PDA

View Full Version : [infezione] aiuto il pc dell'azienda


GiacoXp
26-10-2006, 19:38
ragazzi ho un grosso problema il pc dell'azienda su cui c'è avast oggi ha cominciato a dire


26/10/2006 17.45.45 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\system32\NOTEPAD.EXE" file.
26/10/2006 17.46.33 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\system32\dllcache\notepad.exe" file.
26/10/2006 17.47.19 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\system32\notepad.exe" file.
26/10/2006 17.47.25 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\system32\notepad.exe" file.
26/10/2006 17.48.17 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\system32\notepad.exe" file.
26/10/2006 17.48.23 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\system32\notepad.exe" file.
26/10/2006 17.48.26 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\windows2\system32\SET2B5.tmp" file.
26/10/2006 17.48.30 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\system32\notepad.exe" file.
26/10/2006 18.15.29 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\notepad.exe" file.
26/10/2006 18.54.36 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\system32\dllcache\notepad.exe" file.
26/10/2006 18.55.03 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\notepad.exe" file.
26/10/2006 18.55.08 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\notepad.exe" file.
26/10/2006 18.55.18 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\system32\dllcache\notepad.exe" file.
26/10/2006 18.55.19 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\system32\dllcache\notepad.exe" file.
26/10/2006 18.55.27 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\notepad.exe" file.
26/10/2006 18.55.43 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\notepad.exe" file.
26/10/2006 18.56.16 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\notepad.exe" file.
26/10/2006 18.56.17 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\WINDOWS2\notepad.exe" file.
26/10/2006 18.56.29 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "C:\windows2\SETA23.tmp" file.
26/10/2006 18.56.39 SYSTEM 1584 Sign of "Win32:Qqpass-DY [Trj]" has been found in "c:\windows2\notepad.exe" file.




X PIU' volte nonstante io gli dicessi di eliminarlo e vuotassi il cestino.

Questo pc è acceso giorno e notte ha come antiviurs avast e come firewall quello di windows.

ora io sono l'unico che lo usa e ho installato spybot che tutti i giorni durante la notte fa il suo aggiornamento e la sua scansione e anche stamattina non aveva trovato nulla.

ora mi chiedo come ha fatto a finire nel mio pc quel virus e cosa puo aver provocato.

cm faccio ad assicurarmi che tutto funzioni ??

AIUTATEMI
grazie

mister pink
26-10-2006, 19:53
http://www.hwupgrade.it/forum/showthread.php?t=1317939

GiacoXp
26-10-2006, 20:03
ho visto proprio ora grazie ora mi unisco


potete chiudere

CyberGigi
26-10-2006, 22:21
Grandissimo questo forum.
In meno di un ora il caso è stato risolto.
Solo un piccolo dubbio, quando cancello il file notepad.exe da system32 quando torno nella cartella lo ritrovo al suo posto.
E' normale?

Ops... scusate sbagliato post.