kaspersky e Avenger per sconfiggere Bagle, ma come?

[redmilion]

Ciao, anchio ho infettato il mio computer con il virus Bagle, ho letto la guida e sono arrivato al punto in cui si dice di caricare lo script su Avenger ma non ho ben capito come deve essere lo script, per cui vi inivo il report della scansione di Kasperky sperando in un aiuto. Grazie

KASPERSKY ONLINE SCANNER REPORT
Tuesday, January 29, 2008 8:21:31 AM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 28/01/2008
Kaspersky Anti-Virus database records: 499369
Scan Settings
Scan using the following antivirus database standard
Scan Archives true
Scan Mail Bases false
Scan Target Folders
C:\
Scan Statistics
Total number of scanned objects 120755
Number of viruses found 3
Number of infected objects 21
Number of suspicious objects 0
Duration of the scan process 12:20:29

Infected Object Name Virus Name Last Action
C:\Documents and Settings\Emi\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Adobe\Logs\AISuitePea.log Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\m\data.oct Infected: Trojan-Downloader.Win32.Bagle.iv skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\cert8.db Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\history.dat Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\key3.db Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\parent.lock Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\call256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\callmember256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chat512.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chatmember256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chatmsg1024.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chatmsg2048.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chatmsg256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\chatmsg512.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\contactgroup256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\dyncontent\bundle.dat Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\index2.dat Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\profile4096.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\transfer256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\transfer512.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\user1024.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\user16384.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\user256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Dati applicazioni\Skype\www.next01.it\voicemail256.dbb Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Cronologia\History.IE5\MSHist012008012820080129\index.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\pending.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\Working\database_A8EC_D2B7_ECD2_7ECE\dfsr.db Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\Working\database_A8EC_D2B7_ECD2_7ECE\fsr.log Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\Working\database_A8EC_D2B7_ECD2_7ECE\fsrtmp.log Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Messenger\next01@hotmail.it\SharingMetadata\Working\database_A8EC_D2B7_ECD2_7ECE\tmp.edb Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Windows Live Contacts\next01@hotmail.it\real\members.stg Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Microsoft\Windows Live Contacts\next01@hotmail.it\shadow\members.stg Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\2a4m16xp.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\amt.log Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo103672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo113672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo123672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo133672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo143672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo23672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo33672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo43672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo53672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo63672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo73672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo83672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\lilo93672 Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\~DF3DA2.tmp Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\~DF3DAF.tmp Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\~DF8F44.tmp Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\~DFCF4B.tmp Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temp\~DFCF56.tmp Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\53IB1OHV\b64_1[1].jpg Infected: Trojan-PSW.Win32.Agent.xd skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\BXR5K0DV\b64_3[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\C024KYZM\b64[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\O030D4HN\b64[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\QH1UW0RA\b64_3[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\UWLJSKVV\b64_3[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\Emi\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Emi\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\Emi\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Programmi\File comuni\Adobe\Adobe PCD\cache\cache.db Object is locked skipped
C:\Programmi\File comuni\Adobe\Adobe PCD\pcd.db Object is locked skipped
C:\Programmi\File comuni\Adobe\caps\caps.db Object is locked skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\$hf_mig$\KB890859\SP2GDR\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtServicePackUninstall$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB885835_0$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB890859$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB890859_0$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$NtUninstallKB931784$\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\ServicePackFiles\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\dllcache\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\system32\drivers\down\29215093.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\29231375.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\29234828.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\43881562.exe Infected: Trojan-PSW.Win32.Agent.xd skipped
C:\WINDOWS\system32\drivers\down\43893281.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\43896218.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\58593062.exe Infected: Trojan-PSW.Win32.Agent.xd skipped
C:\WINDOWS\system32\drivers\down\58601406.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\58606453.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\73280312.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\73290578.exe Infected: Trojan-PSW.Win32.Agent.xd skipped
C:\WINDOWS\system32\drivers\down\73293046.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\drivers\down\73296250.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\mdelk.exe Infected: Email-Worm.Win32.Bagle.of skipped
C:\WINDOWS\system32\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
Scan process completed.

[crazy.cat]

Disattiva il ripristino della configurazione su tutti i dischi poi riavvia il pc
http://www.MegaLab.it/2330

Scarica Avenger
Estrailo in una cartella a tua scelta
Esegui il file avenger.exe con la figura di una spada
Metti il pallino su input script manually
Quindi scegli la lente e cliccaci
Ora incolla queste righe nel box bianco che si è aperto:

Codice: Seleziona tutto

Files to delete:
C:\WINDOWS\system32\drivers\hidr.exe
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\wintems.exe
C:\WINDOWS\system32\hldrrr.exe
C:\WINDOWS\system32\trusted.exe
C:\WINDOWS\system32\drivers\pci32.sys
C:\windows\system32\drivers\hldrrr.exe
C:\WINDOWS\system32\mdelk.exe
C:\Documents and Settings\Emi\Dati applicazioni\m\data.oct
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\53IB1OHV\b64_1[1].jpg
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\BXR5K0DV\b64_3[1].jpg
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\C024KYZM\b64[1].jpg
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\O030D4HN\b64[1].jpg
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\QH1UW0RA\b64_3[1].jpg
C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\UWLJSKVV\b64_3[1].jpg

folders to delete:
c:\WINDOWS\system32\drivers\down

registry keys to delete:
HKLM\SYSTEM\CurrentControlSet\Services\srosa
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
HKLM\SYSTEM\CurrentControlSet\Services\pci32
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32


Adesso devi cliccare su Done in basso nella box
Seleziona il semaforino in alto a destra
Rispondi di Si alle due richieste di Avenger
Adesso il tuo computer dovrebbe riavviarsi, nel caso non succedesse, riavvialo tu manualmente
Al riavvio del computer, copia e incolla qui il contenuto del blocco note che apparirà e prova a reinstallare subito l'antivirus.

[redmilion]

Ecco il risultato

----------------
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\xescbefj

*******************

Script file located at: \??\C:\xwophbkh.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:



File C:\WINDOWS\system32\drivers\hidr.exe not found!
Deletion of file C:\WINDOWS\system32\drivers\hidr.exe failed!

Could not process line:
C:\WINDOWS\system32\drivers\hidr.exe
Status: 0xc0000034

File C:\WINDOWS\system32\drivers\srosa.sys deleted successfully.
File C:\WINDOWS\system32\wintems.exe deleted successfully.


File C:\WINDOWS\system32\hldrrr.exe not found!
Deletion of file C:\WINDOWS\system32\hldrrr.exe failed!

Could not process line:
C:\WINDOWS\system32\hldrrr.exe
Status: 0xc0000034



File C:\WINDOWS\system32\trusted.exe not found!
Deletion of file C:\WINDOWS\system32\trusted.exe failed!

Could not process line:
C:\WINDOWS\system32\trusted.exe
Status: 0xc0000034



File C:\WINDOWS\system32\drivers\pci32.sys not found!
Deletion of file C:\WINDOWS\system32\drivers\pci32.sys failed!

Could not process line:
C:\WINDOWS\system32\drivers\pci32.sys
Status: 0xc0000034

File C:\windows\system32\drivers\hldrrr.exe deleted successfully.
File C:\WINDOWS\system32\mdelk.exe deleted successfully.
File C:\Documents and Settings\Emi\Dati applicazioni\m\data.oct deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\53IB1OHV\b64_1[1].jpg deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\BXR5K0DV\b64_3[1].jpg deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\C024KYZM\b64[1].jpg deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\O030D4HN\b64[1].jpg deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\QH1UW0RA\b64_3[1].jpg deleted successfully.
File C:\Documents and Settings\Emi\Impostazioni locali\Temporary Internet Files\Content.IE5\UWLJSKVV\b64_3[1].jpg deleted successfully.
Folder c:\WINDOWS\system32\drivers\down deleted successfully.
Registry key HKLM\SYSTEM\CurrentControlSet\Services\srosa deleted successfully.
Registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA deleted successfully.


Registry key HKLM\SYSTEM\CurrentControlSet\Services\pci32 not found!
Deletion of registry key HKLM\SYSTEM\CurrentControlSet\Services\pci32 failed!

Could not process line:
HKLM\SYSTEM\CurrentControlSet\Services\pci32
Status: 0xc0000034



Registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32 not found!
Deletion of registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32 failed!

Could not process line:
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32
Status: 0xc0000034


Completed script processing.

*******************

Finished! Terminate.
-----------------

Ora che devo fare?

[crazy.cat]

prova a reinstallare subito l'antivirus.

[redmilion]

Fatto, ora mi sta aggiornando le definizioni. Io utilizzo Antivir personal edition. Pensi che vada bene? E come firewall è buono Comodo?
Una volta aggiornato l'antivirus avvio la scansione? come faccio ad essere sicuro che Bagle non ci sia più?

[redmilion]

Antivir mi sta trovando dei file infetti! Che faccio, li cancello o li metto in quarantena?

[crazy.cat]

Fatto, ora mi sta aggiornando le definizioni. Io utilizzo Antivir personal edition. Pensi che vada bene? E come firewall è buono Comodo?

Uso le stesse protezioni, ottima scelta.
Se hai reinstallato l'antivirus bagle non c'è più, altrimenti non lo reinstallavi.

Antivir mi sta trovando dei file infetti! Che faccio, li cancello o li metto in quarantena?

Cancella tutto, e puoi rimuovere anche la cartella c:\avenger (forse i virus te li trova in quella cartella)

[redmilion]

Perfetto!!! Sembra funzionare tutto al meglio! GRAZIE 1000!