Malwarebytes conviene che lo faccio girare in provvisoria o in normale con "avvio diagnostico" ??
- - - Updated - - -
Ok alla fine ho fatto girare Malwarebytes in provvisoria e ha rilevato 12 infezioni. Pulite quelle al riavvio non si bloccava già più.... Quindi sembrerebbe già risolto! ;)
Vi allego il log, mi sapete dire con certezza quale era la causa del blocco?
GRAZIE
Lo metto sia come codice che allegato .xml zippato
- - - Updated - - -
Ok alla fine ho fatto girare Malwarebytes in provvisoria e ha rilevato 12 infezioni. Pulite quelle al riavvio non si bloccava già più.... Quindi sembrerebbe già risolto! ;)
Vi allego il log, mi sapete dire con certezza quale era la causa del blocco?
GRAZIE
Lo metto sia come codice che allegato .xml zippato
Codice:
<?xml version="1.0" encoding="UTF-16"?>
-<mbam-log> -<header> <date>2015/08/30 22:03:40 +0200</date> <logfile>mbam-log-2015-08-30 (22-03-37).xml</logfile> <isadmin>yes</isadmin> </header> -<engine> <version>2.1.8.1057</version> <malware-database>v2015.08.30.01</malware-database> <rootkit-database>v2015.08.16.01</rootkit-database> <license>trial</license> <file-protection>disabled</file-protection> <web-protection>disabled</web-protection> <self-protection>disabled</self-protection> </engine> -<system> <osversion>Windows Vista Service Pack 2</osversion> <arch>x86</arch> <username>caterina</username> <filesys>NTFS</filesys> </system> -<summary> <type>threat</type> <result>completed</result> <objects>315557</objects> <time>1169</time> <processes>0</processes> <modules>0</modules> <keys>7</keys> <values>4</values> <datas>1</datas> <folders>0</folders> <files>0</files> <sectors>0</sectors> </summary> -<options> <memory>enabled</memory> <startup>enabled</startup> <filesystem>enabled</filesystem> <archives>enabled</archives> <rootkits>disabled</rootkits> <deeprootkit>disabled</deeprootkit> <heuristics>enabled</heuristics> <pup>enabled</pup> <pum>enabled</pum> </options> -<items> -<key><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}</path><vendor>PUP.Optional.Babylon</vendor><action>success</action><hash>3cbd3ad48209280e875b864d2cd6e41c</hash></key> -<key><path>HKLM\SOFTWARE\Freeze.com</path><vendor>PUP.Optional.MyFreeze</vendor><action>success</action><hash>27d2e22c4a4175c1bd297e2206fede22</hash></key> -<key><path>HKU\S-1-5-18\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings</path><vendor>PUP.Optional.Spigot</vendor><action>success</action><hash>b3467a9484078babf5bfb4fdba4ac43c</hash></key> -<key><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\APPDATALOW\SOFTWARE\Search Settings</path><vendor>PUP.Optional.Spigot</vendor><action>success</action><hash>c1388a8478136fc7a60e5a5750b4e41c</hash></key> -<key><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0DCAAB3C-34A2-4B02-805A-793F5178D574}</path><vendor>PUP.Optional.Spigot</vendor><action>success</action><hash>fdfcf41ac8c314221f97e0d1cd37f50b</hash></key> -<key><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6FFDCCC2-A05A-4B7A-87FB-A3D127A4E8AC}</path><vendor>PUP.Optional.Spigot</vendor><action>success</action><hash>43b623eb58335dd9971ffeb3bd47b34d</hash></key> -<key><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000_Classes\CLSID\{3050F406-98B5-11CF-BB82-00AA00BDCE0B}</path><vendor>PUP.Optional.Hicosmea</vendor><action>success</action><hash>ac4d808ecebd8aac4595e58e18ec956b</hash></key> -<value><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0DCAAB3C-34A2-4B02-805A-793F5178D574}</path><valuename>URL</valuename><vendor>PUP.Optional.Spigot</vendor><action>success</action><valuedata>http://it.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=642886&p={searchTerms}</valuedata><hash>fdfcf41ac8c314221f97e0d1cd37f50b</hash></value> -<value><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0DCAAB3C-34A2-4B02-805A-793F5178D574}</path><valuename>OSDFileURL</valuename><vendor>PUP.Optional.Spigot</vendor><action>success</action><valuedata>file:///C:/Program%20Files/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml</valuedata><hash>8871000efc8f6cca8433466ba361a35d</hash></value> -<value><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6FFDCCC2-A05A-4B7A-87FB-A3D127A4E8AC}</path><valuename>URL</valuename><vendor>PUP.Optional.Spigot</vendor><action>success</action><valuedata>http://it.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=642886&p={searchTerms}</valuedata><hash>43b623eb58335dd9971ffeb3bd47b34d</hash></value> -<value><path>HKU\S-1-5-21-1381402381-2990957396-1558010653-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{6FFDCCC2-A05A-4B7A-87FB-A3D127A4E8AC}</path><valuename>OSDFileURL</valuename><vendor>PUP.Optional.Spigot</vendor><action>success</action><valuedata>file:///C:/Program%20Files/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml</valuedata><hash>cc2d749a0982d462a413c4eddb29ac54</hash></value> -<data><path>HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WINMGMT\PARAMETERS</path><valuename>ServiceDll</valuename><vendor>Hijack.WMI</vendor><action>replaced</action><valuedata>C:\PROGRA~2\2992199F9A\0174.dll</valuedata><baddata>C:\PROGRA~2\2992199F9A\0174.dll</baddata><gooddata>%SystemRoot%\system32\wbem\WMIsvc.dll</gooddata><hash>bc3da8662863999dda333c16e2232dd3</hash></data> </items> </mbam-log>