod.cap
Chiave Eliminata : HKLM\SOFTWARE\Classes\Toolbar.CT2863002
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{095BFD3C-4602-4FE1-96F1-AEFAFBFD067D}
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chiave Eliminata : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chiave Eliminata : HKLM\SOFTWARE\Classes\wajam.WajamBHO
Chiave Eliminata : HKLM\SOFTWARE\Classes\wajam.WajamBHO.1
Chiave Eliminata : HKLM\SOFTWARE\Classes\wajam.WajamDownloader
Chiave Eliminata : HKLM\SOFTWARE\Classes\wajam.WajamDownloader.1
Chiave Eliminata : HKLM\Software\Conduit
Chiave Eliminata : HKLM\Software\Delta
Chiave Eliminata : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Chiave Eliminata : HKLM\SOFTWARE\Google\Chrome\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22793A79-F213-45E4-A4BD-438DC1C9D713}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A61B2B94-7AFF-4221-9E1D-871AB9D08944}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\conduitEngine
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Delta Chrome Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Softonic_Italia Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1FAD373C-72D3-4B01-9CDE-6608A5111DF2}
Chiave Eliminata : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\01ff7b26c3ff8b81909c44e2f0704d77
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0302ed845e5aa4e85eb6d0f47d1397fa
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\0cb573ac9d20a1e26cd1ffb281aab42c
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\189713699e284281a86cf229aedfbba4
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\19de9ac64adcc05347e40b5ac7cee8c9
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\26395454a036373d19bd0a54b446c5f2
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2b2cb49485f991d5543ce214c5ff0d63
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2d1229c55cc3147c6ab80e9c0fb52509
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3a3f148dc96dfe84db070c37e62ac6c7
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\3fe42092a6578b028a4a991bed2fd644
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\4a4a62251d57bb7edd7f596d00e97cd9
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\4c7fbeadedc610bf8207aecc3a88c77c
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\4d51be00a3f5f55463f85c6b97f3e880
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\501a42e9b05ea83123c6ecdc4aaaeba9
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5a9d9aac1b2560be80407774ae7aabc0
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\60eeb5b4b3fb5dbad686ba563dc6fd4a
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6352fe97bed2dbce3c20e83075418239
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\6c74951ef8f04d2f4b297b161ec1885d
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7c92aebdbd7c2f15dbb062fcdfb453d9
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\81eabf2afcc40d32b510ee52c625999c
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\839ce22ee575c2c8b353d056eb22fa71
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\8bf47de721d700a2c8ff7d5e6e85ecaf
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\95ecd2149c73ccfc424e903f730bac74
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\977d3cb3abe50316e800b53906517fe1
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\97faf0686c88beddf1fbf7eceecafbc9
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9bc212697f8cdad4a3084ad83a607587
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\a10fd9088423530dd64b7891dd738614
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\aca37a71de2802bb0f65439eb50d1ead
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\b3db6473b4c489ded8d0f5538a197331
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bcea325936b84f79186ee16666048113
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bd2511e51b2ac4bdba04443213e1498b
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bd625ab80d8eea6993af94ca5ab6cc24
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bea0a6bc5477a6f44ad5b4d50d25b0fb
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bf178b5e82e7b1ae487348c263434f7d
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c1264b9aee39edfeb271a4b291063b8c
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c20c43b3e5f08e0d6afae2deffbaa9c6
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\c8d6b488827e685f17f71ea68180b45c
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d3040d1b13f7f0eeb4661c0bda835d17
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\d825a9071a09cb33378225a8b54299c0
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dc9f5015b9111fbda425250083ac11b2
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dcb5af25d18b9acf39ee4c9618624305
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\e2be6399b1ec84ec6d6cb5d9a57ce72f
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eacb174042efc612727131b1f1441f90
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ed6eab715d5b68067469c3eb580ac500
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\f1a538721eb08baecacaa27a95bba203
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Softonic_Italia Toolbar
Chiave Eliminata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam
Chiave Eliminata : HKLM\Software\Softonic_Italia
Chiave Eliminata : HKLM\Software\Wajam
Chiave Eliminata : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}]
Valore Eliminata : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}]
Valore Eliminata : HKCU\Software\Mozilla\Firefox\Extensions [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valore Eliminata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{9D1A02C3-7D31-4C4F-BA7E-CCF1CAFA1BF5}]

