-
Остатки вирусов
Приветствую, друзья!
Пытаюсь вылечить последний комп (остальные, благодаря форуму, здоровые и счастливые).
Др Вэб нашел заразу и удалил. После перезагрузки открываются пустые вэб-страницы. При соединении с Интернетом система иногда зависает.
Помогите. Логи прилагаю согласно правилам.
-
- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon','UserInit', GetEnvironmentVariable ('WinDir')+'\System32\userinit.exe,');
QuarantineFile('C:\WINDOWS.0\system32\bsysmgr.exe','');
QuarantineFile('C:\WINDOWS.0\jodrive32.exe','');
QuarantineFile('C:\Documents and Settings\Admin\bnt.exe','');
QuarantineFile('C:\Documents and Settings\Admin\msc32.exe','');
QuarantineFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\winfixer.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe','');
TerminateProcessByName('c:\documents and settings\admin\pdf.exe');
QuarantineFile('c:\documents and settings\admin\pdf.exe','');
QuarantineFile('c:\windows.0\jodrive32.exe','');
TerminateProcessByName('c:\windows.0\jodrive32.exe');
DeleteFile('c:\windows.0\jodrive32.exe');
DeleteFile('c:\documents and settings\admin\pdf.exe');
DeleteFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','12CFG214-K641-12SF-N85P');
DeleteFile('C:\WINDOWS.0\jodrive32.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Config Setup');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Config Setup');
DeleteFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\winfixer.exe');
DeleteFile('C:\Documents and Settings\Admin\msc32.exe');
DeleteFile('C:\Documents and Settings\Admin\bnt.exe');
DeleteFile('C:\WINDOWS.0\system32\bsysmgr.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman ');
BC_ImportAll;
ExecuteSysClean;
ExecuteRepair(11);
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_Activate;
RebootWindows(true);
end.[/CODE]
После перезагрузки:
- выполните такой скрипт
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
- Файл [B][COLOR="Red"]quarantine.zip[/COLOR][/B] из папки AVZ загрузите по ссылке [B][COLOR="Red"]Прислать запрошенный карантин[/COLOR][/B] вверху темы
Обновите систему
- SP2 обновите до [URL="http://www.microsoft.com/Downloads/details.aspx?displaylang=ru&FamilyID=5b33b5a8-5e76-401f-be08-1e1555d4f3d4"]Service Pack 3[/URL](может потребоваться активация)
[B]*[/B] Перед установкой Сервис Пака необходимо выгрузить антивирус, файрвол, а так же резидентные приложения типа TeaTimer (Spybot Search and Destroy) и др.)
[B]*[/B] Microsoft остановил поддержку и выпуск обновлений безопасности для ОС Windows XP без установленного SP3, см.[URL="http://windows.microsoft.com/ru-ru/windows/help/end-support-windows-xp-sp2-windows-vista-without-service-packs?os=xp"]тут[/URL]
- Поставте все последние обновления системы Windows - [URL="http://www.update.microsoft.com"]тут[/URL]
После обновления:
- Сделайте повторные логи по [URL="http://virusinfo.info/pravila.html"]правилам[/URL] п.2 и 3 раздела Диагностика.([COLOR="Blue"]virusinfo_syscheck.zip;hijackthis.log[/COLOR])
- Сделайте лог [URL="http://virusinfo.info/showpost.php?p=457118&postcount=1"][COLOR="Blue"][B]MBAM[/B][/COLOR][/URL]
-
Сервис Пак, к сожалению, никак не хочет ставиться (кто-то или что-то блокирует доступ к реестру в процессе инсталляции). Уже кучу способов перепробовал - пока не помогает :(
Все остальное - выполнил. Посмотрите, плз.
-
1.[URL="http://virusinfo.info/showpost.php?p=493584&postcount=2"]удалите[/URL] в [B]MBAM[/B]
[CODE]
Заражённые ключи в реестре:
HKEY_CLASSES_ROOT\CLSID\{8E8E8F8A-8FCC-88CE-BCB8-B8FD8E88888A} (Malware.Packer.Gen) -> No action taken.
Заражённые папки:
c:\program files\Save (Adware.WhenU) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU (Adware.WhenU) -> No action taken.
c:\RECYCLER\r-1-5-21-1482476501-1644491937-682003330-1013 (Worm.AutoRun.Gen) -> No action taken.
Заражённые файлы:
c:\documents and settings\Admin\application data\dwpem.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\application data\visdrive.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\application data\bbjph.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\application data\hawmd.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\38.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\38_____0.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\47.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\61.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\79C.exe (Trojan.Agent.Gen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\7D6.exe (Trojan.Agent.Gen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\85.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\bsysmgr.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\bsysmgr0.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\bsysmgr1.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\conhost.exe (Backdoor.Cycbot.Gen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\csrss.exe (Backdoor.Cycbot.Gen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\dwm.exe (Trojan.Agent.Gen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\jodrive32.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\pdf.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\png.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\png____0.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\vsbntlo.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\vsbntlo0.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\vsbntlo1.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\winfixe0.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\winfixer.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\Admin\local settings\application data\174375.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1746781.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2125406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2129187.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2248328.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2317640.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2317875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2349515.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2349609.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5520953.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5524296.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\application data\nkrsh.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\application data\yqufy.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\00406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\00468.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\032843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\032875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\036593.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\04500.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\06968.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\07250.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\100406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\100500.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1032843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1032953.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1033671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\10406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\580453.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\580640.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5832843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5833671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\583393.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\587328.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\590406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\590468.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\590796.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5932843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5932859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5933468.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\597593.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\60406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\60484.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1232843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1232968.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1233562.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\130406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\132843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\132875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1332843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\133578.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\140406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\170593.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\170640.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\170859.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1732843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\173346.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\174846.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\180406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\180703.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\210406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\210578.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\210859.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\220406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\220671.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\221156.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\230406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\10468.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\120843.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1820343.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\230546.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2328390.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2330625.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2338984.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\260406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\280750.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\381265.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\410406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\440812.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\470687.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\580406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\260531.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2610.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\261375.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2622828.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2623250.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\26765.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\270406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\270640.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\27218.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\276734.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\280406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\280656.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3112671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\320406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\320671.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\320937.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3212359.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\330406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\330734.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\366453.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\370406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\370750.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3732843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3732890.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3733546.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\379859.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\380406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3810.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3812515.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\410812.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4132843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4132906.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4133578.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\420406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\420671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\421140.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4232843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4232859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\470859.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4732843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4733265.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4734343.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\480421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\480843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4832843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4832875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4833968.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\490421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4932843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\49330.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4937468.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\500421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\500656.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5232843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\523346.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\523446.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\530437.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\530593.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\531250.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\532843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\532921.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5332843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5332968.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\632843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\632953.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\633734.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\70406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\70640.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\70937.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\732843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\732937.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\733562.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\80406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\80484.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\230828.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\23146.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2319375.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2319578.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2322437.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2322687.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2322812.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2323281.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2857296.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\290406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\290656.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2913625.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\298406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\300406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\300656.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\300828.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3011187.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\30406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\30484.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\306406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\30765.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\310406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\310843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3314203.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\332843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\332875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\333531.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\340406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\340703.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3422437.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3443671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\350406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\350968.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\44131.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4432843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4432859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4433984.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\450421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\450937.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\451109.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\451531.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4532843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4532984.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4533968.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\460421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\460515.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\460828.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\460984.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4632843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4632937.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\463462.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\470421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\501531.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\50193.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5032843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\503331.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5033968.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\50406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\50484.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\510421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\510625.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\51146.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5132843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5133406.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5135343.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\520421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\521312.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\550656.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\551218.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5532843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\553315.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5533828.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\560453.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\560890.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5632843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\110406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\110500.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\111375.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\112265.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1132843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1132968.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1133562.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\120406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\120500.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2328406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\232843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2328875.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\232890.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2329734.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2329937.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2330218.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2330406.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2330546.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2331218.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2331281.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2331296.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2331765.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2335515.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2335671.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\233593.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2337125.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2337328.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2337359.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2337515.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2337640.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2338109.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2338453.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2338484.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2338687.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2339218.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\240406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\240656.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\2416812.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\250406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\250531.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\250765.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\256734.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\256796.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3832843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3832875.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3834218.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\390406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\390781.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3932843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\39330.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\39350.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\400406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\400796.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\400875.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4032843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4032921.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\403415.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\40406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\563331.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\56340.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\570468.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\570921.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\57146.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5726984.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5732843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5732859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5734296.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3532843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3532859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3533484.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\35893.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\360406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\360718.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3632843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3632859.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\3633437.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4233484.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\430406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\430828.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\432843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\432906.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4332843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\4334687.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\433478.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\433500.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\440421.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5333921.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\533546.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\540437.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\540609.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\541375.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\541703.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5432843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5433671.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\5434765.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\550437.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\80812.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\832843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\832906.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\833515.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\90406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\90484.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\90640.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\90796.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\932843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\932953.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\933546.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\140562.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\14180.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1432843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\150406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\150515.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\151815.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1532843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\160406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\160515.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\160593.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\161831.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1632843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\16953.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\170406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1832843.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1850343.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\190406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\190578.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1932859.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\1932984.exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\200406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\200578.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\200593.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\20406.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\application data\20468.exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\332D2NN3\sms[1].exe (Worm.Palevo.XGen) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\332D2NN3\xhxc[1].bmp (Extension.Mismatch) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\332D2NN3\chzfnrw[1].jpg (Extension.Mismatch) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\ABPE2IFX\202[1].exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\ABPE2IFX\ms0481[1].exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\ABPE2IFX\ms0481[2].exe (Trojan.FakeAlert) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\ABPE2IFX\wzrpsujt[1].bmp (Extension.Mismatch) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\P0Z58SC3\202[1].exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\QY2JMAX7\h1[1].exe (Trojan.Dropper) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\QY2JMAX7\myms[1].exe (Worm.Palevo.XGen) -> No action taken.
c:\system volume information\_restore{d77952ef-4819-47e3-9ada-2f84c44282d6}\RP397\A0073542.exe (FakeMS) -> No action taken.
j:\RECYCLER\r-1-5-21-1482476501-1644491937-682003330-1013\winfixer.exe (Backdoor.Bot) -> No action taken.
c:\documents and settings\OEM\local settings\Temp\ie3.tmp (Trojan.Agent) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU\customer support.lnk (Adware.WhenU) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU\learn more about whenu save.url (Adware.WhenU) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU\learn more about whenu savenow.url (Adware.WhenU) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU\uninstall instructions.lnk (Adware.WhenU) -> No action taken.
c:\documents and settings\OEM\главное меню\программы\WhenU\whenu.com website.url (Adware.WhenU) -> No action taken.
[/CODE]
2.[URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
DeleteFileMask(GetAVZDirectory + 'Quarantine', '*.*', true);
DeleteFileMask('c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5', '*.*', true);
RebootWindows(true);
end.[/CODE]
После перезагрузки:
- Сделайте лог [URL="http://virusinfo.info/showpost.php?p=457118&postcount=1"][COLOR="Blue"][B]MBAM[/B][/COLOR][/URL]
-
-
-
Не получается :( Я б с удовольствием, но SP3 не ставится. Не хватает прав доступа инсталлятору к некоторым веткам реестра (каким не знаю). Что делать - ума не приложу (Форматировать, или в третий раз ставить новую систему уж очень не хочется).
Спасибо.
[size="1"][color="#666686"][B][I]Добавлено через 5 часов 29 минут[/I][/B][/color][/size]
По внешним признакам, все хорошо, вроде-бы. Спасибо большое!
-
- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
ExecuteRepair(6);
ExecuteRepair(8);
RegKeyIntParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum', '{BDEADF00-C265-11D0-BCED-00A0C90AB50F}', 1);
RebootWindows(true);
end.[/CODE]
-
-
попробуйте установить sp3
-
Попробовал. Результат тот-же - "Отказано в доступе", при инсталляции :( (реестр по прежнему частично блокируется)
Можно что-то исправить? Или все, амба :(
-
Итог лечения
Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]3[/B][*]Обработано файлов: [B]27[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\documents and settings\\admin\\bnt.exe - [B]P2P-Worm.Win32.Palevo.coyf[/B] ( DrWEB: Trojan.Inject.37080, BitDefender: Trojan.Generic.6117635, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\documents and settings\\admin\\msc32.exe - [B]Backdoor.Win32.Floder.gl[/B] ( DrWEB: Trojan.AVKill.2, BitDefender: Trojan.Generic.KD.207363, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\documents and settings\\admin\\pdf.exe - [B]P2P-Worm.Win32.Palevo.cpex[/B] ( DrWEB: Trojan.AVKill.11761, BitDefender: Trojan.Generic.KD.203871, NOD32: IRC/SdBot trojan, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\recycler\\r-1-5-21-1482476501-1644491937-682003330-1013\\winfixer.exe - [B]Trojan.Win32.Pincav.bezz[/B] ( DrWEB: Trojan.DownLoader2.47649, BitDefender: Trojan.Generic.KDV.205305, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\recycler\\s-1-5-21-0243936033-3052116371-381863308-1811\\vsbntlo.exe - [B]P2P-Worm.Win32.Palevo.coyf[/B] ( DrWEB: Trojan.Inject.37080, BitDefender: Trojan.Generic.6117635, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\windows.0\\jodrive32.exe - [B]Net-Worm.Win32.Kolab.aabi[/B] ( DrWEB: Trojan.DownLoader2.47649, BitDefender: Trojan.Generic.KDV.205305, AVAST4: Win32:Inject-AGC [Trj] )[*] c:\\windows.0\\system32\\bsysmgr.exe - [B]Trojan-Downloader.Win32.VB.ailh[/B] ( DrWEB: Trojan.DownLoader2.43376, BitDefender: Trojan.Generic.6243262, NOD32: Win32/TrojanClicker.VB.NUD trojan, AVAST4: Win32:FakeAlert-AER [Trj] )[/LIST][/LIST]
Page generated in 0.00728 seconds with 10 queries