VIRUS NELLA MEMORIA

[Luke57]

Scompatta significa aprire un file compresso con winzip o winrar ( giusto per avere una idea)

Giusto
anche "estrai il file eseguibile di gmer (gmer.exe) dalla cartella .zip"

[annonio]

Allora: ho "scompattato"!!
La scansione relativa ai Rookit la riesco a salvare ma quella relativa all'Autostart no...perche' non c'e' un tasto "save" ...forse non ho capito bene....potreste dirmi semplicemente clicca qui oppure clicca li?? Sono un po'confuso
Ad ogni modo questo e' il log dei Rookit:
GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2008-11-29 17:39:43
Windows 5.1.2600 Service Pack 2


---- Devices - GMER 1.0.14 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

---- EOF - GMER 1.0.14 ----



Spiegatemi bene per favore!!

Attendo sviluppi

Antonio

[annonio]

Non riesco a salvare la scansione dell'Autostart....se clicco su copy mi esce una scritta in inglese che mi dice(se il mio inglese non mi inganna) di premere Ctrl+V keys...ma come si fa a salvarla??Non riesco proprio!
La prima scansione dei Rookit riesco a salvarla ed e' questa:
GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2008-11-29 17:39:43
Windows 5.1.2600 Service Pack 2


---- Devices - GMER 1.0.14 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)
AttachedDevice \FileSystem\Fastfat \Fat aswMon2.SYS (avast! File System Filter Driver for Windows XP/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Ip aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Tcp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\Udp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Tcpip \Device\RawIp aswTdi.SYS (avast! TDI Filter Driver/ALWIL Software)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)

---- EOF - GMER 1.0.14 ----


Attendo sviluppi!

[Luke57]

Ciao, nel primo report non c'è niente, ctrl+v non è altro che la funzione copy mediante la tastiera, premi qui deu tasti e poi apri un file di testo (dal blocco note di windows, strat>programmi>blocco note) ci incolli il testo, salvi il file e lo alleghi a un post.

[annonio]

Grazie Luke!!
Ci sono riuscito finalmente!!
Di seguito il secondo report (relativo all'Autostart):




GMER 1.0.14.14536 - httpwww.gmer.net
Autostart scan 2008-11-29 194401
Windows 5.1.2600 Service Pack 2


HKLMSYSTEMCurrentControlSetControlSession ManagerSubSystems@Windows = %SystemRoot%system32csrss.exe ObjectDirectory=Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrvUserServerDllInitialization,3 ServerDll=winsrvConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogon@Userinit = CWINDOWSsystem32userinit.exe,

HKLMSoftwareMicrosoftWindows NTCurrentVersionWinlogonNotify
igfxcui@DLLName = igfxdev.dll
WgaLogon@DLLName = WgaLogon.dll

HKLMSYSTEMCurrentControlSetServices
AcerMemUsageCheckService@ = CAcerEmpowering TechnologyePerformanceMemCheck.exe
aswUpdSv@ = CProgrammiAlwil SoftwareAvast4aswUpdSv.exe
avast! Antivirus@ = CProgrammiAlwil SoftwareAvast4ashServ.exe
ehRecvr@ = CWINDOWSeHomeehRecvr.exe
ehSched@ = CWINDOWSeHomeehSched.exe
eLockService@ = CAcerEmpowering TechnologyeLockServiceeLockServ.exe
EvtEng@ = CProgrammiIntelWirelessBinEvtEng.exe
Fax@ = %systemroot%system32fxssvc.exe
LVPrcSrv@ = cprogrammifile comunilogitechlvmvfmLVPrcSrv.exe
McrdSvc@ = CWINDOWSehomemcrdsvc.exe
Pml Driver HPZ12@ = CWINDOWSsystem32HPZipm12.exe
RegSrvc@ = CProgrammiIntelWirelessBinRegSrvc.exe
S24EventMonitor@ = CProgrammiIntelWirelessBinS24EvMon.exe
Utilità di pianificazione di LiveUpdate automatico@ = CProgrammiSymantecLiveUpdateALUSchedulerSvc.exe

