Созданные ответы форума
-
Сообщения
-
ОТЧЕТ О ПРОВЕРКЕ KASPERSKY ONLINE SCANNER 7.0
1 Февраль 2010 г.
Операционная система: Microsoft Windows XP Professional Service Pack 2 (build 2600)
Версия Kaspersky Online Scanner: 7.0.26.13
Последнее обновление баз: Monday, February 01, 2010 08:09:36
Количество записей в базах: 3393627Параметры проверки
проверять, используя следующие базы расширенные
Проверять архивы да
Проверять почтовые базы даОбласть проверки Мой компьютер
C:
D:
E:Статистика проверки
Проверено объектов 136051
Обнаружено угроз 1
Обнаружено зараженных объектов 1
Обнаружено подозрительных объектов 0
Время проверки 03:15:50Имя файла Имя угрозы Количество угроз
D:{QWE-PKF-05JKG8NCVM-UITYHJD63N-98EH-FKO9}Мои документы_My SoftBck1 301007.bkf Зараженный: Trojan.Win32.Agent.bve 1Выбранная область проверена.
GMER 1.0.15.15281 — http://www.gmer.net
Rootkit scan 2010-02-01 08:05:25
Windows 5.1.2600 Service Pack 2
Running: gmer.exe; Driver: C:DOCUME~1userLOCALS~1Tempuwlcrfob.sys—- System — GMER 1.0.15 —-
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwClose [0x9F8B788E]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwCreateFile [0x9F8B70EC]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwCreateKey [0x9F8B6DCE]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwCreateSection [0x9F8B8938]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwDeleteKey [0x9F8B6ED8]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwDeleteValueKey [0x9F8B6FC2]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwLoadDriver [0x9F8B7BBC]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwOpenFile [0x9F8B73F4]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwSetInformationFile [0x9F8B7526]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwSetValueKey [0x9F8B6BFC]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwTerminateProcess [0x9F8B7B04]
SSDT ??C:WINDOWSsystem32driverssp_rsdrv2.sys ZwWriteFile [0x9F8B770C]—- User code sections — GMER 1.0.15 —-
.text C:Program FilesESETESET NOD32 Antivirusekrn.exe[1704] kernel32.dll!SetUnhandledExceptionFilter 7C810386 4 Bytes [C2, 04, 00, 00]
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!CreateWindowExW 77D41AD5 5 Bytes JMP 01234832 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!DialogBoxParamW 77D46702 5 Bytes JMP 01159315 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!DialogBoxParamA 77D488E1 5 Bytes JMP 0134DFBE C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!DialogBoxIndirectParamW 77D52598 5 Bytes JMP 0134E021 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!MessageBoxIndirectA 77D5AEF1 5 Bytes JMP 0134DF51 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!MessageBoxExW 77D70559 5 Bytes JMP 0134DE22 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!MessageBoxExA 77D7057D 5 Bytes JMP 0134DE84 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!DialogBoxIndirectParamA 77D76CED 5 Bytes JMP 0134E084 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4576] USER32.dll!MessageBoxIndirectW 77D860B7 5 Bytes JMP 0134DEE6 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!CallNextHookEx 77D3ED6E 5 Bytes JMP 0122DD81 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!CreateWindowExW 77D41AD5 5 Bytes JMP 01234832 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!DialogBoxParamW 77D46702 5 Bytes JMP 01159315 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!DialogBoxParamA 77D488E1 5 Bytes JMP 0134DFBE C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!DialogBoxIndirectParamW 77D52598 5 Bytes JMP 0134E021 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!MessageBoxIndirectA 77D5AEF1 5 Bytes JMP 0134DF51 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 0122DBCB C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 01191CA2 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!MessageBoxExW 77D70559 5 Bytes JMP 0134DE22 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!MessageBoxExA 77D7057D 5 Bytes JMP 0134DE84 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!DialogBoxIndirectParamA 77D76CED 5 Bytes JMP 0134E084 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] USER32.dll!MessageBoxIndirectW 77D860B7 5 Bytes JMP 0134DEE6 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[4636] ole32.dll!CoCreateInstance 77516009 5 Bytes JMP 0123488E C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!CallNextHookEx 77D3ED6E 5 Bytes JMP 0122DD81 