Trojan da rimuovere.

[stex2005]

Abbiamo constatato in più casi che questa versione di avenger vecchia modificata funziona con il Bagle...

http://www.wikifortio.com/997003/Megala ... ecchio.zip

[rogernemo]

salve ho avuto qualche problema con qualche virus, i problemi che si sono verificati sono principalmente due: internet explorer non funziona spesso, s'era disabilitato il centro sicurezza pc, non riesco a connettermi con il wireless.

ho fatto la scansione del sistema con kaspersky online:

KASPERSKY ONLINE SCANNER 7 REPORT
Monday, March 2, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, March 01, 2009 21:53:25
Records in database: 1860452
Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes
Scan area My Computer
C:\
D:\
Scan statistics
Files scanned 135307
Threat name 3
Infected objects 6
Suspicious objects 0
Duration of the scan 02:30:03

File name Threat name Threats count
C:\Users\Barzin\AppData\Local\Microsoft\Messenger\rogernemo@msn.com\ObjectStore\CustomEmoticons\7q6FbK5PmJVaLTY4rDKlWNhvwB0=.dt2 Infected: Trojan-Clicker.HTML.IFrame.rp 1
C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\7a75380a-1a4a0949 Infected: Trojan-Downloader.Java.OpenConnection.aq 1
C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\3c07b9fe-6e0349c8 Infected: Trojan-Downloader.Java.OpenConnection.aq 1
The selected area was scanned.

ho utilizzato The Avenger per eliminare i file che sono usciti nel report di kaspersky e questo è il report:

Logfile of The Avenger Version 2.0, (c) by

Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File

"C:\Users\Barzin\AppData\Local\Microsoft\Messenger\

rogernemo@msn.com\ObjectStore\CustomEmoticons\7q6Fb

K5PmJVaLTY4rDKlWNhvwB0=.dt2" deleted successfully.

Error: file

"C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist


Error: file

"C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist


Error: file

"C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist

File

"C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployme

nt\cache\6.0\10\7a75380a-1a4a0949" deleted

successfully.
File

"C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployme

nt\cache\6.0\62\3c07b9fe-6e0349c8" deleted

successfully.

Completed script processing.

*******************

Finished! Terminate.

ora cos'altro devo fare per essere certo di aver debellato i virus???
E cosa devo fare per riabilitare tutte le funzioni che mi sono state disabilitate dai virus???

[Amantide]

salve ho avuto qualche problema con qualche virus, i problemi che si sono verificati sono principalmente due: internet explorer non funziona spesso, s'era disabilitato il centro sicurezza pc, non riesco a connettermi con il wireless.

ho fatto la scansione del sistema con kaspersky online:

KASPERSKY ONLINE SCANNER 7 REPORT
Monday, March 2, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Sunday, March 01, 2009 21:53:25
Records in database: 1860452
Scan settings
Scan using the following database extended
Scan archives yes
Scan mail databases yes
Scan area My Computer
C:\
D:\
Scan statistics
Files scanned 135307
Threat name 3
Infected objects 6
Suspicious objects 0
Duration of the scan 02:30:03

File name Threat name Threats count
C:\Users\Barzin\AppData\Local\Microsoft\Messenger\rogernemo@msn.com\ObjectStore\CustomEmoticons\7q6FbK5PmJVaLTY4rDKlWNhvwB0=.dt2 Infected: Trojan-Clicker.HTML.IFrame.rp 1
C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp Infected: Trojan-Dropper.Win32.Pakes.s 1
C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\10\7a75380a-1a4a0949 Infected: Trojan-Downloader.Java.OpenConnection.aq 1
C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\62\3c07b9fe-6e0349c8 Infected: Trojan-Downloader.Java.OpenConnection.aq 1
The selected area was scanned.

ho utilizzato The Avenger per eliminare i file che sono usciti nel report di kaspersky e questo è il report:

Logfile of The Avenger Version 2.0, (c) by

Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File

"C:\Users\Barzin\AppData\Local\Microsoft\Messenger\

rogernemo@msn.com\ObjectStore\CustomEmoticons\7q6Fb

K5PmJVaLTY4rDKlWNhvwB0=.dt2" deleted successfully.

Error: file

"C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\evmwwufeyi.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist


Error: file

"C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\ixdapcqtlm.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist


Error: file

"C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp"

not found!
Deletion of file

"C:\Users\Barzin\AppData\Local\Temp\qwnvvismic.tmp"

failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist

File

"C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployme

nt\cache\6.0\10\7a75380a-1a4a0949" deleted

successfully.
File

"C:\Users\Barzin\AppData\LocalLow\Sun\Java\Deployme

nt\cache\6.0\62\3c07b9fe-6e0349c8" deleted

successfully.

Completed script processing.

*******************

Finished! Terminate.

ora cos'altro devo fare per essere certo di aver debellato i virus???
E cosa devo fare per riabilitare tutte le funzioni che mi sono state disabilitate dai virus???

Continuiamo qui post412633.html#p412633