Mozilla Firefox apre pagine non richieste

[gio86]

Ciao ho un problema con firefox che mi reindirizza verso pagine non richieste. Da quello che ho letto in altri topic con lo stesso problema sembra essere un virus. Ho cercato di seguire i consigli già dati ma, non essendo una vetta in informatica, dopo un po' mi perdo. E' possibile debellare il virus senza formattare il pc? Grazie mille..

[Luke57]

Ciao, scarica questo programma:
http://goo.gl/woCKyP

avvialo con tasto dx-> esegui come Ammnistratore
una volta aperto premi Main Menu>Do a system scan and save a log file".
Copi e incolli in un post il report prodotto.

[gio86]

Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 11.49.24, on 12/09/2014
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)

FIREFOX: 32.0 (x86 it)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\AVG\AVG2014\avgui.exe
C:\Program Files\AVG Web TuneUp\vprot.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\stefano\AppData\Roaming\uTorrent\uTorrent.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\LSM\lsm.exe
C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
C:\Windows\system32\ctfmon.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\stefano\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_ ... default&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_ ... default&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\Adobe Contribute CS5.1\Plugins\IEPlugin\contributeieplugin.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Web TuneUp\vprot.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
O4 - HKCU\..\Run: [FixMyRegistry] C:\Program Files\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss
O4 - HKCU\..\Run: [EPSON SX100 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\Windows\TEMP\E_SA746.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\stefano\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O8 - Extra context menu item: Add to AMV/AVI Video Converter... - C:\Program Files\Media Player Utilities 4.29\AMVConverter\grab.html
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\3.2.0\ViProtocol.dll
O20 - AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\Windows\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Auto Update Service (AUS) - MS - C:\Program Files\LSM\aus.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2014\avgwdsvc.exe
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: Log Session Manager (Log S.M.) - MS - C:\Program Files\LSM\lsm.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: vToolbarUpdater3.2.0 - Unknown owner - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\3.2.0\ToolbarUpdater.exe

--
End of file - 5651 bytes

[Luke57]

Ciao, chiudi programmi e applicazioni, avvia hijackthis con i diritti di amministratore, premi scan

metti il segno di spunta alle seguenti voci:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/web/?utm_ ... default&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?utm_ ... default&q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5.5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [UpdateMyDrivers] C:\Program Files\SmartTweak\UpdateMyDrivers\UpdateMyDrivers.exe /ot /as /ss
O4 - HKCU\..\Run: [SpeedUpMyComputer] C:\Program Files\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as /ss
O4 - HKCU\..\Run: [FixMyRegistry] C:\Program Files\SmartTweak\FixMyRegistry\FixMyRegistry.exe /ot /as /ss
O4 - HKCU\..\Run: [EPSON SX100 Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEDE.EXE /FU "C:\Windows\TEMP\E_SA746.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\stefano\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O20 - AppInit_DLLs: C:\PROGRA~1\SupTab\SEARCH~1.DLL

premi fix checked.
Se vengono rilasciati messaggi clicca su Si

Poi, scarica AdwCleaner sul desktop
http://www.bleepingcomputer.com/download/adwcleaner/
● termina tutti i programmi aperti, in particolare i browser
● clicca sul pulsante Scan
● attendi pazientemente il termine della scansione
● clicca sul pulsante Clean e conferma cliccando OK
● prosegui cliccando OK per altre due volte: il sistema si riavvia automaticamente
● allega il log che compare al riavvio e che comunque trovi nella cartella C:/adwcleaner creata dal programma.

