RISOLTO come eliminare claro search

Pubblicità
re: come eliminare claro search

Ciao Tecnico24

Anch'io ho bisogno del tuo aiuto!!!!!!! :inchino:

Ti allego i 2 file dopo aver fatto il Run Scan con OTL.

Grazieeeeeeeeeee!!!!

Visualizza allegato 38293Visualizza allegato 38294

Copia il contenuto del file FixperOTL.txt in allegato qui in basso nel box "custom scans/fixes" di OTL
premi su
2eejtxj.jpg

Attendi le operazioni e il riavvio del pc.

- - - Updated - - -
Non riesco a liberarmi di claro search.... cosa faccio?
@Sup3rmario86
posta i report di OTL come hanno eseguito gli altri.
 

Allegati

re: come eliminare claro search

Ciao Tecnico24,
ho fatto come mi hai detto al riavvio del pc mi è apparsa la seguente schermata, ora cosa devo fare??


All processes killed
========== PROCESSES ==========
========== SERVICES/DRIVERS ==========
========== OTL ==========
No active process named PService.exe was found!
Service SoftwareUpd stopped successfully!
Service SoftwareUpd deleted successfully!
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\SoftwareUpdater\SoftwareUpdService.exe moved successfully.
Service PowerOffer Service stopped successfully!
Service PowerOffer Service deleted successfully!
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\PosService\Pos.exe moved successfully.
Service ServUpdater stopped successfully!
Service ServUpdater deleted successfully!
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\ServUpdater\ServiceUpd.exe moved successfully.
Service WDICA stopped successfully!
Service WDICA deleted successfully!
File File not found not found.
Service PDRFRAME stopped successfully!
Service PDRFRAME deleted successfully!
File File not found not found.
Service PDRELI stopped successfully!
Service PDRELI deleted successfully!
File File not found not found.
Service PDFRAME stopped successfully!
Service PDFRAME deleted successfully!
File File not found not found.
Service PDCOMP stopped successfully!
Service PDCOMP deleted successfully!
File File not found not found.
Service PCIDump stopped successfully!
Service PCIDump deleted successfully!
File File not found not found.
Service lbrtfdc stopped successfully!
Service lbrtfdc deleted successfully!
File File not found not found.
Service i2omgmt stopped successfully!
Service i2omgmt deleted successfully!
File File not found not found.
Service Changer stopped successfully!
Service Changer deleted successfully!
File File not found not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B7971660-A1CE-4FDD-B9E0-2C37D77AFB0B}\ not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Prefs.js: "Claro Search" removed from browser.search.defaultenginename
Prefs.js: "Claro Search" removed from browser.search.order.1
Prefs.js: "Search" removed from browser.search.selectedEngine
Prefs.js: "www.google.com" removed from browser.startup.homepage
Prefs.js: jqs@sun.com:1.0 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}:6.0.33 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}:6.0.35 removed from extensions.enabledItems
Prefs.js: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}:6.0.37 removed from extensions.enabledItems
Prefs.js: ffxtlbr@funmoods.com:1.5.1 removed from extensions.enabledItems
Prefs.js: plugin@yontoo.com:1.20.00 removed from extensions.enabledItems
Prefs.js: {EEE6C361-6118-11DC-9C72-001320C79847}:1.7.0.3 removed from extensions.enabledItems
Prefs.js: "http://search.sweetim.com/search.as...FBC-BF5D01A81E3F}&src=2&crg=3.1010000.10039&q=" removed from keyword.URL
Prefs.js: "http://search.sweetim.com/search.as...FBC-BF5D01A81E3F}&src=2&crg=3.1010000.10039&q=" removed from sweetim.toolbar.previous.keyword.URL
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\META-INF folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\components folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\skin folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\nl-NL folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\it-IT folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\fr-FR folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\es-ES folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\en-US folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale\de-DE folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\locale folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff\content folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome\mgtoolbarff folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847}\chrome folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\{EEE6C361-6118-11DC-9C72-001320C79847} folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com\META-INF folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com\content\imgs\flgs folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com\content\imgs folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com\content\images folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com\content folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Mozilla\Firefox\Profiles\ygbdfitb.default\extensions\ffxtlbr@funmoods.com folder moved successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\PosService deleted successfully.
C:\Documents and Settings\All Users\Documenti\AppData\PoApp\PLauncher.exe moved successfully.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{2A794B9F-9ED2-4782-B729-4F8F8AAAC758}\\NameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{4667E082-B566-4AD5-9CA0-FBDFE90DC36D}\\NameServer| /E : value set successfully!
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{DD25A972-D62A-4F4B-95E2-552354EE8BC0}\\NameServer| /E : value set successfully!
========== FILES ==========
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\PowerOffer folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\ServUpdater\settings folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\ServUpdater folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\PosService\settings folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\PosService folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\SoftwareUpdater\settings folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\SoftwareUpdater folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Babylon folder moved successfully.
C:\Documents and Settings\All Users\Dati applicazioni\Babylon folder moved successfully.
C:\Programmi\SweetIM\Toolbars\Internet Explorer\Microsoft.VC90.CRT folder moved successfully.
C:\Programmi\SweetIM\Toolbars\Internet Explorer folder moved successfully.
C:\Programmi\SweetIM\Toolbars folder moved successfully.
C:\Programmi\SweetIM folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Funmoods\Funmoods folder moved successfully.
C:\Documents and Settings\Roberta\Dati applicazioni\Funmoods folder moved successfully.
C:\Programmi\TornTV.com folder moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\funmoods.crx moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\funmoods-speeddial_sf.crx moved successfully.
C:\WINDOWS\imsins.BAK moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\unins000.exe moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Dati applicazioni\unins000.dat moved successfully.
< ipconfig /flushdns /c >
Configurazione IP di Windows
Svuotata la cache del resolver DNS.
C:\Documents and Settings\Roberta\Desktop\cmd.bat deleted successfully.
C:\Documents and Settings\Roberta\Desktop\cmd.txt deleted successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\\""|""%1" %*" /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 56475 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 1775110 bytes
->Temporary Internet Files folder emptied: 4125152 bytes

