Olimpo Informatico

[Orange]

non è indispensabile, almeno che non incontri qualche problema.

[@83]

ho lanciato evanger ma stranamente i log è bianco

[@83]

ho usato atf ed ora posso usara sys71424 eseguo scansione

[Smjert]

[@83]

dove recuper il log di sys71424 l'aveva fatto ma or non lo trovo +

[@83]

ho trovato il log di avenger l'ha chiamato nhctmjsw ed è questo


Files to delete:
C:\Programmi\File comuni\System\mKjlTS.exe
C:\WINDOWS\bittorrent.exe

[@83]

poi ho trovato questo log sul desktop può essere quello di sys???

#
# An unexpected error has been detected by HotSpot Virtual Machine:
#
# EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x00000001, pid=2884, tid=1376
#
# Java VM: Java HotSpot(TM) Client VM (1.5.0_06-b05 mixed mode, sharing)
# Problematic frame:
# C 0x00000001
#

--------------- T H R E A D ---------------

Current thread (0x0752bc58): JavaThread "AWT-Windows" daemon [_thread_in_native, id=1376]

siginfo: ExceptionCode=0xc0000005, reading address 0x00000001

Registers:
EAX=0x091cf7f4, EBX=0x00000000, ECX=0x080ce6b0, EDX=0x080d97e0
ESP=0x07a0f7b8, EBP=0x07a0f7e8, ESI=0x0752bd18, EDI=0x00008027
EIP=0x00000001, EFLAGS=0x00010246

Top of Stack: (sp=0x07a0f7b8)
0x07a0f7b8: 6d0e3da8 091cf7f4 07a0f850 6d0e39b0
0x07a0f7c8: 00000000 0752bc58 6d6f45e6 0752bd18
0x07a0f7d8: 07a0f7c0 07a0f86c 6d0f4498 00000001
0x07a0f7e8: 07a0f814 77d18709 001605ee 00008027
0x07a0f7f8: 080ce6b0 091cf7f4 6d0e39b0 dcbaabcd
0x07a0f808: 00000000 07a0f850 6d0e39b0 07a0f87c
0x07a0f818: 77d187eb 6d0e39b0 001605ee 00008027
0x07a0f828: 080ce6b0 091cf7f4 00000000 001605ee

Instructions: (pc=0x00000001)
0xfffffff1:


Stack: [0x07910000,0x07a10000), sp=0x07a0f7b8, free space=1021k
Native frames: (J=compiled Java code, j=interpreted, Vv=VM code, C=native code)
C 0x00000001
C [USER32.dll+0x8709]
C [USER32.dll+0x87eb]
C [USER32.dll+0xb368]
C [USER32.dll+0xb3b4]
C [ntdll.dll+0xeae3]
C [USER32.dll+0x93df]

Java frames: (J=compiled Java code, j=interpreted, Vv=VM code)
j sun.awt.windows.WToolkit.eventLoop()V+0
j sun.awt.windows.WToolkit.run()V+69
j java.lang.Thread.run()V+11
v ~StubRoutines::call_stub