***** [Browser Internet] *****

-\\ Internet Explorer v8.0.6001.18702

Sostituito : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=2C9300242131FBBA --> hxxp://www.google.com

-\\ Mozilla Firefox v17.0.1 (it)

File : C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\prefs.js

C:\Documents and Settings\Laura\Dati applicazioni\Mozilla\Firefox\Profiles\bio1jmko.default\user.js ... Eliminato !

Eliminata : user_pref("CT2863002..clientLogIsEnabled", false);
Eliminata : user_pref("CT2863002..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
Eliminata : user_pref("CT2863002..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
Eliminata : user_pref("CT2863002.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Eliminata : user_pref("CT2863002.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Eliminata : user_pref("CT2863002.AppTrackingLastCheckTime", "Tue Nov 20 2012 15:17:56 GMT+0100 (ora solare Europ[...]
Eliminata : user_pref("CT2863002.BrowserCompStateIsOpen_129692696914257255", true);
Eliminata : user_pref("CT2863002.BrowserCompStateIsOpen_129780208989723292", true);
Eliminata : user_pref("CT2863002.CTID", "CT2863002");
Eliminata : user_pref("CT2863002.CurrentServerDate", "17-3-2013");
Eliminata : user_pref("CT2863002.DialogsAlignMode", "LTR");
Eliminata : user_pref("CT2863002.DialogsGetterLastCheckTime", "Sun Mar 17 2013 11:00:34 GMT+0100 (ora solare Eur[...]
Eliminata : user_pref("CT2863002.DownloadReferralCookieData", "");
Eliminata : user_pref("CT2863002.EMailNotifierPollDate", "Sun Mar 17 2013 11:25:31 GMT+0100 (ora solare Europa o[...]
Eliminata : user_pref("CT2863002.FeedLastCount129361333837107097", 817);
Eliminata : user_pref("CT2863002.FeedPollDate6950684221136826014", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684221267301652", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684221524553831", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684221590001098", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684221785237350", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684222064595900", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684222129686883", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684222201547670", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684222513881372", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684222671718962", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684223112896107", "Thu Nov 17 2011 09:01:48 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684223216229724", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684223476241864", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684223782977569", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684223899376495", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224107713633", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224160233948", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224256660610", "Thu Nov 17 2011 09:01:48 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224303045800", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224573631499", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224768320385", "Thu Nov 17 2011 09:01:46 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedPollDate6950684224786818075", "Thu Nov 17 2011 09:01:47 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.FeedTTL6950684222201547670", 2);
Eliminata : user_pref("CT2863002.FeedTTL6950684222671718962", 10);
Eliminata : user_pref("CT2863002.FeedTTL6950684223782977569", 2);
Eliminata : user_pref("CT2863002.FirstServerDate", "31-3-2011");
Eliminata : user_pref("CT2863002.FirstTime", true);
Eliminata : user_pref("CT2863002.FirstTimeFF3", true);
Eliminata : user_pref("CT2863002.FixPageNotFoundErrors", true);
Eliminata : user_pref("CT2863002.GroupingServerCheckInterval", 1440);
Eliminata : user_pref("CT2863002.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Eliminata : user_pref("CT2863002.HasUserGlobalKeys", true);
Eliminata : user_pref("CT2863002.Initialize", true);
Eliminata : user_pref("CT2863002.InitializeCommonPrefs", true);
Eliminata : user_pref("CT2863002.InstallationAndCookieDataSentCount", 3);
Eliminata : user_pref("CT2863002.InstallationId", "Softonic_Italia.exe");
Eliminata : user_pref("CT2863002.InstallationType", "ConduitIntegration");
Eliminata : user_pref("CT2863002.InstalledDate", "Thu Mar 31 2011 11:50:06 GMT+0200 (ora legale Europa occidenta[...]
Eliminata : user_pref("CT2863002.InvalidateCache", false);
Eliminata : user_pref("CT2863002.IsAlertDBUpdated", true);
