Ciao, il pc mi ha beccato un trojan sp.27 la scansione con antivir mi da questo:
AntiVir PersonalEdition Classic
Report file date: venerdì 12 ottobre 2007 09:09
Scanning for 877079 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: K2Z6I5
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 07/09/2007 15:48:50
AVSCAN.DLL : 7.0.6.0 49192 Bytes 07/09/2007 15:48:50
LUKE.DLL : 7.0.5.3 147496 Bytes 07/09/2007 15:48:50
LUKERES.DLL : 7.0.6.1 10280 Bytes 07/09/2007 15:48:50
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 15:44:42
ANTIVIR1.VDF : 7.0.0.0 1640448 Bytes 13/09/2007 14:15:00
ANTIVIR2.VDF : 7.0.0.57 446464 Bytes 07/10/2007 14:13:04
ANTIVIR3.VDF : 7.0.0.76 144384 Bytes 11/10/2007 14:13:00
AVEWIN32.DLL : 7.6.0.20 2753024 Bytes 04/10/2007 14:13:50
AVWINLL.DLL : 1.0.0.7 14376 Bytes 23/04/2007 10:23:24
AVPREF.DLL : 7.0.2.2 25640 Bytes 07/09/2007 15:48:50
AVREP.DLL : 7.0.0.1 155688 Bytes 23/04/2007 10:23:24
AVPACK32.DLL : 7.3.0.15 360488 Bytes 20/08/2007 07:24:02
AVREG.DLL : 7.0.1.6 30760 Bytes 07/09/2007 15:48:50
AVARKT.DLL : 1.0.0.20 278568 Bytes 07/09/2007 15:48:50
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 07/09/2007 15:48:50
NETNT.DLL : 7.0.0.0 7720 Bytes 23/04/2007 10:23:24
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/09/2007 15:48:44
RCTEXT.DLL : 7.0.62.0 86056 Bytes 07/09/2007 15:48:44
SQLITE3.DLL : 3.3.17.1 339968 Bytes 07/09/2007 15:48:50
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\programmi\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: I:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: venerdì 12 ottobre 2007 09:09
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'mirc.exe' - '1' Module(s) have been scanned
Scan process 'mirc.exe' - '1' Module(s) have been scanned
Scan process 'WUAUCLT.EXE' - '1' Module(s) have been scanned
Scan process 'TrueCrypt.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'MPAPI3s.exe' - '1' Module(s) have been scanned
Scan process 'ObjectDock.exe' - '1' Module(s) have been scanned
Scan process 'GETRIGHT.EXE' - '1' Module(s) have been scanned
Scan process 'GETRIGHT.EXE' - '1' Module(s) have been scanned
Scan process 'MSNMSGR.EXE' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'PcSync2.exe' - '1' Module(s) have been scanned
Scan process 'EDICT.EXE' - '1' Module(s) have been scanned
Scan process 'WCESCOMM.EXE' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'WINAMPA.EXE' - '1' Module(s) have been scanned
Scan process 'PicasaMediaDetector.exe' - '1' Module(s) have been scanned
Scan process 'SERVIC~1.EXE' - '1' Module(s) have been scanned
Scan process 'AVGNT.EXE' - '1' Module(s) have been scanned
Scan process 'DAEMON.EXE' - '1' Module(s) have been scanned
Scan process 'LaunchApplication.exe' - '1' Module(s) have been scanned
Scan process 'DataLayer.exe' - '1' Module(s) have been scanned
Scan process 'APDPROXY.EXE' - '1' Module(s) have been scanned
Scan process 'ISSCH.EXE' - '1' Module(s) have been scanned
Scan process 'TotRecSched.exe' - '1' Module(s) have been scanned
Scan process 'PDVDServ.exe' - '1' Module(s) have been scanned
Scan process 'atiptaxx.exe' - '1' Module(s) have been scanned
Scan process 'NewMixer.exe' - '1' Module(s) have been scanned
Scan process 'EXPLORER.EXE' - '1' Module(s) have been scanned
Scan process 'ALG.EXE' - '1' Module(s) have been scanned
Scan process 'WDFMGR.EXE' - '1' Module(s) have been scanned
Scan process 'TFTPSVC.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'AppServices.exe' - '1' Module(s) have been scanned
Scan process 'ATI2EVXX.EXE' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'AVGUARD.EXE' - '1' Module(s) have been scanned
Scan process 'SCHED.EXE' - '1' Module(s) have been scanned
Scan process 'SPOOLSV.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned
Scan process 'LSASS.EXE' - '1' Module(s) have been scanned
Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned
Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned
Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned
Scan process 'SMSS.EXE' - '1' Module(s) have been scanned
51 processes with 51 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
[WARNING] The boot sector file could not be read!
[WARNING] Error code: 0x0003
Boot sector 'D:\'
[NOTE] No virus was found!
Boot sector 'I:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '36' files ).
Starting the file scan:
Begin scan in 'C:\' <DIEGO>
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\WINDOWS\Downloaded Program Files\rundlg32.inf
[DETECTION] Is the Trojan horse TR/Spy.207
[INFO] The file was moved to '477d211f.qua'!
C:\WINDOWS\Downloaded Program Files\CONFLICT.1\rundlg32.inf
[DETECTION] Is the Trojan horse TR/Spy.207
[INFO] The file was deleted!
Begin scan in 'D:\'
Begin scan in 'I:\'
End of the scan: venerdì 12 ottobre 2007 09:46
Used time: 36:58 min
The scan has been done completely.
6171 Scanning directories
227488 Files were scanned
2 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
1 files were deleted
0 files were repaired
1 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
227486 Files not concerned
3009 Archives were scanned
2 Warnings
84 Notes
Rispondi quotando
