|
|
|
|
Strumenti |
06-07-2010, 19:30 | #12021 |
Senior Member
Iscritto dal: Feb 2007
Città: (Altopascio)
Messaggi: 1406
|
parlo della V10 con la protezione proactiva
__________________
XP home \intel_I5_760\Asus P7P-55-D-E\Enermax Infiniti 650\RAM DDR3_Corsair_Value\Samsung sync master 245b \ati_4890 \ Antec Nine Hundred Gamer\Audio creative sound blaster audigy 2zs 5.1\APC 1000VA SMART-UPS |
06-07-2010, 19:58 | #12022 |
Senior Member
Iscritto dal: Aug 2006
Città: AS-ROMA
Messaggi: 976
|
|
06-07-2010, 22:23 | #12023 |
Senior Member
Iscritto dal: Feb 2008
Città: taranto
Messaggi: 878
|
|
06-07-2010, 22:33 | #12024 |
Senior Member
Iscritto dal: May 2007
Città: Gragnano
Messaggi: 10656
|
bassta mettere i vari hips nelle esclusioni di avira e non ci sono problemi
__________________
I Miei Bimbi - thread windows 10 -thread windows 8.1 - Guida IS Pctools , ,THREAD HP DV6-2045EL- la mia configurazione di sicurezza,thread Nex-6 THREAD COMODO INTERNET 6 |
06-07-2010, 22:54 | #12025 |
Senior Member
Iscritto dal: Aug 2006
Città: Paris
Messaggi: 15966
|
ragazzi scusate, uso la versione 9 di Antivir, e da 20 minuti continua a rilevarmi file infetti nella cartella della cache di Firefox (che ho anche già cancellato)
ogni messaggio dico di eliminare il file, ma 5 minuti dopo si ripresenta. Che posso fare? E' giunto il momento di passare alla versione 10?
__________________
Giant Lizard: PC gamer, retrogamer, appassionato di "finire i giochi al 100%". |
06-07-2010, 22:56 | #12026 | |
Senior Member
Iscritto dal: May 2007
Città: Gragnano
Messaggi: 10656
|
Quote:
__________________
I Miei Bimbi - thread windows 10 -thread windows 8.1 - Guida IS Pctools , ,THREAD HP DV6-2045EL- la mia configurazione di sicurezza,thread Nex-6 THREAD COMODO INTERNET 6 |
|
06-07-2010, 23:04 | #12027 |
Senior Member
Iscritto dal: Aug 2006
Città: Paris
Messaggi: 15966
|
porc...mi son dimenticato di scriverlo prima e ora non mi sta più uscendo il messaggio (l'ultima volta ho messo di eseguire sempre l'azione)
era un qualche tipo di malware che ora non ricordo... se esce di nuovo lo scrivo. Ma la versione 10 è una beta o cosa? ho visto che non ha neanche l'italiano.
__________________
Giant Lizard: PC gamer, retrogamer, appassionato di "finire i giochi al 100%". |
06-07-2010, 23:13 | #12028 |
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28661
|
sarà una qualche pagina con porzioni di codice sporco
se hai noscript attivo dovresti essere al sicuro |
06-07-2010, 23:14 | #12029 | |
Senior Member
Iscritto dal: May 2007
Città: Gragnano
Messaggi: 10656
|
Quote:
se vai nel reporteventi c'e' scritto il tipo di malware
__________________
I Miei Bimbi - thread windows 10 -thread windows 8.1 - Guida IS Pctools , ,THREAD HP DV6-2045EL- la mia configurazione di sicurezza,thread Nex-6 THREAD COMODO INTERNET 6 |
|
07-07-2010, 00:59 | #12030 | ||
Senior Member
Iscritto dal: Aug 2006
Città: Paris
Messaggi: 15966
|
Quote:
Quote:
il malware segnalato è questo: HTML/Infected.WebPage.Gen lo sta continuando a rilevare ed eliminare, però almeno ora non mi escono le finestrelle.
__________________
Giant Lizard: PC gamer, retrogamer, appassionato di "finire i giochi al 100%". |
||
07-07-2010, 07:56 | #12031 |
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28661
|
nella norma
controlla la cronologia di firefox e vedi che siti hai visitato a quell'ora |
07-07-2010, 12:00 | #12032 | |
Senior Member
Iscritto dal: Aug 2006
Città: Paris
Messaggi: 15966
|
Quote:
e anche oggi continua a rilevare lo stesso malware, minuto dopo minuto. Che posso fare?
