Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Controllo log :( Opzioni
bat66
Inviato: Tuesday, September 04, 2012 7:46:59 PM
Rank: AiutAmico

Iscritto dal : 1/15/2012
Posts: 84
Salve... qualcuno potrebbe gentilmente controllarmi il log, è un po' di tempo che il mouse si blocca grazie Eh?

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19.40.44, on 04/09/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Programmi\File comuni\Comodo\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
C:\Programmi\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Programmi\Photodex\ProShowProducer\ScsiAccess.exe
C:\Documents and Settings\All Users\Dati applicazioni\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
C:\Programmi\File comuni\Comodo\tvnserver.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ASUS\Six Engine\SixEngine.exe
C:\Programmi\Intel\Intel Matrix Storage Manager\iaanotif.exe
C:\Programmi\COMODO\COMODO Internet Security\cfp.exe
C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
C:\Programmi\AVAST Software\Avast\avastUI.exe
C:\programmi\real\realplayer\update\realsched.exe
C:\Programmi\File comuni\Comodo\tvnserver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\Microsoft ActiveSync\Wcescomm.exe
C:\Programmi\Skype\Phone\Skype.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\COMODO\GeekBuddy\unit_manager.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\COMODO\GeekBuddy\unit.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dati applicazioni\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\Six Engine\SixEngine.exe" -r
O4 - HKLM\..\Run: [IAAnotif] C:\Programmi\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Programmi\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programmi\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [avast] "C:\Programmi\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [TkBellExe] "C:\programmi\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM\..\Run: [tvncontrol] "C:\Programmi\File comuni\Comodo\tvnserver.exe" -controlservice -slave
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /minimized /regrun
O4 - S-1-5-18 Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE (User 'SYSTEM')
O4 - .DEFAULT Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE (User 'Default user')
O4 - Startup: Ritaglio schermata e avvio di OneNote 2007.lnk = C:\Programmi\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: Start GeekBuddy.lnk = C:\Programmi\COMODO\GeekBuddy\launcher.exe
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Crea preferiti portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{17208D67-BFFE-4F89-A7DB-D8071F776C19}: NameServer = 208.67.220.220,208.67.222.222
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\AVAST Software\Avast\AvastSvc.exe
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Programmi\File comuni\Comodo\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Servizio di Google Update (gupdate1ca9616b4d9b476) (gupdate1ca9616b4d9b476) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Programmi\CDBurnerXP\NMSAccessU.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ScsiAccess - Unknown owner - C:\Programmi\Photodex\ProShowProducer\ScsiAccess.exe
O23 - Service: Serv Updater (ServUpdater) - ServiceUpd - C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Dati applicazioni\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmi\Skype\Updater\Updater.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Programmi\File comuni\Comodo\tvnserver.exe

--
End of file - 10083 bytes
Sponsor
Inviato: Tuesday, September 04, 2012 7:46:59 PM

 
shapiro
Inviato: Tuesday, September 04, 2012 8:17:09 PM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164

ciao

facciamo un po' di pulizie

rimuovi questa cartella segnata in rosso

C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe

scarica adwcleaner scegli l'opzione ''delete''

scarica e installa malwarebytes
Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
Esegui una "scansione completa" (seleziona l'opzione)
A scansione completa, fai clic su OK => Mostra i Risultati.
Assicurarti che tutto sia selezionato e clicca clic su Rimuovi selezionati.
Se ti chiede di riavviare, riavvia per completare il processo di pulizia.
Posta il rapporto insieme a quello di adwcleaner
bat66
Inviato: Tuesday, September 04, 2012 8:25:59 PM
Rank: AiutAmico

Iscritto dal : 1/15/2012
Posts: 84
shapiro ha scritto:

ciao

facciamo un po' di pulizie

rimuovi questa cartella segnata in rosso

C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe

scarica adwcleaner scegli l'opzione ''delete''

scarica e installa malwarebytes
Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
Esegui una "scansione completa" (seleziona l'opzione)
A scansione completa, fai clic su OK => Mostra i Risultati.
Assicurarti che tutto sia selezionato e clicca clic su Rimuovi selezionati.
Se ti chiede di riavviare, riavvia per completare il processo di pulizia.
Posta il rapporto insieme a quello di adwcleaner


Cartella eliminata, posso usare CCleaner o vado di adwcleaner?
shapiro
Inviato: Tuesday, September 04, 2012 8:35:17 PM

Rank: AiutAmico

Iscritto dal : 8/24/2008
Posts: 4,164


segui lo specchietto

adwcleaner poi malwarebytes
pidue
Inviato: Tuesday, September 04, 2012 8:40:41 PM

Rank: AiutAmico

Iscritto dal : 6/2/2005
Posts: 7,332
Chiedo scusa per l'intervento, ma non potrebbe essere semplicemente il mouse da cambiare? Hai provato su funziona un altro pc?
Non penso proprio che la causa dei blocchi del mouse sia ServUpdater.



bat66
Inviato: Tuesday, September 04, 2012 9:16:53 PM
Rank: AiutAmico

Iscritto dal : 1/15/2012
Posts: 84
pidue ha scritto:
Chiedo scusa per l'intervento, ma non potrebbe essere semplicemente il mouse da cambiare? Hai provato su funziona un altro pc?
Non penso proprio che la causa dei blocchi del mouse sia ServUpdater.


