нет доступа на сайты антивирусов

Printable View

16.10.2011, 21:40
cloud45

нет доступа на сайты антивирусов

Добрый день. Сегодня заметил, что антивирус перестал обновляться. решил скачать обновление вручную, но не смог зайти на сайт. Попробовал зайти на сайты других антивирусов, но безрезультатно. Доступа к microsoft.com так же нет. Просканировал Dr.Web Curent, что не помогло моей проблеме.
Буду очень признателен, если мне помогут решить данную проблему.
Заранее благодарю.
16.10.2011, 21:41
Info_bot

Уважаемый(ая) [B]cloud45[/B], спасибо за обращение на наш форум!

Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].
16.10.2011, 22:42
ARMA9000

[CODE]Внимание !!! База поcледний раз обновлялась 25.08.2010 необходимо обновить базы при помощи автоматического обновления (Файл/Обновление баз)[/CODE]
Базы обновить и переделать логи.
16.10.2011, 23:41
cloud45

базы обновлены. выкладываю логи после обновления.
17.10.2011, 10:47
thyrex

Выполните скрипт в AVZ
[code]begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\58.exe','');
QuarantineFile('C:\WINDOWS\system32\08.exe','');
QuarantineFile('C:\Documents and Settings\User\win93.exe','');
QuarantineFile('C:\Documents and Settings\User\wds.exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\ddng[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\200f33fdndx[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\MP2TTJYX\200hnfkvxx[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\wffwwng[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\ddng[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200f33fdndx[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200csdddvvvc[1].exe','');
QuarantineFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\81M8HBVS\hgydng[1].exe','');
QuarantineFile('C:\Documents and Settings\User\cdqj.exe','');
QuarantineFile('C:\Documents and Settings\User\cadqj.exe','');
QuarantineFile('C:\Documents and Settings\User\caddwqj.exe','');
QuarantineFile('C:\Documents and Settings\User\Application Data\FF.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\E8.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\E1.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\E0.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\DD.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\DC.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\DA.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\D9.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\D8.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\D7.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\D5.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\D0.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\CF.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\C9.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\C6.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\BD.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\B5.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\B0.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A9.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A7.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A6.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A5.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A4.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A3.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\A1.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\9F.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\9E.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\98.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\93.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\90.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\8F.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\8E.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\8C.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\80.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\7F.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\7A.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\77.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\70.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\6E.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\6C.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\6A.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\68.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\65.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\63.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\5E.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\5D.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\59.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\58.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\51.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\4E.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\4C.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\4B.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\41.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\3D.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\22B.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\10F.tmp','');
QuarantineFile('C:\Documents and Settings\User\Application Data\108.tmp','');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S617TWX6\w[1].exe','');
QuarantineFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\57Y3JPAJ\5943[1].exe','');
QuarantineFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\ winfixer c a r d .cmd','');
QuarantineFile('C:\WINDOWS\jodrive32.exe','');
QuarantineFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe','');
QuarantineFile('C:\Documents and Settings\User\Application Data\trfmgr32.exe','');
QuarantineFile('C:\Documents and Settings\User\Application Data\Rbhuhl.exe','');
TerminateProcessByName('c:\windows\jodrive32.exe');
QuarantineFile('c:\windows\jodrive32.exe','');
TerminateProcessByName('c:\documents and settings\user\application data\dadvmgr32.exe');
QuarantineFile('c:\documents and settings\user\application data\dadvmgr32.exe','');
DeleteFile('c:\documents and settings\user\application data\dadvmgr32.exe');
DeleteFile('c:\windows\jodrive32.exe');
DeleteFile('C:\Documents and Settings\User\Application Data\Rbhuhl.exe');
DeleteFile('C:\Documents and Settings\User\Application Data\trfmgr32.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','trfmd');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','dadv');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Rbhuhl');
