ELIMINARE PUBLIC8MEDIA - come si fa???

[doxdox]

Ciao sto cercando informazioni su come eliminare lo spyware public8media (che si manifesta come una doppia sottolineatura verde sotto alcune parole sui siti internet). Il problema si presenta sia su Chrome sia su explorer. Ho letto su altri forum che si può utilizzare il programma adwcleaner. Così l'ho scaricato e gli ho fatto fare una scansione, ma ora non so cosa devo cancellare per risolvere il problema....non vorrei eliminare troppa roba.
Potete dare un'occhiata al resoconto e dirmi cosa fare?? GRAZIE!!!!

Moderazione: topic spostato nella sezione attinente.


#

Codice: Seleziona tutto

 AdwCleaner v3.016 - Bericht erstellt am 25/12/2013 um 22:02:47
 # Aktualisiert 23/12/2013 von Xplode
 # Betriebssystem : Windows Vista (TM) Home Premium Service Pack 2 (32 bits)
 # Benutzername : Tomas - TOMAS-PC
 # Gestartet von : C:\Users\Tomas\Desktop\adwcleaner_3.016.exe
 # Option : Suchen
 
***** [ Dienste ] *****
 
Dienst Gefunden : Update outobox
 Dienst Gefunden : vToolbarUpdater17.0.12
 
***** [ Dateien / Ordner ] *****
 
Datei Gefunden : C:\Program Files\Mozilla Firefox\.autoreg
 Datei Gefunden : C:\Program Files\Mozilla Firefox\browser\searchplugins\avg-secure-search.xml
 Datei Gefunden : C:\Program Files\Mozilla Firefox\Extensions\pdfforge@mybrowserbar.com
 Datei Gefunden : C:\Program Files\Mozilla Firefox\Extensions\wtxpcom@mybrowserbar.com
 Datei Gefunden : C:\Program Files\Mozilla Firefox\searchplugins\avg-secure-search.xml
 Datei Gefunden : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\omlkmk8h.default\user.js
 Ordner Gefunden : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb
 Ordner Gefunden : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
 Ordner Gefunden : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\omlkmk8h.default\Extensions\{ACAA314B-EEBA-48E4-AD47-84E31C44796C}
 Ordner Gefunden C:\AVG Secure Search
 Ordner Gefunden C:\Program Files\AVG Secure Search
 Ordner Gefunden C:\Program Files\Common Files\AVG Secure Search
 Ordner Gefunden C:\Program Files\ICQ6Toolbar
 Ordner Gefunden C:\Program Files\outobox
 Ordner Gefunden C:\ProgramData\AVG Secure Search
 Ordner Gefunden C:\ProgramData\AVG Security Toolbar
 Ordner Gefunden C:\ProgramData\ICQ\ICQToolbar
 Ordner Gefunden C:\ProgramData\TubeDimmer
 Ordner Gefunden C:\Users\Tomas\AppData\Local\AVG Secure Search
 Ordner Gefunden C:\Users\Tomas\AppData\LocalLow\AVG Secure Search
 Ordner Gefunden C:\Users\Tomas\AppData\LocalLow\pdfforge
 Ordner Gefunden C:\Users\Tomas\AppData\LocalLow\Search Settings
 Ordner Gefunden C:\Users\Tomas\AppData\Roaming\dvdvideosoftiehelpers
 Ordner Gefunden C:\Users\Tomas\AppData\Roaming\pdfforge
 
***** [ Verknüpfungen ] *****
 

***** [ Registrierungsdatenbank ] *****
 
Schlüssel Gefunden : HKCU\Software\AppDataLow\Software\DynConIE
 Schlüssel Gefunden : HKCU\Software\AVG Secure Search
 Schlüssel Gefunden : HKCU\Software\Conduit
 Schlüssel Gefunden : HKCU\Software\IGearSettings
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{A0B139A7-E8D5-49E8-A7BF-12421E652208}
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\AVG Secure Search
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Freecorder extension
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\outobox
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Wajam
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233}
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A7A6995D-6EE1-4FD1-A258-49395D5BF99C}
 Schlüssel Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E601996F-E400-41CA-804B-CD6373A7EEE2}
 Schlüssel Gefunden : HKCU\Software\Softonic
 Schlüssel Gefunden : HKCU\Software\YahooPartnerToolbar
 Schlüssel Gefunden : HKLM\Software\AVG Secure Search
 Schlüssel Gefunden : HKLM\Software\AVG Security Toolbar
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{18B9B16E-716F-43DF-A6AD-512C7D2EB983}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{544C2426-48FD-4C40-AE3B-31257FF334D0}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\{D616A4A2-7B38-4DBC-9093-6FE7A4A21B17}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\RegistryHelper.DLL
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1917AB4C-E2E9-42AE-A51E-B5750F160BFB}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{A4341726-E922-47BB-86A6-23F4F4F67342}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DCA1528D-A3C0-4A9F-AA6E-DCE643F91495}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{43969E3F-3E7C-4911-A8F1-79C6CA6AC731}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{B887CA3B-D82B-4A01-AD29-E97444D01CE6}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\Interface\{C815E3DA-0823-49B0-9270-D1771D58B317}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
 Schlüssel Gefunden : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
 Schlüssel Gefunden : HKLM\Software\Conduit
 Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\igjjkeeamkpihpncmmbgdkhdnjpcfmfb
 Schlüssel Gefunden : HKLM\SOFTWARE\Google\Chrome\Extensions\ndibdjnfmopecpmkdieinmbadjfpblof
 Schlüssel Gefunden : HKLM\Software\ICQ\ICQToolbar
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AFB904C4-C255-4540-B97E-A75A34F1FFB0}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B922D405-6D13-4A2B-AE89-08A030DA4402}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E601996F-E400-41CA-804B-CD6373A7EEE2}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
 Schlüssel Gefunden : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
 Schlüssel Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search
 Schlüssel Gefunden : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
 Schlüssel Gefunden : HKLM\Software\pdfforge
 Schlüssel Gefunden : HKLM\Software\Search Settings
 Schlüssel Gefunden : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WajamUpdater
 Wert Gefunden : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]
 Wert Gefunden : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
 Wert Gefunden : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [Avg@toolbar]
 
***** [ Browser ] *****
 
-\\ Internet Explorer v9.0.8112.16514
 

-\\ Mozilla Firefox v3.0.19 (de)
 
[ Datei : C:\Users\Tomas\AppData\Roaming\Mozilla\Firefox\Profiles\omlkmk8h.default\prefs.js ]
 

-\\ Google Chrome v31.0.1650.57
 
[ Datei : C:\Users\Tomas\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 

*************************
 
AdwCleaner[R0].txt - [10702 octets] - [25/12/2013 22:02:47]
 
########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [10763 octets] ##########

HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Schlüssel Gefunden

[FDACCC]

Tranquillo, Adwcleaner di falsi positivi non ne prende mai.
Quindi, elimina tranquillamente quanto trovato, e fai girare anche questo tool, postando il report:
http://thisisudax.org/

[aurelio37]

@ FDACCC: scusa l'intromissione, in quale directory si trova il backup del registro che Junkware Removal Tool crea?

[FDACCC]

Il programma si appoggia, come molte altre utility -combofix incluso- a ERUNT, software di backup del registro.

Per ripristinare il registro basterà raggiungere la posizione;
C:\Windows\ERUNT\JRT, avviare il file ERDNT e procedere al ripristino.

[aurelio37]

FDACCC ti ringrazio