prova ad avviare la scansione

deve essere stata sospesa la scansione online

prova da qui

NON SO COME SONO RIUSCITO A COPIARE QUESTO PRIMA CHE SI CHIUDESSE IL LOG ED è QUESTO IL RISULTATO



QuickScan Beta 32-bit v0.9.9.41

---

Data Scansione: Sat Oct 16 21:25:30 2010
ID del PC: CA70448



Trovati 2 files infetti!

---

C:\Users\domenico\AppData\Local\43535.exe --> Gen:Variant.FakeAlert.29
--> HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce\"43535"
--> Processi 43535.exe (1640)

C:\Windows\mw2mmgr32\mw2mmgr32.exe --> MemScan:Application.Spyarsenal.Familykeylogger.B
--> HKLM\Software\Microsoft\Windows\CurrentVersion\Run\"Sys32V2Contoller"
--> HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\"Sys32V2Contoller"



Processi

---

43535.exe 1640 C:\Users\domenico\AppData\Local\43535.exe
avast! Antivirus 1836 C:\Program Files\Alwil Software\Avast5\AvastUI.exe
Firefox 2884 C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Google Update 1544 C:\Users\domenico\AppData\Local\Google\Update\GoogleUpdate.exe
GoogleToolbarNotifier 1488 C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Java(TM) Platform SE Auto Updater 2 0 1844 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
RealPlayer (32-bit) 1884 C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
TeaTimer.exe 1504 C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe


Autoruns e files critici

---

43535.exe C:\Users\domenico\AppData\Local\43535.exe
avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastUI.exe
Google Update C:\Users\domenico\AppData\Local\Google\Update\GoogleUpdate.exe
GoogleToolbarNotifier C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
Java(TM) Platform SE Auto Updater 2 0 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
mw2mmgr32.exe C:\Windows\mw2mmgr32\mw2mmgr32.exe
RealPlayer (32-bit) C:\Program Files (x86)\Common Files\Real\Update_OB\realsched.exe
Sistema operativo Microsoft® Windows® C:\Windows\system32\userinit.exe
TeaTimer.exe C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe


Browser plugins

---

BitDefender QuickScan C:\Users\domenico\AppData\Roaming\Mozilla\Firefox\Profiles\owuar6x6.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
BitDefender QuickScan C:\Users\domenico\AppData\Roaming\Mozilla\Firefox\Profiles\owuar6x6.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
Foxit Reader Plugin for Mozilla C:\Program Files (x86)\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll
Google Earth Plugin C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll
Google Toolbar for Internet Explorer c:\program files (x86)\google\google toolbar\googletoolbar_32.dll
Google Update C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
GoogleToolbarNotifier C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.6.5612.1312\swg.dll
InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.dll
InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.exe
InstallShield Update Service C:\Windows\Downloaded Program Files\isusweb.dll
Java Deployment Toolkit 6.0.180.7 C:\Program Files (x86)\Mozilla Firefox\plugins\npdeploytk.dll
Java(TM) Platform SE 6 U18 c:\program files (x86)\java\jre6\bin\jp2ssv.dll
Microsoft Office 2003 C:\Program Files (x86)\Mozilla Firefox\plugins\NPOFFICE.DLL
Microsoft Office WRC Control C:\Windows\Downloaded Program Files\wrc32.ocx
Microsoft® Windows Live Login Helper c:\program files (x86)\common files\microsoft shared\windows live\windowslivelogin.dll
Microsoft® Windows® Operating System C:\Windows\system32\NLAapi.dll
Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
Microsoft® Windows® Operating System C:\Windows\system32\wshbth.dll
Mozilla Default Plug-in C:\Program Files (x86)\Mozilla Firefox\plugins\npnul32.dll
MSN® Games by Zone.com C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll
NPSWF32.dll C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
RealJukebox NS Plugin C:\Program Files (x86)\Mozilla Firefox\plugins\nprjplug.dll
RealJukebox NS Plugin C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll
RealPlayer Download and Record Plugin c:\programdata\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
RealPlayer Version Plugin C:\Program Files (x86)\Mozilla Firefox\plugins\nprpjplug.dll
RealPlayer Version Plugin C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll
RealPlayer(tm) G2 LiveConnect-Enabled P C:\Program Files (x86)\Mozilla Firefox\plugins\nppl3260.dll
RealPlayer(tm) G2 LiveConnect-Enabled P C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll
RealPlayer(tm) HTML5VideoShim Plug-In ( C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll
sdhelper.dll c:\program files (x86)\spybot - search & destroy\sdhelper.dll
Silverlight Plug-In c:\Program Files (x86)\Microsoft Silverlight\4.0.50826.0\npctrl.dll
Sistema operativo Microsoft® Windows® C:\Windows\System32\mswsock.dll
Sistema operativo Microsoft® Windows® C:\Windows\system32\napinsp.dll
Sistema operativo Microsoft® Windows® C:\Windows\system32\pnrpnsp.dll
Toolbar c:\program files (x86)\ask.com\genericasktoolbar.dll
Windows Live® Photo Gallery C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
Windows® Internet Explorer c:\windows\syswow64\ieframe.dll


Files persi

---

File non trovato: disabled
--> HLKM\Software\MozillaPlugins\@microsoft.com/GENUINE\"Path"


Scansione

---

I seguenti file(s) devono essere inviati per una scansione da parte del server:
C:\Users\domenico\AppData\Local\43535.exe

Invio iniziato - 1 file(s)
43535.exe (1041920)
Velocità invio - 36 KB/s
Invio terminato - 1 inviati, 0 falliti

Scan finished - communication took 28 sec
Total traffic - 1.01 MB inviati, 0.59 KB ricevuti
Scanned 359 files and modules - 39 seconds

==============================================================================

non me lo fa installare e se provo in modalita provvisoria?? se non sbaglio si fa con f12 ?

niente non me lo fa avviare!!

niente ora ripristino

guarda ti invio un link dove ci sono molti antivirus online

scansiona con

Symantec Security Check

Trend Micro House Call

http://www.pcrestore.it/sito/varie/protezione-computer.htm


clicca su ''avvia scansione'' uno alla volta

Ciao a tutti.
Prova così:

Scarica ed avvia rkill.com per terminare i processi in esecuzione del malware
http://download.bleepingcomputer.com/grinler/rkill.com
Finita la scansione, NON riavviare o spegnere il pc per nessun motivo.
L'infezione ripartirebbe come un razzo.
Se durante la scansione, ti compare qualche finestra, che blocca la scansione, NON CHIUDERLA.
Riavvia di nuovo il tool, e fai la scansione, finchè non riesce a completarla.

Finita la scansione, prova a far partire Malwarebytes.

non va nnon me lo fa aprire anche se faccio come dici tu =(

in dowloand