ciao ma in avenger ho solo questo txt che mi chiedi di postare e lo faccio. Una domanda, al reboot mi voleva far scaricare un exe che non conoscevo e ho detto NO. Purtroppo credo proprio che fosse il sys21421[1].exe che è nell'ultima riga del text...che fare?:

Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Service s\pmvaaprb

*******************

Script file located at: \??\C:\WINDOWS\qmslabdi.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\WINDOWS\system32\dxdllreg.exe 1712346942 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 3778542682 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 3217773226 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 3966567211 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 497874448 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 2699942347 deleted successfully.
File C:\WINDOWS\system32\dxdllreg.exe 1106234127 deleted successfully.


File C:\DOCUME~1\SHZ\IMPOST~1\Temp\1.tmp not found!
Deletion of file C:\DOCUME~1\SHZ\IMPOST~1\Temp\1.tmp failed!

Could not process line:
C:\DOCUME~1\SHZ\IMPOST~1\Temp\1.tmp
Status: 0xc0000034

File C:\WINDOWS\system32\iehlpr32.dll deleted successfully.
File C:\WINDOWS\system32\dxdllreg .exe deleted successfully.
Folder C:\bak deleted successfully.
Program C:\Documents and Settings\SHZ\Impostazioni locali\Temporary Internet Files\Content.IE5\G1MJ8HAB\sys21421[1].exe successfully set up to run once on reboot.

Completed script processing.