Problemi con il mio browser

[jokerinopazzos]

Buongiorno a tutti ,

spero di non aver sbagliato sezione , volevo dire che da un mese mentre navigo si aprono all'improvviso delle finestre o meglio delle nuove schede con delle pubblicità di programmi , oppure pubblicità di ebay , e questo mi infastidisce molto , potreste gentilmente consigliarmi qualche rimedio per far si che non escano piu' queste finestre ? il mio browser e' firefox.

Cordiali saluti

[Hironori]

provo a darti 2 dritte
posta un log di hijackthis
e un log di adw cleaner in ricerca

[jokerinopazzos]

Ecco il log che mi hai richiesto di AdwCleaner

# AdwCleaner v2.300 - Logfile creato il 06/05/2013 alle 10:25:51
# Aggiornamento 28/04/2013 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : Utente - SCANNER
# Modalità Avvio : Modalità Normale
# Eseguito da : C:\Documents and Settings\Utente\Desktop\DESKTOP\AdwCleaner.exe
# Opzioni [Cerca]


***** [Servizi] *****


***** [File / Cartelle] *****

Cartella Trovato : C:\Documents and Settings\All Users\Dati applicazioni\Ask
Cartella Trovato : C:\Documents and Settings\All Users\Dati applicazioni\InstallMate
Cartella Trovato : C:\Documents and Settings\All Users\Dati applicazioni\SoftSafe
Cartella Trovato : C:\Documents and Settings\Utente\Dati applicazioni\pdfforge
Cartella Trovato : C:\Documents and Settings\Utente\Dati applicazioni\yourfiledownloader
Cartella Trovato : C:\Programmi\Ask.com
Cartella Trovato : C:\Programmi\yourfiledownloader
File Trovato : C:\Documents and Settings\Administrator\Desktop\eBay.lnk
File Trovato : C:\Documents and Settings\Administrator\Menu Avvio\eBay.lnk
File Trovato : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\vkaleudj.default\searchplugins\Askcom.xml
File Trovato : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\vkaleudj.default\searchplugins\WebSearch.xml
File Trovato : C:\user.js

***** [Registro] *****

Chiave Trovata : HKCU\Software\APN PIP
Chiave Trovata : HKCU\Software\AppDataLow\SProtector
Chiave Trovata : HKCU\Software\Blabbers
Chiave Trovata : HKCU\Software\BrowserCompanion
Chiave Trovata : HKCU\Software\IM
Chiave Trovata : HKCU\Software\ImInstaller
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chiave Trovata : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Chiave Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKCU\Software\SmartbarLog
Chiave Trovata : HKCU\Software\Softonic
Chiave Trovata : HKCU\Software\YourFileDownloader
Chiave Trovata : HKLM\Software\BrowserCompanion
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{373ED12D-B306-43AC-9485-A7C5133DC34C}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\{ED6535E7-F778-48A5-A060-549D30024511}
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\tdataprotocol.DLL
Chiave Trovata : HKLM\SOFTWARE\Classes\AppID\updatebho.DLL
Chiave Trovata : HKLM\SOFTWARE\Classes\CLSID\{14F35FFC-522A-4DD1-A07E-6B8B65C6891E}
Chiave Trovata : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{817923CB-4744-4216-B250-CF7EDA8F1767}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{9F0C17EB-EF2C-4278-9136-2D547656BC03}
Chiave Trovata : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Chiave Trovata : HKLM\SOFTWARE\Classes\Prod.cap
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{8830DDF0-3042-404D-A62C-384A85E34833}
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{955B782E-CDC8-4CEE-B6F6-AD7D541A8D8A}
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{AC329328-7EC4-4C34-B672-0A2B90CB9B00}
Chiave Trovata : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Chiave Trovata : HKLM\SOFTWARE\Classes\updatebho.TimerBHO
Chiave Trovata : HKLM\SOFTWARE\Classes\updatebho.TimerBHO.1
Chiave Trovata : HKLM\SOFTWARE\Google\Chrome\Extensions\kolgnaidildmdbfgdnoapjdianbpajne
Chiave Trovata : HKLM\Software\ImInstaller
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{C3F3165C-74D3-6FDB-3274-14FDA8698CFA}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\BrowserCompanion
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
Chiave Trovata : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
Chiave Trovata : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
Chiave Trovata : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Chiave Trovata : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
Chiave Trovata : HKLM\Software\PIP
Chiave Trovata : HKLM\SOFTWARE\Software
Chiave Trovata : HKLM\Software\SP Global
Chiave Trovata : HKLM\Software\SProtector
Chiave Trovata : HKLM\Software\YourFileDownloader
Chiave Trovata : HKU\S-1-5-21-1229272821-1177238915-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Chiave Trovata : HKU\S-1-5-21-1229272821-1177238915-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Valore Trovata : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer = hxxp=127.0.0.1:56847]
Valore Trovata : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]