Eliminata : user_pref("CT2863002.IsGrouping", false);
Eliminata : user_pref("CT2863002.IsMulticommunity", false);
Eliminata : user_pref("CT2863002.IsOpenThankYouPage", false);
Eliminata : user_pref("CT2863002.IsOpenUninstallPage", true);
Eliminata : user_pref("CT2863002.LanguagePackLastCheckTime", "Sun Mar 17 2013 11:00:33 GMT+0100 (ora solare Euro[...]
Eliminata : user_pref("CT2863002.LanguagePackReloadIntervalMM", 1440);
Eliminata : user_pref("CT2863002.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
Eliminata : user_pref("CT2863002.LastLogin_3.15.1.0", "Sun Mar 17 2013 11:00:33 GMT+0100 (ora solare Europa occi[...]
Eliminata : user_pref("CT2863002.LastLogin_3.2.5.2", "Fri Aug 12 2011 14:56:23 GMT+0200 (ora legale Europa occid[...]
Eliminata : user_pref("CT2863002.LastLogin_3.6.0.10", "Mon Oct 17 2011 11:22:55 GMT+0200 (ora legale Europa occi[...]
Eliminata : user_pref("CT2863002.LastLogin_3.8.0.8", "Sat Sep 08 2012 08:22:39 GMT+0200 (ora legale Europa occid[...]
Eliminata : user_pref("CT2863002.LatestVersion", "3.18.0.7");
Eliminata : user_pref("CT2863002.Locale", "it");
Eliminata : user_pref("CT2863002.MCDetectTooltipHeight", "83");
Eliminata : user_pref("CT2863002.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Eliminata : user_pref("CT2863002.MCDetectTooltipWidth", "295");
Eliminata : user_pref("CT2863002.MyStuffEnabledAtInstallation", true);
Eliminata : user_pref("CT2863002.RadioIsPodcast", false);
Eliminata : user_pref("CT2863002.RadioLastCheckTime", "Sun Mar 17 2013 11:00:33 GMT+0100 (ora solare Europa occi[...]
Eliminata : user_pref("CT2863002.RadioLastUpdateIPServer", "3");
Eliminata : user_pref("CT2863002.RadioLastUpdateServer", "3");
Eliminata : user_pref("CT2863002.RadioMediaID", "9962");
Eliminata : user_pref("CT2863002.RadioMediaType", "Media Player");
Eliminata : user_pref("CT2863002.RadioMenuSelectedID", "EBRadioMenu_CT28630029962");
Eliminata : user_pref("CT2863002.RadioShrinkedFromSetup", false);
Eliminata : user_pref("CT2863002.RadioStationName", "California%20Rock");
Eliminata : user_pref("CT2863002.RadioStationURL", "hxxp://feedlive.net/california.asx");
Eliminata : user_pref("CT2863002.SearchFromAddressBarIsInit", true);
Eliminata : user_pref("CT2863002.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT286[...]
Eliminata : user_pref("CT2863002.SearchInNewTabEnabled", true);
Eliminata : user_pref("CT2863002.SearchInNewTabIntervalMM", 1440);
Eliminata : user_pref("CT2863002.SearchInNewTabLastCheckTime", "Sun Mar 17 2013 11:00:29 GMT+0100 (ora solare Eu[...]
Eliminata : user_pref("CT2863002.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
Eliminata : user_pref("CT2863002.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa[...]
Eliminata : user_pref("CT2863002.ServiceMapLastCheckTime", "Sun Mar 17 2013 11:00:29 GMT+0100 (ora solare Europa[...]
Eliminata : user_pref("CT2863002.SettingsLastCheckTime", "Sun Mar 17 2013 11:00:29 GMT+0100 (ora solare Europa o[...]
Eliminata : user_pref("CT2863002.SettingsLastUpdate", "1363504853");
Eliminata : user_pref("CT2863002.ThirdPartyComponentsInterval", 504);
Eliminata : user_pref("CT2863002.ThirdPartyComponentsLastCheck", "Mon Mar 04 2013 16:06:52 GMT+0100 (ora solare [...]
Eliminata : user_pref("CT2863002.ThirdPartyComponentsLastUpdate", "1331806005");
Eliminata : user_pref("CT2863002.ToolbarShrinkedFromSetup", false);
Eliminata : user_pref("CT2863002.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2863002");
Eliminata : user_pref("CT2863002.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien[...]
Eliminata : user_pref("CT2863002.UserID", "UN20902396730553874");
Eliminata : user_pref("CT2863002.ValidationData_Toolbar", 2);
Eliminata : user_pref("CT2863002.WeatherNetwork", "");
Eliminata : user_pref("CT2863002.WeatherPollDate", "Sun Mar 17 2013 11:00:33 GMT+0100 (ora solare Europa occiden[...]
Eliminata : user_pref("CT2863002.WeatherUnit", "C");
Eliminata : user_pref("CT2863002.alertChannelId", "1255008");
Eliminata : user_pref("CT2863002.approveUntrustedApps", false);
Eliminata : user_pref("CT2863002.backendstorage.autocompletepro_enable", "31");
Eliminata : user_pref("CT2863002.backendstorage.autocompletepro_enable_auto", "31");
Eliminata : user_pref("CT2863002.backendstorage.printitgreenstatus", "74727565");
Eliminata : user_pref("CT2863002.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c[...]
Eliminata : user_pref("CT2863002.globalFirstTimeInfoLastCheckTime", "Sun Mar 10 2013 16:53:00 GMT+0100 (ora sola[...]
Eliminata : user_pref("CT2863002.homepageProtectorEnableByLogin", true);
