Problema dopo rimozione virus

Shot

Utente Attivo
377
18
CPU
Intel core i7 2700k
Scheda Madre
Fatal1ty P67 Professional
HDD
OCZ Agility 3 250GB
RAM
Corsair Vengeance DDR3 8 GB
GPU
Evga GTX 580
Monitor
Monitor Lcd 23.6" Asus VH242H FullHD
PSU
Cooler Master GX Series PSU 80Plus Bronze - 550 Watt
Case
Antec Nine Hundred
OS
Windows 7 x64
Sera, oggi ho fatto una scansione con malwarebytes sul muletto e mi ha trovato vari malware, ho rimosso e fino qui tutto ok, per sicurezza ho fatto anche una scansione con HiJackThis, e in qualche voce ho trovato "(file missing)" cosa che non avevo mai notato, siccome i file mancanti sono di system32, una cartella importantissima, malwarebytes potrebbe aver compromesso qualcosa?
Posto il log di HiJackThis:

Running processes:
C:\Program Files (x86)\Sapphire TRIXX\TRIXX.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Origin\Origin.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Shadow\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files (x86)\Trend Micro\HiJackThis\HiJackThis.exe


R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN Hotmail.fr, Messenger, Skype, Sydrive, Actualité, Sport, People, Femmes - MSN France
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: ::1 localhost
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files (x86)\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO LOCALE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVIZIO DI RETE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVIZIO DI RETE')
O17 - HKLM\System\CCS\Services\Tcpip\..\{36B3BDE8-60F5-4E54-8587-DFF5BB4C702D}: NameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{36B3BDE8-60F5-4E54-8587-DFF5BB4C702D}: NameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{36B3BDE8-60F5-4E54-8587-DFF5BB4C702D}: NameServer = 192.168.1.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @Keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
 
Ultima modifica:

informaticage

Utente Attivo
170
17
CPU
AMD FX 8120
Scheda Madre
ASRock 990fx extreme 3
HDD
Seageate Barracuda 1TB 7200RPM
RAM
4x4GB DDR3 Corsair Vengeance 1600 cl9
GPU
AMD Radeon HD 7770
PSU
XFX ProSeries 650W
Case
Cooler Master 430 elite
OS
Linux Mint Mate
Se il sistema non ha problemi con bsod o instabilità non preccuparti, inoltre pulisci il pc con CCleaner, AUSLOGICS disk defrag , registy cleaner e registy defrag per riavere le prestazioni prima dell'infezione e per pulire le varie chiavi di registro
 

Entra

oppure Accedi utilizzando
Discord Ufficiale Entra ora!