Премини към съдържанието
Форумът в приложение

По-лесно сърфиране. Научи повече.
Kaldata.com - Форуми

Приложение на форума на цял екран с push известия, значки и други.

За да инсталирате това приложение на iOS и iPadOS
  1. Докоснете Иконата за споделяне в Safari
  2. Превъртете менюто и докоснете Добавяне към началния екран.
  3. Докоснете Добавяне в горния десен ъгъл.
За да инсталирате това приложение на Android
  1. Докоснете менюто с 3 точки (⋮) в горния десен ъгъл на браузъра.
  2. Докоснете Добавяне към началния екран или Инсталиране на приложение.
  3. Потвърдете, като докоснете Инсталиране.
Добави Kaldata.com в предпочитани източници в Google

Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

 

Win32/Ramnit.A вирус

iBonev
в Премахване на зловреден софтуер

Featured Replies

Добър вечер!

Преди броени минути ESS-то започна да поставя под карантира стотици файлове от Локален диск C:

Както си кротуваше мирно и изведнъж откачи. Направих видео, за да покажа нагледно как

изглежда картинката -> http://tinypic.com/r/24zzjfd/6. И идея си нямам какво стана, но никак не ми харесва

и се обръщам към вас.

В случай, че някакъв детайл съм пропуснал, моля кажете ми.

 

ОС WIndows 7 Ultimate x64

Редактирано от icotonev (преглед на промените)

Посети темата : http://www.kaldata.com/forums/topic/132819-%D1%81%D0%B8%D1%81%D1%82%D0%B5%D0%BC%D0%B0%D1%82%D0%B0-%D0%BC%D0%B8-%D0%B5-%D0%B8%D0%BD%D1%84%D0%B5%D0%BA%D1%82%D0%B8%D1%80%D0%B0%D0%BD%D0%B0-%D0%BA%D0%B0%D0%BA%D0%B2%D0%BE-%D0%B4%D0%B0-%D0%BF%D1%80%D0%B0%D0%B2%D1%8F-%D1%81%D0%B5%D0%B3%D0%B0/

Изпълни стъпките там, за да могат колегите да ти помогнат.

  • Автор

Здравейте!

Редактирах първоначалното заглавие на темата с името на вируса.

 

