[Neofita55]

Originariamente inviato da Unax

la cartella e la voce di Mozilla firefox sembrano far riferimento a software HP

le voci del registro non so a cosa si riferiscono, a toolbar ed helper object di sicuro ma se sono legittimi o malware non so

puoi fare una ricerca qui http://www.systemlookup.com/

copia il codice CLSID che vedi tra le parentesi graffe

ad esempio

http://www.systemlookup.com/search.p...3DC2F38C34F&s=

Grazie Unax fatto ricerca come mi hai indicato del log che avevo postato e lo riporto qui sotto con l'aggiunta di .....L ad indicare voce legittima ( praticamente voci registro riguardanti msn bing toolbar )

# AdwCleaner v4.110 - Logfile created 08/02/2015 at 14:37:59
# Updated 05/02/2015 by Xplode
# Database : 2015-02-05.2 [Server]
# Operating system : Windows 7 Home Premium Service Pack 1 (x64)
# Username : Mauro - MAURO-PC
# Running from : C:\Users\Mauro\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\Users\Mauro\AppData\LocalLow\HPAppData.....L ma obsleto.

***** [ Scheduled tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F}.....L
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}.....L
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F}.....L
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}.....L
Key Found : HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}.....L
Key Found : HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}.....L
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}.....L
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{8DCB7100-DF86-4384-8842-8FA844297B3F}.....L
Key Found : [x64] HKLM\SOFTWARE\Classes\CLSID\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}.....L
Key Found : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D2CE3E00-F94A-4740-988E-03DC2F38C34F}..L
Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}].....L
Value Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{8DCB7100-DF86-4384-8842-8FA844297B3F}].....L

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v35.0.1 (x86 it)

[s56swjsm.default-1423128808337] - Line Found : user_pref("extensions.xpiState", "{\"winreg-app-user\":{\"[email protected]\":{\"d\":\"C:\\\\Program Files (x86)\\\\HP\\\\Digital Imaging\\\\Smart Web Printing\\\\MozillaAddOn3\",\"e\":false,\"v[...].....L estensione disattivata da firefox perchè non compatibile.
*************************

AdwCleaner[R10].txt - [2573 bytes] - [07/02/2015 14:11:40]
AdwCleaner[R11].txt - [2338 bytes] - [08/02/2015 14:37:59]
AdwCleaner[R9].txt - [2691 bytes] - [05/02/2015 17:38:41]

########## EOF - C:\AdwCleaner\AdwCleaner[R11].txt - [2457 bytes] ##########

Quindi si direbbe tutti "falsi positivi" e l'unica che mi rimane da verificare è "Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EE171732-BEB4-4576-887D-CB62727F01CA}"

CHe dire di AdwCleaner? BHO.

Grazie della tua professionalità, ciao e buonaserata.