Printable View
У меня возникла проблема с загрузкой сайта Google. В частности очень редко удается зайти на сам сайт, и даже если это удается, то на работает Gmail и прочие google приложения.
Так же не прогружаются 'google' скрипты. Например google-analitics и googleapis.
Помогите пожалуйста разобраться с этой проблемой.
Приложены логи сканирования AVZ, HiJackThis и Mbam.
Уважаемый(ая) [B]WorldEdit88[/B], спасибо за обращение на наш форум!
Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос.
Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/donate/"]поддержите проект[/URL].
1.[URL="http://virusinfo.info/showthread.php?t=4491"]Профиксите[/URL] в HijackThis
[CODE]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.smaxi.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.smaxi.net
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.smaxi.net
[/CODE]
2.[URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
RegKeyStrParamWrite('HKEY_LOCAL_MACHINE','SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon','UserInit', GetEnvironmentVariable ('WinDir')+'\System32\userinit.exe,');
QuarantineFile('C:\WINDOWS\system32\wbtxjnq.exe','');
QuarantineFile('C:\WINDOWS\system32\idjctgw.exe','');
QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\sony_ssm.sys','');
DeleteService('sony_ssm.sys');
DeleteService('amsint32');
QuarantineFile('C:\WINDOWS\system32\drivers\epptsl.sys','');
DeleteService('abp470n5');
TerminateProcessByName('c:\windows\system32\idjctgw.exe');
QuarantineFile('c:\windows\system32\idjctgw.exe','');
DeleteFile('C:\WINDOWS\system32\drivers\epptsl.sys');
DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\sony_ssm.sys');
DeleteFile('C:\WINDOWS\system32\idjctgw.exe');
DeleteFile('C:\WINDOWS\system32\wbtxjnq.exe');
DeleteFile('c:\windows\system32\idjctgw.exe');
BC_ImportAll;
ExecuteSysClean;
ExecuteRepair(20);
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
BC_Activate;
RebootWindows(true);
end.[/CODE]
После перезагрузки:
- выполните такой скрипт
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
- Файл [B][COLOR="Red"]quarantine.zip[/COLOR][/B] из папки AVZ загрузите по ссылке [B][COLOR="Red"]Прислать запрошенный карантин[/COLOR][/B] вверху темы
- [URL="http://virusinfo.info/showpost.php?p=493584&postcount=2"]удалите[/URL] в [B]MBAM[/B] оставшееся из этого
[CODE]
Заражённые процессы в памяти:
c:\WINDOWS\system32\idjctgw.exe (Spyware.Passwords.XGen) -> 1944 -> No action taken.
Заражённые модули в памяти:
(Вредоносных программ не обнаружено)
Заражённые ключи в реестре:
HKEY_LOCAL_MACHINE\SOFTWARE\StimulProfit (Adware.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AMSINT32 (Virus.Sality) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amsint32 (Virus.Sality) -> No action taken.
Заражённые параметры в реестре:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\194.206.126.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 194.206.126.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\194.33.180.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 194.33.180.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.137.160.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.137.160.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.146.235.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.146.235.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.2.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.2.240.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.210.42.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.210.42.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.55.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.55.72.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.64.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.64.225.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\195.70.37.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 195.70.37.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\198.6.49.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 198.6.49.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\199.203.243.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 199.203.243.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\203.160.188.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 203.160.188.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\204.14.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 204.14.90.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\205.178.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 205.178.145.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\128.111.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 128.111.48.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\128.130.56.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 128.130.56.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\128.130.60.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 128.130.60.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\139.91.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 139.91.222.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\141.202.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 141.202.248.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\149.101.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 149.101.225.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\150.70.93.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 150.70.93.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\155.35.248.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 155.35.248.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\162.40.10.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 162.40.10.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\165.160.15.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 165.160.15.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\166.70.98.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 166.70.98.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\18.85.2.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 18.85.2.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\188.93.8.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 188.93.8.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\192.150.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 192.150.94.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.0.6.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.0.6.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.1.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.1.193.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.110.109.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.110.109.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.17.85.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.17.85.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.193.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.193.194.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.24.237.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.24.237.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.66.251.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.66.251.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.69.114.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.69.114.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\193.71.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 193.71.68.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\194.0.200.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 194.0.200.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\194.109.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 194.109.142.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\194.112.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 194.112.106.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.12.145.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.12.145.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.239.122.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.239.122.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.246.90.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.246.90.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.49.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.49.88.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.49.94.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.49.94.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.55.183.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.55.183.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.99.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.99.133.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\217.106.234.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 217.106.234.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\217.16.16.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 217.16.16.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\217.170.21.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 217.170.21.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\217.174.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 217.174.103.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\38.113.1.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 38.113.1.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.14.249.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.14.249.0,255.255.255.0$19ь168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.146.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.146.210.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\205.227.136.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 205.227.136.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\206.204.52.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 206.204.52.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.44.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.44.154.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.46.18.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.46.18.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.46.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.46.20.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.46.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.46.232.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.66.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.66.0.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\208.79.250.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 208.79.250.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.124.55.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.124.55.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.157.69.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.157.69.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.160.22.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.160.22.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.216.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.216.46.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.51.167.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.51.167.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.62.112.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.62.112.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.62.68.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.62.68.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\209.87.209.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 209.87.209.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\212.47.219.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 212.47.219.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\212.67.88.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 212.67.88.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\212.72.62.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 212.72.62.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\212.8.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 212.8.79.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\213.133.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 213.133.34.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\213.171.218.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 213.171.218.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\213.198.89.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 213.198.89.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\213.220.100.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 213.220.100.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\213.31.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 213.31.172.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\216.10.192.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 216.10.192.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.227.172.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.227.172.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\68.177.102.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 68.177.102.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\69.162.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 69.162.79.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\69.18.148.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 69.18.148.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\69.20.104.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 69.20.104.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\69.57.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 69.57.142.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\69.93.226.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 69.93.226.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\70.84.211.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 70.84.211.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\72.232.246.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 72.232.246.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\72.3.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 72.3.254.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\72.32.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 72.32.125.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\72.32.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 72.32.149.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\72.32.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 72.32.70.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.208.158.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.208.158.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.208.20.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.208.20.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.50.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.50.0.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.52.233.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.52.233.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.53.201.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.53.201.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.55.40.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.55.40.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.29.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.29.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.82.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.82.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\78.108.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 78.108.86.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\78.137.164.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 78.137.164.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\78.47.87.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 78.47.87.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\79.125.5.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 79.125.5.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\80.153.193.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 80.153.193.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\80.190.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 80.190.130.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\80.190.154.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 80.190.154.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\80.237.132.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 80.237.132.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\80.86.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 80.86.107.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\81.176.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 81.176.66.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\81.177.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 81.177.31.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\81.24.35.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 81.24.35.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\82.117.238.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 82.117.238.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\82.151.107.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 82.151.107.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\82.165.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 82.165.103.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\82.98.86.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 82.98.86.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\83.202.175.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 83.202.175.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\83.222.23.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 83.222.23.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\83.222.31.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 83.222.31.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\83.223.117.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 83.223.117.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\84.40.30.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 84.40.30.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\85.12.57.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 85.12.57.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\85.17.210.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 85.17.210.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\85.214.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 85.214.106.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\85.255.19.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 85.255.19.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\85.31.222.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 85.31.222.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.106.242.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.106.242.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.106.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.106.254.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.230.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.230.79.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.238.48.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.238.48.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.242.72.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.242.72.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.242.74.0,255.255.255.0,192.168.1.0,1 ([email protected]) -> Value: 87.242.74.0,255.255.255.0,192.168.1&0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.242.79.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.242.79.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\88.221.119.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 88.221.119.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\89.108.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 89.108.66.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\89.111.176.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 89.111.176.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\89.202.149.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 89.202.149.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\89.202.157.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 89.202.157.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\90.156.159.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 90.156.159.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\90.183.101.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 90.183.101.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\91.121.97.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 91.121.97.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\91.199.