User: Roberta
->Temp folder emptied: 293830008 bytes
->Temporary Internet Files folder emptied: 359002454 bytes
->Java cache emptied: 1995948 bytes
->FireFox cache emptied: 14952338 bytes
->Flash cache emptied: 15223689 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2352329 bytes
%systemroot%\System32 .tmp files removed: 3590469 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 329070606 bytes
RecycleBin emptied: 744321 bytes

Total Files Cleaned = 979,00 mb

C:\WINDOWS\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.69.0 log created on 11212012_155052
Files\Folders moved on Reboot...
C:\Documents and Settings\Roberta\Impostazioni locali\Temp\MessengerCache\28kNkjW5ndZSbN+fc2NpvwYQgn0= moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temp\MessengerCache\5QzDzbZNiSDGx7TXs+tqISQpOpM= moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temp\MessengerCache\ahvWW5fJHu4H3V0uvsEcn9Yd2Ns= moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temp\MessengerCache\JS3jkZwxUUSzx875h22jBTtKAeA= moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temp\MessengerCache\QN0nihDUeSst5RzBGBFpj1eCDEg= moved successfully.
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DF9F97.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DF9FB4.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DFA107.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DFA15F.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DFA26B.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DFA347.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temp\~DFDFD7.tmp not found!
File\Folder C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.Word\~WRS1865.tmp not found!
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.IE5\AW4CFXF1\268183-come-eliminare-claro-search-da-google-chrome-3[1].html moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.IE5\AW4CFXF1\xd_arbiter[1].htm moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.IE5\4L163C4W\like[4].htm moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.IE5\0GO886U0\ADSAdClient31[1].txt moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\Content.IE5\0GO886U0\xd_arbiter[1].htm moved successfully.
C:\Documents and Settings\Roberta\Impostazioni locali\Temporary Internet Files\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat moved successfully.
PendingFileRenameOperations files...
Registry entries deleted on Reboot...
 