Il mouse va bene, si impalla di tanto in tanto e senza toccarlo si sblocca e cmq il pc, rispetto all'ultima pulizia, si è un pochetto rallentato -
Ho appena bloccato alcune cose che partivano in autorun fatto la pulizia suggerita e malwarebytes non mi ha rilevato nulla - ho eseguito la scansione completa ma non ricordo se andava fatta disabilitando qualche cosa, io l'ho eseguita connesso in rete con antivirus e firewall attivi.
bat66
Inviato: Tuesday, September 04, 2012 9:30:34 PM
Rank: AiutAmico

Iscritto dal : 1/15/2012
Posts: 84
posto il risultato di adwcleaner:

# AdwCleaner v1.604 - Logfile created 09/04/2012 at 21:22:32
# Updated 23/04/2012 by Xplode
# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)
# User : Utente - ERNESTO
# Running from : C:\Documents and Settings\Utente\Impostazioni locali\temp\installer.exe
# Option [Delete]


***** [Services] *****


***** [Files / Folders] *****

Folder Deleted : C:\Documents and Settings\Utente\Dati applicazioni\OpenCandy
Folder Deleted : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\Conduit
Folder Deleted : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\ConduitCommon
Folder Deleted : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\Smartbar
File Deleted : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\searchplugins\Conduit.xml
File Deleted : C:\Programmi\Mozilla Firefox\searchplugins\babylon.xml

***** [Registry] *****

  • Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2530241
    Key Deleted : HKCU\Software\Conduit
    Key Deleted : HKCU\Software\Softonic
    Key Deleted : HKCU\Software\Spointer
    Key Deleted : HKLM\SOFTWARE\Conduit
    Key Deleted : HKLM\SOFTWARE\Iminent
    Key Deleted : HKLM\SOFTWARE\Canneverbe Limited\OpenCandy
    Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
    Key Deleted : HKLM\SOFTWARE\Classes\MediaPlayer.GraphicsUtils
    Key Deleted : HKLM\SOFTWARE\Classes\MgMediaPlayer.GifAnimator
    Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\bjeikeheijdjdfjbmknpefojickbkmom
    Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Extensions\CmdMapping [{F72841F0-4EF1-4df5-BCE5-B3AC8ACF5478}]

    ***** [Registre - GUID] *****

    Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
    Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
    Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F72841F0-4EF1-4DF5-BCE5-B3AC8ACF5478}

    ***** [Internet Browsers] *****

    -\\ Internet Explorer v8.0.6001.18702

    [OK] Registry is clean.

    -\\ Mozilla Firefox v15.0 (it)

    Profile name : default
    File : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\0k7sqe1c.default\prefs.js