Eliminata : user_pref("CT2863002.initDone", true);
Eliminata : user_pref("CT2863002.isAppTrackingManagerOn", false);
Eliminata : user_pref("CT2863002.isFirstRadioInstallation", false);
Eliminata : user_pref("CT2863002.myStuffEnabled", true);
Eliminata : user_pref("CT2863002.myStuffPublihserMinWidth", 400);
Eliminata : user_pref("CT2863002.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
Eliminata : user_pref("CT2863002.myStuffServiceIntervalMM", 1440);
Eliminata : user_pref("CT2863002.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
Eliminata : user_pref("CT2863002.oldAppsList", "129361333814762872,129361333815544131,111,129361333833825820,145[...]
Eliminata : user_pref("CT2863002.revertSettingsEnabled", true);
Eliminata : user_pref("CT2863002.searchProtectorDialogDelayInSec", 10);
Eliminata : user_pref("CT2863002.searchProtectorEnableByLogin", true);
Eliminata : user_pref("CT2863002.testingCtid", "");
Eliminata : user_pref("CT2863002.toolbarAppMetaDataLastCheckTime", "Sun Mar 17 2013 11:00:33 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.toolbarContextMenuLastCheckTime", "Sun Mar 17 2013 11:00:34 GMT+0100 (ora solar[...]
Eliminata : user_pref("CT2863002.usagesFlag", 2);
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2863002/CT2863002[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1255008/1250681/IT", "\"0\"[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/IT", "\"0\"")[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2863002", [...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.15[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2863002",[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63448574918953[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2863002&octid=[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2863002/CT2863002[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
Eliminata : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=it", "\"0dc[...]
Eliminata : user_pref("CommunityToolbar.EngineOwner", "");
Eliminata : user_pref("CommunityToolbar.EngineOwnerGuid", "{9d1a02c3-7d31-4c4f-ba7e-ccf1cafa1bf5}");
Eliminata : user_pref("CommunityToolbar.EngineOwnerToolbarId", "softonic_italia");
Eliminata : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
Eliminata : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Laura\\Dati applic[...]
Eliminata : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.15.1.0");
Eliminata : user_pref("CommunityToolbar.OriginalEngineOwner", "");
Eliminata : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "");
Eliminata : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "");
Eliminata : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://ws.infospace.com/coolchaser_game/[...]
Eliminata : user_pref("CommunityToolbar.ToolbarsList", "CT2863002");
Eliminata : user_pref("CommunityToolbar.ToolbarsList2", "CT2863002");
Eliminata : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Eliminata : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Fri Aug 12 2011 14:56:22 GMT+0200 (ora l[...]
Eliminata : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Eliminata : user_pref("CommunityToolbar.alert.locale", "en");
Eliminata : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Eliminata : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Aug 12 2011 14:56:22 GMT+0200 (ora legal[...]
Eliminata : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
Eliminata : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Eliminata : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Eliminata : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Eliminata : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Eliminata : user_pref("CommunityToolbar.alert.userId", "5a6dd4d9-9de2-4048-8dd5-82f293f84017");
Eliminata : user_pref("CommunityToolbar.globalUserId", "bd11c1d7-16ed-4a1f-b97e-b766aa8d77ac");
Eliminata : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
Eliminata : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
Eliminata : user_pref("CommunityToolbar.killedEngine", true);
Eliminata : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Mar 17 2013 11:00:3[...]
Eliminata : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
Eliminata : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Mar 17 2013 11:00:41 GMT+010[...]
Eliminata : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
Eliminata : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
Eliminata : user_pref("CommunityToolbar.notifications.locale", "en");
