Ciao a tutti,
penso di essermi beccata il BAGLE.
Mi ero scaricata un gioco da eMule e si è rivelato una vera (spiacevole) sopresa...
Una volta attivato mi ha riavviato il pc e da quel momento il mio antivirus (nod32) è diventato una "applicazione non valida per win32". Non funziona nemmeno avast o qualsiasi altro antivirus che ho provato a scaricare.
Allora mi sono messa a cercare online la soluzione e, digitando i sintomi, ho trovato la risposta: ho un BAGLE.
E ho trovato anche un posto che credo sia quello giusto per porre la mia domanda: questo forum (spero )
Ho scaricato già vari removalkit (tipo elibagla o il removal kit della symantec) ma non funzionano.
Ho visto in un altro post del passato che qualcuno di consigliava di scaricare Avenger ed eliminare alcuni file... ma qui nemmeno Avenger funziona
Ho allora fatto un scan online con KASPERSKY... e ho ottenuto queste informazioni...
Qualcuno mi potrebbe aiutare? Non voglio dover formattare il pc...
Grazie
Ivy
---------------------------------------------------------------------------------------------------------------
Wednesday, May 28, 2008 7:29:58 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 27/05/2008
Kaspersky Anti-Virus database records: 801559
Scan Settings
Scan using the following antivirus database extended
Scan Archives true
Scan Mail Bases true
Scan Target My Computer
C:\
D:\
E:\
Scan Statistics
Total number of scanned objects 90593
Number of viruses found 4
Number of infected objects 6
Number of suspicious objects 0
Duration of the scan process 05:23:21
Infected Object Name Virus Name Last Action
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
C:\Documents and Settings\All Users\Dati applicazioni\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
C:\Documents and Settings\casa\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\actc.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\actind.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\activation.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\dbfile.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\dbind.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\vc.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Adobe\Acrobat\7.0\Digital Editions\Vouchers\voucherlog.txt Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\cert8.db Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\history.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\key3.db Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\parent.lock Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\search.sqlite Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\zotero\zotero.sqlite Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\call256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\call512.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\callmember256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chat1024.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chat256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chat512.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chat8192.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmember256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg1024.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg2048.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg4096.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg512.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatmsg8192.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatsync\25\250d069b4c4b3ad2.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatsync\77\77ff9ddf89bd8b26.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatsync\94\94806bed0d08b36c.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\chatsync\dd\dded57bf13634c86.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\contactgroup1024.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\contactgroup256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\contactgroup512.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\dyncontent\bundle.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\index2.dat Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\profile16384.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\sms256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\transfer1024.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\transfer256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\transfer512.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\user1024.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\user16384.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\user256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\user32768.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\user4096.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Skype\ivysoul2000\voicemail256.dbb Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\abook-1.mab Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\abook-4.mab Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\abook.mab Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\cert8.db Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\impab-1.mab Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\key3.db Object is locked skipped
C:\Documents and Settings\casa\Dati applicazioni\Thunderbird\Profiles\o4zsjpbx.default\Mail\Local Folders\Inbox.msf Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Cronologia\History.IE5\MSHist012008052820080529\index.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Microsoft\Feeds Cache\index.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Dati applicazioni\Mozilla\Firefox\Profiles\d2krve2s.default\XUL.mfl Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Temp\AcrB41E.tmp Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\Content.IE5\42DED7KY\b64_1[1].jpg Infected: Trojan-Downloader.Win32.Bagle.ij skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\Content.IE5\42DED7KY\b64_2[1].jpg Infected: Email-Worm.Win32.Bagle.vr skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\Content.IE5\42DED7KY\b64_3[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\casa\Impostazioni locali\Temporary Internet Files\Content.IE5\MJC9Z3WV\b64[1].jpg Infected: Email-Worm.Win32.Bagle.of skipped
C:\Documents and Settings\casa\ntuser.dat Object is locked skipped
C:\Documents and Settings\casa\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\casa\UserData\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Cronologia\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Dati applicazioni\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Impostazioni locali\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\download\FSP_klite27rc1.exe/file2 Infected: not-a-virus:AdWare.Win32.Altnet.e skipped
C:\download\FSP_klite27rc1.exe Inno: infected - 1 skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\WINDOWS\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB929338\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\$hf_mig$\KB931784\SP2QFE\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\Sti_Trace.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\Antiviru.evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\wiadebug.log Object is locked skipped
C:\WINDOWS\wiaservc.log Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
Scan process completed.