problema con trojan

[paolainthecastle]

Buongiorno,
credo di avere alcuni trojan nel mio pc ma non riesco a liberarmene.
Ho effettuato la scansione con Kaspersky ma non so come creare un file di log per postarlo. L'unica cosa che sono riuscita a fare e salvare un file di testo con la cronologia delle operazioni effettuate.


------
Time Name Status Reason
---- ---- ------ ------
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\acYetr.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\AFVXA.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\aMg.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\ANC.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\APm.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\bbg.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\bigfoot.bmp ok scanned
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Btc.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\CDF.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Czo.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Dmimb.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\DWm.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\EnC.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\FHiy.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\fRN.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\hym.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\INR.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\JEn.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\jTJF.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Lyz.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\MBFdy.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\MNZcP.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\OAFWOg.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\OJOB.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Oreft.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\OXB.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\pEX.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\pwyN.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\PYckQ.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\QdEdU.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\QRc.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\RAX.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\RfTXlI_virus.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\RfTXlmI.PIF ok scanned
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\SOAsu.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\SRz.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\tBAztO.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Thumbs.db ok scanned
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\Thumbs.db:encryptable ok scanned
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\umjX.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\UPd.exe skipped by rights
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\verisign.bmp ok scanned
25/11/2006 8.18.22 File: C:\Programmi\File comuni\Services\vIr.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\VkzlJ.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\Wejj.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\whowhere.bmp ok scanned
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\WLQ.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\Wqbubg.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\WWVx.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\WxJ.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\xSzr.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\YaGLYb.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\YQt.exe skipped by rights
25/11/2006 8.18.23 File: C:\Programmi\File comuni\Services\ZNR.exe skipped by rights


Quello che noto è che mi skippa i programmi, ma non ho impostato nulla per farglielo fare. Inoltre da una scansione del sistema mi segnalava alcuni trojan in particolare:

not found: Trojan program Trojan.Win32.Obfuscated.f File: C:\Programmi\File comuni\Services\SOAsu.exe
not found: Trojan program Trojan.Win32.Obfuscated.f File: C:\Programmi\File comuni\Services\INR.exe
not found: Trojan program Trojan.Win32.Obfuscated.f File: C:\Programmi\File comuni\Services\acYetr.exe
not found: Trojan program Trojan.Win32.Obfuscated.f File: C:\Programmi\File comuni\Services\WWVx.exe
not found: Trojan program Trojan.Win32.Obfuscated.f File: C:\Programmi\File comuni\Services\RfTXlI.exe

MA SE APRO LA CARTELLA SERVICES I FILE CI SONO ANCORA E NON ME LI FA CANCELLARE.

Aiutooo!! Scusate l'ignoranza ma non ne posso più di portare il PC in assistenza solo per farmelo pulire..

Grazie a tutti
Paola

[crazy.cat]

Hai il link optimizer
Leggi questo post
http://www.MegaLab.it/forum/viewtopic.p ... 04&start=0
e fai passare i vari tools, per primo quello della prevx e poi virit.
Con quello della nod devi cancellare uno alla volta i vari file exe che ti ha scovato kaspersky.

Dopo che hai fatto le varie pulizie fai una scansione con hijackthis e posta qui il log che vediamo se è rimasto qualcosa.

[paolainthecastle]

Si preannuncia un lavoro molto lungo.
Ti ringrazio molto, cerco di fare quel che posso e poi vedremo.
Ci sentiamo presto per gli aggiornamenti
Ciao