Eliminata : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
Eliminata : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Mar 17 2013 11:00:33 GMT+0100 (o[...]
Eliminata : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
Eliminata : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
Eliminata : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
Eliminata : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
Eliminata : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
Eliminata : user_pref("CommunityToolbar.notifications.userId", "35411a60-f742-4bd6-953d-572d9c42aa81");
Eliminata : user_pref("CommunityToolbar.undefined", "");
Eliminata : user_pref("browser.startup.homepage", "hxxp://www.delta-search.com/?affID=119370&babsrc=HP_ss&mntrId[...]
Eliminata : user_pref("extensions.assist.storage.CachedhxxpRequest.hxxp://ring-tools.info/scripts/q0.php?product[...]
Eliminata : user_pref("extensions.assist.storage.script_loader.data", "\"[{\\\"type\\\":\\\"content\\\",\\\"code[...]
Eliminata : user_pref("extensions.kango.storage.CachedhxxpRequest.hxxp://ring-tools.info/addons/firefox/update.x[...]
Eliminata : user_pref("extensions.kango.storage.CachedhxxpRequest.hxxp://ring-tools.info/addons/firefox/update.x[...]
Eliminata : user_pref("extensions.kango.storage.CachedhxxpRequest.hxxp://ring-tools.info/scripts/qa.php?product_[...]
Eliminata : user_pref("extensions.kango.storage.CachedhxxpRequest.hxxp://ring-tools.info/scripts/qa.php?product_[...]
Eliminata : user_pref("extensions.kango.storage.script_loader.data", "\"[{\\\"type\\\":\\\"content\\\",\\\"code\[...]
Eliminata : user_pref("extensions.kango.storage.statistics.user_guid", "\"{143530E6-C500-D91D-E26F-9A0E756BF37F}[...]
Eliminata : user_pref("extensions.kango.storage.statistics.user_stat_sent", "\"Mon May 07 2012 08:57:22 GMT+0200[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.2808538.KeywordHistory", "media%2520world%7C");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.AutoSearchEventData", "auto%20search");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.ClearCacheDate", 17);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DNSCatch", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DisplayEULA", false);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.DnsCatchEventData", "dns%20catch");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.FirstLaunchShown", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.LoadLayoutDate.62781", 17);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.NewTabSearchEventData", "tab%20search");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.ShowRecommendedOptions", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.StateReportDate", "1363514429654");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.TopRightSearchEventData", "top%20right%20search[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.customNewTab", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.data", "970E0D327E91ACB7AE5FC2C7B268ABD9A70C71F[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.helpUsImprove", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.hideOthers", false);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.processAddrBar", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.restoreSearch", false);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.revision", "37");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.searchHistory", true);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.showFirstLaunchOptions", false);
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.stday", "12");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.sthour", "14");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.tb_lang", "en");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.tool_id", "62781");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_id", "35276999");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_key", "73553e1abeb81ec70a87cd0910575dab22b[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_layouts", "62781");
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.user_lnames", "Gamers%20Unite%21%20Snag%20Bar")[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.xml_service_url", "64e3a27980eeceb34248bc3e680b[...]
Eliminata : user_pref("freecauseafe43e800abc4df281a03fe44b74abe8.yahooSearch", true);
Eliminata : user_pref("browser.search.selectedEngine", "Delta Search");
Eliminata : user_pref("browser.newtab.url", "hxxp://www.delta-search.com/?affID=119370&babsrc=NT_ss&mntrId=2C930[...]

