diablo69
24-10-2006, 14:02
Avevo scaricato ed installato un programmino che mi installava una barra di ricerca e delle e-mail da poter inserire sui programmi di posta elettronica e su msn, si tratta di:
SmileyCentralPFSetup2.1.50.3-3.exe
Ma una volta installato, nella scansione fatta con Kaspersky, ho avuto questo risultato:
Protection
----------
Total scanned: 285638
Detected: 35
Untreated: 0
Attacks blocked: 0
Start time: 24/10/2006 10.30.31
Duration: 01.17.48
Detected
--------
Status Object
------ ------
not found: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File:
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Documents and Settings\xxx\Desktop\copiare su deskop\SmileyCentralPFSetup2.1.50.3-3.exe/mwsSetup.CommonCodebase.exe
deleted: Trojan program Trojan-Downloader.JS.Psyme.cg File: C:\Documents and Settings\xxx\Impostazioni locali\Temporary Internet Files\Content.IE5\4HUJG5YV\index[8].htm
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MSN Messenger\riched20.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.al File: C:\Programmi\MyWebSearch\bar\1.bin\F3DTACTL.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HISTSW.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.af File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3POPSWT.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.v File: C:\Programmi\MyWebSearch\bar\1.bin\F3REPROX.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3RESTUB.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCHMON.EXE
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: C:\Programmi\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.w File: C:\Programmi\MyWebSearch\bar\1.bin\M3HTML.DLL
deleted: adware not-a-virus:AdWare.Win32.IWon.a File: C:\Programmi\MyWebSearch\bar\1.bin\M3IDLE.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Programmi\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ad File: C:\Programmi\MyWebSearch\bar\1.bin\M3SKIN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ab File: C:\Programmi\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.i File: C:\Programmi\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\WINDOWS\system32\f3PSSavr.scr
Backup
------
Status Object Size
------ ------ ----
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch MWSOEMON.EXE\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3wphook.dll 20 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\programmi\mywebsearch\bar\1.bin\m3plugin.dll 48 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ad c:\programmi\mywebsearch\bar\1.bin\m3skin.dll 112 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3popswt.dll 116 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3scrctr.dll 284 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.al c:\programmi\mywebsearch\bar\1.bin\f3dtactl.dll 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3histsw.dll 244 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\bar\1.bin\f3shllvw.dll 140 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch explorer.exe\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.af c:\programmi\mywebsearch\bar\1.bin\f3httpct.dll 72 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\documents and settings\xxx\desktop\copiare su deskop\smileycentralpfsetup2.1.50.3-3.exe 1.4 MB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.IWon.a c:\programmi\mywebsearch\bar\1.bin\m3idle.dll 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ab c:\programmi\mywebsearch\bar\1.bin\mwsoeplg.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSOESTB.DLL 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3restub.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.v c:\programmi\mywebsearch\bar\1.bin\f3reprox.dll 92 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.w c:\programmi\mywebsearch\bar\1.bin\m3html.dll 80 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3pssavr.scr 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3schmon.exe 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.i c:\programmi\mywebsearch\bar\1.bin\npmywebs.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3htmlmu.dll 120 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\msn messenger\riched20.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\windows\system32\f3pssavr.scr 28 KB
Infected: Trojan program Trojan-Downloader.JS.Psyme.cg c:\documents and settings\xxx\impostazioni locali\temporary internet files\content.ie5\4hujg5yv\index[8].htm 7 KB
Ma questo programma, contiene un virus oppure si tratta solo di uno spyware?? :eek: :eek:
Chi mi aiuta??
SmileyCentralPFSetup2.1.50.3-3.exe
Ma una volta installato, nella scansione fatta con Kaspersky, ho avuto questo risultato:
Protection
----------
Total scanned: 285638
Detected: 35
Untreated: 0
Attacks blocked: 0
Start time: 24/10/2006 10.30.31
Duration: 01.17.48
Detected
--------
Status Object
------ ------
not found: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File:
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll
not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Documents and Settings\xxx\Desktop\copiare su deskop\SmileyCentralPFSetup2.1.50.3-3.exe/mwsSetup.CommonCodebase.exe
deleted: Trojan program Trojan-Downloader.JS.Psyme.cg File: C:\Documents and Settings\xxx\Impostazioni locali\Temporary Internet Files\Content.IE5\4HUJG5YV\index[8].htm
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MSN Messenger\riched20.dll
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.al File: C:\Programmi\MyWebSearch\bar\1.bin\F3DTACTL.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HISTSW.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTMLMU.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.af File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTTPCT.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3POPSWT.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3PSSAVR.SCR
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.v File: C:\Programmi\MyWebSearch\bar\1.bin\F3REPROX.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3RESTUB.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCHMON.EXE
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: C:\Programmi\MyWebSearch\bar\1.bin\F3SHLLVW.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3WPHOOK.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.w File: C:\Programmi\MyWebSearch\bar\1.bin\M3HTML.DLL
deleted: adware not-a-virus:AdWare.Win32.IWon.a File: C:\Programmi\MyWebSearch\bar\1.bin\M3IDLE.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Programmi\MyWebSearch\bar\1.bin\M3PLUGIN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ad File: C:\Programmi\MyWebSearch\bar\1.bin\M3SKIN.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ab File: C:\Programmi\MyWebSearch\bar\1.bin\MWSOEPLG.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.i File: C:\Programmi\MyWebSearch\bar\1.bin\NPMYWEBS.DLL
deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\WINDOWS\system32\f3PSSavr.scr
Backup
------
Status Object Size
------ ------ ----
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch MWSOEMON.EXE\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3wphook.dll 20 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\programmi\mywebsearch\bar\1.bin\m3plugin.dll 48 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ad c:\programmi\mywebsearch\bar\1.bin\m3skin.dll 112 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3popswt.dll 116 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3scrctr.dll 284 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.al c:\programmi\mywebsearch\bar\1.bin\f3dtactl.dll 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3histsw.dll 244 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\bar\1.bin\f3shllvw.dll 140 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch explorer.exe\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.af c:\programmi\mywebsearch\bar\1.bin\f3httpct.dll 72 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\documents and settings\xxx\desktop\copiare su deskop\smileycentralpfsetup2.1.50.3-3.exe 1.4 MB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.IWon.a c:\programmi\mywebsearch\bar\1.bin\m3idle.dll 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ab c:\programmi\mywebsearch\bar\1.bin\mwsoeplg.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSOESTB.DLL 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3restub.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.v c:\programmi\mywebsearch\bar\1.bin\f3reprox.dll 92 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.w c:\programmi\mywebsearch\bar\1.bin\m3html.dll 80 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3pssavr.scr 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3schmon.exe 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.i c:\programmi\mywebsearch\bar\1.bin\npmywebs.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3htmlmu.dll 120 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\msn messenger\riched20.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\windows\system32\f3pssavr.scr 28 KB
Infected: Trojan program Trojan-Downloader.JS.Psyme.cg c:\documents and settings\xxx\impostazioni locali\temporary internet files\content.ie5\4hujg5yv\index[8].htm 7 KB
Ma questo programma, contiene un virus oppure si tratta solo di uno spyware?? :eek: :eek:
Chi mi aiuta??