massive attack от eClient.exe [Trojan.Win32.Genome.agsyp, , Trojan-PSW.Win32.LdPinch.badh ]

**Corey** · 18.12.2012, 22:45

Доброго времени суток докторам)
вернулся из армии), комп после простоя и нескольких юзаний мамами и бабушками стал дико глючить:
постоянно вылетает куча неизвестных ошибок, остановка сценариев, комп может сам по себе подвиснуть и перезагрузиться, в древе висит куча неизвестных процессов, при попытке поставить какой-либо антивирусник комп ругается на недостаток полномочий к запуску каких то там служб...но самая сильная головная боль заключается в процессе eClient.exe который атакует систему и дублирует себя 10-15 раз чем очень сильно грузит комп) прикладываю логи. Очень прошу помогите вылечить моего старичка

Надоело быть жертвой? Стань профи по информационной безопасности, получай самую свежую информацию об угрозах и средствах защиты от ведущего российского аналитического центра Anti-Malware.ru:

**Info_bot** · 18.12.2012, 22:47

Уважаемый(ая) Corey, спасибо за обращение на наш форум!

Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

**thyrex** · 19.12.2012, 09:11

Выполните скрипт в AVZ

Код:

 begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('C:\WINDOWS\conime\SSDT01.sys','');
 QuarantineFile('C:\WINDOWS\lpk.dll','');
 QuarantineFile('C:\WINDOWS\system32\9.tmp','');
 QuarantineFile('C:\WINDOWS\system32\8.tmp','');
 QuarantineFile('C:\WINDOWS\system32\6.tmp','');
 QuarantineFile('C:\WINDOWS\system32\4.tmp','');
 QuarantineFile('C:\WINDOWS\system32\3.tmp','');
 QuarantineFile('C:\WINDOWS\system32\c.tmp','');
 QuarantineFile('C:\WINDOWS\system32\b.tmp','');
 DelCLSID('{AENGFU3AA-Z568-11d2-9CBD-0000F87A369E}');
 DelCLSID('{AENGFU3AA-U566-11d2-9CBD-0000F87A369E}');
 QuarantineFile('C:\WINDOWS\youes\svchost.exe','');
 QuarantineFile('C:\WINDOWS\Debug\spoolsv.exe.','');
 DeleteService('6F981FBB');
 DeleteService('65FC64515');
 DeleteService('5FA53543');
 DeleteService('5DAE6D51');
 DeleteService('4B051910');
 SetServiceStart('448B4232', 4);
 DeleteService('448B4232');
 QuarantineFile('C:\WINDOWS\system32\368355EC.sys','');
 SetServiceStart('368355EC', 4);
 DeleteService('368355EC');
 QuarantineFile('C:\WINDOWS\system32\1A7404F3.sys','');
 SetServiceStart('1A7404F3', 4);
 DeleteService('1A7404F3');
 SetServiceStart('Tcpz-x86', 4);
 DeleteService('Tcpz-x86');
 QuarantineFile('C:\WINDOWS\system32\12207C59.sys','');
 SetServiceStart('12207C59', 4);
 DeleteService('12207C59');
 QuarantineFile('C:\Tcpz-x86.sys','');
 QuarantineFile('C:\WINDOWS\System32\QPet50284CE3.txt','');
 QuarantineFile('C:\WINDOWS\system32\QPet37BE695B.dll','');
 TerminateProcessByName('c:\windows\system32\vmjhcyv.exe');
 QuarantineFile('c:\windows\system32\vmjhcyv.exe','');
 QuarantineFile('c:\windows\help\winhelp.exe','');
 QuarantineFile('c:\windows\debug\spoolsv.exe','');
 QuarantineFile('c:\windows\r_slsvc.exe','');
 TerminateProcessByName('c:\windows\system32\lib32waqs.exe');
 QuarantineFile('c:\windows\system32\lib32waqs.exe','');
 DeleteFile('c:\windows\system32\lib32waqs.exe');
 DeleteFile('c:\windows\system32\vmjhcyv.exe');
 DeleteFile('C:\WINDOWS\system32\QPet37BE695B.dll');
 DeleteFile('C:\WINDOWS\System32\QPet50284CE3.txt');
 DeleteFile('C:\Tcpz-x86.sys');
 DeleteFile('C:\WINDOWS\system32\12207C59.sys');
 DeleteFile('C:\WINDOWS\system32\1A7404F3.sys');
 DeleteFile('C:\WINDOWS\system32\368355EC.sys');
 DeleteFile('C:\WINDOWS\system32\448B4232.sys');
 DeleteFile('C:\WINDOWS\system32\4B051910.sys');
 DeleteFile('C:\WINDOWS\system32\5DAE6D51.sys');
 DeleteFile('C:\WINDOWS\system32\5FA53543.sys');
 DeleteFile('C:\WINDOWS\system32\drivers\65FC64515.sys');
 DeleteFile('C:\WINDOWS\system32\6F981FBB.sys');
 DeleteFile('C:\WINDOWS\Debug\spoolsv.exe.');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','bootStart');
 DeleteFile('C:\WINDOWS\youes\svchost.exe');
 DeleteFile('C:\WINDOWS\system32\b.tmp');
 DeleteFile('C:\WINDOWS\system32\c.tmp');
 DeleteFile('C:\WINDOWS\system32\3.tmp');
 DeleteFile('C:\WINDOWS\system32\4.tmp');
 DeleteFile('C:\WINDOWS\system32\6.tmp');
 DeleteFile('C:\WINDOWS\system32\8.tmp');
 DeleteFile('C:\WINDOWS\system32\9.tmp');
 DeleteFile('C:\WINDOWS\help\winhelp.exe');
 DeleteFile('C:\WINDOWS\lpk.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Компьютер перезагрузится.

Пришлите карантин согласно Приложения 2 правил по красной ссылке Прислать запрошенный карантин вверху темы

Сделайте новые логи

Сделайте лог полного сканирования МВАМ
Сделайте лог gmer

**Corey** · 19.12.2012, 15:44

всё выполнил, файл карантина отправил, процессы eClient.exe исчезли, но комп всё ещё жутко виснет,
в процессе сканирований и перезагрузок система вставала полностью, и приходилось её некорректно перезагружать, несколько раз, тем не менее с горем пополам всё сделал.
прикладываю логи...благодарю за внимание

**thyrex** · 19.12.2012, 23:32

1. Откройте Блокнот и скопируйте в него текст скрипта

Код:

kcxpz950.exe -del service zrkkbj
kcxpz950.exe -del reg "HKLM\SYSTEM\ControlSet002\Services\zrkkbj"
kcxpz950.exe -reboot

2. Нажмите Файл - Сохранить как
3. Выберите папку, в которую сохранили kcxpz950.exe (gmer)
4. Укажите Тип файла - Все файлы (*.*)
5. Введите имя файла cleanup.bat и нажмите кнопку Сохранить
6. Запустите cleanup.bat

ВНИМАНИЕ: Компьютер перезагрузится!!!

Сделайте новый лог gmer

Выполните скрипт в AVZ

Код:

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(true);
  end;
QuarantineFile('C:\WINDOWS\R_Slsvc.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\Debug\spoolsv.exe', 'MBAM: Trojan.Agent');
QuarantineFile('C:\WINDOWS\system32\55DE4DCD.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\0E5B4ED2.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\76254824.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\486D13AE.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\532631D2.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\77940E7A.sys', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\WINDOWS\system32\lasrse.exe', 'MBAM: Trojan.Downloader.Gen');
QuarantineFile('C:\WINDOWS\conime\SSDT01.sys', 'MBAM: Trojan.Service');
QuarantineFile('C:\WINDOWS\3a5u.bmp', 'MBAM: Extension.Mismatch');
QuarantineFile('C:\WINDOWS\system32\bbegiln.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\hjloqsx.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\ECzxvso.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\Gxusljg.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\bdiptyD.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\dikFKMP.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\LEzojaV.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\EBzxusq.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\ECAxvto.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\qsvzCEG.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\lnsxBGL.exe', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\system32\spool\drivers\w32x86\canonlbp_810ac2d\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\system32\360Update\conime.exe', 'MBAM: Spyware.OnlineGames');
QuarantineFile('C:\WINDOWS\inf\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Help\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Help\Tours\mmTour\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\msagent\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Temp\5f7d7e58.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\52c96e35.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\1a4926c2.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\081c57ee.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\44e87c0a.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\7f8071df.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\3f863206.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\10b82a60.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\4f597e48.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\servcieF161A5.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\WINDOWS\Temp\3b160a41.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\56044806.tmp', 'MBAM: Malware.Packer');
QuarantineFile('C:\WINDOWS\Temp\servcie992A4.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\WINDOWS\Temp\2dfe6e4c.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\WINDOWS\Temp\servcie991F6.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\WINDOWS\Temp\servcie99396.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\WINDOWS\twain_32\CNQL30\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Debug\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\ime\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\pchealth\helpctr\binaries\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\pchealth\UploadLB\Binaries\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\$hf_mig$\KB921883\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\$hf_mig$\KB921883\update\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{350C9419-3D7C-4EE8-BAA9-00BCB3D54227}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{0F6F6876-6334-4977-B5DD-CFC12E193420}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{90110419-6000-11D3-8CFE-0150048383C9}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{90120000-0020-0419-0000-0000000FF1CE}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{CC5ADE35-E63A-4AE8-9E48-9A3A144F00F2}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{AA59DDE4-B672-4621-A016-4C248204957A}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\$PatchCache$\Managed\9140110900063D11C8EF10054038389C\11.0.5614\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{F99F74B4-972B-4B06-B893-6B3B0DB0128B}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70001000000}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Installer\{AAF70000-22B9-4CE9-98D6-2CCF359BAC07}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\XXXXXX83C69978\svchsot.exe', 'MBAM: Trojan.Svchsot');
QuarantineFile('C:\WINDOWS\XXXXXX83C69978\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\conime\iexplorer.exe', 'MBAM: Spyware.OnlineGames');
QuarantineFile('C:\WINDOWS\conime\conime.exe', 'MBAM: Spyware.OnlineGames');
QuarantineFile('C:\WINDOWS\conime\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\zoues\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\youes\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Downloaded Program Files\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Microsoft.NET\Framework\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Russian\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.7.0.21\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\Microsoft Windows Installer 3.1\mWinRun.dll\ansi\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\Microsoft Windows Installer 3.1\mWinRun.dll\unicode\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\12060\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\12154\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\1[1].exe', 'MBAM: Rootkit.Agent');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\4[1].exe', 'MBAM: Trojan.Agent');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\5[1].exe', 'MBAM: Backdoor.Bot');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\NIBIR24P\3[1].exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\NIBIR24P\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\VI6TGB1H\6[1].exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\VI6TGB1H\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\GBAXG5GT\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Conduit\CT1392749\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Yupdate\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Updater\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Toolbar\packages\{D5C63696-4EAC-4D7E-80CF-1EBB9771AE78}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Додо\Application Data\Mozilla\Firefox\Profiles\bgf4r02s.default\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Documents and Settings\Администратор\Рабочий стол\WK\Warcraft3v121\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\3.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\Program Files\Common Files\2.exe', 'MBAM: Trojan.Backdoor');
QuarantineFile('C:\Program Files\Common Files\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\Speech\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\MSInfo\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\Smart Tag\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\MODI\11.0\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\OFFICE11\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\DW\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\Web Components\11\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\Source Engine\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\Snapshot Viewer\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Microsoft Shared\EQUATION\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\System\MSMAPI\1049\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\InstallShield\UpdateService\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\ACD Systems\EN\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Adobe\Calibration\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Apple\Mobile Device Support\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Apple\Apple Application Support\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\Adobe Systems Shared\Service\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Windows NT\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Windows NT\Pinball\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Windows NT\Accessories\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\MSN Gaming Zone\Windows\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Messenger\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Windows Media Player\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Internet Explorer\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Internet Explorer\Connection Wizard\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Outlook Express\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\NetMeeting\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Movie Maker\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\xerox\nwwia\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\InstallShield Installation Information\{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\InstallShield Installation Information\{6C13128C-1782-456F-84A4-017CECE259CA}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\InstallShield Installation Information\{D7A6C517-11F2-419F-B5BB-27772B939698}\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\K-Lite Codec Pack\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\K-Lite Codec Pack\Tools\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\K-Lite Codec Pack\Media Player Classic\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\K-Lite Codec Pack\Filters\Haali\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\K-Lite Codec Pack\Filters\madVR\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Microsoft Office\OFFICE11\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Microsoft Office\OFFICE11\1049\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Microsoft Office\Office12\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\WinRAR\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Winamp Detect\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Trend Micro\HijackThis\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\AP Tuner\AP Tuner 