Невозможно подключиться к удалённому серверу

Printable View

11.11.2011, 20:43
The_wArz

Вложений: 2

Невозможно подключиться к удалённому серверу

Здравствуйте, с сегодняшнего дня вдруг начала появляться ошибка "Невозможно подключиться к удалённому серверу", не из одного браузера не заходит на многие сайты.В соц. сети вконтакте также часто пишет "Вы попытались загрузить более одной однотипной страницы в секунду. Вернитесь назад и повторите попытку.", только с 20-30 раза всё нормально.
Логи прикреплены.
11.11.2011, 20:44
Info_bot

Уважаемый(ая) [B]The_wArz[/B], спасибо за обращение на наш форум!

Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в [URL="http://virusinfo.info/pravila.html"] правилах оформления запроса о помощи[/URL].

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].
12.11.2011, 06:55
The_wArz

Как скоро мне ответят?
12.11.2011, 12:51
Techno

Здравствуйте!!!

- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните в АВЗ:[/URL]
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\xfnlgcb.dll','');
DeleteFile('C:\WINDOWS\system32\xfnlgcb.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]

[COLOR="#FF0000"]Компьютер перезагрузится[/COLOR]

[B]После перезагрузки:[/B]
- Выполните в АВЗ:
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
Файл [B]quarantine.zip[/B] из папки AVZ загрузите по ссылке "[COLOR="Red"][B]Прислать запрошенный карантин[/B][/COLOR]" вверху темы.

- Повторите логи.

Что с проблемой?
12.11.2011, 16:05
The_wArz

Проблема решена, спасибо!

[size="1"][color="#666686"][B][I]Добавлено через 15 минут[/I][/B][/color][/size]

А нет, теперь за этой проблемой пришла другая.Сейчас у меня вылез "синий экран смерти"
12.11.2011, 16:57
Techno

Где?
[quote="Techno;840794"]- Повторите логи.[/quote]
12.11.2011, 22:55
The_wArz

Вложений: 2

Вот логи.
Ах да, забыл добавить : вылезает синий экран смерти при использовании "Поиска"
12.11.2011, 23:04
Techno

- [URL="http://virusinfo.info/showthread.php?t=4491"]Пофиксите в HijackThis:[/URL]
[CODE]O20 - AppInit_DLLs: C:\WINDOWS\system32\xfnlgcb.dll[/CODE]
[URL="http://virusinfo.info/showthread.php?t=53070"][B]Сделайте лог полного сканирования MBAM[/B][/URL].
13.11.2011, 14:51
The_wArz

Вложений: 1

Сделано.
13.11.2011, 15:19
Techno

[URL="http://virusinfo.info/showthread.php?t=53070&p=493584&viewfull=1#post493584"]Удалите в MBAM[/URL] все, [B]кроме[/B]:
[CODE]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

c:\documents and settings\Admin\рабочий стол\fvcheat\FvCheat.exe (Spyware.Banker) -> No action taken.
c:\program files\total commander\Plugins\arc\Default.sfx (Malware.Packer.Gen) -> No action taken.
c:\program files\total commander\Utilites\SFX Tool\Upack.exe (Malware.Packer.Gen) -> No action taken.

d:\Install\adobe photoshop cs3 extended rus\Keygen\photoshop.cs3.extended-activate.exe (Trojan.Downloader) -> No action taken.
d:\Install\adobe photoshop cs3 extended rus\Keygen\photoshop.cs3.extended-serial.exe (RiskWare.Tool.HCK) -> No action taken.
d:\php devel studio 2.0 beta\soulengine.exe.small (Trojan.Agent) -> No action taken.
d:\Valve\cstrike\kzH.exe (RiskWare.Tool.CK) -> No action taken.[/CODE]
13.11.2011, 16:48
The_wArz

Как мне удалить всё это, если я перезагрузил компьютер?Полное сканирование идёт около 2-2.5 часов.
13.11.2011, 17:19
Techno

- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните в АВЗ:[/URL]
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
ClearQuarantine;
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\29\4047615d-27ae77ea','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\21\6e757895-4bdeb2a1','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\32\601a9da0-163a9f96','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\37\2ec9a165-2f594762','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\42\1e19526a-64c5c9f6','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\46\3f698aae-1e9e1d89','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\46\7684872e-1e7096f5','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\51\5851b0b3-584e29c3','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\53\1d5df875-5a25ae33','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\59\498faffb-101d9d34','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\6\3d538ec6-271a26a4','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\60\7f71fbfc-4fd4d0e9','');
QuarantineFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\9\7d22c7c9-41f21cf8','');
QuarantineFile('c:\documents and settings\Admin\local settings\Temp\0.7667566897451271gtye.exe','');
QuarantineFile('c:\documents and settings\Admin\local settings\Temp\1FA0.tmp','');
QuarantineFile('c:\documents and settings\Admin\local settings\Temp\jar_cache666488659157561122.tmp','');
QuarantineFile('c:\documents and settings\Admin\local settings\Temp\etf8g6jgggi7j0irf.tmp','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP26\A0082318.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP26\A0082319.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP13\A0006027.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP17\A0007007.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP19\A0009046.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP19\A0009047.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023044.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023045.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023046.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034055.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034056.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034057.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0038296.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0038297.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0049270.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056267.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056268.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056269.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056271.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056272.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056274.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0084319.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0084321.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087324.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087320.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087321.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087325.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP30\A0113319.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP35\A0129336.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP38\A0150421.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP39\A0173777.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP40\A0182477.exe','');
QuarantineFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP40\A0183677.exe','');
QuarantineFile('c:\documents and settings\Admin\local settings\Temp\.exe','');
QuarantineFile('c:\documents and settings\admin\application data\igfxtray.dat','');
QuarantineFile('c:\WINDOWS\system32\ieunitdrf.inf','');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\29\4047615d-27ae77ea');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\21\6e757895-4bdeb2a1');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\32\601a9da0-163a9f96');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\37\2ec9a165-2f594762');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\42\1e19526a-64c5c9f6');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\46\3f698aae-1e9e1d89');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\46\7684872e-1e7096f5');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\51\5851b0b3-584e29c3');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\53\1d5df875-5a25ae33');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\59\498faffb-101d9d34');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\6\3d538ec6-271a26a4');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\60\7f71fbfc-4fd4d0e9');
DeleteFile('c:\documents and settings\Admin\application data\Sun\Java\deployment\cache\6.0\9\7d22c7c9-41f21cf8');
DeleteFile('c:\documents and settings\Admin\local settings\Temp\0.7667566897451271gtye.exe');
DeleteFile('c:\documents and settings\Admin\local settings\Temp\1FA0.tmp');
DeleteFile('c:\documents and settings\Admin\local settings\Temp\jar_cache666488659157561122.tmp');
DeleteFile('c:\documents and settings\Admin\local settings\Temp\etf8g6jgggi7j0irf.tmp');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP26\A0082318.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP26\A0082319.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP13\A0006027.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP17\A0007007.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP19\A0009046.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP19\A0009047.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023044.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023045.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP20\A0023046.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034055.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034056.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP23\A0034057.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0038296.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0038297.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0049270.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056267.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056268.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056269.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056271.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056272.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP25\A0056274.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0084319.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0084321.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087324.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087320.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087321.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP27\A0087325.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP30\A0113319.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP35\A0129336.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP38\A0150421.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP39\A0173777.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP40\A0182477.exe');
DeleteFile('c:\system volume information\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\RP40\A0183677.exe');
DeleteFile('c:\documents and settings\Admin\local settings\Temp\.exe');
DeleteFile('c:\documents and settings\admin\application data\igfxtray.dat');
DeleteFile('c:\WINDOWS\system32\ieunitdrf.inf');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]

[COLOR="#FF0000"]Компьютер перезагрузится[/COLOR]

[B]После перезагрузки:[/B]
- Выполните в АВЗ:
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
Файл [B]quarantine.zip[/B] из папки AVZ загрузите по ссылке "[COLOR="Red"][B]Прислать запрошенный карантин[/B][/COLOR]" вверху темы.

