Inoltre, ecco il primo report di Avneger:

Could not open file C:\WINNT\trz1B5.tmp for deletion
Deletion of file C:\WINNT\trz1B5.tmp failed!

Could not process line:
C:\WINNT\trz1B5.tmp
Status: 0xc000003a



Could not open file C:\WINNT\system32\lzx32.sys for deletion
Deletion of file C:\WINNT\system32\lzx32.sys failed!

Could not process line:
C:\WINNT\system32\lzx32.sys
Status: 0xc000003a

Registry value HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows|AppInit_DLLs replaced with dummy successfully.


Registry key HKLM\Software\Microsoft\Windows\CurrentVersion\pol icies\Explorer\Run|1 not found!
Deletion of registry key HKLM\Software\Microsoft\Windows\CurrentVersion\pol icies\Explorer\Run|1 failed!
Status: 0xc0000034


Completed script processing.

*******************

Finished! Terminate.