Newsgroup: it.comp.sicurezza.windows
Titolo: Virus, trojan o cosa???

Ciao a tutti,
1. Scarico un eseguibile da Kazaa Lite K++.
2. Un file piccolo, 2 o 3 MB.
3. Vado ad aprire la cartella "My shared folder".
4. Il file scaricato che dovrebbe essere piccolo piccolo ha una dimensione
di 200 MB!
5. Ripeto l'operazione e ho sempre lo stesso risultato, qualsiasi
eseguibile scarichi.
Preciso che:
1. Ho un AMD XP2800+ Barton su Asus A8V7X-X con 512 MB di RAM.
2. Ho Avast! installato, sempre residente in memoria, sempre
aggiornato e sempre col controllo del P2P.
3. La dimensione dei file scaricati non appare immediatamente pompata
appena il download e' completato, ma dopo qualche minuto o cmq dopo
aver chiuso e poi riaperto la cartella "My shared folder".
4. Naturalmente l'eseguibile scaricato e' "ineseguibile"... cioč corrotto
fino al midollo.
E' Avast! che e' una chiavica, ho un trojan sghignazzante nella
cartella di sistema o mi devo far lobotomizzare?
-- 
"Children in the dark make accidents, but accidents in the dark make
children"
questo articolo e` stato inviato via web dal servizio gratuito 
http://www.newsland.it/news
 segnala gli abusi ad 
ab...@newsland.it

 ha scritto nel messaggio
news:bqnl23$7pr$1...@news.newsland.it...


 Ciao
Fatto e sono ancora + inguaiato...
Eseguo il sysclean e Avast! mi dice che ha trovato il VBS:Redlof in
Sysclean.exezz. Che vuol dire?
Lo elimino, ricomincio da capo e c'è ancora... Ma dov'è questo virus?
Help needed!


Ciao Davide, naturalmente era sottointeso che al momento della scansione con
quel tool tu disabiliti temporaneamente qualsiasi software di antivirus! :-)


 quel tool tu disabiliti temporaneamente qualsiasi software di antivirus! :-)
Flavio,
Non capisco perche' sia necessario disabilitare l'Avast... Non e' che il
sysclean stesso sia corrotto???
Help
Davide
PS: Faccio fatica a fidarmi pure di un tool scaricato da un sito di
antivirus. I file *.com mi puzzano tanto  ;-)


Certo che no!
Anche se lanci un altro antivirus ti farebbe la stessa cosa! :-) Provare per
credere!
Tranqui fai come ti ho detto!
;-)


 ;-)
Provo oggi pom :-/
A dopo
Davide


Oky, fammi sapere se riesci! ;-)




Dunque dunque...
Disabilito l'Avast, avvio il Syscan, aspetto 20 minuti abbondanti (intanto
lavo i piatti lordi di ieri sera), torno al pc e visualizzo il
sysclean.log.
Il syscan trova 2 file infetti, ma non riesco a decifrare nel log il loro
nome... Quello che mi colpisce di piů č perň il fatto che per circa 60
volte appare il seguente messaggio:
Could not set file for reading on
"C:\WINDOWS\Prefetch\
Nomefile.EXE-pippopippo.pf
": Accesso negato
Tutto su file diversi. Tutti *.exe, qualche *.ini e qualche *.com.
E' normale?
Preciso che non ho nessun programma aperto (ho disabilitato pure lo
screensaver).
Che vuol dire? Formatto tutto?


 ha scritto nel messaggio
news:br53m6$olm$1...@news.newsland.it...


 posta sul ng la prima parte del log!
Il virus era il PE_DUSTER.A!
Ecco il log:
/--------------------------------------------------------------\
|                 Trend Micro Sysclean Package                 |
|              Copyright 2002, Trend Micro, Inc.               |
|                  
http://www.trendmicro.com
                   |
\--------------------------------------------------------------/
2003-12-09, 18:26:01,   Auto-clean mode specified.
2003-12-09, 18:26:01,   Running scanner "C:\SYS\TSC.BIN"...
2003-12-09, 18:26:02,   Scanner "C:\SYS\TSC.BIN" has finished running.
2003-12-09, 18:26:02,   TSC Log:
Damage Cleanup Engine (DCE)  3.5(Build 1119)
Windows XP(Build 2600: Service Pack 1)
Start time : Tue Dec 09 18:26:01 2003
Load Damage Cleanup Template (DCT) "C:\SYS\tsc.ptn" (version 222) [success]
Complete time : Tue Dec 09 18:26:02 2003
Execute pattern count(568), Virus found count(0), Virus clean count(0),
Clean failed count(0)
2003-12-09, 18:26:02,   An error occurred while scanning file
"C:\Documents and Settings\Administrator\NTUSER.DAT": Accesso negato.
2003-12-09, 18:26:02,   An error occurred while scanning file
"C:\Documents and Settings\Administrator\ntuser.dat.LOG": Accesso negato.
2003-12-09, 18:26:28,   An error occurred while scanning file
"C:\Documents and Settings\Administrator\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat": Accesso negato.
2003-12-09, 18:26:28,   An error occurred while scanning file
"C:\Documents and Settings\Administrator\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat.LOG": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\LocalService\NTUSER.DAT": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\LocalService\ntuser.dat.LOG": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\LocalService\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\LocalService\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat.LOG": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\NetworkService\NTUSER.DAT": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\NetworkService\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat": Accesso negato.
2003-12-09, 18:30:23,   An error occurred while scanning file
"C:\Documents and Settings\NetworkService\Impostazioni locali\Dati
applicazioni\Microsoft\Windows\UsrClass.dat.LOG": Accesso negato.
2003-12-09, 18:33:03,   An error was detected on "C:\System Volume
Information\*.*": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
ACRORD32.EXE-21B9C98E.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
AIDA32.BIN-03456DCB.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
AIDA32.EXE-04AA275C.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
ASHAVAST.EXE-0F584B8E.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
ASHCHEST.EXE-05453EA5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
ASHQUICK.EXE-0071D7CE.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
ASHSIMPL.EXE-003A6F03.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
AUTORUN.EXE-08A9DED1.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
AVAST.SETUP-0EACE913.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
BOOTVIS.EXE-3B876DEE.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
BUILD10KRDRCL.EXE-0F0468C0.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
CMD.EXE-087B4001.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
COVERDES.EXE-2B46D9AF.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
CR_TTXP120.EXE-1AD166A5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
DRC.EXE-1281CDBA.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
DRWTSN32.EXE-2B4B52AC.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
DUMPREP.EXE-1B46F901.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
DUST.EXE-373C304C.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
DWWIN.EXE-30875ADC.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
EPIBSR30.EXE-037AD03D.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
EXPLORER.EXE-082F38A9.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
E_A1T0A2.EXE-2B052EBF.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
E_ARUN03.EXE-1E3E975A.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
E_ATMS03.EXE-0E8FD44A.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
FIFA2004.EXE-07AB95F6.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
GAMEPLAY.EXE-2A4E484F.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
GFXPAK1.EXE-3497E53E.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
HELPCTR.EXE-3862B6F5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
HELPHOST.EXE-247D2792.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
HELPSVC.EXE-2878DDA2.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
IEXPLORE.EXE-1BA17782.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
IKERNEL.EXE-1EFFBC82.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
IMAPI.EXE-0BF740A4.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
INS11.TMP-36546FB8.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
KAZAALITE.KPP-068AD95E.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
KITRAPTOR.EXE-1658F7FC.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
KLRUN.EXE-1C24A268.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
KPP.EXE-32EBDFB2.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\Layout.ini": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
LOGONUI.EXE-0AF22957.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
MMC.EXE-15688AA5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
MSIEXEC.EXE-2F8A8CAE.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
MSINFO32.EXE-2258DA4A.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
MSPAINT.EXE-11CBB631.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
NERO.EXE-39AB114D.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
NOTEPAD.EXE-336351A9.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
NTVDM.EXE-1A10A423.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
OUTLOOK.EXE-27D5965C.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
OUTLOOK.EXE-30C3B3B5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
PATCHER.EXE-35DCCFFE.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
PATCHER2.EXE-0EC236E5.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
R2003V332BUILD9.EXE-19DDD56A.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
REGEDIT.EXE-1B606482.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
REGSVR32.EXE-25EEFE2F.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
REGTOOL.EXE-0C968080.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\ROUTE PLANNER EUROPE 
4.EXE-38D15750.pf
": Accesso
negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-2097C0DC.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-26DA8C9B.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-2BE8E7D1.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-42C4EDF2.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-451FC2C0.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNDLL32.EXE-4B08016A.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
RUNONCE.EXE-2803F297.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SERVER.EXE-34B50812.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SETHC.EXE-0D6CE1BC.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SETUP.EXE-0F40F254.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SETUP.EXE-2388B724.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SETUP.OVR-0D681B76.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SHAREAZA.EXE-0FE1578E.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SHAREAZA189Y.EXE-07A3A72B.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SKIN.EXE-3AECBBD4.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SONYMAP.EXE-1FFAA6F3.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SPYBOTSD.EXE-330EB769.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
STUDIO.EXE-1B05B79B.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SYSCLEAN.COM-06548C79.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
SYSCLEAN.EXE-228A08C4.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TASKMGR.EXE-20256C55.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TAUSCAN.EXE-06E79BB2.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TSC.BIN-1B86C275.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TTW.EXE-39141E56.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TTXP.EXE-0E190C45.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TTXP.EXE-1C4D016B.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TWEAKUI.EXE-04B65C37.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
TWEAKUIPOWERTOYSETUP.EXE-18BA8260.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WINHLP32.EXE-27E3937B.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WINHLP32.EXE-2C18E975.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WINRAR.EXE-1F5D4B0C.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WINWORD.EXE-17964C2F.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WMIPRVSE.EXE-28F301A9.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WMPLAYER.EXE-3717B9A3.pf
": Accesso negato.
2003-12-09, 18:33:51,   Could not set file for reading on
"C:\WINDOWS\Prefetch\
WTPATCH.EXE-28611F58.pf
": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\default": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\default.LOG": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\SAM": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\SAM.LOG": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\SECURITY": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\SECURITY.LOG": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\software": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\software.LOG": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\system": Accesso negato.
2003-12-09, 18:34:42,   An error occurred while scanning file
"C:\WINDOWS\system32\config\system.LOG": Accesso negato.
2003-12-09, 18:35:39,   An error occurred while scanning file
"C:\WINDOWS\Temp\JET8675.tmp": Accesso negato.
2003-12-09, 18:35:41,   Running scanner "C:\SYS\VSCANTM.BIN"...
2003-12-09, 18:44:20,   Files Detected:
Copyright (c) 1990 - 2002 Trend Micro Inc.
Report Date : 12/9/2003 18:35:41
VSAPI Engine Version : 6.510-1002
VSCANTM Version : 1.0-11111728
Virus Pattern Version : 696 (56787 Patterns) (2003/12/03) (169600)
Command Line: C:\SYS\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF
/NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\SYS 
C:\WINDOWS\system32\dust.exe [PE_DUSTER.A]
C:\WINDOWS\Temp\Dust.exe [PE_DUSTER.A]
29896 files have been read.
29896 files have been checked.
17721 files have been scanned.
23241 files have been scanned. (including files in archived)
2 files containing viruses.
Found 2 viruses totally.
Maybe 0 viruses totally.
Stop At : 12/9/2003 18:44:20
---------*---------*---------*---------*---------*---------*---------*---------*
Ho dovuto disattivare il Ripristino sistema di XP, cancellare il file
DUST.EXE in 2 cartelle e le entrate nel Registro di sistema che puntavano
ad esso.
Ora sembra tutto in ordine, ma non capisco perché il sysclean dà tutti
questi errori durante lo scan.
Qualche indizio?
Grazie


 Qualche indizio?
Forse il fatto che sono file di sistema!
Cosa importante è che hai risolto! ;-)
Ciao
Flavio

Grazie :-)
Ciao