3.08\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Ask.com\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Ask.com\Updater\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ACD Systems\ACDSee\8.0.Pro\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Opera\program\plugins\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\CCleaner\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Acrobat 5.0\Reader\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig\ENU\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\Updater\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\Optional\Test_Tools\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Photoshop CS\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Photoshop CS\Required\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Photoshop CS\Samples\Droplets\ImageReady Droplets\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Adobe\Photoshop CS\Samples\Droplets\Photoshop Droplets\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Angling Navigator\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\MagnetDC\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\MagnetDC\PotPlayer\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\MagnetDC\Settings\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Pdf2Bmp\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Support\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Scan\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Scan\Twain\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\CyberLink\PowerDVD\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\CyberLink\PowerDVD\OLRSubmission\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Ulead Systems\Ulead VideoStudio 8.0 Trial\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\7k7k\GameHall\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Miranda IM\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\KC Softwares\VideoInspector\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Mozilla Firefox\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Mozilla Firefox\uninstall\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\VideoLAN\VLC\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\QIP\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Ultra iPod Movie Converter\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Download Master\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Samsung Electronics\mWiMAX U200\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Samsung Electronics\mWiMAX U200\Firmware\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\McAfee Security Scan\1.0.150\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Skype\Phone\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Winamp\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.1.1309.3572\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.1.1309.15642\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.3.4501.1418\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.4.4525.1752\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Uniblue\RegistryBooster\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Lavasoft\Ad-aware 6\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Tunatic\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\ImTOO\WMA MP3 Converter\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\WinDjView\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\VKMusic 4\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\VKMusic 4\Tools\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\SopCast\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\SopCast\StreamServer\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\SopCast\update\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\SopCast\CrashReport\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\SopCast\adv\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\Room\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\plugins\audiohook\x64\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10079\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10082\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10082\plugins\audiohook\x64\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10084\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Garena Plus\restore_\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Auto-Joiner\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\uTorrent\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\BitSpirit\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\NVIDIA Corporation\NvMixer\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Mozilla Maintenance Service\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Multi Password Recovery\MPR.exe.BAK', 'MBAM: Riskware.MPR');
QuarantineFile('C:\Program Files\Multi Password Recovery\MPR.exe', 'MBAM: Riskware.MPR');
QuarantineFile('C:\Program Files\Multi Password Recovery\UpdateChecker.exe', 'MBAM: Riskware.MPR');
QuarantineFile('C:\Program Files\Multi Password Recovery\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Apple Software Update\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\QuickTime\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\QuickTime\QTSystem\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Bonjour\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\iTunes\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Webalta\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\iPod\bin\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\CommFort\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Arsenal Company\Сократ Персональный 4.1\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\MyPlayCityRU\tbMyPl.dll', 'MBAM: Adware.NetPumper');
QuarantineFile('C:\Program Files\MyPlayCityRU\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Yandex\YandexBarIE\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Microsoft Silverlight\2.0.40115.0\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Maxthon\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARED\DW\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFICE11\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\SETUP\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\AudioDrv\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\AudioUtl\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\Ethernet\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\Ethernet\NAM\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\SMBus\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\legacy\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\sata_ide\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\raidtool\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\legacy\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\sata_ide\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\raidtool\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\CanoScan\CNQL20\CNQSG70\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\CanoScan\CNQL30\CNQSG70\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\LBP810\l340brux\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\ATI\SUPPORT\wxp-w2k-8-062-040929a-018115C\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\Program Files\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\Program Files\1Cv77Last\BIN\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\Program Files\1Cv77\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\Program Files\1Cv77\PatchWise.bak\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('D:\Program Files\1Cv77\BIN\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\Downloads\Программы\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\Xili.Vid.Conv.Plati.v5.1.37.0120+Rus\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\Xili.Vid.Conv.Plati.v5.1.37.0120+Rus\Rus\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\Warcraft III\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\Warcraft III\Warcraft 3 Version Switcher\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Portable Editions\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\ConvertXtoDVD 4.0.9.322\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Keygen\Keygen.exe', 'MBAM: Trojan.Agent.CK');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Keygen\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\Шаблоны меню\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 2\ConvertXtoDVD 2.99.18.970\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Portable Editions\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\ConvertXtoDVD 3.8.0.193k\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Keygen\Keygen.exe', 'MBAM: RiskWare.Tool.CK');
QuarantineFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Keygen\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\Downloads\Download master 5\Download master 5\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\raG_doll-[LSD.]\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\Russian\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\crack\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('I:\ХИФ\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('J:\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('J:\Рыбалка\ProPilkki2\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('K:\soft\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('K:\soft\Безопасность\COMODO Internet Security 5.0.162636.1135 Final x86\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('K:\soft\Ulead VideoStudio8\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('K:\soft\Ulead VideoStudio8\Russian\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('K:\soft\Ulead VideoStudio8\Crack\lpk.dll', 'MBAM: Trojan.ServStart');
QuarantineFile('C:\Program Files\Common Files\6.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\Program Files\Common Files\4.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\Program Files\Common Files\5.exe', 'MBAM: Trojan.Dropper');
QuarantineFile('C:\Program Files\Common Files\keylog.txt', 'MBAM: Malware.Trace');
QuarantineFile('C:\WINDOWS\system32\_id.dat', 'MBAM: Malware.Trace');
QuarantineFile('C:\WINDOWS\system32\comsa32.sys', 'MBAM: Trojan.Agent');
