PDA

View Full Version : Kaspersky - si tratta di un virus??


diablo69
24-10-2006, 14:02
Avevo scaricato ed installato un programmino che mi installava una barra di ricerca e delle e-mail da poter inserire sui programmi di posta elettronica e su msn, si tratta di:

SmileyCentralPFSetup2.1.50.3-3.exe

Ma una volta installato, nella scansione fatta con Kaspersky, ho avuto questo risultato:

Protection
----------
Total scanned: 285638
Detected: 35
Untreated: 0
Attacks blocked: 0
Start time: 24/10/2006 10.30.31
Duration: 01.17.48


Detected
--------
Status Object
------ ------
not found: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File:
C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: explorer.exe\mwsoestb.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoemon.exe

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: MWSOEMON.EXE\mwsoestb.dll

not found: adware not-a-virus:AdWare.Win32.MyWebSearch Running module: avp.exe\mwsoestb.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Documents and Settings\xxx\Desktop\copiare su deskop\SmileyCentralPFSetup2.1.50.3-3.exe/mwsSetup.CommonCodebase.exe

deleted: Trojan program Trojan-Downloader.JS.Psyme.cg File: C:\Documents and Settings\xxx\Impostazioni locali\Temporary Internet Files\Content.IE5\4HUJG5YV\index[8].htm

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MSN Messenger\riched20.dll

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.al File: C:\Programmi\MyWebSearch\bar\1.bin\F3DTACTL.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HISTSW.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTMLMU.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.af File: C:\Programmi\MyWebSearch\bar\1.bin\F3HTTPCT.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3POPSWT.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3PSSAVR.SCR

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.v File: C:\Programmi\MyWebSearch\bar\1.bin\F3REPROX.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3RESTUB.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCHMON.EXE

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.an File: C:\Programmi\MyWebSearch\bar\1.bin\F3SCRCTR.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.aq File: C:\Programmi\MyWebSearch\bar\1.bin\F3SHLLVW.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\Programmi\MyWebSearch\bar\1.bin\F3WPHOOK.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.w File: C:\Programmi\MyWebSearch\bar\1.bin\M3HTML.DLL

deleted: adware not-a-virus:AdWare.Win32.IWon.a File: C:\Programmi\MyWebSearch\bar\1.bin\M3IDLE.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.as File: C:\Programmi\MyWebSearch\bar\1.bin\M3PLUGIN.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ad File: C:\Programmi\MyWebSearch\bar\1.bin\M3SKIN.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.ab File: C:\Programmi\MyWebSearch\bar\1.bin\MWSOEPLG.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch.i File: C:\Programmi\MyWebSearch\bar\1.bin\NPMYWEBS.DLL

deleted: adware not-a-virus:AdWare.Win32.MyWebSearch File: C:\WINDOWS\system32\f3PSSavr.scr



Backup
------
Status Object Size
------ ------ ----
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch MWSOEMON.EXE\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\mwsbar.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3wphook.dll 20 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\programmi\mywebsearch\bar\1.bin\m3plugin.dll 48 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ad c:\programmi\mywebsearch\bar\1.bin\m3skin.dll 112 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3popswt.dll 116 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.an c:\programmi\mywebsearch\bar\1.bin\f3scrctr.dll 284 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.al c:\programmi\mywebsearch\bar\1.bin\f3dtactl.dll 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3histsw.dll 244 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\bar\1.bin\f3shllvw.dll 140 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch explorer.exe\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.af c:\programmi\mywebsearch\bar\1.bin\f3httpct.dll 72 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.as c:\documents and settings\xxx\desktop\copiare su deskop\smileycentralpfsetup2.1.50.3-3.exe 1.4 MB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoestb.dll 40 KB
Infected: adware not-a-virus:AdWare.Win32.IWon.a c:\programmi\mywebsearch\bar\1.bin\m3idle.dll 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.ab c:\programmi\mywebsearch\bar\1.bin\mwsoeplg.dll 300 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSOESTB.DLL 40 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3restub.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.v c:\programmi\mywebsearch\bar\1.bin\f3reprox.dll 92 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.w c:\programmi\mywebsearch\bar\1.bin\m3html.dll 80 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch C:\PROGRAMMI\MYWEBSEARCH\BAR\1.BIN\M3OUTLCN.DLL 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.aq c:\programmi\mywebsearch\srchastt\1.bin\mwssrcas.dll 56 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3pssavr.scr 28 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3schmon.exe 64 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch.i c:\programmi\mywebsearch\bar\1.bin\npmywebs.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\mywebsearch\bar\1.bin\f3htmlmu.dll 120 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\programmi\msn messenger\riched20.dll 24 KB
Infected: adware not-a-virus:AdWare.Win32.MyWebSearch c:\windows\system32\f3pssavr.scr 28 KB
Infected: Trojan program Trojan-Downloader.JS.Psyme.cg c:\documents and settings\xxx\impostazioni locali\temporary internet files\content.ie5\4hujg5yv\index[8].htm 7 KB


Ma questo programma, contiene un virus oppure si tratta solo di uno spyware?? :eek: :eek:

Chi mi aiuta??

wgator
24-10-2006, 17:06
Ciao,

bè... MyWebSearch in effetti non è un virus è un AdWare/Spyware... Kaspersky ha fatto bene il suo dovere infatti te l'ha segnalato come "not-a-virus"

A te la scelta: o lo rimuovi (consigliato) o lo metti tra le eccezioni dell'antivirus. Io però quel "coso" sul mio pc non ce lo vorrei :ciapet:

juninho85
24-10-2006, 22:23
A te la scelta: o lo rimuovi (consigliato) o lo metti tra le eccezioni dell'antivirus. Io però quel "coso" sul mio pc non ce lo vorrei :ciapet:
anche perchè si setta senza chiedere consensi come motore di ricerca predefinito,homepage predefinata e in ogni caso reindirizza tutte le ricerche...non male :D

diablo69
24-10-2006, 23:23
anche perchè si setta senza chiedere consensi come motore di ricerca predefinito,homepage predefinata e in ogni caso reindirizza tutte le ricerche...non male :D

L'avevo installata per utilizzare gli smiles che sono davvero belli per il mio sito internet, comunque la home page predefinita rimaneva quella che avevo impostato e le ricerche le facevo con google senza utilizzare la barra di ricerca di mysearch.. :)

juninho85
24-10-2006, 23:28
L'avevo installata per utilizzare gli smiles che sono davvero belli per il mio sito internet, comunque la home page predefinita rimaneva quella che avevo impostato e le ricerche le facevo con google senza utilizzare la barra di ricerca di mysearch.. :)
per predefinita intendo non quella che hai impostato te,ma quella che dovresti trovare a sistema operativo appena installato....io la presi un annetto fa e capitò così