sto diventando scemo con la scansione di Ad-aware 6 ....

Gennius

Gennius

Banned
ho fatto una prima scansione con Ad-aware 6 , e mi spuntavano 14 elementi "sospetti" alla voce... "Objects recognized" .... così ho messo in quarantena i 14 oggetti...e poi dalla quarantena li ho eliminati definitivamente... poi che ho fatto?.... ho spento e riacceso il pc... ho rifatto nuovamente la scansione....e risultavano ancora 2 elementi alla voce :"Objects recognized" ....così li ho messi in quarantena e poi da lì , li ho eliminati.... poi ho nuovamente spento e riacceso il pc.... ho nuovamente fatto la scansione con Ad-avare.... e nuovamente c'erano quelle 2 voci (gli stessi file)....alla voce... "Objects recognized" .... ma com'è possibile, se li avevo tolti solo 5 minuti prima??



riporto cosa mi dice Ad.aware alla fine della scansione , così vediamo se capiamo qualcosa..... :

Lavasoft Ad-aware Personal Build 6.181
Logfile created on :sabato 20 marzo 2004 12.43.40
Created with Ad-aware Personal, free for private use.
Using reference-file :01R271 19.03.2004
________________________________________
______________

Ad-aware Settings
=========================
Set : Activate in-depth scan (Recommended)
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep scan registry


20-03-04 12.43.40 - Scan started. (Smart mode)

Listing running processes
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

#:1 [kernel32.dll]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4293862515
Threads : 4
Priority : High
FileSize : 468 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1991-1998
CompanyName : Microsoft Corporation
FileDescription : Componente di base del kernel di Win32
InternalName : KERNEL32
OriginalFilename : KERNEL32.DLL
ProductName : Sistema operativo Microsoft(R) Windows(R)
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.27.20

#:2 [msgsrv32.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294955235
Threads : 1
Priority : Normal
FileSize : 11 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1992-1998
CompanyName : Microsoft Corporation
FileDescription : Server messaggi VxD a 32 bit di Windows
InternalName : MSGSRV32
OriginalFilename : MSGSRV32.EXE
ProductName : Sistema operativo Microsoft(R) Windows(R)
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 15/05/98 19.01.00

#:3 [mprexe.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294960979
Threads : 1
Priority : Normal
FileSize : 28 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1993-1998
CompanyName : Microsoft Corporation
FileDescription : WIN32 Network Interface Service Process
InternalName : MPREXE
OriginalFilename : MPREXE.EXE
ProductName : Microsoft(R) Windows(R) Operating System
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.38

#:4 [mmtask.tsk]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294963839
Threads : 1
Priority : Normal
FileSize : 1 KB
FileVersion : 4.03.1998
ProductVersion : 4.03.1998
Copyright : Copyright
CompanyName : Microsoft Corporation
FileDescription : Multimedia background task support module
InternalName : mmtask.tsk
OriginalFilename : mmtask.tsk
ProductName : Microsoft Windows
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 15/05/98 19.01.00

#:5 [explorer.exe]
FilePath : C:\WINDOWS\
ProcessID : 4294836887
Threads : 5
Priority : Normal
FileSize : 176 KB
FileVersion : 4.72.3110.1
ProductVersion : 4.72.3110.1
Copyright : Copyright (C) Microsoft Corp. 1981-1997
CompanyName : Microsoft Corporation
FileDescription : Esplora risorse
InternalName : explorer
OriginalFilename : EXPLORER.EXE
ProductName : Sistema operativo Microsoft(R) Windows NT(R)
Created on : 28/05/98 20.26.32
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.32

#:6 [taskmon.exe]
FilePath : C:\WINDOWS\
ProcessID : 4294848275
Threads : 1
Priority : Normal
FileSize : 28 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1998
CompanyName : Microsoft Corporation
FileDescription : Task Monitor
InternalName : TaskMon
OriginalFilename : TASKMON.EXE
ProductName : Microsoft(R) Windows(R) Operating System
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.44

#:7 [systray.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294848959
Threads : 1
Priority : Normal
FileSize : 36 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1993-1998
CompanyName : Microsoft Corporation
FileDescription : Applicazione System Tray
InternalName : SYSTRAY
OriginalFilename : SYSTRAY.EXE
ProductName : Sistema operativo Microsoft(R) Windows(R)
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.44

#:8 [dragdiag.exe]
FilePath : C:\PROGRAMMI\ALCATEL\SPEEDTOUCH USB\
ProcessID : 4294900619
Threads : 2
Priority : Normal
FileSize : 520 KB
FileVersion : 1.3.0
ProductVersion : 1.3.0
Copyright : Copyright
CompanyName : Alcatel Bell
FileDescription : Diagnostics
InternalName : Diagnostics
OriginalFilename : dragdiag.exe
ProductName : Alcatel Speedtouch USB Diagnostics
Created on : 20/12/03 16.21.13
Last accessed : 19/03/04 23.00.00
Last modified : 14/12/00 14.33.10

#:9 [avgctrl.exe]
FilePath : C:\PROGRAMMI\AVPERSONAL\
ProcessID : 4294873063
Threads : 3
Priority : Normal
FileSize : 76 KB
FileVersion : 6.24.00.01
ProductVersion : 6.24.00.01
Copyright : Copyright
CompanyName : H+BEDV Datentechnik GmbH
FileDescription : AntiVir Guard/9x Control Program
InternalName : AVGCtrl
OriginalFilename : AVGCTRL.EXE
ProductName : AntiVir Guard Control Program
Created on : 16/01/04 14.49.20
Last accessed : 19/03/04 23.00.00
Last modified : 16/01/04 14.49.20

#:10 [qttask.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294876471
Threads : 5
Priority : Normal
FileSize : 76 KB
FileVersion : 6.4
ProductVersion : QuickTime 6.4
CompanyName : Apple Computer, Inc.
FileDescription : Apple Computer, Inc.
InternalName : QuickTime Task
OriginalFilename : QTTask.exe
ProductName : QuickTime
Created on : 31/12/03 11.20.05
Last accessed : 19/03/04 23.00.00
Last modified : 31/12/03 11.20.06

#:11 [ddhelp.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294793983
Threads : 6
Priority : Realtime
FileSize : 31 KB
FileVersion : 4.08.01.0881
ProductVersion : 4.08.01.0881
Copyright : Copyright
CompanyName : Microsoft Corporation
FileDescription : Microsoft DirectX Helper
InternalName : DDHelp.exe
OriginalFilename : DDHelp.exe
ProductName : Microsoft
Created on : 20/12/03 15.29.50
Last accessed : 19/03/04 23.00.00
Last modified : 30/10/01 7.10.00

#:12 [rnaapp.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294833963
Threads : 3
Priority : Normal
FileSize : 44 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1992-1998
CompanyName : Microsoft Corporation
FileDescription : Applicazione di Accesso remoto
InternalName : RNAAPP
OriginalFilename : RNAAPP.EXE
ProductName : Sistema operativo Microsoft(R) Windows(R)
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.42

#:13 [tapisrv.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294805667
Threads : 6
Priority : Normal
FileSize : 120 KB
FileVersion : 4.10.1998
ProductVersion : 4.10.1998
Copyright : Copyright (C) Microsoft Corp. 1994-1998
CompanyName : Microsoft Corporation
FileDescription : Server di Telefonia Microsoft
InternalName : Servizio di telefonia
OriginalFilename : TAPISRV.EXE
ProductName : Sistema operativo Microsoft(R) Windows(R)
Created on : 01/01/01
Last accessed : 19/03/04 23.00.00
Last modified : 28/05/98 20.26.44

#:14 [avwin.exe]
FilePath : C:\PROGRAMMI\AVPERSONAL\
ProcessID : 4294716159
Threads : 2
Priority : Normal
FileSize : 643 KB
FileVersion : 6.24.00.06
ProductVersion : 6.24.00.06
Copyright : Copyright
CompanyName : H+BEDV Datentechnik GmbH
FileDescription : AVWIN.EXE
InternalName : AVWIN.EXE
OriginalFilename : AVWIN.EXE
ProductName : AVWIN
Created on : 04/03/04 15.30.12
Last accessed : 19/03/04 23.00.00
Last modified : 04/03/04 15.30.12

#:15 [spybotsd.exe]
FilePath : C:\PROGRAMMI\SPYBOT - SEARCH & DESTROY\
ProcessID : 4294660335
Threads : 3
Priority : Normal
FileSize : 2912 KB
FileVersion : 1.2.0.8
ProductVersion : 1.2
CompanyName : PepiMK Software
FileDescription : Spybot - Search & Destroy
InternalName : SpybotSD
OriginalFilename : SpyBotSD.exe
ProductName : SpyBot-S&D
Created on : 16/03/03 0.02.00
Last accessed : 19/03/04 23.00.00
Last modified : 16/03/03 0.02.00

