Anch'io non lo sporco ma qualcosina ci scappa e faccio questi controlli una volta all'anno. Stavolta ho tolto solo
========== Registry Value ==========
DISTRUTTO RunValue: IAAnotif
DISTRUTTO RunValue: QuickTime Task
DISTRUTTO RunValue: WMPNSCFG
non sono malware, la volta scorsa avevo tolto
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} () -
http://download.eset.com/special/eos/OnlineScanner.cab
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} () -
http://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} () -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
OPT:O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] oobefldr.dll
OPT:O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] oobefldr.dll
quindi il pc era clean.
C:\Autorun.inf -> Vaccine
D:\Autorun.inf -> Vaccine
E:\Autorun.inf -> Vaccine
L:\Autorun.inf -> Vaccine
N:\Autorun.inf -> Vaccine
mentre il malware era Eorezo, quando non usavo Wot né Noscript...:
***** [Files / Folders] *****
Folder Found : C:\Users\admin\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}
***** [Registry] *****
Key Found : HKLM\SOFTWARE\Classes\AppID\SoftwareUpdate.exe
Key Found : HKLM\SOFTWARE\Microsoft\RFC1156Agent
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8856F961-340A-11D0-A96B-00C04FD705A2}
ciau
