Пойманы в разделе Помогите, отчет за период 04.12.2011 - 05.12.2011

[CyberHelper]

• Backdoor.Win32.Bredolab.tky -> \виру\виру\автозагрузка.rar ( DrWEB: archive: Trojan.DownLoader5.21181, BitDefender: Gen:Variant.Kazy.46739 )
• Backdoor.Win32.Gbot.qui -> c:\documents and settings\ксюша\главное меню\программы\автозагрузка\6vtgtfkeorc.exe ( DrWEB: Trojan.Carberp.29, BitDefender: Gen:Variant.Kazy.47127 )
• Backdoor.Win32.Shiz.aezw -> c:\windows\apppatch\cxwwhx.exe
• HEUR:Trojan.Win32.Generic -> c:\windows\system32\hhmztjc.dll ( DrWEB: Trojan.Mayachok.4, BitDefender: Trojan.Generic.6852279, AVAST4: Win32:Malware-gen )
• HEUR:Trojan.Win32.Generic -> c:\users\администратор\start menu\programs\startup\taskmgrsx.exe ( DrWEB: Tool.BtcMine.8, BitDefender: Gen:Variant.Zusy.417 )
• not-a-virus:HEUR:RiskTool.Win32.BitCoinMiner.gen -> c:\users\836d~1\appdata\local\temp\x30811.exe ( DrWEB: Tool.BtcMine.8, BitDefender: Trojan.Generic.6942060 )
• not-a-virus:PSWTool.Win32.ProductKey.bv -> c:\windows\system32\cpldapu\produkey.exe ( DrWEB: Tool.PassSteel.578 )
• not-a-virus:RemoteAdmin.Win32.RAdmin.20 -> c:\windows\system\svchost.exe ( DrWEB: Program.RemoteAdmin, BitDefender: Trojan.Generic.5484328 )
• Trojan-Downloader.Win32.VB.aoir -> c:\users\администратор\appdata\roaming\regsrv64.ex e ( BitDefender: Gen:Variant.Graftor.5877 )
• Trojan-Dropper.Win32.Aspxor.jf -> c:\documents and settings\алексей\application data\netprotocol.exe ( AVAST4: Win32:Dropper-gen [Drp] )
• Trojan-Ransom.Win32.Cidox.alz -> c:\windows\system32\lhfverd.dll ( AVAST4: Win32:Cidox-N [Trj] )
• Trojan-Ransom.Win32.Cidox.amu -> c:\windows\system32\abdoimc.dll
• Trojan-Ransom.Win32.Cidox.amw -> c:\windows\system32\zkjbbra.dll ( DrWEB: Trojan.Mayachok.1, AVAST4: Win32:Kryptik-FXZ [Trj] )
• Trojan-Ransom.Win32.Cidox.amw -> c:\windows\system32\uasfjwb.dll
• Trojan-Ransom.Win32.Cidox.amw -> c:\windows\system32\dfspurc.dll ( DrWEB: Trojan.Mayachok.1, AVAST4: Win32:Kryptik-FXZ [Trj] )
• Trojan-Ransom.Win32.Cidox.amw -> c:\windows\system32\dypnfea.dll ( AVAST4: Win32:Cidox-N [Trj] )
• Trojan.Win32.Agent.garm -> c:\windows\system32\svcnet32.dll ( DrWEB: Trojan.Disabler.61, BitDefender: Trojan.Generic.5175606, NOD32: Win32/TrojanDownloader.Agent.QKR trojan, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Diple.djzk -> c:\programdata\qrnluidzjd.dll ( DrWEB: Trojan.Siggen3.30324, BitDefender: Gen:Variant.Kazy.46645, AVAST4: Win32:Malware-gen )
• Trojan.Win32.Diple.djzk -> c:\documents and settings\all users\application data\gpsiryrl.dll ( DrWEB: Trojan.Siggen3.30324, BitDefender: Gen:Variant.Kazy.46645, AVAST4: Win32:Malware-gen )
• Trojan.Win32.FakeAv.iyue -> c:\users\администратор\appdata\roaming\jkjkjt.exe ( DrWEB: Tool.BtcMine.8, BitDefender: Worm.Generic.355996, AVAST4: Win32:Dropper-gen [Drp] )
• Trojan.Win32.Scar.bzam -> c:\documents and settings\all users\application data\msuwarn\slgssrv.exe ( DrWEB: Trojan.MulDrop1.12161, BitDefender: Gen:Variant.Rimecud.2, AVAST4: Win32:Malware-gen )
• Virus.Win32.Sality.u -> c:\windows\shellnew\elnorb.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\application data\microsoft\windows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\roaming\microsoft\w indows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\application data\microsoft\windows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\application data\microsoft\windows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\главное меню\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\appdata\roaming\microsoft\windows \start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\roaming\microsoft\windows \templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\local\winlogon.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\главное меню\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\appdata\roaming\microsoft\w indows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\шаблоны\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\главное меню\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\windows\system32\config\systemprofile\appdata\r oaming\microsoft\windows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\windows\system32\config\systemprofile\appdata\l ocal\smss.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\roaming\microsoft\w indows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\local\winlogon.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\application data\microsoft\windows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\шаблоны\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\главное меню\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\appdata\roaming\microsoft\w indows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\application data\microsoft\windows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\шаблоны\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\roaming\microsoft\w indows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\главное меню\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\application data\microsoft\windows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\application data\microsoft\windows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\roaming\microsoft\windows \start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\application data\microsoft\windows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\appdata\roaming\microsoft\w indows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\roaming\microsoft\windows \start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\local\lsass.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\local\lsass.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\application data\microsoft\windows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\application data\microsoft\windows\start menu\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\appdata\roaming\microsoft\windows \templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\главное меню\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\local\smss.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\local\services.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\шаблоны\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\администратор\главное меню\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\application data\microsoft\windows\templates\bararontok.com ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\appdata\roaming\microsoft\windows \start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\главное меню\программы\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\documents and settings\1111111\application data\microsoft\windows\start menu\programs\startup\empty.pif ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\администратор\appdata\local\smss.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )
• Virus.Win32.Sality.u -> c:\users\1111111\appdata\local\services.exe ( DrWEB: Win32.HLLP.Sector, BitDefender: Win32.Sality.K, NOD32: Win32/Sality.NAC virus, AVAST4: Win32:Sality-O )