dropper...

[sirjoe]

Salve a tutti e scusate l'inesperienza (è la prima!).
Antivir riconosce ma non elimina nè rimuove il file ssqpm.dll che sarebbe il dropper DR/Falastit.2. Nemmeno in modalità provvisoria ci sono riuscito e nemmeno AdAware.Che fare? Grazie ed ancora auguri a tutti

[andorra24]

Ciao, prova con ewido: http://download.ewido.net/ewido-setup.exe
e disattiva il ripristino di sistema.

[sirjoe]

Ewido non lo ha proprio visto,mentre Antivir continua a segnalarlo e Lui continua imperterrito a rompere...

[SkunkWorks 68]

Ewido non lo ha proprio visto,mentre Antivir continua a segnalarlo e Lui continua imperterrito a rompere...
Prova a postare un log di Hijackthis...vedi thread ufficiale in evidenza sopra(posta lì il log).
Ciao

[giacomo_uncino]

cercando ho trovato questo per rimuovere ssqpm.dll

http://www.dslreports.com/forum/remark,14795325?hilite=vundofix

"Make a copy of these instructions so that you have them handy as the next steps require you to be in safe mode and offline.

1. Please download vundofix by Atribune from here:

www.atribune.org/downloads/vundofix.exe

Save it to your desktop
Double-click vundofix.exe to extract the files
This will create a folder named vundofix on your desktop.

2. After the files are extracted, please reboot your computer into Safe Mode. You can do this by restarting your computer and continually tapping the F8 key until a menu appears. Use your up arrow key to highlight Safe Mode then hit enter.

3. Once in safe mode open the vundofix folder and doubleclick on KillVundo.bat

4. You will first be presented with a warning.
It should look like this

quote:vundofix V2.15 by Atri
By using vundofix you agree that you are doing so at your own risk.
Press enter to continue....

5. At this point press enter one time.
Next you will see:

quote:Please Type in the filepath as instructed by the forum staff
and then press enter:

At this point please copy and paste in the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\ssqpm.dll

6. Press *Enter*to continue with the fix.

7. Next you will see:

quote:Please type in the second file path as instructed by the forum
staff then press enter:

At this point please copy and paste in the following file path (make sure to enter it exactly as below!):

C:\WINDOWS\system32\mpqss.*

8. Press *Enter* to continue with the fix.
The fix will run then HijackThis will open, if it does not open automatically please open it manually.

9. Scan with HijackThis, and place a checkmark next to the following items and click *FIX CHECKED* button

O2 - BHO: MSEvents Object - {FC148228-87E1-4D00-AC06-58DCAA52A4D1} - C:\WINDOWS\system32\ssqpm.dll

O20 - Winlogon Notify: awvvt - C:\WINDOWS\system32\awvvt.dll (file missing)

O20 - Winlogon Notify: ssqpm - C:\WINDOWS\system32\ssqpm.dll

After you have fixed these items, close Hijackthis.

10. Press enter to exit the program then manually reboot your computer.

11. Once your machine reboots please Scan once more with HijackThis and post a fresh HJTlog.
and the vundofix.txt file from the vundofix folder into this topic

12. Go to Panda ActiveScan and do a complete system scan

Panda's Active Scan
»www.pandasoftware.com/products/a···scan.htm

Save the report and copy it back here, along with the Vundo.txt and a fresh HijackThis log"

comunque il vundofix lo trovi qui http://www.atribune.org/downloads/VundoFix.exe mentre questa è la sua homepage http://www.atribune.org/ e qui il forum di supporto http://www.atribune.org/forums/VundoFix-t1346.html