Ciao ragazzi!
non riesco a liberarmi di queste e di un altro paio di incomode presenze, anche se apparentemente non mi stanno danneggiando.
BitDefender non riesce a eliminarli e il log di Hijackthis non segnala nulla di pericoloso.
Vi allego i 2 log sperando di avere qualche buona "dritta"
ciao, grazie,
Alessandro
C:\_RESTORE\TEMP\A0006899.CPY Infected Trojan.Downloader.Small.AAC
C:\_RESTORE\TEMP\A0006899.CPY Disinfection failed
C:\_RESTORE\TEMP\A0006899.CPY Moved
C:\_RESTORE\TEMP\A0006900.CPY Infected Trojan.Downloader.Small.AAC
C:\_RESTORE\TEMP\A0006900.CPY Disinfection failed
C:\_RESTORE\TEMP\A0006900.CPY Moved
C:\_RESTORE\TEMP\A0006902.CPY Infected Trojan.Bagsdi.A
C:\_RESTORE\TEMP\A0006902.CPY Disinfection failed
C:\_RESTORE\TEMP\A0006902.CPY Moved
C:\_RESTORE\TEMP\A0006903.CPY Infected Trojan.Bagsdi.A
C:\_RESTORE\TEMP\A0006903.CPY Disinfection failed
C:\_RESTORE\TEMP\A0006903.CPY Moved
C:\_RESTORE\TEMP\A0029853.CPY Infected Trojan.Downloader.Small.CCA
C:\_RESTORE\TEMP\A0029853.CPY Disinfection failed
C:\_RESTORE\TEMP\A0029853.CPY Moved
C:\_RESTORE\TEMP\A0029855.CPY Detected: Dialer.BDIV.A
C:\_RESTORE\TEMP\A0029855.CPY Disinfection failed
C:\_RESTORE\TEMP\A0029855.CPY Moved
C:\_RESTORE\TEMP\A0029856.CPY Detected: Dialer.BDIV.A
C:\_RESTORE\TEMP\A0029856.CPY Disinfection failed
C:\_RESTORE\TEMP\A0029856.CPY Moved
C:\Programmi\File comuni\Adobe\ESD\DLMCleanup.exe Infected Trojan.Patched.B
C:\Programmi\File comuni\Adobe\ESD\DLMCleanup.exe Disinfection failed
C:\Programmi\File comuni\Adobe\ESD\DLMCleanup.exe Moved
Logfile of HijackThis v1.99.1
Scan saved at 14.18.45, on 29/06/2006
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\ZONELABS\VSMON.EXE
C:\PROGRAMMI\FILE COMUNI\SOFTWIN\BITDEFENDER COMMUNICATOR\XCOMMSVR.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
C:\WINDOWS\TASKMON.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAMMI\MATROX MGA POWERDESK\MGACTRL.EXE
C:\PROGRAMMI\MATROX MGA POWERDESK\COLOR\HGCCTL95.EXE
C:\PROGRAMMI\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\WINDOWS\SYSTEM\GSICON.EXE
C:\WINDOWS\SYSTEM\DSLAGENT.EXE
C:\PROGRAMMI\SOFTWIN\BITDEFENDER8\BDNAGENT.EXE
C:\PROGRAMMI\ZONE LABS\ZONEALARM\ZLCLIENT.EXE
C:\PROGRAMMI\MATROX MGA POWERDESK\QDESK\MGAQDESK.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\TWAIN_32\A4CIS\WATCH.EXE
C:\WINDOWS\SYSTEM\RNAAPP.EXE
C:\WINDOWS\SYSTEM\TAPISRV.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\PROGRAMMI\FILE COMUNI\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
C:\PROGRAMMI\SOFTWIN\BITDEFENDER8\BDMCON.EXE
C:\PROGRAMMI\INTERNET EXPLORER\IEXPLORE.EXE
C:\PROGRAMMI\HIJACKTHIS\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.it/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAMMI\ADOBE\ACROBAT 6.0\READER\ACTIVEX\ACROIEHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O4 - HKLM\..\Run: [Matrox Control Center] C:\Programmi\Matrox MGA PowerDesk\mgactrl.exe
O4 - HKLM\..\Run: [Matrox Color Control] C:\Programmi\Matrox MGA PowerDesk\Color\hgcctl95.exe
O4 - HKLM\..\Run: [GSICONEXE] GSICON.EXE
O4 - HKLM\..\Run: [DSLAGENTEXE] dslagent.exe USB
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [BDMCon] "C:\Programmi\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [BitDefender Communicator] "C:\Programmi\File comuni\Softwin\BitDefender Communicator\\xcommsvr.exe"
O4 - HKLM\..\RunServices: [BitDefender Scan Server] "C:\Programmi\File comuni\Softwin\BitDefender Scan Server\\bdss.exe"
O4 - HKLM\..\RunServices: [BitDefender Live! Init] "C:\Programmi\Softwin\BitDefender8\bdinit.exe"
O4 - HKCU\..\Run: [Matrox QuickDesk] C:\Programmi\Matrox MGA PowerDesk\QDesk\mgaqdesk.exe
O4 - Startup: Watch.lnk = C:\WINDOWS\TWAIN_32\A4CIS\WATCH.exe
O4 - Startup: Microsoft Office.lnk = C:\Programmi\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: MSN Messenger Service - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSEN~1\MSMSGS.EXE
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .mov: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O12 - Plugin for .WAV: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin.dll
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.4.0) -
O16 - DPF: {CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA} (Java Runtime Environment 1.4.0) -
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
Registrazione