Mi è tornato Antivir con l'ombrello chiuso.. e se lo ri attivo si ri disattiva
AntiVir PersonalEdition Classic
Report file date: domenica 16 dicembre 2007 19:17
Scanning for 972845 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: MATTEO-8FB3122C
Version information:
BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 11/09/2007 19:27:57
AVSCAN.DLL : 7.0.6.0 49192 Bytes 11/09/2007 19:27:56
LUKE.DLL : 7.0.5.3 147496 Bytes 11/09/2007 19:27:58
LUKERES.DLL : 7.0.6.1 10280 Bytes 11/09/2007 19:27:58
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 12:52:47
ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 23:34:46
ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 14/12/2007 23:34:46
ANTIVIR3.VDF : 7.0.1.98 4096 Bytes 14/12/2007 23:34:46
AVEWIN32.DLL : 7.6.0.45 3084800 Bytes 13/12/2007 23:44:31
AVWINLL.DLL : 1.0.0.7 14376 Bytes 27/04/2007 10:52:45
AVPREF.DLL : 7.0.2.2 25640 Bytes 11/09/2007 19:27:56
AVREP.DLL : 7.0.0.1 155688 Bytes 27/04/2007 10:52:48
AVPACK32.DLL : 7.3.0.15 360488 Bytes 10/08/2007 16:15:01
AVREG.DLL : 7.0.1.6 30760 Bytes 11/09/2007 19:27:56
AVARKT.DLL : 1.0.0.20 278568 Bytes 11/09/2007 19:27:55
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 11/09/2007 19:27:56
NETNT.DLL : 7.0.0.0 7720 Bytes 27/04/2007 10:52:47
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 11/09/2007 19:27:46
RCTEXT.DLL : 7.0.62.0 86056 Bytes 11/09/2007 19:27:46
SQLITE3.DLL : 3.3.17.1 339968 Bytes 11/09/2007 19:27:59
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\programmi\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: E:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: domenica 16 dicembre 2007 19:17
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Module is infected -> 'C:\DOCUME~1\Matteo\IMPOST~1\Temp\svchost.exe'
Scan process 'scrigz.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'Azureus.exe' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'rakusb.exe' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'daemon.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'winampa.exe' - '1' Module(s) have been scanned
Scan process 'dslagent.exe' - '1' Module(s) have been scanned
Scan process 'DslStat.exe' - '1' Module(s) have been scanned
Scan process 'OpWareSE4.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'aptezbp.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'AsusProb.exe' - '1' Module(s) have been scanned
Scan process 'SMTray.exe' - '1' Module(s) have been scanned
Scan process 'MsPMSPSv.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'SMAgent.exe' - '1' Module(s) have been scanned
Scan process 'CTSVCCDA.EXE' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
Process 'svchost.exe' has been terminated
C:\DOCUME~1\Matteo\IMPOST~1\Temp\svchost.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Kapucen.Gen
[INFO] The file was moved to '47c86c4e.qua'!
44 processes with 43 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Boot sector 'E:\'
[NOTE] No virus was found!
Starting to scan the registry.
The registry was scanned ( '40' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\Matteo\Desktop\CRACK E PATCH VARIE\PES 2008 patch 1.10 + crack vitality updated-fixed 11-2007.rar
[0] Archive type: RAR
--> setup.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Kapucen.Gen
[INFO] The file was moved to '47b86e2c.qua'!
C:\Documents and Settings\Matteo\Impostazioni locali\Temporary Internet Files\Content.IE5\01MV4563\CA375PK2
[DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
[INFO] The file was moved to '47986f4b.qua'!
C:\Documents and Settings\Matteo\Impostazioni locali\Temporary Internet Files\Content.IE5\69JG50NM\systemscan[1].htm
[DETECTION] Contains suspicious code HEUR/Exploit.HTML
[INFO] The file was moved to '47d86fbc.qua'!
C:\Documents and Settings\Matteo\Impostazioni locali\Temporary Internet Files\Content.IE5\CF1DRLGL\CA4P018J
[DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
[INFO] The file was moved to '47996fdc.qua'!
C:\Documents and Settings\Matteo\Impostazioni locali\Temporary Internet Files\Content.IE5\HSF4CNTI\CACX21DI
[DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
[INFO] The file was moved to '47a87015.qua'!
C:\Documents and Settings\Matteo\Impostazioni locali\Temporary Internet Files\Content.IE5\LIPJA1TJ\CA1WFUB1
[DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
[INFO] The file was moved to '47967049.qua'!
C:\System Volume Information\_restore{FB90B1D8-47DE-407E-AC8D-CEE21B20A8F5}\RP260\A0044238.exe
[DETECTION] Contains detection pattern of the worm WORM/P2P.Kapucen.Gen
[INFO] The file was moved to '4795757c.qua'!
C:\WINDOWS\system32\drivers\atapi.sys
[WARNING] The file could not be opened!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\'
Begin scan in 'E:\'
End of the scan: domenica 16 dicembre 2007 20:26
Used time: 1:08:58 min
The scan has been done completely.
7733 Scanning directories
387027 Files were scanned
8 viruses and/or unwanted programs were found
1 Files were classified as suspicious:
0 files were deleted
0 files were repaired
8 files were moved to quarantine
0 files were renamed
4 Files cannot be scanned
387019 Files not concerned
che fo? :master:


Rispondi quotando