DDS.txt

DDS (Ver_2011-09-30.01) - NTFS_AMD64 Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 10.9.2 Run by Ванко at 20:03:09 on 2012-12-21 Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.3948.2142 [GMT 2:00] . AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1} SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C} SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Персональный файервол ESET *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA} . ============== Running Processes =============== . C:Windowssystem32wininit.exe C:Windowssystem32lsm.exe C:Windowssystem32svchost.exe -k DcomLaunch C:Windowssystem32nvvsvc.exe C:Windowssystem32svchost.exe -k RPCSS C:WindowsSystem32svchost.exe -k LocalServiceNetworkRestricted C:WindowsSystem32svchost.exe -k LocalSystemNetworkRestricted C:Windowssystem32svchost.exe -k netsvcs C:Windowssystem32svchost.exe -k LocalService C:Windowssystem32svchost.exe -k NetworkService C:Program FilesNVIDIA CorporationDisplaynvxdsync.exe C:Windowssystem32nvvsvc.exe C:WindowsSystem32spoolsv.exe C:Windowssystem32svchost.exe -k LocalServiceNoNetwork C:Program FilesESETESET Smart Securityx86ekrn.exe C:WindowsSysWOW64PnkBstrA.exe C:Windowssystem32svchost.exe -k imgsvc C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE C:Program FilesCommon FilesMicrosoft SharedWindows LiveWLIDSvcM.exe C:Windowssystem32SearchIndexer.exe C:Windowssystem32svchost.exe -k NetworkServiceNetworkRestricted C:Windowssystem32taskhost.exe C:Windowssystem32Dwm.exe C:WindowsExplorer.EXE C:Program FilesRealtekAudioHDARAVCpl64.exe C:Program FilesRealtekAudioHDARAVBg64.exe C:WindowsSystem32igfxtray.exe C:WindowsSystem32hkcmd.exe C:WindowsSystem32igfxpers.exe C:Program FilesElantechETDCtrl.exe C:Program FilesESETESET Smart Securityegui.exe C:Program Files (x86)DAEMON Tools LiteDTLite.exe C:Program FilesNVIDIA CorporationDisplaynvtray.exe C:Program FilesElantechETDCtrlHelper.exe C:Windowssystem32svchost.exe -k LocalServiceAndNoImpersonation C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe C:WindowsSystem32svchost.exe -k secsvcs C:Program FilesWindows Media Playerwmpnetwk.exe C:Program Files (x86)Mozilla Firefoxfirefox.exe C:Windowssystem32SearchProtocolHost.exe C:Windowssystem32SearchFilterHost.exe C:Windowssystem32taskhost.exe C:UsersВанкоDesktopdds.exe C:Windowssystem32conhost.exe C:Windowssystem32wbemwmiprvse.exe C:Windowssystem32DllHost.exe C:WindowsSystem32cscript.exe . ============== Pseudo HJT Report =============== . mWinlogon: Userinit = userinit.exe,c:program files (x86)microsoftdesktoplayer.exe BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll BHO: Java Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program Files (x86)Javajre7binssv.dll BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program Files (x86)Common FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll BHO: Java Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program Files (x86)Javajre7binjp2ssv.dll uRun: [DAEMON Tools Lite] "C:Program Files (x86)DAEMON Tools LiteDTLite.exe" -autorun uRun: [skype] "C:Program Files (x86)SkypePhoneSkype.exe" /minimized /regrun mPolicies-Explorer: NoActiveDesktop = dword:1 mPolicies-Explorer: NoActiveDesktopChanges = dword:1 mPolicies-System: ConsentPromptBehaviorAdmin = dword:5 mPolicies-System: ConsentPromptBehaviorUser = dword:3 mPolicies-System: EnableUIADesktopToggle = dword:0 IE: E&xport to Microsoft Excel - C:PROGRA~2MICROS~1Office12EXCEL.EXE/3000 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:Program Files (x86)Microsoft OfficeOffice12ONBttnIE.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab TCP: Interfaces{264652D2-8481-40C1-9291-D6A1EDA02181}14E64627F69646140513531383 : DHCPNameServer = 192.168.43.1 TCP: Interfaces{264652D2-8481-40C1-9291-D6A1EDA02181}35C6166796 : DHCPNameServer = 192.168.1.1 TCP: Interfaces{264652D2-8481-40C1-9291-D6A1EDA02181}469676379737 : DHCPNameServer = 193.68.3.252 192.92.129.1 TCP: Interfaces{264652D2-8481-40C1-9291-D6A1EDA02181}75F4C464 : DHCPNameServer = 168.95.1.1 TCP: Interfaces{59F74BD0-D3DA-4418-9DC8-BF0A57A70B69} : DHCPNameServer = 192.168.0.1 Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveSystemServices.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:Program Files (x86)Common FilesSkypeSkype4COM.dll SSODL: WebCheck - <orphaned> SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:Program Files (x86)Microsoft OfficeOffice12GrooveShellExtensions.dll LSA: Security Packages =  kerberos msv1_0 schannel wdigest tspkg pku2u livessp x64-BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll x64-Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe -s x64-Run: [RtHDVBg] C:Program FilesRealtekAudioHDARAVBg64.exe /FORPCEE4 x64-Run: [igfxTray] C:WindowsSystem32igfxtray.exe x64-Run: [HotKeysCmds] C:WindowsSystem32hkcmd.exe x64-Run: [Persistence] C:WindowsSystem32igfxpers.exe x64-Run: [ETDCtrl] C:Program Files (x86)ElantechETDCtrl.exe x64-Run: [egui] "C:Program FilesESETESET Smart Securityegui.exe" /hide /waitservice x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned> x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned> x64-Notify: igfxcui - igfxdev.dll x64-SSODL: WebCheck - <orphaned> . ================= FIREFOX =================== . FF - ProfilePath - C:UsersВанкоAppDataRoamingMozillaFirefoxProfilesn5invwbo.default . ============= SERVICES / DRIVERS =============== . R0 epfwwfp;epfwwfp;C:WindowsSystem32driversepfwwfp.sys [2012-10-8 64072] R0 nvpciflt;nvpciflt;C:WindowsSystem32driversnvpciflt.sys [2012-11-27 28992] R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;C:WindowsSystem32driversdtsoftbus01.sys [2012-11-27 270912] R1 eamonm;eamonm;C:WindowsSystem32driverseamonm.sys [2012-10-8 211344] R1 EpfwLWF;Epfw NDIS LightWeight Filter;C:WindowsSystem32driversEpfwLWF.sys [2012-10-8 59440] R1 vwififlt;Virtual WiFi Filter Driver;C:WindowsSystem32driversvwififlt.sys [2009-7-14 59904] R2 ekrn;ESET Service;C:Program FilesESETESET Smart Securityx86ekrn.exe [2012-11-14 1329304] R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2012-11-27 13592] R2 nvUpdatusService;NVIDIA Update Service Daemon;C:Program Files (x86)NVIDIA CorporationNVIDIA Update Coredaemonu.exe [2012-11-27 1262400] R3 b57xdbd;Broadcom xD Picture Bus Driver Service;C:WindowsSystem32driversb57xdbd.sys [2011-1-20 67624] R3 b57xdmp;Broadcom xD Picture vstorp client drv;C:WindowsSystem32driversb57xdmp.sys [2011-1-20 19496] R3 bScsiMSa;bScsiMSa;C:WindowsSystem32driversbScsiMSa.sys [2011-5-16 51240] R3 bScsiSDa;bScsiSDa;C:WindowsSystem32driversbScsiSDa.sys [2011-5-6 86056] R3 ETD;ELAN PS/2 Port Input Device;C:WindowsSystem32driversETD.sys [2012-11-27 138024] R3 IntcDAud;Intel® Display Audio;C:WindowsSystem32driversIntcDAud.sys [2012-11-27 317440] R3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;C:WindowsSystem32driversk57nd60a.sys [2012-12-15 411688] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe [2012-7-9 104912] S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:WindowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2012-7-8 123856] S3 dmvsc;dmvsc;C:WindowsSystem32driversdmvsc.sys [2011-4-12 71168] S3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;C:WindowsSystem32driversjrdusbser.sys [2012-12-17 119680] S3 MozillaMaintenance;Mozilla Maintenance Service;C:Program Files (x86)Mozilla Maintenance Servicemaintenanceservice.exe [2012-11-27 115168] S3 pwdrvio;pwdrvio;C:WindowsSystem32pwdrvio.sys [2012-11-29 19936] S3 pwdspio;pwdspio;C:WindowsSystem32pwdspio.sys [2012-11-29 13280] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:WindowsSystem32driversrdpvideominiport.sys [2010-11-21 20992] S3 Synth3dVsc;Synth3dVsc;C:WindowsSystem32driversSynth3dVsc.sys [2011-4-12 88960] S3 terminpt;Microsoft Remote Desktop Input Driver;C:WindowsSystem32driversterminpt.sys [2011-4-12 34816] S3 TsUsbFlt;TsUsbFlt;C:WindowsSystem32driversTsUsbFlt.sys [2010-11-21 59392] S3 TsUsbGD;Remote Desktop Generic USB Device;C:WindowsSystem32driversTsUsbGD.sys [2010-11-21 31232] S3 tsusbhub;tsusbhub;C:WindowsSystem32driverstsusbhub.sys [2011-4-12 117248] S3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:WindowsSystem32driversvwifimp.sys [2009-7-14 17920] S4 SkypeUpdate;Skype Updater;C:Program Files (x86)SkypeUpdaterUpdater.exe [2012-7-13 160944] . =============== Created Last 30 ================ . 2012-12-21 18:03:11  --------  d-----w-  C:Users?рэъюAppDataLocalMicrosoft 2012-12-21 17:36:00  --------  d-----w-  C:UsersВанкоAppDataRoamingFastStone 2012-12-21 17:35:50  --------  d-----w-  C:Program Files (x86)FastStone Capture 2012-12-21 15:58:31  --------  d-----w-  C:Program Files (x86)Microsoft 2012-12-21 15:53:06  --------  d-----w-  C:UsersВанкоAppDataRoamingDMCache 2012-12-17 17:55:53  119680  ----a-w-  C:WindowsSystem32driversjrdusbser.sys 2012-12-17 17:55:51  1724416  ----a-w-  C:WindowsSysWow64Gdiplus.dll 2012-12-17 17:55:51  103424  ----a-w-  C:WindowsSysWow64MyDIT_GenClassCoInst.dll 2012-12-17 15:25:12  --------  d-----w-  C:ProgramDataAshampoo 2012-12-15 16:09:19  411688  ----a-w-  C:WindowsSystem32driversk57nd60a.sys 2012-12-12 14:51:33  --------  d-----w-  C:UsersВанкоAppDataRoamingBSplayer PRO 2012-12-12 14:51:22  --------  d-----w-  C:Program Files (x86)Webteh 2012-12-10 09:01:05  --------  d-----w-  C:UsersВанкоAppDataRoamingFoxit Software 2012-12-09 19:21:25  --------  d-----w-  C:Program Files (x86)Songr 2012-12-07 10:53:59  38912  ----a-w-  C:WindowsSystem32Spoolprtprocsx64EP0NPP01.DLL 2012-12-03 17:59:00  --------  d-----w-  C:Program Files (x86)URUSoft 2012-12-02 21:38:17  --------  d-----w-  C:Program FilesESET 2012-12-02 19:55:43  --------  d-----w-  C:UsersВанкоAppDataRoamingMedia Player Classic 2012-11-30 19:25:44  281688  ----a-w-  C:WindowsSysWow64PnkBstrB.xtr 2012-11-30 19:24:46  --------  d-----w-  C:ProgramDataOrbit 2012-11-30 18:59:28  281688  ----a-w-  C:WindowsSysWow64PnkBstrB.exe 2012-11-30 18:59:28  281688  ----a-w-  C:WindowsSysWow64PnkBstrB.ex0 2012-11-30 18:59:27  76888  ----a-w-  C:WindowsSysWow64PnkBstrA.exe 2012-11-30 14:18:40  --------  d-sh--w-  C:ProgramDataDSS 2012-11-29 14:51:42  821832  ----a-w-  C:WindowsSystem32pwNative.exe 2012-11-29 14:51:42  503808  ----a-w-  C:WindowsSysWow64MSVCP71.DLL 2012-11-29 14:51:42  348160  ----a-w-  C:WindowsSysWow64MSVCR71.DLL 2012-11-29 14:51:42  19936  ------w-  C:WindowsSystem32pwdrvio.sys 2012-11-29 14:51:42  13280  ------w-  C:WindowsSystem32pwdspio.sys 2012-11-29 14:51:42  1060864  ----a-w-  C:WindowsSysWow64MFC71.DLL 2012-11-29 14:51:42  1053184  ----a-w-  C:WindowsSysWow64mfc71u.dll 2012-11-28 18:31:00  --------  d-----w-  C:UsersВанкоAppDataRoamingNVIDIA 2012-11-27 20:25:57  --------  d-----w-  C:WindowsPanther 2012-11-27 16:23:14  --------  d-----w-  C:UsersВанкоAppDataRoamingSkype 2012-11-27 16:22:54  --------  d-----r-  C:Program Files (x86)Skype 2012-11-27 16:22:09  --------  d-----w-  C:WindowsSystem32appmgmt 2012-11-27 12:37:48  --------  d-----w-  C:WindowsPCHEALTH 2012-11-27 12:35:30  --------  d-----w-  C:Program Files (x86)Microsoft Visual Studio 8 2012-11-27 12:32:17  --------  d-----w-  C:Program FilesSA Dictionary 2010 2012-11-27 12:31:44  --------  d-----w-  C:UsersВанкоAppDataRoamingImgBurn 2012-11-27 12:25:18  --------  d-----w-  C:UsersВанкоAppDataRoamingPotPlayerMini 2012-11-27 12:24:50  --------  d-----w-  C:Program Files (x86)Daum 2012-11-27 12:13:36  --------  d-----w-  C:UsersВанкоAppDataRoamingAIMP3 2012-11-27 12:13:28  --------  d-----w-  C:Program Files (x86)AIMP3 2012-11-27 12:12:16  39936  ----a-w-  C:WindowsSysWow64huffyuv.dll 2012-11-27 12:12:16  216064  ----a-w-  C:WindowsSysWow64lagarith.dll 2012-11-27 12:12:15  650752  ----a-w-  C:WindowsSysWow64xvidcore.dll 2012-11-27 12:12:15  4102656  ----a-w-  C:WindowsSysWow64x264vfw.dll 2012-11-27 12:12:15  243200  ----a-w-  C:WindowsSysWow64xvidvfw.dll 2012-11-27 12:12:10  178688  ----a-w-  C:WindowsSysWow64unrar.dll 2012-11-27 12:12:10  151552  ----a-w-  C:WindowsSysWow64ac3acm.acm 2012-11-27 12:11:57  112640  ----a-w-  C:WindowsSysWow64ff_vfw.dll 2012-11-27 12:11:48  --------  d-----w-  C:Program Files (x86)K-Lite Codec Pack 2012-11-27 12:04:32  --------  d-----w-  C:Program Files (x86)uTorrent 2012-11-27 12:04:04  --------  d-----w-  C:UsersВанкоAppDataRoaminguTorrent 2012-11-27 12:03:04  --------  d-----w-  C:Program Files (x86)Foxit Software 2012-11-27 11:55:01  --------  d-----w-  C:UsersВанкоAppDataRoamingESET 2012-11-27 11:12:52  --------  d-----w-  C:UsersВанкоAppDataRoamingMacromedia 2012-11-27 11:12:52  --------  d-----w-  C:UsersВанкоAppDataRoamingAdobe 2012-11-27 11:11:04  --------  d-----w-  C:UsersВанкоAppDataRoamingMozilla 2012-11-27 11:10:58  --------  d-----w-  C:Program Files (x86)Mozilla Maintenance Service 2012-11-27 11:09:30  73656  ----a-w-  C:WindowsSysWow64FlashPlayerCPLApp.cpl 2012-11-27 11:09:30  697272  ----a-w-  C:WindowsSysWow64FlashPlayerApp.exe 2012-11-27 11:09:18  821736  ----a-w-  C:WindowsSysWow64npDeployJava1.dll 2012-11-27 11:09:18  746984  ----a-w-  C:WindowsSysWow64deployJava1.dll 2012-11-27 11:09:13  95208  ----a-w-  C:WindowsSysWow64WindowsAccessBridge-32.dll 2012-11-27 11:01:19  270912  ----a-w-  C:WindowsSystem32driversdtsoftbus01.sys 2012-11-27 11:01:15  --------  d-----w-  C:Program Files (x86)DAEMON Tools Lite 2012-11-27 11:00:55  --------  d-----w-  C:UsersВанкоAppDataRoamingDAEMON Tools Lite 2012-11-27 11:00:50  --------  d-----w-  C:ProgramDataDAEMON Tools Lite 2012-11-27 10:57:25  --------  d-----w-  C:Program FilesBroadcom 2012-11-27 10:56:55  --------  d-----w-  C:WindowsDownloaded Installations 2012-11-27 10:55:08  --------  d-----w-  C:WindowsSysWow64NV 2012-11-27 10:55:08  --------  d-----w-  C:WindowsSystem32NV 2012-11-27 10:52:49  --------  d-----w-  C:Program FilesNVIDIA Corporation 2012-11-27 10:52:26  --------  d-----w-  C:NVIDIA 2012-11-27 10:49:21  --------  d-----w-  C:Program FilesElantech 2012-11-27 10:48:40  138024  ----a-w-  C:WindowsSystem32driversETD.sys 2012-11-27 10:48:34  --------  d-----w-  C:UsersВанкоAppDataRoamingWinRAR 2012-11-27 10:46:50  2377216  ----a-w-  C:WindowsSystem32driversathrx.sys 2012-11-27 10:45:21  --------  d-----w-  C:Program Files (x86)Common FilesIntel Corporation 2012-11-27 10:42:12  --------  d-----w-  C:UsersВанкоAppDataRoamingIntel Corporation 2012-11-27 10:38:43  53248  ----a-r-  C:WindowsSysWow64CSVer.dll 2012-11-27 10:35:48  --------  d-----w-  C:Intel 2012-11-27 10:35:47  557848  ----a-w-  C:WindowsSystem32driversiaStor.sys 2012-11-27 10:35:44  --------  d-----w-  C:UsersВанкоAppDataRoamingInstallShield 2012-11-27 10:32:24  --------  d-----r-  C:UsersВанкоSearches 2012-11-27 10:32:15  --------  d-----w-  C:UsersВанкоAppDataRoamingIdentities 2012-11-27 10:32:11  --------  d-----r-  C:UsersВанкоContacts . ==================== Find3M  ==================== . 2012-10-08 06:21:08  64072  ----a-w-  C:WindowsSystem32driversepfwwfp.sys 2012-10-08 06:21:08  59440  ----a-w-  C:WindowsSystem32driversEpfwLWF.sys 2012-10-08 06:21:08  189208  ----a-w-  C:WindowsSystem32driversepfw.sys 2012-10-08 06:21:08  149592  ----a-w-  C:WindowsSystem32driversehdrv.sys 2012-10-08 06:21:06  211344  ----a-w-  C:WindowsSystem32driverseamonm.sys . ============= FINISH: 20:03:37,52 ===============

 

