Olimpo Informatico

[grace15]

Complete scanning result of "Drv_platform_this.exe", received in VirusTotal at 01.05.2007, 19:56:53 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.21 01.05.2007 no virus found
Authentium 4.93.8 12.30.2006 no virus found
Avast 4.7.892.0 12.30.2006 no virus found
AVG 386 01.05.2007 no virus found
BitDefender 7.2 01.05.2007 no virus found
CAT-QuickHeal 9.00 01.05.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.05.2007 no virus found
DrWeb 4.33 01.05.2007 no virus found
eSafe 7.0.14.0 01.05.2007 no virus found
eTrust-InoculateIT 23.73.106 01.05.2007 no virus found
eTrust-Vet 30.3.3304 01.05.2007 no virus found
Ewido 4.0 01.05.2007 no virus found
Fortinet 2.82.0.0 01.05.2007 suspicious
F-Prot 3.16f 01.05.2007 no virus found
F-Prot4 4.2.1.29 01.03.2007 no virus found
Ikarus T3.1.0.27 01.05.2007 not-a-virus:AdWare.Win32.Lop.ag
Kaspersky 4.0.2.24 01.05.2007 no virus found
McAfee 4933 01.05.2007 no virus found
Microsoft 1.1904 01.05.2007 no virus found
NOD32v2 1958 01.05.2007 no virus found
Norman 5.80.02 12.31.2007 no virus found
Panda 9.0.0.4 01.05.2007 Adware/Lop
Prevx1 V2 01.05.2007 no virus found
Sophos 4.13.0 01.05.2007 no virus found
Sunbelt 2.2.907.0 01.05.2007 no virus found
TheHacker 6.0.3.143 01.05.2007 no virus found
UNA 1.83 01.04.2007 no virus found
VBA32 3.11.1 01.04.2007 suspected of Trojan-Downloader.Obfuscated.1 (paranoid heuristics)
VirusBuster 4.3.19:9 01.05.2007 no virus found

Aditional Information
File size: 433152 bytes
MD5: 6872551ffdd2459d5ca357dde24d9c05
SHA1: 675a590d2300d7cea39c09132835fd9245a9c4cf
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.


Complete scanning result of "intra_beep_default.exe", received in VirusTotal at 01.05.2007, 20:03:46 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.21 01.05.2007 no virus found
Authentium 4.93.8 12.30.2006 no virus found
Avast 4.7.892.0 12.30.2006 no virus found
AVG 386 01.05.2007 no virus found
BitDefender 7.2 01.05.2007 no virus found
CAT-QuickHeal 9.00 01.05.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 01.05.2007 no virus found
DrWeb 4.33 01.05.2007 no virus found
eSafe 7.0.14.0 01.05.2007 no virus found
eTrust-InoculateIT 23.73.106 01.05.2007 no virus found
eTrust-Vet 30.3.3304 01.05.2007 no virus found
Ewido 4.0 01.05.2007 no virus found
Fortinet 2.82.0.0 01.05.2007 suspicious
F-Prot 3.16f 01.05.2007 no virus found
F-Prot4 4.2.1.29 01.03.2007 no virus found
Ikarus T3.1.0.27 01.05.2007 no virus found
Kaspersky 4.0.2.24 01.05.2007 no virus found
McAfee 4933 01.05.2007 no virus found
Microsoft 1.1904 01.05.2007 no virus found
NOD32v2 1958 01.05.2007 no virus found
Norman 5.80.02 12.31.2007 no virus found
Panda 9.0.0.4 01.05.2007 no virus found
Prevx1 V2 01.05.2007 no virus found
Sophos 4.13.0 01.05.2007 no virus found
Sunbelt 2.2.907.0 01.05.2007 no virus found
TheHacker 6.0.3.143 01.05.2007 no virus found
UNA 1.83 01.04.2007 no virus found
VBA32 3.11.1 01.04.2007 suspected of Trojan-Downloader.Obfuscated.1 (paranoid heuristics)
VirusBuster 4.3.19:9 01.05.2007 no virus found

Aditional Information
File size: 189440 bytes
MD5: 6d1d7ba7e2f0f257a7c62f49d03a3b44
SHA1: c8f0c0cd4f4443fb99e641f07c26dea6c95a5951
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.


Complete scanning result of "xgeaiqoc.exe", received in VirusTotal at 01.05.2007, 20:08:37 (CET).

Antivirus Version Update Result
AntiVir 7.3.0.21 01.05.2007 no virus found
Authentium 4.93.8 12.30.2006 no virus found
Avast 4.7.892.0 12.30.2006 no virus found
AVG 386 01.05.2007 no virus found
BitDefender 7.2 01.05.2007 no virus found
CAT-QuickHeal 9.00 01.05.2007 no virus found
ClamAV devel-20060426 01.05.2007 no virus found
DrWeb 4.33 01.05.2007 no virus found
eSafe 7.0.14.0 01.05.2007 no virus found
eTrust-InoculateIT 23.73.106 01.05.2007 no virus found
eTrust-Vet 30.3.3304 01.05.2007 no virus found
Ewido 4.0 01.05.2007 no virus found
Fortinet 2.82.0.0 01.05.2007 suspicious
F-Prot 3.16f 01.05.2007 no virus found
F-Prot4 4.2.1.29 01.03.2007 no virus found
Ikarus T3.1.0.27 01.05.2007 not-a-virus:AdWare.Win32.Lop.ag
Kaspersky 4.0.2.24 01.05.2007 no virus found
McAfee 4933 01.05.2007 no virus found
Microsoft 1.1904 01.05.2007 no virus found
NOD32v2 1958 01.05.2007 no virus found
Norman 5.80.02 12.31.2007 no virus found
Panda 9.0.0.4 01.05.2007 Adware/Lop
Prevx1 V2 01.05.2007 no virus found
Sophos 4.13.0 01.05.2007 no virus found
Sunbelt 2.2.907.0 01.05.2007 no virus found
TheHacker 6.0.3.143 01.05.2007 no virus found
UNA 1.83 01.04.2007 no virus found
VBA32 3.11.1 01.04.2007 suspected of Trojan-Downloader.Obfuscated.1 (paranoid heuristics)
VirusBuster 4.3.19:9 01.05.2007 no virus found

