Aiutamici Forum
Benvenuto Ospite Cerca | Topic Attivi | Utenti | | Log In | Registra

Cerco un aiuto per 2 pc infetti e lenti Opzioni
zapek
Inviato: Sunday, December 15, 2013 10:08:27 PM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Ciao, chi gentilmente mi puo' dare una mano?

Ho 2 pc che vanno lenti e vorrei sapere se sono da rottamare o se, con una pulizia, possono continuare a lavorare degnamente; uno e' mio ed uno e' di mio fratello,(a dire il vero, il suo, penso sia messo peggio. Lui ha anche scaricato a pagamento da internet un programma, "RegClean Pro " e, penso, abbia preso una fregatura, perche' il suo computer adesso non va piu' veloce, anzi..)

Io ho fatto intanto la scansione con Hijack This del mio computer e vi posto il log qui sotto, se qualcuno mi puo' aiutare lo ringrazio gia' in anticipo Applause :


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21.53.18, on 15/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\AVG\AVG2014\avgwdsvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\Programmi\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Programmi\Lexmark 350 Series\ezprint.exe
C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
C:\Programmi\AVG Secure Search\vprot.exe
C:\Programmi\AVG\AVG2014\avgui.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\lxcvcoms.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe
C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Documenti\Application\CurrentFile\ssadp.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\toninho\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:56847
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)
O3 - Toolbar: AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programmi\AVG Secure Search\17.0.1.12\AVG Secure Search_toolbar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [CamMonitor] C:\Programmi\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [EzPrint] "C:\Programmi\Lexmark 350 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCVCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCVtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [vProt] "C:\Programmi\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [APSDaemon] "C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SsroService] C:\Documents and Settings\All Users\Documenti\Application\CurrentFile\ssadl.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: lollipop.lnk = C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\Lollipop\Lollipop.exe
O4 - Global Startup: Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Add to &Teleport - C:\PROGRA~1\TELEPO~1\teleport.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: http://192.168.1.1
O15 - ESC Trusted IP range: http://192.168.1.1
O16 - DPF: {18E077A6-F561-430F-AC3A-C1E126C135ED} - http://rujktuasmu.com/74f8eae30ce2601d6030/facaa/EnterInternet.cab
O16 - DPF: {50561951-8BB4-41D3-A6AA-5EAD2239CB53} (Image Uploader Control) - http://www.rikorda.it/ImageUploaderPHP/Scripts/ImageUploader7.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} (Java Plug-in 1.4.2) -
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7AFFCD34-5CB1-46C3-8A9E-8D40099AACB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{E1A001AE-A5FE-4891-A234-934838339C6D}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{F75C4E5B-F9CC-4568-8E64-0ACFEA19B785}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programmi\File comuni\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: LiveUpSC - SoftwareUpdService - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe
O23 - Service: lxcv_device - - C:\WINDOWS\system32\lxcvcoms.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: OfferBox update service - Unknown owner - C:\Programmi\OfferBox\OfferBoxUpdateService.exe
O23 - Service: ServiceLayer - Nokia - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ssro Service (SsroService) - SsroService - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\ServiceManager\ssro.exe
O23 - Service: Ssupd Service (SsupdService) - SsupdService - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\ssupd\ssupd.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: vToolbarUpdater17.2.0 - Unknown owner - C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe

--
End of file - 13558 bytes
Sponsor
Inviato: Sunday, December 15, 2013 10:08:27 PM

 
cbbusto
Inviato: Sunday, December 15, 2013 11:28:29 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Ciao, vedo che sei nuovo, benvenuto.
Caro amico sei messo maluccio, il tuo pc è pieno di porcherie, adware e dirottatori che ti rallentano e ti presentano pagine non richieste e magari anche pubblicità.
Diamogli una bella pulita e vedrai che ritornerà pimpante, almeno spero, per il pc di tuo fratello se non vedo i dati non si può intervenire, poi ha buttato soldi per un sw che vale meno di quelli gratuiti, ma ora pensiamo al tuo.
Fai tutte le operazioni che ti indico e leggi bene le istruzioni, se hai difficoltà dimmelo.

Scarica ed installa MalwareBytes:
clicca qui per il download : http://www.aiutamici.com/software?id=80346
Clicca su: Link al sito principale, poi nella pagina che appare clicca su: Free Version Download.
Prima di fare la scansione AGGIORNALO. (è molto importante)
Esegui una scansione completa del sistema. (NON veloce)
Elimina gli eventuali file infetti trovati. (li devi selezionare, e poi cliccare su "Rimuovi selezionati")
Posta il log.

Scarica Adwcleaner sul desktop:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Chiudi tutti i browser (è importante IE,Firefox Chrome ecc...)
Clicca sul pulsante "Scan".
Finita la scansione clicca su "Clean"
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà, e uscirà il log con le eliminazioni.
Postalo qui.

Scarica Junkware Removal Tool sul desktop.
http://www.majorgeeks.com/mg/get/junkware_removal_tool,1.html
Disattiva temporaneamente l'antivirus per evitare potenziali conflitti.
Doppio click su JRT
Lo strumento si aprirà e avvierà la scansione del sistema.
Devi avere pazienza in quanto questo tool può richiedere del tempo per completare la scansione .
Al termine, un log (JRT.txt) viene salvato sul desktop e si aprirà automaticamente.
Postalo qui.
Tutte le scansioni vanno fatte in modalità NORMALE.

Quando hai finito rifai una scansione con HJT e posta un log aggiornato che eliminiamo delle voci, poi ci sono anche dei Servizi da Disabilitare.
Ci risentiamo, ciao
zapek
Inviato: Monday, December 16, 2013 8:00:17 PM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Grazie per la pronta risposta.
Ho fatto quello che hai detto e ti posto i log qui sotto.
(NB: Il MalwareBytes l'ho usato il giorno prima di chiederti aiuto, per questo motivo non ha rilevato infezioni; gli altri due sw invece non li avevo mai usati)

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Versione database: v2013.12.16.06

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Antonio :: STANDARD-KJ84VX [amministratore]

16/12/2013 16.28.57
mbam-log-2013-12-16 (16-28-57).txt

Tipo di scansione: Scansione completa (C:\|D:\|)
Opzioni di scansione attive: Memoria | Esecuzione automatica | Registro | File di sistema | Euristica/Extra | Euristica/Shuriken | PUP | PUM
Opzioni di scansione disattivate: P2P
Elementi esaminati: 400389
Tempo impiegato: 1 ore, 54 minuti, 44 secondi

Processi rilevati in memoria: 0
(non sono stati rilevati elementi nocivi)

Moduli di memoria rilevati: 0
(non sono stati rilevati elementi nocivi)

Chiavi di registro rilevate: 0
(non sono stati rilevati elementi nocivi)

Valori di registro rilevati: 0
(non sono stati rilevati elementi nocivi)

Voci rilevate nei dati di registro: 0
(non sono stati rilevati elementi nocivi)

Cartelle rilevate: 0
(non sono stati rilevati elementi nocivi)

File rilevati: 0
(non sono stati rilevati elementi nocivi)

(fine)



# AdwCleaner v3.015 - Report created 16/12/2013 at 18:34:31
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Antonio - STANDARD-KJ84VX
# Running from : C:\Documents and Settings\Antonio\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : Offerbox update service

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Ask
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\BitGuard
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\SweetIM
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Trymedia
Folder Deleted : C:\Programmi\AVG Secure Search
Folder Deleted : C:\Programmi\Iminent
Folder Deleted : C:\Programmi\OfferBox
Folder Deleted : C:\Programmi\Savings Wave
Folder Deleted : C:\Programmi\SweetIM
Folder Deleted : C:\Programmi\XingHaoLyrics
Folder Deleted : C:\Programmi\File comuni\AVG Secure Search
Folder Deleted : C:\WINDOWS\system32\ARFC
Folder Deleted : C:\WINDOWS\system32\jmdp
Folder Deleted : C:\WINDOWS\system32\WNLT
Folder Deleted : C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\SoftwareUpdater
Folder Deleted : C:\Documents and Settings\Antonio\Application Data\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Antonio\Application Data\Nosibay
Folder Deleted : C:\Documents and Settings\Antonio\Application Data\OfferBox
Folder Deleted : C:\Documents and Settings\Antonio\Documenti\Save
Folder Deleted : C:\Documents and Settings\Elena\Impostazioni locali\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Elena\Menu Avvio\Programmi\BitGuard
Folder Deleted : C:\Documents and Settings\Elena\Documenti\Save
Folder Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\SweetPacksToolbarData
[!] Folder Deleted : C:\Documents and Settings\Elena\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl
[!] Folder Deleted : C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi
File Deleted : C:\Documents and Settings\All Users\Menu Avvio\Programmi\Offerbox.lnk
File Deleted : C:\WINDOWS\system32\ImhxxpComm.dll
File Deleted : C:\Documents and Settings\Antonio\Menu Avvio\Programmi\Esecuzione automatica\lollipop.lnk
File Deleted : C:\Documents and Settings\Elena\Menu Avvio\Programmi\lollipop.lnk
File Deleted : C:\Documents and Settings\Elena\Menu Avvio\Programmi\Esecuzione automatica\lollipop.lnk
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\bprotector_extensions.sqlite
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\bprotector_prefs.js
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\invalidprefs.js
File Deleted : C:\Programmi\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Programmi\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\searchplugins\Babylon.xml
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\searchplugins\BrowserProtect.xml
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\searchplugins\delta.xml
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\searchplugins\SweetIM Search.xml
File Deleted : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [lrcspal@xinghao.net]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mmiopbgcekanlhpjkonogoljpfmhpkhf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\BrowserProtect
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
Key Deleted : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl
Key Deleted : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\S
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
Key Deleted : HKCU\Software\52ed6d8b33fbe41
Key Deleted : HKLM\SOFTWARE\52ed6d8b33fbe41
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{94496571-6AC5-4836-82D5-D46260C44B17}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BC9FD17D-30F6-4464-9E53-596A90AFF023}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6E4C89CF-3061-4EE4-B22A-B7A8AAEA5CB3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8216BD4A-4DC2-4DCE-9AFF-C86C5ACC6757}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D4D390BE-98E6-4633-AD1B-B18B54BE5E76}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{8ABB9FA2-0740-4AD9-8F54-1192254B3CF4}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF780F87-FF2B-4DF8-92D0-73DB16A1543A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EEE6C35B-6118-11DC-9C72-001320C79847}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEE6C367-6118-11DC-9C72-001320C79847}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{CCC7A320-B3CA-4199-B1A6-9F516DD69829}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\WINDOWS\system32\ARFC\wrtc.exe]
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\AVG Security Toolbar
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\lollipop
Key Deleted : HKCU\Software\Nosibay
Key Deleted : HKCU\Software\Offerbox
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\Wajam
Key Deleted : HKCU\Software\XingHaoLyrics
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Iminent
Key Deleted : HKLM\Software\Offerbox
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKLM\Software\wnlt
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0D3BEDD9-C4BF-4040-BE99-8DA827F265A7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lrcspal@xinghao.net
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Offerbox
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Offerbox
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\QuestBrowse
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\ShoppingReport2
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9DDEB3D0FB4C0404EB99D88A722F567A
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Classes\Installer\Features\9DDEB3D0FB4C0404EB99D88A722F567A
Key Deleted : HKLM\Software\Classes\Installer\Features\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Classes\Installer\Products\9DDEB3D0FB4C0404EB99D88A722F567A
Key Deleted : HKLM\Software\Classes\Installer\Products\B2FD9C0A5B9838449838816A28001F4B
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>;*.offerbox.com

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v25.0.1 (it)

[ File : C:\Documents and Settings\Antonio\Application Data\Mozilla\Firefox\Profiles\4sf2x9fy.default\prefs.js ]