QuarantineFile('C:\WINDOWS\system32\delself.bat', 'MBAM: Malware.Trace');
QuarantineFile('C:\WINDOWS\system32\FInstall.sys', 'MBAM: Backdoor.Bot');
QuarantineFile('C:\WINDOWS\Help\winhelp.exe', 'MBAM: Trojan.Agent');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\t\r1666.dat', 'MBAM: Adware.Rugo');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\t\b1666.dat', 'MBAM: Adware.Rugo');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\t\a1666.dat', 'MBAM: Adware.Rugo');
QuarantineFile('C:\Documents and Settings\All Users\Application Data\t\p1666.dat', 'MBAM: Adware.Rugo');
QuarantineFile('C:\WINDOWS\system32\CPAPP\StepData.dat', 'MBAM: Trojan.Agent');
QuarantineFile('C:\WINDOWS\system32\360Update\conim.exe', 'MBAM: Trojan.Agent');
QuarantineFile('C:\WINDOWS\system32\360Update\ssms.exe', 'MBAM: Trojan.Agent');
QuarantineFile('C:\WINDOWS\system32\3361\a', 'MBAM: Trojan.Downloader');
DeleteFile('C:\WINDOWS\R_Slsvc.exe');
DeleteFile('C:\WINDOWS\Debug\spoolsv.exe');
DeleteFile('C:\WINDOWS\system32\55DE4DCD.sys');
DeleteFile('C:\WINDOWS\system32\0E5B4ED2.sys');
DeleteFile('C:\WINDOWS\system32\76254824.sys');
DeleteFile('C:\WINDOWS\system32\486D13AE.sys');
DeleteFile('C:\WINDOWS\system32\532631D2.sys');
DeleteFile('C:\WINDOWS\system32\77940E7A.sys');
DeleteFile('C:\WINDOWS\system32\lasrse.exe');
DeleteFile('C:\WINDOWS\conime\SSDT01.sys');
DeleteFile('C:\WINDOWS\3a5u.bmp');
DeleteFile('C:\WINDOWS\system32\bbegiln.exe');
DeleteFile('C:\WINDOWS\system32\hjloqsx.exe');
DeleteFile('C:\WINDOWS\system32\ECzxvso.exe');
DeleteFile('C:\WINDOWS\system32\Gxusljg.exe');
DeleteFile('C:\WINDOWS\system32\bdiptyD.exe');
DeleteFile('C:\WINDOWS\system32\dikFKMP.exe');
DeleteFile('C:\WINDOWS\system32\LEzojaV.exe');
DeleteFile('C:\WINDOWS\system32\EBzxusq.exe');
DeleteFile('C:\WINDOWS\system32\ECAxvto.exe');
DeleteFile('C:\WINDOWS\system32\qsvzCEG.exe');
DeleteFile('C:\WINDOWS\system32\lnsxBGL.exe');
DeleteFile('C:\WINDOWS\system32\spool\drivers\w32x86\canonlbp_810ac2d\lpk.dll');
DeleteFile('C:\WINDOWS\system32\360Update\conime.exe');
DeleteFile('C:\WINDOWS\inf\lpk.dll');
DeleteFile('C:\WINDOWS\Help\lpk.dll');
DeleteFile('C:\WINDOWS\Help\Tours\mmTour\lpk.dll');
DeleteFile('C:\WINDOWS\msagent\lpk.dll');
DeleteFile('C:\WINDOWS\Temp\5f7d7e58.exe');
DeleteFile('C:\WINDOWS\Temp\52c96e35.exe');
DeleteFile('C:\WINDOWS\Temp\1a4926c2.exe');
DeleteFile('C:\WINDOWS\Temp\081c57ee.exe');
DeleteFile('C:\WINDOWS\Temp\44e87c0a.exe');
DeleteFile('C:\WINDOWS\Temp\7f8071df.exe');
DeleteFile('C:\WINDOWS\Temp\3f863206.exe');
DeleteFile('C:\WINDOWS\Temp\10b82a60.exe');
DeleteFile('C:\WINDOWS\Temp\4f597e48.exe');
DeleteFile('C:\WINDOWS\Temp\servcieF161A5.exe');
DeleteFile('C:\WINDOWS\Temp\3b160a41.exe');
DeleteFile('C:\WINDOWS\Temp\56044806.tmp');
DeleteFile('C:\WINDOWS\Temp\servcie992A4.exe');
DeleteFile('C:\WINDOWS\Temp\2dfe6e4c.exe');
DeleteFile('C:\WINDOWS\Temp\servcie991F6.exe');
DeleteFile('C:\WINDOWS\Temp\servcie99396.exe');
DeleteFile('C:\WINDOWS\twain_32\CNQL30\lpk.dll');
DeleteFile('C:\WINDOWS\Debug\lpk.dll');
DeleteFile('C:\WINDOWS\ime\lpk.dll');
DeleteFile('C:\WINDOWS\pchealth\helpctr\binaries\lpk.dll');
DeleteFile('C:\WINDOWS\pchealth\UploadLB\Binaries\lpk.dll');
DeleteFile('C:\WINDOWS\$hf_mig$\KB921883\lpk.dll');
DeleteFile('C:\WINDOWS\$hf_mig$\KB921883\update\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{350C9419-3D7C-4EE8-BAA9-00BCB3D54227}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{0F6F6876-6334-4977-B5DD-CFC12E193420}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{90110419-6000-11D3-8CFE-0150048383C9}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{90120000-0020-0419-0000-0000000FF1CE}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{CC5ADE35-E63A-4AE8-9E48-9A3A144F00F2}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{AA59DDE4-B672-4621-A016-4C248204957A}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\$PatchCache$\Managed\9140110900063D11C8EF10054038389C\11.0.5614\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{F99F74B4-972B-4B06-B893-6B3B0DB0128B}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{AC76BA86-7AD7-1033-7B44-A70001000000}\lpk.dll');
DeleteFile('C:\WINDOWS\Installer\{AAF70000-22B9-4CE9-98D6-2CCF359BAC07}\lpk.dll');
DeleteFile('C:\WINDOWS\XXXXXX83C69978\svchsot.exe');
DeleteFile('C:\WINDOWS\XXXXXX83C69978\lpk.dll');
DeleteFile('C:\WINDOWS\conime\iexplorer.exe');
DeleteFile('C:\WINDOWS\conime\conime.exe');
DeleteFile('C:\WINDOWS\conime\lpk.dll');
DeleteFile('C:\WINDOWS\zoues\lpk.dll');
DeleteFile('C:\WINDOWS\youes\lpk.dll');
DeleteFile('C:\WINDOWS\Downloaded Program Files\lpk.dll');
DeleteFile('C:\WINDOWS\Microsoft.NET\Framework\lpk.dll');
DeleteFile('C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\lpk.dll');
DeleteFile('C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files\Kaspersky Internet Security 2009\Russian\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 10.7.0.21\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\Microsoft Windows Installer 3.1\mWinRun.dll\ansi\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}\Microsoft Windows Installer 3.1\mWinRun.dll\unicode\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\188F1432-103A-4ffb-80F1-36B633C5C9E1\x86\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\12060\lpk.dll');
DeleteFile('C:\Documents and Settings\All Users\Application Data\GarenaMessenger\update\12154\lpk.dll');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\1[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\4[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\5[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8SHIBA34\lpk.dll');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\NIBIR24P\3[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\NIBIR24P\lpk.dll');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\VI6TGB1H\6[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\VI6TGB1H\lpk.dll');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\GBAXG5GT\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Conduit\CT1392749\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Yupdate\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Updater\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Local Settings\Application Data\Yandex\Toolbar\packages\{D5C63696-4EAC-4D7E-80CF-1EBB9771AE78}\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\fpupdatepl\lpk.dll');
DeleteFile('C:\Documents and Settings\Додо\Application Data\Mozilla\Firefox\Profiles\bgf4r02s.default\lpk.dll');
DeleteFile('C:\Documents and Settings\Администратор\Рабочий стол\WK\Warcraft3v121\lpk.dll');
DeleteFile('C:\Program Files\lpk.dll');
DeleteFile('C:\Program Files\Common Files\3.exe');
DeleteFile('C:\Program Files\Common Files\2.exe');
DeleteFile('C:\Program Files\Common Files\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\Speech\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\MSInfo\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\Smart Tag\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\MODI\11.0\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\OFFICE11\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\DW\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\Web Components\11\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\Source Engine\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\Snapshot Viewer\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Microsoft Shared\EQUATION\lpk.dll');
DeleteFile('C:\Program Files\Common Files\System\MSMAPI\1049\lpk.dll');
DeleteFile('C:\Program Files\Common Files\InstallShield\Engine\6\Intel 32\lpk.dll');
DeleteFile('C:\Program Files\Common Files\InstallShield\UpdateService\lpk.dll');
DeleteFile('C:\Program Files\Common Files\InstallShield\Professional\RunTime\0701\Intel32\lpk.dll');
DeleteFile('C:\Program Files\Common Files\InstallShield\Professional\RunTime\09\01\Intel32\lpk.dll');
DeleteFile('C:\Program Files\Common Files\ACD Systems\EN\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Adobe\Calibration\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Apple\Mobile Device Support\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Apple\Apple Application Support\lpk.dll');
DeleteFile('C:\Program Files\Common Files\Adobe Systems Shared\Service\lpk.dll');
DeleteFile('C:\Program Files\Windows NT\lpk.dll');
DeleteFile('C:\Program Files\Windows NT\Pinball\lpk.dll');
DeleteFile('C:\Program Files\Windows NT\Accessories\lpk.dll');
DeleteFile('C:\Program Files\MSN Gaming Zone\Windows\lpk.dll');
DeleteFile('C:\Program Files\Messenger\lpk.dll');
DeleteFile('C:\Program Files\Windows Media Player\lpk.dll');
DeleteFile('C:\Program Files\Internet Explorer\lpk.dll');
DeleteFile('C:\Program Files\Internet Explorer\Connection Wizard\lpk.dll');
DeleteFile('C:\Program Files\Outlook Express\lpk.dll');
DeleteFile('C:\Program Files\NetMeeting\lpk.dll');
DeleteFile('C:\Program Files\Movie Maker\lpk.dll');
DeleteFile('C:\Program Files\xerox\nwwia\lpk.dll');
DeleteFile('C:\Program Files\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\lpk.dll');
DeleteFile('C:\Program Files\InstallShield Installation Information\{EFB21DE7-8C19-4A88-BB28-A766E16493BC}\lpk.dll');
DeleteFile('C:\Program Files\InstallShield Installation Information\{9CD789E2-B7CE-11D5-B7E9-00A0C9449F99}\lpk.dll');
DeleteFile('C:\Program Files\InstallShield Installation Information\{6C13128C-1782-456F-84A4-017CECE259CA}\lpk.dll');
DeleteFile('C:\Program Files\InstallShield Installation Information\{D7A6C517-11F2-419F-B5BB-27772B939698}\lpk.dll');
DeleteFile('C:\Program Files\K-Lite Codec Pack\lpk.dll');
DeleteFile('C:\Program Files\K-Lite Codec Pack\Tools\lpk.dll');
DeleteFile('C:\Program Files\K-Lite Codec Pack\Media Player Classic\lpk.dll');
DeleteFile('C:\Program Files\K-Lite Codec Pack\Filters\Haali\lpk.dll');
DeleteFile('C:\Program Files\K-Lite Codec Pack\Filters\madVR\lpk.dll');
DeleteFile('C:\Program Files\Microsoft Office\OFFICE11\lpk.dll');
DeleteFile('C:\Program Files\Microsoft Office\OFFICE11\1049\lpk.dll');
DeleteFile('C:\Program Files\Microsoft Office\Office12\lpk.dll');
DeleteFile('C:\Program Files\WinRAR\lpk.dll');
DeleteFile('C:\Program Files\Winamp Detect\lpk.dll');
DeleteFile('C:\Program Files\Trend Micro\HijackThis\lpk.dll');
