Ciao,
ho fatto una scansione come amministratore col programma Clamwin (come antivirus standard ho Antivir) e mi ha rilevato i seguenti problemi:

C:\Program Files\Avira\AntiVir Desktop\aerdl.dll: Trojan.Fakesec-310 FOUND

C:\Users\DAVIDE\Documents\Utilità per il sistema\programma Avira Antivir V\avira_antivir_personal_10_it.exe: moved to 'C:\ProgramData\.clamwin\quarantine\avira_antivir_personal_10_it.exe.infected'

C:\Windows\SoftwareDistribution\Download\35a021c81e15272677cd9619f6edc313d71c13d5: moved to 'C:\ProgramData\.clamwin\quarantine\35a021c81e15272677cd9619f6edc313d71c13d5.infected'

C:\Windows\SoftwareDistribution\Download\448ebcdcce2a34ac55ef721a7c62835632a5063f: moved to 'C:\ProgramData\.clamwin\quarantine\448ebcdcce2a34ac55ef721a7c62835632a5063f.infected'

C:\Windows\SoftwareDistribution\Download\d4f8a4b080a648cc890ebf328a7310dcfd3ebf89: moved to 'C:\ProgramData\.clamwin\quarantine\d4f8a4b080a648cc890ebf328a7310dcfd3ebf89.infected'

C:\Program Files\Avira\AntiVir Desktop\aerdl.dll: Trojan.Fakesec-310 FOUND

C:\Program Files\Avira\AntiVir Desktop\FAILSAFE\aerdl.dll: Trojan.Fakesec-310 FOUND

C:\Users\DAVIDE\Documents\Utilità per il sistema\programma Avira Antivir V\avira_antivir_personal_10_it.exe: Trojan.GenericFF-1 FOUND

C:\Windows\SoftwareDistribution\Download\35a021c81e15272677cd9619f6edc313d71c13d5: Trojan.GenericFF-1 FOUND

C:\Windows\SoftwareDistribution\Download\448ebcdcce2a34ac55ef721a7c62835632a5063f: Trojan.GenericFF-1 FOUND

C:\Windows\SoftwareDistribution\Download\d4f8a4b080a648cc890ebf328a7310dcfd3ebf89: Trojan.GenericFF-1 FOUND

C:\Windows\winsxs\x86_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.21022.8_none_ecdf8c290e547f39\vcomp90.dll: Trojan.GenericFF-1 FOUND

C:\Windows\winsxs\x86_microsoft.vc90.openmp_1fc8b3b9a1e18e3b_9.0.30729.4148_none_80b7c8a91e9dd16a\vcomp90.dll: Trojan.GenericFF-1 FOUND


Più una serie di ipotetici falsi positivi:



The following files are Digitally Signed by Microsoft and have been incorrectly detected as viruses:

C:\Windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD.sys: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD2.sys: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\System32\DriverStore\FileRepository\netw2.inf_cfad6bd0\NETw2v32.sys: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\wscript.exe: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18000_none_486853160059f17b\wscript.exe: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.18068_none_482f75de008363d9\wscript.exe: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6001.22175_none_48ab41df19abd38f\wscript.exe: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-scripting_31bf3856ad364e35_6.0.6002.18005_none_4a53cc21fd7bbcc7\wscript.exe: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD.sys: [Trojan.GenericFF-1] FALSE POSITIVE FOUND

C:\Windows\winsxs\x86_microsoft-windows-usbcamd_31bf3856ad364e35_6.0.6002.18005_none_a173da9c755cd9a9\USBCAMD2.sys: [Trojan.GenericFF-1] FALSE POSITIVE FOUND


Ora la domanda è: innanzitutto è valido 'sto programma? In secondo luogo mi pare abbia individuato come infettti anche file di Antivir...
In terzo luogo se è consigliabile ripristinare il tutto come devo fare adesso che li ha spostati in quarantena visto che non vedo una funzione di ripristino?

----------- punto di ripristino precedente :O)

---

Ciao.
Quello che dice ClamWin, non lo prenderei per oro colato.
Limitati a scansionare il PC regolarmente, con Avira e MalwareBytes Free.
Infischiatene di quello che dice ClamWin: molto meglio Avira, e MalwareBytes.

Ciao, nessun problema era un controllo di routine