нет доступа на сайты антивирусов

[cloud45]

Добрый день. Сегодня заметил, что антивирус перестал обновляться. решил скачать обновление вручную, но не смог зайти на сайт. Попробовал зайти на сайты других антивирусов, но безрезультатно. Доступа к microsoft.com так же нет. Просканировал Dr.Web Curent, что не помогло моей проблеме.
Буду очень признателен, если мне помогут решить данную проблему.
Заранее благодарю.

[Info_bot]

Уважаемый(ая) cloud45, спасибо за обращение на наш форум!

Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

[ARMA9000]

Внимание !!! База поcледний раз обновлялась 25.08.2010 необходимо обновить базы при помощи автоматического обновления (Файл/Обновление баз)

Базы обновить и переделать логи.

[cloud45]

базы обновлены. выкладываю логи после обновления.

[thyrex]

Выполните скрипт в AVZ

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\58.exe','');
 QuarantineFile('C:\WINDOWS\system32\08.exe','');
 QuarantineFile('C:\Documents and Settings\User\win93.exe','');
 QuarantineFile('C:\Documents and Settings\User\wds.exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\ddng[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\200f33fdndx[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\MP2TTJYX\200hnfkvxx[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\wffwwng[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\ddng[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200f33fdndx[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200csdddvvvc[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\81M8HBVS\hgydng[1].exe','');
 QuarantineFile('C:\Documents and Settings\User\cdqj.exe','');
 QuarantineFile('C:\Documents and Settings\User\cadqj.exe','');
 QuarantineFile('C:\Documents and Settings\User\caddwqj.exe','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\FF.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\E8.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\E1.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\E0.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\DD.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\DC.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\DA.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\D9.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\D8.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\D7.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\D5.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\D0.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\CF.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\C9.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\C6.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\BD.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\B5.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\B0.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A9.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A7.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A6.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A5.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A4.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A3.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\A1.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\9F.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\9E.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\98.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\93.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\90.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\8F.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\8E.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\8C.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\80.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\7F.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\7A.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\77.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\70.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\6E.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\6C.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\6A.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\68.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\65.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\63.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\5E.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\5D.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\59.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\58.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\51.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\4E.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\4C.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\4B.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\41.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\3D.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\22B.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\10F.tmp','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\108.tmp','');
 QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S617TWX6\w[1].exe','');
 QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\57Y3JPAJ\5943[1].exe','');
 QuarantineFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\    winfixer        c a  r        d      .cmd','');
 QuarantineFile('C:\WINDOWS\jodrive32.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\trfmgr32.exe','');
 QuarantineFile('C:\Documents and Settings\User\Application Data\Rbhuhl.exe','');
 TerminateProcessByName('c:\windows\jodrive32.exe');
 QuarantineFile('c:\windows\jodrive32.exe','');
 TerminateProcessByName('c:\documents and settings\user\application data\dadvmgr32.exe');
 QuarantineFile('c:\documents and settings\user\application data\dadvmgr32.exe','');
 DeleteFile('c:\documents and settings\user\application data\dadvmgr32.exe');
 DeleteFile('c:\windows\jodrive32.exe');
 DeleteFile('C:\Documents and Settings\User\Application Data\Rbhuhl.exe');
 DeleteFile('C:\Documents and Settings\User\Application Data\trfmgr32.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','trfmd');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dadv');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Rbhuhl');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Tnaww');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Config Setup');
 DeleteFile('C:\WINDOWS\jodrive32.exe');
 DeleteFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\    winfixer        c a  r        d      .cmd');
 DeleteFile('explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe,Explorer.exe');
 DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\57Y3JPAJ\5943[1].exe');
 DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S617TWX6\w[1].exe');
 DeleteFile('C:\Documents and Settings\User\Application Data\108.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\10F.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\22B.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\3D.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\41.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\4B.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\4C.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\4E.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\51.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\58.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\59.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\5D.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\5E.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\63.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\65.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\68.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\6A.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\6C.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\6E.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\70.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\77.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\7A.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\7F.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\80.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\8C.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\8E.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\8F.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\90.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\93.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\98.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\9E.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\9F.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A1.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A3.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A4.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A5.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A6.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A7.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\A9.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\B0.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\B5.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\BD.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\C6.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\C9.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\CF.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\D0.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\D5.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\D7.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\D8.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\D9.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\DA.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\DC.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\DD.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\E0.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\E1.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\E8.tmp');
 DeleteFile('C:\Documents and Settings\User\Application Data\FF.tmp');
 DeleteFile('C:\Documents and Settings\User\caddwqj.exe');
 DeleteFile('C:\Documents and Settings\User\cadqj.exe');
 DeleteFile('C:\Documents and Settings\User\cdqj.exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\81M8HBVS\hgydng[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200csdddvvvc[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200f33fdndx[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\ddng[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\wffwwng[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\MP2TTJYX\200hnfkvxx[1].exe');
 DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\ddng[1].exe');
 DeleteFile('C:\Documents and Settings\User\wds.exe');
 DeleteFile('C:\Documents and Settings\User\win93.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132410.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132412.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132413.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132417.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132421.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132422.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132423.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132424.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132425.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132430.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132433.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132437.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132438.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132439.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132441.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132444.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132446.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132450.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132451.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132452.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132457.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132461.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132466.exe');
 DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132473.exe');
 DeleteFile('C:\WINDOWS\system32\08.exe');
 DeleteFile('C:\WINDOWS\system32\58.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RebootWindows(true);
end.