Attach.txt

. UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG. IF REQUESTED, ZIP IT UP & ATTACH IT . DDS (Ver_2011-09-30.01) . Microsoft Windows 7 Ultimate Boot Device: DeviceHarddiskVolume1 Install Date: 27.11.2012 г. 12:31:52 System Uptime: 21.12.2012 г. 19:26:33 (1 hours ago) . Motherboard: Acer |  | JE50_HR Processor: Intel® Core i5-2430M CPU @ 2.40GHz | CPU1 | 792/1333mhz . ==== Disk Partitions ========================= . C: is FIXED (NTFS) - 40 GiB total, 16,136 GiB free. D: is FIXED (NTFS) - 556 GiB total, 404,78 GiB free. E: is CDROM () F: is CDROM () . ==== Disabled Device Manager Items ============= . Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318} Description: Microsoft Virtual WiFi Miniport Adapter Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}VWIFIMP5&2CA22A33&0&01 Manufacturer: Microsoft Name: Microsoft Virtual WiFi Miniport Adapter PNP Device ID: {5D624F94-8850-40C3-A3FA-A4FD2080BAF3}VWIFIMP5&2CA22A33&0&01 Service: vwifimp . ==== System Restore Points =================== . RP26: 17.12.2012 г. 15:01:11 - Scheduled Checkpoint . ==== Installed Programs ====================== . µTorrent 2007 Microsoft Office Suite Service Pack 3 (SP3) Adobe Flash Player 11 ActiveX Adobe Flash Player 11 Plugin AIMP3 Broadcom Card Reader Driver Installer BS.Player PRO DAEMON Tools Lite Daum PotPlayer 1.5.34665 Dolby Advanced Audio v2 ESET Smart Security ETDWare PS/2-X64 8.0.6.0_WHQL Far Cry 3 FastStone Capture 7.3 Foxit Reader ImgBurn Intel® Processor Graphics Intel® Rapid Storage Technology Java 7 Update 9 Java Auto Updater K-Lite Mega Codec Pack 9.5.5 Microsoft .NET Framework 4.5 Microsoft Office Access MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office IME (Chinese (Simplified)) 2007 Microsoft Office IME (Chinese (Traditional)) 2007 Microsoft Office IME (Japanese) 2007 Microsoft Office IME (Korean) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office Office 64-bit Components 2007 Microsoft Office OneNote MUI (English) 2007 Microsoft Office Outlook MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office Proof (Arabic) 2007 Microsoft Office Proof (Basque) 2007 Microsoft Office Proof (Bulgarian) 2007 Microsoft Office Proof (Catalan) 2007 Microsoft Office Proof (Chinese (Simplified)) 2007 Microsoft Office Proof (Chinese (Traditional)) 2007 Microsoft Office Proof (Croatian) 2007 Microsoft Office Proof (Czech) 2007 Microsoft Office Proof (Danish) 2007 Microsoft Office Proof (Dutch) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (Estonian) 2007 Microsoft Office Proof (Finnish) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (Galician) 2007 Microsoft Office Proof (German) 2007 Microsoft Office Proof (Greek) 2007 Microsoft Office Proof (Gujarati) 2007 Microsoft Office Proof (Hebrew) 2007 Microsoft Office Proof (Hindi) 2007 Microsoft Office Proof (Hungarian) 2007 Microsoft Office Proof (Italian) 2007 Microsoft Office Proof (Japanese) 2007 Microsoft Office Proof (Kannada) 2007 Microsoft Office Proof (Korean) 2007 Microsoft Office Proof (Latvian) 2007 Microsoft Office Proof (Lithuanian) 2007 Microsoft Office Proof (Marathi) 2007 Microsoft Office Proof (Norwegian (Bokmal)) 2007 Microsoft Office Proof (Norwegian (Nynorsk)) 2007 Microsoft Office Proof (Polish) 2007 Microsoft Office Proof (Portuguese (Brazil)) 2007 Microsoft Office Proof (Portuguese (Portugal)) 2007 Microsoft Office Proof (Punjabi) 2007 Microsoft Office Proof (Romanian) 2007 Microsoft Office Proof (Russian) 2007 Microsoft Office Proof (Serbian (Latin)) 2007 Microsoft Office Proof (Slovak) 2007 Microsoft Office Proof (Slovenian) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proof (Swedish) 2007 Microsoft Office Proof (Tamil) 2007 Microsoft Office Proof (Telugu) 2007 Microsoft Office Proof (Thai) 2007 Microsoft Office Proof (Turkish) 2007 Microsoft Office Proof (Ukrainian) 2007 Microsoft Office Proof (Urdu) 2007 Microsoft Office Proofing (English) 2007 Microsoft Office Proofing Kit 2007 Microsoft Office Proofing Tools Kit 2007 Microsoft Office ProofMUI (English) 2007 Microsoft Office Publisher MUI (English) 2007 Microsoft Office Shared 64-bit MUI (English) 2007 Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 Mozilla Firefox 17.0.1 (x86 en-US) Mozilla Maintenance Service NVIDIA Control Panel 301.42 NVIDIA Graphics Driver 301.42 NVIDIA Install Application NVIDIA Optimus 1.8.15 NVIDIA PhysX NVIDIA PhysX System Software 9.12.0213 NVIDIA Update Components PunkBuster Services Realtek High Definition Audio Driver Skype™ 5.10 Songr Subtitle Workshop 2.51 Uplay Windows Live ID Sign-in Assistant WinRAR 4.20 (64-bit) . ==== Event Viewer Messages From Past Week ======== . 21.12.2012 г. 08:44:53, Error: Service Control Manager [7034]  - The DeviceManager service terminated unexpectedly.  It has done this 1 time(s). 19.12.2012 г. 13:28:02, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk1DR2. 18.12.2012 г. 15:51:28, Error: Schannel [36888]  - The following fatal alert was generated: 10. The internal error state is 10. 18.12.2012 г. 15:51:28, Error: Schannel [36888]  - The following fatal alert was generated: 10. The internal error state is 10. 17.12.2012 г. 19:56:29, Error: Service Control Manager [7030]  - The DeviceManager service is marked as an interactive service.  However, the system is configured to not allow interactive services.  This service may not function properly. 17.12.2012 г. 14:56:40, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. 16.12.2012 г. 11:23:14, Error: Disk [11]  - The driver detected a controller error on DeviceHarddisk1DR1. 14.12.2012 г. 12:54:08, Error: volsnap [36]  - The shadow copies of volume C: were aborted because the shadow copy storage could not grow due to a user imposed limit. . ==== End Of File ===========================  

 

Разтревожен съм, защото на другия дял имам изключително ценна информация, която я нямам на абсолютно никакъв друг носител.

Редактирано от Иван Бонев (преглед на промените)

Надявам се да не се зачете за СПАМ, но имам един въпрос. HIPS беше ли го обучил, преди да се заразиш ? (и след това за базираш на правила режима)... Питам защото ако при такова положение си се заразил, са развалили програмата...  

Редактирано от Бай Димо (преглед на промените)

  • Автор
Надявам се да не се зачете за СПАМ, но имам един въпрос. HIPS беше ли го обучил, преди да се заразиш ? (и след това за базираш на правила режима)... Питам защото ако при такова положение си се заразил, са развалили програмата...  

Настройките за HIPS-а са ми по подразбиране, нищо не съм променял.

Здравейте..!

 

Публикувано изображение Отворете следния сайт и изтеглете RKill.exe и го запазете на вашия десктоп.

  • Стартирате програмата с двоен клик върху файла и изчакайте търпеливо.
  • След приключване на проверката ще се генерира лог файл с извършените процедури.
  • Публикувайте лог файла в следващия си пост.

 

Публикувано изображение Изтеглете ComboFix Публикувано изображение от тук и го запазете на десктопа си.

  • Изключете вашата антивирусна и антишпионска програма, обикновено това става чрез натискане на десния бутон на мишката върху иконата на програма в системния трей.

Бележка: Ако не можете я спрете или не сте сигурни коя програма да изключите, моля прегледайте информацията от този линк: How to Disable your Security Programs

 

Публикувано изображение

  • Стартирайте Combo-Fix.com Публикувано изображение и следвайте инструкциите.

Бележка: ComboFix ще се стартира без инсталирана Recovery Console.

  • Като част от неговата работа, ComboFix ще провери дали Microsoft Windows Recovery Console е инсталирана. Предвид бързо развиващия се зловреден софтуер е силно препоръчително да бъде инсталирана преди премахването на зловредния софтуер. Това ще Ви позволи да влезете в специален recovery/repair режим, който ще ни позволи по-лесно да решите проблем, който би могъл да възникне при премахване на зловредния софтуер.
  • Следвайте инструкциите, за да позволите на ComboFix да изтегли и инсталира Microsoft Windows Recovery Console. В един момент ще бъдете попитани дали сте съгласни с лицензното споразумение. Необходимо е да потвърдите, че сте съгласни, за да инсталирате Microsoft Windows Recovery Console.

** Забележете: Ако Microsoft Windows Recovery Console е вече инсталирана, ComboFix ще продължи към процеса по премахване на зловредния софтуер.


Публикувано изображение

След като Microsoft Windows Recovery Console е инсталирана, използвайки ComboFix, Вие ще видите следното съобщение:

Публикувано изображение

Изберете Yes, за да продължи сканирането за зловреден софтуер.

Когато процесът приключи успешно, инструментът ще създаде лог файл. Моля, включете съдържанието на C:ComboFix.txt в следващия Ви коментар в тази тема.



 

  • Автор

Rkill.txt

Rkill 2.4.5 by Lawrence Abrams (Grinler)
http://www.bleepingcomputer.com/
Copyright 2008-2012 BleepingComputer.com
More Information about Rkill can be found at this link:
 http://www.bleepingcomputer.com/forums/topic308364.html

Program started at: 12/21/2012 09:00:38 PM in x64 mode.
Windows Version: Windows 7 Ultimate Service Pack 1

Checking for Windows services to stop:

 * No malware services found to stop.

Checking for processes to terminate:

 * No malware processes found to kill.

Checking Registry for malware related settings:

 * Explorer Policy Removed:  NoActiveDesktopChanges [HKLM]

Backup Registry file created at:
 C:UsersВанкоDesktoprkillrkill-12-21-2012-09-00-42.reg

Resetting .EXE, .COM, & .BAT associations in the Windows Registry.

Performing miscellaneous checks:

 * No issues found.

Checking Windows Service Integrity:

 * No issues found.

Searching for Missing Digital Signatures:

 * No issues found.

Checking HOSTS File:

 * No issues found.