--------------- P R O C E S S ---------------

Java Threads: ( => current thread )
0x08066a48 JavaThread "AWT-EventQueue-0" [_thread_blocked, id=2848]
0x07581cb0 JavaThread "Thread-10" [_thread_blocked, id=3364]
0x075dba08 JavaThread "Image Animator 0" daemon [_thread_blocked, id=1180]
0x080dabc0 JavaThread "Thread-8" [_thread_blocked, id=3460]
0x080e87c0 JavaThread "PlayerStub" [_thread_blocked, id=608]
0x08126920 JavaThread "TimerQueue" daemon [_thread_blocked, id=3588]
0x08114d00 JavaThread "Thread-7" [_thread_blocked, id=2412]
0x08104a80 JavaThread "PlayerStub" [_thread_blocked, id=3388]
0x080cb3e0 JavaThread "Receiver-1" [_thread_in_native, id=3564]
0x080c0310 JavaThread "COM.volano.VolanoChat" [_thread_blocked, id=2596]
0x076fa488 JavaThread "Java Sound Event Dispatcher" daemon [_thread_blocked, id=3708]
0x07555bf8 JavaThread "AWT-EventQueue-2" [_thread_in_native, id=1860]
0x076f9fb8 JavaThread "thread applet-COM.volano.VolanoChat.class" [_thread_blocked, id=816]
0x075306a8 JavaThread "traceMsgQueueThread" daemon [_thread_blocked, id=3332]
=>0x0752bc58 JavaThread "AWT-Windows" daemon [_thread_in_native, id=1376]
0x0752b7f0 JavaThread "AWT-Shutdown" [_thread_blocked, id=3612]
0x0752a718 JavaThread "Java2D Disposer" daemon [_thread_blocked, id=3200]
0x040c6358 JavaThread "Low Memory Detector" daemon [_thread_blocked, id=3592]
0x040c5008 JavaThread "CompilerThread0" daemon [_thread_blocked, id=1452]
0x04091210 JavaThread "Signal Dispatcher" daemon [_thread_blocked, id=3544]
0x0408dc50 JavaThread "Finalizer" daemon [_thread_blocked, id=1120]
0x0408d0d0 JavaThread "Reference Handler" daemon [_thread_blocked, id=4036]
0x04017008 JavaThread "main" [_thread_blocked, id=2868]

Other Threads:
0x040c48d0 VMThread [id=3316]
0x040c7608 WatcherThread [id=3944]

VM state:not at safepoint (normal execution)

VM Mutex/Monitor currently owned by a thread: None

Heap
def new generation total 576K, used 83K [0x20ad0000, 0x20b70000, 0x21230000)
eden space 512K, 9% used [0x20ad0000, 0x20adbf38, 0x20b50000)
from space 64K, 56% used [0x20b60000, 0x20b69058, 0x20b70000)
to space 64K, 0% used [0x20b50000, 0x20b50000, 0x20b60000)
tenured generation total 4308K, used 3029K [0x21230000, 0x21665000, 0x26ad0000)
the space 4308K, 70% used [0x21230000, 0x21525408, 0x21525600, 0x21665000)
compacting perm gen total 8192K, used 2523K [0x26ad0000, 0x272d0000, 0x2aad0000)
the space 8192K, 30% used [0x26ad0000, 0x26d46d88, 0x26d46e00, 0x272d0000)
ro space 8192K, 63% used [0x2aad0000, 0x2afdb178, 0x2afdb200, 0x2b2d0000)
rw space 12288K, 46% used [0x2b2d0000, 0x2b869fa8, 0x2b86a000, 0x2bed0000)