re: come eliminare claro search

Scusa Tecnico24, ma non ho capito come faccio io non ho istallato google chrome. cosa faccio devo istallarlo??
 
re: come eliminare claro search

@Roby2
Ecco perche odio tutti i quesiti in un solo topic : devi scusarmi , mi sono distratto con un altro report di OTL.
Comunque abbiamo finito , avvia firefox e verifica la situazione.
 
re: come eliminare claro search

Mi viene da piangere e una volta che ho aperto Mozilla Firefox dove devo andare??? Scusa ma sono una frana
 
re: come eliminare claro search

Verifica se c'è claro , se ti appare nella pagina iniziale o nei motori di ricerca.
Se hai postato qui , era perchè ti compariva claro giusto?adesso compare piu'?
 
re: come eliminare claro search

C'è ancoraaaaaaaa aiuto.!! Quando apro Internet explorer la prima pagina che ho impostato è google poi se voglio aprire un'altra nuova scheda mi appare sto maledetto Claro e non lo voglio!!!:mad:

- - - Updated - - -

Xò se vado nei provider di ricerca non mi dice che c'è e allora x' continua ad uscire !!??? Uff :-(
 
re: come eliminare claro search

C'è ancoraaaaaaaa aiuto.!! Quando apro Internet explorer la prima pagina che ho impostato è google poi se voglio aprire un'altra nuova scheda mi appare sto maledetto Claro e non lo voglio!!!:mad:

- - - Updated - - -

Xò se vado nei provider di ricerca non mi dice che c'è e allora x' continua ad uscire !!??? Uff :-(
Apri Internet Explorer
Opzioni internet
connessioni
Impostazioni LAN
nel caso ci fosse , togli la spunta da "utilizza un server proxy per le connessioni LAN..."
Applica->>Ok.

Sempre da Opzioni internet
scheda Avanzate
clicca in basso su riemposta.

Riavvia il broswer.
 
re: come eliminare claro search

Apri Internet Explorer
Opzioni internet
connessioni
Impostazioni LAN
nel caso ci fosse , togli la spunta da "utilizza un server proxy per le connessioni LAN..."
Applica->>Ok.

Sempre da Opzioni internet
scheda Avanzate
clicca in basso su riemposta.

Riavvia il broswer.


Ciao, io ho lo stesso problema di Claro search che si autoimposta come pagina predefinita all'avvio di Firefox, ho eseguito OTL facendo lo scan come hai ripetuto svariate volte e ho ottenuto solo il file OTL.txt mentre extras.txt non me lo da.
 

Allegati

  • OTL.Txt
    OTL.Txt
    114.2 KB · Visualizzazioni: 165
re: come eliminare claro search

Ciao, io ho lo stesso problema di Claro search che si autoimposta come pagina predefinita all'avvio di Firefox, ho eseguito OTL facendo lo scan come hai ripetuto svariate volte e ho ottenuto solo il file OTL.txt mentre extras.txt non me lo da.
Copia ed incolla il contenuto del file FixperOTL in allegato qui in basso nel box custom scans/fixes di OTL.
clicca su
2eejtxj.jpg

Attendi le operazioni e il riavvio del computer.
Al ritorno ti apparirà un report , allegalo.

Anche in google chrome risiede Claro.
Apri google chrome
Impostazioni
Ricerca-gestisci motori di ricerca
Cerca la voce Claro search
clicca sulla x a destra per rimuoverlo.

Poi sempre da Chrome->>impostazioni->>in Aspetto
sotto il pulsante mostra pagina iniziale c'è il tasto cambia
cliccandoci sopra visualizzi le pagine impostate , elimina claro e imposta quella di tuo gradimento.
 

