Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\WINDOWS\a.bat" deleted successfully.
File "C:\WINDOWS\zip3.tmp" deleted successfully.
File "C:\WINDOWS\zip1.tmp" deleted successfully.
File "C:\WINDOWS\zipped.tmp" deleted successfully.
File "C:\WINDOWS\zip2.tmp" deleted successfully.
File "C:\WINDOWS\FVProtect.exe" deleted successfully.
File "C:\WINDOWS\userconfig9x.dll" deleted successfully.
File "C:\WINDOWS\base64.tmp" deleted successfully.
File "C:\WINDOWS\iTunesMusic.exe" deleted successfully.
File "C:\WINDOWS\mssecu.exe" deleted successfully.
File "C:\WINDOWS\winsystem.exe" deleted successfully.
File "C:\WINDOWS\bdn.com" deleted successfully.
File "C:\WINDOWS\system32\taack.exe" deleted successfully.
File "C:\WINDOWS\system32\VBIEWER.OCX" deleted successfully.
File "C:\WINDOWS\system32\ssurf022.dll" deleted successfully.
File "C:\WINDOWS\system32\bsva-egihsg52.exe" deleted successfully.
File "C:\WINDOWS\system32\taack.dat" deleted successfully.
File "C:\WINDOWS\system32\ps1.exe" deleted successfully.
File "C:\WINDOWS\system32\mwin32.exe" deleted successfully.
File "C:\WINDOWS\system32\psoft1.exe" deleted successfully.
File "C:\WINDOWS\system32\psof1.exe" deleted successfully.
File "C:\WINDOWS\system32\hoproxy.dll" deleted successfully.
File "C:\WINDOWS\system32\winlogonpc.exe" deleted successfully.
File "C:\WINDOWS\system32\msnbho.dll" deleted successfully.
File "C:\WINDOWS\system32\hxiwlgpm.exe" deleted successfully.
File "C:\WINDOWS\system32\hxiwlgpm.dat" deleted successfully.
File "C:\WINDOWS\system32\sncntr.exe" deleted successfully.
File "C:\WINDOWS\system32\WINWGPX.EXE" deleted successfully.
File "C:\WINDOWS\system32\sysreq.exe" deleted successfully.
File "C:\WINDOWS\system32\ssvchost.com" deleted successfully.
File "C:\WINDOWS\system32\ssvchost.exe" deleted successfully.
File "C:\WINDOWS\system32\wini104552633.exe" deleted successfully.
File "C:\WINDOWS\system32\thun32.dll" deleted successfully.
File "C:\WINDOWS\system32\winsystem.exe" deleted successfully.
File "C:\WINDOWS\system32\vcatchpi.dll" deleted successfully.
File "C:\WINDOWS\system32\temp#01.exe" deleted successfully.
File "C:\WINDOWS\system32\vbsys2.dll" deleted successfully.
File "C:\WINDOWS\system32\thun.dll" deleted successfully.
File "C:\WINDOWS\system32\msvchost.exe" deleted successfully.
File "C:\WINDOWS\system32\mtr2.exe" deleted successfully.
File "C:\WINDOWS\system32\mssecu.exe" deleted successfully.
File "C:\WINDOWS\system32\newsd32.exe" deleted successfully.
File "C:\WINDOWS\system32\netode.exe" deleted successfully.
File "C:\WINDOWS\system32\h@tkeysh@@k.dll" deleted successfully.
File "C:\WINDOWS\system32\anticipator.dll" deleted successfully.
File "C:\WINDOWS\system32\msgp.exe" deleted successfully.
File "C:\WINDOWS\system32\dpcproxy.exe" deleted successfully.
File "C:\WINDOWS\system32\regm64.dll" deleted successfully.
File "C:\WINDOWS\system32\regc64.dll" deleted successfully.
File "C:\WINDOWS\system32\akttzn.exe" deleted successfully.
File "C:\WINDOWS\system32\awtoolb.dll" deleted successfully.
File "C:\WINDOWS\system32\Rundl1.exe" deleted successfully.
File "C:\WINDOWS\system32\bdn.com" deleted successfully.
File "C:\Programmi\hsdmymc\EnUi.dll" deleted successfully.

Error: file "C:\WINDOWS\system32\brastk.exe" not found!
Deletion of file "C:\WINDOWS\system32\brastk.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Folder "C:\Programmi\akl" deleted successfully.
Folder "C:\WINDOWS\system32\smp" deleted successfully.
Folder "C:\WINDOWS\mslagent" deleted successfully.
Folder "C:\Programmi\hsdmymc" deleted successfully.
Registry value "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Cur rentVersion\ShellServiceObjectDelayLoad|EnUi" deleted successfully.
Registry key "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\brastk" deleted successfully.
Registry key "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\MSConfig\startupreg\CfgDscDb" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

questo è il report di avenger, solo che al riavvio mi ha dato un messaggio di errore del tipo "disco non trovato" e il comando dopo l'avvio di fix.reg (quello in cui dovevo scrivere quelle cose in "esegui") non parte...