Dynamic libraries:
0x00400000 - 0x00419000 C:\Programmi\Internet Explorer\iexplore.exe
0x7c910000 - 0x7c9c6000 C:\WINDOWS\system32\ntdll.dll
0x7c800000 - 0x7c8ff000 C:\WINDOWS\system32\kernel32.dll
0x77be0000 - 0x77c38000 C:\WINDOWS\system32\msvcrt.dll
0x77d10000 - 0x77da0000 C:\WINDOWS\system32\USER32.dll
0x77e40000 - 0x77e86000 C:\WINDOWS\system32\GDI32.dll
0x77e90000 - 0x77f06000 C:\WINDOWS\system32\SHLWAPI.dll
0x77f40000 - 0x77feb000 C:\WINDOWS\system32\ADVAPI32.dll
0x77da0000 - 0x77e31000 C:\WINDOWS\system32\RPCRT4.dll
0x77730000 - 0x7789c000 C:\WINDOWS\system32\SHDOCVW.dll
0x77a50000 - 0x77ae5000 C:\WINDOWS\system32\CRYPT32.dll
0x77af0000 - 0x77b02000 C:\WINDOWS\system32\MSASN1.dll
0x76890000 - 0x76913000 C:\WINDOWS\system32\CRYPTUI.dll
0x76bf0000 - 0x76c1e000 C:\WINDOWS\system32\WINTRUST.dll
0x76c50000 - 0x76c78000 C:\WINDOWS\system32\IMAGEHLP.dll
0x770f0000 - 0x7717c000 C:\WINDOWS\system32\OLEAUT32.dll
0x774b0000 - 0x775ec000 C:\WINDOWS\system32\ole32.dll
0x5bc70000 - 0x5bcc4000 C:\WINDOWS\system32\NETAPI32.dll
0x77180000 - 0x77227000 C:\WINDOWS\system32\WININET.dll
0x76f20000 - 0x76f4d000 C:\WINDOWS\system32\WLDAP32.dll
0x77bd0000 - 0x77bd8000 C:\WINDOWS\system32\VERSION.dll
0x48000000 - 0x48027000 C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
0x71a30000 - 0x71a47000 C:\WINDOWS\system32\WS2_32.dll
0x71a20000 - 0x71a28000 C:\WINDOWS\system32\WS2HELP.dll
0x773a0000 - 0x774a2000 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
0x10000000 - 0x10023000 C:\Programmi\Google\Google Desktop Search\GoogleDesktopCommon.dll
0x41000000 - 0x41020000 C:\Programmi\Google\Google Desktop Search\GoogleDesktopIE.dll
0x7c9d0000 - 0x7d1eb000 C:\WINDOWS\system32\SHELL32.dll
0x5d4d0000 - 0x5d567000 C:\WINDOWS\system32\comctl32.dll
0x77230000 - 0x772cd000 C:\WINDOWS\system32\urlmon.dll
0x62000000 - 0x62085000 C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopResources_it.dll
0x719d0000 - 0x71a10000 C:\WINDOWS\system32\mswsock.dll
0x5b180000 - 0x5b1b8000 C:\WINDOWS\system32\uxtheme.dll
0x00ac0000 - 0x00ae0000 C:\PROGRA~1\ALICET~1\SMARTB~1\SBHook.dll
0x746b0000 - 0x746fb000 C:\WINDOWS\system32\MSCTF.dll
0x75f30000 - 0x7602c000 C:\WINDOWS\system32\BROWSEUI.dll
0x20000000 - 0x20013000 C:\WINDOWS\system32\browselc.dll
0x77b10000 - 0x77b32000 C:\WINDOWS\system32\appHelp.dll
0x76f90000 - 0x7700f000 C:\WINDOWS\system32\CLBCATQ.DLL
0x77010000 - 0x770e2000 C:\WINDOWS\system32\COMRes.dll
0x60000000 - 0x60091000 C:\Programmi\Google\Google Desktop Search\GoogleDesktopAPI2.dll
0x77f10000 - 0x77f21000 C:\WINDOWS\system32\Secur32.dll
0x60560000 - 0x60593000 C:\WINDOWS\system32\AcSignIcon.dll
0x72f70000 - 0x72f96000 C:\WINDOWS\system32\WINSPOOL.DRV
0x779f0000 - 0x77a45000 C:\WINDOWS\System32\cscui.dll
0x765b0000 - 0x765cd000 C:\WINDOWS\System32\CSCDLL.dll
0x778f0000 - 0x779e7000 C:\WINDOWS\system32\SETUPAPI.dll
0x01a70000 - 0x01df4000 c:\programmi\google\googletoolbar1.dll
0x01e00000 - 0x020c6000 C:\WINDOWS\system32\msi.dll
0x76b00000 - 0x76b2e000 C:\WINDOWS\system32\WINMM.dll
0x71a50000 - 0x71a5a000 C:\WINDOWS\system32\WSOCK32.dll
0x76340000 - 0x7635d000 C:\WINDOWS\system32\IMM32.dll
0x76330000 - 0x76335000 C:\WINDOWS\system32\MSIMG32.dll
0x74910000 - 0x74a40000 C:\WINDOWS\system32\msxml3.dll
0x4d530000 - 0x4d588000 C:\WINDOWS\system32\WINHTTP.dll
0x59e60000 - 0x59f01000 C:\WINDOWS\system32\DBGHELP.DLL
0x76950000 - 0x76976000 C:\WINDOWS\system32\ntshrui.dll
0x76ae0000 - 0x76af1000 C:\WINDOWS\system32\ATL.DLL
0x76980000 - 0x76a34000 C:\WINDOWS\system32\USERENV.dll
0x76ea0000 - 0x76edc000 C:\WINDOWS\system32\RASAPI32.DLL
0x76e50000 - 0x76e62000 C:\WINDOWS\system32\rasman.dll
0x76e70000 - 0x76e9f000 C:\WINDOWS\system32\TAPI32.dll
0x76e40000 - 0x76e4e000 C:\WINDOWS\system32\rtutils.dll
0x71aa0000 - 0x71ab2000 C:\WINDOWS\system32\MPR.dll
0x77c40000 - 0x77c63000 C:\WINDOWS\system32\msv1_0.dll
0x76d20000 - 0x76d39000 C:\WINDOWS\system32\iphlpapi.dll