DeleteFile('C:\Program Files\AP Tuner\AP Tuner 3.08\lpk.dll');
DeleteFile('C:\Program Files\Ask.com\lpk.dll');
DeleteFile('C:\Program Files\Ask.com\Updater\lpk.dll');
DeleteFile('C:\Program Files\ACD Systems\ACDSee\8.0.Pro\lpk.dll');
DeleteFile('C:\Program Files\Opera\program\plugins\lpk.dll');
DeleteFile('C:\Program Files\CCleaner\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Acrobat 5.0\Reader\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig\ENU\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\Updater\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Acrobat 7.0\Reader\Optional\Test_Tools\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Photoshop CS\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Photoshop CS\Required\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Photoshop CS\Samples\Droplets\ImageReady Droplets\lpk.dll');
DeleteFile('C:\Program Files\Adobe\Photoshop CS\Samples\Droplets\Photoshop Droplets\lpk.dll');
DeleteFile('C:\Program Files\Angling Navigator\lpk.dll');
DeleteFile('C:\Program Files\MagnetDC\lpk.dll');
DeleteFile('C:\Program Files\MagnetDC\PotPlayer\lpk.dll');
DeleteFile('C:\Program Files\MagnetDC\Settings\lpk.dll');
DeleteFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\lpk.dll');
DeleteFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Pdf2Bmp\lpk.dll');
DeleteFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Support\lpk.dll');
DeleteFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Scan\lpk.dll');
DeleteFile('C:\Program Files\ABBYY FineReader 7.0 Professional Edition\Scan\Twain\lpk.dll');
DeleteFile('C:\Program Files\CyberLink\PowerDVD\lpk.dll');
DeleteFile('C:\Program Files\CyberLink\PowerDVD\OLRSubmission\lpk.dll');
DeleteFile('C:\Program Files\Ulead Systems\Ulead VideoStudio 8.0 Trial\lpk.dll');
DeleteFile('C:\Program Files\7k7k\GameHall\lpk.dll');
DeleteFile('C:\Program Files\Miranda IM\lpk.dll');
DeleteFile('C:\Program Files\KC Softwares\VideoInspector\lpk.dll');
DeleteFile('C:\Program Files\Mozilla Firefox\lpk.dll');
DeleteFile('C:\Program Files\Mozilla Firefox\uninstall\lpk.dll');
DeleteFile('C:\Program Files\VideoLAN\VLC\lpk.dll');
DeleteFile('C:\Program Files\QIP\lpk.dll');
DeleteFile('C:\Program Files\Ultra iPod Movie Converter\lpk.dll');
DeleteFile('C:\Program Files\Download Master\lpk.dll');
DeleteFile('C:\Program Files\Samsung Electronics\mWiMAX U200\lpk.dll');
DeleteFile('C:\Program Files\Samsung Electronics\mWiMAX U200\Firmware\lpk.dll');
DeleteFile('C:\Program Files\McAfee Security Scan\1.0.150\lpk.dll');
DeleteFile('C:\Program Files\Skype\Phone\lpk.dll');
DeleteFile('C:\Program Files\Winamp\lpk.dll');
DeleteFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.1.1309.3572\lpk.dll');
DeleteFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.1.1309.15642\lpk.dll');
DeleteFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.3.4501.1418\lpk.dll');
DeleteFile('C:\Program Files\Google\GoogleToolbarNotifier\swg-5.4.4525.1752\lpk.dll');
DeleteFile('C:\Program Files\Uniblue\RegistryBooster\lpk.dll');
DeleteFile('C:\Program Files\Lavasoft\Ad-aware 6\lpk.dll');
DeleteFile('C:\Program Files\Tunatic\lpk.dll');
DeleteFile('C:\Program Files\ImTOO\WMA MP3 Converter\lpk.dll');
DeleteFile('C:\Program Files\WinDjView\lpk.dll');
DeleteFile('C:\Program Files\VKMusic 4\lpk.dll');
DeleteFile('C:\Program Files\VKMusic 4\Tools\lpk.dll');
DeleteFile('C:\Program Files\SopCast\lpk.dll');
DeleteFile('C:\Program Files\SopCast\StreamServer\lpk.dll');
DeleteFile('C:\Program Files\SopCast\update\lpk.dll');
DeleteFile('C:\Program Files\SopCast\CrashReport\lpk.dll');
DeleteFile('C:\Program Files\SopCast\adv\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\Room\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\plugins\audiohook\x64\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10079\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10082\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10082\plugins\audiohook\x64\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\bbtalk\update\temp\restore\10084\lpk.dll');
DeleteFile('C:\Program Files\Garena Plus\restore_\lpk.dll');
DeleteFile('C:\Program Files\Auto-Joiner\lpk.dll');
DeleteFile('C:\Program Files\uTorrent\lpk.dll');
DeleteFile('C:\Program Files\BitSpirit\lpk.dll');
DeleteFile('C:\Program Files\NVIDIA Corporation\NvMixer\lpk.dll');
DeleteFile('C:\Program Files\Mozilla Maintenance Service\lpk.dll');
DeleteFile('C:\Program Files\Multi Password Recovery\MPR.exe.BAK');
DeleteFile('C:\Program Files\Multi Password Recovery\MPR.exe');
DeleteFile('C:\Program Files\Multi Password Recovery\UpdateChecker.exe');
DeleteFile('C:\Program Files\Multi Password Recovery\lpk.dll');
DeleteFile('C:\Program Files\Apple Software Update\lpk.dll');
DeleteFile('C:\Program Files\QuickTime\lpk.dll');
DeleteFile('C:\Program Files\QuickTime\QTSystem\lpk.dll');
DeleteFile('C:\Program Files\Bonjour\lpk.dll');
DeleteFile('C:\Program Files\iTunes\lpk.dll');
DeleteFile('C:\Program Files\Webalta\lpk.dll');
DeleteFile('C:\Program Files\iPod\bin\lpk.dll');
DeleteFile('C:\Program Files\CommFort\lpk.dll');
DeleteFile('C:\Program Files\Arsenal Company\Сократ Персональный 4.1\lpk.dll');
DeleteFile('C:\Program Files\MyPlayCityRU\tbMyPl.dll');
DeleteFile('C:\Program Files\MyPlayCityRU\lpk.dll');
DeleteFile('C:\Program Files\Yandex\YandexBarIE\lpk.dll');
DeleteFile('C:\Program Files\Microsoft Silverlight\2.0.40115.0\lpk.dll');
DeleteFile('C:\Program Files\Maxthon\lpk.dll');
DeleteFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\PFILES\COMMON\MSSHARED\DW\lpk.dll');
DeleteFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\PFILES\MSOFFICE\OFFICE11\lpk.dll');
DeleteFile('C:\MSOCache\All Users\90000419-6000-11D3-8CFE-0150048383C9\FILES\SETUP\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\AudioDrv\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\AudioUtl\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\Ethernet\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\Ethernet\NAM\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\SMBus\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\legacy\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\sata_ide\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\Win2K\raidtool\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\legacy\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\sata_ide\lpk.dll');
DeleteFile('C:\NVIDIA\nForceWin2KXP\7.15\IDE\WinXP\raidtool\lpk.dll');
DeleteFile('C:\FOUND.061\FILE0004.CHK');
DeleteFile('C:\FOUND.061\FILE0009.CHK');
DeleteFile('C:\FOUND.061\FILE0012.CHK');
DeleteFile('C:\FOUND.061\FILE0014.CHK');
DeleteFile('C:\FOUND.061\FILE0016.CHK');
DeleteFile('C:\FOUND.061\FILE0017.CHK');
DeleteFile('C:\CanoScan\CNQL20\CNQSG70\lpk.dll');
DeleteFile('C:\CanoScan\CNQL30\CNQSG70\lpk.dll');
DeleteFile('D:\LBP810\l340brux\lpk.dll');
DeleteFile('D:\ATI\SUPPORT\wxp-w2k-8-062-040929a-018115C\lpk.dll');
DeleteFile('D:\Program Files\lpk.dll');
DeleteFile('D:\Program Files\1Cv77Last\BIN\lpk.dll');
DeleteFile('D:\Program Files\1Cv77\lpk.dll');
DeleteFile('D:\Program Files\1Cv77\PatchWise.bak\lpk.dll');
DeleteFile('D:\Program Files\1Cv77\BIN\lpk.dll');
DeleteFile('E:\lpk.dll');
DeleteFile('E:\Downloads\Программы\lpk.dll');
DeleteFile('E:\CoЯey\lpk.dll');
DeleteFile('E:\CoЯey\Xili.Vid.Conv.Plati.v5.1.37.0120+Rus\lpk.dll');
DeleteFile('E:\CoЯey\Xili.Vid.Conv.Plati.v5.1.37.0120+Rus\Rus\lpk.dll');
DeleteFile('E:\CoЯey\Warcraft III\lpk.dll');
DeleteFile('E:\CoЯey\Warcraft III\Warcraft 3 Version Switcher\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Portable Editions\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\ConvertXtoDVD 4.0.9.322\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Keygen\Keygen.exe');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 4\Keygen\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\Шаблоны меню\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 2\ConvertXtoDVD 2.99.18.970\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Portable Editions\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\ConvertXtoDVD 3.8.0.193k\lpk.dll');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Keygen\Keygen.exe');
DeleteFile('E:\CoЯey\ConvertXToDVD\ConvertXtoDVD 3\Keygen\lpk.dll');
DeleteFile('E:\CoЯey\Downloads\Download master 5\Download master 5\lpk.dll');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\lpk.dll');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\lpk.dll');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\Russian\lpk.dll');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\Adobe Photoshop CS1 8.0 Rus\crack\lpk.dll');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\Антивирусное исслендование\avz4\Infected\2012-12-18\avz00001.dta');
DeleteFile('E:\CoЯey\raG_doll-[LSD.]\Антивирусное исслендование\avz4\Infected\2012-12-19\avz00001.dta');
DeleteFile('I:\ХИФ\lpk.dll');
DeleteFile('J:\lpk.dll');
DeleteFile('J:\Рыбалка\ProPilkki2\lpk.dll');
DeleteFile('K:\soft\lpk.dll');
DeleteFile('K:\soft\Безопасность\COMODO Internet Security 5.0.162636.1135 Final x86\lpk.dll');
DeleteFile('K:\soft\Ulead VideoStudio8\lpk.dll');
DeleteFile('K:\soft\Ulead VideoStudio8\Russian\lpk.dll');
DeleteFile('K:\soft\Ulead VideoStudio8\Crack\lpk.dll');
DeleteFile('C:\Program Files\Common Files\6.exe');
DeleteFile('C:\Program Files\Common Files\4.exe');
DeleteFile('C:\Program Files\Common Files\5.exe');
DeleteFile('C:\Program Files\Common Files\keylog.txt');
DeleteFile('C:\WINDOWS\system32\_id.dat');
DeleteFile('C:\WINDOWS\system32\comsa32.sys');
DeleteFile('C:\WINDOWS\system32\delself.bat');
DeleteFile('C:\WINDOWS\system32\FInstall.sys');
DeleteFile('C:\WINDOWS\Help\winhelp.exe');
DeleteFile('C:\Documents and Settings\All Users\Application Data\t\r1666.dat');
DeleteFile('C:\Documents and Settings\All Users\Application Data\t\b1666.dat');
DeleteFile('C:\Documents and Settings\All Users\Application Data\t\a1666.dat');
DeleteFile('C:\Documents and Settings\All Users\Application Data\t\p1666.dat');
DeleteFile('C:\WINDOWS\system32\CPAPP\StepData.dat');
DeleteFile('C:\WINDOWS\system32\360Update\conim.exe');
DeleteFile('C:\WINDOWS\system32\360Update\ssms.exe');
DeleteFile('C:\WINDOWS\system32\3361\a');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Компьютер перезагрузится.