HKLMSoftwareMicrosoftWindowsCurrentVersionRun
@ehTrayCWINDOWSehomeehtray.exe = CWINDOWSehomeehtray.exe
@preloadCWindowsRUNXMLPL.exe = CWindowsRUNXMLPL.exe
@SynTPEnhCProgrammiSynapticsSynTPSynTPEnh.exe = CProgrammiSynapticsSynTPSynTPEnh.exe
@AzMixerSelCProgrammiRealtekInstallShieldAzMixerSel.exe = CProgrammiRealtekInstallShieldAzMixerSel.exe
@AGRSMMSGAGRSMMSG.exe = AGRSMMSG.exe
@ntiMUICProgrammiNewTech InfosystemsNTI CD & DVD-Maker 7ntiMUI.exe = CProgrammiNewTech InfosystemsNTI CD & DVD-Maker 7ntiMUI.exe
@ file not found = file not found
@IMJPMIG8.1CWINDOWSIMEimjp8_1IMJPMIG.EXE Spoil RemAdvDef Migration32 = CWINDOWSIMEimjp8_1IMJPMIG.EXE Spoil RemAdvDef Migration32
@MSPY2002CWINDOWSsystem32IMEPINTLGNTImScInst.exe SYNC = CWINDOWSsystem32IMEPINTLGNTImScInst.exe SYNC
@PHIME2002ASyncCWINDOWSsystem32IMETINTLGNTTINTSETP.EXE SYNC = CWINDOWSsystem32IMETINTLGNTTINTSETP.EXE SYNC
@PHIME2002ACWINDOWSsystem32IMETINTLGNTTINTSETP.EXE IMEName = CWINDOWSsystem32IMETINTLGNTTINTSETP.EXE IMEName
@igfxtrayCWINDOWSsystem32igfxtray.exe = CWINDOWSsystem32igfxtray.exe
@igfxhkcmdCWINDOWSsystem32hkcmd.exe = CWINDOWSsystem32hkcmd.exe
@igfxpersCWINDOWSsystem32igfxpers.exe = CWINDOWSsystem32igfxpers.exe
@RTHDCPLRTHDCPL.EXE = RTHDCPL.EXE
@SkyTelSkyTel.EXE = SkyTel.EXE
@AlcmtrALCMTR.EXE = ALCMTR.EXE
@LaunchApCProgrammiLaunch ManagerLaunchAp.exe = CProgrammiLaunch ManagerLaunchAp.exe
@LManagerCProgrammiLaunch ManagerHotkeyApp.exe = CProgrammiLaunch ManagerHotkeyApp.exe
@CtrlVolCProgrammiLaunch ManagerCtrlVol.exe = CProgrammiLaunch ManagerCtrlVol.exe
@LMgrOSDCProgrammiLaunch ManagerOSDCtrl.exe = CProgrammiLaunch ManagerOSDCtrl.exe
@WbuttonCProgrammiLaunch ManagerWbutton.exe = CProgrammiLaunch ManagerWbutton.exe
@eLockMonitorCAcerEmpowering TechnologyeLockMonitorLaunchMonitor.exe file not found = CAcerEmpowering TechnologyeLockMonitorLaunchMonitor.exe file not found
@eDataSecurity LoaderCAcerEmpowering TechnologyeDataSecurityeDSloader.exe 0 file not found = CAcerEmpowering TechnologyeDataSecurityeDSloader.exe 0 file not found
@ePower_DMCCAcerEmpowering TechnologyePowerePower_DMC.exe = CAcerEmpowering TechnologyePowerePower_DMC.exe
@BootCAcerEmpowering TechnologyePowerBoot.exe = CAcerEmpowering TechnologyePowerBoot.exe
@Acer ePresentation HPDCAcerEmpowering TechnologyePresentationePresentation.exe = CAcerEmpowering TechnologyePresentationePresentation.exe
@eRecoveryServiceCAcerEmpowering TechnologyeRecoveryeRAgent.exe = CAcerEmpowering TechnologyeRecoveryeRAgent.exe
@LVCOMSXCWINDOWSsystem32LVCOMSX.EXE = CWINDOWSsystem32LVCOMSX.EXE
@LogitechCameraAssistantCProgrammiAcerOrbiCamCameraAssistant.exe = CProgrammiAcerOrbiCamCameraAssistant.exe
@LogitechVideo[inspector]CProgrammiAcerOrbiCamInstallHelper.exe inspect = CProgrammiAcerOrbiCamInstallHelper.exe inspect
@LogitechCameraService(E)CWINDOWSsystem32ElkCtrl.exe automation = CWINDOWSsystem32ElkCtrl.exe automation
@Samsung PanelMgrCWINDOWSSamsungPanelMgrssmmgr.exe autorun = CWINDOWSSamsungPanelMgrssmmgr.exe autorun
@HP Software UpdateCProgrammiHPHP Software UpdateHPWuSchd2.exe = CProgrammiHPHP Software UpdateHPWuSchd2.exe
@avast!CPROGRA~1ALWILS~1Avast4ashDisp.exe = CPROGRA~1ALWILS~1Avast4ashDisp.exe