Allegati

re: come eliminare claro search

Copia ed incolla il contenuto del file FixperOTL in allegato qui in basso nel box custom scans/fixes di OTL.
clicca su
2eejtxj.jpg

Attendi le operazioni e il riavvio del computer.
Al ritorno ti apparirà un report , allegalo.

Anche in google chrome risiede Claro.
Apri google chrome
Impostazioni
Ricerca-gestisci motori di ricerca
Cerca la voce Claro search
clicca sulla x a destra per rimuoverlo.

Poi sempre da Chrome->>impostazioni->>in Aspetto
sotto il pulsante mostra pagina iniziale c'è il tasto cambia
cliccandoci sopra visualizzi le pagine impostate , elimina claro e imposta quella di tuo gradimento.

Grazie mille, effettuerò la procedura che hai descritto per Chrome anche se è inutilizzato, ti posto il Report dopo il riavvio.

All processes killed
========== PROCESSES ==========
========== SERVICES/DRIVERS ==========
========== OTL ==========
No active process named browsemngr.exe was found!
Service Browser Manager stopped successfully!
Service Browser Manager deleted successfully!
C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\browsemngr.exe moved successfully.
HKU\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\bProtector Start Page| /E : value set successfully!
HKU\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E : value set successfully!
Registry key HKEY_USERS\S-1-5-21-3880790621-3417630580-3743983571-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found.
Prefs.js: "http://www.claro-search.com/?affID=116677&tt=4512_5&babsrc=HP_ss&mntrId=d0e31183000000000000f46d040a05cd" removed from browser.startup.homepage
C:\PROGRAMDATA\BROWSER MANAGER\2.3.796.11\{16CDFF19-861D-48E3-A751-D99A27784753}\FIREFOXEXTENSION\content folder moved successfully.
C:\PROGRAMDATA\BROWSER MANAGER\2.3.796.11\{16CDFF19-861D-48E3-A751-D99A27784753}\FIREFOXEXTENSION\components folder moved successfully.
C:\PROGRAMDATA\BROWSER MANAGER\2.3.796.11\{16CDFF19-861D-48E3-A751-D99A27784753}\FIREFOXEXTENSION folder moved successfully.
Use Chrome's Settings page to change the HomePage.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ not found.
Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ not found.
Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ not found.
Registry key HKEY_USERS\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ not found.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\clonewarsadventures.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\freerealms.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\soe.com\ deleted successfully.
Registry key HKEY_USERS\S-1-5-21-3880790621-3417630580-3743983571-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\sony.com\ deleted successfully.
========== FILES ==========
C:\Users\Cristian\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Manager folder moved successfully.
C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753}\traking_settings folder moved successfully.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753} scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11 scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager scheduled to be moved on reboot.
C:\Users\Cristian\AppData\Roaming\Babylon folder moved successfully.
========== REGISTRY ==========
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command\\""|""%1" %*" /E : value set successfully!
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Cristian
->Temp folder emptied: 23180700 bytes
->Temporary Internet Files folder emptied: 5551421 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 1136516188 bytes
->Google Chrome cache emptied: 6099312 bytes
->Flash cache emptied: 14491 bytes

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Public

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 41063216 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 50522 bytes
RecycleBin emptied: 1916492 bytes

Total Files Cleaned = 1.158,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully

OTL by OldTimer - Version 3.2.69.0 log created on 11212012_182850

Files\Folders moved on Reboot...
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753} scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753} scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11 scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11\{16cdff19-861d-48e3-a751-d99a27784753} scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager\2.3.796.11 scheduled to be moved on reboot.
Folder move failed. C:\ProgramData\Browser Manager scheduled to be moved on reboot.
C:\Users\Cristian\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files...

Registry entries deleted on Reboot...
 
Pubblicità
Pubblicità
Indietro
Top