virus tr\vundo.gen

[teo1980]

si...ecco il log

Symantec Trojan.Vundo Removal Tool 1.5.0
The process "IEXPLORE.EXE" might be affected by the threat. It has been suspended.
The process "IEXPLORE.EXE" might be affected by the threat. It has been terminated.

D:\System Volume Information: (not scanned)

Trojan.Vundo has been successfully removed from your computer!

Here is the report:

The total number of the scanned files: 40511
The number of deleted files: 0
The number of viral processes terminated: 1
The number of viral processes suspended: 1
The number of viral threads terminated: 0
The number of registry entries fixed: 0


..ora mi sembra tuitto a posto....oppure c'è qualcos'altro da fare?..(per un ulteriore sicurezza)

[OYS]

Originariamente inviato da teo1980


..ora mi sembra tuitto a posto....oppure c'è qualcos'altro da fare?..(per un ulteriore sicurezza)

Fai una scansione on line in caso di residui.

[teo1980]

per online intendi dire dal sito della symantec???

[OYS]

Originariamente inviato da teo1980
per online intendi dire dal sito della symantec???

Fallo con Kaspersky, e poi posta il risultato.

[teo1980]

ora provo

[OYS]

Stavo parlando della scansione on-line:

http://www.kasperskyitalia.it/serviz...avwebscan.html

[teo1980]

ciao oys....ti posto il log di kaspersky:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Thursday, November 29, 2007 2:39:51 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 29/11/2007
Kaspersky Anti-Virus database records: 468123
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - Folders:
C:\

Scan Statistics:
Total number of scanned objects: 35560
Number of viruses found: 1
Number of infected objects: 2
Number of suspicious objects: 0
Duration of the scan process: 00:23:04

Infected Object Name / Virus Name / Last Action
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\Paramete.evt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\TEMP\_avast4_\Webshlock.txt Object is locked skipped
C:\WINDOWS\TEMP\Perflib_Perfdata_7b0.dat Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked skipped
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb .log Object is locked skipped
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp .edb Object is locked skipped
C:\WINDOWS\SoftwareDistribution\DataStore\DataStor e.edb Object is locked skipped
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr0.da t Object is locked skipped
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr1.da t Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Francesco\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Francesco\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Francesco\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Francesco\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\history.dat Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\cert8.db Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\key3.db Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\parent.lock Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\search.sqlite Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Francesco\Dati applicazioni\Mozilla\Firefox\Profiles\l48su3bk.def ault\formhistory.dat Object is locked skipped
C:\Documents and Settings\Francesco\UserData\index.dat Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\report\Protezione residente.txt Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Programmi\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\avenger\backup.zip/avenger/pmnkijk.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.atj skipped
C:\avenger\backup.zip ZIP: infected - 1 skipped

Scan process completed.

......fammi sapere ke ne pensi.....ciao!!!!

[OYS]

Ha trovato solo due virus, che sono i backup che avenger ha creato dei file che abbiamo eliminato con lo script. Per cui se vuoi puoi anche eliminare i backup (C:\avenger\backup.zip).

[teo1980]

grazie 1000 oys....anke se c'è ankora una cosa ke non mi convince: mentre navigo, ad un certo punto mi si aprono delle popo up dicendo ke il mio pc non è al sicuro....potrebbe essere infetto etc. etc. Ora girando un pò sul web ho dedotto ke sono gli effetti collaterali dei virus ke ho preso.....quindi ho messo dei blokki per queste pagine...tipo "toolsicuro" oppure "protezionesicura" "www.senzaerrori" ecc ecc......potrebbero essere pericolosi queste popup.....anke perkè se navigo in explorer succede un casino(praticamente mi si aprono ogni 10 minuti)....se navigo con firefox la cosa si attenua...anke se ogni tanto si presentano.
Dimmi cosa ne pensi.
Ciao!

[OYS]

Riguardo a toolsicuro, leggi questa discussione, e guarda i miei due primi post:


http://forum.html.it/forum/showthrea...readid=1183425