    Deleted : user_pref("CT1460988..clientLogIsEnabled", true);
    Deleted : user_pref("CT1460988..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT1460988..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT1460988.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT1460988.CT1460988", "CT1460988");
    Deleted : user_pref("CT1460988.CT1667811.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1668860.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1668889.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1669100.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1669115.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1670222.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1670245.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1729581.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1729585.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1729587.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT1729593.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT2164362.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CT2651538.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CommunitiesChangesLastCheckTime", "Thu Jun 16 2011 18:50:23 GMT+0200 (ora legal[...]
    Deleted : user_pref("CT1460988.CommunityChanged", true);
    Deleted : user_pref("CT1460988.CurrentServerDate", "16-6-2011");
    Deleted : user_pref("CT1460988.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT1460988.DialogsGetterLastCheckTime", "Thu Jun 16 2011 18:48:52 GMT+0200 (ora legale Eur[...]
    Deleted : user_pref("CT1460988.DownloadReferralCookieData", "");
    Deleted : user_pref("CT1460988.EMailNotifierPollDate", "Thu Jun 16 2011 18:48:50 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("CT1460988.ExternalComponentPollDate129270392180007164", "Thu Jun 16 2011 18:50:23 GMT+020[...]
    Deleted : user_pref("CT1460988.FeedLastCount128460900971181341", 300);
    Deleted : user_pref("CT1460988.FeedPollDate128460898315556274", "Thu Jun 16 2011 18:48:51 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedPollDate128460899415556929", "Thu Jun 16 2011 18:48:51 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedPollDate128460899564463182", "Thu Jun 16 2011 18:48:52 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedPollDate128460899661963361", "Thu Jun 16 2011 18:48:52 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedPollDate128460899768994715", "Thu Jun 16 2011 18:48:52 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedPollDate128479826070094154", "Thu Jun 16 2011 18:48:52 GMT+0200 (ora legale[...]
    Deleted : user_pref("CT1460988.FeedTTL128460898315556274", 5);
    Deleted : user_pref("CT1460988.FeedTTL128460899415556929", 20);
    Deleted : user_pref("CT1460988.FeedTTL128460899564463182", 15);
    Deleted : user_pref("CT1460988.FeedTTL128460899661963361", 15);
    Deleted : user_pref("CT1460988.FirstServerDate", "16-6-2011");
    Deleted : user_pref("CT1460988.FirstTime", true);
    Deleted : user_pref("CT1460988.FirstTimeFF3", true);
    Deleted : user_pref("CT1460988.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT1460988.GroupingLastCheckTime", "Thu Jun 16 2011 18:48:49 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("CT1460988.GroupingLastErrorCode", "");
    Deleted : user_pref("CT1460988.GroupingLastResponse", true);
    Deleted : user_pref("CT1460988.GroupingLastServerUpdateTime", "129506362670000000");
    Deleted : user_pref("CT1460988.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT1460988.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT1460988.HasUserGlobalKeys", true);
    Deleted : user_pref("CT1460988.Initialize", true);
    Deleted : user_pref("CT1460988.InitializeCommonPrefs", true);
    Deleted : user_pref("CT1460988.InstallationAndCookieDataSentCount", 1);
    Deleted : user_pref("CT1460988.InstalledDate", "Thu Jun 16 2011 18:49:00 GMT+0200 (ora legale Europa occidenta[...]
    Deleted : user_pref("CT1460988.InvalidateCache", false);
    Deleted : user_pref("CT1460988.IsGrouping", true);
    Deleted : user_pref("CT1460988.IsMulticommunity", false);
    Deleted : user_pref("CT1460988.IsOpenThankYouPage", true);
    Deleted : user_pref("CT1460988.IsOpenUninstallPage", true);
    Deleted : user_pref("CT1460988.LanguagePackLastCheckTime", "Thu Jun 16 2011 18:49:00 GMT+0200 (ora legale Euro[...]
    Deleted : user_pref("CT1460988.LanguagePackReloadIntervalMM", 1440);
    Deleted : user_pref("CT1460988.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT1460988.LastLogin_3.3.3.2", "Thu Jun 16 2011 18:48:55 GMT+0200 (ora legale Europa occid[...]
    Deleted : user_pref("CT1460988.LatestVersion", "3.2.5.2");
    Deleted : user_pref("CT1460988.Locale", "en-us");
    Deleted : user_pref("CT1460988.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT1460988.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT1460988.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT1460988.RadioIsPodcast", false);
    Deleted : user_pref("CT1460988.RadioLastCheckTime", "Thu Jun 16 2011 18:48:55 GMT+0200 (ora legale Europa occi[...]
    Deleted : user_pref("CT1460988.RadioLastUpdateIPServer", "3");
    Deleted : user_pref("CT1460988.RadioLastUpdateServer", "128929877726170000");
    Deleted : user_pref("CT1460988.RadioMediaID", "6820481");
    Deleted : user_pref("CT1460988.RadioMediaType", "Media Player");
    Deleted : user_pref("CT1460988.RadioMenuSelectedID", "EBRadioMenu_CT14609886820481");
    Deleted : user_pref("CT1460988.RadioStationName", "100.7%20FM%20ICRT");
    Deleted : user_pref("CT1460988.RadioStationURL", "hxxp://live.giga.net.tw/icrt16.asx");
    Deleted : user_pref("CT1460988.SHRINK_TOOLBAR", 1);
    Deleted : user_pref("CT1460988.SavedHomepage", "hxxp://www.google.it/");
    Deleted : user_pref("CT1460988.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT1460988.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT146[...]
    Deleted : user_pref("CT1460988.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT1460988.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT1460988.SearchInNewTabLastCheckTime", "Thu Jun 16 2011 18:48:55 GMT+0200 (ora legale Eu[...]
    Deleted : user_pref("CT1460988.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT1460988.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Deleted : user_pref("CT1460988.ServiceMapLastCheckTime", "Thu Jun 16 2011 18:48:49 GMT+0200 (ora legale Europa[...]
    Deleted : user_pref("CT1460988.SettingsLastCheckTime", "Thu Jun 16 2011 18:48:50 GMT+0200 (ora legale Europa o[...]
    Deleted : user_pref("CT1460988.SettingsLastUpdate", "1306530423");
    Deleted : user_pref("CT1460988.ThirdPartyComponentsInterval", 504);
    Deleted : user_pref("CT1460988.ThirdPartyComponentsLastCheck", "Thu Jun 16 2011 18:48:49 GMT+0200 (ora legale [...]
    Deleted : user_pref("CT1460988.ThirdPartyComponentsLastUpdate", "1246786978");
    Deleted : user_pref("CT1460988.ToggleComponentState129160818675915142", true);
    Deleted : user_pref("CT1460988.TrusteLinkUrl", "hxxp://trust.conduit.com/CT1460988");
    Deleted : user_pref("CT1460988.UserID", "UN56636051841816899");
    Deleted : user_pref("CT1460988.ValidationData_Toolbar", 2);
    Deleted : user_pref("CT1460988.WeatherNetwork", "");
    Deleted : user_pref("CT1460988.WeatherPollDate", "Thu Jun 16 2011 18:48:59 GMT+0200 (ora legale Europa occiden[...]
    Deleted : user_pref("CT1460988.WeatherUnit", "C");
    Deleted : user_pref("CT1460988.approveUntrustedApps", true);
    Deleted : user_pref("CT1460988.backendstorage.ct1460988ads1", "25374225323261647325323225334125354225374225323[...]
    Deleted : user_pref("CT1460988.backendstorage.ct1460988current_term", "");
    Deleted : user_pref("CT1460988.backendstorage.ct1460988sdate", "3136");
    Deleted : user_pref("CT1460988.backendstorage.hxxp://api19_thetrafficstat_net.pid2", "326466663163386236336363[...]
    Deleted : user_pref("CT1460988.backendstorage.hxxp://api21_thetrafficstat_net.pid2", "326466663163386236336363[...]
    Deleted : user_pref("CT1460988.components.1000515", true);
    Deleted : user_pref("CT1460988.generalConfigFromLogin", "{\"SocialDomains\":\"social.conduit.com;apps.conduit.[...]
    Deleted : user_pref("CT1460988.globalFirstTimeInfoLastCheckTime", "Thu Jun 16 2011 18:48:55 GMT+0200 (ora lega[...]
    Deleted : user_pref("CT1460988.isAppTrackingManagerOn", true);
    Deleted : user_pref("CT1460988.myStuffEnabled", true);
    Deleted : user_pref("CT1460988.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT1460988.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT1460988.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT1460988.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT1460988.testingCtid", "");