0x75f10000 - 0x75f17000 C:\WINDOWS\System32\drprov.dll
0x71ba0000 - 0x71bae000 C:\WINDOWS\System32\ntlanman.dll
0x71c60000 - 0x71c77000 C:\WINDOWS\System32\NETUI0.dll
0x71c20000 - 0x71c60000 C:\WINDOWS\System32\NETUI1.dll
0x71c10000 - 0x71c17000 C:\WINDOWS\System32\NETRAP.dll
0x71b80000 - 0x71b93000 C:\WINDOWS\System32\SAMLIB.dll
0x75f20000 - 0x75f29000 C:\WINDOWS\System32\davclnt.dll
0x72240000 - 0x72245000 C:\WINDOWS\system32\sensapi.dll
0x75920000 - 0x75a18000 C:\WINDOWS\system32\MSGINA.dll
0x76310000 - 0x76320000 C:\WINDOWS\system32\WINSTA.dll
0x745e0000 - 0x7461d000 C:\WINDOWS\system32\ODBC32.dll
0x76360000 - 0x763aa000 C:\WINDOWS\system32\comdlg32.dll
0x02c60000 - 0x02c78000 C:\WINDOWS\system32\odbcint.dll
0x02d30000 - 0x03005000 C:\WINDOWS\system32\xpsp2res.dll
0x02c80000 - 0x02cb7000 C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
0x7c120000 - 0x7c139000 C:\WINDOWS\system32\ATL71.DLL
0x7c3a0000 - 0x7c41b000 C:\WINDOWS\system32\MSVCP71.dll
0x7c340000 - 0x7c396000 C:\WINDOWS\system32\MSVCR71.dll
0x73b10000 - 0x73b24000 C:\WINDOWS\System32\sti.dll
0x74a70000 - 0x74a77000 C:\WINDOWS\System32\CFGMGR32.dll
0x02ce0000 - 0x02cf9000 C:\Programmi\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.ITA
0x02d10000 - 0x02d1d000 C:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
0x75e40000 - 0x75ef0000 C:\WINDOWS\system32\SXS.DLL
0x03350000 - 0x033a4000 C:\Programmi\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
0x033e0000 - 0x0346c000 C:\WINDOWS\system32\shdoclc.dll
0x75d50000 - 0x75de1000 C:\WINDOWS\system32\mlang.dll
0x66750000 - 0x667a8000 C:\WINDOWS\system32\hnetcfg.dll
0x71a10000 - 0x71a18000 C:\WINDOWS\System32\wshtcpip.dll
0x76ee0000 - 0x76f07000 C:\WINDOWS\system32\DNSAPI.dll
0x76f80000 - 0x76f86000 C:\WINDOWS\system32\rasadhlp.dll
0x7d4b0000 - 0x7d792000 C:\WINDOWS\System32\mshtml.dll
0x74650000 - 0x74677000 C:\WINDOWS\System32\msls31.dll
0x74680000 - 0x746aa000 C:\WINDOWS\System32\msimtf.dll
0x325c0000 - 0x325d2000 C:\Programmi\Microsoft Office\OFFICE11\msohev.dll
0x75c00000 - 0x75c6e000 C:\WINDOWS\System32\jscript.dll
0x67330000 - 0x6736f000 C:\WINDOWS\System32\iepeers.dll
0x76270000 - 0x762e1000 C:\WINDOWS\System32\mshtmled.dll
0x66d50000 - 0x66d5c000 C:\WINDOWS\system32\ImgUtil.dll
0x5e750000 - 0x5e75c000 C:\WINDOWS\System32\pngfilt.dll
0x72c90000 - 0x72c99000 C:\WINDOWS\system32\wdmaud.drv
0x72c80000 - 0x72c88000 C:\WINDOWS\system32\msacm32.drv
0x77bb0000 - 0x77bc5000 C:\WINDOWS\system32\MSACM32.dll
0x77ba0000 - 0x77ba7000 C:\WINDOWS\system32\midimap.dll
0x6d590000 - 0x6d5a2000 C:\Programmi\Java\jre1.5.0_06\bin\npjpi150_06.dll
0x5f210000 - 0x5f227000 C:\WINDOWS\system32\OLEPRO32.DLL
0x6d400000 - 0x6d417000 C:\Programmi\Java\jre1.5.0_06\bin\jpiexp32.dll
0x76f70000 - 0x76f78000 C:\WINDOWS\System32\winrnr.dll
0x6d450000 - 0x6d468000 C:\Programmi\Java\jre1.5.0_06\bin\jpishare.dll
0x6d670000 - 0x6d804000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\client\jvm.dll
0x6d280000 - 0x6d288000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\hpi.dll
0x76bb0000 - 0x76bbb000 C:\WINDOWS\system32\PSAPI.DLL
0x6d640000 - 0x6d64c000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\verify.dll
0x6d300000 - 0x6d31d000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\java.dll
0x6d660000 - 0x6d66f000 C:\PROGRA~1\Java\JRE15~1.0_0\bin\zip.dll
0x6d000000 - 0x6d167000 C:\Programmi\Java\jre1.5.0_06\bin\awt.dll
0x736d0000 - 0x73719000 C:\WINDOWS\system32\ddraw.dll
0x73b30000 - 0x73b36000 C:\WINDOWS\system32\DCIMAN32.dll
0x738b0000 - 0x73980000 C:\WINDOWS\system32\D3DIM700.DLL
0x6d240000 - 0x6d27d000 C:\Programmi\Java\jre1.5.0_06\bin\fontmanager.dll
0x6d1f0000 - 0x6d203000 C:\Programmi\Java\jre1.5.0_06\bin\deploy.dll
0x6d5d0000 - 0x6d5ef000 C:\Programmi\Java\jre1.5.0_06\bin\RegUtils.dll
0x6d3e0000 - 0x6d3f5000 C:\Programmi\Java\jre1.5.0_06\bin\jpicom32.dll

