gabrielilrabbino
05-01-2010, 15:58
Ciao ragazzi anche io credo di avere questo virus,beagle.
se provo ad avviare "avira" mi esce la schermata blu e si riavvia il pc,ho provato ad installare avast e funziona ma solo se lo apro manualmente,non si avvia da solo. ho provato con findykill ben 2 volte ma nulla,con cclean,ad-aware,elibagla, ma nulla,l'antivirus non va,e mi si aprono finestre con IE, non so più che fare aiutatemi :( vi posto il log di findykill perchè hijackthis non me lo apre.
############################## | FindyKill V5.023 |
# User : Gabriel (Administrators) # PC-GABRIEL
# Update on 31/12/2009 by El Desaparecido
# Start at: 23.30.04 | 04/01/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : [email protected]
# Intel(R) Core(TM)2 Duo CPU T7700 @ 2.40GHz
# Microsoft® Windows Vista™ Home Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 7.0.6002.18005
# Windows Firewall Status : Enabled
# C:\ # Disco rigido locale # 116,44 Go (51,75 Go free) [VistaOS] # NTFS
# D:\ # Disco rigido locale # 109,6 Go (41,52 Go free) [DATA] # NTFS
# E:\ # Disco CD-ROM
# F:\ # Disco CD-ROM
############################## | Active Processes |
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
c:\xampp\apache\bin\httpd.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\xampp\mysql\bin\mysqld.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\xampp\apache\bin\httpd.exe
C:\Windows\system32\conime.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANOTIF.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## | C: |
################## | C:\Windows |
################## | C:\Windows\system32 |
################## | C:\Windows\system32\drivers |
################## | C:\Users\Gabriel\AppData\Roaming |
################## | Temporary Internet Files |
################## | Registry / Infected keys |
################## | State / Service / Information |
# Showing of hidden files : OK
# Safe boot mode : OK
# Uac : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )
se provo ad avviare "avira" mi esce la schermata blu e si riavvia il pc,ho provato ad installare avast e funziona ma solo se lo apro manualmente,non si avvia da solo. ho provato con findykill ben 2 volte ma nulla,con cclean,ad-aware,elibagla, ma nulla,l'antivirus non va,e mi si aprono finestre con IE, non so più che fare aiutatemi :( vi posto il log di findykill perchè hijackthis non me lo apre.
############################## | FindyKill V5.023 |
# User : Gabriel (Administrators) # PC-GABRIEL
# Update on 31/12/2009 by El Desaparecido
# Start at: 23.30.04 | 04/01/2010
# Website : http://pagesperso-orange.fr/NosTools/index.html
# Contact : [email protected]
# Intel(R) Core(TM)2 Duo CPU T7700 @ 2.40GHz
# Microsoft® Windows Vista™ Home Premium (6.0.6002 32-bit) # Service Pack 2
# Internet Explorer 7.0.6002.18005
# Windows Firewall Status : Enabled
# C:\ # Disco rigido locale # 116,44 Go (51,75 Go free) [VistaOS] # NTFS
# D:\ # Disco rigido locale # 109,6 Go (41,52 Go free) [DATA] # NTFS
# E:\ # Disco CD-ROM
# F:\ # Disco CD-ROM
############################## | Active Processes |
C:\Windows\System32\smss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\csrss.exe
C:\Windows\system32\wininit.exe
C:\Windows\system32\winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ASUS\ASUS Data Security Manager\ADSMSrv.exe
C:\Program Files\ATK Hotkey\ASLDRSrv.exe
C:\Program Files\ATKGFNEX\GFNEXSrv.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\ATK Hotkey\Hcontrol.exe
C:\Program Files\ATKOSD2\ATKOSD2.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\ASUS\Splendid\ACMON.exe
C:\Program Files\P4G\BatteryLife.exe
C:\Windows\System32\ACEngSvr.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\ATK Hotkey\ATKOSD.exe
c:\xampp\apache\bin\httpd.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ATK Hotkey\KBFiltr.exe
C:\Windows\system32\svchost.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\xampp\mysql\bin\mysqld.exe
C:\Windows\system32\IoctlSvc.exe
C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe
C:\xampp\apache\bin\httpd.exe
C:\Windows\system32\conime.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAANOTIF.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\wmiprvse.exe
################## | C: |
################## | C:\Windows |
################## | C:\Windows\system32 |
################## | C:\Windows\system32\drivers |
################## | C:\Users\Gabriel\AppData\Roaming |
################## | Temporary Internet Files |
################## | Registry / Infected keys |
################## | State / Service / Information |
# Showing of hidden files : OK
# Safe boot mode : OK
# Uac : OK
# Ndisuio -> Start = 3 ( Good = 3 | Bad = 4 )
# EapHost -> Start = 2 ( Good = 2 | Bad = 4 )
# Wlansvc -> Start = 2 ( Good = 2 | Bad = 4 )
# SharedAccess -> Start = 2 ( Good = 2 | Bad = 4 )
# windefend -> Start = 2 ( Good = 2 | Bad = 4 )
# wuauserv -> Start = 2 ( Good = 2 | Bad = 4 )
# (!) wscsvc -> Start = 4 ( Good = 2 | Bad = 4 )