Line Deleted : user_pref("avg.install.installDirPath", "C:\\Documents and Settings\\All Users\\Dati applicazioni\\AVG Secure Search\\FireFoxExt\\17.2.0.38");
Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Line Deleted : user_pref("browser.newtab.url", "hxxp://www.searchgol.com/?babsrc=NT_ss&mntrId=9881001D0FF36A51&affID=125034&tsp=5032");
Line Deleted : user_pref("extensions.crossrider.bic", "13e938b53cd0b9603f4cf55376b18e60");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.InstallationThankYouPage", false);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.InstallationTime", 1368274982);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.active", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.addressbar", "NA");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.addressbarenhanced", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.asyncdb_dbWasSet", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.asyncdb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.asyncinternaldb_dbWasSet", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.backgroundjs", "\n\n//\n");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.backgroundver", 42);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.can_run_bg_code", true);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.certdomaininstaller", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.changeprevious", false);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie.InstallationTime.value", "1368274982");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_aoi.value", "1368274982");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_arbitrary_code.expiration", "Mon Dec 16 2013 18:34:01 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7B_GPL_PLUGIN.st%3D%7B%5C%2274052%26pid%3D1269%5C%22%3A%7Bs%3A%5B%5C%2274052%26pid%3D1695%5C%22%[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_blocklist.expiration", "Mon Dec 16 2013 18:34:01 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_blocklist.value", "%22facebook.com%2Cnonexistantdomain.com%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_country_code.expiration", "Thu Dec 19 2013 15:59:52 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_country_code.value", "%22IT%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_crr.value", "1387214931");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_currenttime.value", "%221386683806%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_hotfix20111102645.value", "%221%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_delay.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_delay.value", "24");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_disclosure.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_disclosure.value", "1368880505");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_list.expiration", "Mon Dec 16 2013 22:22:47 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_ib_list.value", "%7B%22f7610cf2b37067876b694a05c56f32e2%22%3A%7B%22p%22%3A%22/%22%7D%2C%22d763717b4b2e0a17a877cc642fb80ee4%22%3A%7B%22p%22%3A[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installtime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installtime.value", "%221367851527%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_parent_zoneid.value", "%2214019%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_pc_20120828.value", "1368286417036");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_product_id.value", "%221291%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie._GPL_zoneid.value", "%22186596%22");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.cookie.dbtest.value", "1368276990369");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.description", "Savings Wave");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.domain", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.enablesearch", false);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.homepage", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.iframe", false);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_appVer.value", "71");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_lastVersion.value", "0");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_meta.value", "%7B%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_nextCheck.expiration", "Mon Dec 16 2013 22:21:18 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_nextCheck.value", "true");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_queue.value", "%7B%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D%2C%22version%22%3Anull%7[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.js", "\n\nif(\"undefined\"!=typeof _GPL_PLUGIN){var _GPL_=function(){_GPL_PLUGIN.started||_GPL_PLUGIN.prepare({pid:1291,baseCDN:\"savingswave-a.akamaihd.[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.lastDailyReport", "1387207275226");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.lastUpdate", "1387207274245");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.manifesturl", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.name", "Savings Wave");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.newtab", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.opensearch", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1.code", "appAPI._cr_config={appID:function(){var a=appAPI.appInfo;if(a){return appAPI.appInfo.id;}else{return appAPI.appID;}}};$jquery.ex[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1.name", "base");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1.ver", 6);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000014.code", "Array.prototype.indexOf||(Array.prototype.indexOf=function(b){if(void 0===this||null===this)throw new TypeError;var c=Obje[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000014.name", "GPL Plugin (Loader)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000014.ver", 16);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000015.code", "var a=appAPI.db.getList(),cf_ran=!1,_GPL_BG={vars:{},rules:{},started:!1,allowed:!1,log:function(b){console.log(b)},factor[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000015.name", "GPL Background (BG)");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_1000015.ver", 39);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_13.code", "(function(a){a.selectedText=function(e,c){function d(){if(window.getSelection){return window.getSelection();}else{if(document.g[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_13.name", "CrossriderAppUtils");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_13.ver", 3);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_14.code", "if(typeof(appAPI)===\"undefined\"){appAPI={};}var CR__bIsIEWindow=false;if(typeof window!==\"undefined\"&&typeof window.navigat[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_14.name", "CrossriderUtils");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_14.ver", 8);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_16.code", "if((typeof isBackground===\"undefined\"||isBackground!==true)&&(typeof _firefoxVersion!==\"undefined\"&&_firefoxVersion>14)&&ty[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_16.name", "FFAppAPIWrapper");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_16.ver", 9);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_17.code", "if(typeof window!==\"undefined\"){\n/*!\n * jQuery JavaScript Library v1.4.2\n * hxxp://jquery.com/\n *\n * Copyright 2010, Joh[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_17.name", "jQuery");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_17.ver", 4);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_21.code", "var CrossriderDebugManager=(function(h){var f={appId:appAPI._cr_config.appID(),url:appAPI._cr_config.debug_app};return h.Class.[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_21.name", "debug");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_21.ver", 4);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_22.code", "(function(a){appAPI.queueManager={queue:[],register:function(b){this.queue.push(b);}};appAPI.ready=function(c,b){a.when.apply(n[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_22.name", "resources");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_22.ver", 4);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_28.code", "var CrossriderInitializerPlugin=(function(e){var c={appId:appAPI._cr_config.appID()},b,g=new e.Deferred(),f;return e.Class.exte[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_28.name", "initializer");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_28.ver", 3);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_4.code", "var jQuery = $jquery_171 = $jquery = null;\n\nif (document && typeof document.getElementById !== \"undefined\") {\n\n/*! jQuery [...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_4.name", "jquery_1_7_1");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_4.ver", 4);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_47.code", "(function(){appAPI.ready=function(a){appAPI.resources.isReady(a);};}());var CrossRiderResourcesManager=(function(){var C={appId[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_47.name", "resources_background");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_47.ver", 3);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_64.code", "(function(){var h=\"__CR_EMPTY_CHANNEL__\";var d=function(j){return(typeof j===\"object\"&&j!==null);};var b=function(j){return[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_64.name", "appApiMessage");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_64.ver", 2);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_72.code", "if(appAPI.__should_activate_validation__===true){(function(){var k={};var f=appAPI.appInfo.name;var l=function(s,r,t){var q=\"[[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_72.name", "appApiValidation");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_72.ver", 3);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_78.code", "if(typeof jQuery!==\"undefined\"&&(jQuery)&&typeof navigator!==\"undefined\"&&typeof navigator.userAgent!==\"undefined\"){(func[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_78.name", "CrossriderInfo");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_78.ver", 3);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_98.code", "(function(){var b=\"cr_\"+appAPI.appID+\"internalMessage\";var a=function(){var d=function(g){if(g===true){unsafeWindow.appAPI=[...]
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_98.name", "omniCommands");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins.plugin_98.ver", 2);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins_lists.plugins_0", "4,14,78,16,64,47,72,98,1000015");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins_lists.plugins_1", "17,14,78,13,16,64,4,1,21,22,72,98,1000014,28");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.plugins_lists.plugins_5", "4,14,78,13,16,64,47,72");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/12765/plugins/093/ff/plugins.json");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.pluginsversion", 65);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.publisher", "Innovative Apps");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.searchstatus", 0);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.setnewtab", false);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.thankyou", "");
Line Deleted : user_pref("extensions.crossriderapp12765.12765.updateinterval", 360);
Line Deleted : user_pref("extensions.crossriderapp12765.12765.ver", 71);
Line Deleted : user_pref("extensions.crossriderapp12765.apps", "12765");
Line Deleted : user_pref("extensions.crossriderapp12765.bic", "13e938b53cd0b9603f4cf55376b18e60");
Line Deleted : user_pref("extensions.crossriderapp12765.cid", 12765);
Line Deleted : user_pref("extensions.crossriderapp12765.firstrun", false);
Line Deleted : user_pref("extensions.crossriderapp12765.hadappinstalled", true);
Line Deleted : user_pref("extensions.crossriderapp12765.installationdate", 1368274982);
Line Deleted : user_pref("extensions.crossriderapp12765.lastcheck", 23062558);
Line Deleted : user_pref("extensions.crossriderapp12765.lastcheckitem", 23062595);
Line Deleted : user_pref("extensions.crossriderapp12765.modetype", "production");
Line Deleted : user_pref("extensions.crossriderapp12765.reportInstall", true);
Line Deleted : user_pref("extensions.crossriderapp12765.statsDailyCounter", 146);
Line Deleted : user_pref("extensions.delta.admin", false);
Line Deleted : user_pref("extensions.delta.aflt", "babsst");
Line Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Deleted : user_pref("extensions.delta.autoRvrt", "false");
Line Deleted : user_pref("extensions.delta.bbDpng", "11");
Line Deleted : user_pref("extensions.delta.cntry", "IT");
Line Deleted : user_pref("extensions.delta.dfltLng", "en");
Line Deleted : user_pref("extensions.delta.excTlbr", false);
Line Deleted : user_pref("extensions.delta.ffxUnstlRst", true);
Line Deleted : user_pref("extensions.delta.hdrMd5", "C0FFB29C7ABC768A116140D9F36132BF");
Line Deleted : user_pref("extensions.delta.id", "988173b0000000000000001d0ff36a51");
Line Deleted : user_pref("extensions.delta.instlDay", "15836");
Line Deleted : user_pref("extensions.delta.instlRef", "sst");
Line Deleted : user_pref("extensions.delta.lastVrsnTs", "1.8.16.1614:25:28");
Line Deleted : user_pref("extensions.delta.newTab", false);
Line Deleted : user_pref("extensions.delta.prdct", "delta");
Line Deleted : user_pref("extensions.delta.prtnrId", "delta");
Line Deleted : user_pref("extensions.delta.rvrt", "false");
Line Deleted : user_pref("extensions.delta.sg", "tzb");
Line Deleted : user_pref("extensions.delta.smplGrp", "none");
Line Deleted : user_pref("extensions.delta.tlbrId", "base");
Line Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Deleted : user_pref("extensions.delta.vrsn", "1.8.16.16");
Line Deleted : user_pref("extensions.delta.vrsnTs", "1.8.16.1614:25:28");
Line Deleted : user_pref("extensions.delta.vrsni", "1.8.16.16");
Line Deleted : user_pref("extensions.enabledAddons", "lrcspal%40xinghao.net:1.110,avg%40toolbar:17.2.0.38,crossriderapp12765%40crossrider.com:0.93.70,%7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:25.0.1");
Line Deleted : user_pref("sweetim.toolbar.RevertDialog.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.SearchBoxLogo", "");
Line Deleted : user_pref("sweetim.toolbar.SearchBoxText", "");
Line Deleted : user_pref("sweetim.toolbar.UserSelectedSaveSettings", "true");
Line Deleted : user_pref("sweetim.toolbar.Visibility.VisibilityGuardLastUnHide", "0");
Line Deleted : user_pref("sweetim.toolbar.Visibility.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.Visibility.intervaldays", "7");
Line Deleted : user_pref("sweetim.toolbar.cda.DisableOveride.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.cda.HideOveride.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.cda.RemoveOveride.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.cda.returnValue", "none");
Line Deleted : user_pref("sweetim.toolbar.defaultProvider", "");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.handler", "chrome://sim_toolbar_package/content/optionsdialog-handler.js");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.height", "335");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.id", "id_options_dialog");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.title", "$string.config.label;");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.url", "hxxp://www.sweetim.com/simffbar/options_remote_ff.asp?lang=$locale_id;&toolbar_version=$ITEM_VERSION;&crg=$cargo;");
Line Deleted : user_pref("sweetim.toolbar.dialogs.0.width", "761");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.handler", "chrome://sim_toolbar_package/content/exampledialog-handler.js");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.height", "300");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.id", "id_example_dialog");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.title", "Example (unit-test) dialog");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.url", "chrome://sim_toolbar_package/content/exampledialog.html");
Line Deleted : user_pref("sweetim.toolbar.dialogs.1.width", "500");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.handler", "chrome://sim_toolbar_package/content/cdadialog-handler.js");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.height", "150");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.id", "id_dialog_hide_disable_remove");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.title", "Option Dialog");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.url", "hxxp://www.sweetim.com/simffbar/simcdadialog.asp");
Line Deleted : user_pref("sweetim.toolbar.dialogs.2.width", "530");
Line Deleted : user_pref("sweetim.toolbar.dnscatch.domain-blacklist", ".*.sweetim.com/.*|.*.facebook.com/.*|.*.google.com/.*|.*.google.co.in/.*|.*.google.com.br/.*|.*.google.es/.*|.*.youtube.com/.*|.*.yahoo.com/.*|.[...]
Line Deleted : user_pref("sweetim.toolbar.highlight.colors", "#FFFF00,#00FFE4,#5AFF00,#0087FF,#FFCC00,#FF00F0");
Line Deleted : user_pref("sweetim.toolbar.keywordUrlGuard.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.logger.ConsoleHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.FileName", "ff-toolbar.log");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MaxFileSize", "200000");
Line Deleted : user_pref("sweetim.toolbar.logger.FileHandler.MinReportLevel", "7");
Line Deleted : user_pref("sweetim.toolbar.mode.debug", "false");
Line Deleted : user_pref("sweetim.toolbar.newtab.created", "false");
Line Deleted : user_pref("sweetim.toolbar.newtab.enable", "true");
Line Deleted : user_pref("sweetim.toolbar.newtab.url", "hxxp://home.sweetim.com/?src=97&barid=$toolbar_id;");
Line Deleted : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Line Deleted : user_pref("sweetim.toolbar.rc.url", "hxxp://tbsrv1.sweetim.com/simffbar/rc.html?toolbar_version=$ITEM_VERSION;&crg=$cargo;&flavour=$flavr;");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.addcontextdiv", "true");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.callback", "simVerification");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.domain-blacklist", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.domain-whitelist", "hxxp://(www.|apps.)?facebook\\.com.*");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.elementid", "id_script_sim_fb");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.id", "id_script_fb");
Line Deleted : user_pref("sweetim.toolbar.scripts.0.url", "hxxp://sc.sweetim.com/apps/in/fb/infb.js");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.addcontextdiv", "true");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.callback", "simVerification");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.domain-whitelist", "hxxps://(www.|apps.)?facebook\\.com.*");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.elementid", "id_script_sim_fb");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.id", "id_script_fb_hxxpS");
Line Deleted : user_pref("sweetim.toolbar.scripts.1.url", "hxxps://sc.sweetim.com/apps/in/fb/infb.js");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.addcontextdiv", "false");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.callback", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.domain-blacklist", ".*.google..*|.*.bing..*|.*.live..*|.*.msn..*|.*.yahoo..*|.*.youtube.com.*|.*ask.com.*|.*.sweetim.com.*");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.domain-whitelist", "");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.elementid", "id_predict_include_script");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.id", "id_script_prad");
Line Deleted : user_pref("sweetim.toolbar.scripts.2.url", "hxxp://cdn1.certified-apps.com/scripts/shared/enable.js?si=3104&tid=chff1");
Line Deleted : user_pref("sweetim.toolbar.search.external", "<?xml version=\"1.0\"?><TOOLBAR><EXTERNAL_SEARCH engine=\"hxxp://*google.*\" param=\"q=\" /><EXTERNAL_SEARCH engine=\"hxxp://search.yahoo.com/*\" param=\"[...]
Line Deleted : user_pref("sweetim.toolbar.search.history.capacity", "10");
Line Deleted : user_pref("sweetim.toolbar.searchguard.enable", "false");
Line Deleted : user_pref("sweetim.toolbar.searchguard.initialized_by_rc", "true");
Line Deleted : user_pref("sweetim.toolbar.simapp_id", "{452B3CB2-94C3-11E2-9F79-001D0FF36A51}");
Line Deleted : user_pref("sweetim.toolbar.urls.afteruninstall", "hxxp://www.sweetim.com/uninstallbar.asp?barid=$toolbar_id;");
Line Deleted : user_pref("sweetim.toolbar.urls.contactus", "hxxp://www.sweetim.com/help_contact.asp");
Line Deleted : user_pref("sweetim.toolbar.urls.homepage", "hxxp://www.sweetim.com");
Line Deleted : user_pref("sweetim.toolbar.urls.privacy", "hxxp://www.sweetim.com/eula.html#privacy");
Line Deleted : user_pref("sweetim.toolbar.urls.searchpage", "hxxp://search.sweetim.com/search.asp?barid=$toolbar_id;");
Line Deleted : user_pref("sweetim.toolbar.urls.uninstall", "hxxp://lp.sweetim.com/SweetPacksBundleUninstaller/");
Line Deleted : user_pref("sweetim.toolbar.version", "1.11.0.2");

