Bene, grazie , a dopo

scusa..........



Avira AntiVir Personal
Report file date: sabato 11 aprile 2009 13:54

Scanning for 1346528 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : B2B56501F091439

Version information:
BUILD.DAT : 9.0.0.387 17962 Bytes 24/03/09 11:04:00
AVSCAN.EXE : 9.0.3.3 464641 Bytes 24/02/09 10:13:26
AVSCAN.DLL : 9.0.3.0 40705 Bytes 27/02/09 08:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 20/02/09 09:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 27/02/09 08:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27/10/08 10:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 11/02/09 18:33:26
ANTIVIR2.VDF : 7.1.3.0 1330176 Bytes 01/04/09 11:40:29
ANTIVIR3.VDF : 7.1.3.41 162304 Bytes 10/04/09 11:40:30
Engineversion : 8.2.0.138
AEVDF.DLL : 8.1.1.0 106868 Bytes 27/01/09 15:36:42
AESCRIPT.DLL : 8.1.1.73 373114 Bytes 11/04/09 11:40:40
AESCN.DLL : 8.1.1.10 127348 Bytes 11/04/09 11:40:39
AERDL.DLL : 8.1.1.3 438645 Bytes 29/10/08 16:24:41
AEPACK.DLL : 8.1.3.12 397687 Bytes 11/04/09 11:40:39
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 26/02/09 18:01:56
AEHEUR.DLL : 8.1.0.114 1700214 Bytes 11/04/09 11:40:37
AEHELP.DLL : 8.1.2.2 119158 Bytes 26/02/09 18:01:56
AEGEN.DLL : 8.1.1.33 340340 Bytes 11/04/09 11:40:32
AEEMU.DLL : 8.1.0.9 393588 Bytes 09/10/08 12:32:40
AECORE.DLL : 8.1.6.7 176502 Bytes 11/04/09 11:40:31
AEBB.DLL : 8.1.0.3 53618 Bytes 09/10/08 12:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/08 06:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 05/12/08 08:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 20/01/09 12:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 05/12/08 08:32:09
AVARKT.DLL : 9.0.0.1 292609 Bytes 09/02/09 05:52:24
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 30/01/09 08:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 28/01/09 13:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 02/02/09 06:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 05/12/08 08:32:10
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 09/02/09 09:45:45
RCTEXT.DLL : 9.0.35.0 87297 Bytes 11/03/09 13:55:12

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\programmi\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: sabato 11 aprile 2009 13:54

Starting search for hidden objects.
'55671' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned
Scan process 'ImApp.exe' - '1' Module(s) have been scanned
Scan process 'rapimgr.exe' - '1' Module(s) have been scanned
Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned
Scan process 'MagicCursor2000.exe' - '1' Module(s) have been scanned
Scan process 'wcescomm.exe' - '1' Module(s) have been scanned
Scan process 'MemOptimizer.exe' - '1' Module(s) have been scanned
Scan process 'ATnotes.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'rundll32.exe' - '1' Module(s) have been scanned
Scan process 'ALCWZRD.EXE' - '1' Module(s) have been scanned
Scan process 'SOUNDMAN.EXE' - '1' Module(s) have been scanned
Scan process 'point32.exe' - '1' Module(s) have been scanned
Scan process 'TUProgSt.exe' - '1' Module(s) have been scanned
Scan process 'oodag.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'WanMiniport1st_srv.exe' - '1' Module(s) have been scanned
Scan process 'srvany.exe' - '1' Module(s) have been scanned
Scan process 'mdm.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
41 processes with 41 modules were scanned

Starting master boot sector scan:

Start scanning boot sectors:

Starting to scan executable files (registry).
The registry was scanned ( '51' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\Documents and Settings\Utente\Desktop\ComboFix.exe
[0] Archive type: RAR SFX (self extracting)
--> 32788R22FWJFW\psexec.cfexe
[1] Archive type: RSRC
--> Object
[DETECTION] Contains recognition pattern of the APPL/PsExec.E application
C:\Documents and Settings\Utente\Desktop\Vari Tooll\FindyKill.exe
[DETECTION] Contains recognition pattern of the DR/Tool.PsKill.K.39 dropper

Beginning disinfection:
C:\Documents and Settings\Utente\Desktop\ComboFix.exe
[NOTE] The file was moved to '4a4d9198.qua'!
C:\Documents and Settings\Utente\Desktop\Vari Tooll\FindyKill.exe
[DETECTION] Contains recognition pattern of the DR/Tool.PsKill.K.39 dropper
[NOTE] The file was moved to '4a4e9192.qua'!


End of the scan: sabato 11 aprile 2009 14:46
Used time: 47:26 Minute(s)

The scan has been done completely.

10497 Scanned directories
424361 Files were scanned
2 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
2 Files were moved to quarantine
0 Files were renamed
1 Files cannot be scanned
424358 Files not concerned
5659 Archives were scanned
1 Warnings
3 Notes
55671 Objects were scanned with rootkit scan
0 Hidden objects were found

veramente no!

anzi, forse è più lento di prima.

non capisco, ora si blocca anche il menù tasto destro , resta fermo con "invia a" selezionato ma se cerco di effettuare un'altra operazione tipo "elimina", quando si sblocca chiede conferma del fatto e posso eliminare.

in più risorse del computer sempre lentissimo ad aprire e visto che lo scanner ormai da giorni non lo vede più sono andato nella cartella scanner e fotocamere e l'apertura di questa è ancora più lunga di "risorse".


un' ultima cosa, ho notato installando i vari programmi, che qualche istate dopo che parte l'estrazione dei file nella finestra principale, in alto a sin del monitor
si apre una finestra più piccola e parte un ulteriore controllo che dura un attimo, non riesco a leggere il contenuto.

sto dando i numeri?

ciao

ciao shapiro

allora, in esecuzione automatica apparte lo scanner inesistente, apre ogni cosa in un lampo.

Ho disinstallato uno alla volta tutti gli ultimi programmi e anche qualcosa di precedente, ho tolto avira ed ho messo avg (mamma mia che mattone), ho fatto la scansione e nulla di nulla.

Riavviando in mod normale e ci mette una cifra non comune i problemi tornano, solo il menù tasto des sembra normale.


I processi attivi più pesanti sono

svchost.exe 21.096 KB
MsMpEng.exe 26.140 KB
explorer.exe 25.488 KB
System 64.380 KB


Sono preso un po' dallo sconforto e anche un po' stanco.
Per oggi mi arrendo.

Ciao shapiro e GRAZIE


A proposito buona Pasqua a te e tutti gli aiutamici