Пойманы в разделе Помогите, отчет за период 05.11.2009 - 06.11.2009

[LIST][*][thread=59434]Backdoor.Win32.Bredolab.atv[/thread] -> c:\documents and settings\lkjhg\главное меню\программы\автозагрузка\isqsys32.exe ( DrWEB: Trojan.Botnetlog.11, BitDefender: Trojan.Downloader.Bredolab.AM, AVAST4: Win32:Xbuk [Trj] )[*][thread=59374]Backdoor.Win32.IRCBot.mxg[/thread] -> e:\windows\system32\msdrvinf.exe ( DrWEB: Trojan.PWS.Multi.34, AVAST4: Win32:Malware-gen )[*][thread=59401]Backdoor.Win32.Nepoe.na[/thread] -> c:\windows\system32\firewall.exe ( DrWEB: BackDoor.IRC.Sdbot.5190, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> e:\documents and settings\администратор\local settings\temporary internet files\content.ie5\sqjl75b7\vs8[1].exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> e:\documents and settings\администратор\local settings\temporary internet files\content.ie5\m47sh1sg\vs8[1].exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> e:\documents and settings\администратор\local settings\temp\683.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> c:\recycler\s-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221315, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> e:\documents and settings\администратор\local settings\temp\409.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> e:\documents and settings\администратор\local settings\temp\917.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59374]Backdoor.Win32.SdBot.pyq[/thread] -> c:\recycler\s-1-5-21-0243936033-3052116371-381863308-1859\ls888.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Backdoor.Generic.221158, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59433]Net-Worm.Win32.Kido.ih[/thread] -> e:\windows\temp\nodbff3.tmp ( DrWEB: Win32.HLLW.Shadow.based, BitDefender: Win32.Worm.Downadup.Gen, NOD32: Win32/Conficker.X worm, AVAST4: Win32:Confi [Wrm] )[*][thread=59355]Net-Worm.Win32.Kolab.eqc[/thread] -> c:\windows\system32\nssm.exe ( AVAST4: Win32:Malware-gen )[*][thread=59441]not-a-virus:AdWare.Win32.AdSubscribe.agj[/thread] -> c:\documents and settings\администратор\application data\cmedia\cmedia.dll ( DrWEB: Trojan.AdSubscribe.137 )[*][thread=59172]not-a-virus:Monitor.Win32.KbrdHook.a[/thread] -> c:\program files\kbrdhook\keyboard.dll ( BitDefender: Trojan.Pws.Lineage.AR, AVAST4: Win32:Trojan-gen )[*][thread=59172]not-a-virus:Monitor.Win32.KbrdHook.a[/thread] -> c:\program files\kbrdhook\plugins\pass.khp[*][thread=59478]Packed.Win32.Klone.bj[/thread] -> c:\windows\system32\csrcs.exe ( DrWEB: Win32.HLLW.Autohit.10079, BitDefender: Gen:Trojan.Heur.AutoIT.FmNfbSk!jYhO, AVAST4: Win32:Crypt-FFE [Trj] )[*][thread=59434]Packed.Win32.Krap.w[/thread] -> c:\windows\temp\_ex-08.exe ( BitDefender: Gen:Trojan.Heur.Waledac.zq0@bCi4wcpc )[*][thread=59484]Packed.Win32.Krap.w[/thread] -> c:\windows\services.exe ( AVAST4: Win32:Bredolab-AT [Trj] )[*][thread=59434]Packed.Win32.Krap.w[/thread] -> c:\windows\system32\sdra64.exe[*][thread=59374]P2P-Worm.Win32.Palevo.jpm[/thread] -> e:\windows\system32\wshost32.exe ( DrWEB: Win32.HLLW.Lime.18, BitDefender: Trojan.Patched.BI, AVAST4: Win32:Patched-JZ [Trj] )[*][thread=59273]Trojan-Downloader.Win32.Agent.nsl[/thread] -> c:\windows\system32\windata.cab ( DrWEB: Trojan.DownLoader.59496, BitDefender: Trojan.Downloader.Agent.ZIS, NOD32: Win32/Wigon trojan, AVAST4: Win32:Cutwail [Trj] )[*][thread=59417]Trojan-Downloader.Win32.FraudLoad.wvnf[/thread] -> c:\windows\system32\ltdrunsrv.dll ( DrWEB: Trojan.DownLoad.55495, AVAST4: Win32:Malware-gen )[*][thread=59401]Trojan-Downloader.Win32.Mutant.gkw[/thread] -> c:\windows\system32\restorer32_a.exe ( DrWEB: Trojan.DownLoad.41506, BitDefender: Trojan.Kobcka.IN, AVAST4: Win32:Cutwail-AC [Trj] )[*][thread=58895]Trojan-Downloader.Win32.Mutant.gkz[/thread] -> c:\windows\system32\restorer32_a.exe ( DrWEB: Trojan.DownLoad.41506, BitDefender: Trojan.Kobcka.IN, AVAST4: Win32:Cutwail-AC [Trj] )[*][thread=59385]Trojan-GameThief.Win32.Magania.carh[/thread] -> d:\yudald.bat ( DrWEB: Trojan.PWS.Wsgame.13118, BitDefender: Trojan.Generic.2521888, NOD32: Win32/PSW.OnLineGames.NNU trojan, AVAST4: Win32:Kamso [Trj] )[*][thread=59385]Trojan-GameThief.Win32.Magania.clrs[/thread] -> c:\temp\cvasds1.dll ( DrWEB: Trojan.PWS.Wsgame.13208, NOD32: Win32/PSW.OnLineGames.ODJ trojan, AVAST4: Win32:Malware-gen )[*][thread=59385]Trojan-GameThief.Win32.Magania.clrs[/thread] -> c:\temp\cvasds0.dll ( DrWEB: Trojan.PWS.Wsgame.13208, NOD32: Win32/PSW.OnLineGames.ODJ trojan, AVAST4: Win32:Malware-gen )[*][thread=59385]Trojan-GameThief.Win32.Magania.clsb[/thread] -> d:\autorun.inf ( NOD32: Win32/PSW.OnLineGames.NNU trojan )[*][thread=59385]Trojan-GameThief.Win32.Magania.clsb[/thread] -> c:\autorun.inf ( NOD32: Win32/PSW.OnLineGames.NNU trojan )[*][thread=59385]Trojan-GameThief.Win32.Magania.clsb[/thread] -> c:\1a1dndah.exe ( DrWEB: Trojan.PWS.Wsgame.12661, NOD32: Win32/PSW.OnLineGames.NNU trojan, AVAST4: Win32:Soolo [Trj] )[*][thread=59385]Trojan-GameThief.Win32.Magania.clsb[/thread] -> d:\1a1dndah.exe ( DrWEB: Trojan.PWS.Wsgame.12661, NOD32: Win32/PSW.OnLineGames.NNU trojan, AVAST4: Win32:Soolo [Trj] )[*][thread=59385]Trojan-GameThief.Win32.Magania.clsb[/thread] -> c:\temp\herss.exe ( DrWEB: Trojan.PWS.Wsgame.12661, NOD32: Win32/PSW.OnLineGames.NNU trojan, AVAST4: Win32:Soolo [Trj] )[*][thread=59435]Trojan-GameThief.Win32.OnLineGames.bmxm[/thread] -> c:\windows\system32\oqrk.pso[*][thread=59496]Trojan-Ransom.Win32.Hexzone.idv[/thread] -> c:\documents and settings\ad\application data\msmedia.dll ( DrWEB: Trojan.BrowseBan.75, BitDefender: Gen:Adware.Heur.am4@Dmz!M4i )[*][thread=59398]Trojan-Ransom.Win32.SMSer.ri[/thread] -> c:\documents and settings\svt\applic~1\ufastd~1\propetyufastmanager.exe ( DrWEB: Trojan.Winlock.425, AVAST4: Win32:Malware-gen )[*][thread=59398]Trojan-Ransom.Win32.SMSer.ri[/thread] -> c:\documents and settings\svt\applic~1\ufastd~1\propet~1.exe ( DrWEB: Trojan.Winlock.425, AVAST4: Win32:Malware-gen )[*][thread=37678]Trojan-Spy.Win32.Agent.bbjr[/thread] -> c:\temp\quarantine\bat.exe ( DrWEB: Trojan.DownLoad.51237, AVAST4: Win32:Rootkit-gen [Rtk] )[*][thread=59440]Trojan-Spy.Win32.Zbot.gen[/thread] -> c:\windows\system32\sdra64.exe ( BitDefender: Trojan.Generic.2506606 )[*][thread=59496]Trojan.Win32.BHO.abwp[/thread] -> c:\windows\system32\ngrskter.dll[*][thread=59374]Trojan.Win32.Buzus.casf[/thread] -> e:\windows\system32\umdmgr.exe ( DrWEB: BackDoor.IRC.Letmein.13, BitDefender: Trojan.Generic.2497240, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59435]Trojan.Win32.Buzus.ckcd[/thread] -> c:\windows\activate.exe ( DrWEB: Trojan.Hosts.180, BitDefender: Trojan.Generic.2616066 )[*][thread=59484]Trojan.Win32.Buzus.cleo[/thread] -> c:\windows\mslsrv32.exe ( DrWEB: BackDoor.IRC.Sdbot.5190, AVAST4: Win32:Injector-SE [Trj] )[*][thread=59435]Trojan.Win32.Buzus.clsl[/thread] -> c:\docume~1\7b5c~1\locals~1\temp\8.tmp[*][thread=59435]Trojan.Win32.Buzus.clsl[/thread] -> c:\windows\svchost.exe[*][thread=59434]Trojan.Win32.FraudPack.znu[/thread] -> c:\docume~1\alluse~1\applic~1\76461125\76461125.exe ( DrWEB: Trojan.Packed.682 )[*][thread=59385]Trojan.Win32.Inject.ldi[/thread] -> c:\windows\system32\gasretyw0.dll ( DrWEB: Trojan.PWS.Wsgame.6885, BitDefender: Trojan.PWS.OnlineGames.KCPB, NOD32: Win32/PSW.OnLineGames.NMP trojan, AVAST4: Win32:Kavos [Trj] )[*][thread=59385]Trojan.Win32.Inject.ldi[/thread] -> c:\windows\system32\kamsoft.exe ( DrWEB: Trojan.PWS.Wsgame.4983, BitDefender: Trojan.PWS.OnlineGames.KCPB, NOD32: Win32/PSW.OnLineGames.NMY trojan, AVAST4: Win32:Kavos [Trj] )[*][thread=59356]Trojan.Win32.Patched.eh[/thread] -> d:\windows\system32\sens.dll ( DrWEB: Trojan.Starter.881, BitDefender: Trojan.Patched.BD, NOD32: Win32/Patched.NAA virus, AVAST4: Win32:Patched-IE [Trj] )[*][thread=37678]Trojan.Win32.Swisyn.nvx[/thread] -> c:\temp\quarantine\l2walker.exe ( DrWEB: Trojan.DownLoad.55522, BitDefender: Dropped:Generic.Malware.Yddld.3566B601, AVAST4: Win32:Votwup [Trj] )[*][thread=37678]Trojan.Win32.VkHost.fa[/thread] -> c:\temp\quarantine\vkontakle.exe[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\pchealth\helpctr\binaries\helpctr.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\cyberlink\powerdvd\pdvdserv.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\ati technologies\ati.ace\core-static\clistart.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\opera\opera.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\alcmtr.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\soundman.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> d:\program files\emule\emule.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\vstascan\vsaccess.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\internet explorer\iexplore.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\microsoft office\office12\onenotem.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\microsoft office\office12\groovemonitor.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\adobe\reader 8.0\reader\acrord32.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\cyberlink\powerdvd\language\language.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\system32\rundll32.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\progra~1\agnitum\outpos~1\op_mon.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\program files\arsenal company\сократ персональный 4.1\spv.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\system32\ssflwbox.scr ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59502]Virus.Win32.Sality.z[/thread] -> c:\windows\system32\ctfmon.exe ( DrWEB: Win32.Sector.5, BitDefender: Win32.Sality.2.OE, NOD32: Win32/Sality.NAO virus, AVAST4: Win32:Sality )[*][thread=59374]Worm.Win32.AutoRun.azzu[/thread] -> e:\recycler\s-1-5-21-5895244299-9687726348-596259165-1146\wmfcgr.exe ( DrWEB: Trojan.Packed.471, BitDefender: MemScan:Worm.Generic.83261, AVAST4: Win32:Delf-IFY [Trj] )[*][thread=59374]Worm.Win32.AutoRun.azzu[/thread] -> e:\recycler\s-1-5-21-3611606246-7470724678-925835543-6614\wmfcgr.exe ( DrWEB: Trojan.Packed.471, BitDefender: MemScan:Worm.Generic.83261, AVAST4: Win32:Delf-IFY [Trj] )[*][thread=59402]Worm.Win32.Downloader.fb[/thread] -> c:\autorun.inf ( BitDefender: Trojan.Autorun.QI, NOD32: Win32/AutoRun.JO worm, AVAST4: VBS:Malware-gen )[*][thread=59402]Worm.Win32.Downloader.fb[/thread] -> d:\autorun.inf ( BitDefender: Trojan.Autorun.QI, NOD32: Win32/AutoRun.JO worm, AVAST4: VBS:Malware-gen )[/LIST]