-\\ Google Chrome v31.0.1650.63

[ File : C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\preferences ]


[ File : C:\Documents and Settings\Elena\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [45853 octets] - [16/12/2013 18:32:21]
AdwCleaner[S0].txt - [46843 octets] - [16/12/2013 18:34:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [46904 octets] ##########




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Antonio on 16/12/2013 at 19.11.57,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1960408961-1532298954-725345543-1003\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110111271165}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E1AD517E-5938-444C-A6DF-A65295446907}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted: [Folder] C:\Documents and Settings\Antonio\Application Data\mozilla\firefox\profiles\4sf2x9fy.default\extensions\crossriderapp12765@crossrider.com
Successfully deleted the following from C:\Documents and Settings\Antonio\Application Data\mozilla\firefox\profiles\4sf2x9fy.default\prefs.js

user_pref("extensions.crossrider.bic", "142fc84c4ed9bdc241f721703cf4f4e0");
user_pref("extensions.crossriderapp12765.12765.InstallationThankYouPage", false);
user_pref("extensions.crossriderapp12765.12765.InstallationTime", 1387216029);
user_pref("extensions.crossriderapp12765.12765.active", true);
user_pref("extensions.crossriderapp12765.12765.addressbar", "NA");
user_pref("extensions.crossriderapp12765.12765.addressbarenhanced", "");
user_pref("extensions.crossriderapp12765.12765.asyncdb_dbWasSet", true);
user_pref("extensions.crossriderapp12765.12765.asyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.crossriderapp12765.12765.asyncinternaldb_dbWasSet", true);
user_pref("extensions.crossriderapp12765.12765.asyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.crossriderapp12765.12765.backgroundver", 42);
user_pref("extensions.crossriderapp12765.12765.certdomaininstaller", "");
user_pref("extensions.crossriderapp12765.12765.changeprevious", false);
user_pref("extensions.crossriderapp12765.12765.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie.InstallationTime.value", "1387216029");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_aoi.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_aoi.value", "1387216029");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_arbitrary_code.expiration", "Mon Dec 16 2013 19:14:22 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_arbitrary_code.value", "%22%28function%28%29%7B_GPL_PLUGIN.st%3D%7B%5C%2274052%26pid%3D1269%5C%22%3A%7Bs%3A%5B%5C%22
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_blocklist.expiration", "Mon Dec 16 2013 19:14:22 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_blocklist.value", "%22facebook.com%2Cnonexistantdomain.com%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_country_code.expiration", "Mon Dec 23 2013 18:47:47 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_country_code.value", "%22IT%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_crr.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_crr.value", "1387216068");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_currenttime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_currenttime.value", "%221386683817%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_hotfix20111102645.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_hotfix20111102645.value", "%221%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installer_params.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_installer_params.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_parent_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_parent_zoneid.value", "%2214019%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_pc_20120828.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_pc_20120828.value", "1387217339728");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_product_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_product_id.value", "%221291%22");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_zoneid.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie._GPL_zoneid.value", "%22462641%22");
user_pref("extensions.crossriderapp12765.12765.cookie.dbtest.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.cookie.dbtest.value", "1387216043962");
user_pref("extensions.crossriderapp12765.12765.description", "Savings Wave");
user_pref("extensions.crossriderapp12765.12765.domain", "");
user_pref("extensions.crossriderapp12765.12765.enablesearch", false);
user_pref("extensions.crossriderapp12765.12765.homepage", "");
user_pref("extensions.crossriderapp12765.12765.iframe", false);
user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D");
user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%220%22%2C%22sub_id%22%3A%220%22%2C%22uzid%22%3A%220%22%7D");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_appVer.value", "71");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_lastVersion.value", "0");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_nextCheck.expiration", "Tue Dec 17 2013 00:47:18 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.crossriderapp12765.12765.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100 (ora solare Europa occidentale)");
user_pref("extensions.crossriderapp12765.12765.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3Anull%2C%22installer_verifier%22%3Anull%7D
user_pref("extensions.crossriderapp12765.12765.lastDailyReport", "1387216032666");
user_pref("extensions.crossriderapp12765.12765.lastUpdate", "1387216031538");
user_pref("extensions.crossriderapp12765.12765.manifesturl", "");
user_pref("extensions.crossriderapp12765.12765.name", "Savings Wave");
user_pref("extensions.crossriderapp12765.12765.newtab", "");
user_pref("extensions.crossriderapp12765.12765.opensearch", "");
user_pref("extensions.crossriderapp12765.12765.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/12765/plugins/093/ff/plugins.json");
user_pref("extensions.crossriderapp12765.12765.pluginsversion", 65);
user_pref("extensions.crossriderapp12765.12765.publisher", "Innovative Apps");
user_pref("extensions.crossriderapp12765.12765.searchstatus", 0);
user_pref("extensions.crossriderapp12765.12765.setnewtab", false);
user_pref("extensions.crossriderapp12765.12765.thankyou", "");
user_pref("extensions.crossriderapp12765.12765.updateinterval", 360);
user_pref("extensions.crossriderapp12765.12765.ver", 71);
user_pref("extensions.crossriderapp12765.apps", "12765");
user_pref("extensions.crossriderapp12765.bic", "142fc84c4ed9bdc241f721703cf4f4e0");
user_pref("extensions.crossriderapp12765.cid", 12765);
user_pref("extensions.crossriderapp12765.firstrun", false);
user_pref("extensions.crossriderapp12765.hadappinstalled", true);
user_pref("extensions.crossriderapp12765.installationdate", 1387216029);
user_pref("extensions.crossriderapp12765.modetype", "production");
user_pref("extensions.crossriderapp12765.reportInstall", true);
user_pref("extensions.crossriderapp12765.statsDailyCounter", 1);





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16/12/2013 at 19.21.03,68
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19.25.15, on 16/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\AVG\AVG2014\avgwdsvc.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\Programmi\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Programmi\Lexmark 350 Series\ezprint.exe
C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe
C:\Programmi\AVG\AVG2014\avgui.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\Programmi\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Program Files\FinePixViewerS\QuickDCF2.exe
C:\Programmi\WinZip\WZQKPICK.EXE
C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\WINDOWS\system32\lxcvcoms.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\WINDOWS\System32\svchost.exe
C:\Documents and Settings\All Users\Documenti\Application\CurrentFile\ssadp.exe
C:\WINDOWS\explorer.exe
C:\Programmi\toninho\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:56847
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
O2 - BHO: Supporto di collegamento per Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\Run: [CamMonitor] C:\Programmi\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [EzPrint] "C:\Programmi\Lexmark 350 Series\ezprint.exe"
O4 - HKLM\..\Run: [LXCVCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCVtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [APSDaemon] "C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SsroService] C:\Documents and Settings\All Users\Documenti\Application\CurrentFile\ssadl.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [swg] "C:\Programmi\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: Add to &Teleport - C:\PROGRA~1\TELEPO~1\teleport.htm
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
O9 - Extra button: Ricerche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted IP range: http://192.168.1.1
O15 - ESC Trusted IP range: http://192.168.1.1
O16 - DPF: {18E077A6-F561-430F-AC3A-C1E126C135ED} - http://rujktuasmu.com/74f8eae30ce2601d6030/facaa/EnterInternet.cab
O16 - DPF: {50561951-8BB4-41D3-A6AA-5EAD2239CB53} (Image Uploader Control) - http://www.rikorda.it/ImageUploaderPHP/Scripts/ImageUploader7.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} (Java Plug-in 1.4.2) -
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{7AFFCD34-5CB1-46C3-8A9E-8D40099AACB3}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{E1A001AE-A5FE-4891-A234-934838339C6D}: NameServer = 208.67.222.222,208.67.220.220
O17 - HKLM\System\CCS\Services\Tcpip\..\{F75C4E5B-F9CC-4568-8E64-0ACFEA19B785}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgfws.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio di Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: LiveUpSC - Unknown owner - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe (file missing)
O23 - Service: lxcv_device - - C:\WINDOWS\system32\lxcvcoms.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia - C:\Programmi\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Ssro Service (SsroService) - SsroService - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\ServiceManager\ssro.exe
O23 - Service: Ssupd Service (SsupdService) - SsupdService - C:\Documents and Settings\Antonio\Impostazioni locali\Dati applicazioni\ssupd\ssupd.exe
O23 - Service: Utilità di pianificazione di LiveUpdate automatico - Symantec Corporation - C:\Programmi\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: vToolbarUpdater17.2.0 - Unknown owner - C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe (file missing)

--
End of file - 12368 bytes

cbbusto
Inviato: Monday, December 16, 2013 11:35:11 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Hai visto quanta robaccia è stata eliminata.
Prima operazione.
Disattiva il Tea Timer di SpyBot così:
Apri SpyBot in modalità avanzata (menù modalità - avanzata) poi vai in utilità - resident e togli la spunta a TeaTimer, e riavvia il pc.

Chiudi tutti i programmi e disconnesso lanci HJT e clicca sul secondo pulsante: Do a system scan only poi metti la spunta alle voci che ti indico e alla fine clic su Fix checked:

R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)

O2 - BHO: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll

O2 - BHO: (no name) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)

O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - (no file)

O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - (no file)

O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Programmi\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll

O3 - Toolbar: Lexmark Barra degli strumenti - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Programmi\Lexmark Toolbar\toolband.dll

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"

O4 - HKLM..Run: [CamMonitor] C:ProgrammiHewlett-PackardDigital Imaging\Unloadhpqcmon.exe

O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Programmi\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe

O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Programmi\File comuni\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"

O4 - HKLM\..\Run: [EzPrint] "C:\Programmi\Lexmark 350 Series\ezprint.exe"

O4 - HKLM\..\Run: [LXCVCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCVtime.dll,_RunDLLEntry@16

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [APSDaemon] "C:\Programmi\File comuni\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [SsroService] C:\Documents and Settings\All Users\Documenti\Application\CurrentFile\ssadl.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Programmi\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO LOCALE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVIZIO DI RETE')

O4 - Global Startup: Exif Launcher S.lnk = C:\Program Files\FinePixViewerS\QuickDCF2.exe

O4 - Global Startup: WinZip Quick Pick.lnk = C:\Programmi\WinZip\WZQKPICK.EXE

Ora ci sono dei Servizi da disabilitare.
vai nel Pannello di controllo - Strumenti amministrazione - Servizi e cerca queste voci:

LiveUpSC
Ssro Service (SsroService)
Ssupd Service (SsupdService)

Su ogni voce fai doppio clic e nella pagina che appare in Tipo di avvio metti Disabilitato. OK esci.

Poi fai una pulizia con Ccleaner compreso il Registro, per il Registro spunta tutte le voci, acconsenti al backup quando richiesto, sempre in Ccleaner vai in Strumenti Ripristino Sistema seleziona tutte le voci tranne l'ultima che non è selezionabile e rimane per sicurezza, poi clic su Rimuovi.
Se non conosci il programma, lo trovi su Aiutamici sezione software.

Vai in C:\windows, cerca la cartella Prefetch aprila ed eliminatutto il contenuto, non eliminare la cartella.

Abbiamo finito, dimmi come va il pc. Ciao








zapek
Inviato: Tuesday, December 17, 2013 11:42:31 AM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Grazie cbbusto, il computer adesso va molto molto meglio Applause ,

se posso ti mando il log hjjackthis di quello di mio fratello
NB: volevo effettuare gia' una pulita con i programmi che mi hai consigliato per il primo comp. ma, per prudenza,(visto che lui ha comperato RegClean Pro) avevo paura di qualche conflitto fra sw, quindi aspetto tue indicazioni.
Ciao e ancora grazie.


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11.23.52, on 17/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\Programmi\AVG Secure Search\vprot.exe
C:\Programmi\AVG\AVG PC Tuneup\BoostSpeed.exe
C:\Programmi\AVG\AVG2014\avgui.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\Programmi\Ask.com\Updater\Updater.exe
C:\Programmi\Google\Update\1.3.22.3\GoogleCrashHandler.exe
C:\Programmi\Advanced System Protector\AdvancedSystemProtector.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\AVG\AVG2014\avgidsagent.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe
C:\Programmi\AVG\AVG2014\avgwdsvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Microsoft Office\Office\OSA.EXE
C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\program\soffice.exe
C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe
C:\Programmi\program\soffice.bin
C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\loggingserver.exe
C:\Programmi\AVG\AVG2014\avgnsx.exe
C:\Programmi\AVG\AVG2014\avgemcx.exe
C:\Programmi\AVG\AVG2014\avgrsx.exe
C:\Programmi\AVG\AVG2014\avgcsrvx.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\File comuni\Java\Java Update\jucheck.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\msiexec.exe
C:\Programmi\log2\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programmi\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O2 - BHO: IMinent WebBooster - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Programmi\Iminent\Iminent.WebBooster.InternetExplorer.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programmi\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: PricePeep - {FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} - C:\Programmi\PricePeep\pricepeep.dll
O3 - Toolbar: (no name) - {95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programmi\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [vProt] "C:\Programmi\AVG Secure Search\vprot.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Programmi\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Programmi\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [Advanced System Protector_startup] "C:\Programmi\Advanced System Protector\AdvancedSystemProtector.exe" autolaunch
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Programmi\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: lollipop_12131252.lnk = C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.exe
O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Programmi\program\quickstart.exe
O4 - Global Startup: Avvio Office.lnk = C:\Programmi\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Ricerca rapida.lnk = C:\Programmi\Microsoft Office\Office\FINDFAST.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{70FC8F96-992B-4626-98C9-1309EB096464}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programmi\File comuni\AVG Secure Search\ViProtocolInstaller\17.2.0\ViProtocol.dll
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: vToolbarUpdater17.2.0 - Unknown owner - C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe

--
End of file - 10519 bytes
cbbusto
Inviato: Wednesday, December 18, 2013 12:20:02 AM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Mamma mia come siamo messi male, tutte le porcherie del web le ha sul pc.