DeleteFile('C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe');
RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','Tnaww');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Config Setup');
DeleteFile('C:\WINDOWS\jodrive32.exe');
DeleteFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\ winfixer c a r d .cmd');
DeleteFile('explorer.exe,C:\RECYCLER\S-1-5-21-0243556031-888888379-781863308-1413\syitm.exe,Explorer.exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\57Y3JPAJ\5943[1].exe');
DeleteFile('C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\S617TWX6\w[1].exe');
DeleteFile('C:\Documents and Settings\User\Application Data\108.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\10F.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\22B.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\3D.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\41.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\4B.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\4C.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\4E.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\51.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\58.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\59.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\5D.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\5E.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\63.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\65.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\68.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\6A.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\6C.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\6E.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\70.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\77.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\7A.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\7F.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\80.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\8C.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\8E.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\8F.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\90.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\93.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\98.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\9E.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\9F.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A1.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A3.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A4.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A5.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A6.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A7.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\A9.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\B0.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\B5.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\BD.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\C6.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\C9.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\CF.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\D0.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\D5.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\D7.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\D8.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\D9.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\DA.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\DC.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\DD.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\E0.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\E1.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\E8.tmp');
DeleteFile('C:\Documents and Settings\User\Application Data\FF.tmp');
DeleteFile('C:\Documents and Settings\User\caddwqj.exe');
DeleteFile('C:\Documents and Settings\User\cadqj.exe');
DeleteFile('C:\Documents and Settings\User\cdqj.exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\81M8HBVS\hgydng[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200csdddvvvc[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\200f33fdndx[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\ddng[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\9IOASRM7\wffwwng[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\MP2TTJYX\200hnfkvxx[1].exe');
DeleteFile('C:\Documents and Settings\User\Local Settings\Temporary Internet Files\Content.IE5\W4XKRL3L\ddng[1].exe');
DeleteFile('C:\Documents and Settings\User\wds.exe');
DeleteFile('C:\Documents and Settings\User\win93.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132410.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132412.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132413.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132417.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132421.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132422.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132423.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132424.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132425.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132430.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132433.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132437.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132438.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132439.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132441.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132444.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132446.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132450.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132451.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132452.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132457.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132461.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132466.exe');
DeleteFile('C:\System Volume Information\_restore{7E1D6DD8-E42C-4E7B-BC65-E591246F2F59}\RP70\A0132473.exe');
DeleteFile('C:\WINDOWS\system32\08.exe');
DeleteFile('C:\WINDOWS\system32\58.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman');
RebootWindows(true);
end. [/code]Компьютер перезагрузится.

Пришлите карантин согласно [B]Приложения 3[/B] правил по красной ссылке [COLOR="Red"][U][B]Прислать запрошенный карантин[/B][/U][/COLOR] вверху темы

Установите все [url="http://www.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=ru"]новые обновления[/url] для Windows
Установите [url="http://www.microsoft.com/rus/windows/internet-explorer/default.aspx"]Internet Explorer 8[/url] (даже если им не пользуетесь)
Обновите [url="http://www.java.com/ru/download/manual.jsp"]JavaRE[/url]

Сделайте новые логи

Сделайте лог [url="http://virusinfo.info/showpost.php?p=457118&postcount=1"]полного сканирования МВАМ[/url]
17.10.2011, 21:20
cloud45

Был выполнен скрипт. ПК перегрузился, и уже ВСЕ работает!!! Спасибо!
В настоящую секунду обновляю все ПО, ставлю антивирус AVG Free.
Затем, скину новые логи.
18.10.2011, 05:45
cloud45

Система обновлена посредством Windows Update. и все остальное ПО так же обновлено. Установлен антивирус AVG Free. Еще раз просканировал AVZ и Hijackthis. Логи во вложении.
18.10.2011, 09:42
ARMA9000

[url="http://virusinfo.info/showpost.php?p=493584&postcount=2"]Удалите в МВАМ[/url] все, [b]кроме[/b] [code]
c:\documents and settings\администратор\application data\desktopicon\ebayshortcuts.exe (Adware.ADON) -> No action taken.
c:\portablesoft\photoshop.exe\Msvcrt.dll (Malware.Packer.Gen) -> No action taken.
c:\portablesoft\photoshop.exe\Shfolder.dll (Trojan.Agent) -> No action taken.
c:\program files\System\cpl bonus\pkey.exe (PUP.PSWTool.ProductKey) -> No action taken.
c:\program files\total commander\Plugins\arc\Default.sfx (Malware.Packer.Gen) -> No action taken.
c:\program files\total commander\Utils\SFX Tool\Upack.exe (Malware.Packer.Gen) -> No action taken.[/code]

Сделайте новое исследование mbam.
19.10.2011, 00:38
cloud45

К сожалению, я сделал так, как было написано сегодня вечером, а именно: просканировать еще раз MBAM и выслать лог. То, что обнаружил mbam, я удалил. Что же мне теперь делать, если я не сделал исключения для удалений?
19.10.2011, 01:01
thyrex

[url="http://virusinfo.info/showpost.php?p=493584&postcount=2"]Удалите в МВАМ[/url] все, [b]кроме[/b][CODE]c:\program files\System\cpl bonus\pkey.exe (PUP.PSWTool.ProductKey) -> No action taken.[/CODE]
19.10.2011, 20:51
cloud45

все... думаю, теперь уже можно с уверенностью заявить, что все вылечено и все работоспособно!
спасибо вам, огромнейшее, за вашу очень нужную работу работу!!!
20.10.2011, 20:51
CyberHelper