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 91.199.212.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\91.209.196.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 91.209.196.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\92.123.155.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 92.123.155.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\92.53.106.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 92.53.106.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\93.184.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 93.184.71.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\93.191.13.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 93.191.13.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\94.23.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 94.23.206.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\94.236.0.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 94.236.0.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\95.140.225.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 95.140.225.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.55.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.55.74.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.185.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\174.120.186.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 174.120.186.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\208.43.71.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 208.43.71.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.53.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.53.70.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.86.232.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.86.232.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.54.139.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.54.139.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\174.133.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 174.133.38.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\174.120.185.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 174.120.185.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\174.120.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 174.120.184.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.54.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.54.130.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.54.46.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.54.46.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.189.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.43.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.43.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.86.125.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.86.125.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\75.125.212.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 75.125.212.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\207.44.254.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 207.44.254.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\83.102.130.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 83.102.130.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\87.242.75.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 87.242.75.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\81.176.67.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 81.176.67.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\188.40.74.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 188.40.74.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\208.43.44.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 208.43.44.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.67.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.67.184.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\74.125.77.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 74.125.77.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.146.66.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.146.66.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.189.194.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.189.194.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.213.110.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.213.110.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.75.163.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.75.163.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\62.75.216.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 62.75.216.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\63.85.36.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 63.85.36.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.128.133.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.128.133.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.13.134.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.13.134.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.202.189.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.202.189.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.246.4.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.246.4.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.41.142.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.41.142.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.41.151.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.41.151.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.66.190.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.66.190.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\64.78.182.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 64.78.182.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\65.175.38.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 65.175.38.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\65.55.184.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 65.55.184.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\65.55.240.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 65.55.240.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\66.223.50.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 66.223.50.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\66.249.17.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 66.249.17.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\66.77.70.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 66.77.70.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.134.208.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.134.208.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.15.103.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.15.103.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.15.231.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.15.231.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.19.34.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.19.34.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.192.135.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.192.135.0,255.255.255.0,192.168.1.0,1 -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\67.225.206.0,255.255.255.0,192.168.1.0,1 (TCPRoute.Hijack) -> Value: 67.225.206.0,255.255.255.0,192.168.1.0,1 -> No action taken.
Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Spyware.Passwords.XGen) -> Bad: (C:\WINDOWS\system32\idjctgw.exe) Good: () -> No action taken.
Заражённые папки:
c:\documents and settings\Admin\application data\winxrar (Trojan.Agent) -> No action taken.
Заражённые файлы:
c:\WINDOWS\system32\idjctgw.exe (Spyware.Passwords.XGen) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\dir.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\dot.gif (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\doctorweb\quarantine\w404b8f08.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\logo_____.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\myriadwebpro-condensed.ttf (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\rules.css (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-h-scroll-next.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\a.htm (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\after.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\aview (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-scroll-slider.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-v-scroll-next.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\htmlayout.dll (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\key (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\logo.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\logo2.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-h-scroll-prev.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-scroll-back.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-scroll-base.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\winrarview.exe (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\xsendexe.tmp (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\sb-v-scroll-prev.png (Trojan.Agent) -> No action taken.
c:\documents and settings\Admin\application data\winxrar\scroll.css (Trojan.Agent) -> No action taken.
[/CODE]
- Сделайте повторные логи по [URL="http://virusinfo.info/pravila.html"]правилам[/URL] п.2 и 3 раздела Диагностика.([COLOR="Blue"]virusinfo_syscheck.zip;hijackthis.log[/COLOR])
- Сделайте лог [URL="http://virusinfo.info/showpost.php?p=457118&postcount=1"][COLOR="Blue"][B]MBAM[/B][/COLOR][/URL]
Вроде все теперь заработало. Спасибо вам за помощь.
Повторные логи:
Выполните скрипт в AVZ:
[code]
begin
SearchRootkit(true, true);
ClearQuarantine;
QuarantineFile('C:\WINDOWS\yshn.sys','');
QuarantineFile('C:\WINDOWS\system32\yshn.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\yshn.sys','');
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.[/code]
Компьютер перезагрузится.
Пришлите карантин согласно приложению 3 правил, если будет не пуст.
Карантин пуст.
Спасибо за помощь.
Сделайте [URL="http://virusinfo.info/showthread.php?t=40118"]лог gmer[/URL].
Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]12[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\windows\\system32\\idjctgw.exe - [B]Trojan.Win32.Swisyn.azxe[/B] ( DrWEB: Trojan.Packed.20771, BitDefender: Trojan.Generic.6030114, NOD32: Win32/Agent.SKV trojan, AVAST4: Win32:Malware-gen )[/LIST][/LIST]