Program finished at: 12/21/2012 09:00:59 PM
Execution time: 0 hours(s), 0 minute(s), and 21 seconds(s)

 

log.txt

ComboFix 12-12-20.02 - Ванко 12.2012 г.  21:07:29.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1251.359.1033.18.3948.2101 [GMT 2:00]
Running from: c:usersTрэъюDesktopComboFix.exe
AV: ESET Smart Security 6.0 *Disabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: Персональный файервол ESET *Disabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Disabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Created a new restore point
.
.
((((((((((((((((((((((((( Files Created from 2012-11-21 to 2012-12-21  )))))))))))))))))))))))))))))))
.
.
2012-12-21 19:14 . 2012-12-21 19:14  --------  d-----w-  c:usersDefaultAppDataLocaltemp
2012-12-21 18:03 . 2012-12-21 18:03  --------  d-----w-эъю  c:users5D4D~1
2012-12-21 17:35 . 2012-12-21 17:35  --------  d-----w-  c:program files (x86)FastStone Capture
2012-12-21 15:58 . 2012-12-21 15:58  --------  d-----w-  c:program files (x86)Microsoft
2012-12-17 19:51 . 2012-12-17 19:51  --------  d-----w-  c:windowssystem32Macromed
2012-12-17 17:55 . 2009-11-17 08:44  119680  ----a-w-  c:windowssystem32driversjrdusbser.sys
2012-12-17 17:55 . 2009-08-27 11:18  1724416  ----a-w-  c:windowsSysWow64Gdiplus.dll
2012-12-17 17:55 . 2009-08-27 11:18  103424  ----a-w-  c:windowsSysWow64MyDIT_GenClassCoInst.dll
2012-12-17 15:25 . 2012-12-17 15:25  --------  d-----w-  c:programdataAshampoo
2012-12-15 16:09 . 2010-12-01 20:36  411688  ----a-w-  c:windowssystem32driversk57nd60a.sys
2012-12-12 14:51 . 2012-12-12 14:51  --------  d-----w-  c:program files (x86)Webteh
2012-12-09 19:21 . 2012-12-09 19:21  --------  d-----w-  c:program files (x86)Songr
2012-12-07 10:53 . 2009-07-14 01:40  38912  ----a-w-  c:windowssystem32Spoolprtprocsx64EP0NPP01.DLL
2012-12-03 17:59 . 2012-12-03 17:59  --------  d-----w-  c:program files (x86)URUSoft
2012-12-02 21:38 . 2012-12-02 21:38  --------  d-----w-  c:program filesESET
2012-11-30 19:25 . 2012-12-16 13:42  281688  ----a-w-  c:windowsSysWow64PnkBstrB.xtr
2012-11-30 19:24 . 2012-11-30 19:24  --------  d-----w-  c:programdataOrbit
2012-11-30 18:59 . 2012-12-16 13:42  281688  ----a-w-  c:windowsSysWow64PnkBstrB.exe
2012-11-30 18:59 . 2012-12-14 18:31  281688  ----a-w-  c:windowsSysWow64PnkBstrB.ex0
2012-11-30 18:59 . 2012-11-30 18:59  76888  ----a-w-  c:windowsSysWow64PnkBstrA.exe
2012-11-30 18:59 . 2012-11-30 18:59  --------  d-----w-  c:program files (x86)Ubisoft
2012-11-30 14:18 . 2012-11-30 14:18  --------  d-sh--w-  c:programdataDSS
2012-11-29 14:51 . 2011-05-06 07:30  19936  ------w-  c:windowssystem32pwdrvio.sys
2012-11-29 14:51 . 2011-05-06 07:30  13280  ------w-  c:windowssystem32pwdspio.sys
2012-11-29 14:51 . 2011-05-06 07:30  821832  ----a-w-  c:windowssystem32pwNative.exe
2012-11-29 14:51 . 2007-03-21 13:39  1060864  ----a-w-  c:windowsSysWow64MFC71.DLL
2012-11-29 14:51 . 2006-07-11 12:02  1053184  ----a-w-  c:windowsSysWow64mfc71u.dll
2012-11-29 14:51 . 2006-07-11 11:35  503808  ----a-w-  c:windowsSysWow64MSVCP71.DLL
2012-11-29 14:51 . 2006-07-11 11:35  348160  ----a-w-  c:windowsSysWow64MSVCR71.DLL
2012-11-27 20:25 . 2012-11-27 10:31  --------  d-----w-  c:windowsPanther
2012-11-27 16:23 . 2012-11-27 16:23  --------  d-----w-  c:program files (x86)Common FilesSkype
2012-11-27 16:22 . 2012-11-27 16:23  --------  d-----r-  c:program files (x86)Skype
2012-11-27 16:22 . 2012-11-28 21:34  --------  d-----w-  c:windowssystem32appmgmt
2012-11-27 12:39 . 2012-11-27 12:45  --------  d-----w-  c:program files (x86)Microsoft Works
2012-11-27 12:37 . 2012-11-27 12:37  --------  d-----w-  c:windowsPCHEALTH
2012-11-27 12:35 . 2012-11-27 12:35  --------  d-----w-  c:program filesMicrosoft Office
2012-11-27 12:35 . 2012-11-27 12:35  --------  d-----w-  c:program files (x86)Microsoft Visual Studio 8
2012-11-27 12:34 . 2012-11-27 12:48  --------  d-----w-  c:programdataMicrosoft Help
2012-11-27 12:34 . 2012-11-27 12:34  --------  d-----r-  C:MSOCache
2012-11-27 12:32 . 2012-11-27 12:32  --------  d-----w-  c:program filesSA Dictionary 2010
2012-11-27 12:30 . 2012-12-21 17:36  --------  d-----w-  c:program files (x86)ImgBurn
2012-11-27 12:24 . 2012-11-27 12:24  --------  d-----w-  c:program files (x86)Daum
2012-11-27 12:20 . 2012-11-27 16:23  --------  d-----w-  c:programdataSkype
2012-11-27 12:13 . 2012-11-27 12:13  --------  d-----w-  c:program files (x86)AIMP3
2012-11-27 12:12 . 2011-12-07 18:32  216064  ----a-w-  c:windowsSysWow64lagarith.dll
2012-11-27 12:12 . 2004-05-18 19:16  39936  ----a-w-  c:windowsSysWow64huffyuv.dll
2012-11-27 12:12 . 2012-07-01 23:15  4102656  ----a-w-  c:windowsSysWow64x264vfw.dll
2012-11-27 12:12 . 2011-06-24 15:44  243200  ----a-w-  c:windowsSysWow64xvidvfw.dll
2012-11-27 12:12 . 2011-06-24 15:28  650752  ----a-w-  c:windowsSysWow64xvidcore.dll
2012-11-27 12:12 . 2012-06-09 18:21  178688  ----a-w-  c:windowsSysWow64unrar.dll
2012-11-27 12:12 . 2011-12-21 18:14  151552  ----a-w-  c:windowsSysWow64ac3acm.acm
2012-11-27 12:11 . 2012-11-25 18:00  112640  ----a-w-  c:windowsSysWow64ff_vfw.dll
2012-11-27 12:11 . 2012-11-27 12:12  --------  d-----w-  c:program files (x86)K-Lite Codec Pack
2012-11-27 12:04 . 2012-11-27 12:04  --------  d-----w-  c:program files (x86)uTorrent
2012-11-27 12:03 . 2012-11-27 12:03  --------  d-----w-  c:program files (x86)Foxit Software
2012-11-27 11:10 . 2012-12-05 07:12  --------  d-----w-  c:program files (x86)Mozilla Maintenance Service
2012-11-27 11:09 . 2012-12-17 19:52  73656  ----a-w-  c:windowsSysWow64FlashPlayerCPLApp.cpl
2012-11-27 11:09 . 2012-12-17 19:52  697272  ----a-w-  c:windowsSysWow64FlashPlayerApp.exe
2012-11-27 11:09 . 2012-11-27 11:09  --------  d-----w-  c:windowsSysWow64Macromed
2012-11-27 11:09 . 2012-11-27 11:09  --------  d-----w-  c:program files (x86)Common FilesJava
2012-11-27 11:09 . 2012-11-27 11:09  821736  ----a-w-  c:windowsSysWow64npDeployJava1.dll
2012-11-27 11:09 . 2012-11-27 11:09  746984  ----a-w-  c:windowsSysWow64deployJava1.dll
2012-11-27 11:09 . 2012-11-27 11:09  95208  ----a-w-  c:windowsSysWow64WindowsAccessBridge-32.dll
2012-11-27 11:09 . 2012-11-27 11:09  --------  d-----w-  c:program files (x86)Java
2012-11-27 11:01 . 2012-11-27 11:01  270912  ----a-w-  c:windowssystem32driversdtsoftbus01.sys
2012-11-27 11:01 . 2012-11-27 11:01  --------  d-----w-  c:program files (x86)DAEMON Tools Lite
2012-11-27 11:00 . 2012-11-27 11:00  --------  d-----w-  c:programdataDAEMON Tools Lite
2012-11-27 10:57 . 2012-12-15 16:03  --------  d-----w-  c:program filesBroadcom
2012-11-27 10:56 . 2012-11-27 10:56  --------  d-----w-  c:windowsDownloaded Installations
2012-11-27 10:55 . 2012-11-27 15:55  --------  d-----w-  c:windowsSysWow64NV
2012-11-27 10:55 . 2012-11-27 15:55  --------  d-----w-  c:windowssystem32NV
2012-11-27 10:54 . 2012-11-27 10:55  --------  d-----w-  c:programdataNVIDIA
2012-11-27 10:54 . 2012-11-27 10:54  --------  d-----w-  c:usersUpdatusUser
2012-11-27 10:52 . 2012-11-27 10:54  --------  d-----w-  c:program filesNVIDIA Corporation
2012-11-27 10:52 . 2012-11-27 10:52  --------  d-----w-  C:NVIDIA
2012-11-27 10:49 . 2012-11-27 10:49  --------  d-----w-  c:program filesElantech
2012-11-27 10:48 . 2010-11-12 12:23  138024  ----a-w-  c:windowssystem32driversETD.sys
2012-11-27 10:48 . 2012-11-27 10:48  --------  d-----w-  c:program filesWinRAR
2012-11-27 10:46 . 2010-11-09 10:26  2377216  ----a-w-  c:windowssystem32driversathrx.sys
2012-11-27 10:45 . 2012-11-27 10:45  --------  d-----w-  c:program files (x86)Common FilesIntel Corporation
2012-11-27 10:38 . 2011-04-15 08:00  53248  ----a-r-  c:windowsSysWow64CSVer.dll
2012-11-27 10:35 . 2012-11-27 10:39  --------  d-----w-  C:Intel
2012-11-27 10:35 . 2011-04-26 09:07  557848  ----a-w-  c:windowssystem32driversiaStor.sys
2012-11-27 10:35 . 2012-11-30 18:37  --------  d--h--w-  c:program files (x86)InstallShield Installation Information
2012-11-27 10:35 . 2012-11-27 10:40  --------  d-----w-  c:program files (x86)Intel
2012-11-27 10:31 . 2012-11-27 10:32  --------  d-----w-  c:usersВанко
2012-11-27 10:31 . 2012-11-27 10:31  --------  d-----w-  C:Recovery
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-10-08 06:21 . 2012-10-08 06:21  64072  ----a-w-  c:windowssystem32driversepfwwfp.sys
2012-10-08 06:21 . 2012-10-08 06:21  59440  ----a-w-  c:windowssystem32driversEpfwLWF.sys
2012-10-08 06:21 . 2012-10-08 06:21  189208  ----a-w-  c:windowssystem32driversepfw.sys
2012-10-08 06:21 . 2012-10-08 06:21  149592  ----a-w-  c:windowssystem32driversehdrv.sys
2012-10-08 06:21 . 2012-10-08 06:21  211344  ----a-w-  c:windowssystem32driverseamonm.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionRun]
"DAEMON Tools Lite"="c:program files (x86)DAEMON Tools LiteDTLite.exe" [2011-08-02 4910912]
"Skype"="c:program files (x86)SkypePhoneSkype.exe" [2012-07-13 17418928]
.
[HKEY_LOCAL_MACHINEsoftwaremicrosoftwindowscurrentversionpoliciessystem]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINEsoftwarewow6432nodemicrosoftwindows ntcurrentversionwindows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:windowsSysWOW64nvinit.dll
.
[HKEY_LOCAL_MACHINEsoftwarewow6432nodemicrosoftwindows ntcurrentversiondrivers32]
"aux1"=wdmaud.drv
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:windowsMicrosoft.NETFramework64v4.0.30319mscorsvw.exe [2012-07-08 123856]
R3 dmvsc;dmvsc;c:windowssystem32driversdmvsc.sys [2010-11-21 71168]
R3 jrdusbser;Mobile Connector Device for Legacy Serial Communication;c:windowssystem32DRIVERSjrdusbser.sys [2009-11-17 119680]
R3 pwdrvio;pwdrvio;c:windowssystem32pwdrvio.sys [2011-05-06 19936]
R3 pwdspio;pwdspio;c:windowssystem32pwdspio.sys [2011-05-06 13280]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:windowssystem32driversrdpvideominiport.sys [2010-11-21 20992]
R3 Synth3dVsc;Synth3dVsc;c:windowssystem32driverssynth3dvsc.sys [2010-11-21 88960]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:windowssystem32driversterminpt.sys [2010-11-21 34816]
R3 TsUsbFlt;TsUsbFlt;c:windowssystem32driverstsusbflt.sys [2010-11-21 59392]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:windowssystem32driversTsUsbGD.sys [2010-11-21 31232]
R3 tsusbhub;tsusbhub;c:windowssystem32driverstsusbhub.sys [2010-11-21 117248]
R3 VGPU;VGPU;c:windowssystem32driversrdvgkmd.sys [x]
R4 SkypeUpdate;Skype Updater;c:program files (x86)SkypeUpdaterUpdater.exe [2012-07-13 160944]
S0 epfwwfp;epfwwfp;c:windowssystem32DRIVERSepfwwfp.sys [2012-10-08 64072]
S0 nvpciflt;nvpciflt;c:windowssystem32DRIVERSnvpciflt.sys [2012-05-15 28992]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:windowssystem32DRIVERSdtsoftbus01.sys [2012-11-27 270912]
S1 eamonm;eamonm;c:windowssystem32DRIVERSeamonm.sys [2012-10-08 211344]
S1 ehdrv;ehdrv;c:windowssystem32DRIVERSehdrv.sys [2012-10-08 149592]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:windowssystem32DRIVERSEpfwLWF.sys [2012-10-08 59440]
S2 ekrn;ESET Service;c:program filesESETESET Smart Securityx86ekrn.exe [2012-11-14 1329304]
S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:program files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe [2011-04-29 13592]
S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:windowssystem32DRIVERSb57xdbd.sys [2011-01-20 67624]
S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:windowssystem32DRIVERSb57xdmp.sys [2011-01-20 19496]
S3 bScsiMSa;bScsiMSa;c:windowssystem32DRIVERSbScsiMSa.sys [2011-05-16 51240]
S3 bScsiSDa;bScsiSDa;c:windowssystem32DRIVERSbScsiSDa.sys [2011-05-06 86056]
S3 ETD;ELAN PS/2 Port Input Device;c:windowssystem32DRIVERSETD.sys [2010-11-12 138024]
S3 IntcDAud;Intel® Display Audio;c:windowssystem32DRIVERSIntcDAud.sys [2010-10-15 317440]
S3 k57nd60a;Broadcom NetLink Gigabit Ethernet - NDIS 6.0;c:windowssystem32DRIVERSk57nd60a.sys [2010-12-01 411688]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
"RtHDVCpl"="c:program filesRealtekAudioHDARAVCpl64.exe" [2011-03-28 11786344]
"RtHDVBg"="c:program filesRealtekAudioHDARAVBg64.exe" [2011-03-21 2207848]
"IgfxTray"="c:windowssystem32igfxtray.exe" [2011-06-21 167704]
"HotKeysCmds"="c:windowssystem32hkcmd.exe" [2011-06-21 392472]
"Persistence"="c:windowssystem32igfxpers.exe" [2011-06-21 416024]
"egui"="c:program filesESETESET Smart Securityegui.exe" [2012-11-14 6325424]
.
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows]
"AppInit_DLLs"=c:windowsSystem32nvinitx.dll
.
------- Supplementary Scan -------
.
uLocal Page = c:windowssystem32blank.htm
mLocal Page = c:windowsSysWOW64blank.htm
IE: E&xport to Microsoft Excel - c:progra~2MICROS~1Office12EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.1
FF - ProfilePath - c:usersВанкоAppDataRoamingMozillaFirefoxProfilesn5invwbo.default
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/webhp?hl=bg&tab=Xw
FF - ExtSQL: 2012-11-30 20:10; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:usersВанкоAppDataRoamingMozillaFirefoxProfilesn5invwbo.defaultextensions{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
.
- - - - ORPHANS REMOVED - - - -
.
HKLM-Run-ETDCtrl - c:program files (x86)ElantechETDCtrl.exe
.
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:Windowssystem32MacromedFlashFlashUtil64_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}LocalServer32]
@="c:Windowssystem32MacromedFlashFlashUtil64_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:WindowsSysWOW64MacromedFlashFlashUtil32_11_5_502_135_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}LocalServer32]
@="c:WindowsSysWOW64MacromedFlashFlashUtil32_11_5_502_135_ActiveX.exe"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{73C9DFA0-750D-11E1-B0C4-0800200C9A66}TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}InprocServer32]
@="c:WindowsSysWOW64MacromedFlashFlash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}ToolboxBitmap32]
@="c:WindowsSysWOW64MacromedFlashFlash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}Version]
@="1.0"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB6E-AE6D-11cf-96B8-444553540000}VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}InprocServer32]
@="c:WindowsSysWOW64MacromedFlashFlash32_11_5_502_135.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}ToolboxBitmap32]
@="c:WindowsSysWOW64MacromedFlashFlash32_11_5_502_135.ocx, 1"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}Version]
@="1.0"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeCLSID{D27CDB70-AE6D-11cf-96B8-444553540000}VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINESOFTWAREClassesWow6432NodeInterface{6AE38AE0-750C-11E1-B0C4-0800200C9A66}TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlClass{4D36E96D-E325-11CE-BFC1-08002BE10318}0000AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINESYSTEMControlSet001ControlPCWSecurity]
@Denied: (Full) (Everyone)
.
Completion time: 2012-12-21  21:17:49
ComboFix-quarantined-files.txt  2012-12-21 19:17
.
Pre-Run: 17 881 260 032 bytes free
Post-Run: 17 719 951 360 bytes free
.
- - End Of File - - DB5C8EB5A757DBBA42D4B12B94C9BC2F

