Virus Bagle

[peolo_82]

Salve ho beccato da capo il virus bagle ho installato il programma avenger vi invio il report che mi è uscito grazie a tutti.


Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at G:\Avenger

*******************

Beginning to process script file:


Error: could not open file "C:\WINDOWS\system32\drivers\srosa.sys"
Deletion of file "C:\WINDOWS\system32\drivers\srosa.sys" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open file "C:\WINDOWS\system32\wintems.exe"
Deletion of file "C:\WINDOWS\system32\wintems.exe" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open file "C:\windows\system32\drivers\hldrrr.exe"
Deletion of file "C:\windows\system32\drivers\hldrrr.exe" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open file "C:\WINDOWS\system32\mdelk.exe"
Deletion of file "C:\WINDOWS\system32\mdelk.exe" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open file "C:\WINDOWS\system32\drivers\mdelk.exe"
Deletion of file "C:\WINDOWS\system32\drivers\mdelk.exe" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open file "C:\windows\system32\hldrrr.exe"
Deletion of file "C:\windows\system32\hldrrr.exe" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist


Error: could not open folder "C:\WINDOWS\system32\drivers\downld"
Deletion of folder "C:\WINDOWS\system32\drivers\downld" failed!
Status: 0xc000003a (STATUS_OBJECT_PATH_NOT_FOUND)
bad path / the parent directory does not exist

Folder "G:\Documents and Settings\Paolo\Dati applicazioni\m" deleted successfully.

Error: registry key "HKLM\SYSTEM\CurrentControlSet\Services\srosa" not found!
Deletion of registry key "HKLM\SYSTEM\CurrentControlSet\Services\srosa" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
the object does not exist

Registry key "HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

[crazy.cat]

Hai usato lo script standard ma ci sono virus in altre parti del tuo pc.
Riesci a reinstallare un antivirus o fare una scansione online con kaspersky o con il kaspersky removeal tools http://www.MegaLab.it/2894

[peolo_82]

Ciao ho rimosso il virus bagle ho sono riuscito a installare il nod32 ed ho fatto la scansione. Mi consigli di fare la scansione anche con kaspersky removal tool ??? grazie

[crazy.cat]

Se nod non ti ha trovato niente e se funziona, allora bagle se ne è andato.
(comunque un secondo parere da un altro antivirus non fa mai male)

[ste_95]

Segui le istruzioni di questa pagina per ripristinare la rete senza fili, la modalità provvisoria e la visualizzazione dei file nascosti.

[peolo_82]

Ciao nella scansione del nod mi ha trovato 11 virus e li ha inseriti in quarantena quindi credo che tutto sia stato risolto perkè tutti i virus avevano la parola Bagle. Grazie