|
| Precedente :: Successivo |
| Autore |
Messaggio |
inesperto1972
Comune mortale
Registrato: 25/01/08 15:13
Messaggi: 1
|
 Inviato: 25 Gen 2008 18:28 Oggetto: HO PRESO UN VIRUS |
 |
|
IL VIRUS CHE RILEVA AVAST è QUESTO:
| Citazione: |
http: //209.205.196.16/freehost1/chris0233/lu/dm_0233. exe
ATTENZIONE VIRUS - ioSOLOio moderatore |
HO VISTO UNA DISCUSSIONE TRA Braveheart (CHE AVEVA LO STESSO PROBLEMA) E Sante62 CHE GLI HA SPIEGATO COME FARE E SEMBRA CHE ABBIA RISOLTO IL PROBLEMA.
IO HO FATTO QUESTI PASSI:
SONO ANDATA SUL SITO kaspersky, ho fatto fare la scansione online ed il rapporto che è venuto fuori è il seguente:
| Citazione: | KASPERSKY ONLINE SCANNER REPORT
Friday, January 25, 2008 5:14:56 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 25/01/2008
Kaspersky Anti-Virus database records: 532201
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
Scan Statistics
Total number of scanned objects 288024
Number of viruses found 5
Number of infected objects 32
Number of suspicious objects 0
Duration of the scan process 02:27:06
Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Norton AntiVirus\Quarantine\5C260162.exe Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp Object is locked skipped
C:\Documents and Settings\All Users\DRM\drmstore.hds Object is locked skipped
C:\Documents and Settings\Davide\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Davide\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Davide\Cronologia\History.IE5\MSHist012008012520080126\index.dat Object is locked skipped
C:\Documents and Settings\Davide\Desktop\tutto\Programmi\HP Easy Internet\InterDialer.exe Infected: not-a-virus:Dialer.Win32.InterDialer.a skipped
C:\Documents and Settings\Davide\Desktop\tutto\Programmi\Servizi in linea\IT\Interfree\HP-easy.exe/data0003 Infected: not-a-virus:Dialer.Win32.InterDialer.a skipped
C:\Documents and Settings\Davide\Desktop\tutto\Programmi\Servizi in linea\IT\Interfree\HP-easy.exe Inno: infected - 1 skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\ApplicationHistory\hpqimzone.exe.fd734169.ini.inuse Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbc2e.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbdam Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbdao Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbeam Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbeao Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbm Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbu2d.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbvm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\dbvmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\fii.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\fiih.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\hp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\hpt2i.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\rpm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\rpmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-black-enchashm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-black-enchashmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-black-urlm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-black-urlmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-malware-domainm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-malware-domainmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-white-domainm.cf1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Google\Google Desktop Search\safeweb\goog-white-domainmh.ht1 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\administrativeInfo.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\albumImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\albumImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\albumTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\albumTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\CB_Server_Errors.txt Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\EXIFTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\EXIFTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\imageTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\imageTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\imageTable.fpt Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\keywordImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\keywordImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\keywordTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\keywordTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\managedFolderTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\pathnameTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\pathnameTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\propertiesTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\propertiesTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\ROFImagesTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\ROFImagesTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\ROFTable.cdx Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\HP\Digital Imaging\db\ROFTable.dbf Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Microsoft\Media Player\CurrentDatabase_360.wmdb Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\direct3d.exe Infected: Trojan.Win32.Agent.eak skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\tmp4A1.tmp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\tmp4A4.tmp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\tmp51D.tmp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\WPSPICEL.TMP4 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\WPSPICEM.TMP2 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\WPSPICER.TMP3 Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\~DF441D.tmp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\~DFBF13.tmp Object is locked skipped
C:\Documents and Settings\Davide\Impostazioni locali\Temp\~DFDDD3.tmp Object is locked skipped
C:\Documents and Settings\Davide\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Davide\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Davide\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Davide\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Temp\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Temp\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Temp\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\report\Protezione residente.txt Object is locked skipped
C:\Programmi\HP\hpcoretech\hpcmerr.log Object is locked skipped
C:\Programmi\HP Easy Internet\InterDialer.exe Infected: not-a-virus:Dialer.Win32.InterDialer.a skipped
C:\Programmi\Servizi in linea\IT\Interfree\HP-easy.exe/data0003 Infected: not-a-virus:Dialer.Win32.InterDialer.a skipped
C:\Programmi\Servizi in linea\IT\Interfree\HP-easy.exe Inno: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP143\A0024776.com Infected: Trojan.Win32.Agent.dzc skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP148\A0025241.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe/data0018/data0002 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe/data0018/data0003 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe/data0018/data0004 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe/data0018 Infected: not-a-virus:AdWare.Win32.180Solutions.ay skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe NSIS: infected - 4 skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP149\A0025326.exe CryptFF: infected - 4 skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP152\A0025561.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP152\A0025580.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP152\A0025591.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP152\A0025611.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP153\A0025632.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP153\A0025648.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP153\A0025662.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP154\A0025711.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP154\A0025744.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP154\A0025765.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP154\A0025790.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP154\A0025809.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP155\A0025844.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP155\A0025876.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP155\A0025904.dll Infected: Trojan.Win32.Inject.sb skipped
C:\System Volume Information\_restore{24E79716-F0B0-4755-B863-29B97FEC1C3C}\RP155\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\logon.dll Infected: Trojan.Win32.Inject.sb skipped
C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt Object is locked skipped
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BC16E940-8A06-497E-B0FB-F11002DF63A7}.crmlog Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\Media Ce.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\MsDtc\MSDTC.LOG Object is locked skipped
C:\WINDOWS\system32\MsDtc\Trace\dtctrace.log Object is locked skipped
C:\WINDOWS\system32\msmq\storage\QMLog Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_740.dat Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\wisyst32.exe Object is locked skipped
Scan process completed. |
QUALCUNO PUò AIUTARMI SU COSA FARE ADESSO.
IL MIO ANTIVIRUS è AVAST. CREDO CHE I PROBLEMI CHE HO SIANO GLI STESSI DI BRAVEHEART. IL VIRUS FA LE STESSE COSE CHE FACEVA A LUI.
PER PIACERE AIUTOOOOOOOOOOO! |
|
| Top |
|
 |
Sante62
Dio maturo
Registrato: 27/06/07 17:55
Messaggi: 3477
Residenza: Floridia
|
| Inviato: 25 Gen 2008 19:42 Oggetto: |
 |
|
Ciao inesperto1972 e benvenuto.. 
Per adesso tralasciamo il log di Kaspersky...
Segui questa discussione
per postare un log di Hijackthis. |
|
| Top |
|
|
|
|
Non puoi inserire nuovi argomenti
Non puoi rispondere a nessun argomento
Non puoi modificare i tuoi messaggi
Non puoi cancellare i tuoi messaggi
Non puoi votare nei sondaggi
|
|
FAQ
Cerca
Lista utenti
Gruppi
Registrati
Profilo
Messaggi privati
Log in