 

По време на сканирането на Comodo се появи този прозорец, въпреки, че реалната защита и защитната стена на ESS-то са изключени. Аз нищо не съм цъкал и го оставих така докато сканирането на Comodo-то приключи и ми отвори log файла.

 

Друго, което ми направи впечатление е, че по време на сканирането не се изтегли и инсталира Microsoft Windows Recovery Console и съответно двете по-долни прозорчета въобще ги нямах.

Редактирано от Иван Бонев (преглед на промените)

Хубаво...! :) Win32/Ramnit заразява изпълнимите файлове на Windows с файлово разширение на "EXE", "DLL" и "SCR" Microsoft Office ("DOC", ". DOCX" или "XLS") и HTML файлове...или типичен пример за файлов инфектор...!
 
 

Изтеглете инструмента Ramnit Killer  и го запазете на вашия десктоп.

 

Публикувано изображение
 

  • Стартирайте компютъра си в Safe mode
  • Затворете всички стартирани приложения
  • Изключете интернета си.
  • Стартирайте инструмента който сканира и почиства Win32/Ramnit
  • След приключване на работата му,рестартирайте вашия компютър.

 

 

  • Автор

От линка, който сте ми предоставил за изтегляне на Ramnit KIller, се изтегля http://prikachi.com/images.php?images/283/5639283c.jpg]това.Тъй като имам съмнения, че не е това, което трябва да бъде, пиша отново.

Редактирано от Иван Бонев (преглед на промените)

  • Автор

Следвах всички инструкции, даден от вас. В рамките на 35-40 мин. ето този прозорец стоеше. Усъмних се и стартирах Task Manager-а, при което на статус на програматa пишеше, че неотговаря.

Редактирано от Иван Бонев (преглед на промените)

Нека да направим още едно сканиране за да видим колко е поразена системата ви и тогава ще преценим какво ще предприемаме:

 

Изтеглете Kaspersky Virus Removal Tool 2011 (Сканирането е продължително,бъдете търпелив)

След като стартирате инструмента, отидете до Settings (Иконата която прилича на звездичка) сложете отметка пред My Computer.

Публикувано изображение

От опциите за почистване изберете Disinfect => но не избирайте delete if disinfection fails.

Публикувано изображение

Върнете се до Automatic Scan и натиснете Start Scanning.

Публикувано изображение

Ако по време на сканирането ви попита за дадено действие изберете skip.
След като приключи проверката изберете Report (Иконата която прилича на листче) => Detected Threats изберете SAVE и запазете документа на десктопа.

Публикувано изображение

Kопирайте съдържанието му в следващия си пост.
Затворете инструмента - това ще до деинсталира автоматично.

  • Автор
От опциите за почистване изберете Disinfect => но не избирайте delete if disinfection fails.

Публикувано изображение

 

Единствено тук не разбирам какво точно се прави, за това ще го обясня, както аз го виждам и вие ми кажете дали е така.

Конкретно на този прозорец трябва да избера Инструменти (иконката приличаща на звезда), след това таба Действия от новопоявилият се прозорец с опции-Select options под който ми се отключват още 2 възможности, от които първо махам отметката на Disinfect и след това на Delete if desinfection fails. И след това отново слагам отмерките на предходните опции, като започна от последната и накрая отново се връщам на Prompt on detection опцията.

 

Въпросът ми е за какво трябва първо да махна отметките на опциите под Delete if desinfection fails при условие, че след това отново ги връщам?

От опциите за почистване изберете Disinfect => но не избирайте delete if disinfection fails.Това е .....нищо повече....!Четете описанията които сме направили на български език....!

  • Автор
От опциите за почистване изберете Disinfect => но не избирайте delete if disinfection fails.Това е .....нищо повече....!Четете описанията които сме направили на български език....!

Извинявам се, но се подведох по скрийншотовете. Сега ще го направя и ще постна съдържанието.

  • Автор

Добър вечер!

Разделих резултатите на 2 части, понеже изписва, че е много дълго съдържанието на коментара.

