Ciao a tutti, il pop-up POWERED BY GEMS sta rendendo la mia navigazione insopportabile!!...praticamente ogni 5 minuti mi si aprono pagine pubblicitarie sponsorizzate da questo pop-up!.....come posso eliminare il problema???....ho già provato ad eseguire Malwarebytes Anti-Malware e CCleaner ma senza che trovino alcuna anomalia. Come fare?
Pubblicità
Come evitare l'apparizione di pop-up "Powered by Gems"?
- Autore discussione pintale
- Data d'inizio
Pubblicità
menatwork
Utente Attivo
- Messaggi
- 1,303
- Reazioni
- 232
- Punteggio
- 77
ciao pintale per eliminare le pagine devi eseguire queste scansioni, la prima elimina, la seconda e' di sola lettura e dovrai aspettare che controllo il rapporto e prepararti una procedura per eliminare i residui
scarica adwcleaner
clicca su scan e poi su ''clean'' conferma con OK le varie finestre che ti compariranno.
alla fine clicca su Report e allega il contenuto
Scarica OTL e salvalo sul desktop
Metti la spunta su SCAN ALL USERS.
Sotto output, metti la spunta su minimal output
Clicca sulla freccettina di File Age e seleziona 60 Days
Metti la spunta a LOP Check e Purity Check.
Clicca su RUN SCAN
Lascia fare la scansione senza interferire.
Al termine della scansione trovi due log sul desktop. OTL.txt ed Extras.txt, salvali e allegali
Allega anche il log della scansione fatta con malwarebytes
scarica adwcleaner
clicca su scan e poi su ''clean'' conferma con OK le varie finestre che ti compariranno.
alla fine clicca su Report e allega il contenuto
Scarica OTL e salvalo sul desktop
Metti la spunta su SCAN ALL USERS.
Sotto output, metti la spunta su minimal output
Clicca sulla freccettina di File Age e seleziona 60 Days
Metti la spunta a LOP Check e Purity Check.
Clicca su RUN SCAN
Lascia fare la scansione senza interferire.
Al termine della scansione trovi due log sul desktop. OTL.txt ed Extras.txt, salvali e allegali
Allega anche il log della scansione fatta con malwarebytes
Ultima modifica:
antony1376
Nuovo Utente
- Messaggi
- 1
- Reazioni
- 0
- Punteggio
- 24
Ciao,
ho eseguito tutta la procedura come hai descritto ma però il problema continua a farlo.
Mi potresti indicare che cosa è dovuto a questo virus e che cosa devo cancellare?
Grazie per la vostra collaborazione
@antony1376:
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire.
Posta il log.
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Codice:
:OTL
PRC - C:\Users\eantcaf\AppData\Local\Context2pro\conadvanced.exe ()
MOD - C:\Users\eantcaf\AppData\Local\Context2pro\conadvanced.exe ()
O3:[B]64bit:[/B] - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115..\Run: [conadvanced] C:\Users\eantcaf\AppData\Local\Context2pro\conadvanced.exe ()
O4 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115..\Run: [contextfr] C:\Users\eantcaf\AppData\Local\Context2pro\contextfr.exe ()
O4 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115..\Run: [contextprod] C:\Users\eantcaf\AppData\Local\Context2pro\contextprod.exe ()
O15:[B]64bit:[/B] - ..Trusted Domains: adlibris.com ([www] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: adobeconnect.com ([pdininthhouse] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ahlsell.com ([webshop] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ahlsell.com ([www] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: amadeus.com ([e-travelmanagement2] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: amadeus.com ([e-travelmanagement2] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: atea.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: atea.com ([eshop] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: bitgravity.com ([bitcast-a] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: bitgravity.com ([bitcast-b] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: bokus.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: carlsonwagonlit.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: centra.com ([ericsson] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: centra.com ([host3] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: comaround.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: computershare.co.uk ([www] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: computershare.com ([www-uk] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: concursolutions.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: conferenceplus.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: coor.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ctrlprint.net ([asp] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: dell.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: dell.com ([e1prmweb5.euro] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: digitalpublishing.de ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: dustin.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: elfa.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: elfa.se ([www] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ericsson.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ericsson.net ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ericsson.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ericssonacademy.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: gartner.com ([itsurvey] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: gartnerweb.com ([gartner18] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: hp.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: hp.com ([eprime11.houston] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: hrgworldwide.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: hubspan.net ([*.connect] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: hubspan.net ([connect] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ibx.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ibxeurope.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ibxnordic.net ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: issueronline.co.uk ([www] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: logitall.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: logitall.com ([connect] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: lundqvist.se ([www] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: lyreco.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: myericssonlearning.com ([rm] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: myericssonlearning.com ([www] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ninthhouse.net ([app] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: ninthhouse.net ([media] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: pdininthhouse.com ([login] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: personneldecisions.com ([services] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: plateau.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: prenax.se ([online] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: prenax.se ([www] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: printon.com ([www] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: research-int.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: rs-components.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: rs-components.com ([*.order] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: rs-components.com ([*.u-order] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: rs-components.com ([order] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: rs-components.com ([u-order] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: sabameeting.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: sabameeting.com ([ericsson] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: sabameeting.com ([host3] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: sabameeting.com ([host3css1] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: salesforce.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: service-now.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: shi.com ([www.roundtrip] http in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: skillport.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: skillwsa.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: solar.dk ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: successfactors.eu ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: taleo.net ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: taleo.net ([ericsson] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: telia.com ([*.trust] * in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: telia.com ([cve.trust] https in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: telia.se ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: yourconferencecentre.com ([]* in Trusted sites)