    Deleted : user_pref("CT1460988.toolbarAppMetaDataLastCheckTime", "Thu Jun 16 2011 18:48:55 GMT+0200 (ora legal[...]
    Deleted : user_pref("CT1460988.toolbarContextMenuLastCheckTime", "Thu Jun 16 2011 18:49:00 GMT+0200 (ora legal[...]
    Deleted : user_pref("CT1460988.usagesFlag", 2);
    Deleted : user_pref("CT2530241..clientLogIsEnabled", true);
    Deleted : user_pref("CT2530241..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as[...]
    Deleted : user_pref("CT2530241..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re[...]
    Deleted : user_pref("CT2530241.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT2530241.CTID", "CT2530241");
    Deleted : user_pref("CT2530241.CurrentServerDate", "14-1-2011");
    Deleted : user_pref("CT2530241.DialogsAlignMode", "LTR");
    Deleted : user_pref("CT2530241.DownloadReferralCookieData", "");
    Deleted : user_pref("CT2530241.EMailNotifierPollDate", "Fri Jan 14 2011 16:36:15 GMT+0100 (ora solare Europa o[...]
    Deleted : user_pref("CT2530241.FeedLastCount129102019943903009", 393);
    Deleted : user_pref("CT2530241.FeedPollDate6950684221136826014", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684221267301652", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684221524553831", "Fri Jan 14 2011 16:31:01 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684221590001098", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684221785237350", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684222064595900", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684222129686883", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684222201547670", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684222513881372", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684222671718962", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684223112896107", "Fri Jan 14 2011 16:31:01 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684223216229724", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684223476241864", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684223782977569", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684223899376495", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224107713633", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224160233948", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224256660610", "Fri Jan 14 2011 16:31:01 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224303045800", "Fri Jan 14 2011 16:31:01 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224573631499", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224768320385", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedPollDate6950684224786818075", "Fri Jan 14 2011 16:31:00 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.FeedTTL6950684222201547670", 2);
    Deleted : user_pref("CT2530241.FeedTTL6950684222671718962", 10);
    Deleted : user_pref("CT2530241.FeedTTL6950684223782977569", 2);
    Deleted : user_pref("CT2530241.FirstServerDate", "14-1-2011");
    Deleted : user_pref("CT2530241.FirstTime", true);
    Deleted : user_pref("CT2530241.FirstTimeFF3", true);
    Deleted : user_pref("CT2530241.FixPageNotFoundErrors", true);
    Deleted : user_pref("CT2530241.GroupingServerCheckInterval", 1440);
    Deleted : user_pref("CT2530241.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT2530241.HasUserGlobalKeys", true);
    Deleted : user_pref("CT2530241.Initialize", true);
    Deleted : user_pref("CT2530241.InitializeCommonPrefs", true);
    Deleted : user_pref("CT2530241.InstallationAndCookieDataSentCount", 1);
    Deleted : user_pref("CT2530241.InstallationId", "Unknown");
    Deleted : user_pref("CT2530241.InstallationType", "ExternalIntegration");
    Deleted : user_pref("CT2530241.InstalledDate", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solare Europa occidenta[...]
    Deleted : user_pref("CT2530241.InvalidateCache", false);
    Deleted : user_pref("CT2530241.IsGrouping", false);
    Deleted : user_pref("CT2530241.IsMulticommunity", false);
    Deleted : user_pref("CT2530241.IsOpenThankYouPage", false);
    Deleted : user_pref("CT2530241.IsOpenUninstallPage", true);
    Deleted : user_pref("CT2530241.LanguagePackLastCheckTime", "Fri Jan 14 2011 16:31:02 GMT+0100 (ora solare Euro[...]
    Deleted : user_pref("CT2530241.LanguagePackReloadIntervalMM", 1440);
    Deleted : user_pref("CT2530241.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
    Deleted : user_pref("CT2530241.LastLogin_3.2.5.2", "Fri Jan 14 2011 16:31:02 GMT+0100 (ora solare Europa occid[...]
    Deleted : user_pref("CT2530241.LatestVersion", "3.2.5.2");
    Deleted : user_pref("CT2530241.Locale", "it");
    Deleted : user_pref("CT2530241.MCDetectTooltipHeight", "83");
    Deleted : user_pref("CT2530241.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
    Deleted : user_pref("CT2530241.MCDetectTooltipWidth", "295");
    Deleted : user_pref("CT2530241.RadioIsPodcast", false);
    Deleted : user_pref("CT2530241.RadioLastCheckTime", "Fri Jan 14 2011 16:31:01 GMT+0100 (ora solare Europa occi[...]
    Deleted : user_pref("CT2530241.RadioLastUpdateIPServer", "3");
    Deleted : user_pref("CT2530241.RadioLastUpdateServer", "129167784706500000");
    Deleted : user_pref("CT2530241.RadioMediaID", "20503766");
    Deleted : user_pref("CT2530241.RadioMediaType", "Media Player");
    Deleted : user_pref("CT2530241.RadioMenuSelectedID", "EBRadioMenu_CT253024120503766");
    Deleted : user_pref("CT2530241.RadioStationName", "Radio%20105");
    Deleted : user_pref("CT2530241.RadioStationURL", "hxxp://105.net/sezioni/inradio/radio/asx/ch_0.asx");
    Deleted : user_pref("CT2530241.SavedHomepage", "hxxp://google.it");
    Deleted : user_pref("CT2530241.SearchFromAddressBarIsInit", true);
    Deleted : user_pref("CT2530241.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT253[...]
    Deleted : user_pref("CT2530241.SearchInNewTabEnabled", true);
    Deleted : user_pref("CT2530241.SearchInNewTabIntervalMM", 1440);
    Deleted : user_pref("CT2530241.SearchInNewTabLastCheckTime", "Fri Jan 14 2011 16:31:02 GMT+0100 (ora solare Eu[...]
    Deleted : user_pref("CT2530241.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
    Deleted : user_pref("CT2530241.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
    Deleted : user_pref("CT2530241.ServiceMapLastCheckTime", "Fri Jan 14 2011 16:30:58 GMT+0100 (ora solare Europa[...]
    Deleted : user_pref("CT2530241.SettingsLastCheckTime", "Fri Jan 14 2011 16:30:58 GMT+0100 (ora solare Europa o[...]
    Deleted : user_pref("CT2530241.SettingsLastUpdate", "1294771075");
    Deleted : user_pref("CT2530241.ThirdPartyComponentsInterval", 504);
    Deleted : user_pref("CT2530241.ThirdPartyComponentsLastCheck", "Fri Jan 14 2011 16:30:58 GMT+0100 (ora solare [...]
    Deleted : user_pref("CT2530241.ThirdPartyComponentsLastUpdate", "1291279838");
    Deleted : user_pref("CT2530241.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
    Deleted : user_pref("CT2530241.UserID", "UN79201038497813255");
    Deleted : user_pref("CT2530241.ValidationData_Toolbar", 0);
    Deleted : user_pref("CT2530241.WeatherNetwork", "");
    Deleted : user_pref("CT2530241.WeatherPollDate", "Fri Jan 14 2011 16:31:02 GMT+0100 (ora solare Europa occiden[...]
    Deleted : user_pref("CT2530241.WeatherUnit", "C");
    Deleted : user_pref("CT2530241.alertChannelId", "923244");
    Deleted : user_pref("CT2530241.myStuffEnabled", true);
    Deleted : user_pref("CT2530241.myStuffPublihserMinWidth", 400);
    Deleted : user_pref("CT2530241.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
    Deleted : user_pref("CT2530241.myStuffServiceIntervalMM", 1440);
    Deleted : user_pref("CT2530241.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
    Deleted : user_pref("CT2530241.testingCtid", "");
    Deleted : user_pref("CT2530241.toolbarAppMetaDataLastCheckTime", "Fri Jan 14 2011 16:30:59 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.toolbarContextMenuLastCheckTime", "Fri Jan 14 2011 16:31:05 GMT+0100 (ora solar[...]
    Deleted : user_pref("CT2530241.usagesFlag", 1);
    Deleted : user_pref("CT314288..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
    Deleted : user_pref("CT314288..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
    Deleted : user_pref("CT314288.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
    Deleted : user_pref("CT314288.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
    Deleted : user_pref("CT314288.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx"[...]
    Deleted : user_pref("CT314288.RadioMenuSelectedID", "EBRadioMenu_CT3142889062");
    Deleted : user_pref("CT314288.SearchEngineBeforeUnload", "Web Search");