 

[Part1/2]

Status: Disinfected (events: 421)   22.12.2012 г. 14:56:12 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsAll UsersMicrosoftWindowsPower Efficiency DiagnosticsENERGY-REPORT.HTML  High   22.12.2012 г. 14:56:20 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsAll UsersSkypeAppsloginINDEX.HTML  High   22.12.2012 г. 14:56:47 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA612[2].htm  High   22.12.2012 г. 14:57:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6actualno-zamunda-banner[1].htm  High   22.12.2012 г. 14:57:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA0N0IF4.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA1SAG37.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA0YYHQ3.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA1UCHWQ.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA3YDOS6.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCA42QN81.htm  High   22.12.2012 г. 14:57:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAB64TE2.htm  High   22.12.2012 г. 14:57:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAF1JR8I.htm  High   22.12.2012 г. 14:57:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAF8TXEZ.htm  High   22.12.2012 г. 14:57:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAG70Q79.htm  High   22.12.2012 г. 14:57:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAGBR6KY.htm  High   22.12.2012 г. 14:57:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAH8K6LX.htm  High   22.12.2012 г. 14:57:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAJNNDGG.htm  High   22.12.2012 г. 14:57:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCANUY1KI.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAOJ7KQ8.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAON7NWJ.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAR3JKPJ.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAR7O5QB.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCARD3PQH.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAVI8QNR.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAX0Q8XJ.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6aiCAZJ1D57.htm  High   22.12.2012 г. 14:57:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6ai[1].htm  High   22.12.2012 г. 14:57:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6details[1].htm  High   22.12.2012 г. 14:57:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6browse[1].htm  High   22.12.2012 г. 14:57:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6formshow_uploader[2].htm  High   22.12.2012 г. 14:57:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6formshow_uploader[1].htm  High   22.12.2012 г. 14:57:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6formshow_uploader[3].htm  High   22.12.2012 г. 14:57:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6forums[1].htm  High   22.12.2012 г. 14:57:12 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6forums[2].htm  High   22.12.2012 г. 14:57:13 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6forums[3].htm  High   22.12.2012 г. 14:57:15 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6forums[4].htm  High   22.12.2012 г. 14:57:15 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6hub[1].html  High   22.12.2012 г. 14:57:15 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6hub[2].html  High   22.12.2012 г. 14:57:15 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6iframe[1].htm  High   22.12.2012 г. 14:57:16 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6indexrsslastrow[1].htm  High   22.12.2012 г. 14:57:16 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6login[1].htm  High   22.12.2012 г. 14:57:16 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6netcredit-120x240[1].htm  High   22.12.2012 г. 14:57:17 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6serve[3].htm  High   22.12.2012 г. 14:57:18 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6zamunda-banners[1].htm  High   22.12.2012 г. 14:57:18 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5BVZ4PZA6zamunda_net[1].htm  High   22.12.2012 г. 14:57:19 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEM12[3].htm  High   22.12.2012 г. 14:57:24 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEM90[1].htm  High   22.12.2012 г. 14:57:24 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEM7[1].htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCA01VWYH.htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCA107X35.htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCA1ING9W.htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCA295J3X.htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCA2OY6SE.htm  High   22.12.2012 г. 14:57:26 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCADQ4X0V.htm  High   22.12.2012 г. 14:57:27 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAGCQJKU.htm  High   22.12.2012 г. 14:57:27 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAMKYZ4N.htm  High   22.12.2012 г. 14:57:27 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCANEHEIH.htm  High   22.12.2012 г. 14:57:27 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAPDBAHY.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAPT2AN3.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAQSY0SD.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCARTH6MH.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAXAOHXD.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAX1HL4N.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAYNLDKW.htm  High   22.12.2012 г. 14:57:29 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAZ75E1R.htm  High   22.12.2012 г. 14:57:28 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMaiCAZVAHMU.htm  High   22.12.2012 г. 14:57:30 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMbrowse[3].htm  High   22.12.2012 г. 14:57:30 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMbrowse[2].htm  High   22.12.2012 г. 14:57:30 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMdealbox3-728x90[1].htm  High   22.12.2012 г. 14:57:31 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMformshow_uploader[2].htm  High   22.12.2012 г. 14:57:31 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMformshow_uploader[1].htm  High   22.12.2012 г. 14:57:32 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMforums[1].htm  High   22.12.2012 г. 14:57:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMgoogle_bg[1].htm  High   22.12.2012 г. 14:57:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMindexrssnew1[1].htm  High   22.12.2012 г. 14:57:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMgbg_bg[1].htm  High   22.12.2012 г. 14:57:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMlogin[2].htm  High   22.12.2012 г. 14:57:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMserve[1].htm  High   22.12.2012 г. 14:57:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5CKVYCLEMxd_arbiter[1].htm  High   22.12.2012 г. 14:57:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD71025[1].htm  High   22.12.2012 г. 14:57:37 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD716[2].htm  High   22.12.2012 г. 14:57:37 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7804[2].htm  High   22.12.2012 г. 14:57:38 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7468x60[1].htm  High   22.12.2012 г. 14:57:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7852[1].htm  High   22.12.2012 г. 14:57:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD790[1].htm  High   22.12.2012 г. 14:57:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCA2TDA9V.htm  High   22.12.2012 г. 14:57:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCA2UNDAF.htm  High   22.12.2012 г. 14:57:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCA38KYNI.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCA8H5V3F.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCA8NL3Y0.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCABLGP70.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCACJQ6Q8.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAD9MFCB.htm  High   22.12.2012 г. 14:57:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAEVCE4P.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAF7K2CS.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAFZQSBM.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAHJK26U.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAIS12RS.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAJ65DMZ.htm  High   22.12.2012 г. 14:57:41 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAM2JIL6.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCANFCQSB.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAO5PL74.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAOXZBY9.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAPJI755.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAQXXH2B.htm  High   22.12.2012 г. 14:57:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCASMXR8A.htm  High   22.12.2012 г. 14:57:43 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAU7427H.htm  High   22.12.2012 г. 14:57:43 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAUD6XL8.htm  High   22.12.2012 г. 14:57:43 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAVL3YGP.htm  High   22.12.2012 г. 14:57:43 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAWIVLAK.htm  High   22.12.2012 г. 14:57:43 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAXA2YCL.htm  High   22.12.2012 г. 14:57:44 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAXG8H2Y.htm  High   22.12.2012 г. 14:57:44 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAXOTZPS.htm  High   22.12.2012 г. 14:57:44 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7aiCAYX0REU.htm  High   22.12.2012 г. 14:57:44 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7ai[1].htm  High   22.12.2012 г. 14:57:45 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7ai[2].htm  High   22.12.2012 г. 14:57:45 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7CR2032_battery[1].htm  High   22.12.2012 г. 14:57:45 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7block[1].htm  High   22.12.2012 г. 14:57:46 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7fashion_iframe[1].htm  High   22.12.2012 г. 14:57:46 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7follow_button.1354761327[1].html  High   22.12.2012 г. 14:57:46 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7follow_button.1355514129[1].html  High   22.12.2012 г. 14:57:47 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7formshow_uploader[1].htm  High   22.12.2012 г. 14:57:47 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7formshow_uploader[2].htm  High   22.12.2012 г. 14:57:47 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7formshow_uploader[3].htm  High   22.12.2012 г. 14:57:48 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7forums[1].htm  High   22.12.2012 г. 14:57:48 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7home[1].htm  High   22.12.2012 г. 14:57:49 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7indexrss[1].htm  High   22.12.2012 г. 14:57:50 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7left-banner[2].htm  High   22.12.2012 г. 14:57:50 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7sck[2].htm  High   22.12.2012 г. 14:57:50 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7search[2].htm  High   22.12.2012 г. 14:57:51 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7upleft_special[1].htm  High   22.12.2012 г. 14:57:51 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5KOQTUWD7upright[1].htm  High   22.12.2012 г. 14:57:52 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LW12[1].htm  High   22.12.2012 г. 14:57:52 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LW12[2].htm  High   22.12.2012 г. 14:57:53 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LW12[3].htm  High   22.12.2012 г. 14:57:54 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LW728x90[1].htm  High   22.12.2012 г. 14:57:54 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWads[1].htm  High   22.12.2012 г. 14:57:54 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA0X65A4.htm  High   22.12.2012 г. 14:57:54 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA2H1AFB.htm  High   22.12.2012 г. 14:57:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA389OUA.htm  High   22.12.2012 г. 14:57:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA4JPRWL.htm  High   22.12.2012 г. 14:57:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA5LM2RA.htm  High   22.12.2012 г. 14:57:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA6FRKPF.htm  High   22.12.2012 г. 14:57:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCACLSI81.htm  High   22.12.2012 г. 14:57:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCA70WO6X.htm  High   22.12.2012 г. 14:57:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAGUDTIA.htm  High   22.12.2012 г. 14:57:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAENQ3E1.htm  High   22.12.2012 г. 14:57:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAHYR4IN.htm  High   22.12.2012 г. 14:57:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAME3Z0S.htm  High   22.12.2012 г. 14:57:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCALVVI7B.htm  High   22.12.2012 г. 14:57:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCANWCE91.htm  High   22.12.2012 г. 14:57:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAO572N6.htm  High   22.12.2012 г. 14:57:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAQ1QXC7.htm  High   22.12.2012 г. 14:57:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAQCCIGF.htm  High   22.12.2012 г. 14:57:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAQFUUER.htm  High   22.12.2012 г. 14:57:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAQRNMQW.htm  High   22.12.2012 г. 14:57:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCASJ8OSZ.htm  High   22.12.2012 г. 14:58:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAR9XQJX.htm  High   22.12.2012 г. 14:58:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAV44DDE.htm  High   22.12.2012 г. 14:58:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAY2TPNZ.htm  High   22.12.2012 г. 14:58:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWaiCAZM04YF.htm  High   22.12.2012 г. 14:58:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWai[1].htm  High   22.12.2012 г. 14:58:01 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWbanner_120x240[1].htm  High   22.12.2012 г. 14:58:01 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWblock[1].htm  High   22.12.2012 г. 14:58:02 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWbrowse[1].htm  High   22.12.2012 г. 14:58:02 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWCAVBPTWP.HTM  High   22.12.2012 г. 14:58:02 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWcenter-banner[1].htm  High   22.12.2012 г. 14:58:02 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWempty[1].htm  High   22.12.2012 г. 14:58:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWfoot-banner[1].htm  High   22.12.2012 г. 14:58:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[1].htm  High   22.12.2012 г. 14:58:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[2].htm  High   22.12.2012 г. 14:58:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[3].htm  High   22.12.2012 г. 14:58:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[5].htm  High   22.12.2012 г. 14:58:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[4].htm  High   22.12.2012 г. 14:58:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[6].htm  High   22.12.2012 г. 14:58:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[7].htm  High   22.12.2012 г. 14:58:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWformshow_uploader[8].htm  High   22.12.2012 г. 14:58:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWforums-banner[1].htm  High   22.12.2012 г. 14:58:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWforums[2].htm  High   22.12.2012 г. 14:58:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWgrabo[1].htm  High   22.12.2012 г. 14:58:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWindexrsslastrow[1].htm  High   22.12.2012 г. 14:58:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWkuhnia_ads[1].htm  High   22.12.2012 г. 14:58:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWnetcredit-728x90[1].htm  High   22.12.2012 г. 14:58:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWright-banner[2].htm  High   22.12.2012 г. 14:58:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWupleft_special[1].htm  High   22.12.2012 г. 14:58:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWxd_arbiter[1].htm  High   22.12.2012 г. 14:58:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindowsTemporary Internet FilesLowContent.IE5XKSWP4LWsearch[1].htm  High   22.12.2012 г. 14:58:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryBears.htm  High   22.12.2012 г. 14:58:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryGarden.htm  High   22.12.2012 г. 14:58:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryHand Prints.htm  High   22.12.2012 г. 14:58:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryGreen Bubbles.htm  High   22.12.2012 г. 14:58:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryPeacock.htm  High   22.12.2012 г. 14:58:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryOrange Circles.htm  High   22.12.2012 г. 14:58:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryRoses.htm  High   22.12.2012 г. 14:58:11 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryShades of Blue.htm  High   22.12.2012 г. 14:58:12 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationerySoft Blue.htm  High   22.12.2012 г. 14:58:12 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Documents and SettingsВанкоAppDataLocalMicrosoftWindows MailStationeryStars.htm  High   22.12.2012 г. 14:58:26 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Documents and SettingsВанкоAppDataLocalPunkBusterFC3pbpbag.dll  High   22.12.2012 г. 15:04:54 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:MSOCacheAll Users{90120000-0048-0409-0000-0000000FF1CE}-Cmsvcr80.dll  High   22.12.2012 г. 15:04:57 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:MSOCacheAll Users{90120000-0115-0409-0000-0000000FF1CE}-Cmsvcr80.dll  High   22.12.2012 г. 15:07:30 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:NVIDIADisplayDriver301.42WinVista_Win7_64InternationalNVI2progress.htm  High   22.12.2012 г. 15:09:45 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program FilesNVIDIA CorporationInstaller2installer.0progress.htm  High   22.12.2012 г. 15:09:58 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program FilesSA Dictionary 2010Diction.exe  High   22.12.2012 г. 15:09:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program FilesSA Dictionary 2010BgHelp.htm  High   22.12.2012 г. 15:09:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program FilesSA Dictionary 2010EngHelp.htm  High   22.12.2012 г. 15:10:14 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program FilesWinRAROrder.htm  High   22.12.2012 г. 15:10:15 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program FilesWinRARRarExt32.dll  High   22.12.2012 г. 15:10:15 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program FilesWinRARFormatsace32loader.exe  High   22.12.2012 г. 15:10:23 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)AIMP3Modulesmpcenc.exe  High   22.12.2012 г. 15:10:26 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)AIMP3Modulesaimp_libvorbis.dll  High   22.12.2012 г. 15:10:26 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)AIMP3Moduleswavpackdll.dll  High   22.12.2012 г. 15:10:27 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)AIMP3PluginsOptimFROG.dll  High   22.12.2012 г. 15:10:29 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iKernel.dll  High   22.12.2012 г. 15:10:29 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iscript.dll  High   22.12.2012 г. 15:10:30 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common FilesInstallShieldProfessionalRunTime1150Intel32iuser.dll  High   22.12.2012 г. 15:10:49 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE121033ODINFO.HTM  High   22.12.2012 г. 15:10:49 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE121033README.HTM  High   22.12.2012 г. 15:10:50 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12HTMLcontext.html  High   22.12.2012 г. 15:10:51 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeCMDDEF.DLL  High   22.12.2012 г. 15:10:52 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeCompsvcspkg.dll  High   22.12.2012 г. 15:10:52 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeATL70.DLL  High   22.12.2012 г. 15:10:53 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeCSSPKG.DLL  High   22.12.2012 г. 15:10:55 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeHTMDLGS.DLL  High   22.12.2012 г. 15:10:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeHTMED.DLL  High   22.12.2012 г. 15:10:59 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeMSENV.DLL  High   22.12.2012 г. 15:11:00 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeMSVCR70.DLL  High   22.12.2012 г. 15:11:02 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeMSVCR71.DLL  High   22.12.2012 г. 15:11:02 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeTRIDSN.DLL  High   22.12.2012 г. 15:11:02 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeVisualStudioTeamCore.dll  High   22.12.2012 г. 15:11:02 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeVSBROWSE.DLL  High   22.12.2012 г. 15:11:03 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS RuntimeVSTLBINF.DLL  High   22.12.2012 г. 15:11:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS Runtime1033EMPTY.HTM  High   22.12.2012 г. 15:11:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedOFFICE12VS Runtime1033HelpWatermark.htm  High