***** [Browser Internet] *****

-\\ Internet Explorer v8.0.6001.18702

[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://search.babylon.com/?affID=112560 ... cb4ec74e5e
[HKCU\Software\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://www.plusnetwork.com/?sp=addr&q={searchTerms}
[HKCU\Software\Microsoft\Internet Explorer\Search - SearchAssistant] = hxxp://www.plusnetwork.com/?sp=addr&q={searchTerms}
[HKCU\Software\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://www.plusnetwork.com/?sp=addr&q={searchTerms}
[HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl - Default] = hxxp://www.plusnetwork.com/?sp=addr&q={searchTerms}
[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Start Page] = hxxp://websearch.simplespeedy.info/

-\\ Mozilla Firefox v20.0.1 (it)

File : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\vkaleudj.default\prefs.js

Trovata : user_pref("aol_toolbar.default.homepage.check", false);
Trovata : user_pref("aol_toolbar.default.search.check", false);
Trovata : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Trovata : user_pref("browser.search.defaultengine", "Ask.com");
Trovata : user_pref("browser.search.defaultenginename", "WebSearch");
Trovata : user_pref("browser.search.defaultenginename,S", "WebSearch");
Trovata : user_pref("browser.search.defaulturl", "hxxp://websearch.simplespeedy.info/?l=1&q=");
Trovata : user_pref("browser.search.order.1", "WebSearch");
Trovata : user_pref("browser.search.order.1,S", "WebSearch");
Trovata : user_pref("browser.search.selectedEngine", "WebSearch");
Trovata : user_pref("browser.search.selectedEngine,S", "WebSearch");
Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
Trovata : user_pref("extensions.BabylonToolbar.prtkDS", 0);
Trovata : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
Trovata : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Trovata : user_pref("extensions.BabylonToolbar_i.babExt", "");
Trovata : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=112560&tt=220512_53all");
Trovata : user_pref("extensions.BabylonToolbar_i.hardId", "3039c1c4000000000000e0cb4ec74e5e");
Trovata : user_pref("extensions.BabylonToolbar_i.id", "3039c1c4000000000000e0cb4ec74e5e");
Trovata : user_pref("extensions.BabylonToolbar_i.instlDay", "15490");
Trovata : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Trovata : user_pref("extensions.BabylonToolbar_i.newTab", true);
Trovata : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112560&tt=22051[...]
Trovata : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Trovata : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Trovata : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Trovata : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Trovata : user_pref("extensions.BabylonToolbar_i.tlbrId", "base");
Trovata : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Trovata : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1714:30:44");
Trovata : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Trovata : user_pref("keyword.URL", "hxxp://websearch.simplespeedy.info/?l=1&q=");
Trovata : user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "");
Trovata : user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "");
Trovata : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
Trovata : user_pref("sweetim.toolbar.previous.keyword.URL", "");
Trovata : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
Trovata : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
Trovata : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
Trovata : user_pref("sweetim.toolbar.searchguard.enable", "");

-\\ Google Chrome v [Impossibile rilevare la versione]

File : C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Preferences

[OK] File Pulito.