Aditional Information
File size: 550912 bytes
MD5: 9436de5080c6da10672e8b4d301782f7
SHA1: 2d1b0e8418548a4d0460194c09f1963a4f928f4f
VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

[Smjert]

Scarica Unlocker, installalo ma togli la spunta all'assistant (non ti serve).
Una volta installato clicca con il destro sulla cartella->Unlocker, nella finestra che ti si apre segna i processi che appaiono, poi premi Sblocca Tutto, a questo punto dovresti riuscire a cancellarla.
Se non ci riesci cancella con lo stesso metodo i singoli file (se ti appare la finestra che dice che niente li blocca li puoi cancellare normalmente) e poi la cartella.

[grace15]

sono riuscita a cancellare le cartelle incriminate, grazie. adesso sto facendo una scanzione con panda.
spero che riuscirà a completare il suo lavoro... fino ad ora ha trovato già 14 spyware..eppure le cookie le sto periodicamente eliminando. boh! ti tengo aggiornato.

[grace15]

ecco cosa ha trovato panda:
Adware:adware/sgrunt Non Disinfettato Registro di sistema di Windows
Spyware:Cookie/bravenetA Non Disinfettato C:\Documents and Settings\nellin@_90\Cookies\nellin@_90@bravenet[1].txt
Spyware:Cookie/Serving-sys Non Disinfettato C:\Documents and Settings\nellin@_90\Cookies\nellin@_90@bs.serving-sys[1].txt
Spyware:Cookie/Serving-sys Non Disinfettato C:\Documents and Settings\nellin@_90\Cookies\nellin@_90@serving-sys[2].txt
Spyware:Cookie/2o7 Non Disinfettato C:\Documents and Settings\Utente\Cookies\utente@2o7[2].txt
Spyware:Cookie/2o7 Non Disinfettato C:\Documents and Settings\Utente\Cookies\utente@microsoftwga.112.2o7[1].txt
Spyware:Cookie/Serving-sys Non Disinfettato C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\nglc7pnc.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Doubleclick Non Disinfettato C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\nglc7pnc.default\cookies.txt[.doubleclick.net/]
Spyware:Cookie/2o7 Non Disinfettato C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\nglc7pnc.default\cookies.txt[.microsoftwga.112.2o7.net/]
Spyware:Cookie/Overture Non Disinfettato C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\nglc7pnc.default\cookies.txt[.overture.com/]
Spyware:Cookie/Atlas DMT Non Disinfettato C:\Documents and Settings\Utente\Dati applicazioni\Mozilla\Firefox\Profiles\nglc7pnc.default\cookies.txt[.atdmt.com/]
Adware:Adware/Lop Non Disinfettato C:\Documents and Settings\Utente\Impostazioni locali\Temp\staA.exe
Adware:Adware/Lop Non Disinfettato C:\Documents and Settings\Utente\Impostazioni locali\Temp\staB.exe
Adware:Adware/Lop Non Disinfettato C:\Documents and Settings\Utente\Impostazioni locali\Temporary Internet Files\Content.IE5\PZRABUDE\upAYB[1]
Dialer:Dialer.ANF Non Disinfettato C:\Programmi\Telecom Italia\AdslWizzy\Driver\ArescomND220b\data1.cab[adiras.exe]
Adware:Adware/Lop Non Disinfettato C:\RECYCLER\S-1-5-21-725345543-484763869-839522115-1003\Dc49\Drv platform this.exe
Adware:Adware/Lop Non Disinfettato C:\RECYCLER\S-1-5-21-725345543-484763869-839522115-1003\Dc49\xgeaiqoc.exe


adesso elimino un attimo i cookies. e il dialer.
gli adware log che però si riproducono da soli.
ma l'adware\sgrunt dov'è come faccio a levarlo?

[grace15]

posso entrare in recicler ed eliminare quanto segnalato come aware ho combino pasticci?

[Smjert]

Riguardo l'Adware Sgrunt: purtroppo non sono ancora riuscito a capire a che diamine di chiave di registro si riferisce

Recycler: è il cestino di windows, quando cancelli malware ecc non buttarli solo nel cestino, dopo svuotalo!

[grace15]

volevo chiederti come posso cancellare questo dialer. se elimino ciò creo problemi alla connessione? in realtà quando uso esplora risorse, questo file ha l'icona di win.rar, ma se provo ad aprirlo mi dice chenon può perchè la sua estenzione è cab e winrar non sa aprirlo. posso eliminarlo, o no?

Dialer:Dialer.ANF Non Disinfettato C:\Programmi\Telecom Italia\AdslWizzy\Driver\ArescomND220b\data1.cab[adiras.exe]

sai come iliminare i cookeis di mozilla, non li ho trovati?
di recycler, alla fine, dopo un casino di tempo, ho capito che era il cestino!!
per sgrunt.. continuo a cercare, non vorrei formattare.

[Smjert]