Пойманы в разделе Помогите, отчет за период 13.10.2011 - 14.10.2011

[CyberHelper]

• Backdoor.Win32.Buterat.cvl -> c:\documents and settings\гомункул\local settings\temp\ctfmon.exe ( DrWEB: BackDoor.BlackEnergy.7, BitDefender: Trojan.Generic.KDV.378331 )
• Backdoor.Win32.Buterat.cvl -> g:\docume~1\c23e~1\locals~1\temp\ctfmon.exe ( DrWEB: BackDoor.BlackEnergy.7, BitDefender: Trojan.Generic.KDV.378331 )
• Backdoor.Win32.Buterat.cvm -> g:\windows\system32\68.scr ( DrWEB: BackDoor.IRC.Bot.192, BitDefender: Trojan.Generic.KDV.377389 )
• Backdoor.Win32.Floder.ect -> g:\windows\system32\bsysmgr.exe ( DrWEB: Trojan.Inject.34179, BitDefender: Trojan.Generic.KD.371639, AVAST4: Win32:Kolab-MX [Trj] )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\847b.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\9713.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\1f56.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\d85b.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\e2f7.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\d0d6.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\28d8.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\5b6b.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\64ed.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\466.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\17e8.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\6d57.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\e08.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\8e1f.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\8e6b.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\9689.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\1038.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\203f.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\ce3d.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\8400.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.6719862 )
• Backdoor.Win32.IRCBot.zht -> c:\users\настя\appdata\roaming\f114.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377349 )
• Backdoor.Win32.IRCBot.zlv -> g:\windows\jodrive32.exe ( DrWEB: BackDoor.IRC.Bot.166 )
• Backdoor.Win32.IRCBot.zlw -> c:\recycler\s-1-5-21-0243556031-888888379-781863308-1413\syitm.exe ( DrWEB: BackDoor.IRC.Bot.166 )
• Backdoor.Win32.IRCBot.zlw -> g:\windows\jxdrive32.exe ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.6723424 )
• HEUR:Trojan.Win32.Generic -> g:\documents and settings\пионер\application data\add-on32.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.377295, AVAST4: Win32:Kolab-MX [Trj] )
• Packed.Win32.TDSS.c -> g:\windows\system32\dadv2mgr.exe ( DrWEB: Trojan.Spambot.10409, BitDefender: Trojan.Generic.KDV.353096, AVAST4: Win32:Dropper-gen [Drp] )
• Packed.Win32.TDSS.c -> g:\documents and settings\пионер\application data\dadvmgr32.exe ( DrWEB: Trojan.Spambot.10409, BitDefender: Trojan.Generic.KDV.353096, AVAST4: Win32:Dropper-gen [Drp] )
• Trojan-Downloader.Win32.Agent.tgzg -> g:\windows\system32\c9mgr.exe ( DrWEB: BackDoor.IRC.Bot.896, BitDefender: Trojan.Generic.6703089, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\f5c.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\31fa.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> g:\windows\system32\37.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\2942.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> g:\windows\system32\82.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\192c.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> g:\windows\aadrive32.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\819e.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> g:\windows\system32\75.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\8a94.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\1d41.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\2158.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\2750.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\3989.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\9e34.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\users\настя\appdata\roaming\3007.tmp ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> c:\recycler\s-1-5-21-0243556031-888888379-781863308-1830\zaberg.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Downloader.Win32.Injecter.gxy -> g:\windows\system32\77.exe ( DrWEB: BackDoor.Siggen.637, BitDefender: Trojan.Generic.KDV.377290 )