VM Arguments:
jvm_args: -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol -Djavaplugin.vm.options=-Djava.class.path=C:\PROGRA~1\Java\JRE15~1.0_0\classes -Xbootclasspath/a:C:\PROGRA~1\Java\JRE15~1.0_0\lib\deploy.jar;C:\PROGRA~1\Java\JRE15~1.0_0\lib\plugin.jar -Xmx96m -Djavaplugin.maxHeapSize=96m -Xverify:remote -Djavaplugin.version=1.5.0_06 -Djavaplugin.nodotversion=150_06 -Dbrowser=sun.plugin -DtrustProxy=true -Dapplication.home=C:\PROGRA~1\Java\JRE15~1.0_0 -Djava.protocol.handler.pkgs=sun.plugin.net.protocol vfprintf
java_command: <unknown>
Launcher Type: generic

Environment Variables:
CLASSPATH="C:\WINDOWS\system32\QTJava.zip"
PATH=C:\PROGRA~1\Java\JRE15~1.0_0\bin;C:\Programmi\Internet Explorer;;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Programmi\File comuni\Autodesk Shared\;C:\Programmi\backburner 2\;C:\Programmi\ATI Technologies\ATI.ACE\;C:\Programmi\File comuni\Adobe\AGL;C:\Programmi\Satsuki Decoder Pack\filtres;.
USERNAME=Paolo
OS=Windows_NT
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 4, GenuineIntel



--------------- S Y S T E M ---------------

OS: Windows XP Build 2600 Service Pack 2

CPU:total 2 family 15, cmov, cx8, fxsr, mmx, sse, sse2, ht

Memory: 4k page, physical 1047596k(436872k free), swap 3263316k(2727816k free)

vm_info: Java HotSpot(TM) Client VM (1.5.0_06-b05) for windows-x86, built on Nov 10 2005 11:12:14 by "java_re" with MS VC++ 6.0

[Smjert]

Il log di avenger non è quello che hai postato.. semmai sono i comandi ^^ (il log è fatto diverso).
Riguardo al log del sys.. no nn è quello, dovrebbe mettertelo dove hai fatto partire l'exe, oppure in C:\SuspectFile (se non ricordo male..).