Per prima cosa deve eliminare questi programmi, o da installazione applicazioni oppure seguendo il percorso e cancellare tutto file e cartelle:
C:\Programmi\Ask.com\Updater\Updater.exe
C:\Programmi\Advanced System Protector\AdvancedSystemProtector.exe

Poi facciamo le pulizie come le tue.
Scarica ed installa MalwareBytes:
clicca qui per il download : http://www.aiutamici.com/software?id=80346
Clicca su: Link al sito principale, poi nella pagina che appare clicca su: Free Version Download.
Prima di fare la scansione AGGIORNALO. (è molto importante)
Esegui una scansione completa del sistema. (NON veloce)
Elimina gli eventuali file infetti trovati. (li devi selezionare, e poi cliccare su "Rimuovi selezionati")
Posta il log.

Scarica Adwcleaner sul desktop:
http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/2-adwcleaner
Chiudi tutti i browser (è importante IE,Firefox Chrome ecc...)
Clicca sul pulsante "Scan".
Finita la scansione clicca su "Clean"
Conferma con OK le varie finestre che ti compariranno.
Il pc si riavvierà, e uscirà il log con le eliminazioni.
Postalo qui.

Scarica Junkware Removal Tool sul desktop.
http://www.majorgeeks.com/mg/get/junkware_removal_tool,1.html
Disattiva temporaneamente l'antivirus per evitare potenziali conflitti.
Doppio click su JRT
Lo strumento si aprirà e avvierà la scansione del sistema.
Devi avere pazienza in quanto questo tool può richiedere del tempo per completare la scansione .
Al termine, un log (JRT.txt) viene salvato sul desktop e si aprirà automaticamente.
Postalo qui.
Tutte le scansioni vanno fatte in modalità NORMALE.

Alla fine rifare la scansione con HJT e posta il nuovo log che eliminiamo altre voci.
Il programma che ha acquistato digli di lasciarlo perdere.
Ciao


zapek
Inviato: Thursday, December 19, 2013 10:22:42 AM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Ciao, rieccomi qua, fatto tutto ecco i log delle pulizie e il nuovo hjjackthis:
(ps: scusa per la pesantezza del post che ne e' venuto fuori, ma e' la prima volta e non ho saputo ben calcolarne la lunghezza, prossima volta dividero' in due...d'oh! )

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Versione database: v2013.12.18.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Administrator :: PC-DESK [amministratore]

18/12/2013 16.13.09
mbam-log-2013-12-18 (16-13-09).txt

Tipo di scansione: Scansione completa (C:\|D:\|)
Opzioni di scansione attive: Memoria | Esecuzione automatica | Registro | File di sistema | Euristica/Extra | Euristica/Shuriken | PUP | PUM
Opzioni di scansione disattivate: P2P
Elementi esaminati: 296682
Tempo impiegato: 1 ore, 20 minuti, 48 secondi

Processi rilevati in memoria: 2
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.exe (Adware.LolliPop.IT) -> 1424 -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.exe (PUP.Optional.Iminent.A) -> 484 -> Verrà eliminato al riavvio.

Moduli di memoria rilevati: 1
C:\Programmi\Iminent\f_in_box.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.

Chiavi di registro rilevate: 104
HKCR\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCR\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCR\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCR\PricePeep.PricePeepBho.1 (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCR\PricePeep.PricePeepBho (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
HKCR\AppID\{38A066B0-DD5F-4226-AC4F-6A27C1BFB892} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3} (PUP.Optional.Delta.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\CLSID\{01A602A0-D0B9-445B-8081-719E4177C4A7} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.ShowControlCenterCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKCR\Updater.AmiUpd.1 (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKCR\Updater.AmiUpd (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
HKCR\CLSID\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\CLSID\{26C9BBE4-6D45-4AB6-A5B4-E068C9F5EF6D} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\TypeLib\{A9CAF365-EA35-45DA-BD8B-2EFA09D374AC} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Interface\{ACA608DB-A210-4253-B799-3FD24E9A7BF5} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.ActiveContentHandle.1 (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.ActiveContentHandler (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.BrowserHelperObject.1 (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.BrowserHelperObject (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\CLSID\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\TypeLib\{3BF3DED5-0FC8-4207-AC09-AA7B5AF4E408} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Interface\{1B97A696-5576-43AC-A73B-E1D2C78F21E8} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\PricePeep.PricePeepBho.1 (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\PricePeep.PricePeepBho (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD6D90C0-E6EE-4BC6-B9F7-9ED319698007} (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{58124A0B-DC32-4180-9BFF-E0E21AE34026} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{977AE9CC-AF83-45E8-9E03-E2798216E2D5} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0af350d9-3916-454b-ac53-0b0b65f41301} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08} (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DigitalSite (PUP.Optional.DigitalSites.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PricePeep (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\lollipop_12131252 (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IMBoosterARP (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1 (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Business.Tinyfying.DownloadArgs (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Business.Tinyfying.LinkToPromoteArgs (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Business.Tinyfying.RawDataArgs (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Business.Tinyfying.TinyUrlArgs (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Business.Tinyfying.ViralLinkArgs (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.ClientCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.ContractBase (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.AddToUserContentCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.CheckLoginStatusCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.CleanCacheCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GameOverCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetCreditCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetInstallationContextCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetLoginStatusCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetLoginStatusResult (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetVariableCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.GetVariableResult (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.InstallationContextResult (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.LoadContentCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.LoadContentCommandResult (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.LoginCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.LoginStatusChangedCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.LogoutCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.MergeIdentityCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.MyAccountCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.PlayContentCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.PostContentCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.RecycleViewsCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.SetVariableCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.ShowBrowserWindowCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.ShowPluginWindowCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.TestContentCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.UserContentChangedCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.VariableChangedCallback (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.WarmUpCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.DataContracts.WelcomeCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.ServerCommand (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.Communication.ServerResult (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.LightContent (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.LightUri (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\Iminent.Mediator.MediatorServiceProxy (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.ScriptExtender (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.ScriptExtender.1 (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.TinyUrlHandler (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\IminentWebBooster.TinyUrlHandler.1 (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\AppID\Iminent.WebBooster.InternetExplorer.DLL (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCR\AppID\PricePeep.DLL (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\Iminent (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\AppDataLow\Software\PricePeep (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> Spostato in quarantena ed eliminato con successo.
HKCU\Software\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\SOFTWARE\Google\Chrome\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.

Valori di registro rilevati: 1
HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> Dati: 0R0DtO0U1C1S1U1StR0J1Q2P1J1K1I2R -> Spostato in quarantena ed eliminato con successo.

Voci rilevate nei dati di registro: 0
(non sono stati rilevati elementi nocivi)

Cartelle rilevate: 32
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc (PUP.Optional.DigitalSite.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\SwvUpdater (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop (Adware.LolliPop.IT) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\it (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\de (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\ro (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\defaults (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\defaults\preferences (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst\Bootstrapper (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\PricePeep (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Iminent\Mediator (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Iminent\Mediator\Datas (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\Iminent\Mediator (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\Iminent\Mediator\Datas (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\Iminent\Mediator\Datas\Cache (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\Iminent\Mediator\Datas\Cache\apix.iminent.com (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\BitGuard\2.6.1673.238 (PUP.Optional.BitGuard.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\BitGuard\2.6.1673.238\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8} (PUP.Optional.BitGuard.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1 (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Partial Backups (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.

File rilevati: 180
C:\Programmi\PricePeep\pricepeep.dll (Adware.Agent) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\SwvUpdater\Updater.exe (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.WebBooster.InternetExplorer.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\PricePeep\pricepeep.dll (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc\UpdateTask.exe (PUP.Optional.DigitalSites.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Documenti\regclean-pro [1].exe (PUP.Optional.RegCleanerPro) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Documenti\Download\aspsetup__2594_il9697483.exe (PUP.Optional.InstallMonetizer) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Documenti\Download\regclean-pro.exe (PUP.Optional.InstallCore.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Documenti\Download\geogebra.exe (PUP.Optional.InstallCore.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Documenti\Download\PDFReaderSetup.exe (PUP.Optional.InstallCore.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\PricePeep\uninstall.exe (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
C:\System Volume Information\_restore{B6E656F7-D7BF-4E5A-80CF-347E0061FED8}\RP1469\A0118484.exe (PUP.Optional.Firseria) -> Spostato in quarantena ed eliminato con successo.
C:\WINDOWS\Tasks\RegClean Pro_UPDATES.job (PUP.Optional.RegCleanerPro.J) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc\config.dat (PUP.Optional.DigitalSite.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc\prod.dat (PUP.Optional.DigitalSite.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc\STTL.DAT (PUP.Optional.DigitalSite.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\DigitalSite\UpdateProc\TTL.DAT (PUP.Optional.DigitalSite.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\SwvUpdater\Updater.xml (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\SwvUpdater\status.cfg (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
C:\WINDOWS\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.lpd (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\logo.ico (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.bat (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.dat (Adware.LolliPop.IT) -> Verrà eliminato al riavvio.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252.exe (Adware.LolliPop.IT) -> Verrà eliminato al riavvio.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252_cfg.lpd (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Lollipop\lollipop_12131252_ps.lpd (Adware.LolliPop.IT) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\SearchTheWeb.xml (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Mediator.ActivePlayers.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\f_in_box.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.AxImp.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Booster.UI.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Business.Connect.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Business.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.Business.tlb (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.crx (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Entity.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.exe (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.exe.config (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.InstallLog (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.InstallState (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Microsoft.DirectX.AudioVideoPlayback.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Microsoft.Expression.Interactions.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\System.Data.SQLite.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\System.Data.SQLite.xml (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\System.Windows.Interactivity.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\System.Windows.Interactivity.xml (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\WPFLocalizeExtension.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\WPFLocalizeExtension.xml (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Mediator.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.Mediator.tlb (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Messengers.exe (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Messengers.exe.config (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Services.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.WinCore.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.WinCore.WLM.WinEvents.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.WinCore.WLM15.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.WinCore.Yahoo.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\Iminent.Windows.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\Iminent.Workflow.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Verrà eliminato al riavvio.
C:\Programmi\Iminent\it\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\it\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\de\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\en\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\es\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\Microsoft.Expression.Interactions.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\fr\System.Windows.Interactivity.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\ro\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\ro\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\ro\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr\Iminent.Booster.UI.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr\Iminent.Business.Connect.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr\Iminent.Messengers.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr\Iminent.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\tr\Iminent.Services.resources.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome.manifest (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\install.rdf (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\browser.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\browser.xul (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\config.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\scriptExtender.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\scriptInjector.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\chrome\content\utils.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\webbooster@iminent.com\defaults\preferences\prefs.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst\main.ico (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst\msacm32.dll (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst\SearchTheWeb.ico (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Iminent\inst\Bootstrapper\Bootstrapper.exe (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\Mozilla Firefox\defaults\pref\all-iminent.js (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\PricePeep\installer.ico (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\PricePeep\unutil.exe (PUP.Optional.PricePeep.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\TraditionalCn_rcp_zh-tw.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\German_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\RCPUninstall.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Chinese_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\CleanSchedule.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Cloud_Backup_Setup.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Cloud_Backup_Setup_Intl.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Danish_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\default_pack_installer.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Dutch_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\eng_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Finnish_rcp_fi.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\French_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\greek_rcp_el.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\install_left_image.bmp (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\isxdl.dll (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Italian_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Japanese_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\korean_rcp_ko.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Norwegian_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\polish_rcp_pl.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\portugese_rcp_pt.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Portuguese_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\RegCleanPro.dll (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\RegCleanPro.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\russian_rcp_ru.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Spanish_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\Swedish_rcp.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\systweakasp.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\turkish_rcp_tr.ini (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\unins000.dat (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\unins000.exe (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\unins000.msg (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Programmi\RegClean Pro\xmllite.dll (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\WINDOWS\Tasks\RegClean Pro_DEFAULT.job (PUP.Optional.RegCleanPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent\SearchTheWeb.lnk (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent\Blog.lnk (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent\FAQ.lnk (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent\Help.lnk (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Menu Avvio\Programmi\Iminent\Iminent.lnk (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\WINDOWS\system32\roboot.exe (PUP.Optional.PCPerformer.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Iminent\Mediator\Datas\globalcache.dat (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Iminent\Mediator\Datas\user.dat (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\All Users\Dati applicazioni\Iminent\Mediator\Datas\Cache\apix.iminent.com\1040.11575f00-7bdc-4181-ba0a-b298aeab228c.dat (PUP.Optional.Iminent.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\1386870784.reg (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\ExcludeList.rcp (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Italian_rcp.dat (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-13-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-14-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-15-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-16-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-17-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\log_12-18-2013.log (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\rcpupdate.ini (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\results.rcp (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\summary2.bin (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\TempHLList.rcp (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rmx (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000001.rxb (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rmx (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.
C:\Documents and Settings\Administrator\Dati applicazioni\Systweak\RegClean Pro\Version 6.1\Partial Backups\00000002.rxb (PUP.Optional.RegCleanerPro.A) -> Spostato in quarantena ed eliminato con successo.

