rimozione file infetti

[mbura]

Ciao a tutti,
volevo sapere se qualcuno può chiarirmi una cosa pre favore.
Ho fatto una scansione con Malwarebytes Anti malware 1.31 e sono risultati tutta una serie di file, registri, chiavi infette.
Posso eliminarli e metterein quarantena tutto?
Come faccio a sapere se tutto quanto è stato rilevato è effetivamente eliminabile?
Ringrazio in anticipo chi mi saprà aiutare

[Luke57]

Ciao, posta il report di malwarebytes, con un copia e incolla.

[mbura]

Ecco il log, grazie

Processi delle memoria infetti:
C:\WINDOWS\msauc.exe (Trojan.Pakes) -> No action taken.
C:\WINDOWS\sysguard.exe (Trojan.FakeAlert) -> No action taken.

Moduli della memoria infetti:
C:\WINDOWS\system32\crypts.dll (Trojan.Agent) -> No action taken.

Chiavi di registro infette:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt (Trojan.Agent) -> No action taken.

Valori di registro infetti:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sysguard (Trojan.FakeAlert.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lsass driver (Trojan.Pakes) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\advap32 (Trojan.Agent) -> No action taken.

Elementi dato del registro infetti:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders (Trojan.Agent) -> Data: digeste.dll -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

Cartelle infette:
(Nessun elemento malevolo rilevato)

File infetti:
C:\WINDOWS\sysguard.exe (Trojan.FakeAlert.H) -> No action taken.
C:\WINDOWS\msauc.exe (Trojan.Pakes) -> No action taken.
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\browsers.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\wpv251229732464.cpx (Trojan.Pakes) -> No action taken.
C:\WINDOWS\system32\shell31.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\wpv741229999452.cpx (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\digeste.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\crypts.dll (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN2.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN2.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN3.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN3.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN4.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN5.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN6.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN6.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN7.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN8.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN9.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN11.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN12.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN15.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN16.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN19.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN1A.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN1B.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN1F.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\Temp\BN2C.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN10.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN11.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN12.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN13.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN14.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN15.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN16.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN17.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN18.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN19.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN1A.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN1C.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN1E.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN20.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN2B.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN2D.tmp (Trojan.Agent) -> No action taken.
C:\Documents and Settings\xxx\Local Settings\Temp\BN41.tmp (Trojan.Agent) -> No action taken.
C:\WINDOWS\system32\drivers\750.exe (Rootkit.Agent) -> No action taken.

[Luke57]

Ciao, mi sembrano tutti da eliminare, con qualche dubbio solo su queste due voci di registro:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetActiveDesktop (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

[mbura]

Grazie mille, provo a eliminare tutti tranne quei due?