[@83]

grande smjert era in suspectfile mentre quello di asvenger non riesco a trovarlo ma sono sicuro che dopo che si è riavviato il pc il log era vuoto

http://www.freefilehosting.net/download/NDA0Mjg=

[Smjert]

O mamma quanti post XD
Faccio una fusione dei post e ne rimuovo uno.. intanto ti guardo il log.

[Smjert]

Passiamo alla pulizia finale (speriamo):

Vai su Start->Esegui->digita control userpasswords2 e dai invio.
Ti appare una finestra che ti mostra gli account sul tuo pc, rimuovi lfJa, NFOUAorBSMJRdvEc e UenBzLJye.

Ora dobbia riusare Avenger, mi raccomando segui bene i procedimenti:

Avvia il file avenger.exe
Seleziona l'opzione "Input Script Manually"
Clicca sulla lente di ingrandimento

Ti si apre una finestra "View/edit script"
All'interno del box bianco,copia e incolla le scritte qui sotto:

[@83]

ho provato di nuovo con avanger il og è questo
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\pxtsdbki

*******************

Script file located at: \??\C:\WINDOWS\system32\gixeovbe.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\Programmi\File comuni\System\mKjlTS.exe deleted successfully.
File C:\WINDOWS\bittorrent.exe deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

inoltre nella cartella di avanger su C: èc'è il file maledetto lpt1.yr_

[Smjert]

Ottimo, vai in questa cartella C:\Programmi\File comuni\System e controlla se ci sono altri file, se sì scrivimi quali ci sono, se no cancella la cartella.
Continua con le mie istruzioni (a questo punto non mettere la linea C:\Windows\bittorrent.exe)

[@83]

ho trovato e rimosso gli account che mi hai detto anche se oltre al mio c'erano administretor ed altri 2 non so se è normale

poi questo è il log di avenger
Logfile of The Avenger version 1, by Swandog46
Running from registry key:
\Registry\Machine\System\CurrentControlSet\Services\dpxquxuh

*******************

Script file located at: \??\C:\Program Files\kfophoam.txt
Script file opened successfully.

Script file read successfully

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

File C:\documents and settings\NFOUAO~1.LOG deleted successfully.
File C:\documents and settings\lfJa.LOG deleted successfully.
File C:\documents and settings\UENBZL~1.LOG deleted successfully.


File C:\Windows\bittorrent.exe not found!
Deletion of file C:\Windows\bittorrent.exe failed!

Could not process line:
C:\Windows\bittorrent.exe
Status: 0xc0000034

Folder C:\documents and settings\UenBzLJye deleted successfully.
Folder C:\documents and settings\NFOUAorBSMJRdvEc deleted successfully.
Folder C:\documents and settings\lfJa deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

inoltre questo è cioò che ha cancellato CCleaner
http://www.freefilehosting.net/download/NDA0NjM=

[@83]

in file comuni ci sono 4 cartelle :
ado
msadc
MSMAPI
Ole DB

e 2 file:

directdb.dll
wab32.dll

[Smjert]

Ottimo ottimo, abbiamo pure liberato 361mb non sei contento?

Credo che tu a questo punto sia a posto.. la cartella System lasciala così com'è.

Ogni tanto (ogni 2/3 mesi? poi dipende da quanto "traffico" generi), fai girare CCleaner.. così per pulire un po'.

Ti saluto e vado a dormire, sperando che il tuo pc sia guarito.

[@83]

6 un grande + che un dio un SANTO GRAZIE DI TUTTO
p.s. il messaggio privato è sempre valido

[@83]

Sìsì tranquillo, è normale, Avenger non cancella direttamente i file ma fa un backup (casomai ci si sbagliasse a rimuovere qualcosa).
Alla fine di tutto, quando sarai pulito puoi cancellare la cartella Avenger in C:\[/quote]

ho provato ad eliminare la cartella di avenger cu C:\ e riesco ad eliminare tutto tranne il file lpt1.yr_ copm,e lo tolgo ??