*************************

AdwCleaner[R1].txt - [11132 octets] - [06/05/2013 10:25:51]

########## EOF - C:\AdwCleaner[R1].txt - [11193 octets] ##########

Invece questo e' quello di HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10.32.19, on 06/05/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\APC\PowerChute Personal Edition\mainserv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\AVG\AVG2013\avgidsagent.exe
C:\Programmi\AVG\AVG2013\avgwdsvc.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmi\Motorola\MotoHelper\MotoHelperService.exe
C:\Programmi\AVG\AVG2013\avgnsx.exe
C:\Programmi\AVG\AVG2013\avgemcx.exe
C:\Programmi\CDBurnerXP\NMSAccessU.exe
C:\Programmi\PDF Architect\HelperService.exe
C:\Programmi\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Programmi\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Programmi\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Spybot - Search & Destroy 2\SDUpdate.exe
C:\Programmi\AVG\AVG2013\avgrsx.exe
C:\Programmi\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TeamViewer\Version8\TeamViewer_Service.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Programmi\CyberLink\Power2Go\CLMLSvc.exe
C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\Programmi\APC\PowerChute Personal Edition\dataserv.exe
C:\Programmi\AVG\AVG2013\avgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\Programmi\APC\PowerChute Personal Edition\apcsystray.exe
C:\Programmi\TeamViewer\Version8\TeamViewer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\TeamViewer\Version8\tv_w32.exe
C:\Programmi\RealNetworks\RealDownloader\recordingmanager.exe
C:\Programmi\Microsoft Office\Office12\OUTLOOK.EXE
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\AVG\AVG2013\avgcsrvx.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Documents and Settings\Utente\Desktop\DESKTOP\AdwCleaner.exe
C:\Programmi\ArcSoft\PhotoStudio 5.5\PhotoStudio.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.simplespeedy.info/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.plusnetwork.com/?sp=addr&q={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.plusnetwork.com/?sp=addr&q={searchTerms}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:56847
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 192.168.*.*;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dati applicazioni\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programmi\PDF Architect\PDFIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programmi\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Programmi\PDF Architect\PDFIEPlugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Programmi\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Programmi\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Programmi\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Programmi\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\7.0"
O4 - HKLM\..\Run: [SDTray] "C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Programmi\File comuni\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Programmi\File comuni\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: APC UPS Status.lnk = C:\Programmi\APC\PowerChute Personal Edition\Display.exe
O8 - Extra context menu item: Aggiungi destinazione link a PDF esistente - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D43B3A1-14C7-471C-ADCA-52026F4C3758}: NameServer = 151.99.125.1,151.99.0.100
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programmi\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\windows\system32
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: APC Data Service - Schneider Electric - C:\Programmi\APC\PowerChute Personal Edition\dataserv.exe
O23 - Service: APC UPS Service - Schneider Electric - C:\Programmi\APC\PowerChute Personal Edition\mainserv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Programmi\Motorola\MotoHelper\MotoHelperService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Programmi\CDBurnerXP\NMSAccessU.exe
O23 - Service: PDF Architect Helper Service - pdfforge GbR - C:\Programmi\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GbR - C:\Programmi\PDF Architect\ConversionService.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Programmi\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Programmi\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 10631 bytes

Grazie mille per il tuo aiuto

[Hironori]

apperò , penso tu sia una vittima di softonic
direi di far girare adw ( elimina ) e ripostare un log hijts dopo la pulizia , potrebbe essere necessario far girare 2 volte adw , se lo chiede ripeti scansione ed eliminazione
Ma spybot non ti ha segnalato nulla ?