(fine)


# AdwCleaner v3.015 - Report created 19/12/2013 at 09:22:22
# Updated 10/12/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Administrator - PC-DESK
# Running from : C:\Documents and Settings\Administrator\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Ask
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Babylon
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\BitGuard
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Iminent
Folder Deleted : C:\Documents and Settings\All Users\Dati applicazioni\Tarma Installer
Folder Deleted : C:\Documents and Settings\All Users\Menu Avvio\Programmi\RegClean Pro
Folder Deleted : C:\Programmi\AVG Secure Search
Folder Deleted : C:\Programmi\MyPC Backup
Folder Deleted : C:\Programmi\PC Speed Maximizer
Folder Deleted : C:\Programmi\Yontoo
Folder Deleted : C:\Programmi\File comuni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\IncrediMail_MediaBar_2
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Conduit
Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\PackageAware
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\AVG Secure Search
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\digitalsite
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Iminent
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Systweak
Folder Deleted : C:\Documents and Settings\Administrator\Documenti\PC Speed Maximizer
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Conduit
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Smartbar
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\ValueApps
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\CT2724386
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Folder Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Extensions\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}
[!] Folder Deleted : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Extensions\licjnkifamhpbaefhdpacpmihicfbomb
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Extensions\plugin@yontoo.com.xpi
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\Extensions\pricepeep@getpricepeep.com.xpi
File Deleted : C:\Documents and Settings\All Users\Desktop\RegClean Pro.lnk
File Deleted : C:\WINDOWS\system32\conduitEngine.tmp
File Deleted : C:\Documents and Settings\Administrator\Menu Avvio\Programmi\lollipop.lnk
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\searchplugins\Askcom.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\searchplugins\avg-secure-search.xml
File Deleted : C:\Programmi\Mozilla Firefox\searchplugins\avg-secure-search.xml
File Deleted : C:\Programmi\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\searchplugins\MyStart Search.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\searchplugins\SearchTheWeb.xml
File Deleted : C:\Programmi\Mozilla Firefox\searchplugins\SearchTheWeb.xml
File Deleted : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\user.js

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\niapdbllcanepiiimjjndipklodoedlc
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Start Menu2\Programs\Iminent
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\YontooIEClient.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine
Key Deleted : HKLM\SOFTWARE\Classes\Iminent
Key Deleted : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api
Key Deleted : HKLM\SOFTWARE\Classes\YontooIEClient.Api.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Iminent
Key Deleted : HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\IminentMessenger
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Programmi\Iminent\Iminent.exe]
Value Deleted : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Programmi\Iminent\Iminent.Messengers.exe]
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2724386
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{01994268-3C10-4044-A1EA-7A9C1B739A11}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{CFDAFE39-20CE-451D-BD45-A37452F39CF0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02C9C7B0-C7C8-4AAC-A9E4-55295BF60F8F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0398B101-6DA7-473F-A290-17D2FBC88CC0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0CC36196-8589-4B80-A771-D659411D7F90}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{143D96F9-EB64-48B3-B192-91C2C41A1F43}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{14F7D91F-F669-45C9-9F42-BACBFDB86EAD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{187A6488-6E71-4A2A-B118-7BEFBFE58257}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2D065204-A024-4C39-8A38-EE7078EC7ACF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F5476C-677B-4DB0-B397-51F5BFD86840}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{351798B1-C1D2-45AB-92B4-4D6C2D6AB5AF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3AEA1BEF-6195-46F4-ACA2-0ED14F7EFA1B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3D7F9AC3-BAC3-4E51-81D7-D121D79E550A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4498C5E9-93C6-4142-B6BE-F0C6DC48B77A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{479BF2D6-E362-4A99-B1AB-BC764D7B97AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{492A108F-51D0-4BD8-899D-AD4AB2893064}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4B6D6E60-FBD2-4E79-BF4B-886BC98F1797}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5C176BA0-6FC0-4EBD-8ACF-24AC592506B6}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60893E02-2E5B-43F9-A93A-BAD60C2DF6EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6D39931F-451E-4BDD-BAF4-37FB96DBBA5D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{76C684D2-C35D-4284-976A-D862F53ADB81}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{796D822A-C3F9-4A97-BAAB-42FE7628EA63}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{79EF3691-EC1A-4705-A01A-D2E36EC11758}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E84186E-B5DE-4226-8A66-6E49C6B511B4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{82F41418-8E64-47EB-A7F1-4702A974D289}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{85D920CE-63A7-46DC-8992-41D1D2E07FAD}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{895ED5E8-ABB4-40C3-A0CA-2571964268E2}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8AAC123A-1959-4A45-BFC5-E2D50783098A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{99066096-8989-4612-841F-621A01D54AD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A07956CD-81F8-4A03-B524-5D87E690DC83}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B5E3B26B-6E5C-4865-A63D-58D04B10E245}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B84D2DC5-42B2-4E5E-BF61-7B48152FF8EF}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89D5309-0367-4494-A92F-3D4C94F88307}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C014EBF8-8854-448B-B5A4-557C4090EDCE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C31191DB-2F64-464C-B97C-6AC81ACB7AAC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C342C7A7-F622-4EF3-8B7F-ABB9FBE73F14}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C4765B07-BC2F-477B-925C-B2BF24887823}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C875C0A1-09E3-48D5-9F8E-BD337796FD14}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CD126DA6-FF5B-4181-AC13-54A62240D2FA}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D8F01233-2DE6-4EE7-8988-37263F00651B}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DD438708-AAB4-422D-A322-B619589F5680}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E812AE43-7799-4E67-8CF8-4104297A2D16}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F0BAAEC7-9AE0-49FF-9C4B-86E774FF397F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F92193FD-2243-4401-9ACC-49FF30885898}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD21B8A2-910B-45AC-9C10-45E6A8B84984}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FE9271F2-6EFD-44B0-A826-84C829536E93}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{75BF416E-4326-45B5-8A2D-AE32D05B930B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32966A2-F7C2-4362-A6CF-399EC8B44110}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C58D664A-3DBC-4925-AE74-0382007DF113}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C776D7F4-BA85-4B75-AAFC-3A0A11FE6E36}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{13ABD093-D46F-40DF-A608-47E162EC799D}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{CFF4DB9B-135F-47C0-9269-B4C6572FD61A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{CCC7A320-B3CA-4199-B1A6-9F516DD69829}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\dsiteproducts
Key Deleted : HKCU\Software\IM
Key Deleted : HKCU\Software\ImInstaller
Key Deleted : HKCU\Software\lollipop
Key Deleted : HKCU\Software\SmartBar
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\systweak
Key Deleted : HKCU\Software\YahooPartnerToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\IncrediMail_MediaBar_2
Key Deleted : HKLM\Software\AVG Secure Search
Key Deleted : HKLM\Software\AVG Security Toolbar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\ImInstaller
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{79A765E1-C399-405B-85AF-466F52E918B0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\IMBoosterARP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\PricePeep
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\RegClean Pro_is1
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7652513C62FF63448CFF05163719DB7
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F1057DD419AED0B468AD8888429E139A

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v26.0 (it)

[ File : C:\Documents and Settings\Administrator\Dati applicazioni\Mozilla\Firefox\Profiles\0ay02di4.default\prefs.js ]