   

[Part2/2]

22.12.2012 г. 15:11:06 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedPROOFMSTHES3.DLL  High   22.12.2012 г. 15:11:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Common Filesmicrosoft sharedSmart Tag1033MCABOUT.HTM  High   22.12.2012 г. 15:11:09 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedTRANSLATMSB1STAR.DLL  High   22.12.2012 г. 15:11:10 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedTRANSLATWTSP61MS.DLL  High   22.12.2012 г. 15:11:10 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedTRANSLATESENMSB1ESEN.DLL  High   22.12.2012 г. 15:11:10 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedTRANSLATFRENMSB1FREN.DLL  High   22.12.2012 г. 15:11:11 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common Filesmicrosoft sharedVS7DEBUGcoloader.dll  High   22.12.2012 г. 15:11:16 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Common FilesSystemOle DBMSOLAP80.DLL  High   22.12.2012 г. 15:11:31 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerATextOut.dll  High   22.12.2012 г. 15:11:31 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerDesktopHook.dll  High   22.12.2012 г. 15:11:31 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerDaumCrashHandler.dll  High   22.12.2012 г. 15:11:32 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerMP3Lame.dll  High   22.12.2012 г. 15:11:33 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerLogManager.exe  High   22.12.2012 г. 15:11:33 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayermsvcr71.dll  High   22.12.2012 г. 15:11:34 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerOptimFROG.dll  High   22.12.2012 г. 15:11:35 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerpncrt.dll  High   22.12.2012 г. 15:11:45 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerPotIcons.dll  High   22.12.2012 г. 15:11:46 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)DaumPotPlayerqscl.dll  High   22.12.2012 г. 15:11:51 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Foxit SoftwareFoxit Readerdocusigntransfer.html  High   22.12.2012 г. 15:11:51 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Foxit SoftwareFoxit Readerdocusigntransfer1.html  High   22.12.2012 г. 15:11:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Foxit SoftwareFoxit ReaderStartindex.html  High   22.12.2012 г. 15:11:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Foxit SoftwareFoxit ReaderStartad.html  High   22.12.2012 г. 15:11:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)ImgBurnImgBurnPreview.exe  High   22.12.2012 г. 15:11:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)ImgBurnImgBurn.exe  High   22.12.2012 г. 15:12:07 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)InstallShield Installation Information{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}ISSetup.dll  High   22.12.2012 г. 15:12:19 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Javajre7Welcome.html  High   22.12.2012 г. 15:12:32 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFilterslibFLAC.dll  High   22.12.2012 г. 15:12:32 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersMACDec.dll  High   22.12.2012 г. 15:12:34 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersDCBassbass_tak.dll  High   22.12.2012 г. 15:12:53 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersvsfilter.dll  High   22.12.2012 г. 15:12:55 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersDCBassOptimFROG.dll  High   22.12.2012 г. 15:12:55 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaaliavs.dll  High   22.12.2012 г. 15:12:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaaliavi.dll  High   22.12.2012 г. 15:12:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaaliavss.dll  High   22.12.2012 г. 15:12:58 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaalidxr.dll  High   22.12.2012 г. 15:12:59 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaaligdsmux.exe  High   22.12.2012 г. 15:12:59 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaalimkx.dll  High   22.12.2012 г. 15:13:00 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaalimkzlib.dll  High   22.12.2012 г. 15:13:00 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaalimp4.dll  High   22.12.2012 г. 15:13:01 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackFiltersHaalits.dll  High   22.12.2012 г. 15:13:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq.htm  High   22.12.2012 г. 15:13:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_64bit.htm  High   22.12.2012 г. 15:13:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_configuration.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_display_issues.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_dxva.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_general.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_installation.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_mpc.htm  High   22.12.2012 г. 15:13:05 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_miscellaneous.htm  High   22.12.2012 г. 15:13:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_playback_issues.htm  High   22.12.2012 г. 15:13:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_subtitles.htm  High   22.12.2012 г. 15:13:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_thumbnails.htm  High   22.12.2012 г. 15:13:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_troubleshooting.htm  High   22.12.2012 г. 15:13:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_windows_issues.htm  High   22.12.2012 г. 15:13:07 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)K-Lite Codec PackInfofaq_wmp.htm  High   22.12.2012 г. 15:13:23 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackMedia Player Classicmediainfo.dll  High   22.12.2012 г. 15:13:41 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackMedia Player Classicmpc-hc.exe  High   22.12.2012 г. 15:13:42 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackToolsmediainfo.exe  High   22.12.2012 г. 15:13:43 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackToolsmediainfo.dll  High   22.12.2012 г. 15:13:43 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackToolsSetACL_x86.exe  High   22.12.2012 г. 15:13:43 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)K-Lite Codec PackToolsVobSubStrip.exe  High   22.12.2012 г. 15:14:23 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Microsoft OfficeOffice12EXCHCSP.DLL  High   22.12.2012 г. 15:14:24 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12INTLBAND.HTM  High   22.12.2012 г. 15:14:35 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Microsoft OfficeOffice12USP10.DLL  High   22.12.2012 г. 15:14:40 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice121033PVREADME.HTM  High   22.12.2012 г. 15:14:44 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12AccessWebCLNTWRAP.HTM  High   22.12.2012 г. 15:14:46 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)Microsoft OfficeOffice12ADDINSMSVCR71.DLL  High   22.12.2012 г. 15:14:52 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsDoNotTrust.html  High   22.12.2012 г. 15:14:52 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsBlankPage.html  High   22.12.2012 г. 15:14:52 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsBrowserUpgrade.html  High   22.12.2012 г. 15:14:53 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsHomePage.html  High   22.12.2012 г. 15:14:53 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsPreviewTemplate.html  High   22.12.2012 г. 15:14:53 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsPrintTemplate.html  High   22.12.2012 г. 15:14:53 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsVersion1Warning.htm  High   22.12.2012 г. 15:14:54 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveFormsFormsViewFrame.html  High   22.12.2012 г. 15:14:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsBlankPage.html  High   22.12.2012 г. 15:14:55 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsBrowserUpgrade.html  High   22.12.2012 г. 15:14:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsColorChart.html  High   22.12.2012 г. 15:14:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsFormTemplate.html  High   22.12.2012 г. 15:14:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsHomePage.html  High   22.12.2012 г. 15:14:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsImageTemplate.html  High   22.12.2012 г. 15:14:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsMacroTemplate.html  High   22.12.2012 г. 15:14:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsPreviewTemplate.html  High   22.12.2012 г. 15:14:57 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsPrintTemplate.html  High   22.12.2012 г. 15:14:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsVersion1Warning.htm  High   22.12.2012 г. 15:14:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsViewFrame.html  High   22.12.2012 г. 15:14:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms3FormsViewTemplate.html  High   22.12.2012 г. 15:14:58 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsColorChart.html  High   22.12.2012 г. 15:14:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsBlankPage.html  High   22.12.2012 г. 15:14:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsBrowserUpgrade.html  High   22.12.2012 г. 15:14:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsFormTemplate.html  High   22.12.2012 г. 15:14:59 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsHomePage.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsImageTemplate.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsMacroTemplate.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsPreviewTemplate.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsPrintTemplate.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsVersion1Warning.htm  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsViewFrame.html  High   22.12.2012 г. 15:15:00 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms4FormsViewTemplate.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsBrowserUpgrade.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsBlankPage.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsColorChart.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsFormTemplate.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsImageTemplate.html  High   22.12.2012 г. 15:15:03 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsMacroTemplate.html  High   22.12.2012 г. 15:15:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsPrintTemplate.html  High   22.12.2012 г. 15:15:04 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeOffice12GrooveToolDatagroove.netGrooveForms5FormsPreviewTemplate.html  High   22.12.2012 г. 15:15:08 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033DADSHIRT.HTM  High   22.12.2012 г. 15:15:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033CURRENCY.HTM  High   22.12.2012 г. 15:15:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033JUDGESCH.HTM  High   22.12.2012 г. 15:15:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033JUNGLE.HTM  High   22.12.2012 г. 15:15:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033NOTEBOOK.HTM  High   22.12.2012 г. 15:15:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033OFFISUPP.HTM  High   22.12.2012 г. 15:15:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033PAWPRINT.HTM  High   22.12.2012 г. 15:15:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033PINELUMB.HTM  High   22.12.2012 г. 15:15:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033SEAMARBL.HTM  High   22.12.2012 г. 15:15:10 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeStationery1033TECHTOOL.HTM  High   22.12.2012 г. 15:15:16 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)Microsoft OfficeTemplates12MseNewFileItemsHTMLPAGE.HTM  High   22.12.2012 г. 15:15:32 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloccs-CZ_about.html  High   22.12.2012 г. 15:15:32 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)UbisoftUbisoft Game Launcheruplay_r1_loader.dll  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloccs-CZ_welcome.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocda-DK_about.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocda-DK_welcome.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocde-DE_about.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocde-DE_welcome.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocen-US_about.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocen-US_welcome.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloces-ES_about.html  High   22.12.2012 г. 15:15:33 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloces-ES_welcome.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocfi-FI_about.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocfi-FI_welcome.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocfr-FR_about.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocfr-FR_welcome.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalochu-HU_about.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalochu-HU_welcome.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocit-IT_about.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocit-IT_welcome.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocja-JP_about.html  High   22.12.2012 г. 15:15:34 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocja-JP_welcome.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocko-KO_about.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocko-KO_welcome.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocnb-NO_about.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocnb-NO_welcome.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocnl-NL_about.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocnl-NL_welcome.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpl-PL_about.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpl-PL_welcome.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpt-BR_about.html  High   22.12.2012 г. 15:15:35 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpt-BR_welcome.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpt-PT_about.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocpt-PT_welcome.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocru-RU_welcome.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocru-RU_about.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocsv-SE_about.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdatalocsv-SE_welcome.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloczh-CN_about.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloczh-CN_welcome.html  High   22.12.2012 г. 15:15:36 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloczh-TW_about.html  High   22.12.2012 г. 15:15:37 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)UbisoftUbisoft Game Launcherdataloczh-TW_welcome.html  High   22.12.2012 г. 15:15:38 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)URUSoftSubtitle WorkshopHelpManualBG.html  High   22.12.2012 г. 15:15:38 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)URUSoftSubtitle WorkshopSubtitleWorkshop.exe  High   22.12.2012 г. 15:15:38 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)URUSoftSubtitle WorkshopHelpManual.html  High   22.12.2012 г. 15:15:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)URUSoftSubtitle WorkshopHelpManualRUS.html  High   22.12.2012 г. 15:15:39 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)URUSoftSubtitle WorkshopHelpManualSPA.html  High   22.12.2012 г. 15:15:40 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)URUSoftSubtitle WorkshopSubtitleAPISubtitleAPI.dll  High   22.12.2012 г. 15:15:40 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)WebtehBSplayerProbplay.exe  High   22.12.2012 г. 15:15:40 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)WebtehBSplayerProbsplay.exe  High   22.12.2012 г. 15:15:41 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)WebtehBSplayerProbsplayer.exe  High   22.12.2012 г. 15:15:41 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)WebtehBSplayerPrommkeybsupp.dll  High   22.12.2012 г. 15:15:42 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  C:Program Files (x86)WebtehBSplayerProdocini_files.html  High   22.12.2012 г. 15:15:46 ч.  Disinfected  virus Virus.Win32.Nimnul.a  C:Program Files (x86)WebtehBSplayerProbslibbslib.dll  High   22.12.2012 г. 15:44:44 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:GamesGTA.IV-Razor1911ВАЖНО!!!GTA IV ALL PATCHES + CRACK + XLIVE DLL FIXCrack + Xlive DLLxlive.dll  High   22.12.2012 г. 15:44:45 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:GamesGTA.IV-Razor1911ВАЖНО!!!GTA IV ALL PATCHES + CRACK + XLIVE DLL FIXCrack + Xlive DLL1911.dll  High   22.12.2012 г. 15:46:56 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)COLIOTTEHitman Absolutionfmodex.dll  High   22.12.2012 г. 15:46:59 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:GamesThe Sims 3 DeluxeThe.Sims.3.Deluxe.5.0.Rus.Eng.RePack_[R.G.Catalyst]HelpS3Repacker140.exe  High   22.12.2012 г. 15:47:24 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)COLIOTTEHitman AbsolutionPhysXCore.dll  High   22.12.2012 г. 15:48:11 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)COLIOTTEHitman AbsolutionHMA.exe  High   22.12.2012 г. 15:48:12 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)COLIOTTEHitman AbsolutionPhysXLoader.dll  High   22.12.2012 г. 15:54:45 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binubiorbitapi_r2_loader.dll  High   22.12.2012 г. 15:54:46 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binpbpbag.dll  High   22.12.2012 г. 15:54:46 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binpbpbags.dll  High   22.12.2012 г. 15:54:48 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binpbpbsv.dll  High   22.12.2012 г. 15:54:50 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binpbdllwa001383.dll  High   22.12.2012 г. 15:54:53 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:Games (Installed)UbisoftFarCry 3binpbdllws001853.dll  High   22.12.2012 г. 15:54:56 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  D:Games (Installed)UbisoftFarCry 3binpbhtmwa001383.htm  High   22.12.2012 г. 15:55:06 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  D:Games (Installed)UbisoftFarCry 3binpbhtmwc002312.htm  High   22.12.2012 г. 15:55:09 ч.  Disinfected  Trojan program Trojan-Dropper.VBS.Agent.bp  D:Games (Installed)UbisoftFarCry 3binpbhtmws001853.htm  High   22.12.2012 г. 16:07:13 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:ProgramsESETUninstaller.exe  High   22.12.2012 г. 16:07:53 ч.  Disinfected  virus Virus.Win32.Nimnul.a  D:ProgramsBS.Player.Pro.v2.63.1071.Multilingual.Incl.Keymaker-COREkeygen.exe  High   Status: Detected (events: 1)   22.12.2012 г. 15:13:44 ч.  Detected  Trojan program Packed.Win32.Krap.hm  C:Program Files (x86)MicrosoftDesktopLayer.exe  High   Status: Quarantined (events: 1)   22.12.2012 г. 15:56:15 ч.  Quarantined  Trojan program HEUR:Trojan.Win32.Generic  D:Games (Installed)UbisoftFarCry 3binFCry3+13Tr-LNG.exe  High  