__________________
Giant Lizard: PC gamer, retrogamer, appassionato di "finire i giochi al 100%". |
|
07-07-2010, 13:21 | #12033 |
Senior Member
Iscritto dal: Oct 2007
Città: Roma
Messaggi: 9728
|
|
07-07-2010, 14:07 | #12034 |
Senior Member
Iscritto dal: May 2007
Città: Gragnano
Messaggi: 10656
|
si evita che i due realtime vadano in conflitto
__________________
I Miei Bimbi - thread windows 10 -thread windows 8.1 - Guida IS Pctools , ,THREAD HP DV6-2045EL- la mia configurazione di sicurezza,thread Nex-6 THREAD COMODO INTERNET 6 |
07-07-2010, 14:44 | #12035 |
Bannato
Iscritto dal: Mar 2004
Città: Galapagos Attenzione:utente flautolente,tienilo a mente
Messaggi: 28661
|
non significa,magari uno dei siti che hai visitato in quell'ora è stato violato,per cui guarda che sito ai consultato in quell'ora esatta
|
07-07-2010, 20:30 | #12036 |
Senior Member
Iscritto dal: Dec 2009
Messaggi: 825
|
info su report-hidden object
Salve.
Mi delucidereste su parecchi "hidden object" che avira personal 10 mi mostra nel report: Codice:
Avira AntiVir Personal Report file date: mercoledì 7 luglio 2010 21:13 Scanning for 2301243 virus strains and unwanted programs. The program is running as an unrestricted full version. Online services are available: Licensee : Avira AntiVir Personal - FREE Antivirus Serial number : 0000149996-ADJIE-0000001 Platform : Windows Vista Windows version : (Service Pack 2) [6.0.6002] Boot mode : Normally booted Username : The_Noiser Computer name : PC-The_Noiser Version information: BUILD.DAT : 10.0.0.567 32097 Bytes 19/04/2010 15:07:00 AVSCAN.EXE : 10.0.3.0 433832 Bytes 01/04/2010 11:37:38 AVSCAN.DLL : 10.0.3.0 46440 Bytes 01/04/2010 11:57:04 LUKE.DLL : 10.0.2.3 104296 Bytes 07/03/2010 17:33:04 LUKERES.DLL : 10.0.0.1 12648 Bytes 10/02/2010 22:40:49 VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 08:05:36 VBASE001.VDF : 7.10.1.0 1372672 Bytes 19/11/2009 18:27:49 VBASE002.VDF : 7.10.3.1 3143680 Bytes 20/01/2010 16:37:42 VBASE003.VDF : 7.10.3.75 996864 Bytes 26/01/2010 15:37:42 VBASE004.VDF : 7.10.4.203 1579008 Bytes 05/03/2010 10:29:03 VBASE005.VDF : 7.10.6.82 2494464 Bytes 15/04/2010 09:02:01 VBASE006.VDF : 7.10.7.218 2294784 Bytes 02/06/2010 09:02:10 VBASE007.VDF : 7.10.7.219 2048 Bytes 02/06/2010 09:02:11 VBASE008.VDF : 7.10.7.220 2048 Bytes 02/06/2010 09:02:11 VBASE009.VDF : 7.10.7.221 2048 Bytes 02/06/2010 09:02:11 VBASE010.VDF : 7.10.7.222 2048 Bytes 02/06/2010 09:02:11 VBASE011.VDF : 7.10.7.223 2048 Bytes 02/06/2010 09:02:12 VBASE012.VDF : 7.10.7.224 2048 Bytes 02/06/2010 09:02:12 VBASE013.VDF : 7.10.8.37 270336 Bytes 10/06/2010 09:02:13 VBASE014.VDF : 7.10.8.69 138752 Bytes 14/06/2010 09:02:14 VBASE015.VDF : 7.10.8.102 130560 Bytes 16/06/2010 09:02:15 VBASE016.VDF : 7.10.8.135 152064 Bytes 21/06/2010 09:02:16 VBASE017.VDF : 7.10.8.163 432128 Bytes 23/06/2010 09:02:18 VBASE018.VDF : 7.10.8.194 133632 Bytes 27/06/2010 09:02:19 VBASE019.VDF : 7.10.8.220 134656 Bytes 29/06/2010 09:02:20 VBASE020.VDF : 7.10.8.252 171520 Bytes 04/07/2010 10:35:22 VBASE021.VDF : 7.10.9.19 131072 Bytes 06/07/2010 10:35:22 VBASE022.VDF : 7.10.9.20 2048 Bytes 06/07/2010 10:35:23 VBASE023.VDF : 7.10.9.21 2048 Bytes 06/07/2010 10:35:23 VBASE024.VDF : 7.10.9.22 2048 Bytes 06/07/2010 10:35:23 VBASE025.VDF : 7.10.9.23 2048 Bytes 06/07/2010 10:35:23 VBASE026.VDF : 7.10.9.24 2048 Bytes 06/07/2010 10:35:23 VBASE027.VDF : 7.10.9.25 2048 Bytes 06/07/2010 10:35:23 VBASE028.VDF : 7.10.9.26 2048 Bytes 06/07/2010 10:35:23 VBASE029.VDF : 7.10.9.27 2048 Bytes 06/07/2010 10:35:23 VBASE030.VDF : 7.10.9.28 2048 Bytes 06/07/2010 10:35:24 VBASE031.VDF : 7.10.9.30 11776 Bytes 07/07/2010 10:35:24 Engineversion : 