Line Deleted : user_pref("CT2724386..clientLogIsEnabled", true);
Line Deleted : user_pref("CT2724386..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2724386..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2724386./9b+7e+x305.from_oldbar.enc", "JH4nQTM0NjN5RTo9KnIseXp+ejEoMztNR0VJSExZUllLM15TVkMsRTM0ODNKQUxUZmBXY2Rnb2peS3ZrbltEXUtMUEpiWWRseHold14qfiJuV3BeX2JmdWx3ICEtKDA7LXM/NDckbCZzdHd6KyIt[...]
Line Deleted : user_pref("CT2724386./9b+7e,x305.from_oldbar.enc", "JH4oQS8/Pjd5RTo9KnIseXt4fTEoMzxHSEAsV0xPPCU+LC4rL0M6RU5ZUFtXZ2pmQm1iRV5pVD1WREZDRltSXWZxbCFua1h9c2dQaVdZVlhuZXB5MycyfWo2Ky56Y3xqbGlqIngkLUY6PkVGSUxA[...]
Line Deleted : user_pref("CT2724386./9b+7e-x305.from_oldbar.enc", "JH4pNjA8NjZ5RTo9KnIseXogezEoMz1GK1VKTUtHSVlNM1NdT0MsRTM0OTRKQUxWW15sZW5wbHFkc21NeG1wXUZfTU5TTWRbZnBVKHwgfXl7MC4kIjAjaTUqLW06K3xlfmxtcmskeiYwRDhGOEw7[...]
Line Deleted : user_pref("CT2724386./9b+7e/x305.from_oldbar.enc", "JH4rQTU2MnhEOTwpcSt4fHt3MCcyPkxDQ1NOLVhbPCU+LDAuNEM6RVFYYmleZ1pBbGFkUTpTQUVDSFhPWmZte3xxdHJucCF0dFsne35rVG1bX11hcml0IS8nMyw3MTk8LC8zNTtCM3lFOj0qcix5[...]
Line Deleted : user_pref("CT2724386./9b+7e06cg5el8:.from_oldbar.enc", "bm1tcXFycW50dA==");
Line Deleted : user_pref("CT2724386./9b+7e06cg5el;8i:k.from_oldbar.enc", "JH4tLyJqdHNzd3d4d3R6eiQvS0lHT0I1fV1cPQ==");
Line Deleted : user_pref("CT2724386./9b+7e0x305.from_oldbar.enc", "JH4sQDpAd0M4OyhwKnd8dX0vJjE+QSlVR0hNUVpOWlkyXVJVQitEMjcwN0lAS1heaF5wbm5mdGJuaWtNeG1wXUZfTVJLUWRbZnMje3csKiovJWQwJSh0XXZkaWJne3J9KzZ0OjYyPUBANXxIPUAt[...]
Line Deleted : user_pref("CT2724386./9b+7e1x305.from_oldbar.enc", "JH4tQTE9QDJ5RTo9KnIsend5fjEoM0FHPkVHRUgvWk9SPyhBMC0vM0Y9SFZiZWhca2dfbXBgSHNoa1hBWklGSEtfVmFvfCF9dHR6eCdfKyAjb1hxYF1fYXZteCc3OjYwMio9QXZCNzonbyl3dHZ3[...]
Line Deleted : user_pref("CT2724386./9b+7e2x305.from_oldbar.enc", "JH4uNUIxPT05OntHPD8sdC55IH0yKTRDVlVORy5ZTlEyXk9BKkM1NzIxSD9KWWVfX2JsW3FzaXVpdXRNeG1wUX5rYEliUlBUUWdeaXgoLXx8Yy8kJ3NcdWRmZmh6cXwsO0AwQDx0eDQ9MHxIPUAt[...]
Line Deleted : user_pref("CT2724386./9b+7e31;cjc<=fbj#h>.from_oldbar.enc", "JH5hOT8jayV1dnRzKiEsbkFPRE0yejRPSElSTlYvVEo+NUAjYFVQWFNWUEkySyV6TkVQM19bZXFWP1hKWlFcP2tsdWFKY1JlXGd5eHwpeCx7b1g4eHMpNiQ2MnliInxfNz0haSNDNDQ[...]
Line Deleted : user_pref("CT2724386./9b+7e31;cjc<=fbj#ncf.from_oldbar.enc", "JH5hOT8jayV1dndxKiEsbkFPRE0yejRPSElSTlYvWk9SPzZBJFBMVmJHMEk7S0JNMFxdZlI7VENWTVhqaW15aXxsYEkpaWR5J3QnI2pTcm1QKC5xWnMkMiV3bnlcKT04fmchX1tPJX[...]
Line Deleted : user_pref("CT2724386./9b+7e31;cjig=ki\"mbe.from_oldbar.enc", "JH5hOT8jayV0cXgpICttQE5DTDF5M1RSSFZULVhNUD00PyJfYlBELUY4NklAS1hcY084V1JicG9WP1hfZ3drcUMmIVZpRFktWFxRLzBgMjNiNTZoN2p4dWx3NjYwe2R9LDwwNmckKX[...]
Line Deleted : user_pref("CT2724386./9b+7e3x305.from_oldbar.enc", "JH4vQT87NjM/R0Y/fUk+QS52MH4iJCE1LDdHS1lXS0pIWFhOXjdiVzpTXkkySzo9PztQR1JibGJddXhtdmp8UXxxdGFKY1JVV1JoX2p6LSYsLCR+LzIuaTUqLXlie2ptb2khdyMzQUEzN0hHRz0/[...]
Line Deleted : user_pref("CT2724386./9b+7e4x305.from_oldbar.enc", "JH4wLEB2Qjc6J28pd3t0di4lMEE+T0lKUitVVTojPCsvKClBOENUUV5dVmFfVmhcQm1iZVI7VENGSUpZUFtsaXp+IXAjcHZZJXl8XSp6bFVuXWBjY3NqdSckMTgxNzI2KHM/NDd3RTInbyl3en18[...]
Line Deleted : user_pref("CT2724386./9b+7e5x305.from_oldbar.enc", "JH4xNkIrd0M4OyhwKnl1encvJjFDSz1JVkpQWS5ZTjFKVUApQjIuMy9HPklbXVlaal5YcHJiZ0l0aWxZQltLR0tRYFdidHwkc3N3JiAkICpiLiMmclt0ZGBkaXlwey46MjM/QjdANEZ6Rjs+K3Mt[...]
Line Deleted : user_pref("CT2724386./9b+7e6x305.from_oldbar.enc", "JH4yLD4yMjI4RT58SD1ALXUvfnskJDQrNklTVFJZWFpaUFJONmFWWUYvSDg1PTxNRE9ibG1rcnFqd2FNeG1wXUZfT0xUUWRbZnl7Jnh4KX4vKS0yMGczKCt3YHlpZm5qfnUhNDZAQ0Y8PXxIPUAt[...]
Line Deleted : user_pref("CT2724386./9b+7e7x305.from_oldbar.enc", "JH4zPSw/Pj95RTo9KnIse3p5ejEoM0dHRURRWVdbUEtQS01eVFVTUzplWl1KM0w8Ozo5UUhTZ3VjY2d1dWdrZVJ9cnViS2RUU1FaaWBrIHYpLCQjMWczKCt3YHlpaGZufnUhNT8tMkNHMDpIfko/[...]
Line Deleted : user_pref("CT2724386./9b+7e9x305.from_oldbar.enc", "JH41Myw/MnhEOTwpcSt7dXl5MCcySExPT0RQTEdUWFxQSDRfVFdELUY3MTU0S0JNY2tdX19zaWtKdWptWkNcTUdLSWFYY3kib3QlKCR5YCwhJHBZcmNdYGh3bnkwOjorKi50QDU4JW0nd3F0eywj[...]
Line Deleted : user_pref("CT2724386./9b+7e:x305.from_oldbar.enc", "JH42Mzs4MnhEOTwpcSt7dnl6MCcySUhVRUQsV0xPPCU+LyotLUM6RVxnVVteP2pfYk84UUI9QD9WTVhvemh4bHFxVCB0d2RNZldSVVNrYm0lfi16ZjInKnZfeGlkZm59dCA3QjIyMkZENXxHRyx0[...]
Line Deleted : user_pref("CT2724386./9b+7e;x305.from_oldbar.enc", "JH43PzM/NzhCL3tHPD8sdC5+enoiMyo1TUYsV0xPPCU+LysrMUM6RV1jVldcXFpBbGFkUTpTREBARVhPWnJzcXp4bSJWInZ5Zk9oWVVVWW1kbygkLyIjJyknJihuOi8yfmchcW1tcCZ8KEA8RD9C[...]
Line Deleted : user_pref("CT2724386./9b+7e<x305.from_oldbar.enc", "JH44NDAwRC9GNkQ3fUk+QS52MCF9JCY1LDdQLk9HRzFcUVRBKkM0MTc4SD9KY19aamReYlpHcmdqV0BZSkdNTV5VYHlxJG53eCV2XSl9IW1Wb2BdY2J0a3YwOCYjOTU4Ny1BN3ZCNzonbyl5dnx6[...]
Line Deleted : user_pref("CT2724386./9b+7e=x305.from_oldbar.enc", "JH45MzY/QUE3OTV8SD1ALXUvIH4gIjQrNlBUWVdMVU9RWzRfVFdELUY3Njc4S0JNZ2twbmBvYWZrY2ZNeG1wXUZfUE9QUGRbZiElfHlzemEtIiVxWnNkY2RjeG96NT0yM0A/Oz8zeEQ5PClxK3t6[...]
Line Deleted : user_pref("CT2724386./9b+7e>x305.from_oldbar.enc", "JH46QTY/MjI4OHtHPD8sdC5+ICF8Myo1UE9TRkgvWk9SPyhBMjM0L0Y9SGNcXWZiakNuY2ZTPFVGR0hCWlFcd3B3cyAjcSFZJXl8aVJrXF1dYXBnci4hLiQ4KDg3Lyo6LnM/NDckbCZ2d3d6KyIt[...]
Line Deleted : user_pref("CT2724386./9b+7e?x305.from_oldbar.enc", "JH47LS8vM0E0QDo6fUlMLXUvICMgfjQrNlJQTFJJVVJWUlw1YFVYRS5HODs4NkxDTmpwb19lY11zb2d1eGhMZXBrVCB0d2RNZldaV1RrYm0qIisvJS5oNCkseGF6a25rZyB2Ij42MjhFOjw9R0o6[...]
Line Deleted : user_pref("CT2724386./9b+7e@x305.from_oldbar.enc", "JH48QEIrd0M4OyhwKnt2fngvJjFOUlQ9KlVKLUZRPCU+MCszLEM6RWJnVlFiWWVfX0NuY0ZfalU+V0lETERcU157IXR8eCF0WiZ6fWpTbF5ZYGJxaHMxNCkmJm05LjF9ZiBxbHN0JXsnRDY5PT9F[...]
Line Deleted : user_pref("CT2724386./9b+7eax305.from_oldbar.enc", "JH49PTc4d0M4OyhwKnt6dX4vJjFPT1RKUkBFSFZPWDFcUVRBKkM1NC83SD9KaGRrZF1eYmRiYW1pcXJrbHhqUXxxdGFKY1VUT1ZoX2opJSgnfDEnIjAgaTUqLXlie21sZ20hdyNBRS5EREk/fko/[...]
Line Deleted : user_pref("CT2724386./9b+7ebe3gSpeak to the handd9n9=d.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZJZXFzTTNLVw==");
Line Deleted : user_pref("CT2724386./9b+7ebx305.from_oldbar.enc", "JH4+OTFBMD0zRUA2Mn5KP0IvdzF7fSM1LDdWWUlITk9RUlxOTFVTW1RgWlo+aV5hTjdQOz1BVEtWdXVlbXNneW1tfFUhdXhlTmdSVFdrYm0tIiUuIGczKGokL3lie2ZoaiB2IkEvM3lFOj0qcix2[...]
Line Deleted : user_pref("CT2724386./9b+7ecx305.from_oldbar.enc", "JH4/PTAwQzEuekY7PitzLXsgfjEoM1NRVlVRV1pPWExeM15TVkMsRTQ4NklAS2tZVmxoa0ZxZmlWP1hHS0hcU15+bGlWInZ5Zk9oV1tXbGNuLzEhJjAjNio1LCw6MTlxPTI1ImokcnZxKH4qSkE/[...]
Line Deleted : user_pref("CT2724386./9b+7edx305.from_oldbar.enc", "JH5ANUIqNjh5RTo9KnIsfSAvJjFSR1Q8SEosV0wvSFM+J0AyM0M6RWZbaFBcXkBrbk84UUNDVEtWd2x5YW1vUXxxVHhzY0xlV1ZoX2osIS51IiRlLiN0XXZoZnlwez06LjIyNDExRTtDe0c8Pyx0[...]
Line Deleted : user_pref("CT2724386./9b+7etx305.from_oldbar.enc", "JH5uLy47MjNCNXtEOStzLXp7e3wyKTQhVkJULVhNUD0mPy0uLi5EO0Y1ZF5maVlcYGJob1xzY3FvaWRndk96b3JfSGFPUFBPZl1oV1p8JiB7ImQwJSh0XXZkZWVje3J9bC4uKjhALHlFOj0qcix5[...]
Line Deleted : user_pref("CT2724386./9b-0?3g>d.from_oldbar.enc", "PmdAcD1DbUB6d0Z1eCB9fXdLJUx7UiYqVFYmKStYK1tZMVsv");
Line Deleted : user_pref("CT2724386./9b-0?3g@6:5;.from_oldbar.enc", "AA==");
Line Deleted : user_pref("CT2724386./9b-0?3gfa7ef.from_oldbar.enc", "Ky4sPQ==");
Line Deleted : user_pref("CT2724386./9b-3=3eccja=f>.from_oldbar.enc", "JH4zPSxFL0E1J28pKiEsOT1EMHgyMyo1REhYTDojLjM+WGBPZFZgT2hSZFhYY15gTjdrcWdhcFk=");
Line Deleted : user_pref("CT2724386./9b/>01=9a6k6<im;krie@pdawm.from_oldbar.enc", "amlrcnN0dXY=");
Line Deleted : user_pref("CT2724386./9b3=>@44i48?.from_oldbar.enc", "NywtMml1djNCNjNBSEd4IT8+SE9OTUZIUCtWS04uWVlZX0xWTzdkU1dQ");
Line Deleted : user_pref("CT2724386./9b5ba==9cjag.from_oldbar.enc", "PGpqPmtubUV6d0hFeUd1fEshTH57");
Line Deleted : user_pref("CT2724386./9b6b11g4c56b>f;p;anr@p.from_oldbar.enc", "bm1tcXFycW50cnRzdA==");
Line Deleted : user_pref("CT2724386./9b9643g3/9e.from_oldbar.enc", "ag==");
Line Deleted : user_pref("CT2724386./9b<:222h64<.from_oldbar.enc", "OT81Lz4=");
Line Deleted : user_pref("CT2724386./9b=+03eh8h8j?:.from_oldbar.enc", "REM=");
Line Deleted : user_pref("CT2724386./9b?+e2a52d8.from_oldbar.enc", "NywtMml1di46PHs6OUNKSUhBQ0smUUZJKWVQRlZkcHJ5UVVeXlI=");
Line Deleted : user_pref("CT2724386./9b?b0d:8aj62<h.from_oldbar.enc", "bQ==");
Line Deleted : user_pref("CT2724386./9ba@0<0bi6a7gn:6@l?.from_oldbar.enc", "bms=");
Line Deleted : user_pref("CT2724386.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
Line Deleted : user_pref("CT2724386.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_129681665239553015", true);
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_129851887029846920", true);
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_129904362648242803", true);
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_1359634298000", true);
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_1366729485000", true);
Line Deleted : user_pref("CT2724386.BrowserCompStateIsOpen_1367225774000", true);
Line Deleted : user_pref("CT2724386.CT2724407.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2724431.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2727162.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2727622.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2727646.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2727678.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CT2727750.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.CTID", "ct2727646");
Line Deleted : user_pref("CT2724386.CommunitiesChangesLastCheckTime", "Wed Jan 25 2012 19:33:58 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.CommunityChanged", true);
Line Deleted : user_pref("CT2724386.ConfigurationLastCheckTime", "Tue Nov 12 2013 17:00:49 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.CurrentServerDate", "12-11-2013");
Line Deleted : user_pref("CT2724386.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2724386.DialogsGetterLastCheckTime", "Wed Nov 06 2013 12:32:10 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.DownloadReferralCookieData", "");
Line Deleted : user_pref("CT2724386.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2724386.FeedPollDate129251312339935232", "Mon Jul 02 2012 12:27:14 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.FeedPollDate129251312390716579", "Mon Jul 02 2012 12:27:14 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.FirstServerDate", "28-5-2011");
Line Deleted : user_pref("CT2724386.FirstTime", true);
Line Deleted : user_pref("CT2724386.FirstTimeFF3", true);
Line Deleted : user_pref("CT2724386.FirstTimeSettingsDone", true);
Line Deleted : user_pref("CT2724386.FixPageNotFoundErrors", true);
Line Deleted : user_pref("CT2724386.GroupingLastCheckTime", "Wed Jan 25 2012 19:33:58 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.GroupingLastErrorCode", "");
Line Deleted : user_pref("CT2724386.GroupingLastResponse", true);
Line Deleted : user_pref("CT2724386.GroupingLastServerUpdateTime", "129713763760000000");
Line Deleted : user_pref("CT2724386.GroupingServerCheckInterval", 1440);
Line Deleted : user_pref("CT2724386.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
Line Deleted : user_pref("CT2724386.HasUserGlobalKeys", true);
Line Deleted : user_pref("CT2724386.Initialize", true);
Line Deleted : user_pref("CT2724386.InitializeCommonPrefs", true);
Line Deleted : user_pref("CT2724386.InstallationAndCookieDataSentCount", 3);
Line Deleted : user_pref("CT2724386.InstallationId", "IncrediMail_MediaBar_2.exe");
Line Deleted : user_pref("CT2724386.InstallationType", "ConduitIntegration");
Line Deleted : user_pref("CT2724386.InstalledDate", "Sat May 28 2011 17:48:50 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.IsGrouping", false);
Line Deleted : user_pref("CT2724386.IsMulticommunity", false);
Line Deleted : user_pref("CT2724386.IsOpenThankYouPage", false);
Line Deleted : user_pref("CT2724386.IsOpenUninstallPage", true);
Line Deleted : user_pref("CT2724386.LanguagePackLastCheckTime", "Sat May 28 2011 17:48:53 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.LanguagePackReloadIntervalMM", 1440);
Line Deleted : user_pref("CT2724386.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
Line Deleted : user_pref("CT2724386.LastLogin_2.7.2.0", "Mon Jul 02 2012 12:27:14 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.LastLogin_3.18.0.7", "Tue Jul 16 2013 18:01:57 GMT+0200 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.LastLogin_3.19.0.3", "Wed Sep 04 2013 11:20:39 GMT+0200 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.LastLogin_3.20.0.4", "Tue Nov 12 2013 17:00:53 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.LatestVersion", "3.20.0.4");
Line Deleted : user_pref("CT2724386.Locale", "en");
Line Deleted : user_pref("CT2724386.LoginCache", 4);
Line Deleted : user_pref("CT2724386.MCDetectTooltipHeight", "83");
Line Deleted : user_pref("CT2724386.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
Line Deleted : user_pref("CT2724386.MCDetectTooltipWidth", "295");
Line Deleted : user_pref("CT2724386.MyStuffEnabledAtInstallation", true);
Line Deleted : user_pref("CT2724386.RadioIsPodcast", false);
Line Deleted : user_pref("CT2724386.RadioMediaID", "21096756");
Line Deleted : user_pref("CT2724386.RadioMediaType", "Media Player");
Line Deleted : user_pref("CT2724386.RadioMenuSelectedID", "EBRadioMenu_CT272438621096756");
Line Deleted : user_pref("CT2724386.RadioStationName", "LATINO%20FM%2099.5%20FM%20EN%20");
Line Deleted : user_pref("CT2724386.RadioStationURL", "hxxp://92.48.107.35:8000");
Line Deleted : user_pref("CT2724386.SearchAPILastCheckTime", "Tue Nov 12 2013 17:00:49 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.SearchEngine", "Search||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2724386&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Deleted : user_pref("CT2724386.SearchFromAddressBarIsInit", true);
Line Deleted : user_pref("CT2724386.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2724386&q=");
Line Deleted : user_pref("CT2724386.SearchInNewTabEnabled", true);
Line Deleted : user_pref("CT2724386.SearchInNewTabIntervalMM", 1440);
Line Deleted : user_pref("CT2724386.SearchInNewTabLastCheckTime", "Sat May 28 2011 17:48:51 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID&UM=UM_ID");
Line Deleted : user_pref("CT2724386.SearchInNewTabURLFromSearchAPI", "hxxp://search.conduit.com/?ctid=CT2727646&octid=CT2724386&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_ID");
Line Deleted : user_pref("CT2724386.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usage.ashx?ctid=EB_TOOLBAR_ID");
Line Deleted : user_pref("CT2724386.ServiceMapLastCheckTime", "Tue Nov 12 2013 17:00:47 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.SettingsCheckIntervalMin", 120);
Line Deleted : user_pref("CT2724386.SettingsLastCheckTime", "Sat May 28 2011 17:48:49 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.SettingsLastUpdate", "1306530423");
Line Deleted : user_pref("CT2724386.ThirdPartyComponentsInterval", 504);
Line Deleted : user_pref("CT2724386.ThirdPartyComponentsLastCheck", "Sat May 28 2011 17:48:49 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.ThirdPartyComponentsLastUpdate", "1246786978");
Line Deleted : user_pref("CT2724386.ToolbarShrinkedFromSetup", false);
Line Deleted : user_pref("CT2724386.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
Line Deleted : user_pref("CT2724386.UserID", "UN24511926795171368");
Line Deleted : user_pref("CT2724386.ValidationData_Toolbar", 2);
Line Deleted : user_pref("CT2724386.WeatherNetwork", "");
Line Deleted : user_pref("CT2724386.WeatherPollDate", "Mon Jul 02 2012 12:27:14 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.WeatherUnit", "C");
Line Deleted : user_pref("CT2724386._9b_7e.:2z527.from_oldbar.enc", "JH5wdXF3cngzMihwKnt5e3t+MCcyJCYqRCtWS047JD0vLS8vM0M6RTc4OGFdYUBqZE84UUNBQkVFV05ZS0xMa2pwcXZ6IHJZeXxoUWpcV1pfX3BncmRkZDA4LDcjOTUsPTItNTB3QkInbyl6d3[...]
Line Deleted : user_pref("CT2724386._9b_7e.x305.from_oldbar.enc", "JH4qQTc3RDQzekY7PitzLXp9fCEyKTQ/VkZUUkxHSllaSFFQXlFSOWRZXEkySzk8Oz5QR1JdbGprb3htaFBqb3FxdCJWInZ5Zk9oVllYWm1kb3p7Mn1oNCkseGF6aGtqayB2Ii1zL3lFOj0qcix5[...]
Line Deleted : user_pref("CT2724386.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT2724386.alertChannelId", "1116652");
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D705D465F4D4E534D645B66705[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e.:2z527", "247E707571777278333228702A7B797B7B7E30273224262A442B564B4E3B243D2F2D2F2F33433A45373838615D61406A644F38514341424545574E594B4C4C6B6A7071767A207259797[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e06cg5el8:", "6E6D6D717172716E7474");
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737377777877747A7A242F4B49474F42357D5D5C3D");