Пришлите карантин согласно Приложения 2 правил по красной ссылке Прислать запрошенный карантин вверху темы

Внимание! Официальная поддержка (и выпуск обновлений) для Windows XP SP2 прекращена

Установите SP3 (может потребоваться активация) + все новые обновления для Windows
Установите Internet Explorer 8 (даже если им не пользуетесь)

Сделайте новые логи

Удалите в МВАМ все, кроме

Код:

HKCU\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.
HKCU\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.
HKCU\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Плохо: (1) Хорошо: (0) -> Действие не было предпринято.

**Corey** · 20.12.2012, 21:04

всё выполнил, за исключением установки третьего сервис пака для винды: при попытке его установить он ссылается на то что якобы какойто из файлов повреждён. проблема не исчезла...комп виснет и приходится некорректно перезагружать систему, что в дальнейшем вызывает кучу ошибок в браузере, за день раз 30 точно. бывает такое что просто при загрузке виндоус тупо виснет, даже не начав работать.
прикладываю лог
при сканировании через MBAM на этот раз он обнаружил куда более меньшее число объектов, но всё выполнил по инструкции.

**thyrex** · 20.12.2012, 23:40

Сделайте лог ComboFix

**Corey** · 21.12.2012, 12:20

сканирование вроде бы завершилось, но C:\ComboFix.txt такого нету, вместо него С:\avenger.txt ... может он и есть?
прикладываю

**thyrex** · 21.12.2012, 23:28

Нет, не он.
Программа после завершения сканирования пишет о сохранении лога. Так было? Если нет, запускайте заново и дождитесь окончания работы

**CyberHelper** · 21.12.2012, 23:38

Статистика проведенного лечения:

Получено карантинов: 2
Обработано файлов: 978
В ходе лечения обнаружены вредоносные программы:
1. c:\\canoscan\\cnql20\\cnqsg70\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
2. c:\\canoscan\\cnql30\\cnqsg70\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
3. c:\\documents and settings\\all users\\application data\\apple computer\\installer cache\\itunes 10.7.0.21\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
4. c:\\documents and settings\\all users\\application data\\{d5abffad-d592-4f98-b02b-587125b4801f}\\microsoft windows installer 3.1\\mwinrun.dll\\ansi\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
5. c:\\documents and settings\\all users\\application data\\{d5abffad-d592-4f98-b02b-587125b4801f}\\microsoft windows installer 3.1\\mwinrun.dll\\unicode\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
6. c:\\documents and settings\\all users\\application data\\garenamessenger\\update\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
7. c:\\documents and settings\\all users\\application data\\garenamessenger\\update\\12060\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
8. c:\\documents and settings\\all users\\application data\\garenamessenger\\update\\12154\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
9. c:\\documents and settings\\all users\\application data\\kaspersky lab setup files\\kaspersky internet security 2009\\russian\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
10. c:\\documents and settings\\all users\\application data\\188f1432-103a-4ffb-80f1-36b633c5c9e1\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
11. c:\\documents and settings\\all users\\application data\\188f1432-103a-4ffb-80f1-36b633c5c9e1\\x86\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
12. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\gbaxg5gt\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
13. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\nibir24p\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
14. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\nibir24p\\3[1].exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
15. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\vi6tgb1h\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
16. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\vi6tgb1h\\6[1].exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
17. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\8shiba34\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
18. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\8shiba34\\1[1].exe - Rootkit.Win32.Agent.dfuj ( DrWEB: BackDoor.Siggen.47767, BitDefender: Gen:Trojan.Heur.RP.gmGfaOi@O4jj )
19. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\8shiba34\\4[1].exe - HEUR:Trojan.Win32.Invader ( DrWEB: Trojan.DownLoad3.12927, BitDefender: Trojan.Generic.8092781 )
20. c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\8shiba34\\5[1].exe - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.DownLoader4.37763, BitDefender: Gen:Variant.Kazy.7022, AVAST4: Win32:Malware-gen )
21. c:\\documents and settings\\администратор\\рабочий стол\\wk\\warcraft3v121\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
22. c:\\documents and settings\\додо\\application data\\macromedia\\flash player\\www.macromedia.com\\bin\\fpupdatepl\\lpk.d ll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
23. c:\\documents and settings\\додо\\application data\\mozilla\\firefox\\profiles\\bgf4r02s.default \\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
24. c:\\documents and settings\\додо\\local settings\\application data\\conduit\\ct1392749\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
25. c:\\documents and settings\\додо\\local settings\\application data\\yandex\\toolbar\\packages\\{d5c63696-4eac-4d7e-80cf-1ebb9771ae78}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
26. c:\\documents and settings\\додо\\local settings\\application data\\yandex\\updater\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
27. c:\\documents and settings\\додо\\local settings\\application data\\yandex\\yupdate\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
28. c:\\msocache\\all users\\90000419-6000-11d3-8cfe-0150048383c9\\files\\pfiles\\common\\msshared\\dw\ \lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
29. c:\\msocache\\all users\\90000419-6000-11d3-8cfe-0150048383c9\\files\\pfiles\\msoffice\\office11\\l pk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
30. c:\\msocache\\all users\\90000419-6000-11d3-8cfe-0150048383c9\\files\\setup\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
31. c:\\nvidia\\nforcewin2kxp\\7.15\\audiodrv\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
32. c:\\nvidia\\nforcewin2kxp\\7.15\\audioutl\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
33. c:\\nvidia\\nforcewin2kxp\\7.15\\ethernet\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
34. c:\\nvidia\\nforcewin2kxp\\7.15\\ethernet\\nam\\lp k.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
35. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\winxp\\legac y\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
36. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\winxp\\raidt ool\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
37. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\winxp\\sata_ ide\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
38. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\win2k\\legac y\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
39. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\win2k\\raidt ool\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
40. c:\\nvidia\\nforcewin2kxp\\7.15\\ide\\win2k\\sata_ ide\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
41. c:\\nvidia\\nforcewin2kxp\\7.15\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
42. c:\\nvidia\\nforcewin2kxp\\7.15\\smbus\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
43. c:\\program files\\abbyy finereader 7.0 professional edition\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
44. c:\\program files\\abbyy finereader 7.0 professional edition\\pdf2bmp\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
45. c:\\program files\\abbyy finereader 7.0 professional edition\\scan\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
46. c:\\program files\\abbyy finereader 7.0 professional edition\\scan\\twain\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
47. c:\\program files\\abbyy finereader 7.0 professional edition\\support\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
48. c:\\program files\\acd systems\\acdsee\\8.0.pro\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
49. c:\\program files\\adobe\\acrobat 5.0\\reader\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
50. c:\\program files\\adobe\\acrobat 7.0\\reader\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
51. c:\\program files\\adobe\\acrobat 7.0\\reader\\optional\\test_tools\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
52. c:\\program files\\adobe\\acrobat 7.0\\reader\\updater\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
53. c:\\program files\\adobe\\acrobat 7.0\\setup files\\rdrbig\\enu\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
54. c:\\program files\\adobe\\photoshop cs\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
55. c:\\program files\\adobe\\photoshop cs\\required\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
56. c:\\program files\\adobe\\photoshop cs\\samples\\droplets\\imageready droplets\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
57. c:\\program files\\adobe\\photoshop cs\\samples\\droplets\\photoshop droplets\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
58. c:\\program files\\angling navigator\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
59. c:\\program files\\ap tuner\\ap tuner 3.08\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
60. c:\\program files\\apple software update\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
61. c:\\program files\\arsenal company\\сократ персональный 4.1\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
62. c:\\program files\\ask.com\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
63. c:\\program files\\ask.com\\updater\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
64. c:\\program files\\auto-joiner\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
65. c:\\program files\\bitspirit\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
66. c:\\program files\\bonjour\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
67. c:\\program files\\ccleaner\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
68. c:\\program files\\commfort\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
69. c:\\program files\\common files\\adobe systems shared\\service\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
70. c:\\program files\\common files\\apple\\apple application support\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
71. c:\\program files\\common files\\apple\\mobile device support\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
72. c:\\program files\\common files\\installshield\\engine\\6\\intel 32\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
73. c:\\program files\\common files\\installshield\\professional\\runtime\\0701\ \intel32\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
74. c:\\program files\\common files\\installshield\\professional\\runtime\\09\\0 1\\intel32\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
75. c:\\program files\\common files\\microsoft shared\\modi\\11.0\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
76. c:\\program files\\common files\\microsoft shared\\web components\\11\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
77. c:\\program files\\common files\\system\\msmapi\\1049\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
78. c:\\program files\\cyberlink\\powerdvd\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
79. c:\\program files\\cyberlink\\powerdvd\\olrsubmission\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
80. c:\\program files\\download master\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
81. c:\\program files\\garena plus\\bbtalk\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
82. c:\\program files\\garena plus\\bbtalk\\plugins\\audiohook\\x64\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
83. c:\\program files\\garena plus\\bbtalk\\update\\temp\\restore\\10079\\lpk.dl l - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
84. c:\\program files\\garena plus\\bbtalk\\update\\temp\\restore\\10082\\lpk.dl l - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
85. c:\\program files\\garena plus\\bbtalk\\update\\temp\\restore\\10082\\plugin s\\audiohook\\x64\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
86. c:\\program files\\garena plus\\bbtalk\\update\\temp\\restore\\10084\\lpk.dl l - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
87. c:\\program files\\garena plus\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
88. c:\\program files\\garena plus\\restore_\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
89. c:\\program files\\garena plus\\room\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
90. c:\\program files\\google\\googletoolbarnotifier\\swg-5.1.1309.15642\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
91. c:\\program files\\google\\googletoolbarnotifier\\swg-5.1.1309.3572\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
92. c:\\program files\\google\\googletoolbarnotifier\\swg-5.3.4501.1418\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
93. c:\\program files\\google\\googletoolbarnotifier\\swg-5.4.4525.1752\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
94. c:\\program files\\imtoo\\wma mp3 converter\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
95. c:\\program files\\installshield installation information\\{d7a6c517-11f2-419f-b5bb-27772b939698}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
96. c:\\program files\\installshield installation information\\{efb21de7-8c19-4a88-bb28-a766e16493bc}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
97. c:\\program files\\installshield installation information\\{6c13128c-1782-456f-84a4-017cece259ca}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
98. c:\\program files\\installshield installation information\\{6811caa0-bf12-11d4-9ea1-0050bae317e1}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
99. c:\\program files\\installshield installation information\\{9cd789e2-b7ce-11d5-b7e9-00a0c9449f99}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
100. c:\\program files\\internet explorer\\connection wizard\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
101. c:\\program files\\internet explorer\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
102. c:\\program files\\ipod\\bin\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
103. c:\\program files\\itunes\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
104. c:\\program files\\kc softwares\\videoinspector\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
105. c:\\program files\\k-lite codec pack\\filters\\haali\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
106. c:\\program files\\k-lite codec pack\\filters\\madvr\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
107. c:\\program files\\k-lite codec pack\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
108. c:\\program files\\k-lite codec pack\\media player classic\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
109. c:\\program files\\k-lite codec pack\\tools\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
110. c:\\program files\\lavasoft\\ad-aware 6\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
111. c:\\program files\\magnetdc\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
112. c:\\program files\\magnetdc\\potplayer\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
113. c:\\program files\\magnetdc\\settings\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
114. c:\\program files\\maxthon\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
115. c:\\program files\\mcafee security scan\\1.0.150\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
116. c:\\program files\\messenger\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
117. c:\\program files\\microsoft office\\office11\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
118. c:\\program files\\microsoft office\\office11\\1049\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
119. c:\\program files\\microsoft office\\office12\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
120. c:\\program files\\microsoft silverlight\\2.0.40115.0\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
121. c:\\program files\\miranda im\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
122. c:\\program files\\movie maker\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
123. c:\\program files\\mozilla firefox\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
124. c:\\program files\\mozilla firefox\\uninstall\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
125. c:\\program files\\mozilla maintenance service\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
126. c:\\program files\\msn gaming zone\\windows\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
127. c:\\program files\\multi password recovery\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
128. c:\\program files\\multi password recovery\\mpr.exe - not-a-virus:PSWTool.Win32.MPR.de ( DrWEB: Program.MPR.6 )
129. c:\\program files\\multi password recovery\\mpr.exe.bak - Trojan-PSW.Win32.LdPinch.badh
130. c:\\program files\\multi password recovery\\updatechecker.exe - not-a-virus:PSWTool.Win32.PasswordRecovery.w
131. c:\\program files\\myplaycityru\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
132. c:\\program files\\netmeeting\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
133. c:\\program files\\nvidia corporation\\nvmixer\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