HKCUSoftwareMicrosoftWindowsCurrentVers ... CTFMON.EXE = CWINDOWSsystem32ctfmon.exe

HKLMSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsApproved
@{42071714-76d4-11d1-8b24-00a0c9068ff3} Estensione panoramica video del Pannello di controllodeskpan.dll file not found = deskpan.dll file not found
@{596AB062-B4D2-4215-9F74-E9109B0A8153} Pagina proprietà versioni precedenti%SystemRoot%system32twext.dll = %SystemRoot%system32twext.dll
@{9DB7A13C-F208-4981-8353-73CC61AE2783} Versioni precedenti%SystemRoot%system32twext.dll = %SystemRoot%system32twext.dll
@{30D02401-6A81-11d0-8274-00C04FD5AE38} IE Search BandCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} Shell DocObject ViewerCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{FBF23B40-E3F0-101B-8488-00AA003E56F8} InternetShortcutCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{3C374A40-BAE4-11CF-BF7D-00AA006946EE} Microsoft Url History ServiceCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{FF393560-C2A7-11CF-BFF4-444553540000} HistoryCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{7BD29E00-76C1-11CF-9DD0-00A0C9034933} Temporary Internet FilesCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{7BD29E01-76C1-11CF-9DD0-00A0C9034933} Temporary Internet FilesCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{CFBFAE00-17A6-11D0-99CB-00C04FD64497} Microsoft Url Search HookCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{3DC7A020-0ACD-11CF-A9BB-00AA004AE837} The InternetCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{871C5380-42A0-1069-A2EA-08002B30309D} Internet Name SpaceCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} Autoplay for SlideShow(null) =
@{692F0339-CBAA-47e6-B5B5-3B84DB604E87} Extensions Manager FolderCWINDOWSsystem32extmgr.dll = CWINDOWSsystem32extmgr.dll
@{2F603045-309F-11CF-9774-0020AFD0CFF6} Synaptics Control PanelCProgrammiSynapticsSynTPSynTPCpl.dll = CProgrammiSynapticsSynTPSynTPCpl.dll
@{2b45bd21-71f8-4c8c-a87a-7eeb25a1a3e0} EPM-PO Shell Extensionepm-po.dll = epm-po.dll
@{59850401-6664-101B-B21C-00AA004BA90B} Microsoft Office Binder UnbindCPROGRA~1MICROS~2Office1040UNBIND.DLL = CPROGRA~1MICROS~2Office1040UNBIND.DLL
@{0006F045-0000-0000-C000-000000000046} Microsoft Outlook Custom Icon HandlerCPROGRA~1MICROS~2OfficeOLKFSTUB.DLL = CPROGRA~1MICROS~2OfficeOLKFSTUB.DLL
@{E0D79304-84BE-11CE-9641-444553540000} WinZipCPROGRA~1WINZIPWZSHLSTB.DLL = CPROGRA~1WINZIPWZSHLSTB.DLL
@{E0D79305-84BE-11CE-9641-444553540000} WinZipCPROGRA~1WINZIPWZSHLSTB.DLL = CPROGRA~1WINZIPWZSHLSTB.DLL
@{E0D79306-84BE-11CE-9641-444553540000} WinZipCPROGRA~1WINZIPWZSHLSTB.DLL = CPROGRA~1WINZIPWZSHLSTB.DLL
@{E0D79307-84BE-11CE-9641-444553540000} WinZipCPROGRA~1WINZIPWZSHLSTB.DLL = CPROGRA~1WINZIPWZSHLSTB.DLL