Итог лечения

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]2[/B][*]Обработано файлов: [B]255[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\s617twx6\\w[1].exe - [B]Worm.Win32.Ngrbot.dhx[/B] ( DrWEB: BackDoor.Siggen.30867, BitDefender: Trojan.Generic.KD.263191, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\networkservice\\local settings\\temporary internet files\\content.ie5\\57y3jpaj\\5943[1].exe - [B]Backdoor.Win32.Floder.xp[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\application data\\a1.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\a3.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\a4.tmp - [B]Trojan-Downloader.Win32.Small.calj[/B] ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6217275, AVAST4: Win32:Downloader-IEM [Trj] )[*] c:\\documents and settings\\user\\application data\\a5.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\a6.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\a7.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\a9.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\bd.tmp - [B]Trojan.Win32.Scar.edwn[/B] ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )[*] c:\\documents and settings\\user\\application data\\b0.tmp - [B]Trojan.Win32.Scar.edwn[/B] ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )[*] c:\\documents and settings\\user\\application data\\b5.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\cf.tmp - [B]Net-Worm.Win32.Kolab.aeen[/B] ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6196066, AVAST4: Win32:Slenugga [Trj] )[*] c:\\documents and settings\\user\\application data\\c6.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\c9.tmp - [B]Trojan.Win32.Scar.edwn[/B] ( DrWEB: Trojan.Inject.47677, BitDefender: Trojan.Generic.6215955, AVAST4: Win32:Slenugga [Trj] )[*] c:\\documents and settings\\user\\application data\\dadvmgr32.exe - [B]Packed.Win32.TDSS.c[/B] ( DrWEB: Trojan.Inject.56069, BitDefender: Trojan.Generic.6776012, AVAST4: Win32:Dropper-gen [Drp] )[*] c:\\documents and settings\\user\\application data\\da.tmp - [B]Trojan.Win32.Powp.adit[/B] ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )[*] c:\\documents and settings\\user\\application data\\dc.tmp - [B]HEUR:Trojan.Win32.Generic[/B] ( DrWEB: Trojan.DownLoader3.62276, BitDefender: Trojan.Generic.KDV.273625 )[*] c:\\documents and settings\\user\\application data\\dd.tmp - [B]Net-Worm.Win32.Kolab.aehs[/B] ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Backdoor.Bot.141827 )[*] c:\\documents and settings\\user\\application data\\d0.tmp - [B]Net-Worm.Win32.Kolab.aehf[/B] ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.6376750, NOD32: IRC/SdBot trojan, AVAST4: Win32:Trojan-gen )[*] c:\\documents and settings\\user\\application data\\d5.tmp - [B]HEUR:Trojan.Win32.Generic[/B] ( DrWEB: Win32.HLLW.Recycler.6, BitDefender: Trojan.Generic.6206954 )[*] c:\\documents and settings\\user\\application data\\d7.tmp - [B]Trojan.Win32.Powp.adim[/B] ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6202443 )[*] c:\\documents and settings\\user\\application data\\d8.tmp - [B]Trojan.Win32.Powp.adim[/B] ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6202443 )[*] c:\\documents and settings\\user\\application data\\d9.tmp - [B]Trojan.Win32.Powp.adit[/B] ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )[*] c:\\documents and settings\\user\\application data\\e0.tmp - [B]Trojan.Win32.Powp.adio[/B] ( DrWEB: Trojan.DownLoader4.180, BitDefender: Trojan.Generic.6790083, AVAST4: Win32:Ruskill-BN [Trj] )[*] c:\\documents and settings\\user\\application data\\e1.tmp - [B]Trojan-Downloader.Win32.Genome.ckxi[/B] ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6246491, AVAST4: Win32:Downloader-IGM [Trj] )[*] c:\\documents and settings\\user\\application data\\e8.tmp - [B]Trojan.Win32.Powp.adio[/B] ( DrWEB: Trojan.DownLoader4.180, BitDefender: Trojan.Generic.6790083, AVAST4: Win32:Ruskill-BN [Trj] )[*] c:\\documents and settings\\user\\application data\\ff.tmp - [B]Backdoor.Win32.IRCBot.ucv[/B] ( DrWEB: Trojan.PWS.Panda.786, BitDefender: Gen:Variant.Graftor.3058, NOD32: IRC/SdBot trojan, AVAST4: Win32:Ruskill-AL [Trj] )[*] c:\\documents and settings\\user\\application data\\rbhuhl.exe - [B]Trojan.Win32.Scar.ewog[/B] ( DrWEB: BackDoor.IRC.Sdbot.16835, BitDefender: Backdoor.IRCBot.ADEC, AVAST4: Win32:Trojan-gen )[*] c:\\documents and settings\\user\\application data\\trfmgr32.exe - [B]Packed.Win32.TDSS.c[/B] ( DrWEB: Trojan.Inject.56069, BitDefender: Trojan.Generic.6776012, AVAST4: Win32:Dropper-gen [Drp] )[*] c:\\documents and settings\\user\\application data\\10f.tmp - [B]Net-Worm.Win32.Kolab.aepc[/B] ( DrWEB: Trojan.AVKill.7747, BitDefender: Trojan.Generic.6264583, AVAST4: Win32:Ruskill-AL [Trj] )[*] c:\\documents and settings\\user\\application data\\108.tmp - [B]Net-Worm.Win32.Kolab.aepc[/B] ( DrWEB: Trojan.AVKill.7747, BitDefender: Trojan.Generic.6264583, AVAST4: Win32:Ruskill-AL [Trj] )[*] c:\\documents and settings\\user\\application data\\22b.tmp - [B]Trojan.Win32.Powp.adit[/B] ( DrWEB: BackDoor.IRC.Bot.1660, BitDefender: Trojan.Generic.6244779 )[*] c:\\documents and settings\\user\\application data\\3d.