8.2.4.10 AEVDF.DLL : 8.1.2.0 106868 Bytes 03/07/2010 09:02:41 AESCRIPT.DLL : 8.1.3.39 1335674 Bytes 07/07/2010 10:35:27 AESCN.DLL : 8.1.6.1 127347 Bytes 03/07/2010 09:02:38 AESBX.DLL : 8.1.3.1 254324 Bytes 03/07/2010 09:02:42 AERDL.DLL : 8.1.4.6 541043 Bytes 03/07/2010 09:02:38 AEPACK.DLL : 8.2.2.5 430453 Bytes 03/07/2010 09:02:36 AEOFFICE.DLL : 8.1.1.6 201081 Bytes 07/07/2010 10:35:25 AEHEUR.DLL : 8.1.1.38 2724214 Bytes 03/07/2010 09:02:34 AEHELP.DLL : 8.1.11.6 242038 Bytes 03/07/2010 09:02:29 AEGEN.DLL : 8.1.3.13 381300 Bytes 07/07/2010 10:35:25 AEEMU.DLL : 8.1.2.0 393588 Bytes 03/07/2010 09:02:27 AECORE.DLL : 8.1.15.3 192886 Bytes 03/07/2010 09:02:26 AEBB.DLL : 8.1.1.0 53618 Bytes 03/07/2010 09:02:26 AVWINLL.DLL : 10.0.0.0 19304 Bytes 14/01/2010 11:03:38 AVPREF.DLL : 10.0.0.0 44904 Bytes 14/01/2010 11:03:35 AVREP.DLL : 10.0.0.8 62209 Bytes 18/02/2010 15:47:40 AVREG.DLL : 10.0.3.0 53096 Bytes 01/04/2010 11:35:46 AVSCPLR.DLL : 10.0.3.0 83816 Bytes 01/04/2010 11:39:51 AVARKT.DLL : 10.0.0.14 227176 Bytes 01/04/2010 11:22:13 AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 26/01/2010 08:53:30 SQLITE3.DLL : 3.6.19.0 355688 Bytes 28/01/2010 11:57:58 AVSMTP.DLL : 10.0.0.17 63848 Bytes 16/03/2010 14:38:56 NETNT.DLL : 10.0.0.0 11624 Bytes 19/02/2010 13:41:00 RCIMAGE.DLL : 10.0.0.26 2550120 Bytes 28/01/2010 12:10:20 RCTEXT.DLL : 10.0.53.0 97128 Bytes 09/04/2010 13:14:29 Configuration settings for the scan: Jobname.............................: Scan for Rootkits and active malware Configuration file..................: C:\ProgramData\Avira\AntiVir Desktop\PROFILES\rootkit.avp Logging.............................: low Primary action......................: interactive Secondary action....................: delete Scan master boot sector.............: on Scan boot sector....................: on Process scan........................: on Extended process scan...............: on Scan registry.......................: on Search for rootkits.................: on Integrity checking of system files..: off Optimised scan......................: on Scan all files......................: All files Scan archives.......................: on Recursion depth.....................: 20 Smart extensions....................: on Deviating archive types.............: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, +ISO, Macro heuristic.....................: on File heuristic......................: high Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+PFS,+SPR, Start of the scan: mercoledì 7 luglio 2010 21:13 Starting search for hidden objects. c:\program files\mozilla firefox\firefox.exe c:\Program Files\Mozilla Firefox\firefox.exe [NOTE] The process is not visible. c:\windows\system32\mobsync.exe c:\Windows\System32\mobsync.exe [NOTE] The process is not visible. c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\mobsync.exe c:\windows\system32\cmd.exe c:\Windows\System32\cmd.exe [NOTE] The process is not visible. c:\windows\system32\cmd.exe c:\program files\a-squared free\a2free.exe c:\Program Files\a-squared Free\a2free.exe [NOTE] The process is not visible. c:\program files\a-squared free\a2free.exe c:\program files\a-squared free\a2free.exe c:\program files\a-squared free\a2free.exe c:\program files\a-squared free\a2free.exe c:\program files\a-squared free\a2free.exe c:\windows\system32\vssvc.exe c:\Windows\System32\VSSVC.exe [NOTE] The process is not visible. c:\windows\system32\vssvc.exe c:\windows\system32\sndvol.exe c:\Windows\System32\SndVol.exe [NOTE] The process is not visible. c:\windows\system32\sndvol.exe The scan of running processes will be started Scan process 'SearchFilterHost.exe' - '32' Module(s) have