• Trojan-Dropper.Win32.Agent.fylw -> c:\users\настя\appdata\roaming\94e2.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Trojan-Dropper.Win32.Agent.fylw -> c:\users\настя\appdata\roaming\82e6.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Trojan-Dropper.Win32.Agent.fylw -> c:\users\настя\appdata\roaming\d895.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Trojan.Generic.KDV.377423 )
• Trojan-Dropper.Win32.Agent.fylw -> c:\users\настя\appdata\roaming\cf42.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Trojan-Dropper.Win32.Agent.fylw -> c:\users\настя\appdata\roaming\c4b6.tmp ( DrWEB: Win32.HLLW.Autoruner.17766, BitDefender: Gen:Variant.Graftor.1496 )
• Trojan-Dropper.Win32.Agent.fzfu -> c:\windows\aadrive32.exe ( DrWEB: BackDoor.IRC.Bot.166 )
• Trojan-Dropper.Win32.Agent.fzfu -> c:\recycler\s-1-5-21-0243556031-888888379-781863308-1413\syitm.exe ( DrWEB: BackDoor.IRC.Bot.166 )
• Trojan-Spy.Win32.Carberp.ayr -> c:\documents and settings\111\главное меню\программы\автозагрузка\zl2bz92eh.exe
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\f450.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583 )
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\8259.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583 )
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\8b40.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583, AVAST4: Win32:Crypt-KOR [Trj] )
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\e215.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583 )
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\eb79.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583, AVAST4: Win32:Crypt-KOR [Trj] )
• Trojan.Win32.Inject.blqu -> c:\users\настя\appdata\roaming\92fe.tmp ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KDV.376583 )
• Trojan.Win32.Jorik.Tedroo.bh -> c:\users\настя\appdata\roaming\6e2.tmp ( DrWEB: Trojan.Spambot.10897, BitDefender: Trojan.Generic.KDV.377166, AVAST4: Win32:Crypt-KPC [Trj] )
• Trojan.Win32.Jorik.Tedroo.bh -> c:\users\настя\appdata\roaming\1515.tmp ( DrWEB: Trojan.Spambot.10897, BitDefender: Trojan.Generic.KDV.377166, AVAST4: Win32:Crypt-KPC [Trj] )
• Trojan.Win32.Jorik.Tedroo.bh -> c:\users\настя\appdata\roaming\7992.tmp ( DrWEB: Trojan.Spambot.10897, BitDefender: Trojan.Generic.KDV.377166, AVAST4: Win32:Crypt-KPC [Trj] )
• Trojan.Win32.Jorik.Tedroo.bh -> c:\users\настя\appdata\roaming\21a3.tmp ( DrWEB: Trojan.Spambot.10897, BitDefender: Trojan.Generic.KDV.377166, AVAST4: Win32:Crypt-KPC [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\53.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\43.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> c:\recycler\r-1-5-21-1482476501-1644491937-682003330-1013\ecleaner.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\74.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\81.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\36.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\25.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\45.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpa -> g:\windows\system32\44.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.376981, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihpb -> g:\documents and settings\пионер\application data\pcwswh.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.377295, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Menti.ihvi -> g:\documents and settings\пионер\application data\vewswn.exe ( DrWEB: BackDoor.Ddoser.131, BitDefender: Trojan.Generic.KDV.377295, AVAST4: Win32:Kolab-MX [Trj] )
• Trojan.Win32.Pincav.bnqq -> g:\windows\system32\34.exe ( DrWEB: BackDoor.Ddoser.131 )
• Trojan.Win32.Pincav.bnsw -> c:\recycler\r-1-5-21-1482476501-1644491937-682003330-1013\ecleaner.exe ( DrWEB: BackDoor.Ddoser.131 )
• Trojan.Win32.Pincav.bnsw -> c:\windows\system32\16.exe ( DrWEB: BackDoor.Ddoser.131 )
• Trojan.Win32.Scar.ewbt -> c:\documents and settings\гомункул\application data\bphahb.exe ( DrWEB: BackDoor.Ddoser.131 )
• Trojan.Win32.Yakes.grs -> c:\users\настя\appdata\local\temp\ecbe.tmp.exe ( DrWEB: BackDoor.BlackEnergy.4, BitDefender: Trojan.Generic.KD.375110 )