134. c:\\program files\\opera\\program\\plugins\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
135. c:\\program files\\outlook express\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
136. c:\\program files\\qip\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
137. c:\\program files\\quicktime\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
138. c:\\program files\\quicktime\\qtsystem\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
139. c:\\program files\\samsung electronics\\mwimax u200\\firmware\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
140. c:\\program files\\samsung electronics\\mwimax u200\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
141. c:\\program files\\skype\\phone\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
142. c:\\program files\\sopcast\\adv\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
143. c:\\program files\\sopcast\\crashreport\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
144. c:\\program files\\sopcast\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
145. c:\\program files\\sopcast\\streamserver\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
146. c:\\program files\\sopcast\\update\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
147. c:\\program files\\trend micro\\hijackthis\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
148. c:\\program files\\tunatic\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
149. c:\\program files\\ulead systems\\ulead videostudio 8.0 trial\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
150. c:\\program files\\ultra ipod movie converter\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
151. c:\\program files\\uniblue\\registrybooster\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
152. c:\\program files\\utorrent\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
153. c:\\program files\\videolan\\vlc\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
154. c:\\program files\\vkmusic 4\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
155. c:\\program files\\vkmusic 4\\tools\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
156. c:\\program files\\webalta\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
157. c:\\program files\\winamp detect\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
158. c:\\program files\\winamp\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
159. c:\\program files\\windjview\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
160. c:\\program files\\windows media player\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
161. c:\\program files\\windows nt\\accessories\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
162. c:\\program files\\windows nt\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
163. c:\\program files\\windows nt\\pinball\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
164. c:\\program files\\winrar\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
165. c:\\program files\\xerox\\nwwia\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
166. c:\\program files\\yandex\\yandexbarie\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
167. c:\\program files\\7k7k\\gamehall\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
168. c:\\windows\\conime\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
169. c:\\windows\\conime\\ssdt01.sys - Rootkit.Win32.Agent.dfuj ( DrWEB: Trojan.NtRootKit.15207, BitDefender: Trojan.Generic.7857241, AVAST4: Win32:Rootkit-gen [Rtk] )
170. c:\\windows\\debug\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
171. c:\\windows\\debug\\spoolsv.exe - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.Sniff, BitDefender: Gen:Trojan.Heur.SFM.kmGfa00rzXjb, AVAST4: Win32:Agent-ABRO [Trj] )
172. c:\\windows\\debug\\spoolsv.exe. - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.Sniff, BitDefender: Gen:Trojan.Heur.SFM.kmGfa00rzXjb, AVAST4: Win32:Agent-ABRO [Trj] )
173. c:\\windows\\downloaded program files\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
174. c:\\windows\\help\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
175. c:\\windows\\help\\tours\\mmtour\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
176. c:\\windows\\help\\winhelp.exe - HEUR:Trojan.Win32.Generic ( BitDefender: Gen:Trojan.Heur.DP.iOWbam!q0igb )
177. c:\\windows\\help\\winhelp.exe - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.DownLoader7.32002, BitDefender: Gen:Trojan.Heur.DP.iOWbam!q0igb )
178. c:\\windows\\$hf_mig$\\kb921883\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
179. c:\\windows\\$hf_mig$\\kb921883\\update\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
180. c:\\windows\\ime\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
181. c:\\windows\\inf\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
182. c:\\windows\\installer\\{aaf70000-22b9-4ce9-98d6-2ccf359bac07}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
183. c:\\windows\\installer\\{aa59dde4-b672-4621-a016-4c248204957a}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
184. c:\\windows\\installer\\{ac76ba86-7ad7-1033-7b44-a70001000000}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
185. c:\\windows\\installer\\{cc5ade35-e63a-4ae8-9e48-9a3a144f00f2}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
186. c:\\windows\\installer\\{f99f74b4-972b-4b06-b893-6b3b0db0128b}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
187. c:\\windows\\installer\\$patchcache$\\managed\\914 0110900063d11c8ef10054038389c\\11.0.5614\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
188. c:\\windows\\installer\\{0f6f6876-6334-4977-b5dd-cfc12e193420}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
189. c:\\windows\\installer\\{350c9419-3d7c-4ee8-baa9-00bcb3d54227}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
190. c:\\windows\\installer\\{789a5b64-9dd9-4ba5-915a-f0fc0a1b7bfe}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
191. c:\\windows\\installer\\{86d4b82a-abed-442a-be86-96357b70f4fe}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
192. c:\\windows\\installer\\{90110419-6000-11d3-8cfe-0150048383c9}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
193. c:\\windows\\installer\\{90120000-0020-0419-0000-0000000ff1ce}\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
194. c:\\windows\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
195. c:\\windows\\microsoft.net\\framework\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
196. c:\\windows\\microsoft.net\\framework\\v2.0.50727\ \lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
197. c:\\windows\\microsoft.net\\framework\\v2.0.50727\ \microsoft .net framework 2.0\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
198. c:\\windows\\msagent\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
199. c:\\windows\\pchealth\\helpctr\\binaries\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
200. c:\\windows\\pchealth\\uploadlb\\binaries\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
201. c:\\windows\\r_slsvc.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
202. c:\\windows\\system32\\bbegiln.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
203. c:\\windows\\system32\\bdiptyd.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
204. c:\\windows\\system32\\dikfkmp.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
205. c:\\windows\\system32\\ebzxusq.exe - Worm.MSIL.Roxin.r ( DrWEB: Trojan.DownLoader7.40420, BitDefender: Trojan.Generic.8462763 )
206. c:\\windows\\system32\\eczxvso.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
207. c:\\windows\\system32\\gxusljg.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
208. c:\\windows\\system32\\hjloqsx.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
209. c:\\windows\\system32\\lasrse.exe - Backdoor.Win32.Yoddos.an ( DrWEB: BackDoor.Darkshell.246, BitDefender: Trojan.Generic.4685438, NOD32: Win32/Agent.NWM trojan, AVAST4: Win32:Agent-AERY [Trj] )
210. c:\\windows\\system32\\lezojav.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
211. c:\\windows\\system32\\lib32waqs.exe - Worm.MSIL.Roxin.r ( DrWEB: Trojan.DownLoader7.40420, BitDefender: Worm.Generic.413005 )
212. c:\\windows\\system32\\lnsxbgl.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
213. c:\\windows\\system32\\qpet50284ce3.txt - HEUR:Trojan.Win32.Generic ( BitDefender: Trojan.Generic.8461844 )
214. c:\\windows\\system32\\qsvzceg.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
215. c:\\windows\\system32\\spool\\drivers\\w32x86\\can onlbp_810ac2d\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
216. c:\\windows\\system32\\vmjhcyv.exe - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
217. c:\\windows\\system32\\1a7404f3.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
218. c:\\windows\\system32\\12207c59.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
219. c:\\windows\\system32\\368355ec.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
220. c:\\windows\\system32\\486d13ae.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
221. c:\\windows\\system32\\532631d2.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
222. c:\\windows\\system32\\55de4dcd.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
223. c:\\windows\\system32\\76254824.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
224. c:\\windows\\system32\\77940e7a.sys - Trojan.Win32.Genome.agsyp ( DrWEB: Trojan.Guntor.3, BitDefender: Gen:Variant.Graftor.35790 )
225. c:\\windows\\temp\\servcief161a5.exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
226. c:\\windows\\temp\\servcie991f6.exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
227. c:\\windows\\temp\\servcie992a4.exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
228. c:\\windows\\temp\\servcie99396.exe - Trojan.Win32.Scar.fvka ( DrWEB: Trojan.DownLoad2.52794, BitDefender: Trojan.Generic.7332346, NOD32: Win32/TrojanDownloader.Agent.RBN trojan, AVAST4: Win32:Trojan-gen )
229. c:\\windows\\temp\\081c57ee.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
230. c:\\windows\\temp\\1a4926c2.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
231. c:\\windows\\temp\\10b82a60.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
232. c:\\windows\\temp\\2dfe6e4c.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
233. c:\\windows\\temp\\3b160a41.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
234. c:\\windows\\temp\\3f863206.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
235. c:\\windows\\temp\\4f597e48.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
236. c:\\windows\\temp\\44e87c0a.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
237. c:\\windows\\temp\\5f7d7e58.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
238. c:\\windows\\temp\\52c96e35.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
239. c:\\windows\\temp\\56044806.tmp - Backdoor.Win32.Hupigon.eqzd ( BitDefender: MemScan:Backdoor.Delf.HSV, AVAST4: Win32:AutoRun-AUO [Wrm] )
240. c:\\windows\\temp\\7f8071df.exe - Trojan.Win32.Jorik.Yoddos.ahq ( DrWEB: Trojan.MulDrop.16584, BitDefender: Trojan.Crypt.CG, AVAST4: Win32:Agent-AACM [Trj] )
241. c:\\windows\\twain_32\\cnql30\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
242. c:\\windows\\xxxxxx83c69978\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
243. c:\\windows\\xxxxxx83c69978\\svchsot.exe - Trojan-Spy.Win32.Agent.cdfh ( DrWEB: Trojan.DownLoader5.49351, BitDefender: Trojan.Generic.KDV.522203, AVAST4: Win32:Dropper-JQQ [Drp] )
244. c:\\windows\\youes\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
245. c:\\windows\\zoues\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
246. c:\\windows\\3a5u.bmp - HEUR:Trojan.Win32.Generic ( DrWEB: Trojan.DownLoad3.17468, BitDefender: DeepScan:Generic.Rugo.0905CFFA, AVAST4: Win32:Agent-GRW [Trj] )
247. d:\\ati\\support\\wxp-w2k-8-062-040929a-018115c\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
248. d:\\lbp810\\l340brux\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
249. d:\\program files\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
250. d:\\program files\\1cv77\\bin\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
251. d:\\program files\\1cv77last\\bin\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
252. d:\\program files\\1cv77\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
253. d:\\program files\\1cv77\\patchwise.bak\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
254. e:\\coяey\\convertxtodvd\\convertxtodvd 2\\convertxtodvd 2.99.18.970\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
255. e:\\coяey\\convertxtodvd\\convertxtodvd 3\\convertxtodvd 3.8.0.193k\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
256. e:\\coяey\\convertxtodvd\\convertxtodvd 3\\keygen\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
257. e:\\coяey\\convertxtodvd\\convertxtodvd 3\\portable editions\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
258. e:\\coяey\\convertxtodvd\\convertxtodvd 4\\convertxtodvd 4.0.9.322\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
259. e:\\coяey\\convertxtodvd\\convertxtodvd 4\\keygen\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
260. e:\\coяey\\convertxtodvd\\convertxtodvd 4\\portable editions\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
261. e:\\coяey\\convertxtodvd\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
262. e:\\coяey\\convertxtodvd\\шаблоны меню\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
263. e:\\coяey\\downloads\\download master 5\\download master 5\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
264. e:\\coяey\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
265. e:\\coяey\\rag_doll-[lsd.]\\adobe photoshop cs1 8.0 rus\\crack\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
266. e:\\coяey\\rag_doll-[lsd.]\\adobe photoshop cs1 8.0 rus\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
267. e:\\coяey\\rag_doll-[lsd.]\\adobe photoshop cs1 8.0 rus\\russian\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
268. e:\\coяey\\rag_doll-[lsd.]\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
269. e:\\coяey\\warcraft iii\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
270. e:\\coяey\\warcraft iii\\warcraft 3 version switcher\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
271. e:\\coяey\\xili.vid.conv.plati.v5.1.37.0120+rus\\l pk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
272. e:\\coяey\\xili.vid.conv.plati.v5.1.37.0120+rus\\r us\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
273. e:\\downloads\\программы\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
274. e:\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
275. i:\\хиф\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
276. j:\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
277. j:\\рыбалка\\propilkki2\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
278. k:\\soft\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
279. k:\\soft\\ulead videostudio8\\crack\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
280. k:\\soft\\ulead videostudio8\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
281. k:\\soft\\ulead videostudio8\\russian\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )
282. k:\\soft\\безопасность\\comodo internet security 5.0.162636.1135 final x86\\lpk.dll - Trojan.Win32.Scar.gkpg ( DrWEB: Trojan.DownLoader6.25742, BitDefender: Gen:Variant.Kazy.79481, AVAST4: Win32:ServStart-C [Trj] )

Рекомендации:

Обнаружены троянские программы класса Trojan-PSW/Trojan-Spy - настоятельно рекомендуется поменять все пароли !

massive attack от eClient.exe [Trojan.Win32.Genome.agsyp, , Trojan-PSW.Win32.LdPinch.badh ] (заявка № 128989)

Опции темы

massive attack от eClient.exe [Trojan.Win32.Genome.agsyp, , Trojan-PSW.Win32.LdPinch.badh ]

Антивирусная помощь

Антивирусная помощь

Это понравилось:

Антивирусная помощь

Антивирусная помощь

Итог лечения

Похожие темы

Exploit attack

virus Attack

New Massive Botnet Twice the Size of Storm

Massive iFrame continues to hit top sites

RPC DCOM Attack

Метки для этой темы

Ваши права в разделе