    Deleted : user_pref("CT314288.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3142[...]
    Deleted : user_pref("CT314288.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TO[...]
    Deleted : user_pref("CT314288.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usag[...]
    Deleted : user_pref("CT314288.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client[...]
    Deleted : user_pref("CT314288.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.co[...]
    Deleted : user_pref("CT314288.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOri[...]
    Deleted : user_pref("CT314288.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Com[...]
    Deleted : user_pref("CommunityToolbar.CantToolbarBeEngineOwner", "CT2530241,CT1460988");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/1044202/1039913/IT", "\"0\"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/10896/10676/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/237/237/IT", "\"1-208499-60[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24183/23680/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24247/23744/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24250/23747/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24264/23761/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24266/23763/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24349/23846/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/24350/23847/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/28311/27793/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/28312/27794/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/28313/27795/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/28315/27797/IT", "\"0\"");
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/563458/559322/IT", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/909619/905414/IT", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/923244/919035/IT", "\"0\"")[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT1460988", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2530241", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT314288", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.7.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT1460988",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT314288", [...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/toolbar/", "\"63443493058760[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=1/11/20[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=11/8/20[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/21/2[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/27/2[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=12/30/2[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT314288&octid=C[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT1460988/CT1460988[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT2530241/CT2530241[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/CT314288/CT314288",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/bankimages/RadioSkins/Tapuz/idel.gif", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/bankimages/RadioSkins/Tapuz/minimize.gif[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/bankimages/RadioSkins/Tapuz/play.gif", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/bankimages/RadioSkins/Tapuz/stop.gif", "[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/bankimages/RadioSkins/Tapuz/vol.gif", "\[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=EB_LOCALE",[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en-us", "\"[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=it", "\"634[...]
    Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=it-IT", "\"[...]
    Deleted : user_pref("CommunityToolbar.EngineHiddenByUser", false);
    Deleted : user_pref("CommunityToolbar.EngineOwner", "");
    Deleted : user_pref("CommunityToolbar.EngineOwnerGuid", "{d7871242-da80-4fd3-a8a9-6716cfe9bdb9}");
    Deleted : user_pref("CommunityToolbar.EngineOwnerToolbarId", "ast");
    Deleted : user_pref("CommunityToolbar.IsEngineShown", true);
    Deleted : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true);
    Deleted : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Utente\\Dati appli[...]
    Deleted : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.8.0.8");
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwner", "CT314288");
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{d7871242-da80-4fd3-a8a9-6716cfe9bdb9}");
    Deleted : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "ast");
    Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
    Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT314288,CT2530241,CT1460988");
    Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT314288,CT2530241,CT1460988");
    Deleted : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Thu Jun 16 2011 18:48:51 GMT+02[...]
    Deleted : user_pref("CommunityToolbar.alert.alertEnabled", true);
    Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
    Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Sat Jun 18 2011 10:04:57 GMT+0200 (ora l[...]
    Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Deleted : user_pref("CommunityToolbar.alert.firstTimeAlertShown", true);
    Deleted : user_pref("CommunityToolbar.alert.locale", "en");
    Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
    Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Fri Jun 24 2011 22:01:58 GMT+0200 (ora legal[...]
    Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559");
    Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
    Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
    Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
    Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
    Deleted : user_pref("CommunityToolbar.alert.userId", "049f2a65-9dbe-4867-a0ce-eae7a2e5f466");
    Deleted : user_pref("CommunityToolbar.globalUserId", "7b2d05ba-eb15-45d6-8c8e-29c03c65e992");
    Deleted : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
    Deleted : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
    Deleted : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT1460988");
    Deleted : user_pref("CommunityToolbar.killedEngine", true);
    Deleted : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Nov 27 2011 21:53:3[...]
    Deleted : user_pref("CommunityToolbar.notifications.alertEnabled", true);
    Deleted : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
    Deleted : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Mon Nov 28 2011 20:58:55 GMT+010[...]
    Deleted : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
    Deleted : user_pref("CommunityToolbar.notifications.firstTimeAlertShown", true);
    Deleted : user_pref("CommunityToolbar.notifications.locale", "en");
    Deleted : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
    Deleted : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Mon Nov 28 2011 20:58:47 GMT+0100 (o[...]
    Deleted : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
    Deleted : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
    Deleted : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
    Deleted : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
    Deleted : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
    Deleted : user_pref("CommunityToolbar.notifications.userId", "7ff11df0-776e-4981-a1ed-119896dd4799");
    Deleted : user_pref("CommunityToolbar.undefined", "");
    Deleted : user_pref("Smartbar.ConduitSearchEngineList", "Ast Customized Web Search");
    Deleted : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT314288&[...]
    Deleted : user_pref("browser.search.defaultengine", "Ask.com");
    Deleted : user_pref("browser.search.defaultenginename", "Ask.com");
    Deleted : user_pref("browser.search.defaultthis.engineName", "Web Search");
    Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1460988&Sea[...]
    Deleted : user_pref("browser.search.order.1", "Ask.com");
    Deleted : user_pref("browser.search.selectedEngine", "Ast Customized Web Search");
    Deleted : user_pref("extensions.BabylonToolbar.cntry", "IT");
    Deleted : user_pref("extensions.BabylonToolbar.firstRun", false);
    Deleted : user_pref("extensions.BabylonToolbar.hdrMd5", "8E744A5B89ADCB2361980CE168113BD1");
    Deleted : user_pref("extensions.BabylonToolbar.lastActv", "15");
    Deleted : user_pref("extensions.alexa.toolbarXMLText", "<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<toolbar>\[...]
    Deleted : user_pref("extensions.gamesbar.iplay.config.newtabhtml", "<html>\r\n<head>\r\n<title>I-play - Web Se[...]
    Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT314288&SearchSource=2&q="[...]

    *************************

    AdwCleaner[S1].txt - [36065 octets] - [04/09/2012 21:22:32]

    ########## EOF - C:\AdwCleaner[S1].txt - [36194 octets] ##########
  • maopapof
    Inviato: Tuesday, September 04, 2012 11:38:10 PM

    Rank: AiutAmico

    Iscritto dal : 10/31/2004
    Posts: 7,183

    bat ....che tipo di mause hai ?



    shapiro
    Inviato: Wednesday, September 05, 2012 9:33:55 AM

    Rank: AiutAmico

    Iscritto dal : 8/24/2008
    Posts: 4,164
    Commenta:
    Non penso proprio che la causa dei blocchi del mouse sia ServUpdater.


    ciao Pidue e' sempre un piacere leggerti

    infatti non ho detto che eliminando quella cartella avrebbe risolto, siamo solo all'inizio

    ciao e buona giornata

    @ bat66

    vai con malwarebytes
    bat66
    Inviato: Wednesday, September 05, 2012 4:24:39 PM
    Rank: AiutAmico

    Iscritto dal : 1/15/2012
    Posts: 84
    shapiro ha scritto:
    Commenta:
    Non penso proprio che la causa dei blocchi del mouse sia ServUpdater.


    ciao Pidue e' sempre un piacere leggerti

    infatti non ho detto che eliminando quella cartella avrebbe risolto, siamo solo all'inizio

    ciao e buona giornata

    @ bat66

    vai con malwarebytes


    Fatto....:

    Malwarebytes Anti-Malware 1.62.0.1300
    www.malwarebytes.org

    Versione database: v2012.09.04.09

    Windows XP Service Pack 3 x86 NTFS
    Internet Explorer 8.0.6001.18702
    Utente :: ERNESTO [amministratore]

    05/09/2012 15.45.41
    mbam-log-2012-09-05 (15-45-41).txt

    Tipo di scansione: Scansione completa (C:\|D:\|)
    Opzioni di scansione attive: Memoria | Esecuzione automatica | Registro | File system | Euristica/Extra | Euristica/Shuriken | PUP | PUM
    Opzioni di scansione disattivate: P2P
    Elementi esaminati: 285839
    Tempo impiegato: 24 minuti, 48 secondi

    Processi rilevati in memoria: 0
    (non sono stati rilevati elementi nocivi)

    Moduli di memoria rilevati: 0
    (non sono stati rilevati elementi nocivi)

    Chiavi di registro rilevate: 0
    (non sono stati rilevati elementi nocivi)

    Valori di registro rilevati: 0
    (non sono stati rilevati elementi nocivi)

    Voci rilevate nei dati di registro: 0
    (non sono stati rilevati elementi nocivi)

    Cartelle rilevate: 0
    (non sono stati rilevati elementi nocivi)

    File rilevati: 1
    C:\Documents and Settings\Utente\Documenti\Download\installer_adwcleaner.exe (PUP.Adbundler) -> Spostato in quarantena ed eliminato con successo.