[gio86]

# AdwCleaner v3.309 - Rapporto creato 12/09/2014 in 14:35:18
# Aggiornato 02/09/2014 di Xplode
# Sistema operativo : Windows Vista (TM) Home Premium (32 bits)
# Nome utente : stefano - PC-STEFANO
# In esecuzione da : C:\Users\stefano\Desktop\AdwCleaner.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****

Cartella Eliminato : C:\ProgramData\AVG Secure Search
Cartella Eliminato : C:\ProgramData\AVG Security Toolbar
Cartella Eliminato : C:\ProgramData\IePluginServices
Cartella Eliminato : C:\ProgramData\WindowsProtectManger
Cartella Eliminato : C:\Program Files\ViewPassword-soft
Cartella Eliminato : C:\Program Files\Common Files\AVG Secure Search
Cartella Eliminato : C:\Users\stefano\AppData\Roaming\337Games
Cartella Eliminato : C:\Users\stefano\AppData\Roaming\sweet-page
Cartella Eliminato : C:\Users\stefano\AppData\Local\Google\Chrome\User Data\Default\Extensions\ainbkicbloikcngphmjfpjdemblcojdd
Cartella Eliminato : C:\Users\stefano\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogfjmhfnldnajmfaofeiaepghjenbgjo
File Eliminato : C:\Users\stefano\AppData\Roaming\Mozilla\Firefox\Profiles\3cx9xzj1.default\searchplugins\avg-secure-search.xml

***** [ Compiti ] *****

Compito Eliminati : ViewPassword Update
Compito Eliminati : ViewPassword_wd

***** [ Collegamenti ] *****


***** [ Registro ] *****

Chiave Eliminati : HKLM\SOFTWARE\Google\Chrome\Extensions\jbolfgndggfhhpbnkgnpjkfhinclbigj
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\protocols\handler\viprotocol
Chiave Eliminati : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
Chiave Eliminati : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
Chiave Eliminati : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE
Chiave Eliminati : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1
Valore Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [vProt]
Chiave Eliminati : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
Chiave Eliminati : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}
Chiave Eliminati : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{84FF7BD6-B47F-46F8-9130-01B2696B36CB}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F25AF245-4A81-40DC-92F9-E9021F207706}
Chiave Eliminati : HKCU\Software\smarttweak
Chiave Eliminati : HKCU\Software\AppDataLow\Software\ViewPassword
Chiave Eliminati : HKLM\SOFTWARE\AVG SafeGuard toolbar
Chiave Eliminati : HKLM\SOFTWARE\delta-homesSoftware
Chiave Eliminati : HKLM\SOFTWARE\SupDp
Chiave Eliminati : HKLM\SOFTWARE\supWindowsProtectManger
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\1ClickDownload
Chiave Eliminati : HKCU\Software\Microsoft\Windows\CurrentVersion\App Management\ARPCache\WindowsProtectManger
Dato Eliminati : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~1\SupTab\SEARCH~1.DLL

***** [ Browser ] *****

-\\ Internet Explorer v7.0.6000.16386


-\\ Mozilla Firefox v32.0 (x86 it)

[ File : C:\Users\stefano\AppData\Roaming\Mozilla\Firefox\Profiles\3cx9xzj1.default\prefs.js ]


-\\ Google Chrome v

[ File : C:\Users\stefano\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Eliminati [Search Provider] : hxxp://www.sweet-page.com/web/?type=dsp ... QE1X4EW&q={searchTerms}
Eliminati [Search Provider] : hxxp://search.delta-homes.com/web/?utm_ ... default&q={searchTerms}
Eliminati [Startup_urls] : hxxp://start.iminent.com/?appId=EDAD45D ... A7D46939AD
Eliminati [Startup_urls] : hxxp://start.iminent.com/?appId=D62097B ... 413AD6610E
Eliminati [Startup_urls] : hxxp://www.trovi.com/?gd=&ctid=CT332919 ... E8DB&SSPV=
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hp&ts=1 ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Startup_urls] : hxxp://www.sweet-page.com/?type=hppp&ts ... XX5QE1X4EW
Eliminati [Homepage] : hxxp://start.iminent.com/?appId=EDAD45D ... A7D46939AD
Eliminati [Extension] : ainbkicbloikcngphmjfpjdemblcojdd
Eliminati [Extension] : ogfjmhfnldnajmfaofeiaepghjenbgjo
Eliminati [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

AdwCleaner[R0].txt - [7231 octets] - [12/09/2014 14:32:54]
AdwCleaner[S0].txt - [7226 octets] - [12/09/2014 14:35:18]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7286 octets] ##########

[Luke57]

Scusa il ritardo, come va adesso?