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\4b.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\4c.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\4e.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\41.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\5d.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\5e.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\51.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\58.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\59.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\6a.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\6c.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\6e.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\63.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\65.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\68.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\7a.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\7f.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\70.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\77.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\8c.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\8e.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\8f.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\80.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\9e.tmp - [B]Trojan-Downloader.Win32.Small.calj[/B] ( DrWEB: Trojan.DownLoader.47465, BitDefender: Trojan.Generic.6217275, AVAST4: Win32:Downloader-IEM [Trj] )[*] c:\\documents and settings\\user\\application data\\9f.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\90.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\application data\\93.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBG [Trj] )[*] c:\\documents and settings\\user\\application data\\98.tmp - [B]Trojan-Downloader.Win32.Genome.cjwq[/B] ( DrWEB: Trojan.DownLoader3.36983, BitDefender: Trojan.Generic.KDV.260229, AVAST4: Win32:Downloader-IBH [Trj] )[*] c:\\documents and settings\\user\\caddwqj.exe - [B]Backdoor.Win32.Floder.xp[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\cadqj.exe - [B]Backdoor.Win32.Floder.xp[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\cdqj.exe - [B]Backdoor.Win32.Floder.iv[/B] ( DrWEB: BackDoor.Ddoser.213, BitDefender: Trojan.Generic.KD.252582, AVAST4: Win32:Malware-gen )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\mp2ttjyx\\200hnfkvxx[1].exe - [B]Worm.Win32.Ngrbot.dhx[/B] ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\w4xkrl3l\\ddng[1].exe - [B]Backdoor.Win32.Floder.xp[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\w4xkrl3l\\200f33fdndx[1].exe - [B]Backdoor.Win32.Floder.sz[/B] ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\81m8hbvs\\hgydng[1].exe - [B]Backdoor.Win32.Floder.iv[/B] ( DrWEB: BackDoor.Ddoser.213, BitDefender: Trojan.Generic.KD.252582, AVAST4: Win32:Malware-gen )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\ddng[1].exe - [B]Backdoor.Win32.Floder.xp[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\wffwwng[1].exe - [B]Worm.Win32.Ngrbot.dhv[/B] ( DrWEB: BackDoor.IRC.Bot.1405, BitDefender: Trojan.Generic.KDV.260358, NOD32: Win32/Dorkbot.A worm, AVAST4: Win32:Dorkbot-BH [Trj] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\200csdddvvvc[1].exe - [B]Worm.Win32.Ngrbot.dkd[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KD.264253, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\9ioasrm7\\200f33fdndx[1].exe - [B]Trojan.Win32.Genome.skyo[/B] ( DrWEB: BackDoor.IRC.Bot.1528, BitDefender: Trojan.Generic.6205416, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\wds.exe - [B]Trojan.Win32.Genome.skyo[/B] ( DrWEB: BackDoor.IRC.Bot.1528, BitDefender: Trojan.Generic.6205416, AVAST4: Win32:MalOb-EI [Cryp] )[*] c:\\documents and settings\\user\\win93.exe - [B]Worm.Win32.Ngrbot.dhx[/B] ( DrWEB: Trojan.Packed.21749, BitDefender: Backdoor.Generic.674295, AVAST4: Win32:Dorkbot-BH [Trj] )[*] c:\\recycler\\r-1-5-21-1482476501-1644491937-682003330-1013\\ winfixer c a r d .cmd - [B]Trojan.Win32.Pincav.bobj[/B] ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )[*] c:\\recycler\\s-1-5-21-0243556031-888888379-781863308-1413\\syitm.exe - [B]Trojan-Dropper.Win32.Agent.fzfv[/B] ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.7463318 )[*] c:\\windows\\jodrive32.exe - [B]Trojan-Dropper.Win32.Agent.fzfv[/B] ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.7476679 )[*] c:\\windows\\system32\\08.exe - [B]Trojan.Win32.Pincav.bobj[/B] ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )[*] c:\\windows\\system32\\58.exe - [B]Trojan.Win32.Pincav.bobj[/B] ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.KDV.380757, AVAST4: Win32:Downloader-KWG [Trj] )[/LIST][/LIST]