Редактирано от Иван Бонев (преглед на промените)

Доста поражения е направил вируса..!Да опитаме пак с RamnitKiller..Дано този път проверката мине..!
 
Изтеглете инструмента Ramnit Killer  (изтрийте вашето копие) и го запазете на вашия десктоп.
 
Публикувано изображение
 

  • [*]Стартирайте компютъра си в
Safe mode [*]Затворете всички стартирани приложения [*]Изключете интернета си. [*]Стартирайте инструмента който сканира и почиства Win32/Ramnit [*]След приключване на работата му,рестартирайте вашия компютър.

  • Автор
Да опитаме пак с RamnitKiller..Дано този път проверката мине..!

Съжалявам да го кажа, но отново не стана. Програмата става неотговаряща.

Ок, да пробваме така:

Изтеглете Avira AntiVir Rescue System (ако се наложи използвайте друг компютър или компютъра на приятел за целта).
Сложете празен диск в оптичното устройство и стартирайте файла с двоен клик на мишката.
Изберете модела на записвачката от падащото меню и натиснете BURN CD
Публикувано изображение
Сега рестартирайте машината си и според това каква е дънната Ви платка пробвайте различни клавиши (най-често F1, F2, F12, del) за да влезнете в BIOS менюто и да направите CD-ROM-а да е първо зареждащо устройство:
http://www.hiren.info/pages/bios-boot-cdrom
Поставете записания диск на Avira Rescue CD в CD ROM-a и заредете от него.
Щом се появи това меню изберете 1:
Публикувано изображение

Ако диска не зареди, върнете се в БИОС-а и забранене флопи дисковото устройство.
Ако зареди, но имате проблеми с визуализирането на менютата изберете 3 на картинката по-нагоре и пробвайте между различните резолюции и режими.

Сега вече би трябвало да се появи това меню:
Публикувано изображение

Диска ще зареди на английски език по-подразбиране. За други езици изберете флага на съответната страна.
Ако бъдете подканени да обновите диска, съгласете се. Изисква се наличие на активна интернет връзка.

Публикувано изображение

Сега натиснете Configuration и сложете отметки на следните опции:
All files
Extended threat categories - всички отметки
Repair infected files
Rename files, if repair is not possible

Публикувано изображение

След това отидете на Virus Scanner и изберете Start Scanner

Публикувано изображение

Изчакайте да завърши проверката и запазете лог файла, натискайки бутона Save и указвайки къде да го запазите.

Публикувано изображение

За да излезнете от скенера, натиснете Shutdown и после Restart.

Публикувано изображение

Публикувайте лог файла от проверката в следващия си коментар!

  • Автор

Здравейте!

След ден и половина мъки с тези гадинки, най-накрая локализирах първоизточникат им.

Снощи не ми останаха нерви да се боря с тях по хумамен начин и накрая форматирах C:-то.

Отново си инсталирах ESS-то и сканирах, сканиране направих и с MalwareByte's... от заразените файлове

в системния диск нямаше и следа, но 2-3 файла ми бяха откри в другия дял на HDD-то, както се виждаше от

последния logg на Kaspersky Virus Removal Tool-а. Тези няколкото заразени файлове ги карантира MalwareByte's-а след рестарт.

Тези дни мисля периодично да сканирам и с двете програма, за да съм сигурен, че заразата няма да се възроди от последното

премахнатите файлове и отново да плъзне из диска ми.

 

Благодаря за отделеното време и внамание! Човек научава много в процеса на борба с вредителите (стига да има желание).

 

Желая ви Весело посрещане на коледните и новогодишни празници!

Редактирано от Иван Бонев (преглед на промените)

Благодаря ви..! Всъщност борбата с файлов вирус е почти загубена кауза..Вашия случай за n - ти път доказа че в такива случаи пълен формат е решението на проблема...!

 

Пожелавам ви весели празници...!:)

Архивирана тема

Темата е твърде стара и е архивирана. Не можете да добавяте нови отговори в нея, но винаги можете да публикувате нова тема, в която да продължи дискусията. Регистрирайте се или влезте във вашия профил за да публикувате нова тема.

Назад

Разглеждащи това в момента 0

  • Няма регистрирани потребители разглеждащи тази страница.

Дарение

  • Подкрепи съществуването на форума - направи дарение
    32%
    Дарени 315 € от нужните 1 000 €

Бюлетин

Получавайте известие, когато има важна промяна или новина свързана с форума.
Абонирайте се

Профил

Навигация

Търсене

Търсене

Конфигуриране на push известия в браузъра
Chrome (Android)
  1. Докоснете иконата на катинар до адресната лента.
  2. Докоснете Разрешения → Известия.
  3. Променете предпочитанията си.
Chrome (Desktop)
  1. Кликнете върху иконата на катинар в адресната лента.
  2. Изберете Настройки на сайта.
  3. Намерете Известия и коригирайте предпочитанията си.