[jokerinopazzos]

No non mi ha segnalato nulla

[jokerinopazzos]

Eccoti il log nuovo del programma che mi hai consigliato

# AdwCleaner v2.300 - Logfile creato il 06/05/2013 alle 17:48:30
# Aggiornamento 28/04/2013 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : Utente - SCANNER
# Modalità Avvio : Modalità Normale
# Eseguito da : C:\Documents and Settings\Utente\Desktop\DESKTOP\AdwCleaner.exe
# Opzioni [Cerca]


***** [Servizi] *****


***** [File / Cartelle] *****


***** [Registro] *****


***** [Browser Internet] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registro Pulito.

-\\ Mozilla Firefox v20.0.1 (it)

File : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\vkaleudj.default\prefs.js

Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]

-\\ Google Chrome v [Impossibile rilevare la versione]

File : C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Preferences

[OK] File Pulito.

*************************

AdwCleaner[R1].txt - [11263 octets] - [06/05/2013 10:25:51]
AdwCleaner[R2].txt - [11324 octets] - [06/05/2013 16:06:24]
AdwCleaner[R3].txt - [1155 octets] - [06/05/2013 17:48:30]
AdwCleaner[S1].txt - [11651 octets] - [06/05/2013 16:07:57]

########## EOF - C:\AdwCleaner[R3].txt - [1276 octets] ##########

SCAN HIJACKTHIS

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17.51.36, on 06/05/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\APC\PowerChute Personal Edition\mainserv.exe
C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programmi\AVG\AVG2013\avgidsagent.exe
C:\Programmi\AVG\AVG2013\avgwdsvc.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\File comuni\Microsoft Shared\VS7Debug\mdm.exe
C:\Programmi\Motorola\MotoHelper\MotoHelperService.exe
C:\Programmi\IObit\Smart Defrag 2\SmartDefrag.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Spybot - Search & Destroy 2\SDUpdate.exe
C:\Programmi\CDBurnerXP\NMSAccessU.exe
C:\Programmi\PDF Architect\HelperService.exe
C:\Programmi\AVG\AVG2013\avgnsx.exe
C:\Programmi\AVG\AVG2013\avgemcx.exe
C:\Programmi\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Programmi\RealNetworks\RealDownloader\rndlresolversvc.exe
C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe
C:\Programmi\AVG\AVG2013\avgrsx.exe
C:\Programmi\AVG\AVG2013\avgcsrvx.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TeamViewer\Version8\TeamViewer_Service.exe
C:\Programmi\APC\PowerChute Personal Edition\dataserv.exe
C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Programmi\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Programmi\CyberLink\Power2Go\CLMLSvc.exe
C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe
C:\Programmi\AVG\AVG2013\avgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programmi\TeamViewer\Version8\TeamViewer.exe
C:\Programmi\APC\PowerChute Personal Edition\apcsystray.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\TeamViewer\Version8\tv_w32.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Mozilla Firefox\plugin-container.exe
C:\Genius\Genius.exe
C:\Programmi\Microsoft Office\Office12\OUTLOOK.EXE
C:\Programmi\ArcSoft\PhotoStudio 5.5\PhotoStudio.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\RealNetworks\RealDownloader\recordingmanager.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\AVG\AVG2013\avgcsrvx.exe
C:\Documents and Settings\Utente\Desktop\DESKTOP\AdwCleaner.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 192.168.*.*;<local>;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Dati applicazioni\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Programmi\PDF Architect\PDFIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programmi\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programmi\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programmi\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programmi\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programmi\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programmi\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [OpwareSE2] "C:\Programmi\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [CLMLServer] "C:\Programmi\CyberLink\Power2Go\CLMLSvc.exe"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Programmi\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Programmi\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\7.0"
O4 - HKLM\..\Run: [SDTray] "C:\Programmi\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Programmi\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Programmi\File comuni\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Programmi\AVG\AVG2013\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Programmi\File comuni\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Programmi\File comuni\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: APC UPS Status.lnk = C:\Programmi\APC\PowerChute Personal Edition\Display.exe
O8 - Extra context menu item: Aggiungi destinazione link a PDF esistente - res://C:\Programmi\File comuni\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programmi\Spybot - Search & Destroy 2\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{5D43B3A1-14C7-471C-ADCA-52026F4C3758}: NameServer = 151.99.125.1,151.99.0.100
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programmi\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FILECO~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: c:\windows\system32
O22 - SharedTaskScheduler: Precaricatore Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Daemon di cache delle categorie di componenti - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: APC Data Service - Schneider Electric - C:\Programmi\APC\PowerChute Personal Edition\dataserv.exe
O23 - Service: APC UPS Service - Schneider Electric - C:\Programmi\APC\PowerChute Personal Edition\mainserv.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programmi\File comuni\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2013\avgidsagent.exe
O23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Programmi\AVG\AVG2013\avgwdsvc.exe
O23 - Service: Servizio Google Update (gupdate) (gupdate) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Servizio Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Programmi\Google\Update\GoogleUpdate.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programmi\Java\jre6\bin\jqs.exe
O23 - Service: MotoHelper Service (MotoHelper) - Unknown owner - C:\Programmi\Motorola\MotoHelper\MotoHelperService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Programmi\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: NMSAccess - Unknown owner - C:\Programmi\CDBurnerXP\NMSAccessU.exe
O23 - Service: PDF Architect Helper Service - pdfforge GbR - C:\Programmi\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GbR - C:\Programmi\PDF Architect\ConversionService.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Programmi\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Programmi\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Programmi\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 10061 bytes