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!CreateWindowExW 77D41AD5 5 Bytes JMP 01234832 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!DialogBoxParamW 77D46702 5 Bytes JMP 01159315 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!DialogBoxParamA 77D488E1 5 Bytes JMP 0134DFBE C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!DialogBoxIndirectParamW 77D52598 5 Bytes JMP 0134E021 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!MessageBoxIndirectA 77D5AEF1 5 Bytes JMP 0134DF51 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!SetWindowsHookExW 77D5E621 5 Bytes JMP 0122DBCB C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!UnhookWindowsHookEx 77D5F29F 5 Bytes JMP 01191CA2 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!MessageBoxExW 77D70559 5 Bytes JMP 0134DE22 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!MessageBoxExA 77D7057D 5 Bytes JMP 0134DE84 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!DialogBoxIndirectParamA 77D76CED 5 Bytes JMP 0134E084 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] USER32.dll!MessageBoxIndirectW 77D860B7 5 Bytes JMP 0134DEE6 C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)
.text C:Program FilesInternet ExplorerIEXPLORE.EXE[5732] ole32.dll!CoCreateInstance 77516009 5 Bytes JMP 0123488E C:WINDOWSsystem32IEFRAME.dll (Internet Explorer/Microsoft Corporation)—- Devices — GMER 1.0.15 —-
AttachedDevice FileSystemNtfs Ntfs eamon.sys (Amon monitor/ESET)
AttachedDevice DriverKbdclass DeviceKeyboardClass0 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice DriverKbdclass DeviceKeyboardClass1 SynTP.sys (Synaptics Touchpad Driver/Synaptics, Inc.)
AttachedDevice DriverTcpip DeviceTcp epfwtdir.sys—- Registry — GMER 1.0.15 —-
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@!0454B0450424>494 0000440404?4B0454@4 0010039004 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (L002TP) 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPTP) 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPPoE) 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@374@4O4494 ?0404@0404;4;0454;4L4=4K494 ?4>4@4B4 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (IP) 1?
Reg HKLMSYSTEMControlSet002ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 ?4;0404=484@4>0424I484:0404 ?0404:0454B4>0424 1?2?3?
Reg HKLMSYSTEMControlSet002ServiceslanmanserverShares@360414I480454 0044>4:4C4<0454=4B4K4 CSCFlags=0?MaxUses=4294967295?Path=C:Documents and SettingsAll Users??????????Permissions=0?Remark=?Type=0?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@!0454B0450424>494 0000440404?4B0454@4 0010039004 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (L002TP) 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPTP) 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPPoE) 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@374@4O4494 ?0404@0404;4;0454;4L4=4K494 ?4>4@4B4 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (IP) 1?
Reg HKLMSYSTEMCurrentControlSetControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 ?4;0404=484@4>0424I484:0404 ?0404:0454B4>0424 1?2?
Reg HKLMSYSTEMCurrentControlSetServiceslanmanserverShares@360414I480454 0044>4:4C4<0454=4B4K4 CSCFlags=0?MaxUses=4294967295?Path=C:Documents and SettingsAll Users??????????Permissions=0?Remark=?Type=0?
Reg HKLMSYSTEMCurrentControlSetServicesSysmonLogLog Queries{3ae758a9-e513-49bf-be81-cc0372043703}@204B4@480414C4B4K4 E4@0404=0454=484O4 0040404=4=4K4E4 33
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@!0454B0450424>494 0000440404?4B0454@4 0010039004 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (L002TP) 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPTP) 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (PPPoE) 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@374@4O4494 ?0404@0404;4;0454;4L4=4K494 ?4>4@4B4 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 WAN (IP) 1?
Reg HKLMSYSTEMControlSet004ControlNetwork{4D36E972-E325-11CE-BFC1-08002BE10318}Descriptions@34484=484?4>4@4B4 ?4;0404=484@4>0424I484:0404 ?0404:0454B4>0424 1?2?
Reg HKLMSYSTEMControlSet004ServiceslanmanserverShares@360414I480454 0044>4:4C4<0454=4B4K4 CSCFlags=0?MaxUses=4294967295?Path=C:Documents and SettingsAll Users??????????Permissions=0?Remark=?Type=0?
Reg HKLMSYSTEMControlSet004ServicesSysmonLogLog Queries{3ae758a9-e513-49bf-be81-cc0372043703}@204B4@480414C4B4K4 E4@0404=0454=484O4 0040404=4=4K4E4 33—- EOF — GMER 1.0.15 —-
