Punto informatico Network
Login Esegui login | Non sei registrato? Iscriviti ora (è gratuito!)
Username: Password:
  • Annuncio Pubblicitario

Stessi trojan della scorsa volta.....

Un virus si è intromesso nel tuo computer? Vuoi navigare in tutta sicurezza? Sono sicure le transazione online? Come impedire a malintenzionati di intromettersi nel tuo pc? Come proteggere i tuoi dati? Qui trovi le risposte a queste ed altre domande

Stessi trojan della scorsa volta.....

Messaggioda spitfire10 » mar feb 05, 2008 5:30 pm

....e come la scorsa volta, copio/incollo il report di kaspersky.
Grazie.


KASPERSKY ONLINE SCANNER REPORT
Tuesday, February 05, 2008 5:27:16 PM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 5/02/2008
Kaspersky Anti-Virus database records: 549581


Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true

Scan Target My Computer
A:\
C:\
D:\
E:\

Scan Statistics
Total number of scanned objects 36386
Number of viruses found 2
Number of infected objects 12
Number of suspicious objects 0
Duration of the scan process 01:44:24

Infected Object Name Virus Name Last Action
C:\avenger\backup.zip/avenger/apdproxy.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/GoogleToolbarNotifier.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/iTunesHelper.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/MSASCui.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/NeroCheck.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/QTTask.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/Reader_sl.exe Infected: Trojan.Win32.KillAV.oe skipped

C:\avenger\backup.zip/avenger/Temp/1012688563.exe Infected: Trojan.Win32.Dialer.abi skipped

C:\avenger\backup.zip/avenger/Temp/1273482500.exe Infected: Trojan.Win32.Dialer.abi skipped

C:\avenger\backup.zip/avenger/Temp/497116699.exe Infected: Trojan.Win32.Dialer.abi skipped

C:\avenger\backup.zip/avenger/Temp/599650015.exe Infected: Trojan.Win32.Dialer.abi skipped

C:\avenger\backup.zip ZIP: infected - 11 skipped

C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Windows Defender\Support\MPLog-01262008-161451.log Object is locked skipped

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\Common Client\settings.dat Object is locked skipped

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\HPPAppActivity.log Object is locked skipped

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\HPPHomePageActivity.log Object is locked skipped

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\LiveUpdate\2008-02-05_Log.ALUSchedulerSvc.LiveUpdate Object is locked skipped

C:\Documents and Settings\All Users\Dati applicazioni\Symantec\LiveUpdate\Log.LiveUpdate Object is locked skipped

C:\Documents and Settings\frastepat\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\frastepat\Dati applicazioni\Symantec\PendingAlertsQueue.log Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Dati applicazioni\ApplicationHistory\cli.exe.af01e8cc.ini.inuse Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Dati applicazioni\Microsoft\Feeds Cache\index.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Temp\Perflib_Perfdata_8a4.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Temp\Perflib_Perfdata_e44.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Temp\Perflib_Perfdata_e4c.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped

C:\Documents and Settings\frastepat\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\frastepat\ntuser.dat Object is locked skipped

C:\Documents and Settings\frastepat\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\LocalService\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped

C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped

C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped

C:\Documents and Settings\NetworkService\Impostazioni locali\Temp\MpCmdRun-1A-421CFC91-A93E-42AB-A35C-F06F127FCC44.lock Object is locked skipped

C:\Documents and Settings\NetworkService\Impostazioni locali\Temp\MpCmdRun.log Object is locked skipped

C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped

C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\CCPD-LC\symlcrst.dll Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\EENGINE\EPERSIST.DAT Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDALRT.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDCON.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDDBG.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDFW.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDIDS.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SNDSYS.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBConfig.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBDebug.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBDetect.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBNotify.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBRefr.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSetCfg.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSetCfg2.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSetDev.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSetLoc.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSetUsr.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSMNot.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSMReg.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBSMRSt.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBStHash.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBStMSI.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\BBValid.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\SPPolicy.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\SPStart.log Object is locked skipped

C:\Programmi\File comuni\Symantec Shared\SPBBC\LOGS\SPStop.log Object is locked skipped