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D3229344356554E472E594E51325E4F412A4335373231483F4A59655F5F626C5B717369756975744D786D70517E6B60496252505451675[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e31;cjc<=fbj#h>", "247E61393F236B25757674732A212C6E414F444D327A344F4849524E562F544A3E3540236055505853565049324B257A4E4550335F5B6571563F584A5A515C3F6B6C75614A63[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e31;cjc<=fbj#ncf", "247E61393F236B25757677712A212C6E414F444D327A344F4849524E562F5A4F523F364124504C56624730493B4B424D305C5D66523B5443564D586A696D79697C6C6049296[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e31;cjig=ki\"mbe", "247E61393F236B2574717829202B6D404E434C31793354524856542D584D503D343F225F6250442D46383649404B585C634F38575262706F563F585F67776B7143262156694[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F626C6D6B72716A77614D786D705D465F4F4C5451645B66797[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745445159575B504B504B4D5E545553533A655A5D4A334C3C3B3A3951485367756363677575676B65527D7275624B645453515[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e8x305", "247E343D3F3B35373B3F367C47472C742E7E782332293449565540472E594E513E274030323533453C475C5558636A656E625E6C616B7068734B766B6E5B445D4D4F524F6259647927252[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A474D4D5E55607971246E7778257[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C786A517C7174614A6355544F566[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7ebe3gSpeak to the handd9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Line Deleted : user_pref("CT2724386.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F7A6F725F48614F50504F665D6[...]
Line Deleted : user_pref("CT2724386.backendstorage./9b-0?3g>d", "3E6740703D436D407A77467578207D7D774B254C7B52262A545626292B582B5B59315B2F");
Line Deleted : user_pref("CT2724386.backendstorage./9b-0?3g@6:5;", "");
Line Deleted : user_pref("CT2724386.backendstorage./9b-0?3gfa7ef", "2B2E2C3D");
Line Deleted : user_pref("CT2724386.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F292A212C393D44307832332A354448584C3A232E333E58604F6456604F6852645858635E604E376B7167617059");
Line Deleted : user_pref("CT2724386.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "6A696B7273747576");
Line Deleted : user_pref("CT2724386.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484778213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
Line Deleted : user_pref("CT2724386.backendstorage./9b5ba==9cjag", "3C6A6A3E6B6E6D457A7748457947757C4B214C7E7B");
Line Deleted : user_pref("CT2724386.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D6D717172716E7472747374");
Line Deleted : user_pref("CT2724386.backendstorage./9b9643g3/9e", "6A");
Line Deleted : user_pref("CT2724386.backendstorage./9b<:222h64<", "393F352F3E");
Line Deleted : user_pref("CT2724386.backendstorage./9b=+03eh8h8j?:", "4443");
Line Deleted : user_pref("CT2724386.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Line Deleted : user_pref("CT2724386.backendstorage./9b?b0d:8aj62<h", "6D");
Line Deleted : user_pref("CT2724386.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
Line Deleted : user_pref("CT2724386.backendstorage.hxxp://api10_thetrafficstat_net.pid2", "38393066663137656233306465373661");
Line Deleted : user_pref("CT2724386.backendstorage.hxxp://api18_thetrafficstat_net.pid2", "38393066663137656233306465373661");
Line Deleted : user_pref("CT2724386.backendstorage.hxxp://api22_thetrafficstat_net.pid2", "38393066663137656233306465373661");
Line Deleted : user_pref("CT2724386.backendstorage.hxxp://api26_thetrafficstat_net.pid2", "38393066663137656233306465373661");
Line Deleted : user_pref("CT2724386.backendstorage.hxxp://api30_thetrafficstat_net.pid2", "38393066663137656233306465373661");
Line Deleted : user_pref("CT2724386.clientLogIsEnabled", false);
Line Deleted : user_pref("CT2724386.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
Line Deleted : user_pref("CT2724386.countryCode", "IT");
Line Deleted : user_pref("CT2724386.ct2727646.DialogsAlignMode", "LTR");
Line Deleted : user_pref("CT2724386.ct2727646.FeedLastCount129251312390716579", 100);
Line Deleted : user_pref("CT2724386.ct2727646.FirstTimeSettingsDone", true);
Line Deleted : user_pref("CT2724386.ct2727646.GroupingInvalidateCache", false);
Line Deleted : user_pref("CT2724386.ct2727646.GroupingLastCheckTime", "Wed Jan 25 2012 19:33:58 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.GroupingLastErrorCode", "");
Line Deleted : user_pref("CT2724386.ct2727646.GroupingLastResponse", true);
Line Deleted : user_pref("CT2724386.ct2727646.GroupingLastServerUpdateTime", "129713765730000000");
Line Deleted : user_pref("CT2724386.ct2727646.InvalidateCache", false);
Line Deleted : user_pref("CT2724386.ct2727646.LanguagePackLastCheckTime", "Tue Nov 12 2013 17:00:53 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.Locale", "it");
Line Deleted : user_pref("CT2724386.ct2727646.RadioLastCheckTime", "Mon Jul 02 2012 12:27:13 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.RadioLastUpdateIPServer", "3");
Line Deleted : user_pref("CT2724386.ct2727646.RadioLastUpdateServer", "129251386867830000");
Line Deleted : user_pref("CT2724386.ct2727646.SearchEngine", "Cerca||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TERM&ctid=ct2727646&octid=EB_ORIGINAL_CTID&SearchSource=1");
Line Deleted : user_pref("CT2724386.ct2727646.SearchInNewTabLastCheckTime", "Tue Sep 03 2013 13:31:41 GMT+0200 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.SettingsCheckIntervalMin", 120);
Line Deleted : user_pref("CT2724386.ct2727646.SettingsLastCheckTime", "Mon Nov 11 2013 17:00:48 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.SettingsLastUpdate", "1384139573");
Line Deleted : user_pref("CT2724386.ct2727646.ThirdPartyComponentsLastCheck", "Mon Jul 02 2012 12:27:10 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CT2724386.ct2727646.ThirdPartyComponentsLastUpdate", "1331806005");
Line Deleted : user_pref("CT2724386.ct2727646.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2727646&octid=CT2724386&SearchSource=15&CUI=SB_CUI&SSPV=EB_SSPV&Lay=1&UM=UM_I[...]
Line Deleted : user_pref("CT2724386.ct2727646.toolbarAppMetaDataLastCheckTime", "Tue Nov 12 2013 17:00:49 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.firstTimeDialogOpened", true);
Line Deleted : user_pref("CT2724386.fixPageNotFoundErrorByUser", "TRUE");
Line Deleted : user_pref("CT2724386.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT2724386.fullUserID", "UN24511926795171368.UP.2162");
Line Deleted : user_pref("CT2724386.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
Line Deleted : user_pref("CT2724386.homepageProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2724386.hxxp___api10_thetrafficstat_net.pid2.from_oldbar.enc", "ODkwZmYxN2ViMzBkZTc2YQ==");
Line Deleted : user_pref("CT2724386.hxxp___api18_thetrafficstat_net.pid2.from_oldbar.enc", "ODkwZmYxN2ViMzBkZTc2YQ==");
Line Deleted : user_pref("CT2724386.hxxp___api22_thetrafficstat_net.pid2.from_oldbar.enc", "ODkwZmYxN2ViMzBkZTc2YQ==");
Line Deleted : user_pref("CT2724386.hxxp___api26_thetrafficstat_net.pid2.from_oldbar.enc", "ODkwZmYxN2ViMzBkZTc2YQ==");
Line Deleted : user_pref("CT2724386.hxxp___api30_thetrafficstat_net.pid2.from_oldbar.enc", "ODkwZmYxN2ViMzBkZTc2YQ==");
Line Deleted : user_pref("CT2724386.initDone", true);
Line Deleted : user_pref("CT2724386.installId", "IncrediMail_MediaBar_2.exe");
Line Deleted : user_pref("CT2724386.installType", "ConduitIntegration");
Line Deleted : user_pref("CT2724386.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT2724386.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2724386.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT2724386.isPerformedSmartBarTransition", "true");
Line Deleted : user_pref("CT2724386.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Line Deleted : user_pref("CT2724386.lastNewTabSettings", "{\"isEnabled\":false,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT2724386&octid=CT2724386&SearchSource=15&CUI=UN24511926795171368&SSPV=&Lay=1&UM=\"}");
Line Deleted : user_pref("CT2724386.lastVersion", "10.23.0.822");
Line Deleted : user_pref("CT2724386.myStuffEnabled", true);
Line Deleted : user_pref("CT2724386.myStuffPublihserMinWidth", 400);
Line Deleted : user_pref("CT2724386.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
Line Deleted : user_pref("CT2724386.myStuffServiceIntervalMM", 1440);
Line Deleted : user_pref("CT2724386.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
Line Deleted : user_pref("CT2724386.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fforum.aiutamici.com%2Fyaf_postst91456_Cerco-un-aiuto-per-2-pc-infetti-e-lenti.aspx\",\"EB_MA[...]
Line Deleted : user_pref("CT2724386.originalSearchAddressUrl", "hxxp://search.avg.com/route/?d=4c9b5d2f&v=6.103.018.001&i=23&tp=ab&iy=&ychte=it&lng=it&q=");
Line Deleted : user_pref("CT2724386.revertSettingsEnabled", true);
Line Deleted : user_pref("CT2724386.searchFromAddressBarEnabledByUser", "false");
Line Deleted : user_pref("CT2724386.searchInNewTabEnabledByUser", "true");
Line Deleted : user_pref("CT2724386.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT2724386.searchProtectorDialogDelayInSec", 10);
Line Deleted : user_pref("CT2724386.searchProtectorEnableByLogin", true);
Line Deleted : user_pref("CT2724386.searchSuggestEnabledByUser", "false");
Line Deleted : user_pref("CT2724386.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2724386\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://IncrediMailMediaBar2.OurToolbar.com//xpi\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"IncrediMail MediaBar 2 \"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Line Deleted : user_pref("CT2724386.serviceLayer_services_Configuration_lastUpdate", "1387377794971");
Line Deleted : user_pref("CT2724386.serviceLayer_services_login_10.20.101.5_lastUpdate", "1384419836717");
Line Deleted : user_pref("CT2724386.serviceLayer_services_login_10.22.3.518_lastUpdate", "1385039386497");
Line Deleted : user_pref("CT2724386.serviceLayer_services_login_10.22.5.510_lastUpdate", "1386945275159");
Line Deleted : user_pref("CT2724386.serviceLayer_services_login_10.23.0.822_lastUpdate", "1387440112165");
Line Deleted : user_pref("CT2724386.serviceLayer_services_searchAPI_lastUpdate", "1387377793939");
Line Deleted : user_pref("CT2724386.serviceLayer_services_serviceMap_lastUpdate", "1387377793602");
Line Deleted : user_pref("CT2724386.serviceLayer_services_toolbarSettings_lastUpdate", "1387440112595");
Line Deleted : user_pref("CT2724386.serviceLayer_services_translation_lastUpdate", "1387380200903");
Line Deleted : user_pref("CT2724386.settingsINI", true);
Line Deleted : user_pref("CT2724386.showToolbarPermission", "false");
Line Deleted : user_pref("CT2724386.smartbar.CTID", "CT2724386");
Line Deleted : user_pref("CT2724386.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT2724386.smartbar.toolbarName", "IncrediMail MediaBar 2 ");
Line Deleted : user_pref("CT2724386.testingCtid", "");
Line Deleted : user_pref("CT2724386.toolbarBornServerTime", "28-5-2011");
Line Deleted : user_pref("CT2724386.toolbarCurrentServerTime", "19-12-2013");
Line Deleted : user_pref("CT2724386.toolbarLoginClientTime", "Tue Nov 12 2013 20:55:07 GMT+0100 (ora solare Europa occidentale)");
Line Deleted : user_pref("CT2724386.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
Line Deleted : user_pref("CT2724386.upgradeFromOBVersion", true);
Line Deleted : user_pref("CT2724386.usagesFlag", 2);
Line Deleted : user_pref("CT2724386_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1387441075413,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2727646/CT2724386", "\"2d643afc8f78b25568fb51edb2f289a03\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2727646", "\"1367226861\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.18.0.7", "\"0343677cfb1cd1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.19.0.3", "\"2a1a0d7b586ce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.20.0.4", "\"dfe74040abc2ce1:0\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2724386", "\"52c3f1538cb4af4ada257fcbc6b15d49\"");
Line Deleted : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=it", "\"e87234840501a3a25fbd9b2d2b1e3c75\"");
Line Deleted : user_pref("CommunityToolbar.MiniIPageGadgetSize.hxxp://pgcff.pricegong.com/agreement/agree.html#pg_ext_msg_key_097cb881", "356x332");
Line Deleted : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4c9b5d2f&v=6.103.018.001&i=23&tp=ab&iy=&ychte=it&lng=it&q=");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList", "CT2724386");
Line Deleted : user_pref("CommunityToolbar.ToolbarsList2", "CT2724386");
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoInterval", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.alertInfoLastCheckTime", "Mon Jul 02 2012 12:27:10 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.locale", "en");
Line Deleted : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440);
Line Deleted : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Mon Jul 02 2012 12:27:10 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1313487611");
Line Deleted : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20);
Line Deleted : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com");
Line Deleted : user_pref("CommunityToolbar.alert.showTrayIcon", false);
Line Deleted : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300);
Line Deleted : user_pref("CommunityToolbar.alert.userId", "{9c525f04-c325-47f5-bffd-2a078cc8d25d}");
Line Deleted : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat May 28 2011 17:48:51 GMT+0200 (ora legale Europa occidentale)");
Line Deleted : user_pref("CommunityToolbar.globalUserId", "a8f7340d-d7f0-4dbb-b48c-49a80ebe1d2b");
Line Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://search.avg.com/route/?d=4c9b5d2f&v=6.103.018.001&i=23&tp=ab&iy=&ychte=it&lng=it&q=");
Line Deleted : user_pref("avg.install.extHomepage", "hxxp://isearch.avg.com?pid=avg&sg=0&cid=%7Bf7ec4776-3d30-4c7c-8558-4140095fd6d2%7D&mid=c55047a15b9d757ae3ba6e419055417d-06ce4fc639803a2e3563922518183d8e94088cb9&d[...]
Line Deleted : user_pref("avg.install.installDirPath", "C:\\Documents and Settings\\All Users\\Dati applicazioni\\AVG Secure Search\\FireFoxExt\\17.2.0.38");
Line Deleted : user_pref("avg.userPreferences.URLBarFocus.whiteList", "bing\\.com|google\\.\\w+|yahoo\\.\\w+|gmail\\.\\w+|hotmail\\.\\w+|live\\.\\w+|isearch\\.avg\\.com|mysearch\\.avg\\.com");
Line Deleted : user_pref("browser.newtab.url", "hxxp://www2.delta-search.com/?babsrc=NT_ss&mntrId=8C480018E733A0DA&affID=123925&tsp=5003");
Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://isearch.avg.com?pid=avg&sg=0&cid={73B46A17-647C-4292-A374-0B466A61DC65}&mid=c55047a15b9d757ae3ba6e419055417d-06ce4fc639803a2e3563922518183d8e94088cb9&ds=A[...]
Line Deleted : user_pref("extensions.enabledItems", "plugin@yontoo.com:1.20.00,{20a82645-c095-46ed-80e3-08825760534b}:1.2.1,{C9B68337-E93A-44EA-94DC-CB300EC06444}:4.51.0,{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}:2.7.2.[...]
Line Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,ezLooker,pagerage,buzzdock,toprelatedtopics");
Line Deleted : user_pref("extentions.y2layers.installId", "579a280a-e35a-4766-9ee5-5189f8944e1a");
Line Deleted : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent101", "1359709119513");
Line Deleted : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent134", "1360702436883");
Line Deleted : user_pref("iminent.webbooster.scripts.minibar.registerToolbarEvent140", "1349633278247");
Line Deleted : user_pref("iminent.webbooster.scripts.sslminibar.registerToolbarEvent101", "1359709104313");
Line Deleted : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Line Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2724386&q=");
Line Deleted : user_pref("smartbar.machineId", "LNIWHLNSKY9RRGN5BGDYPVCJGS4Y4LDYDXIW8LSML5RBZR6ZJRGZFWOBMARDYLE0Q5UJSDPUZIB3O0LYWJT4QG");
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_currentVersion", "312E31322E302E35");
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_currentVersion.storedInFile", false);
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_globalKeysMigratedToLocalStorage", "31");
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_globalKeysMigratedToLocalStorage.storedInFile", false);
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_migrated_from_ls", "31");
Line Deleted : user_pref("valueApps.CT2724386.mam_gk_migrated_from_ls.storedInFile", false);

