Aiuto Malware

[Stecco]

Domani faro' tutto quando ora sono impossibilitato, ti faccio sapere subito grazie mille ancora per il tuo tempo

[nikita75]

Domani faro' tutto quando ora sono impossibilitato, ti faccio sapere subito grazie mille ancora per il tuo tempo

prooocedi !!!

Adesso ripuliamo il DNS

e adesso ripuliamo i DNS sul computer:devi accedere al prompt dei comandi

tieni premuto il tasto R di Windows
apparirà una finestra "run"

piccola correzione tasto Windows + R >> cmd > OK e entri nel prompt dei comandi

[Stecco]

Fix result of Farbar Recovery Scan Tool (x64) Version:10-04-2016 01
Ran by giuseppe (2016-04-16 09:58:23) Run:1
Running from C:\Users\giuseppe\Desktop\Nuova cartella
Loaded Profiles: giuseppe (Available Profiles: giuseppe)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Tcpip\Parameters: [DhcpNameServer] 80.243.191.66 8.8.8.8
Tcpip\..\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}: [DhcpNameServer] 80.243.191.66 8.8.8.8
Task: {2946BD54-2650-4940-BDB7-FB946ACD73B8} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
Task: {719F320B-0633-4555-830A-F82698B111BA} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
Task: {B5FC3BE6-6391-4E9A-9B76-8375E5C223AF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
Task: {E03C8786-4C3A-41C4-AEF3-F909A1BA0073} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
Task: {F27862CA-4739-48E5-BF23-F969A330EA7F} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
ATTENTION: System Restore is disabled
CreateRestorePoint:
EmptyTemp:
*****************

HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\\DhcpNameServer => value removed successfully
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{93c0944d-4b56-4d6e-9b5a-0914968e3920}\\DhcpNameServer => value removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2946BD54-2650-4940-BDB7-FB946ACD73B8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2946BD54-2650-4940-BDB7-FB946ACD73B8}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{719F320B-0633-4555-830A-F82698B111BA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{719F320B-0633-4555-830A-F82698B111BA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B5FC3BE6-6391-4E9A-9B76-8375E5C223AF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B5FC3BE6-6391-4E9A-9B76-8375E5C223AF}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E03C8786-4C3A-41C4-AEF3-F909A1BA0073}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E03C8786-4C3A-41C4-AEF3-F909A1BA0073}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F27862CA-4739-48E5-BF23-F969A330EA7F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F27862CA-4739-48E5-BF23-F969A330EA7F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => key removed successfully
ATTENTION: System Restore is disabled => Error: No automatic fix found for this entry.
Restore point was successfully created.
EmptyTemp: => 348.9 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 09:59:22 ====

[Stecco]

Ho seguito tutti i passaggi va benissimo grazieeeeeeee

[nikita75]

Ho seguito tutti i passaggi va benissimo grazieeeeeeee

ok , risolto ,come da procedura Malware eliminato

[muty3]

ciao a tutti

Avrei anch io purtroppo lo stesso problema con questo maledetto!!!! wonderlands!!!

posso utilizzare lo stesso procedimento?

GRAZIE ANTICIPATE!

[shel]

ciao muty 3 allega i due log della scansione con Farbar recovery, segui le indicazioni date all'altro utente