Pero' ti dico che si aprono sempre le schede della pubblicità in firefox.




Grazie

[The Walking Dead]

Ti dico quello che farei io.

1) Scan con Hitman pro
http://www.surfright.nl/it/

2)Scan con Kaspersky Virus Removal Tool
http://www.kaspersky.com/antivirus-removal-tool?form=1

3)Scan con Malwarebytes
http://it.malwarebytes.org/

[Hironori]

rifai rigirare adw (elimina ) , intanto una pulita hai temp ( ccleaner togli spunta a " cancella solo se + vecchi di 24 ore ) ai java istallto ? Aggiorna e pulisci la cache ( personalmente lo cassato e non ne sento la mancanza ) mi studio con calma il log di hjt , mi sembra strano che una scansiona con spybot non ti abbia dato nulla

anche la soluzione di Walking è valida , è solo un diverso modo di procedere

[jokerinopazzos]

Ho scaricato HITMAN PRO e avg non me lo fa installare perche' dice che e' un ADWARE , che faccio proseguo con l'installazione ?

Ciao

[The Walking Dead]

Se Hitman pro è stato scaricato dal sito ufficiale, allora puoi usarlo sicuramente, è un falso positivo.
Il sito ufficiale è questo.
http://www.surfright.nl/it/

[jokerinopazzos]

Ti dico quello che farei io.

1) Scan con Hitman pro
http://www.surfright.nl/it/

2)Scan con Kaspersky Virus Removal Tool
http://www.kaspersky.com/antivirus-removal-tool?form=1

3)Scan con Malwarebytes
http://it.malwarebytes.org/

Ciao , ho fatto come hai detto tu e ti dico , che Hitman Pro mi ha cancellato le infezioni che avevo , Kaspersky Virus Removal Tool non mi ha trovato anomalie , e MalwareBytes lo stesso nessuna infezione trovata , ma le schede con le pubblicità continuano ad uscire.
Altri consigli in merito ?

Grazie

[The Walking Dead]

Bisognerebbe vedere i log dei programmi antivirus.
Sapere se sono state effettuate scansioni complete o parziali ed altri dettagli del genere, come i file individuati.
Dal log HT non noto nulla di strano, spero non mi sia sfuggito niente.

In caso Kaspersky e Malwarebytes siano stati fatti girare in modalità "scansione veloce" rieffettua la scansione in modo completo.

1) Al tuo posto farei uno scan completo con Bitdefender
http://www.bitdefender.com/solutions/free.html

2) Antivir free (completo)
http://www.avira.com/it/avira-free-antivirus

Installa un software alla volta, dopo aver rimosso AVG.

Dai anche uno sguardo ai programmi installati e verifica se negli ultimi tempi (un mese circa) siano stati installati programmi che possano avere portato con se adware.