@{07C45BB1-4A8C-4642-A1F5-237E7215FF66} IE Microsoft BrowserBandCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{1C1EDB47-CE22-4bbb-B608-77B48F83C823} IE Fade TaskCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{205D7A97-F16D-4691-86EF-F3075DCCA57D} IE Menu Desk BarCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{3028902F-6374-48b2-8DC6-9725E775B926} IE AutoCompleteCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{43886CD5-6529-41c4-A707-7B3C92C05E68} IE Navigation BarCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{44C76ECD-F7FA-411c-9929-1B77BA77F524} IE Menu SiteCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{4B78D326-D922-44f9-AF2A-07805C2A3560} IE Menu BandCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{6038EF75-ABFC-4e59-AB6F-12D397F6568D} IE Microsoft History AutoComplete ListCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{6B4ECC4F-16D1-4474-94AB-5A763F2A54AE} IE Tracking Shell MenuCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{6CF48EF8-44CD-45d2-8832-A16EA016311B} IE IShellFolderBandCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{73CFD649-CD48-4fd8-A272-2070EA56526B} IE BandProxyCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8} IE MRU AutoComplete ListCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E} IE RSS Feeder FolderCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{9D958C62-3954-4b44-8FAB-C4670C1DB4C2} IE Microsoft Shell Folder AutoComplete ListCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{B31C5FAE-961F-415b-BAF0-E697A5178B94} IE Microsoft Multiple AutoComplete List ContainerCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{BC476F4C-D9D7-4100-8D4E-E043F6DEC409} Microsoft Browser ArchitectureCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A} IE Shell Rebar BandSiteCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{E6EE9AAC-F76B-4947-8260-A9F136138E11} IE Shell Band Site MenuCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{F2CF5485-4E02-4f68-819C-B92DE9277049} &LinksCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{F83DAC1C-9BB9-4f2b-B619-09819DA81B0E} IE Registry Tree Options UtilityCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75} IE User AssistCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{FDE7673D-2E19-4145-8376-BBD58C4BC7BA} IE Custom MRU AutoCompleted ListCWINDOWSsystem32ieframe.dll = CWINDOWSsystem32ieframe.dll
@{C169E5F0-E2B3-41F3-B81A-7BA529CBE193} ZipGenius Shell ExtensionCPROGRA~1ZIPGEN~1contmenu.dll = CPROGRA~1ZIPGEN~1contmenu.dll
@{472083B0-C522-11CF-8763-00608CC02F24} avastCProgrammiAlwil SoftwareAvast4ashShell.dll = CProgrammiAlwil SoftwareAvast4ashShell.dll
@{FC9FB64A-1EB2-4CCF-AF5E-1A497A9B5C2D} Messenger Sharing FoldersCProgrammiMSN Messengerfsshext.8.1.0178.00.dll = CProgrammiMSN Messengerfsshext.8.1.0178.00.dll

HKCUSoftwareMicrosoftWindowsCurrentVersionShell ExtensionsApproved@{BDEADF00-C265-11d0-BCED-00A0C90AB50F} Cartelle Web = CPROGRA~1FILECO~1MICROS~1WEBFOL~1MSONSEXT.DLL

HKLMSoftwareClassesshellexContextMenuHandlers
avast@{472083B0-C522-11CF-8763-00608CC02F24} = CProgrammiAlwil SoftwareAvast4ashShell.dll
EDSshellExt@{29FF7AB0-BE34-4992-A30B-53A9D86EE239} = CWINDOWSsystem32eDSshellExt.dll
WinZip@{E0D79304-84BE-11CE-9641-444553540000} = CPROGRA~1WINZIPWZSHLSTB.DLL
ZipGenius 6@{C169E5F0-E2B3-41F3-B81A-7BA529CBE193} = CPROGRA~1ZIPGEN~1contmenu.dll

