Individuato trojan! Che faccio?

[arcofreccia]

Ciao, avira mi ha trovato un trojan, in questi casi oltre la scansione con l'antivirus cosa è consigliato fare?

[wjmat]

ciao
ci carichi un log/report di antivir

[arcofreccia]

Version information:
BUILD.DAT : 8.1.0.331 16934 Bytes 12/08/2008 11:46:00
AVSCAN.EXE : 8.1.4.7 315649 Bytes 26/07/2008 18:03:47
AVSCAN.DLL : 8.1.4.0 40705 Bytes 26/07/2008 18:03:47
LUKE.DLL : 8.1.4.5 164097 Bytes 26/07/2008 18:03:47
LUKERES.DLL : 8.1.4.0 12033 Bytes 26/07/2008 18:03:47
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 20:36:17
ANTIVIR1.VDF : 7.0.5.1 8182784 Bytes 24/06/2008 18:35:50
ANTIVIR2.VDF : 7.0.7.12 4066816 Bytes 08/10/2008 12:35:14
ANTIVIR3.VDF : 7.0.7.25 105984 Bytes 10/10/2008 12:23:39
Engineversion : 8.1.1.35
AEVDF.DLL : 8.1.0.5 102772 Bytes 15/04/2008 11:32:42
AESCRIPT.DLL : 8.1.0.76 319867 Bytes 19/09/2008 19:08:38
AESCN.DLL : 8.1.0.23 119156 Bytes 26/07/2008 18:03:48
AERDL.DLL : 8.1.1.2 438644 Bytes 19/09/2008 19:08:37
AEPACK.DLL : 8.1.2.3 364918 Bytes 25/09/2008 19:22:38
AEOFFICE.DLL : 8.1.0.25 196986 Bytes 19/09/2008 19:08:36
AEHEUR.DLL : 8.1.0.59 1438071 Bytes 19/09/2008 19:08:34
AEHELP.DLL : 8.1.0.15 115063 Bytes 30/05/2008 11:13:00
AEGEN.DLL : 8.1.0.36 315764 Bytes 19/08/2008 08:20:17
AEEMU.DLL : 8.1.0.7 430452 Bytes 31/07/2008 18:45:46
AECORE.DLL : 8.1.1.11 172406 Bytes 04/09/2008 18:32:46
AEBB.DLL : 8.1.0.1 53617 Bytes 26/07/2008 18:03:48
AVWINLL.DLL : 1.0.0.12 15105 Bytes 26/07/2008 18:03:47
AVPREF.DLL : 8.0.2.0 38657 Bytes 26/07/2008 18:03:47
AVREP.DLL : 8.0.0.2 98344 Bytes 31/07/2008 18:45:43
AVREG.DLL : 8.0.0.1 33537 Bytes 26/07/2008 18:03:47
AVARKT.DLL : 1.0.0.23 307457 Bytes 15/04/2008 11:32:41
AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 26/07/2008 18:03:47
SQLITE3.DLL : 3.3.17.1 339968 Bytes 15/04/2008 11:32:41
SMTPLIB.DLL : 1.2.0.23 28929 Bytes 26/07/2008 18:03:48
NETNT.DLL : 8.0.0.1 7937 Bytes 15/04/2008 11:32:41
RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 26/07/2008 18:03:44
RCTEXT.DLL : 8.0.52.0 86273 Bytes 26/07/2008 18:03:44

Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: d:\programmi\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:, D:,
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: venerdì 10 ottobre 2008 15:55

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'usnsvc.exe' - '1' Module(s) have been scanned
Scan process 'msnmsgr.exe' - '1' Module(s) have been scanned
Scan process 'COCIManager.exe' - '1' Module(s) have been scanned
Scan process 'mpbtn.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'NMIndexingService.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'PCLEScheduler.exe' - '1' Module(s) have been scanned
Scan process 'LGSyncManager.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'msmsgs.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'Quickcam.exe' - '1' Module(s) have been scanned
Scan process 'Communications_Helper.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'LVComSer.exe' - '1' Module(s) have been scanned
Scan process 'MotiveSB.exe' - '1' Module(s) have been scanned
Scan process 'ADeck.exe' - '1' Module(s) have been scanned
Scan process 'CALMAIN.exe' - '1' Module(s) have been scanned
Scan process 'WZCSLDR2.exe' - '1' Module(s) have been scanned
Scan process 'AirPlusCFG.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'WanMiniport1st_srv.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'srvany.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'LVComSer.exe' - '1' Module(s) have been scanned
Scan process 'AGRSMMSG.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'a2service.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
55 processes with 55 modules were scanned

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'D:\'
[INFO] No virus was found!

Starting to scan the registry.
The registry was scanned ( '69' files ).


Starting the file scan:

Begin scan in 'C:\'
Begin scan in 'D:\'
D:\hiberfil.sys
[WARNING] The file could not be opened!


End of the scan: venerdì 10 ottobre 2008 16:56
Used time: 1:01:04 Hour(s)

The scan has been done completely.

7821 Scanning directories
403950 Files were scanned
0 viruses and/or unwanted programs were found
0 Files were classified as suspicious:
0 files were deleted
0 files were repaired
0 files were moved to quarantine
0 files were renamed
1 Files cannot be scanned
403949 Files not concerned
3046 Archives were scanned
1 Warnings
0 Notes

[wjmat]

mi sembra pulito

[arcofreccia]

eppure mi aveva dato tre avvisi di trojan. vabbè meglio cosi dai;)

[wjmat]

se vuoi fare una scansione approfondita per toglierti ogni dubbio segui la guida alla disinfezione e ci carichi i log secondo le modalità

[xcdegasp]

ma legegre le regole di sezione è troppo difficile? :mbe: