Пойманы в разделе Помогите, отчет за период 24.05.2010 - 25.05.2010

[CyberHelper]

• Hoax.Win32.BadJoke.Delf.ec -> c:\documents and settings\admin\мои документы\borland studio projects\project1.exe
• Net-Worm.Win32.Kolab.ijs -> c:\documents and settings\администратор\application data\oabws.exe ( DrWEB: Trojan.MulDrop1.20039, BitDefender: Worm.Generic.242380, AVAST4: Win32:Malware-gen )
• not-a-virus:RiskTool.Win32.HideWindows -> c:\windows\system32\cmdow.exe
• Packed.Win32.Krap.ao -> c:\documents and settings\gorbach.molis\application data\udkhbzcy.exe ( DrWEB: Trojan.Winlock.1770, BitDefender: Gen:Variant.Ursnif.8, AVAST4: Win32:Crypt-GMY [Drp] )
• Packed.Win32.Krap.ao -> c:\documents and settings\yulia\start menu\programs\startup\monmzb32.exe ( DrWEB: Trojan.DownLoad1.61187, BitDefender: Gen:Variant.Ursnif.8, AVAST4: Win32:Crypt-GKP [Drp] )
• Packed.Win32.Krap.gx -> \cah_.dll ( DrWEB: Trojan.Winlock.1678, NOD32: Win32/AutoRun.Delf.EL worm, AVAST4: Win32:Rootkit-gen [Rtk] )
• Packed.Win32.Krap.x -> c:\windows\system32\userini.exe ( DrWEB: Trojan.Spambot.6788, BitDefender: Gen:Variant.Bredo.2, AVAST4: Win32:Bredolab-DH [Trj] )
• Rootkit.Win32.Bubnix.s -> c:\windows\system32\drivers\lwuayhaf.sys ( DrWEB: Trojan.WinSpy.713, BitDefender: Backdoor.Generic.351368, AVAST4: Win32:Rootkit-gen [Rtk] )
• Trojan-Dropper.Win32.Shiz.dv -> \\?\globalroot\systemroot\system32\34xn9bd.exe ( DrWEB: Trojan.PWS.Ibank.45, NOD32: Win32/Spy.Shiz.NAL trojan )
• Trojan-Proxy.Win32.Small.ahp -> c:\docume~1\admin\locals~1\temp\svchost.exe ( AVAST4: Win32:Small-NMD [Trj] )
• Trojan-PSW.Win32.Kates.gf -> c:\windows\inrbt.lau ( NOD32: Win32/Daonol.CO trojan, AVAST4: Win32:Trojan-gen )
• Trojan-Ransom.Win32.PinkBlocker.bkl -> c:\program files\common files\sysaware soft\svhost.exe
• Trojan-Spy.Win32.Agent.bftg -> c:\windows\system32\sfcfiles.dll ( AVAST4: Win32:WinSpy-FP [Trj] )
• Trojan-Spy.Win32.Zbot.ajlx -> c:\documents and settings\пользователь1\application data\zizao\ciegs.exe ( DrWEB: Trojan.PWS.Panda.338 )
• Trojan.Win32.BHO.agqg -> c:\program files\internet explorer\setupapi.dll ( DrWEB: Trojan.Siggen1.33147 )
• Trojan.Win32.Ddox.kd -> c:\recycled\dc4\711.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341395 )
• Trojan.Win32.Ddox.kd -> c:\recycled\dc4\873.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341395 )
• Trojan.Win32.Ddox.kd -> c:\recycled\dc5\content.ie5\s3cl2jo1\dewfdwq[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341395 )
• Trojan.Win32.Ddox.kd -> c:\windows\system32\0hc0jpz.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341395 )
• Trojan.Win32.Ddox.kd -> c:\recycled\dc4\800.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341395 )
• Trojan.Win32.Ddox.kh -> c:\recycled\dc5\content.ie5\s3cl2jo1\dwnjmn[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kh -> c:\recycled\dc4\430.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kh -> c:\windows\system32\ytupql08.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.ki -> c:\windows\system32\k81whijee3a.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.ki -> c:\recycled\dc4\233.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.ki -> c:\recycled\dc5\content.ie5\c1k3m56j\dewfwe[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.ki -> c:\recycled\dc4\784.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.ki -> c:\recycled\dc4\537.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kk -> c:\windows\system32\0ty81vq.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kk -> c:\recycled\dc4\461.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kk -> c:\recycled\dc5\content.ie5\s3cl2jo1\dwfdqw5[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kl -> c:\recycled\dc4\051.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438 )
• Trojan.Win32.Ddox.kl -> c:\windows\system32\tupv60xdnje.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438 )
• Trojan.Win32.Ddox.kl -> c:\recycled\dc5\content.ie5\zhpr2w1p\cfewwq1[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438 )
• Trojan.Win32.Ddox.km -> c:\windows\system32\oeu0lm1c.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.km -> c:\windows\system32\hidez081.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kn -> c:\windows\system32\mdd2jkf0.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kn -> c:\recycled\dc5\content.ie5\xxor9pjo\dewfedw[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kn -> c:\recycled\dc4\549.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.ko -> c:\recycled\dc5\content.ie5\c1k3m56j\dwqdwq[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.ko -> c:\recycled\dc4\378.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.3917438, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kq -> c:\windows\system32\70ggwm1.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kq -> c:\recycled\dc4\350.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kq -> c:\recycled\dc4\570.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kq -> c:\recycled\dc5\content.ie5\s3cl2jo1\fewfew[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kq -> c:\recycled\dc5\content.ie5\zhpr2w1p\fewfew[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kr -> c:\recycled\dc5\content.ie5\c1k3m56j\dewfew[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kr -> c:\recycled\dc4\668.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kr -> c:\windows\system32\a6q81cnoj.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.341279 )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc4\857.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc5\content.ie5\xxor9pjo\dwwmk[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc4\169.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc4\631.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc4\562.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc5\content.ie5\zhpr2w1p\dwwmk[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kw -> c:\recycled\dc5\content.ie5\xxor9pjo\dfewmk[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295, NOD32: Win32/Lethic.AA trojan )
• Trojan.Win32.Ddox.kx -> c:\recycled\dc4\943.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.4026522, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kx -> c:\recycled\dc5\content.ie5\xxor9pjo\fewnkn[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.4026522, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.kz -> c:\recycled\dc4\793.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295 )
• Trojan.Win32.Ddox.kz -> c:\recycled\dc5\content.ie5\zhpr2w1p\ewnjn[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295 )
• Trojan.Win32.Ddox.la -> c:\recycled\dc5\content.ie5\zhpr2w1p\wmkie[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295 )
• Trojan.Win32.Ddox.la -> c:\recycled\dc4\771.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Backdoor.Generic.353295 )
• Trojan.Win32.Ddox.lb -> c:\recycled\dc5\content.ie5\xxor9pjo\dwmk5[1].exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.4026522, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.lb -> c:\recycled\dc4\394.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.4026522, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Ddox.lg -> c:\recycled\dc4\669.exe ( DrWEB: BackDoor.Siggen.14353, BitDefender: Trojan.Generic.4026522, NOD32: Win32/Lethic.AA trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Inject.aqpq -> \\?\globalroot\systemroot\system32\65acznv.exe ( DrWEB: Trojan.DownLoad.64043, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Scar.cftg -> \\?\globalroot\systemroot\system32\o6swqce.exe ( DrWEB: Trojan.PWS.Ibank.39, NOD32: Win32/Spy.Shiz.NAW trojan, AVAST4: Win32:Malware-gen )
• Worm.Win32.AutoRun.bhvp -> c:\documents and settings\admin\application data\uxjj.exe ( AVAST4: Win32:Malware-gen )
• Worm.Win32.AutoRun.hek -> h:\f35afbc1a489474\f35afbc1a489474\f35afbc1a489474 og8.exe ( DrWEB: Trojan.Packed.20281, BitDefender: Trojan.Generic.4022276, AVAST4: Win32:Dropper-gen [Drp] )
• Worm.Win32.AutoRun.hek -> c:\documents and settings\эксперт\svchost.exe ( DrWEB: Trojan.Packed.20281, BitDefender: Trojan.Generic.4022276, AVAST4: Win32:Dropper-gen [Drp] )
• Worm.Win32.AutoRun.hek -> i:\f35afbc1a489474\f35afbc1a489474\f35afbc1a489474 og8.exe ( DrWEB: Trojan.Packed.20281, BitDefender: Trojan.Generic.4022276, AVAST4: Win32:Dropper-gen [Drp] )
• Worm.Win32.NeKav.cw -> c:\windows\system32\vbalprogbar6.ocx:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\neroburnrights.cpl:vxuad wedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\rsmconcepts.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\smlogcfg.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmgl004.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmgl007.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\msdv.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\$winnt$.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\asctrls.ocx:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\ksproxy.ax:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\prncnfg.vbs:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\ksproxy.ax:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\windows\help\admtools.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\apps.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\bootcons.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\dskquoui.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\gen.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\sceconcepts.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\whatsnew.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmnttp.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmpn1.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\msrio8.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mwremove.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\netpschd.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\wdma_rip.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\certmap.ocx:vxuadwedc oj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\g711codc.ax:vxuadwedc oj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\snd.htm:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\windows\system32\ksxbar.ax:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\msoutl32.ocx:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\neroburnrights.cpl:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\telephon.cpl:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\webfldrs.msi:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\windows\help\common.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\display.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\encrypt.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\hschelp.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\ieakmmc.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\keyb.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\newfeat5.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\nmchat.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\offlinefolders.chm:vxuadwedcoj:$da ta
• Worm.Win32.NeKav.cw -> c:\windows\help\shvl.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\comnt5.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\image.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\kdkscan.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\oem48.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\dhtmled.ocx:vxuadwedc oj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\login.cmd:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\login.cmd:vxuadwedcoj:$d ata
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\matroskasplitter.ax:vxua dwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\mmdriver.inf:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\telephon.cpl:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\windows\help\brief.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\msmq.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\notepad.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\wschelp.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\monitor4.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mtxvideo.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\wmfsdk10.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\3ivxdsencoder.ax:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\controls.js:vxuadwedc oj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\prncnfg.vbs:vxuadwedc oj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\tour.js:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\$winnt$.inf:vxuadwedcoj: $data
• Worm.Win32.NeKav.cw -> c:\windows\help\devmgr.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\rrc.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\secedit.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\netana.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\wdma_ess.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\matroskasplitter.ax:vxuadwedco j:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\perfwci.h:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\actsplash.ocx:vxuadwedco j:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\tabctl32.ocx:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\windows\help\fonts.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\fxsshare.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\lang.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\mail.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\newfeat2.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\osk.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\rsopsnp.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\snmpconcepts.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\usercpl.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmcdp.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmpp.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\netlm56.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\oem23.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\wab50.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\ncpa.cpl:vxuadwedcoj: $data
• Worm.Win32.NeKav.cw -> c:\windows\system32\irprops.cpl:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\outlperf.h:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\pubprn.vbs:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\tabctl32.ocx:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\webfldrs.msi:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\hdwwiz.cpl:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\pubprn.vbs:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\windows\help\defrag.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\folderop.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\regopt.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\system.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\dwup.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\fhg.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\irbus.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmnttp2.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\actskn43.ocx:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\tdc.ocx:vxuadwedcoj:$ data
• Worm.Win32.NeKav.cw -> c:\windows\system32\dllcache\telephon.cpl:vxuadwed coj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\prnqctl.vbs:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\kmddsp.tsp:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\documents and settings\test\desktop\dll\msoutl32.ocx:vxuadwedcoj :$data
• Worm.Win32.NeKav.cw -> c:\windows\help\inetres.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\msoe.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\mstsc.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\help\secsetconcepts.chm:vxuadwedcoj:$da ta
• Worm.Win32.NeKav.cw -> c:\windows\help\spider.chm:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\iereset.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmcom1.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mdmmcom.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\mgau.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\netfore.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\pinball.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\inf\volume.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cw -> c:\windows\system32\actsplash.ocx:vxuadwedcoj:$dat a
• Worm.Win32.NeKav.cw -> c:\windows\system32\mmdriver.inf:vxuadwedcoj:$data
• Worm.Win32.NeKav.cx -> c:\windows.0\system32\tbta.dll ( DrWEB: Trojan.Winlock.1769 )