C:\Programmi\Norton AntiVirus\AVApp.log Object is locked skipped

C:\Programmi\Norton AntiVirus\AVError.log Object is locked skipped

C:\Programmi\Norton AntiVirus\AVVirus.log Object is locked skipped

C:\Programmi\Norton AntiVirus\Savrt\0421NAV~.TMP Object is locked skipped

C:\Programmi\Norton AntiVirus\Savrt\0828NAV~.TMP Object is locked skipped

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume Information\_restore{771697BE-A273-43FC-88AF-B4AB7C72C69E}\RP6\change.log Object is locked skipped

C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped

C:\WINDOWS\SchedLgU.Txt Object is locked skipped

C:\WINDOWS\SoftwareDistribution\EventCache\{88BF4DF7-B44E-4897-A7E8-9E337723B315}.bin Object is locked skipped

C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped

C:\WINDOWS\Sti_Trace.log Object is locked skipped

C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped

C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\default Object is locked skipped

C:\WINDOWS\system32\config\default.LOG Object is locked skipped

C:\WINDOWS\system32\config\Internet.evt Object is locked skipped

C:\WINDOWS\system32\config\SAM Object is locked skipped

C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped

C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\SECURITY Object is locked skipped

C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped

C:\WINDOWS\system32\config\software Object is locked skipped

C:\WINDOWS\system32\config\software.LOG Object is locked skipped

C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped

C:\WINDOWS\system32\config\system Object is locked skipped

C:\WINDOWS\system32\config\system.LOG Object is locked skipped

C:\WINDOWS\system32\h323log.txt Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped

C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped

C:\WINDOWS\wiadebug.log Object is locked skipped

C:\WINDOWS\wiaservc.log Object is locked skipped

C:\WINDOWS\WindowsUpdate.log Object is locked skipped

Scan process completed.
Avatar utente
spitfire10
Senior Member
Senior Member
 
Messaggi: 307
Iscritto il: dom ott 07, 2007 5:26 pm
Località: GORIZIA

Messaggioda ste_95 » mar feb 05, 2008 5:41 pm

Ma quale dei due log è vero? Ne hai postati due completamente diversi... [...]
«A volte è meglio tacere e sembrare stupidi che aprir bocca e togliere ogni dubbio.» Oscar Wilde
Avatar utente
ste_95
Membro Ufficiale (Gold)
Membro Ufficiale (Gold)
 
Messaggi: 17271
Iscritto il: lun ago 06, 2007 11:19 am

Messaggioda spitfire10 » mar feb 05, 2008 6:08 pm

ste_95 ha scritto:Ma quale dei due log è vero? Ne hai postati due completamente diversi... [...]


Scusa ste_95, mi sono spiegato male, comunque il log vero è l'ultimo che ho postato, quello di data odierna.
Avatar utente
spitfire10
Senior Member
Senior Member
 
Messaggi: 307
Iscritto il: dom ott 07, 2007 5:26 pm
Località: GORIZIA

Messaggioda spitfire10 » mar feb 05, 2008 7:05 pm

spitfire10 ha scritto:
ste_95 ha scritto:Ma quale dei due log è vero? Ne hai postati due completamente diversi... [...]


Scusa ste_95, mi sono spiegato male, comunque il log vero è l'ultimo che ho postato, quello di data odierna.



Ho rimosso Norton 2006, anche se ho pagato, purtroppo, il rinnovo della licenza fino ad ottobre 2008, visto e considerato che è servito a poco, insomma 40 euro buttati..... ed ho installato una versione trial di Kaspersky, ho scansionato nuovamente il pc ed ho eliminato i trojan.
Almeno per un mese spero di non avere continuamente problemi !
Ciao.
Avatar utente
spitfire10
Senior Member
Senior Member
 
Messaggi: 307
Iscritto il: dom ott 07, 2007 5:26 pm
Località: GORIZIA


Torna a Sicurezza

Chi c’è in linea

Visitano il forum: Nessuno e 6 ospiti

Powered by phpBB © 2002, 2005, 2007, 2008 phpBB Group
Traduzione Italiana phpBB.it

megalab.it: testata telematica quotidiana registrata al Tribunale di Cosenza n. 22/09 del 13.08.2009, editore Master New Media S.r.l.; © Copyright 2008 Master New Media S.r.l. a socio unico - P.I. 02947530784. GRUPPO EDIZIONI MASTER Spa Tutti i diritti sono riservati. Per la pubblicità: Master Advertising