Aiuto, il mio PC è infetto Tro...n (1 Viewer)

AbdulAzizalSaud

Guest
Salve da ieri sera avira mi segnala questo Tro...n,è un falso positivo?

Exported events:

23/09/2009 21.50 [Guard] Malware found
Virus or unwanted program 'TR/Spy.Gen [trojan]'
detected in file 'C:\program files\common files\Akamai\rswin_3586.dll.
Action performed: Deny access

Avira AntiVir Personal
Report file date: giovedì 24 settembre 2009 19:23

Scanning for 1743900 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows Vista
Windows version : (Service Pack 2) [6.0.6002]
Boot mode : Normally booted
Username : PrinceFelipe
Computer name : PC-PrinceFelipe

Version information:
BUILD.DAT : 9.0.0.408 Bytes 26/08/2009 16:51:00
AVSCAN.EXE : 9.0.3.7 466689 Bytes 21/07/2009 12:36:14
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/2009 09:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/2009 10:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/2009 09:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/2008 11:30:36
ANTIVIR1.VDF : 7.1.4.132 5707264 Bytes 24/06/2009 08:21:42
ANTIVIR2.VDF : 7.1.6.1 3857920 Bytes 16/09/2009 19:34:12
ANTIVIR3.VDF : 7.1.6.29 357888 Bytes 23/09/2009 19:52:41
Engineversion : 8.2.1.23
AEVDF.DLL : 8.1.1.2 106867 Bytes 18/09/2009 19:35:06
AESCRIPT.DLL : 8.1.2.33 479611 Bytes 22/09/2009 08:23:09
AESCN.DLL : 8.1.2.5 127346 Bytes 18/09/2009 19:35:00
AERDL.DLL : 8.1.2.4 430452 Bytes 23/07/2009 08:59:39
AEPACK.DLL : 8.2.0.0 422261 Bytes 18/09/2009 19:34:58
AEOFFICE.DLL : 8.1.0.38 196987 Bytes 23/07/2009 08:59:39
AEHEUR.DLL : 8.1.0.155 1921400 Bytes 18/09/2009 19:34:54
AEHELP.DLL : 8.1.7.0 237940 Bytes 18/09/2009 19:34:35
AEGEN.DLL : 8.1.1.63 364916 Bytes 18/09/2009 19:34:31
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/2008 13:32:40
AECORE.DLL : 8.1.8.1 184693 Bytes 18/09/2009 19:34:21
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/2008 13:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 07:47:59
AVPREF.DLL : 9.0.3.0 44289 Bytes 19/09/2009 10:00:34
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/2009 13:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/2008 09:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 24/03/2009 14:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/2009 09:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/2009 14:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/2009 07:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/2008 09:32:10
RCIMAGE.DLL : 9.0.0.25 2438913 Bytes 15/05/2009 14:39:58
RCTEXT.DLL : 9.0.37.0 86785 Bytes 17/04/2009 09:19:48

Configuration settings for the scan:
Jobname.............................: ShlExt
Configuration file..................: C:\Users\Prince~1\AppData\Local\Temp\ee7c966b.avp
Logging.............................: low
Primary action......................: quarantine
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:,
Process scan........................: off
Scan registry.......................: off
Search for rootkits.................: off
Integrity checking of system files..: off
Optimised scan......................: on
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Deviating archive types.............: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: giovedì 24 settembre 2009 19:23

Starting the file scan:

Begin scan in 'C:\Users\Prince\Program Files'


End of the scan: giovedì 24 settembre 2009 19:23
Used time: 00:00 Minute(s)

The scan has been done completely.

3 Scanned directories
6 Files were scanned
0 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
0 Files were moved to quarantine
0 Files were renamed
0 Files cannot be scanned
6 Files not concerned
0 Archives were scanned
0 Warnings
0 Notes

Voi cosa dite?
P.s E possibile cancellare alcune chiavi di registro che mi sono rimaste dalla disinstallazione di programmi da Regedit?
 

AbdulAzizalSaud

Guest
1253814643nontrovato.jpg
1253814603aviratroianguard.jpg
 

AbdulAzizalSaud

Guest
Goofy ha scritto:
hai fatto una scansione con malwarebytes?
Clicca per allargare...
Ciao Goofy si la stò facendo ora.Posso dirti che Florensia era un mmorpg che avevo scaricato 1 anno fà,che poi hò cancellato perchè non mi piaceva,e ad agosto hò dovuto reinstallare il pc portandolo nel centro commerciale dove l'hò acquistato perchè non avevo il cd di ripristino,quindi il file Akamai Florensia non c'è anche dallo screen.
 

AbdulAzizalSaud

Guest
Ecco il risultato di malawarebyte's.

Malwarebytes' Anti-Malware 1.41
Versione del database: 2855
Windows 6.0.6002 Service Pack 2

24/09/2009 20.30.41
mbam-log-2009-09-24 (20-30-41).txt

Tipo di scansione: Scansione completa (C:\|)
Elementi scansionati: 237376
Tempo trascorso: 2 hour(s), 14 minute(s), 52 second(s)

Processi delle memoria infetti: 0
Moduli della memoria infetti: 0
Chiavi di registro infette: 0
Valori di registro infetti: 0
Elementi dato del registro infetti: 0
Cartelle infette: 0
File infetti: 0

Processi delle memoria infetti:
(Nessun elemento malevolo rilevato)

Moduli della memoria infetti:
(Nessun elemento malevolo rilevato)

Chiavi di registro infette:
(Nessun elemento malevolo rilevato)

Valori di registro infetti:
(Nessun elemento malevolo rilevato)

Elementi dato del registro infetti:
(Nessun elemento malevolo rilevato)

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
(Nessun elemento malevolo rilevato)

La scansione nn è stat fatta in modalita provvsoria.
 
Goofy

Goofy

Moderator
vedi nel path indicato dall'antivirus


c:\program files\........


non fare cerca...usa un file manager

hai impostato il file manager in modo da poter vedere i file di sistema ?
 

AbdulAzizalSaud

Guest
Goofy ha scritto:
forse non lo trovi perchè hai detto all'antivirus di cancellarlo, per caso?

guarda i report di avira
Clicca per allargare...

No!

Avira AntiVir Personal - Free Antivirus Updater

Creation time: Thu Sep 24 19:44:14 2009


Operating system:
Windows Vista (Service Pack 2) [6.0.6002]

Product information:
Product version: 9.0.0.408
Updater: C:\Program Files\Avira\AntiVir Desktop\update.exe 9.0.0.52
Plugin: C:\Program Files\Avira\AntiVir Desktop\updext.dll 9.0.0.6

Temp Directory: C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\
Backup folder: C:\ProgramData\Avira\AntiVir Desktop\BACKUP\
Installation Directory: C:\Program Files\Avira\AntiVir Desktop\
Updater folder: C:\Program Files\Avira\AntiVir Desktop\
AppData folder: C:\ProgramData\Avira\AntiVir Desktop\


[UPD] [INFO] Checking whether newer files are available.
[UPD] [INFO] Select update server 'http://[2a01:138:a001:201::23]/update'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/master.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\master.idx'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/wks_avira-win32-en-pecl.idx' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\wks_avira-win32-en-pecl.idx'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/wks_avira-win32-en-pecl.info.gz' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\wks_avira-win32-en-pecl.info.gz'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/vdf.info.gz' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\vdf.info.gz'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/ave2-win32-int.info.gz' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\ave2-win32-int.info.gz'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/specvir-win32-int.info.gz' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\specvir-win32-int.info.gz'.
[UPD] [INFO] Downloading of 'http://[2a01:138:a001:201::23]/update/idx/wks_avira-win32-en-pecl-info.info.gz' to 'C:\ProgramData\Avira\AntiVir Desktop\TEMP\UPDATE\idx\wks_avira-win32-en-pecl-info.info.gz'.
[UPD] [INFO] Compare local files with status of update server
[UPD] [INFO] Checking module SELFUPDATE:
[UPD] [INFO] Checking module VDF:
[UPD] [INFO] File 'vdf/antivir3.vdf' (local, server): 7.1.6.29 < 7.1.6.35
[UPD] [INFO] Checking module AVE2:
 
You must log in or register to reply here.

Users who are viewing this thread

Total: 2 (members: 0, guests: 2)
Alto