-\\ Google Chrome v25.0.1364.172

File : C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Preferences

Eliminata [l.2447] : urls_to_restore_on_startup = [ "hxxps://www.google.it/", "hxxp://www.delta-search.com/?affID=[...]

*************************

AdwCleaner[S1].txt - [39241 octets] - [25/03/2013 12:17:30]

########## EOF - C:\AdwCleaner[S1].txt - [39302 octets] ##########

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12.26.54, on 25/03/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Programmi\ASUSTeK\ASUSDVD\PDVDServ.exe
C:\Programmi\Canon\MyPrinter\BJMyPrt.exe
C:\Programmi\ScanSoft\OmniPageSE4\OpwareSE4.exe
C:\Programmi\Microsoft IntelliType Pro\itype.exe
C:\Programmi\Microsoft IntelliPoint\ipoint.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\FreeSoft\Uranium\Uranium.exe
C:\Programmi\Windows Live\Messenger\msnmsgr.exe
C:\Programmi\Microsoft IntelliType Pro\dpupdchk.exe
C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Skillbrains\lightshot\3.4.0.0\LightShot.exe
C:\Programmi\Windows Desktop Search\WindowsSearch.exe
C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\Microsoft\BingBar\7.1.391.0\BBSvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Programmi\Canon\IJPLM\IJPLMSVC.EXE
C:\Programmi\Java\jre7\bin\jqs.exe
C:\Programmi\Microsoft LifeCam\MSCamS32.exe
C:\Programmi\Online Games Manager\ogmservice.exe
C:\WINDOWS\system32\SupportAppXL\onda_mon.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre7\bin\ssv.dll
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programmi\Microsoft\BingBar\7.1.391.0\BingExt.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Programmi\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [egui] "C:\Programmi\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\ASUSTeK\ASUSDVD\PDVDServ.exe
O4 - HKLM\..\Run: [CanonSolutionMenu] C:\Programmi\Canon\SolutionMenu\CNSLMAIN.exe /logon
O4 - HKLM\..\Run: [CanonMyPrinter] C:\Programmi\Canon\MyPrinter\BJMyPrt.exe /logon
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Programmi\ScanSoft\OmniPageSE4\OpwareSE4.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programmi\File comuni\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [itype] "C:\Programmi\Microsoft IntelliType Pro\itype.exe"
O4 - HKLM\..\Run: [IntelliPoint] "C:\Programmi\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Programmi\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [update_apc] "C:\Programmi\Internet Explorer\Updater.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Uranium] C:\Programmi\FreeSoft\Uranium\Uranium.exe reg
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKCU\..\Run: [LightShot] C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue
O4 - HKCU\..\Run: [Xvid] C:\Programmi\Xvid\CheckUpdate.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Windows Search.lnk = C:\Programmi\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Inserisci blog - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: Inserisci &blog in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programmi\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1270731300750
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Programmi\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Programmi\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: PIXMA Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Programmi\Canon\IJPLM\IJPLMSVC.EXE
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Programmi\Java\jre7\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Online Games Manager (ogmservice) - RealNetworks, Inc. - C:\Programmi\Online Games Manager\ogmservice.exe
O23 - Service: ONDA Autorun CDROM Monitor - Unknown owner - C:\WINDOWS\system32\SupportAppXL\onda_mon.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe

--
End of file - 11290 bytes
Torna in alto
 
cbbusto
Inviato: Monday, March 25, 2013 4:24:44 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
ADW ha eliminato parecchia spazzatura, ci sono altre voci da eliminare da HJT, dimmi se hai sistemato Chrome e se ti appare ancora delta-search.
Ci risentiamo più tardi. Ciao
Torna in alto
 
laura_rita
Inviato: Monday, March 25, 2013 4:45:45 PM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
Grazie cbbusto no, adesso quando apro chrome non mi appare più delta, questo vuol dire che il problema si è risolto? Ma vedo che bisogna eliminare altre vosi, quando puoi mi dici quali, grazie ancora ciao
Torna in alto
 
laura_rita
Inviato: Monday, March 25, 2013 5:34:41 PM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
Scusa, contrordine: ora mi si apre Chrome ma nello stesso momento apre anche una scheda con Delta -.-
Torna in alto
 
maopapof
Inviato: Monday, March 25, 2013 9:03:56 PM

Rank: AiutAmico

Iscritto dal : 10/31/2004
Posts: 7,183
scusa @cbbusto

ciao laura rita ............. miiiiiiiiiiii ...saluto due donne in una volta sola :O)

vai i in modalità provvisoria ( F8 ) e prova a fare la stessa operazione

ricordati solo una cosa ...quando succedono queste cose , nascono all'attivazione ( all'accenziooone ) opppure con la ruotina in alto a dx ... vedi gestione componenti aggiuntivi ed elimina il motore predefinito

prova il tutto e poi vediamo ....ciao :O)
Torna in alto
 
cbbusto
Inviato: Monday, March 25, 2013 11:20:43 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
laura_rita ha scritto:
Scusa, contrordine: ora mi si apre Chrome ma nello stesso momento apre anche una scheda con Delta -.-


ADW ha eliminato da C: programmi la cartella Delta ed anche da C: document and Setting, sono state rimosse anche le chiavi dal registro, è stata ripristinata la Home page di I.E. che era stata modificata.
Deve essere rimasto qualcosa in Chrome, hai fatto la ricerca che ti avevo detto ?
In Chrome fai questi controlli:

Come rimuovere Delta-search.com da Google Chrome:

Vai a Personalizza e controllo di Google Chrome icona. Selezionare Strumenti e quindi Impostazioni.
Scegli pagine Set.
Fare clic sul segno "X" per sbarazzarsi di Delta-search.com.
Fare clic sul pulsante Home → Modifica.
Scegliere Usa la pagina Nuova e quindi scegliere OK.
Aprire Gestione motori di ricerca
Scegli un motore di ricerca che si desidera utilizzare come motore di ricerca predefinito (come Google, ecc).
Poi, selezionare la ricerca di Delta e rimuoverlo. Per farlo clicca sul segno "X".
Controlla nei componenti aggiuntivi se trovi qualche voce che fa riferimento a Delta e lo elimini.

Controlla nel Task Manager>Processi se c'è qualche processo col nome Delta o qualcosa di simile se c'è clic su Termina processo. De dopo queste operazioni dovesse apparire ancora Delta, disinstalla completamente Chrome, fai una pulizia con Ccleaner e poi lo reinstalli, oppure prova a cambiare browser, ottimo è Firefox il mio preferito.