Что с проблемой?
13.11.2011, 17:34
The_wArz

Карантин прислал, проблема решена.Ещё раз спасибо!
14.11.2011, 17:34
CyberHelper

Итог лечения

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]2[/B][*]Обработано файлов: [B]161[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\21\\6e757895-4bdeb2a1 - [B]Backdoor.Win32.Cakl.bfk[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Trojan.Generic.KD.352148, AVAST4: Win32:Carberp-GS [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\29\\4047615d-27ae77ea - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\32\\601a9da0-163a9f96 - [B]Trojan-Spy.Win32.Carberp.beu[/B] ( DrWEB: Trojan.Siggen3.21537, BitDefender: Trojan.Generic.KD.393166, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\37\\2ec9a165-2f594762 - [B]Trojan.Win32.Vilsel.bdik[/B] ( DrWEB: Trojan.Winlock.3784, BitDefender: Trojan.Generic.6526384, NOD32: Win32/LockScreen.AHD trojan, AVAST4: Win32:Ruskill-CU [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\42\\1e19526a-64c5c9f6 - [B]Trojan.Win32.Yakes.dir[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Variant.Kazy.38563, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\46\\3f698aae-1e9e1d89 - [B]Backdoor.Win32.Gbot.qlu[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Heur.Kelios.1, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\46\\7684872e-1e7096f5 - [B]Backdoor.Win32.Gbot.qlu[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Heur.Kelios.1, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\51\\5851b0b3-584e29c3 - [B]Trojan.Win32.Agent.hvmz[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Trojan.Generic.KD.395201, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\53\\1d5df875-5a25ae33 - [B]Backdoor.Win32.Gbot.qgx[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Trojan.Generic.KD.393079, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\59\\498faffb-101d9d34 - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\60\\7f71fbfc-4fd4d0e9 - [B]Trojan.Win32.Jorik.Carberp.fx[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.341933, AVAST4: Win32:Carberp-FU [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\6\\3d538ec6-271a26a4 - [B]Trojan.Win32.Jorik.Carberp.fx[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.341933, AVAST4: Win32:Carberp-FU [Trj] )[*] c:\\documents and settings\\admin\\application data\\sun\\java\\deployment\\cache\\6.0\\9\\7d22c7c9-41f21cf8 - [B]Backdoor.Win32.Gbot.qhh[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Heur.Kelios.1, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\documents and settings\\admin\\local settings\\temp\\etf8g6jgggi7j0irf.tmp - [B]P2P-Worm.Win32.Palevo.dtlx[/B] ( DrWEB: Win32.HLLW.Lime.1739, BitDefender: Trojan.Generic.KDV.367041, NOD32: Win32/Injector.JFP trojan, AVAST4: Win32:Tiny-AMS [Trj] )[*] c:\\documents and settings\\admin\\local settings\\temp\\jar_cache666488659157561122.tmp - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\documents and settings\\admin\\local settings\\temp\\0.7667566897451271gtye.exe - [B]Trojan.Win32.Lampa.bij[/B] ( DrWEB: Trojan.PWS.Wsgame.30644, BitDefender: Trojan.Generic.6938930, AVAST4: Win32:MalOb-HT [Cryp] )[*] c:\\documents and settings\\admin\\local settings\\temp\\1fa0.tmp - [B]Trojan-Spy.Win32.Carberp.auf[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Variant.Kazy.38563, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp13\\a0006027.exe - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp17\\a0007007.exe - [B]Trojan.Win32.Jorik.Carberp.ez[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.335499, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Carberp-FB [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp19\\a0009046.exe - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp19\\a0009047.exe - [B]Trojan.Win32.Jorik.Carberp.fd[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.336885, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Downloader-JYU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp20\\a0023044.exe - [B]Trojan.Win32.Jorik.Carberp.fi[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.338282, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Carberp-FE [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp20\\a0023045.exe - [B]Trojan.Win32.Jorik.Carberp.fi[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.338282, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:Carberp-FE [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp20\\a0023046.exe - [B]Trojan.Win32.Vilsel.bdik[/B] ( DrWEB: Trojan.Winlock.3784, BitDefender: Trojan.Generic.6526384, NOD32: Win32/LockScreen.AHD trojan, AVAST4: Win32:Ruskill-CU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp23\\a0034055.exe - [B]Trojan-Spy.Win32.Carberp.ark[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Trojan.Generic.6643455, AVAST4: Win32:Injector-ABJ [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp23\\a0034056.exe - [B]Trojan.Win32.Jorik.Carberp.fx[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.341933, AVAST4: Win32:Carberp-FU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp23\\a0034057.exe - [B]Trojan.Win32.Jorik.Carberp.fx[/B] ( DrWEB: Trojan.Carberp.12, BitDefender: Trojan.Generic.KD.341933, AVAST4: Win32:Carberp-FU [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0038296.exe - [B]Backdoor.Win32.Cakl.bfk[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Trojan.Generic.KD.352148, AVAST4: Win32:Carberp-GS [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0038297.exe - [B]Backdoor.Win32.Cakl.bfk[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Trojan.Generic.KD.352148, AVAST4: Win32:Carberp-GS [Trj] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0049270.exe - [B]Trojan-Spy.Win32.Zbot.cdum[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38170, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0056269.exe - [B]Trojan-Spy.Win32.Zbot.cdum[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38170, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0056271.exe - [B]Trojan.Win32.Pakes.qff[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38170, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0056272.exe - [B]Trojan.Win32.Pakes.qff[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38170, NOD32: Win32/TrojanDownloader.Carberp.AD trojan, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp25\\a0056274.exe - [B]Trojan.Win32.VkHost.tjf[/B] ( DrWEB: Trojan.PWS.SpySweep.52, BitDefender: Gen:Variant.Kazy.36439, AVAST4: Win32:MalOb-IC [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp27\\a0087320.exe - [B]Trojan-Spy.Win32.Carberp.asz[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Trojan.Generic.KDV.361916, AVAST4: Win32:MalOb-HX [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp27\\a0087321.exe - [B]Trojan-Spy.Win32.Carberp.att[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38563, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp27\\a0087324.exe - [B]Trojan-Spy.Win32.Carberp.att[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38563, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp27\\a0087325.exe - [B]Trojan-Spy.Win32.Carberp.att[/B] ( DrWEB: Trojan.Carberp.15, BitDefender: Gen:Variant.Kazy.38563, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp35\\a0129336.exe - [B]Backdoor.Win32.Gbot.pmi[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Variant.Kazy.39888, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp38\\a0150421.exe - [B]Trojan.Win32.Genome.xkzx[/B] ( DrWEB: Trojan.Click2.25064, BitDefender: Trojan.Generic.KD.373827 )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp39\\a0173777.exe - [B]Trojan-PSW.PHP.AccPhish.eu[/B] ( DrWEB: Trojan.PWS.Steam.271 )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp40\\a0182477.exe - [B]not-a-virus:RiskTool.Win32.VKTools.v[/B] ( DrWEB: Tool.VkCheat.16, BitDefender: Trojan.Generic.KD.378170, NOD32: Win32/HackTool.VkCheat.A trojan )[*] c:\\system volume information\\_restore{7da07078-fef4-41d6-aa13-15b6e0cfa6ad}\\rp40\\a0183677.exe - [B]Backdoor.Win32.Gbot.qhh[/B] ( DrWEB: Trojan.Carberp.10, BitDefender: Gen:Heur.Kelios.1, NOD32: Win32/TrojanDownloader.Carberp.W trojan, AVAST4: Win32:MalOb-HN [Cryp] )[*] c:\\windows\\system32\\xfnlgcb.dll - [B]Trojan-Ransom.Win32.Cidox.aeu[/B] ( DrWEB: Trojan.Mayachok.550, BitDefender: Trojan.Generic.6858468, AVAST4: Win32:MalOb-IL [Cryp] )[/LIST][/LIST]
Рекомендации:
[LIST=1][*]Обнаружены троянские программы класса Trojan-PSW/Trojan-Spy - настоятельно рекомендуется поменять все пароли ![/LIST]