O15:[B]64bit:[/B] - ..Trusted Domains: yourmerchandise.com ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: adlibris.com ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: adobeconnect.com ([pdininthhouse] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ahlsell.com ([webshop] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ahlsell.com ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: amadeus.com ([e-travelmanagement2] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: amadeus.com ([e-travelmanagement2] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: atea.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: atea.com ([eshop] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: bitgravity.com ([bitcast-a] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: bitgravity.com ([bitcast-b] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: bokus.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: carlsonwagonlit.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: centra.com ([ericsson] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: centra.com ([host3] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: comaround.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: computershare.co.uk ([www] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: computershare.com ([www-uk] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: concursolutions.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: conferenceplus.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: coor.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ctrlprint.net ([asp] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: dell.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: dell.com ([e1prmweb5.euro] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: digitalpublishing.de ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: dustin.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: elfa.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: elfa.se ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.com ([]https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.net ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.net ([]https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.se ([]https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericsson.se ([citrix.it.nmc] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ericssonacademy.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: gartner.com ([itsurvey] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: gartnerweb.com ([gartner18] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hp.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hp.com ([eprime11.houston] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hrgworldwide.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hro.it ([esipert2] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hubspan.net ([*.connect] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: hubspan.net ([connect] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ibx.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ibxeurope.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ibxnordic.net ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: issueronline.co.uk ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: logitall.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: logitall.com ([connect] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: lundqvist.se ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: lyreco.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: myericssonlearning.com ([rm] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: myericssonlearning.com ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ninthhouse.net ([app] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: ninthhouse.net ([media] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: pdininthhouse.com ([login] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: personneldecisions.com ([services] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: plateau.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: prenax.se ([online] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: prenax.se ([www] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: printon.com ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: research-int.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: rs-components.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: rs-components.com ([*.order] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: rs-components.com ([*.u-order] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: rs-components.com ([order] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: rs-components.com ([u-order] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: sabameeting.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: sabameeting.com ([ericsson] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: sabameeting.com ([host3] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: sabameeting.com ([host3css1] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: salesforce.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: service-now.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: shi.com ([www.roundtrip] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: skillport.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: skillwsa.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: solar.dk ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: successfactors.eu ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: taleo.net ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: taleo.net ([ericsson] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: telia.com ([*.trust] * in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: telia.com ([cve.trust] https in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: telia.se ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: yourconferencecentre.com ([]* in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Domains: yourmerchandise.com ([www] http in Trusted sites)
O15 - HKU\S-1-5-21-1538607324-3213881460-940295383-354115\..Trusted Ranges: Range1 ([http] in Trusted sites)
O18:[B]64bit:[/B] - Protocol\Handler\ms-help - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=euc-jp - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=ISO-8859-1 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=MS936 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=MS949 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=MS950 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=UTF8 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica; charset=UTF-8 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=euc-jp - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=ISO-8859-1 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=MS936 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=MS949 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=MS950 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=UTF8 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\application/x-ica;charset=UTF-8 - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Filter\ica - No CLSID value found
O33 - MountPoints2\{2525f5bd-36e2-11e3-a965-f4b7e2ffbc9a}\Shell - "" = AutoRun
O33 - MountPoints2\{2525f5bd-36e2-11e3-a965-f4b7e2ffbc9a}\Shell\AutoRun\command - "" = E:\Startme.exe
O33 - MountPoints2\{dbaa391e-a867-11e2-8ed2-028037ec0200}\Shell - "" = AutoRun
O33 - MountPoints2\{dbaa391e-a867-11e2-8ed2-028037ec0200}\Shell\AutoRun\command - "" = F:\OnSpcLCK.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\OnSpcLCK.exe
:Files
ipconfig /flushdns /c
:reg
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\exefile\shell\open\command]
""=""%1" %*"
:commands
[purity]
[emptytemp]
[Emptyjava]
[RESETHOSTS]
[EMPTYFLASH]
[start explorer]
[Reboot]Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire.