Компьютер перезагрузится.

Пришлите карантин согласно Приложения 3 правил по красной ссылке Прислать запрошенный карантин вверху темы

Установите все новые обновления для Windows
Установите Internet Explorer 8 (даже если им не пользуетесь)
Обновите JavaRE

Сделайте новые логи

Сделайте лог полного сканирования МВАМ

[cloud45]

Был выполнен скрипт. ПК перегрузился, и уже ВСЕ работает!!! Спасибо!
В настоящую секунду обновляю все ПО, ставлю антивирус AVG Free.
Затем, скину новые логи.

[cloud45]

Система обновлена посредством Windows Update. и все остальное ПО так же обновлено. Установлен антивирус AVG Free. Еще раз просканировал AVZ и Hijackthis. Логи во вложении.

[ARMA9000]

Удалите в МВАМ все, кроме

c:\documents and settings\администратор\application data\desktopicon\ebayshortcuts.exe (Adware.ADON) -> No action taken.
c:\portablesoft\photoshop.exe\Msvcrt.dll (Malware.Packer.Gen) -> No action taken.
c:\portablesoft\photoshop.exe\Shfolder.dll (Trojan.Agent) -> No action taken.
c:\program files\System\cpl bonus\pkey.exe (PUP.PSWTool.ProductKey) -> No action taken.
c:\program files\total commander\Plugins\arc\Default.sfx (Malware.Packer.Gen) -> No action taken.
c:\program files\total commander\Utils\SFX Tool\Upack.exe (Malware.Packer.Gen) -> No action taken.

Сделайте новое исследование mbam.

[cloud45]

К сожалению, я сделал так, как было написано сегодня вечером, а именно: просканировать еще раз MBAM и выслать лог. То, что обнаружил mbam, я удалил. Что же мне теперь делать, если я не сделал исключения для удалений?

[thyrex]

Удалите в МВАМ все, кроме

c:\program files\System\cpl bonus\pkey.exe (PUP.PSWTool.ProductKey) -> No action taken.

[cloud45]

все... думаю, теперь уже можно с уверенностью заявить, что все вылечено и все работоспособно!
спасибо вам, огромнейшее, за вашу очень нужную работу работу!!!

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 2
• Обработано файлов: 255
• В ходе лечения обнаружены вредоносные программы:
  
