Newsgroup: it.comp.sicurezza.varie
Titolo: adware, cosa elimino?

Ciao a tutti, ho scaricato la nuova versione di adware, ed ho notato che ha
trovato molta piu spazzatura rispetto alla versione precedente, vi riporto
il file di testo qui sotto , anche perchè vorrei sapere quali di questi
spyware posso eliminare senza rischio alcuno.
Ciao e grazie
-----
Banjerkid

Scusate ho dimenticato di incollare il file di testo.

Started registry scan
======================
Transponder
key:HKEY_CLASSES_ROOT\clsid\{00000000-5eb9-11d5-9d45-009027c14662}\
Transponder key:HKEY_CLASSES_ROOT\iehlprobj.iehlprobj\
Transponder
key:HKEY_CLASSES_ROOT\interface\{4017f807-9069-44a8-b3e8-44cbfbb3ad35}\
OnFlow
key:HKEY_LOCAL_MACHINE\software\classes\clsid\{0cef79d8-d373-11d3-a7d3-00062
962bf17}\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1\
OnFlow key:HKEY_LOCAL_MACHINE\software\classes\ieonflow.ieonflow1.7\
OnFlow
key:HKEY_LOCAL_MACHINE\software\classes\typelib\{0cef79cb-d373-11d3-a7d3-000
62962bf17}\
Transponder
key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\br
owser helper objects\{00000000-5eb9-11d5-9d45-009027c14662}\
OnFlow
key:HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\o
nflow\
OnFlow key:HKEY_LOCAL_MACHINE\software\onflow\
Transponder key:HKEY_LOCAL_MACHINE\software\transponder\
Transponder key:HKEY_CLASSES_ROOT\transponder.transponder.1\
Transponder
key:HKEY_CLASSES_ROOT\typelib\{bf1ea763-c87c-4dc8-a37c-003547915a13}\
Started extended registry scan
===============================
OnFlow key:CLSID\{0CEF79D8-D373-11D3-A7D3-00062962BF17}
Registry scan result:
Suspicious keys found :14
Started folder scan
====================
Warning, no disk in drive (A)
Now processing drive (C), 0 remaining.
OnFlow folder:C:\Program Files\onflow
Finished processing Drive(C), 2417 folders total.
Folder scan result:
Folders processed:2417
Suspicious folders found:1
Started file scan
==================
Transponder file:C:\WINDOWS\SYSTEM\IEHelper.DLL
Doubleclick file:C:\WINDOWS\Cookies\.@doubleclick[1].txt
Flyswat file:C:\WINDOWS\Cookies\.@flycast[2].txt
Flyswat file:C:\WINDOWS\Cookies\.@flycast[1].txt
Flyswat file:C:\WINDOWS\Cookies\.@flycast[3].txt
Other file:C:\WINDOWS\Cookies\.@admonitor[2].txt
Other file:C:\WINDOWS\Cookies\.@admonitor[3].txt
Other file:C:\WINDOWS\Cookies\.@counter10.sextracker[1].txt
Other file:C:\WINDOWS\Cookies\.@sextracker[2].txt
Other file:C:\WINDOWS\Cookies\.@counter1.sextracker[1].txt
Other file:C:\WINDOWS\Cookies\.@counter11.sextracker[1].txt
Other file:C:\WINDOWS\Cookies\.@valueclick[1].txt
OnFlow file:C:\Programmi\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Programmi\Internet Explorer\PLUGINS\ieonflow.dll
OnFlow file:C:\Programmi\Internet Explorer\PLUGINS\NPONFLOW.DLL
OnFlow file:C:\Programmi\Internet Explorer\PLUGINS\onflowplayer0.dll
OnFlow file:C:\Programmi\Internet Explorer\PLUGINS\onflowreport.exe
OnFlow file:C:\Programmi\Netscape\Communicator\Program\Plugins\nponflow.dll
OnFlow
file:C:\Programmi\Netscape\Communicator\Program\Plugins\onflowplayer0.dll
OnFlow file:C:\Program Files\onflow\uninstall onflow.exe
File scan result:
Suspicious files found:20
Scanning finished
==================
Suspicious modules found:0
Suspicious keys found :14
Suspicious folders found:1
Suspicious files found:20
==========================
Spyware components ignored:0
Total spyware components found:35

 Ciao e grazie
Elimina tutto
Nel dubbio fai il backup (Ad-aware lo permette)
Qualche programma spyware dopo la pulizia non funzionera piů (sai che
perdita)
L'ultimo reflist č datato 4 otttobre
Ciao
--------------------------
http://web.tiscali.it/winzozz