| 
 | |||||||
| 
 | 
|  | 
|  | 
|  | Strumenti | 
|  20-03-2009, 14:02 | #1 | 
| Member Iscritto dal: Jun 2005 
					Messaggi: 47
				 | 
				
				Potete dare un'occhiata a questo log???? HELP ME!
			 
		Salve a tutti! Ho fatto una scansione con avira antivir personal edition e ho salvato il file di log perchè ho notato qualcosa di strano... premetto che avevo già seguito la guida alla disinfezione... e tutti i problemi trovati erano stati eliminati! ma ancora qualcosa non va! vi posto il log: Codice: 
Avira AntiVir Personal
Report file date: venerdì 20 marzo 2009  10:54
Scanning for 1308885 virus strains and unwanted programs.
Licensee        : Avira AntiVir Personal - FREE Antivirus
Serial number   : 0000149996-ADJIE-0000001
Platform        : Windows XP
Windows version : (Service Pack 3)  [5.1.2600]
Boot mode       : Normally booted
Username        : SYSTEM
Computer name   : DJKAMMAC-EC6D31
Version information:
BUILD.DAT       : 9.0.0.386     17962 Bytes  11/03/2009 15:55:00
AVSCAN.EXE      : 9.0.3.3      464641 Bytes  24/02/2009 11:13:26
AVSCAN.DLL      : 9.0.3.0       40705 Bytes  27/02/2009 09:58:24
LUKE.DLL        : 9.0.3.2      209665 Bytes  20/02/2009 10:35:49
LUKERES.DLL     : 9.0.2.0       12033 Bytes  27/02/2009 09:58:52
ANTIVIR0.VDF    : 7.1.0.0    15603712 Bytes  27/10/2008 11:30:36
ANTIVIR1.VDF    : 7.1.2.12    3336192 Bytes  11/02/2009 19:33:26
ANTIVIR2.VDF    : 7.1.2.152    749568 Bytes  11/03/2009 09:51:15
ANTIVIR3.VDF    : 7.1.2.193    243712 Bytes  20/03/2009 09:51:16
Engineversion   : 8.2.0.120
AEVDF.DLL       : 8.1.1.0      106868 Bytes  27/01/2009 16:36:42
AESCRIPT.DLL    : 8.1.1.67     364923 Bytes  20/03/2009 09:51:21
AESCN.DLL       : 8.1.1.8      127346 Bytes  20/03/2009 09:51:20
AERDL.DLL       : 8.1.1.3      438645 Bytes  29/10/2008 17:24:41
AEPACK.DLL      : 8.1.3.10     397686 Bytes  04/03/2009 12:06:10
AEOFFICE.DLL    : 8.1.0.36     196987 Bytes  26/02/2009 19:01:56
AEHEUR.DLL      : 8.1.0.107   1663352 Bytes  20/03/2009 09:51:19
AEHELP.DLL      : 8.1.2.2      119158 Bytes  26/02/2009 19:01:56
AEGEN.DLL       : 8.1.1.30     336245 Bytes  20/03/2009 09:51:18
AEEMU.DLL       : 8.1.0.9      393588 Bytes  09/10/2008 13:32:40
AECORE.DLL      : 8.1.6.6      176501 Bytes  17/02/2009 13:22:44
AEBB.DLL        : 8.1.0.3       53618 Bytes  09/10/2008 13:32:40
AVWINLL.DLL     : 9.0.0.3       18177 Bytes  12/12/2008 07:47:59
AVPREF.DLL      : 9.0.0.1       43777 Bytes  05/12/2008 09:32:15
AVREP.DLL       : 8.0.0.3      155905 Bytes  20/01/2009 13:34:28
AVREG.DLL       : 9.0.0.0       36609 Bytes  05/12/2008 09:32:09
AVARKT.DLL      : 9.0.0.1      292609 Bytes  09/02/2009 06:52:24
AVEVTLOG.DLL    : 9.0.0.7      167169 Bytes  30/01/2009 09:37:08
SQLITE3.DLL     : 3.6.1.0      326401 Bytes  28/01/2009 14:03:49
SMTPLIB.DLL     : 9.2.0.25      28417 Bytes  02/02/2009 07:21:33
NETNT.DLL       : 9.0.0.0       11521 Bytes  05/12/2008 09:32:10
RCIMAGE.DLL     : 9.0.0.21    2438401 Bytes  09/02/2009 10:45:45
RCTEXT.DLL      : 9.0.35.0      87297 Bytes  11/03/2009 14:55:12
Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\programmi\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:, E:, 
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: on
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,
Start of the scan: venerdì 20 marzo 2009  10:54
Initiating scan of system files:
Signed -> 'C:\WINDOWS\system32\svchost.exe'
Signed -> 'C:\WINDOWS\system32\winlogon.exe'
Signed -> 'C:\WINDOWS\explorer.exe'
Signed -> 'C:\WINDOWS\system32\smss.exe'
Signed -> 'C:\WINDOWS\system32\wininet.DLL'
Signed -> 'C:\WINDOWS\system32\wsock32.DLL'
Signed -> 'C:\WINDOWS\system32\ws2_32.DLL'
Signed -> 'C:\WINDOWS\system32\services.exe'
Signed -> 'C:\WINDOWS\system32\lsass.exe'
Signed -> 'C:\WINDOWS\system32\csrss.exe'
Signed -> 'C:\WINDOWS\system32\drivers\kbdclass.sys'
Signed -> 'C:\WINDOWS\system32\spoolsv.exe'
Signed -> 'C:\WINDOWS\system32\alg.exe'
Signed -> 'C:\WINDOWS\system32\wuauclt.exe'
Signed -> 'C:\WINDOWS\system32\advapi32.DLL'
Signed -> 'C:\WINDOWS\system32\user32.DLL'
Signed -> 'C:\WINDOWS\system32\gdi32.DLL'
Signed -> 'C:\WINDOWS\system32\kernel32.DLL'
Signed -> 'C:\WINDOWS\system32\ntdll.DLL'
Signed -> 'C:\WINDOWS\system32\ntoskrnl.exe'
Signed -> 'C:\WINDOWS\system32\ctfmon.exe'
The system files were scanned ('21' files)
Starting search for hidden objects.
'43811' objects were checked, '0' hidden objects were found.
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'cidaemon.exe' - '1' Module(s) have been scanned
Scan process 'cidaemon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'tor.exe' - '1' Module(s) have been scanned
Scan process 'RtkBtMnt.exe' - '1' Module(s) have been scanned
Scan process 'iPodService.exe' - '1' Module(s) have been scanned
Scan process 'BTSTAC~1.EXE' - '1' Module(s) have been scanned
Scan process 'NMIndexStoreSvr.exe' - '1' Module(s) have been scanned
Scan process 'privoxy.exe' - '1' Module(s) have been scanned
Scan process 'BTTray.exe' - '1' Module(s) have been scanned
Scan process 'vidalia.exe' - '1' Module(s) have been scanned
Scan process 'NMBgMonitor.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'SUPERANTISPYWARE.EXE' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'realsched.exe' - '1' Module(s) have been scanned
Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'WLTRAY.EXE' - '1' Module(s) have been scanned
Scan process 'CLI.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'prevx.exe' - '0' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
Scan process 'uphclean.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'StarWindService.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'InCDsrv.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'prevx.exe' - '0' Module(s) have been scanned
Scan process 'cisvc.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'LVPrcSrv.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'BCMWLTRY.EXE' - '1' Module(s) have been scanned
Scan process 'WLTRYSVC.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'btwdins.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
56 processes with 56 modules were scanned
Starting master boot sector scan:
Start scanning boot sectors:
Starting to scan executable files (registry).
The registry was scanned ( '64' files ).
Starting the file scan:
Begin scan in 'C:\'
C:\pagefile.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.
C:\Documents and Settings\Andrea\Documenti\Download\Katy Perry Thinking Of You.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
C:\WINDOWS\system32\drivers\sptd.sys
    [WARNING]   The file could not be opened!
C:\WINDOWS\system32\drivers\sptd5085.sys
    [WARNING]   The file could not be opened!
C:\WINDOWS\system32\drivers\vaxscsi.sys
    [WARNING]   The file could not be opened!
Begin scan in 'D:\' <FREECOM HDD>
D:\Andrea\Programmi\Alcohol.120.v1.9.5.4327.Retail.Crack.Only.rar
  [0] Archive type: RAR
    --> blz-a120_1954327-patch.exe
      [DETECTION] Contains a recognition pattern of the (harmful) BDS/Graybird.CJ back-door program
Begin scan in 'E:\'
Search path E:\ could not be opened!
System error [1005]: Il volume non contiene un file system riconosciuto.
Beginning disinfection:
C:\Documents and Settings\Andrea\Documenti\Download\Katy Perry Thinking Of You.mp3
    [DETECTION] Contains recognition pattern of the EXP/ASF.GetCodec.Gen exploit
    [NOTE]      The file was moved to '4a377a9b.qua'!
D:\Andrea\Programmi\Alcohol.120.v1.9.5.4327.Retail.Crack.Only.rar
    [NOTE]      The file was moved to '4a267aa6.qua'!
End of the scan: venerdì 20 marzo 2009  12:12
Used time:  1:17:47 Hour(s)
The scan has been done completely.
  15381 Scanned directories
 498422 Files were scanned
      2 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      2 Files were moved to quarantine
      0 Files were renamed
      4 Files cannot be scanned
 498416 Files not concerned
  12894 Archives were scanned
      4 Warnings
      3 Notes
  43811 Objects were scanned with rootkit scan
      0 Hidden objects were found | 
|   | 
|  20-03-2009, 15:40 | #2 | 
| Moderatore Iscritto dal: Jun 2007 Città: 127.0.0.1 
					Messaggi: 25885
				 | 
		Ciao esiste un 3D dedicato ad Avira dove troverai le Info per configuralo al meglio, inoltre se hai seguito la Guida alla disinfezione perchè non hai aperto un 3D in sezione dedicata per il controllo dei log. Ti suggerisco di riconfigura Avira come da Guida e ripetere scansione completa, chiudo    
				__________________ Try again and you will be luckier. | 
|   | 
|   | 
| Strumenti | |
| 
 | 
 | 
Tutti gli orari sono GMT +1. Ora sono le: 15:07.









 
		 
		 
		 
		







 
  
 



 
                        
                        










