Salve,
ho appena scaricato Comodo Cleaning Essential Beta e mi ha trovato 94 minacce.
Chiedevo se è attendibile il risultato delle 94 minaccie, mi sembrano tante.
Ho fatto scansione con VirIT, Avira e Malwarebytes e non trovo niente....
Comodo mi dice di disnfestare o mettere in 40 ena...
Che si fa?
Attendo Vs. opinione, grazie.
scarica hijackthis da qui mettilo in una cartella appositamente dedicata, tipo C:\ hijackthis, poi avvialo, premi "do a system scan and save a log file", al termine sarà generato un report, copialo e incollalo in un post.
Lo butti......Originariamente inviato da lucasspd
Salve,
ho appena scaricato Comodo Cleaning Essential Beta e mi ha trovato 94 minacce.
Chiedevo se è attendibile il risultato delle 94 minaccie, mi sembrano tante.
Ho fatto scansione con VirIT, Avira e Malwarebytes e non trovo niente....
Comodo mi dice di disnfestare o mettere in 40 ena...
Che si fa?
Attendo Vs. opinione, grazie.
1)Perchè non è mai consigliabile installare versioni Beta. (meglio sempre aspettare la versione finale)
2) Sono più attendibili le precedenti scansioni che hai eseguito.
3) Se il pc funziona bene, e non noti anomalie, le 94 minacce possono essere dei falsi positivi.
Per averne la certezza, bisognerebbe vedere il log della scansione. (se lo rilascia.)
Ops....abbiamo risposto quasi in contemporanea....
1)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19.02.45, on 01/11/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20733)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\BrowserProtect\BpSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\Programmi\Avira\AntiVir Desktop\avguard.exe
C:\Programmi\Bonjour\mDNSResponder.exe
C:\Programmi\Java\jre6\bin\jqs.exe
C:\Programmi\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Programmi\File comuni\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Programmi\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\Programmi\Avira\AntiVir Desktop\avshadow.exe
C:\Programmi\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\VEXPLite\viritsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Programmi\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Programmi\ASUS\EPU-4 Engine\FourEngine.exe
C:\Programmi\COMODO\COMODO Internet Security\cfp.exe
C:\Programmi\Avira\AntiVir Desktop\avgnt.exe
C:\Programmi\Adobe\Acrobat 6.0\Distillr\acrotray.exe
C:\Programmi\HP\Digital Imaging\bin\hpqtra08.exe
C:\Programmi\Logitech\SetPoint\SetPoint.exe
C:\Programmi\PopTray\PopTray.exe
C:\Programmi\File comuni\Logishrd\KHAL2\KHALMNPR.EXE
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Trend Micro\HiJackThis\HiJackThis.exe
2)
O2 - BHO: Guida per l'accesso a Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programmi\File comuni\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [MsnMsgr] "C:\Programmi\Windows Live\Messenger\MsnMsgr.Exe" /background (User 'SYSTEM')
O4 - S-1-5-18 Startup: PopTray.lnk = C:\Programmi\PopTray\PopTray.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: PopTray.lnk = C:\Programmi\PopTray\PopTray.exe (User 'Default user')
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: bw+0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {7B992F59-2435-424B-A264-ADB7E42AA32E} - C:\Programmi\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O23 - Service: BrowserProtect Service (bprot) - Web Eight LLC. - C:\Programmi\BrowserProtect\BpSvc.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Programmi\File comuni\Logishrd\Bluetooth\LBTServ.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Programmi\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
--
End of file - 14755 bytes
mah io non vedo niente di pericoloso, prova a rimuovere Comodo Cleaning Essential e come dice r16......le versioni beta
installa un firewall gia' sperimentato come pctools ( ad esempio) lo trovi nella lista del forum
Come firewall ho comodo,
provo una scansione con combofix
bravo !Come firewall ho comodo, provo una scansione con combofix
Pls. controlla il link combofix
http://wikisend.com/download/609508/log.txt
Attendo Tua opinione , grazie
non ha trovato nessun processo nascosto a parte due file sospetti
COMODO Internet Security : ricorda di tenere solo il firewall
fammi questa scansione per sicurezza
scarica malwarebytes
Aggiornalo: clicca sulla scheda "aggiornamenti" => "controlla aggiornamenti"
Esegui una "scansione completa" (seleziona l'opzione)
A scansione completa, fai clic su OK => Mostra i Risultati.
Assicurarti che tutto sia selezionato e clicca clic su Rimuovi selezionati.
Se ti chiede di riavviare, riavvia per completare il processo di pulizia.
Posta il rapporto .
Permessi di invio
Rispondi quotando