Variante infezione Qone8

[huatulco]

Ho beccato un'infezione da Qone8.
Sono riuscito a rimuoverla quasi ovunque. Quasi.....
Firefox si apre regolamente sulla home page impostata (google) ma se apro una scheda mi compare sempre Qone8.
Il mio SO è win 8.
Ho ripulito il sistema con Malwarebytes ed il registro manualmente.
Cos'altro posso fare?
Grazie
Alessandro

[diana33]

Originariamente inviato da huatulco

Ho beccato un'infezione da Qone8.
Sono riuscito a rimuoverla quasi ovunque. Quasi.....
Firefox si apre regolamente sulla home page impostata (google) ma se apro una scheda mi compare sempre Qone8.
Il mio SO è win 8.
Ho ripulito il sistema con Malwarebytes ed il registro manualmente.
Cos'altro posso fare?
Grazie
Alessandro

Se hai un punto di ripristino e meglio farlo.Cosi te ne liberi .Altrimenti leggi qui-tinei presente per il link che e un sofware con licenza ,ti fa il scan ,ma devi eliminare elementi trovati manualmente.

[Chill-Out]

Scarica AdwCleaner http://www.bleepingcomputer.com/download/adwcleaner/

Avvia il programma, clicca sul tasto Search, attendi il termine della scansione ed allega il log.

[huatulco]

Ecco il file log generato da AdwCleaner:

# AdwCleaner v3.023 - Report created 01/04/2014 at 18:28:15
# Updated 01/04/2014 by Xplode
# Operating System : Windows 8.1 Pro (64 bits)
# Username : Sandro - CASA
# Running from : C:\Users\Sandro\Desktop\AdwCleaner.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

File Found : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk
File Found : C:\Users\Sandro\AppData\Roaming\Mozilla\Firefox\Profiles\iwiovk7k.default\searchplugins\delta.xml
File Found : C:\Users\Sandro\AppData\Roaming\Mozilla\Firefox\Profiles\iwiovk7k.default\searchplugins\iminent.xml
File Found : C:\Users\Sandro\AppData\Roaming\Mozilla\Firefox\Profiles\iwiovk7k.default\user.js
File Found : C:\WINDOWS\System32\Tasks\SaveSense
File Found : C:\WINDOWS\Tasks\SaveSense.job
Folder Found C:\Program Files (x86)\myfree codec
Folder Found C:\Program Files (x86)\Optimizer Pro
Folder Found C:\ProgramData\apn
Folder Found C:\ProgramData\Babylon
Folder Found C:\ProgramData\Microsoft\Windows\Start Menu\Programs\myfree codec
Folder Found C:\ProgramData\WPM
Folder Found C:\Users\Sandro\AppData\Roaming\Babylon
Folder Found C:\Users\Sandro\AppData\Roaming\SupTab
Folder Found C:\Users\Sandro\Documents\Optimizer Pro

***** [ Shortcuts ] *****

Shortcut Found : C:\Users\Sandro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk (

hxxp://start.qone8.com/?type=sc&ts=1396294833&from=ild&uid=SamsungXSSDX840XSeries_S14GNEACA09273D )

***** [ Registry ] *****

Key Found : HKCU\Software\5b538c88b36ab813
Key Found : HKCU\Software\AppDataLow\Software\FreeHDSport TV
Key Found : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\wajam.com
Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
Key Found : HKCU\Software\Myfree Codec
Key Found : HKCU\Software\Softonic
Key Found : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Found : [x64] HKCU\Software\Myfree Codec
Key Found : [x64] HKCU\Software\Softonic
Key Found : HKLM\Software\Babylon
Key Found : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Found : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Found : HKLM\SOFTWARE\Classes\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{5C3B5DAA-0AFF-4808-90FB-0F2F2D760E36}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{64697678-0000-0010-8000-00AA00389B71}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Found : HKLM\SOFTWARE\Classes\CLSID\{FD501041-8EBE-11CE-8183-00AA00577DA2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Found : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Found : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Found : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Found : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Found : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Found : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Found : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536636}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Found : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Found : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Found : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Found : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Found : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Found : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Found : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Found : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Found : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Found : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Found : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Found : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
Key Found : HKLM\SOFTWARE\Classes\Prod.cap
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Found : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
Key Found : HKLM\Software\DataMngr
Key Found : HKLM\Software\FreeHDSport TV
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{12C1F3F5-4FB2-4191-A1FD-CA464E6823C0}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6FA9C2C7-B82C-4944-B077-E1D8EA9E2B3D}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{730C3A0D-8C88-468A-B617-7E9913DD6ABC}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AA267627-1EF3-4619-A982-8B57C636CA73}
Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C11CE4D0-9C73-491D-A95C-23C0B7BBD490}
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Key Found : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
Key Found : HKLM\Software\Myfree Codec
Key Found : HKLM\Software\supTab
Key Found : HKLM\Software\supWPM
Key Found : HKLM\Software\Vittalia
Key Found : HKLM\Software\Wpm
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366536636}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
Key Found : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v28.0 (it)

[ File : C:\Users\Sandro\AppData\Roaming\Mozilla\Firefox\Profiles\iwiovk7k.default\prefs.js ]

Line Found : user_pref("avg.install.userHPSettings", "hxxp://www.delta-search.com/?

affID=119585&babsrc=HP_ss&mntrId=0eba7fdb00000000000014dae9f49b89");
Line Found : user_pref("avg.install.userSPSettings", "Delta Search");
Line Found : user_pref("browser.newtab.url", "hxxp://start.qone8.com/newtab/?

type=nt&ts=1396294833&from=ild&uid=SamsungXSSDX840XSeries_S14GNEACA09273D");
Line Found : user_pref("extensions.BabylonToolbar_i.newTab", true);
Line Found : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://www.delta-search.com/?

affID=119585&babsrc=NT_ss&mntrId=0eba7fdb00000000000014dae9f49b89");
Line Found : user_pref("extensions.crossrider.bic", "1429111c415e3fc9ee74a9a09559fdeb");
Line Found : user_pref("extensions.delta.admin", false);
Line Found : user_pref("extensions.delta.aflt", "babsst");
Line Found : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Line Found : user_pref("extensions.delta.autoRvrt", "false");
Line Found : user_pref("extensions.delta.dfltLng", "en");
Line Found : user_pref("extensions.delta.excTlbr", false);
Line Found : user_pref("extensions.delta.id", "0eba7fdb00000000000014dae9f49b89");
Line Found : user_pref("extensions.delta.instlDay", "15754");
Line Found : user_pref("extensions.delta.instlRef", "sst");
Line Found : user_pref("extensions.delta.newTab", false);
Line Found : user_pref("extensions.delta.prdct", "delta");
Line Found : user_pref("extensions.delta.prtnrId", "delta");
Line Found : user_pref("extensions.delta.rvrt", "false");
Line Found : user_pref("extensions.delta.smplGrp", "none");
Line Found : user_pref("extensions.delta.tlbrId", "base");
Line Found : user_pref("extensions.delta.tlbrSrchUrl", "");
Line Found : user_pref("extensions.delta.vrsn", "1.8.10.0");
Line Found : user_pref("extensions.delta.vrsnTs", "1.8.10.019:07:41");
Line Found : user_pref("extensions.delta.vrsni", "1.8.10.0");
Line Found : user_pref("extensions.iminent.admin", false);
Line Found : user_pref("extensions.iminent.aflt", "orgnl");
Line Found : user_pref("extensions.iminent.appId", "{0E4B2CAB-B859-4C57-B96E-63DDEC692BC4}");
Line Found : user_pref("extensions.iminent.autoRvrt", "false");
Line Found : user_pref("extensions.iminent.dfltLng", "");
Line Found : user_pref("extensions.iminent.excTlbr", false);
Line Found : user_pref("extensions.iminent.ffxUnstlRst", false);
Line Found : user_pref("extensions.iminent.id", "0eba7fdb00000000000014dae9f49b89");
Line Found : user_pref("extensions.iminent.instlDay", "16034");
Line Found : user_pref("extensions.iminent.instlRef", "");
Line Found : user_pref("extensions.iminent.newTab", false);
Line Found : user_pref("extensions.iminent.prdct", "iminent");
Line Found : user_pref("extensions.iminent.prtnrId", "iminent");
Line Found : user_pref("extensions.iminent.rvrt", "false");
Line Found : user_pref("extensions.iminent.smplGrp", "none");
Line Found : user_pref("extensions.iminent.tlbrId", "YBCPCSTIPO");
Line Found : user_pref("extensions.iminent.tlbrSrchUrl", "hxxp://start.iminent.com/?ref=toolbarm#q=");
Line Found : user_pref("extensions.iminent.vrsn", "1.8.26.8");
Line Found : user_pref("extensions.iminent.vrsnTs", "1.8.26.822:03:13");
Line Found : user_pref("extensions.iminent.vrsni", "1.8.26.8");
Line Found : user_pref("iminent.LayoutId", "1");
Line Found : user_pref("iminent.adapters", "{\"iminent\":{\"CountryCode\":\"IT\",\"NoAds\":false,\"Status\":1,\"expireTime

\":\"1385413441363204199\"},\"google\":{\"CountryCode\":\"IT\",\"NoAds\":false,\"Status\":1[...]
Line Found : user_pref("iminent.enabledAds", "false");
Line Found : user_pref("iminent.registerToolbarEvent102", "1385413491708");
Line Found : user_pref("iminent.version", "7.47.2.1");
Line Found : user_pref("iminent.versioning", "{\"CurrentVersion\":\"7.47.2.1\",\"InstallEventCTime\":1385413430261,

\"InstallEvent\":\"True\"}");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\Sandro\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [16731 octets] - [01/04/2014 18:28:15]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [16792 octets] ##########


Grazie ancora per l'aiuto.

Alessandro

[Chill-Out]

ripeti scansione e clicca sul tasto Clean

>> Come allegare un log http://www.hwupgrade.it/forum/showthread.php?t=1751598

[huatulco]

Ecco qui.

http://www.filedropper.com/adwcleanerr2

Grazie ancora per l'aiuto.
Devo dire che ora mi pare di aver cancellato ogni riferimento a qone8 .

Alessandro

[Chill-Out]

Originariamente inviato da huatulco

Ecco qui.

http://www.filedropper.com/adwcleanerr2

Grazie ancora per l'aiuto.
Devo dire che ora mi pare di aver cancellato ogni riferimento a qone8 .

Alessandro

Se non riscontri più il problema, direi che sei ok.

[huatulco]

Originariamente inviato da Chill-Out

Se non riscontri più il problema, direi che sei ok.

Sì. Direi che sono a posto.
Grazie per l'aiuto.
Alessandro

[Chill-Out]

Originariamente inviato da huatulco

Sì. Direi che sono a posto.
Grazie per l'aiuto.
Alessandro

Prego

[201Cristian]

Qone8 sta tornando. Qone8 era attivo diversi mesi fa. E 'attivo ancora adesso. Dobbiamo stare attenti.

[diana33]

Originariamente inviato da 201Cristian

Qone8 sta tornando. Qone8 era attivo diversi mesi fa. E 'attivo ancora adesso. Dobbiamo stare attenti.

Mah, io direi che mi e capitato poco di prendere un virus di questa portata ,e solamente quando dovevo installare dei programmi che una persona me lo richiedeva espressamente(es.una persona voleva avere il cooltv , un programma che ti fa vedere canali rumeni ,solo che funziona solo in IE e il plugin di vlc non basta-cosi ho preso deltasearch ,babylon toolbar e quache altra cosettina facile da eliminare). Non direi dobbiamo stare atenti come l'ai detto tu ,in quanto imparare a usare sano l'internet.Imparare a navigare corettamente ,a personalizzare le tue ricerche , a guardare i url prima di aprire le pagine e dove non e possibile usare delle estensioni e addon che tutti i browser ormai ce l'anno.Inoltre e importante a sapere anche installare un programma molto desiderato, usando le installazioni personalizzati e non veloci - richiede un tempo in piu , e magari al inizio ti senti come a scuola - dare un test ,eliminare o permettere voci con le crocette (alias v adesso ) pero una volta fatto questo ,ti verra in automatico la seconda e la terza volta e cosi non dovresti avere frustazioni del perche -mio pc e lento ,perche non riesco ad accedere a internet oppure perche mi esce sempre la finestra di pop-up come apro il browser.Come ultima cosa importante e sapere sempre quello che hai nel computer -partendo dai programmi installati (faccile ) ai processi che normalmente si aprono , ai servizi che sono in automatico e cosi via.E ,alla fine se tutto se tutto cio ,non da espetattive desiderate ,ci sono tanti programmi che possono eliminare ,mantenere il pc pulito - io dico sempre -estato il polizzioto a imparare dal ladro e non a contrario. Se qone torna ,se non estato mai via .chissene ,ci sara sempre una cura per le infezioni.

[ErSocio]

Certo sarò anche stupido ma mi rimane difficile capire lo scopo di questi dannati programmetti da strapazzo! Una volta entrati come dei ladri si impadroniscono di parte della macchina e rendono l'uso del pc inaccettabile al punto che se non si riesce in qualche modo ad eliminarli alla fine formatti. Hanno in ogni caso vita breve! Ma chi può accettare che un programma così invasi trovi posto nel proprio pc? Non so quanti sono stati visitati dal balordo q8 ma vi dico che è allucinate! Mah! Cmq è possibile toglierlo con una discreta perdita di tempo! Buona giornata e a morte qone8!