Posta il log.
Carlotta2014
Nuovo Utente
- Messaggi
- 1
- Reazioni
- 0
- Punteggio
- 24
Ciao Ragazzi , con la mia testardaggine :asd: sono riuscita a toglierlo scaricando Malwarebytes Anti-Malware :luxhello:
Ciao a tutti,
ho lo stesso problema con POWERED BY GEMS,
credo di avere allegato tutto l'occorrente, spero possiate aiutarmi
e comunque vi ringrazio anticipatamente per il servizio che svolgete
aiutanto noi comuni mortali che di pc non ne capiamo niente
(ovviamente parlo per me, non voglio offendere nessuno):)
ho lo stesso problema con POWERED BY GEMS,
credo di avere allegato tutto l'occorrente, spero possiate aiutarmi
e comunque vi ringrazio anticipatamente per il servizio che svolgete
aiutanto noi comuni mortali che di pc non ne capiamo niente
(ovviamente parlo per me, non voglio offendere nessuno):)
Salve a tutti!
Sono nuova di questo forum (e questo è il mio primo messaggio - ho cercato se c'erano posti in cui presentarsi ma non ne ho trovati, qualora abbia sbagliato vi prego di indicarmi dove presentarsi e lo farò immantinente). Anch'io ho riscontrato questo fastidiosissimo problema. Allora ho seguito le procedure che avete indicato e vi allego i file. Spero che possiate darmi una mano, grazie in anticipo!!!
Sono nuova di questo forum (e questo è il mio primo messaggio - ho cercato se c'erano posti in cui presentarsi ma non ne ho trovati, qualora abbia sbagliato vi prego di indicarmi dove presentarsi e lo farò immantinente). Anch'io ho riscontrato questo fastidiosissimo problema. Allora ho seguito le procedure che avete indicato e vi allego i file. Spero che possiate darmi una mano, grazie in anticipo!!!
@My1:
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire. (il pc si riavvierà in automatico)
Vedi se il problema è risolto.
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Codice:
:OTL
PRC - C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentconadvanced] C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentcontextfr] C:\Users\Margherita\AppData\Local\Context2pro\contextfr.exe ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentcontextprod] C:\Users\Margherita\AppData\Local\Context2pro\contextprod.exe ()
O8 - Extra context menu item: E&sporta in Microsoft Excel - res://C:\PROGRA~2\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: I&nvia a OneNote - res://C:\PROGRA~2\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O18:[b]64bit:[/b] - Protocol\Handler\livecall - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\ms-help - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\msnim - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\skype4com - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[b]64bit:[/b] - Protocol\Handler\wlpg - No CLSID value found
:Files
C:\Users\Margherita\AppData\Local\Context2pro
ipconfig /flushdns /c
:commands
[purity]
[emptytemp]
[Emptyjava]
[RESETHOSTS]
[EMPTYFLASH]
[start explorer]
[Reboot]Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire. (il pc si riavvierà in automatico)
Vedi se il problema è risolto.
Ehm....no.
Sinceramente pensavo avessi risolto da qualche parte.
Comunque se non hai risolto fai così:
Avvia OTL.
Sotto "Custom Scans\Fixes" copia-incolla questo codice:
Codice:
:OTL
PRC - C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe ()
MOD - C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe ()
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\jid0-lmZNVK7a82O8cufhdfB9dUDfA2w@jetpack: C:\Program Files (x86)\Nuance\NaturallySpeaking12\Program\ffShim.xpi [2012/11/05 19:29:08 | 000,137,034 | ---- | M] ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentconadvanced] C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentcontextfr] C:\Users\Margherita\AppData\Local\Context2pro\contextfr.exe ()
O4 - HKU\S-1-5-21-3935488313-1780361500-1005935258-1002..\Run: [utorrentcontextprod] C:\Users\Margherita\AppData\Local\Context2pro\contextprod.exe ()
O18:[B]64bit:[/B] - Protocol\Handler\livecall - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Handler\ms-help - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Handler\msnim - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Handler\skype4com - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Handler\wlmailhtml - No CLSID value found
O18:[B]64bit:[/B] - Protocol\Handler\wlpg - No CLSID value found
:Files
C:\Users\Margherita\AppData\Local\Context2pro\conadvanced.exe
:commands
[purity]
[emptytemp]
[Emptyjava]
[RESETHOSTS]
[EMPTYFLASH]
[start explorer]
[Reboot]Clicca sul pulsante RUN FIX.
Lascia fare la scansione senza interferire.
Il pc si riavvierà e uscirà il log con le eliminazioni.
Vedi se il problema persiste.
Buonasera a tutti . Ho lo stesso problema degli altri e ho seguito le istruzioni . Potete aiutare anche me gentilmente?
Pubblicità