Ciao!!
Ho avuto un piccolo problemino con il pc così ho fatto una scansione con "Malwarebytes' Anti-Malware" che ha trovato questo file infetto: c:\WINDOWS\system32\nvs2.inf ;
e una scansione online con panda che ha trovato questo:
"""" ANALYSIS: 2009-01-08 23:26:07
PROTECTIONS: 1
MALWARE: 5
SUSPECTS: 0
PROTECTIONS
Description Version Active Updated
avast! antivirus 4.8.1201 [VPS 090108-0] 4.8.1201 Yes Yes
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
00040722 adware/navipromo Adware No 1 Yes No hkey_current_user\software\mc
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\RAFFAELLA\Cookies\raffaella@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\RAFFAELLA\Cookies\raffaella@atdmt[2].txt
00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\RAFFAELLA\Cookies\raffaella@com[1].txt
00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\RAFFAELLA\Cookies\raffaella@ad.yieldmanag er[1].txt
""""
Cercando sul web ho trovato un vostro post: http://forum.html.it/forum/showthread/t-1297137.html
ho fatto la scansione con navilog e questo è il risultato:
Search Navipromo version 3.7.1 began on 09/01/2009 at 0.15.57,87
!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Programmi\navilog1
Updated on 02.01.2009 at 19h00 by IL-MAFIOSO
Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) Dual CPU E2140 @ 1.60GHz )
BIOS : Version 6.00 R1.01.2740.A1
USER : RAFFAELLA ( Administrator )
BOOT : Normal boot
Antivirus : avast! antivirus 4.8.1201 [VPS 090108-0] 4.8.1201 (Activated)
C:\ (Local Disk) - NTFS - Total:149 Go (Free:1 Go)
D:\ (CD or DVD)
E:\ (CD or DVD)
Search done in normal mode
*** Searching for installed Software ***
*** Search folders in "C:\WINDOWS" ***
*** Search folders in "C:\Programmi" ***
*** Search folders in "C:\Documents and Settings\All Users\menuav~1\progra~1" ***
*** Search folders in "C:\Documents and Settings\All Users\menuav~1" ***
*** Search folders in "c:\docume~1\alluse~1\datiap~1" ***
*** Search folders in "C:\Documents and Settings\RAFFAELLA\datiap~1" ***
*** Search folders in "C:\DOCUME~1\ADMINI~1\datiap~1" ***
*** Search folders in "C:\Documents and Settings\RAFFAELLA\impost~1\datiap~1" ***
*** Search folders in "C:\DOCUME~1\ADMINI~1\impost~1\datiap~1" ***
*** Search folders in "C:\Documents and Settings\RAFFAELLA\menuav~1\progra~1" ***
*** Search folders in "C:\DOCUME~1\ADMINI~1\menuav~1\progra~1" ***
*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net
*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!
* Scan in "C:\WINDOWS\system32" *
* Scan in "C:\Documents and Settings\RAFFAELLA\impost~1\datiap~1" *
* Scan in "C:\DOCUME~1\ADMINI~1\impost~1\datiap~1" *
*** Search files ***
C:\WINDOWS\system32\nvs2.inf found !
*** Search specific Registry keys ***
!! Following keys are not certainly all infected !!
HKEY_CURRENT_USER\Software\mc
*** Complementary Search ***
(Search specific files)
1)Search new Instant Access files :
2)Heuristic Search :
* In "C:\WINDOWS\system32" :
* In "C:\Documents and Settings\RAFFAELLA\impost~1\datiap~1" :
* In "C:\DOCUME~1\ADMINI~1\impost~1\datiap~1" :
3)Certificates Search :
Egroup certificate not found !
Electronic-Group certificate not found !
Montorgueil certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !
4)Search others known folders and files :
*** Search completed on 09/01/2009 at 0.20.19,71 ***
Se qlcnpuò aiutarmi...vi ringrazio tantissimo!! ciao ciao!!
Rispondi quotando