[Hironori]

Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]
non mi convince .. io farei rigirare adw che penso la elimini

[jokerinopazzos]

Tutte le scansioni sono state fatte girare in maniera completa e non veloce , perche' devo eliminare Avg ? non e' un buon antivirus ?

Attendo vostri consiglio grazie

[The Walking Dead]

Segui anche il suggerimento di Hironori e prova facendo rigirare adw.

Avg puoi reinstallarlo se ti ci trovi bene, ti consigliavo di rimuoverlo temporaneamente e fare uno scan con i software sopra descritti.

[jokerinopazzos]

# AdwCleaner v2.300 - Logfile creato il 13/05/2013 alle 10:08:50
# Aggiornamento 28/04/2013 by Xplode
# Sistema Operativo : Microsoft Windows XP Service Pack 3 (32 bits)
# Utente : Utente - SCANNER
# Modalità Avvio : Modalità Normale
# Eseguito da : C:\Documents and Settings\Utente\Desktop\DESKTOP\AdwCleaner.exe
# Opzioni [Cerca]


***** [Servizi] *****


***** [File / Cartelle] *****

Cartella Trovato : C:\Documents and Settings\All Users\Dati applicazioni\InstallMate
Cartella Trovato : C:\Documents and Settings\Utente\Dati applicazioni\pdfforge

***** [Registro] *****


***** [Browser Internet] *****

-\\ Internet Explorer v8.0.6001.18702

[OK] Registro Pulito.

-\\ Mozilla Firefox v20.0.1 (it)

File : C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\vkaleudj.default\prefs.js

Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo[...]

-\\ Google Chrome v [Impossibile rilevare la versione]

File : C:\Documents and Settings\Utente\Impostazioni locali\Dati applicazioni\Google\Chrome\User Data\Default\Preferences

[OK] File Pulito.

*************************

AdwCleaner[R1].txt - [11263 octets] - [06/05/2013 10:25:51]
AdwCleaner[R2].txt - [11324 octets] - [06/05/2013 16:06:24]
AdwCleaner[R3].txt - [1345 octets] - [06/05/2013 17:48:30]
AdwCleaner[R4].txt - [1381 octets] - [13/05/2013 10:08:50]
AdwCleaner[S1].txt - [11651 octets] - [06/05/2013 16:07:57]
AdwCleaner[S2].txt - [1409 octets] - [06/05/2013 17:51:25]

########## EOF - C:\AdwCleaner[R4].txt - [1562 octets] ##########

Ecco il log di adw

Grazie

[The Walking Dead]

Individua questo:
Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo

Non saprei cosa sia.
Attendi Hironori, vediamo che ne pensa.
Però credo si potrebbe eliminare.

Non capisco perché continuino ad aprirsi le finestre pubblicitarie.
Il log di HT sembra a posto, Hitman pro, Kasp, e malwarebytes li abbiamo fatti girare.
Proverei se fossi in te almeno uno scan con Bitdefender.

[Hironori]

scusate il ritardo
navigando un poco, quello dovrebbe contenere le impostazioni di firefox , penso si potrebbe eliminare se è stato modificato da qualche adware
Comunque avevi varia spazzatura , e quel real downloader è sicuro ?

[Hironori]

se non lo ho detto elimina i vari temp ( ccleaner togliendo la spunta a " cancella se + vecchi di 24 ore ), svuota la cache java & aggiornalo ( io lo ho cassato )

[jokerinopazzos]

Buongiorno a tutti ,

Individua questo:
Trovata : user_pref("extensions.513864ea39fac.scode", "(function(){try{if('aol.com,mail.google.com,premiumrepo

come lo devo individuare facendo una scansione con hijackthis ? ???????

poi per ccleaner dove trovo l'opzione che mi avete segnalato quelle delle 24 ore ?


se formatto il computer , che software mi consigliate di mettere oltre avg , per non far ripetere tutto questo????
Grazie