-\\ Google Chrome v

[ File : C:\Documents and Settings\Administrator\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [63459 octets] - [19/12/2013 09:20:45]
AdwCleaner[S0].txt - [64230 octets] - [19/12/2013 09:22:22]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [64291 octets] ##########


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Microsoft Windows XP x86
Ran by Administrator on 19/12/2013 at 9.38.44,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{43343D97-704B-497F-A402-49AC7449182B}



~~~ Files



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Documents and Settings\Administrator\Dati applicazioni\mozilla\firefox\profiles\0ay02di4.default\prefs.js

user_pref("CT2724386./9b+7e8x305.from_oldbar.enc", "JH40PT87NTc7PzZ8R0csdC5+eCMyKTRJVlVARy5ZTlE+J0AwMjUzRTxHXFVYY2plbmJebGFrcGhzS3ZrbltEXU1PUk9iWWR5JyUhd3x3ICtiLiMmclt0ZGZpZXl





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 19/12/2013 at 9.45.01,04
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9.49.09, on 19/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\AVG\AVG PC Tuneup\BoostSpeed.exe
C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
C:\Programmi\AVG\AVG2014\avgui.exe
C:\Programmi\File comuni\Java\Java Update\jusched.exe
C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Messenger\msmsgs.exe
C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe
C:\Programmi\Microsoft Office\Office\OSA.EXE
C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmi\Google\Update\1.3.22.3\GoogleCrashHandler.exe
C:\Programmi\program\soffice.exe
C:\Programmi\program\soffice.bin
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\AVG\AVG2014\avgwdsvc.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Programmi\File comuni\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\Programmi\log2\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programmi\File comuni\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Programmi\Mobogenie\DaemonProcess.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ccleaner] "C:\Programmi\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [TomTomHOME.exe] "C:\Programmi\TomTom HOME 2\TomTomHOMERunner.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: lollipop_12131252.lnk = C:\Avenger\lollipop_12131252.exe
O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Programmi\program\quickstart.exe
O4 - Global Startup: Avvio Office.lnk = C:\Programmi\Microsoft Office\Office\OSA.EXE
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: Ricerca rapida.lnk = C:\Programmi\Microsoft Office\Office\FINDFAST.EXE
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{70FC8F96-992B-4626-98C9-1309EB096464}: NameServer = 208.67.222.222,208.67.220.220
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Programmi\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Servizio Bonjour (Bonjour Service) - Apple Inc. - C:\Programmi\Bonjour\mDNSResponder.exe
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Programmi\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Servizio iPod (iPod Service) - Apple Inc. - C:\Programmi\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Programmi\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TomTomHOMEService - TomTom - C:\Programmi\TomTom HOME 2\TomTomHOMEService.exe
O23 - Service: vToolbarUpdater17.2.0 - Unknown owner - C:\Programmi\File comuni\AVG Secure Search\vToolbarUpdater\17.2.0\ToolbarUpdater.exe (file missing)

--
End of file - 8841 bytes

zapek
Inviato: Thursday, December 19, 2013 10:36:49 AM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Nota: gia' cosi il computer va super bene.
Per informazione alla riapertura mi si sono aperte tre finestre:
1) Monitor.exe Impossibile individ. un componente. imposs avviare il'appl spec olyuidrw.dll
2) Document wiever The featur you are trying is on a cd rom..... e
3) Microsoft.net framework An unhanded exception has occurred.... che e' l'unica che ho faticato a chiudere,l'ho fatto col Task Manager- termina operazione.
Per il resto tutto ok.Ciao
cbbusto
Inviato: Thursday, December 19, 2013 4:27:19 PM

Rank: AiutAmico

Iscritto dal : 11/8/2008
Posts: 13,964
Malwarebytes ha fatto piazza pulita,avevo detto che c'erano un sacco di porcherie.
Prima operazione bisogna rimuovere Java, vai nel pannello di controllo>installazione applicazioni e rimuovi Java anche se ci sono più voci, poi vai QUI e scarichi l'ultima versione.
Poi ci sono un sacco di voci in avvio che rallentano e sono inutili:

Chiudi tutti i programmi e disconnesso lanci HJT e clicca sul secondo pulsante: Do a system scan only poi metti la spunta alle voci che ti indico e alla fine clic su Fix checked:

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [HP Software Update] C:\Programmi\HP\HP Software Update\HPWuSchd2.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\FirstStart.exe

O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [mobilegeni daemon] C:\Programmi\Mobogenie\DaemonProcess.exe

O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Programmi\File comuni\Ahead\lib\NMBgMonitor.exe"

O4 - HKCU\..\Run: [OM_Monitor] C:\Programmi\OLYMPUS\OLYMPUS Master\Monitor.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

O4 - Startup: lollipop_12131252.lnk = C:\Avenger\lollipop_12131252.exe

O4 - Startup: OpenOffice.org 3.4.1.lnk = C:\Programmi\program\quickstart.exe

O4 - Global Startup: Avvio Office.lnk = C:\Programmi\Microsoft Office\Office\OSA.EXE

O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe

O4 - Global Startup: HP Photosmart Premier Fast Start.lnk = C:\Programmi\HP\Digital Imaging\bin\hpqthb08.exe

O4 - Global Startup: Ricerca rapida.lnk = C:\Programmi\Microsoft Office\Office\FINDFAST.EXE

Ti informo che tutte le voci sopra elencate non eliminano i programmi ma disattivano solo l'avvio automatico.

Poi fai una pulizia con Ccleaner compreso il Registro, per il Registro spunta tutte le voci, acconsenti al backup quando richiesto, sempre in Ccleaner vai in Strumenti Ripristino Sistema seleziona tutte le voci tranne l'ultima che non è selezionabile e rimane per sicurezza, poi clic su Rimuovi.

Vai in C:\windows, cerca la cartella Prefetch aprila ed eliminatutto il contenuto, non eliminare la cartella.

Per gli avvisi che ti appaiono, la voce del monitor non dovrebbe più apparire, altrimenti ignora.

La seconda voce ti dice che l'elemento cercato si trova su un CD-ROM, vedi se ti serve.

Per l'ultima se lo trovi nei processi task manager clic su termina processo se dovesse apparire ancora e potrebbe servire bisogna aggiornare il Net.framework, eventualmente ne riparliamo.

Ora il pc dovrebbe essere a posto, se tutto ok abbiamo finito, caso contrario scrivi.

Un saluto e tanti auguri di BUON NATALE E FELICE ANNO NUOVO.
zapek
Inviato: Friday, December 20, 2013 4:52:11 PM
Rank: Member

Iscritto dal : 12/15/2013
Posts: 11
Ora i computer volano che sono una favola.
Ti ringrazio anche a nome di mio fratello e se per caso passi per Trieste fai un fischio che andiamo a farci una bella mangiata di pesce.... (offre mio fratello, ovvio Dancing).
Per il momento tantissimi auguri di Buone Feste anche a te.
Ciao e grazie di tutto.
Utenti presenti in questo topic
Guest


Salta al Forum
Aggiunta nuovi Topic disabilitata in questo forum.
Risposte disabilitate in questo forum.
Eliminazione tuoi Post disabilitata in questo forum.
Modifica dei tuoi post disabilitata in questo forum.
Creazione Sondaggi disabilitata in questo forum.
Voto ai sondaggi disabilitato in questo forum.

Main Forum RSS : RSS

Aiutamici Theme
Powered by Yet Another Forum.net versione 1.9.1.8 (NET v2.0) - 3/29/2008
Copyright © 2003-2008 Yet Another Forum.net. All rights reserved.