Aiuto Dialer-Trojan

[shock_estremo]

Ho Kaspersky internet Security e ho avuto alcuni attacchi di dialer che però sono stati bloccati.
BitDefender mi segnala,invece, ben 14 file infetti :look::cav:
Vi allego il file a su megaupload
MEGAUPLOAD - The leading online storage and file delivery service

 

[tecnico24]

Ciao;)!
Disabilita il ripristino configurazione di sistema
Disabilitare il System Restore o Ripristino di configurazione di sistema
Poi Scaricati Avenger
Estrailo in una cartella a tua scelta
Esegui il file avenger.exe con la figura di una spada.
Ora incolla queste righe nella box bianca che si è aperta:

Files to delete:
C:\Documents and Settings\hope\bekrwpmq.exe
C:\Documents and Settings\hope\bekrwpmq.exe
C:\Documents and Settings\hope\bekrwpmq.exe
C:\Documents and Settings\hope\fbbfsdtj.exe
C:\Documents and Settings\hope\fbbfsdtj.exe
C:\Documents and Settings\hope\fbbfsdtj.exe
C:\Documents and Settings\hope\qmdduigq.exe
C:\Documents and Settings\hope\qmdduigq.exe
C:\Documents and Settings\hope\qmdduigq.exe
C:\Documents and Settings\hope\ykqtagbg.exe
C:\Documents and Settings\hope\ykqtagbg.exe
C:\Documents and Settings\hope\ykqtagbg.exe
C:\Documents and Settings\hope\yohoaajk.exe
C:\Documents and Settings\hope\yohoaajk.exe
C:\Documents and Settings\hope\yohoaajk.exe
C:\Documents and Settings\hope\zerhlwjd.exe
C:\Documents and Settings\hope\zerhlwjd.exe
C:\Documents and Settings\hope\zerhlwjd.exe
C:\Documents and Settings\hope\zhpcqbhi.exe
C:\Documents and Settings\hope\zhpcqbhi.exe
C:\Documents and Settings\hope\zhpcqbhi.exe

Togli il segno di spunta dalla voce Scan for Rootkits.
Premi il pulsante Execute .
Rispondi di Si alle due richieste di Avenger .
Adesso il tuo computer dovrebbe riavviarsi, nel caso non succedesse, riavvialo tu manualmente.
Al riavvio del computer, copia e incolla qui il contenuto del blocco note che apparirà e dimmi tu come va la situazione;)

 

[shock_estremo]

fatto ecco il log:

Logfile of The Avenger Version 2.0, (c) by Swandog46
Swandog46's Public Anti-Malware Tools

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:


Error: file "C:\Documents and Settings\hope\bekrwpmq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\bekrwpmq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\bekrwpmq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\bekrwpmq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\bekrwpmq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\bekrwpmq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\fbbfsdtj.exe" not found!
Deletion of file "C:\Documents and Settings\hope\fbbfsdtj.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\fbbfsdtj.exe" not found!
Deletion of file "C:\Documents and Settings\hope\fbbfsdtj.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\fbbfsdtj.exe" not found!
Deletion of file "C:\Documents and Settings\hope\fbbfsdtj.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\qmdduigq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\qmdduigq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\qmdduigq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\qmdduigq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\qmdduigq.exe" not found!
Deletion of file "C:\Documents and Settings\hope\qmdduigq.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\ykqtagbg.exe" not found!
Deletion of file "C:\Documents and Settings\hope\ykqtagbg.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\ykqtagbg.exe" not found!
Deletion of file "C:\Documents and Settings\hope\ykqtagbg.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\ykqtagbg.exe" not found!
Deletion of file "C:\Documents and Settings\hope\ykqtagbg.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\yohoaajk.exe" not found!
Deletion of file "C:\Documents and Settings\hope\yohoaajk.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\yohoaajk.exe" not found!
Deletion of file "C:\Documents and Settings\hope\yohoaajk.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\yohoaajk.exe" not found!
Deletion of file "C:\Documents and Settings\hope\yohoaajk.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zerhlwjd.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zerhlwjd.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zerhlwjd.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zerhlwjd.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zerhlwjd.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zerhlwjd.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zhpcqbhi.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zhpcqbhi.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zhpcqbhi.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zhpcqbhi.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "C:\Documents and Settings\hope\zhpcqbhi.exe" not found!
Deletion of file "C:\Documents and Settings\hope\zhpcqbhi.exe" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

Da quanto ho capito...dice a tutti che non esistono!

 

[tecnico24]

Mmm...BitDefender li segnala,possibile mai che non ci siano piu?vabbè proviamo con VirIT eXplorer Pro Anti-Virus - Security Software - Anti worm, trojan, backdoor e dialer
Fai una scansione,aspetta che rimuove tutti i virus automaticamente e poi posta qui il log.

 

[shock_estremo]

Pulita, 0 infetti....io rifaccio la scan con bit difender...mi sembra troppo strano!

 

[tecnico24]

Questi dialer ti portano problemi seri come disconnessioni etc..?

 

[shock_estremo]

Ho rifatto la scan con bit difender.....ZERO infetti...ma come cavolo si sono levati i 14 infetti allora?Forse lo stesso bit li ha levati?Anche se non diceva cos'....:shock::look: Ora sto facendo Kaspersky Antivirus On line e per ora mi segnala solo Daemon Tools ma come not a virus e questo già lo sapevo!

comunque non mi spiego >_<

 

[tecnico24]

Meglio così;)