been scanned Scan process 'SearchProtocolHost.exe' - '44' Module(s) have been scanned Scan process 'svchost.exe' - '36' Module(s) have been scanned Scan process 'vssvc.exe' - '49' Module(s) have been scanned Scan process 'avscan.exe' - '67' Module(s) have been scanned Scan process 'TosBtProc.exe' - '25' Module(s) have been scanned Scan process 'tosOBEX.exe' - '43' Module(s) have been scanned Scan process 'TosAVRC.exe' - '26' Module(s) have been scanned Scan process 'TosBtHsp.exe' - '32' Module(s) have been scanned Scan process 'TosBtHid.exe' - '16' Module(s) have been scanned Scan process 'TosA2dp.exe' - '31' Module(s) have been scanned Scan process 'TosBtMng.exe' - '64' Module(s) have been scanned Scan process 'HDTune.exe' - '23' Module(s) have been scanned Scan process 'explorer.exe' - '88' Module(s) have been scanned Scan process 'javaw.exe' - '71' Module(s) have been scanned Scan process 'conime.exe' - '16' Module(s) have been scanned Scan process 'a2service.exe' - '39' Module(s) have been scanned Scan process 'peerblock.exe' - '37' Module(s) have been scanned Scan process 'wmplayer.exe' - '122' Module(s) have been scanned Scan process 'mscorsvw.exe' - '23' Module(s) have been scanned Scan process 'SynTPHelper.exe' - '14' Module(s) have been scanned Scan process 'wmpnetwk.exe' - '85' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '29' Module(s) have been scanned Scan process 'CCC.exe' - '145' Module(s) have been scanned Scan process 'CFSwMgr.exe' - '72' Module(s) have been scanned Scan process 'TOSCDSPD.exe' - '17' Module(s) have been scanned Scan process 'schedhlp.exe' - '20' Module(s) have been scanned Scan process 'TrueImageMonitor.exe' - '44' Module(s) have been scanned Scan process 'avgnt.exe' - '53' Module(s) have been scanned Scan process 'TCrdMain.exe' - '70' Module(s) have been scanned Scan process 'TPwrMain.exe' - '37' Module(s) have been scanned Scan process 'MOM.exe' - '50' Module(s) have been scanned Scan process 'RtHDVCpl.exe' - '52' Module(s) have been scanned Scan process 'NDSTray.exe' - '93' Module(s) have been scanned Scan process 'SynTPEnh.exe' - '34' Module(s) have been scanned Scan process 'Explorer.EXE' - '218' Module(s) have been scanned Scan process 'taskeng.exe' - '85' Module(s) have been scanned Scan process 'Dwm.exe' - '32' Module(s) have been scanned Scan process 'SmartFaceVWatchSrv.exe' - '33' Module(s) have been scanned Scan process 'taskeng.exe' - '49' Module(s) have been scanned Scan process 'avshadow.exe' - '33' Module(s) have been scanned Scan process 'SearchIndexer.exe' - '82' Module(s) have been scanned Scan process 'svchost.exe' - '33' Module(s) have been scanned Scan process 'ULCDRSvr.exe' - '5' Module(s) have been scanned Scan process 'TosIPCSrv.exe' - '18' Module(s) have been scanned Scan process 'TosBtSrv.exe' - '36' Module(s) have been scanned Scan process 'TosCoSrv.exe' - '26' Module(s) have been scanned Scan process 'TODDSrv.exe' - '23' Module(s) have been scanned Scan process 'TNaviSrv.exe' - '19' Module(s) have been scanned Scan process 'TempoSVC.exe' - '59' Module(s) have been scanned Scan process 'svchost.exe' - '44' Module(s) have been scanned Scan process 'svchost.exe' - '42' Module(s) have been scanned Scan process 'CFSvcs.exe' - '71' Module(s) have been scanned Scan process 'avguard.exe' - '64' Module(s) have been scanned Scan process 'agrsmsvc.exe' - '16' Module(s) have been scanned Scan process 'afcdpsrv.exe' - '27' Module(s) have been scanned Scan process 'schedul2.exe' - '28' Module(s) have been scanned Scan process 'svchost.exe' - '63' Module(s) have been scanned Scan process 'sched.exe' - '55' Module(s) have been scanned Scan process 'spoolsv.exe' - '88' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '35' Module(s) have been scanned Scan process 'WLANExt.exe' - '45' Module(s) have been scanned Scan process 'svchost.exe' - '93' Module(s) have been scanned Scan process 'svchost.exe' - '87' Module(s) have been scanned Scan process 'SLsvc.exe' - '23' Module(s) have been scanned Scan process 'svchost.exe' - '37' Module(s) have been scanned Scan process 'svchost.exe' - '152' Module(s) have been scanned Scan process 'svchost.exe' - '113' Module(s) have been scanned Scan process 'svchost.exe' - '74' Module(s) have been scanned Scan process 'Ati2evxx.exe' - '28' Module(s) have been scanned Scan process 'svchost.exe' - '54' Module(s) have been scanned Scan process 'svchost.exe' - '33' Module(s) have been scanned Scan process 'winlogon.exe' - '31' Module(s) have been scanned Scan process 'PresentationFontCache.exe' - '30' Module(s) have been scanned Scan process 'svchost.exe' - '40' Module(s) have been scanned Scan process 'lsm.exe' - '22' Module(s) have been scanned Scan process 'lsass.exe' - '62' Module(s) have been scanned Scan process 'services.exe' - '33' Module(s) have been scanned Scan process 'csrss.exe' - '14' Module(s) have been scanned Scan process 'wininit.exe' - '26' Module(s) have been scanned Scan process 'csrss.exe' - '14' Module(s) have been scanned Scan process 'smss.exe' - '2' Module(s) have been scanned End of the scan: mercoledì 7 luglio 2010 21:21 Used time: 07:36 Minute(s) The scan has been done completely. 0 Scanned directories 4006 Files were scanned 0 Viruses and/or unwanted programs were found 0 Files were classified as suspicious 0 files were deleted 0 Viruses and unwanted programs were repaired 0 Files were moved to quarantine 0 Files were renamed 0 Files cannot be scanned 4006 Files not concerned 6 Archives were scanned 0 Warnings 0 Notes 478416 Objects were scanned with rootkit scan 21 Hidden objects were found Vorrei mi delucidaste su quel numero spropositato di "oggetti nascosti". C'è da preoccuparsi?
__________________
Il sapere è un'avventura senza fine ai confini dell'incertezza"Frank Herbert" Xbox-360 slim 250gb ≈ Toshiba a300-1mz Windows 7 64 bit ≈ Samsung tab 2 7.0" 8Gb |
07-07-2010, 21:17 | #12038 | |
Senior Member
Iscritto dal: Dec 2009
Messaggi: 825
|
Quote:
ho postato qui in quanto credo che qui possiate fornirmi supporto sul log che non comprendo appieno per mio conto Vorrei comprendere come mai mi vede "hidden" alcuni processi genuini e puliti di windows come mobsync.exe, cmd.exe, ecc.... tra l'altro anche firefox.... Ergo consigli sull'apertura di una discussione in questa area per approfondire la cosa.
__________________
Il sapere è un'avventura senza fine ai confini dell'incertezza"Frank Herbert" Xbox-360 slim 250gb ≈ Toshiba a300-1mz Windows 7 64 bit ≈ Samsung tab 2 7.0" 8Gb Ultima modifica di the_noiser : 07-07-2010 alle 21:20. |
|
07-07-2010, 23:05 | #12039 | |
Moderatore
Iscritto dal: Jun 2007
Città: 127.0.0.1
Messaggi: 25885
|
Quote:
__________________
Try again and you will be luckier.
|
|
08-07-2010, 10:39 | #12040 | |
Senior Member
Iscritto dal: Dec 2009
Messaggi: 825
|
Quote:
Comunque rimango ancora alquanto perplesso, ho riavviato il sistema e ho rieffettuato il controllo, i 21 hidden object sono divenuti 1, c:\windows\system32\sndvol.exe rimane invisibile al sistema di scansionamento di avira...
__________________
Il sapere è un'avventura senza fine ai confini dell'incertezza"Frank Herbert" Xbox-360 slim 250gb ≈ Toshiba a300-1mz Windows 7 64 bit ≈ Samsung tab 2 7.0" 8Gb |
|
Strumenti | |
|
|
Tutti gli orari sono GMT +1. Ora sono le: 08:57.