win32\PSW.OnLineGames.NNU Trojan

[djstanley]

Нод регулярно выдает сообщение:
"Object:
C:\autorun.inf
Threat:
Win32\PSW.OnLineGames.NNU Trojan
Information:
cleaned by deleting - quarantined"

[V_Bond]

выполните скрипт ...

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\amvo.exe','');
 QuarantineFile('C:\WINDOWS\system32\amvo1.dll','');
 QuarantineFile('C:\f.bat','');
 QuarantineFile('C:\autorun.inf','');
 DelBHO('{4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C}');
 QuarantineFile('C:\WINDOWS\system32\ckvo0.dll','');
 QuarantineFile('C:\WINDOWS\system32\amvo0.dll','');
 DeleteFile('C:\WINDOWS\system32\amvo0.dll');
 DeleteFile('C:\WINDOWS\system32\ckvo0.dll');
 DeleteFile('C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL');
 DeleteFile('C:\autorun.inf');
 DeleteFile('C:\WINDOWS\system32\amvo1.dll');
 DeleteFile('C:\WINDOWS\system32\amvo.exe');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
BC_Activate;
RebootWindows(true);
end.

пришлите карантин согласно приложения 3 правил ...
повторите логи ...