[gio86]

Da una breve navigazione, Firefox continua ad aprirmi pagine non richieste...

[Luke57]

Ciao, scarica otl.exe da qui:
http://oldtimer.geekstogo.com/OTL.exe
Sotto output spunta minimal output
Clicca sulla freccettina di File Age e seleziona 60 Days
Metti la spunta a LOP Check and Purity Check.
Premi runscan
A fine scansione OTL produrrà due file di log (OTL.txt ed Extras.txt)
Data la lunghezza del report, inserisci i due files in wikisend.
http://wikisend.com/
fornendo il link per poterli vedere

[gio86]

OTL.Txt

[davide72]

avvia otl e copia incolla questo codice nel box bianco inferiore e clicca su run fix

Codice: Seleziona tutto

:OTL

FF - prefs.js..network.proxy.type: 0 FF - user.js - File not found
O1 - Hosts: ::1 localhost
[2014/07/23 01.32.25 | 000,000,000 | ---D | C] -- C:\Users\stefano\AppData\Local\4kdownload.com
[2014/09/07 07.20.44 | 000,024,064 | ---- | M] () -- C:\Users\stefano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/06/13 15.02.43 | 000,024,064 | ---- | C] () -- C:\Users\stefano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

:Commands
[emptytemp]
[reboot]



[gio86]

Firefox continua a reindirizzarmi verso siti non richiesti...devo aspettare un po' oppure una volta riavviato il computer, dopo aver seguito le tue istruzioni, il problema dovrebbe essere risolto?

[davide72]

ho fatto una modifca al codice , quindi ignora quello precedente

Codice: Seleziona tutto

:OTL

FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
O1 - Hosts: ::1 localhost
[2014/09/07 07.20.44 | 000,024,064 | ---- | M] () -- C:\Users\stefano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2014/06/13 15.02.43 | 000,024,064 | ---- | C] () -- C:\Users\stefano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

:Commands
[emptytemp]
[reboot]


[gio86]

Continuano ad aprirsi pagine indesiderate...

[davide72]

salva questo obbligatoriamente sul desktop http://www.bleepingcomputer.com/downloa ... fix/dl/12/

start >clic destro su computer e proprietà > protezione di sistema >configura > metti la spunta su disattiva protezione di sistema applica ok, chiudi tutti i broweser, disattiva avg ed esegui combofix , rispondi con NO ad eventuale messaggio sull' installazione consolle di riprisitno, quindi inizierà una scansione del sistema da finestra di prompt, attendi pazientemente senza eseguire alcuna attività al termine verrà rilasciato un log che trovi in C/combofix.txt , quindi caricalo su wikisend http://wikisend.com/ e relativo link per visionarlo

[gio86]

start >clic destro su computer e proprietà > protezione di sistema >configura > metti la spunta su disattiva protezione di sistema

quando arrivo a "protezione del sistema" non trovo "configura" ma le cartelle: "nome computer", "hardware", "avanzate", "protezione sistema" e "connessione remota"

[davide72]

scusa, in protezione sistema è sufficente che togli la spunta dalla casella accanto al disco dove cè installato windows

[gio86]

log.txt

[davide72]

apri il blocco note e copia incolla il codice qui sotto, salvalo sul desktop con nome CFScript.txt , chiudi il browser e disattiva avg
trascina il CFScript.txt sull' icona di combofix per avviare la pulizia , al termine riavvia il pc e carica su wikisend il nuovo log di combofix

Codice: Seleziona tutto

DDS::
mStart Page = about:blank
Firefox::
FF - ProfilePath - c:\users\stefano\AppData\Roaming\Mozilla\Firefox\Profiles\3cx9xzj1.default\
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL -



[gio86]

log 2.txt

[davide72]

si aprono ancora le pagine?