HKLMSoftwareClassesDirectoryshellexContextMenuHandlers
EDSshellExt@{29FF7AB0-BE34-4992-A30B-53A9D86EE239} = CWINDOWSsystem32eDSshellExt.dll
WinZip@{E0D79304-84BE-11CE-9641-444553540000} = CPROGRA~1WINZIPWZSHLSTB.DLL
ZipGenius 6@{C169E5F0-E2B3-41F3-B81A-7BA529CBE193} = CPROGRA~1ZIPGEN~1contmenu.dll

HKLMSoftwareClassesFoldershellexContextMenuHandlers
avast@{472083B0-C522-11CF-8763-00608CC02F24} = CProgrammiAlwil SoftwareAvast4ashShell.dll
WinZip@{E0D79304-84BE-11CE-9641-444553540000} = CPROGRA~1WINZIPWZSHLSTB.DLL

HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects
@{02478D38-C3F9-4EFB-9B51-7695ECA05670}CProgrammiYahoo!CompanionInstallscpnyt.dll = CProgrammiYahoo!CompanionInstallscpnyt.dll
@{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}CProgrammiAdobeAcrobat 7.0ActiveXAcroIEHelper.dll = CProgrammiAdobeAcrobat 7.0ActiveXAcroIEHelper.dll
@{53707962-6F74-2D53-2644-206D7942484F}CPROGRA~1SPYBOT~1SDHelper.dll = CPROGRA~1SPYBOT~1SDHelper.dll
@{9030D464-4C02-4ABF-8ECC-5164760863C6}CProgrammiFile comuniMicrosoft SharedWindows LiveWindowsLiveLogin.dll = CProgrammiFile comuniMicrosoft SharedWindows LiveWindowsLiveLogin.dll

HKLMSoftwareMicrosoftInternet ExplorerMain
@Default_Page_URLhttpgo.microsoft.comfwlinkLinkId=69157 = httpgo.microsoft.comfwlinkLinkId=69157
@Start Pagehttpgo.microsoft.comfwlinkLinkId=69157 = httpgo.microsoft.comfwlinkLinkId=69157
@Local Page%SystemRoot%system32blank.htm = %SystemRoot%system32blank.htm

HKCUSoftwareMicrosoftInternet ExplorerMain
@Start Pagehttpwww.libero.it = httpwww.libero.it
@Local PageCWINDOWSsystem32blank.htm = CWINDOWSsystem32blank.htm

HKLMSoftwareClassesPROTOCOLSHandler
dvd@CLSID = CWINDOWSsystem32msvidctl.dll
its@CLSID = CWINDOWSsystem32itss.dll
livecall@CLSID = CPROGRA~1MSNMES~1MSGRAP~1.DLL
mhtml@CLSID = %SystemRoot%system32inetcomm.dll
ms-its@CLSID = CWINDOWSsystem32itss.dll
msnim@CLSID = CPROGRA~1MSNMES~1MSGRAP~1.DLL
tv@CLSID = CWINDOWSsystem32msvidctl.dll

HKLMSoftwareClassesPROTOCOLSHandlerwia@CLSID = CWINDOWSsystem32wiascr.dll

CDocuments and SettingsAll UsersMenu AvvioProgrammiEsecuzione automatica
Microsoft Office.lnk = Microsoft Office.lnk
Adobe Reader Speed Launch.lnk = Adobe Reader Speed Launch.lnk

---- EOF - GMER 1.0.14 ---


Attendo sviluppi!!

[Luke57]

Ciao, nel report non scorgo niente di minaccioso, se l'antivirus rileva nuovamente la presunta infezione, posta tutto quello che segnala, percorso del file infetto compreso.

[annonio]

Va bene...ti faccio sapere!!

Intanto grazie mille per la disponabilita' e la pazienza!!



Antonio