    (fine)
    shapiro
    Inviato: Wednesday, September 05, 2012 7:56:51 PM

    Rank: AiutAmico

    Iscritto dal : 8/24/2008
    Posts: 4,164


    che attacco hai? usb o ps2? hai provato a cambiare porta? fai una stupida prova se l'attacco e' usb al posto del mouse inserisci una chiavetta magari con della musica e controlla se c'e' continuita' o se ha delle brevi pause
    pidue
    Inviato: Wednesday, September 05, 2012 8:05:50 PM

    Rank: AiutAmico

    Iscritto dal : 6/2/2005
    Posts: 7,332
    pidue ha scritto:
    Chiedo scusa per l'intervento, ma non potrebbe essere semplicemente il mouse da cambiare? Hai provato su funziona un altro pc?

    Ma ti costa tanto provare un altro mouse? Almeno ti togli il pensiero.
    Qui i VIRUS NON C'ENTRANO!



    bat66
    Inviato: Thursday, September 06, 2012 12:42:27 AM
    Rank: AiutAmico

    Iscritto dal : 1/15/2012
    Posts: 84
    pidue ha scritto:
    pidue ha scritto:
    Chiedo scusa per l'intervento, ma non potrebbe essere semplicemente il mouse da cambiare? Hai provato su funziona un altro pc?

    Ma ti costa tanto provare un altro mouse? Almeno ti togli il pensiero.
    Qui i VIRUS NON C'ENTRANO!


    Ciao amico e grazie ma adesso il mouse, stranamente, non inceppa d'oh!
    Il problema mouse era secondario, l'obbiettivo primario era quello di fare un po' di pulizia magari domani rifaccio la scansione e riposto il log anche se adesso va decisamente meglio, è + reattivo.

    Grazie Dancing
    shapiro
    Inviato: Thursday, September 06, 2012 5:01:33 PM

    Rank: AiutAmico

    Iscritto dal : 8/24/2008
    Posts: 4,164


    fai sapere se hai bisogno ancora di aiuto o se hai risolto
    bat66
    Inviato: Thursday, September 06, 2012 8:16:48 PM
    Rank: AiutAmico

    Iscritto dal : 1/15/2012
    Posts: 84
    shapiro ha scritto:


    fai sapere se hai bisogno ancora di aiuto o se hai risolto


    Ciao shapi.., il mouse sembra andare bene e la velocità migliorata, se posto un nuovo log mi ci dai un occhiata se c'è altro da eliminare? visto che ci sono....

    Grazie
    maopapof
    Inviato: Thursday, September 06, 2012 8:35:56 PM

    Rank: AiutAmico

    Iscritto dal : 10/31/2004
    Posts: 7,183

    forse con acqua e sapone .... però ricorda di togliere la spina :O)





    bat66
    Inviato: Thursday, September 06, 2012 8:48:35 PM
    Rank: AiutAmico

    Iscritto dal : 1/15/2012
    Posts: 84
    maopapof ha scritto:

    forse con acqua e sapone .... però ricorda di togliere la spina :O)


    Tante voci che non so cosa siano :( - mi affido a voi... come sempre :)

