TR/Sniffer.IQD.WPD

[sextyn]

salve,
qualcuno mi sa dire di cosa si tratta? TR/Sniffer.IQD.WPD
è un virus? l'ha rilevato il mio antivir
grazie

[LUCASS]

Sniffer significa che il suo autore fa uso di droghe
Dove te lo rileva?ciao

[sextyn]

il percorso adesso non lo ricordo..sto facendo una nuova scansione...
ma si tratta di un trojan?

[LUCASS]

si,TR sta per Trojan ciao

[sextyn]

come lo posso eliminare?

[LUCASS]

Originariamente inviato da sextyn
come lo posso eliminare?

Con antivir se non riesce,esegui una scansione in modalità provvisoria

Caio

[sextyn]

perchè mi riconosce come trojan i programmi che uso per chattare tipo mirc o ircsimpson?
è normale?
nell'altro pc con lo stesso antivirus non succede nulla

[sextyn]

Drives:
A: Floppy drive
C: Hard disk
D: CD-ROM
E: CD-ROM

Start of scan: domenica 10 settembre 2006 18:55

Memory test OK
Master boot record of hard disk HD0 OK
Boot record of drive C: OK


C:\
pagefile.sys
Access denied! Error during file opening!
This is a Windows swap file. This file is locked by Windows.
Error code: 0x000D
WARNING! Access error/file locked!
C:\Documents and Settings\matteo\Desktop\Nuova cartella\Programmi\Macromedia\Flash 5\Lettori
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\Documents and Settings\matteo\Desktop\Nuova cartella\Programmi\Macromedia\Flash 5\Lettori\Debug
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\Documents and Settings\matteo\Desktop\Nuova cartella\Programmi\Macromedia\Flash 5\Lettori\Release
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\Programmi\Macromedia\Flash 5\Lettori
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\Programmi\Macromedia\Flash 5\Lettori\Debug
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\Programmi\Macromedia\Flash 5\Lettori\Release
Flash 5 Player Installer.hqx
ArchiveType: BinHex (Mac)
NOTE! No files to extract.
C:\soft
IRCSimpson.zip
ArchiveType: ZIP
--> IR¸Simpson.exe
[DETECTION] Is the Trojan horse TR/Spy.Banke.RI.1.A
venom40b2.zip
ArchiveType: ZIP
--> Progs\Tools\Wgscan.exe
[DETECTION] Is the Trojan horse TR/Gatescan
--> Progs\Tools\FLOOD.EXE
[DETECTION] Is the Trojan horse TR/Flood.ICQFlood.1.2
--> Progs\Tools\ICQS.EXE
[DETECTION] Is the Trojan horse TR/Sniffer.IQD.WPD
--> Progs\Automatic\VTJnuker.exe
[DETECTION] Contains code of the Windows virus W32/Vai.B
--> Progs\Automatic\VTJbomber.exe
[DETECTION] Is the Trojan horse TR/Nuke.Vai.C
--> Progs\Automatic\VTJoob.exe
[DETECTION] Is the Trojan horse TR/Nuke.Vai.A
--> Progs\Automatic\CLICK.EXE
[DETECTION] Is the Trojan horse TR/Nuke.Click.23
--> Progs\Automatic\ASSAULT.EXE
[DETECTION] Contains code of the Windows virus W32/Assault.Flooder
--> Progs\Automatic\OOB.EXE
[DETECTION] Is the Trojan horse TR/Nuker.Die.A
--> Progs\Automatic\REAPER.EXE
[DETECTION] Is the Trojan horse TR/Pestil.20.Flood
--> Progs\Automatic\FB.EXE
[DETECTION] Is the Trojan horse TR/Flood.FloodBots.20
Error! Could not change directory: System Volume Information
C:\WINDOWS\SoftwareDistribution\EventCache
{0B5DAC6D-7A71-41B0-B695-75B9CC86C884}.bin
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!
C:\WINDOWS\system32\config
default
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!
SAM
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!
SECURITY
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!
software
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!
system
Access denied! Error during file opening!
Error code: 0x000D
WARNING! Access error/file locked!

End of scan: domenica 10 settembre 2006 19:27
Time taken: 31:23 min


5986 directories were scanned
139207 files were scanned
7 warning messages were issued
0 files were deleted
0 files were repaired
12 detections

[LUCASS]

Evidentemente hai impostato la scansione dei riskware,puoi aggiungere le cartelle dei programmi da te citati nella lista esclusioni dell'antivirus,in questo modo non verrai + avvisato,ciao

PS:I files risiedono in un archivio compresso(sono innoqui)

[sextyn]

con antivir non so come si fa