Virus Email invia link a tutti i contatti

[MisterT]

Ho riprovato, anche adesso, purtroppo non va...se hai altri modi dimmi ed io eseguo...

[Luke57]

Copia e incolla il report in un post

[MisterT]

eccolo:

# AdwCleaner v3.204 - Rapporto creato 28/04/2014 in 13:00:19
# Aggiornato 26/04/2014 di Xplode
# Sistema operativo : Windows 8 (64 bits)
# Nome utente : ***********
# In esecuzione da : C:\Users\********Downloads\AdwCleaner.exe
# Opzione : Pulisci

***** [ Servizi ] *****


***** [ File / Cartelle ] *****

Cartella Eliminato : C:\Program Files (x86)\Delta
Cartella Eliminato : C:\Program Files (x86)\MyPC Backup
Cartella Eliminato : C:\Program Files (x86)\Vittalia
Cartella Eliminato : C:\Users\******\.android
Cartella Eliminato : C:\Users\******\AppData\Roaming\BabSolution
Cartella Eliminato : C:\Users\*****\AppData\Roaming\Babylon
Cartella Eliminato : C:\Users\*****\AppData\Roaming\BaseFlash
Cartella Eliminato : C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BitGuard
File Eliminato : C:\Users\Public\Desktop\eBay.lnk
File Eliminato : C:\windows\System32\Tasks\BitGuard
File Eliminato : C:\windows\System32\Tasks\EPUpdater

***** [ Collegamenti ] *****


***** [ Registro ] *****

Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Chiave Eliminati : HKLM\SOFTWARE\Classes\Prod.cap
Chiave Eliminati : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Chiave Eliminati : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Chiave Eliminati : HKCU\Software\592dcd9e035bd42
Chiave Eliminati : HKLM\SOFTWARE\592dcd9e035bd42
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Chiave Eliminati : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455185568}
Chiave Eliminati : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466186668}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Chiave Eliminati : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Chiave Eliminati : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550455185568}
Chiave Eliminati : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660466186668}
Chiave Eliminati : HKCU\Software\Delta
Chiave Eliminati : HKCU\Software\installedbrowserextensions
Chiave Eliminati : HKCU\Software\InstalledThirdPartyPrograms
Chiave Eliminati : HKCU\Software\AppDataLow\Software\LyricsBuddy-1
Chiave Eliminati : HKLM\Software\DataMngr
Chiave Eliminati : HKLM\Software\Delta
Chiave Eliminati : HKLM\Software\SoftwareUpdater
Chiave Eliminati : HKLM\Software\Vittalia
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Chiave Eliminati : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vittalia
Chiave Eliminati : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
Dato Eliminati : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~3\bitguard\271769~1.27\{c16c1~1\loader.dll

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.16537


-\\ Mozilla Firefox v28.0 (it)

[ File : C:\Users\********\AppData\Roaming\Mozilla\Firefox\Profiles\pyvbeylm.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [4149 octets] - [28/04/2014 12:11:22]
AdwCleaner[S0].txt - [3848 octets] - [28/04/2014 13:00:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [3908 octets] ##########

[Luke57]

Ciao, se il problema persiste, scarica otl.exe da qui:
http://oldtimer.geekstogo.com/OTL.exe
Sotto output spunta minimal output
Clicca sulla freccettina di File Age e seleziona 60 Days
Metti la spunta a LOP Check and Purity Check.
Premi runscan
A fine scansione OTL produrrà due file di log (OTL.txt ed Extras.txt)
Data la lunghezza del report, inseriscili in un sito di hosting.

[MisterT]

Ho effettuato lo scano con Old ed ho i report, ma non riesco a caricarli su wikisend, se hai un amail e posso mandarteli li, o te li mando via pm, o dimmi tu...grazie ancora!

[Luke57]

Ciao, inseriscili qui:
http://www.wikifortio.com/

[MisterT]

non va neanche questo...

[MisterT]

inviato via pm

[Luke57]

Ciao, apri otl.exe, copia e incolla il seguente script nel box bianco di otl:

Codice: Seleziona tutto

:OTL
PRC - C:\ProgramData\IePluginService\PluginService.exe (Cherished Technololgy LIMITED)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe (APN LLC.)
PRC - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe (APN)
MOD - c:\users\riccardo\appdata\local\temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpfgdh8u.dll ()
SRV - (Wpm) -- C:\ProgramData\WPM\wprotectmanager.exe (Cherished Technololgy LIMITED)
IE:64bit: - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.qone8.com/web/?type=ds&ts=13 ... S3S6TCS&q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1398 ... X43S3S6TCS
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.qone8.com/web/?type=ds&ts=13 ... S3S6TCS&q={searchTerms}
IE - HKLM\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.qone8.com/web/?type=ds&ts=13 ... S3S6TCS&q={searchTerms}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.qone8.com/?type=hp&ts=1398 ... X43S3S6TCS
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.qone8.com/?type=hp&ts=1398 ... X43S3S6TCS
IE - HKCU\..\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}: "URL" = http://www.qone8.com/web/?type=ds&ts=13 ... S3S6TCS&q={searchTerms}
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (Avira SearchFree Toolbar) - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe (Crawler.com)
O4:64bit: - HKLM..\Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe (Crawler.com)
O4 - HKCU..\Run: [ares] "C:\Program Files (x86)\Ares\Ares.exe" -h File not found
O4 - HKCU..\Run: [PriceMeterW] "C:\Users\Riccardo\AppData\Local\PriceMeter\pricemeterw.exe" File not found
O18:64bit: - Protocol\Handler\osf - No CLSID value found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
[2014/04/28 15.59.37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IminentToolbar
[2014/04/28 15.02.53 | 000,000,000 | ---D | C] -- C:\Users\Riccardo\AppData\Local\PriceMeterLiveUpdate
[2014/04/28 15.02.53 | 000,000,000 | ---D | C] -- C:\ProgramData\PriceMeterLiveUpdate
[2014/04/28 15.02.53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PriceMeterLiveUpdate
[2014/04/28 15.01.19 | 000,000,000 | ---D | C] -- C:\Users\Riccardo\AppData\Roaming\SupTab
[2014/04/28 15.01.14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SupTab
[2014/04/28 15.01.04 | 000,000,000 | ---D | C] -- C:\ProgramData\WPM
[2014/04/28 14.59.45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nosibay
[2014/04/28 14.56.32 | 000,000,000 | ---D | C] -- C:\Users\Riccardo\AppData\Roaming\Nosibay

:Commands
[emptytemp]

Clicca su RUN FIX.
Disistalla spywareterminator e mcfee; con avira e malwarebytes va già bene.

[jess92]

ciao a tutti, ho lo stesso problema della persona che ha creato il post e non volevo creare un topic doppio.
leggendo su internet ho provato a scaricare ad aware ma non ha funzionato come speravo
potreste aiutarmi per favore?

[jess92]

(scusate volevo modificare il post precedente ed ho sbagliato, non volevo quotare il post di prima )

[davide72]

sistema operativo?

[jess92]

windows 8.1

[davide72]

usa kaspersky versione prova

[jess92]

usa kaspersky versione prova

kaspersky virus o kaspersky internet security?

[davide72]

kaspersky virus

[jess92]

kaspersky virus

ok,installato

[jess92]

adesso cosa faccio?

[davide72]

cosa ti devo dire? aggiorna le definizioni e fai una scansione completa , rimuovi eventuali minacce trovate

[COCCOBELLO]

prova anche a resettare il file hosts
esegui questo fix http://go.microsoft.com/?linkid=9668866