da majinzin » sab gen 19, 2008 12:45 pm
Ho fatto quello che mi hai scritto....Ecco il log
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\jhntqhni
*******************
Script file located at: \??\C:\Documents and Settings\qaogvvsq.txt
Script file opened successfully.
Script file read successfully
Backups directory opened successfully at C:\Avenger
*******************
Beginning to process script file:
File C:\WINDOWS\system32\drivers\hidr.exe not found!
Deletion of file C:\WINDOWS\system32\drivers\hidr.exe failed!
Could not process line:
C:\WINDOWS\system32\drivers\hidr.exe
Status: 0xc0000034
File C:\WINDOWS\system32\drivers\srosa.sys deleted successfully.
File C:\WINDOWS\system32\wintems.exe deleted successfully.
File C:\WINDOWS\system32\hldrrr.exe not found!
Deletion of file C:\WINDOWS\system32\hldrrr.exe failed!
Could not process line:
C:\WINDOWS\system32\hldrrr.exe
Status: 0xc0000034
File C:\WINDOWS\system32\trusted.exe not found!
Deletion of file C:\WINDOWS\system32\trusted.exe failed!
Could not process line:
C:\WINDOWS\system32\trusted.exe
Status: 0xc0000034
File C:\WINDOWS\system32\drivers\pci32.sys not found!
Deletion of file C:\WINDOWS\system32\drivers\pci32.sys failed!
Could not process line:
C:\WINDOWS\system32\drivers\pci32.sys
Status: 0xc0000034
File C:\windows\system32\drivers\hldrrr.exe deleted successfully.
File C:\WINDOWS\system32\drivers\hldrrr.ex_ not found!
Deletion of file C:\WINDOWS\system32\drivers\hldrrr.ex_ failed!
Could not process line:
C:\WINDOWS\system32\drivers\hldrrr.ex_
Status: 0xc0000034
File C:\WINDOWS\system32\mdelk.exe deleted successfully.
Could not open file C:\Documents and Settings\Nico\Impostazioni locali\Temp\Rar$EX00.694\3D Matrix Code Screensaver 1.0.exe for deletion
Deletion of file C:\Documents and Settings\Nico\Impostazioni locali\Temp\Rar$EX00.694\3D Matrix Code Screensaver 1.0.exe failed!
Could not process line:
C:\Documents and Settings\Nico\Impostazioni locali\Temp\Rar$EX00.694\3D Matrix Code Screensaver 1.0.exe
Status: 0xc000003a
File C:\Documents and Settings\Nico\Impostazioni locali\Temporary Internet Files\Content.IE5\72DW1NAC\b64_3[1].jpg deleted successfully.
File C:\Documents and Settings\Nico\Impostazioni locali\Temporary Internet Files\Content.IE5\F1MX4S1F\b64_3[1].jpg deleted successfully.
File C:\Programmi\LClock\LClock.exe deleted successfully.
Folder C:\WINDOWS\exefnd not found!
Deletion of folder C:\WINDOWS\exefnd failed!
Could not process line:
C:\WINDOWS\exefnd
Status: 0xc0000034
Folder C:\WINDOWS\exefld not found!
Deletion of folder C:\WINDOWS\exefld failed!
Could not process line:
C:\WINDOWS\exefld
Status: 0xc0000034
Folder C:\WINDOWS\system32\drivers\down deleted successfully.
Registry key HKLM\SYSTEM\CurrentControlSet\Services\srosa deleted successfully.
Registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA deleted successfully.
Registry key HKLM\SYSTEM\CurrentControlSet\Services\pci32 not found!
Deletion of registry key HKLM\SYSTEM\CurrentControlSet\Services\pci32 failed!
Could not process line:
HKLM\SYSTEM\CurrentControlSet\Services\pci32
Status: 0xc0000034
Registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32 not found!
Deletion of registry key HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32 failed!
Could not process line:
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32
Status: 0xc0000034
Completed script processing.
*******************
Finished! Terminate.
p.s. il file che ho scaricato da emule era proprio lo screen di matrix e come ti ho detto l'ho scansionato con ben 4 programmi prima di aprirlo....
Adesso come mi devo comportare? Riesco ad installare un antivirus?