Passiamo a HJT:
Chiudi tutti i programmi e disconnessa lanci HJT e clicca sul secondo pulsante: Do a system scan only poi metti la spunta alle voci che ti indico e alla fine clic su Fix checked:

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programmi\Microsoft\BingBar\7.1.391.0\BingExt.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Programmi\Microsoft\BingBar\7.1.391.0\BingExt.dll" (file missing)

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [RemoteControl] C:\Programmi\ASUSTeK\ASUSDVD\PDVDServ.exe

O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Programmi\File comuni\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot

O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Programmi\File comuni\Apple\Mobile Device Support\AppleSyncNotifier.exe

O4 - HKLM\..\Run: [APSDaemon] "C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [update_apc] "C:\Programmi\Internet Explorer\Updater.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [msnmsgr] "C:\Programmi\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [LightShot] C:\Documents and Settings\Laura\Impostazioni locali\Dati applicazioni\Skillbrains\lightshot\LightShot.exe Flags: uninsdeletevalue

O4 - HKCU\..\Run: [Xvid] C:\Programmi\Xvid\CheckUpdate.exe

O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe

O4 - Global Startup: Windows Search.lnk = C:\Programmi\Windows Desktop Search\WindowsSearch.exe

Per informazione, tutte le voci 04 non eliminano i programmi ma disattivano solo l'avvio automatico, inutile, rallenta solo il sistema.

Fai una pulizia con Ccleaner QUI compreso il Registro, per il Registro spunta tutte le voci, acconsenti al backup quando richiesto, sempre con Ccleaner vai in Stromento>Ripristino Siatema, seleziona tutte le voci, l'ultima non è selezionabile e rimane, poi clicca su Rimuovi.
Vai in C:\Windows cerca la cartella Prefetch aprila ed elimina tutto il contenuto, non eliminare la cartella.

Avvertenze: evita di scaricare sw da Softonic è facile ritrovarsi cose indesiderate.
Non installare mai le toolbar creano solo confusione e conflitti.
Tieni deframmentato il disco.
Fai sapere come va il pc. Ciao
Torna in alto
 
laura_rita
Inviato: Tuesday, March 26, 2013 7:12:54 PM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
maopapof ha scritto:
scusa @cbbusto

ciao laura rita ............. miiiiiiiiiiii ...saluto due donne in una volta sola :O)

vai i in modalità provvisoria ( F8 ) e prova a fare la stessa operazione

ricordati solo una cosa ...quando succedono queste cose , nascono all'attivazione ( all'accenziooone ) opppure con la ruotina in alto a dx ... vedi gestione componenti aggiuntivi ed elimina il motore predefinito

prova il tutto e poi vediamo ....ciao :O)


Grazie.....Think in effetti sono un tipo piuttosto affollato
Torna in alto
 
laura_rita
Inviato: Tuesday, March 26, 2013 7:14:52 PM

Rank: AiutAmico

Iscritto dal : 11/10/2002
Posts: 30
@cbbusto: tutto eseguito alla lettera, delta scomparso e il mio sistema viaggia molto più leggero, grazie ancora del tuo aiuto.
Torna in alto
 
cbbusto
Inviato: Tuesday, March 26, 2013 11:39:28 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
laura_rita ha scritto:
@cbbusto: tutto eseguito alla lettera, delta scomparso e il mio sistema viaggia molto più leggero, grazie ancora del tuo aiuto.


Contento che tu abbia risolto, con tutta quella robaccia che c'era è un sacco di voci in avvio non poteva andar bene.
Ciao
Torna in alto
 
Utenti presenti in questo topic
Guest

Aiutamici Forum » FORUM - Istruzioni e Guide » Sicurezza VIRUS » non riesco a liberarmi di DELTA


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.