#:16 [ad-aware.exe]
FilePath : C:\PROGRAMMI\LAVASOFT\AD-AWARE 6\
ProcessID : 4294592907
Threads : 4
Priority : Normal
FileSize : 668 KB
FileVersion : 6.0.1.181
ProductVersion : 6.0.0.0
Copyright : Copyright
CompanyName : Lavasoft Sweden
FileDescription : Ad-aware 6 core application
InternalName : Ad-aware.exe
OriginalFilename : Ad-aware.exe
ProductName : Lavasoft Ad-aware Plus
Created on : 17/03/04 7.58.07
Last accessed : 19/03/04 23.00.00
Last modified : 12/07/03 21.00.20

#:17 [iexplore.exe]
FilePath : C:\PROGRAMMI\INTERNET EXPLORER\
ProcessID : 4294634835
Threads : 8
Priority : Normal
FileSize : 59 KB
FileVersion : 5.00.2919.6304
ProductVersion : 5.00.2919.6304
Copyright : Copyright (C) Microsoft Corp. 1981-1999
CompanyName : Microsoft Corporation
FileDescription : Internet Explorer
InternalName : iexplore
OriginalFilename : IEXPLORE.EXE
ProductName : Sistema operativo Microsoft(R) Windows(R) 2000
Created on : 28/11/99 23.00.00
Last accessed : 19/03/04 23.00.00
Last modified : 28/11/99 23.00.00

#:18 [pstores.exe]
FilePath : C:\WINDOWS\SYSTEM\
ProcessID : 4294512195
Threads : 3
Priority : Normal
FileSize : 79 KB
FileVersion : 5.00.1877.3
ProductVersion : 5.00.1877.3
Copyright : Copyright (C) Microsoft Corp. 1981-1998
CompanyName : Microsoft Corporation
FileDescription : Protected storage server
InternalName : Protected storage server
OriginalFilename : Protected storage server
ProductName : Microsoft(R) Windows NT(R) Operating System
Created on : 28/11/99 23.00.00
Last accessed : 19/03/04 23.00.00
Last modified : 28/11/99 23.00.00

Memory scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


Started deep registry scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Deep registry scan result :
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 0


¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Tracking Cookie Object recognized!
Type : File
Data : a@cgi-bin[1].txt
Object : C:\WINDOWS\Cookies\

Created on : 20/03/04 11.46.54
Last accessed : 19/03/04 23.00.00
Last modified : 20/03/04 11.46.56



Tracking Cookie Object recognized!
Type : File
Data : [email protected][2].txt
Object : C:\WINDOWS\Cookies\

Created on : 20/03/04 11.45.58
Last accessed : 19/03/04 23.00.00
Last modified : 20/03/04 11.46.00


¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Deep scanning and examining files (C
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯


Performing conditional scans..
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯

Conditional scan result:
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
New objects : 0
Objects found so far: 2


13.04.54 Scan complete

Summary of this scan
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Total scanning time :00.21.10.820
Objects scanned :29737
Objects identified :2
Objects ignored :0
New objects :2




x me tutto questo è arabo.... :-?
 
ti ha trovato due cookie, che probabilmente anche se cancelli, te li riprendi non appena accedi a internet a qualche pagina.
pero', secondo me non e' grave.
vai tranquillo che e' tutto a posto, mi domando solo perche' hai un programma che gira che si chiama "SPYBOT - SEARCH & DESTROY\ " a che ti serve? e l'altro programma che non conosco e' "CompanyName : H+BEDV Datentechnik GmbH
FileDescription : AVWIN.EXE "
che cosa e' ?
 
Fool ha scritto:
ti ha trovato due cookie, che probabilmente anche se cancelli, te li riprendi non appena accedi a internet a qualche pagina.
pero', secondo me non e' grave.
vai tranquillo che e' tutto a posto, mi domando solo perche' hai un programma che gira che si chiama "SPYBOT - SEARCH & DESTROY\ " a che ti serve? e l'altro programma che non conosco e' "CompanyName : H+BEDV Datentechnik GmbH
FileDescription : AVWIN.EXE "
che cosa e' ?
Clicca per allargare...

SPYBOT è un programma x rilevare virus, dialer...e porcherie simili....

l'altro....

CompanyName : H+BEDV Datentechnik GmbH .... non so che sia...
 
You must log in or register to reply here.

Similar threads

Moroboshi
Sicurezza informatica Analisi hijackthis.log
Risposte
3
Visite
830
Moroboshi
Moroboshi

Users who are viewing this thread

Total: 1 (members: 0, guests: 1)
Back
Alto