    Logfile of Trend Micro HijackThis v2.0.4
    Scan saved at 20.46.05, on 06/09/2012
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\Programmi\File comuni\Comodo\launcher_service.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Programmi\AVAST Software\Avast\AvastSvc.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    C:\Programmi\CDBurnerXP\NMSAccessU.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Programmi\Photodex\ProShowProducer\ScsiAccess.exe
    C:\Documents and Settings\All Users\Dati applicazioni\Skype\Toolbars\Skype C2C Service\c2c_service.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
    C:\Programmi\File comuni\Comodo\tvnserver.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\ASUS\Six Engine\SixEngine.exe
    C:\Programmi\Intel\Intel Matrix Storage Manager\iaanotif.exe
    C:\Programmi\COMODO\COMODO Internet Security\cfp.exe
    C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
    C:\Programmi\AVAST Software\Avast\avastUI.exe
    C:\Programmi\File comuni\Comodo\tvnserver.exe
    C:\programmi\real\realplayer\update\realsched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Programmi\Skype\Phone\Skype.exe
    C:\Programmi\Microsoft ActiveSync\wcescomm.exe
    C:\PROGRA~1\MI3AA1~1\rapimgr.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dati applicazioni\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
    O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll
    O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programmi\AVAST Software\Avast\aswWebRepIE.dll
    O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\Six Engine\SixEngine.exe" -r
    O4 - HKLM\..\Run: [IAAnotif] C:\Programmi\Intel\Intel Matrix Storage Manager\iaanotif.exe
    O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Programmi\COMODO\COMODO Internet Security\cfp.exe" -h
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
    O4 - HKLM\..\Run: [avast] "C:\Programmi\AVAST Software\Avast\avastUI.exe" /nogui
    O4 - HKLM\..\Run: [tvncontrol] "C:\Programmi\File comuni\Comodo\tvnserver.exe" -controlservice -slave
    O4 - HKLM\..\Run: [TkBellExe] "C:\programmi\real\realplayer\update\realsched.exe" -osboot
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Skype] "C:\Programmi\Skype\Phone\Skype.exe" /minimized /regrun
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programmi\Microsoft ActiveSync\wcescomm.exe"
    O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\jre1.6.0_03\bin\ssv.dll
    O9 - Extra button: Invia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: I&nvia a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crea preferiti portatile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll
    O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
    O17 - HKLM\System\CCS\Services\Tcpip\..\{17208D67-BFFE-4F89-A7DB-D8071F776C19}: NameServer = 208.67.220.220,208.67.222.222
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
    O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programmi\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
    O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
    O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
    O23 - Service: avast! Antivirus - AVAST Software - C:\Programmi\AVAST Software\Avast\AvastSvc.exe
    O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Programmi\File comuni\Comodo\launcher_service.exe
    O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
    O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Programmi\File comuni\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Servizio di Google Update (gupdate1ca9616b4d9b476) (gupdate1ca9616b4d9b476) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
    O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Programmi\Intel\Intel Matrix Storage Manager\IAANTMon.exe
    O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
    O23 - Service: NMSAccess - Unknown owner - C:\Programmi\CDBurnerXP\NMSAccessU.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: ScsiAccess - Unknown owner - C:\Programmi\Photodex\ProShowProducer\ScsiAccess.exe
    O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\Documents and Settings\All Users\Dati applicazioni\Skype\Toolbars\Skype C2C Service\c2c_service.exe
    O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Programmi\Skype\Updater\Updater.exe
    O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
    O23 - Service: TightVNC Server (tvnserver) - GlavSoft LLC. - C:\Programmi\File comuni\Comodo\tvnserver.exe

    --
    End of file - 8741 bytes
    shapiro
    Inviato: Friday, September 07, 2012 9:01:51 PM

    Rank: AiutAmico

    Iscritto dal : 8/24/2008
    Posts: 4,164

    da pannello di controllo rimuovi le toolbar che sono ancora nel pc

    Installa Ccleaner

    ccleaner

    durante l’installazione deseleziona l’opzione per la barra di Yahoo, lo apri, vai in Opzioni>Avanzate, togli la spunta a “Cancella file temp diwindows solo se più vecchi di 48 ore”, poi avvialo, seleziona "Analizza" ed alla fine dell'analisi premi "Avvia pulizia''


    clicca su Registro, nella pagina successiva clicca Trova problemi, poi al termine dello scan clicca su Ripara selezionati , risposndi di sì alla richiesta di salvare il backup (salvalo in una cartella a piacimento) poi ripara tutti gli elementi trovati.

    scarica http://www.atribune.org/ccount/click.php?id=1

    non ha bisogno di installazione

    Avvia ATF Cleaner.exe con un doppio click
    http://www.helpinweb.it/index.php?ind=downloads&op=download_file&ide=178&file=ATF-Cleaner.zip
    - clicca sul menu main
    - seleziona la casella Select All
    - clicca sul pulsante Empty selected
    - aspetta l'avviso Done Cleaning.
    (se non vuoi eliminare le password togli la spunta)
    (se usi opera o firefox,spunta anche le loro sezioni)

    se non hai piu' problemi possiamo chiudere






    bat66
    Inviato: Friday, September 07, 2012 9:18:13 PM
    Rank: AiutAmico

    Iscritto dal : 1/15/2012
    Posts: 84
    shapiro ha scritto:

    da pannello di controllo rimuovi le toolbar che sono ancora nel pc

    Installa Ccleaner

    ccleaner

    durante l’installazione deseleziona l’opzione per la barra di Yahoo, lo apri, vai in Opzioni>Avanzate, togli la spunta a “Cancella file temp diwindows solo se più vecchi di 48 ore”, poi avvialo, seleziona "Analizza" ed alla fine dell'analisi premi "Avvia pulizia''


    clicca su Registro, nella pagina successiva clicca Trova problemi, poi al termine dello scan clicca su Ripara selezionati , risposndi di sì alla richiesta di salvare il backup (salvalo in una cartella a piacimento) poi ripara tutti gli elementi trovati.

    scarica http://www.atribune.org/ccount/click.php?id=1

    non ha bisogno di installazione

    Avvia ATF Cleaner.exe con un doppio click
    http://www.helpinweb.it/index.php?ind=downloads&op=download_file&ide=178&file=ATF-Cleaner.zip
    - clicca sul menu main
    - seleziona la casella Select All
    - clicca sul pulsante Empty selected
    - aspetta l'avviso Done Cleaning.
    (se non vuoi eliminare le password togli la spunta)
    (se usi opera o firefox,spunta anche le loro sezioni)

    se non hai piu' problemi possiamo chiudere




    Ok per CCleaner ho anche usato Eusing Registri cleaner, mi dici come rimuovere le toolbar che nn ho ben capito Brick wall . Grazie
    Utenti presenti in questo topic
    Guest


    Salta al Forum
    Aggiunta nuovi Topic disabilitata in questo forum.
    Risposte disabilitate in questo forum.
    Eliminazione tuoi Post disabilitata in questo forum.
    Modifica dei tuoi post disabilitata in questo forum.
    Creazione Sondaggi disabilitata in questo forum.
    Voto ai sondaggi disabilitato in questo forum.

    Main Forum RSS : RSS

    Aiutamici Theme
    Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
    Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.