Windows si riavvia continuamente senza preavviso, malware che modifica gli eseguibili

[Sprunk]

log di the Avenger

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform:  Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\Programmi\Logitech\Video\CameraAssistant.exe" deleted successfully.
File "C:\Programmi\Logitech\Video\InstallHelper.exe" deleted successfully.
File "C:\Programmi\Microsoft Visual Studio\MyProjects\MAT3x3\Debug\MAT3x3.exe" deleted successfully.
File "C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe" deleted successfully.
File "C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe" deleted successfully.
File "C:\Programmi\Spyware Terminator\SpywareTerminatorShield.Exe" deleted successfully.
File "C:\WINDOWS\system32\ctfmon.exe" deleted successfully.
File "C:\WINDOWS\system32\PSDrvCheck.exe" deleted successfully.
File "C:\WINXP\system32\drivers\hldrrr.exe" deleted successfully.
File "C:\WINXP\system32\wintems.exe" deleted successfully.

Error:  file "C:\WINXP\system32\drivers\hidr.exe" not found!
Deletion of file "C:\WINXP\system32\drivers\hidr.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Error:  file "C:\WINXP\system32\drivers\hidrrr.exe" not found!
Deletion of file "C:\WINXP\system32\drivers\hidrrr.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

File "C:\WINXP\system32\drivers\srosa.sys" deleted successfully.

Error:  file "C:\WINXP\system32\drivers\klif.sys" not found!
Deletion of file "C:\WINXP\system32\drivers\klif.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Error:  file "C:\WINXP\system32\drivers\pci32.sys" not found!
Deletion of file "C:\WINXP\system32\drivers\pci32.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Error:  file "C:\WINXP\system32\hldrrr.exe" not found!
Deletion of file "C:\WINXP\system32\hldrrr.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

File "C:\WINXP\system32\mdelk.exe" deleted successfully.
File move operation "C:\Programmi\File comuni\PCSuite\DataLayer\bak\DataLayer.exe|C:\Programmi\File comuni\PCSuite\DataLayer\DataLayer.exe" completed successfully.
File move operation "C:\Programmi\File comuni\Real\Update_OB\bak\evntsvc.exe|C:\Programmi\File comuni\Real\Update_OB\evntsvc.exe" completed successfully.
File move operation "C:\Programmi\HP\HP Software Update\bak\HPWuSchd2.exe|C:\Programmi\HP\HP Software Update\HPWuSchd2.exe" completed successfully.
File move operation "C:\Programmi\Logitech\Desktop Messenger\8876480\Program\bak\LogitechDesktopMessenger.exe|C:\Programmi\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" completed successfully.
File move operation "C:\Programmi\Logitech\Video\bak\CameraAssistant.exe|C:\Programmi\Logitech\Video\CameraAssistant.exe" completed successfully.
File move operation "C:\Programmi\Logitech\Video\bak\InstallHelper.exe|C:\Programmi\Logitech\Video\InstallHelper.exe" completed successfully.
File move operation "C:\Programmi\Microsoft Visual Studio\MyProjects\MAT3x3\Debug\bak\MAT3x3.exe|C:\Programmi\Microsoft Visual Studio\MyProjects\MAT3x3\Debug\MAT3x3.exe" completed successfully.
File move operation "C:\Programmi\Nokia\Nokia PC Suite 6\bak\LaunchApplication.exe|C:\Programmi\Nokia\Nokia PC Suite 6\LaunchApplication.exe" completed successfully.
File move operation "C:\Programmi\Nokia\Nokia PC Suite 6\bak\PcSync2.exe|C:\Programmi\Nokia\Nokia PC Suite 6\PcSync2.exe" completed successfully.
File move operation "C:\Programmi\Spyware Terminator\bak\SpywareTerminatorShield.exe|C:\Programmi\Spyware Terminator\SpywareTerminatorShield.Exe" completed successfully.
File move operation "C:\WINDOWS\system32\bak\ctfmon.exe|C:\WINDOWS\system32\ctfmon.exe" completed successfully.
File move operation "C:\WINDOWS\system32\bak\ElkCtrl.exe|C:\WINDOWS\system32\ElkCtrl.exe" completed successfully.
File move operation "C:\WINDOWS\system32\bak\LVCOMSX.EXE|C:\WINDOWS\system32\LVCOMSX.EXE" completed successfully.
File move operation "C:\WINDOWS\system32\bak\PSDrvCheck.exe|C:\WINDOWS\system32\PSDrvCheck.exe" completed successfully.
File move operation "C:\WINDOWS\system32\bak\srvafixe.exe|C:\WINDOWS\system32\srvafixe.exe" completed successfully.
Folder "C:\WINXP\system32\drivers\down" deleted successfully.

Error:  folder "c:\WINXP\exefld" not found!
Deletion of folder "c:\WINXP\exefld" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Error:  folder "c:\WINXP\exefnd" not found!
Deletion of folder "c:\WINXP\exefnd" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Error:  folder "C:\WINXP\exefqd" not found!
Deletion of folder "C:\WINXP\exefqd" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist


Completed script processing.

*******************

Finished!  Terminate.