  1. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\s617twx6\\w[1].exe - Worm.Win32.Ngrbot.dhx ( DrWEB: BackDoor.Siggen.30867, BitDefender: Trojan.Generic.KD.263191, AVAST4: Win32:MalOb-EI [Cryp] )
  2. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\57y3jpaj\\5943[1].exe - Backdoor.Win32.Floder.xp ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  3. c:\\documents and settings\\user\\application data\\a1.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  4. c:\\documents and settings\\user\\application data\\a3.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  5. c:\\documents and settings\\user\\application data\\a4.tmp - Trojan-Downloader.Win32.Small.calj ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6217275, AVAST4: Win32:Downloader-IEM [Trj] )
  6. c:\\documents and settings\\user\\application data\\a5.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  7. c:\\documents and settings\\user\\application data\\a6.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  8. c:\\documents and settings\\user\\application data\\a7.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  9. c:\\documents and settings\\user\\application data\\a9.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  10. c:\\documents and settings\\user\\application data\\bd.tmp - Trojan.Win32.Scar.edwn ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )
  11. c:\\documents and settings\\user\\application data\\b0.tmp - Trojan.Win32.Scar.edwn ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )
  12. c:\\documents and settings\\user\\application data\\b5.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  13. c:\\documents and settings\\user\\application data\\cf.tmp - Net-Worm.Win32.Kolab.aeen ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6196066, AVAST4: Win32:Slenugga [Trj] )
  14. c:\\documents and settings\\user\\application data\\c6.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  15. c:\\documents and settings\\user\\application data\\c9.tmp - Trojan.Win32.Scar.edwn ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )
  16. c:\\documents and settings\\user\\application data\\dadvmgr32.exe - Packed.Win32.TDSS.c ( DrWEB: Trojan.Inject.56069, BitDefender: Trojan.Generic.6776012, AVAST4: Win32:Dropper-gen [Drp] )
  17. c:\\documents and settings\\user\\application data\\da.tmp - Trojan.Win32.Powp.adit ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )
  18. c:\\documents and settings\\user\\application data\\dc.tmp - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.DownLoader3.62276, BitDefender: Trojan.Generic.KDV.273625 )
  19. c:\\documents and settings\\user\\application data\\dd.tmp - Net-Worm.Win32.Kolab.aehs ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Backdoor.Bot.141827 )
  20. c:\\documents and settings\\user\\application data\\d0.tmp - Net-Worm.Win32.Kolab.aehf ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.6376750, NOD32: IRC/SdBot trojan, AVAST4: Win32:Trojan-gen )
  21. c:\\documents and settings\\user\\application data\\d5.tmp - HEUR:Trojan.Win32.Generic ( DrWEB: Win32.HLLW.Recycler.6, BitDefender: Trojan.Generic.6206954 )
  22. c:\\documents and settings\\user\\application data\\d7.tmp - Trojan.Win32.Powp.adim ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6202443 )
  23. c:\\documents and settings\\user\\application data\\d8.tmp - Trojan.Win32.Powp.adim ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6202443 )
  24. c:\\documents and settings\\user\\application data\\d9.tmp - Trojan.Win32.Powp.adit ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )
  25. c:\\documents and settings\\user\\application data\\e0.tmp - Trojan.Win32.Powp.adio ( DrWEB: Trojan.DownLoader4.180, BitDefender: Trojan.Generic.6790083, AVAST4: Win32:Ruskill-BN [Trj] )
  26. c:\\documents and settings\\user\\application data\\e1.tmp - Trojan-Downloader.Win32.Genome.ckxi ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6246491, AVAST4: Win32:Downloader-IGM [Trj] )
  27. c:\\documents and settings\\user\\application data\\e8.tmp - Trojan.Win32.Powp.adio ( DrWEB: Trojan.DownLoader4.180, BitDefender: Trojan.Generic.6790083, AVAST4: Win32:Ruskill-BN [Trj] )
  28. c:\\documents and settings\\user\\application data\\ff.tmp - Backdoor.Win32.IRCBot.ucv ( DrWEB: Trojan.PWS.Panda.786, BitDefender: Gen:Variant.Graftor.3058, NOD32: IRC/SdBot trojan, AVAST4: Win32:Ruskill-AL [Trj] )
  29. c:\\documents and settings\\user\\application data\\rbhuhl.exe - Trojan.Win32.Scar.ewog ( DrWEB: BackDoor.IRC.Sdbot.16835, BitDefender: Backdoor.IRCBot.ADEC, AVAST4: Win32:Trojan-gen )
  30. c:\\documents and settings\\user\\application data\\trfmgr32.exe - Packed.Win32.TDSS.c ( DrWEB: Trojan.Inject.56069, BitDefender: Trojan.Generic.6776012, AVAST4: Win32:Dropper-gen [Drp] )
  31. c:\\documents and settings\\user\\application data\\10f.tmp - Net-Worm.Win32.Kolab.aepc ( DrWEB: Trojan.AVKill.7747, BitDefender: Trojan.Generic.6264583, AVAST4: Win32:Ruskill-AL [Trj] )
  32. c:\\documents and settings\\user\\application data\\108.tmp - Net-Worm.Win32.Kolab.aepc ( DrWEB: Trojan.AVKill.7747, BitDefender: Trojan.Generic.6264583, AVAST4: Win32:Ruskill-AL [Trj] )
  33. c:\\documents and settings\\user\\application data\\22b.tmp - Trojan.Win32.Powp.adit ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )
  34. c:\\documents and settings\\user\\application data\\3d.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  35. c:\\documents and settings\\user\\application data\\4b.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  36. c:\\documents and settings\\user\\application data\\4c.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  37. c:\\documents and settings\\user\\application data\\4e.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  38. c:\\documents and settings\\user\\application data\\41.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  39. c:\\documents and settings\\user\\application data\\5d.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  40. c:\\documents and settings\\user\\application data\\5e.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  41. c:\\documents and settings\\user\\application data\\51.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  42. c:\\documents and settings\\user\\application data\\58.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  43. c:\\documents and settings\\user\\application data\\59.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  44. c:\\documents and settings\\user\\application data\\6a.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  45. c:\\documents and settings\\user\\application data\\6c.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  46. c:\\documents and settings\\user\\application data\\6e.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  47. c:\\documents and settings\\user\\application data\\63.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  48. c:\\documents and settings\\user\\application data\\65.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  49. c:\\documents and settings\\user\\application data\\68.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  50. c:\\documents and settings\\user\\application data\\7a.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  51. c:\\documents and settings\\user\\application data\\7f.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  52. c:\\documents and settings\\user\\application data\\70.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  53. c:\\documents and settings\\user\\application data\\77.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  54. c:\\documents and settings\\user\\application data\\8c.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  55. c:\\documents and settings\\user\\application data\\8e.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  56. c:\\documents and settings\\user\\application data\\8f.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  57. c:\\documents and settings\\user\\application data\\80.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  58. c:\\documents and settings\\user\\application data\\9e.tmp - Trojan-Downloader.Win32.Small.calj ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6217275, AVAST4: Win32:Downloader-IEM [Trj] )
  59. c:\\documents and settings\\user\\application data\\9f.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  60. c:\\documents and settings\\user\\application data\\90.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  61. c:\\documents and settings\\user\\application data\\93.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )
  62. c:\\documents and settings\\user\\application data\\98.tmp - Trojan-Downloader.Win32.Genome.cjwq ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )
  63. c:\\documents and settings\\user\\caddwqj.exe - Backdoor.Win32.Floder.xp ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  64. c:\\documents and settings\\user\\cadqj.exe - Backdoor.Win32.Floder.xp ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  65. c:\\documents and settings\\user\\cdqj.exe - Backdoor.Win32.Floder.iv ( DrWEB: BackDoor.Ddoser.213, BitDefender: Trojan.Generic.KD.252582, AVAST4: Win32:Malware-gen )
  66. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\mp2ttjyx\\200hnfkvxx[1].exe - Worm.Win32.Ngrbot.dhx ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )
  67. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\w4xkrl3l\\ddng[1].exe - Backdoor.Win32.Floder.xp ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  68. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\w4xkrl3l\\200f33fdndx[1].exe - Backdoor.Win32.Floder.sz ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )
  69. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\81m8hbvs\\hgydng[1].exe - Backdoor.Win32.Floder.iv ( DrWEB: BackDoor.Ddoser.213, BitDefender: Trojan.Generic.KD.252582, AVAST4: Win32:Malware-gen )
  70. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\ddng[1].exe - Backdoor.Win32.Floder.xp ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  71. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\wffwwng[1].exe - Worm.Win32.Ngrbot.dhv ( DrWEB: BackDoor.IRC.Bot.1405, BitDefender: Trojan.Generic.KDV.260358, NOD32: Win32/Dorkbot.A worm, AVAST4: Win32:Dorkbot-BH [Trj] )
  72. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\200csdddvvvc[1].exe - Worm.Win32.Ngrbot.dkd ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )
  73. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\200f33fdndx[1].exe - Trojan.Win32.Genome.skyo ( DrWEB: BackDoor.IRC.Bot.1528, BitDefender: Trojan.Generic.6205416, AVAST4: Win32:MalOb-EI [Cryp] )
  74. c:\\documents and settings\\user\\wds.exe - Trojan.Win32.Genome.skyo ( DrWEB: BackDoor.IRC.Bot.1528, BitDefender: Trojan.Generic.6205416, AVAST4: Win32:MalOb-EI [Cryp] )
  75. c:\\documents and settings\\user\\win93.exe - Worm.Win32.Ngrbot.dhx ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )
  76. c:\\recycler\\r-1-5-21-1482476501-1644491937-682003330-1013\\ winfixer c a r d .cmd - Trojan.Win32.Pincav.bobj ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )
  77. c:\\recycler\\s-1-5-21-0243556031-888888379-781863308-1413\\syitm.exe - Trojan-Dropper.Win32.Agent.fzfv ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.7463318 )
  78. c:\\windows\\jodrive32.exe - Trojan-Dropper.Win32.Agent.fzfv ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.7476679 )
  79. c:\\windows\\system32\\08.exe - Trojan.Win32.Pincav.bobj ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )
  80. c:\\windows\\system32\\58.exe - Trojan.Win32.Pincav.bobj ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )