[She-Wolf]

Malwarebytes’ Anti-Malware 1.40
Версия базы данных: 2563
Windows 5.1.2600 Service Pack 3

05.08.2009 14:47:42
mbam-log-2009-08-05 (14-47-42).txt

Тип проверки: Быстрая
Проверено объектов: 107163
Прошло времени: 16 minute(s), 7 second(s)

Заражено процессов в памяти: 1
Заражено модулей в памяти: 0
Заражено ключей реестра: 23
Заражено значений реестра: 1
Заражено параметров реестра: 6
Заражено папок: 3
Заражено файлов: 14

Заражено процессов в памяти:
C:Documents and SettingsАдминистраторРабочий столexplorer.exe (Heuristics.Reserved.Word.Exploit) -> Unloaded process successfully.

Заражено модулей в памяти:
(Вредоносные программы не обнаружены)

Заражено ключей реестра:
HKEY_CLASSES_ROOTbitaccelerator.bitaccelerator (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTTypeLib{431d251c-b43a-47d7-b4f4-07a101b432d6} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTInterface{8cb0d898-a6a2-48c3-bbd7-862f85b18d46} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{92860a02-4d69-48c1-82d7-ef6b2c609502} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{92860a02-4d69-48c1-82d7-ef6b2c609502} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{92860a02-4d69-48c1-82d7-ef6b2c609502} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{c1de446a-8770-4621-9378-f1922c74a36c} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{c1de446a-8770-4621-9378-f1922c74a36c} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTbitaccelerator.bitaccelerator.1 (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTCLSID{1408e208-2ac1-42d3-9f10-78a5b36e05ac} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTAppID{b0ed4726-5bc8-4e22-a7a8-3074a73ce64e} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionExtStats{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{b87b54f6-7cd5-45b2-b873-3f95c558768a} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTxvideoplugin.jetvideoplugin (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTxvideoplugin.jetvideoplugin.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTxvideoplugin.jetmimefiltr (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOTxvideoplugin.jetmimefiltr.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USERSOFTWAREBitAccelerator (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet001Serviceswinsecguard (Worm.Archive) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet003Serviceswinsecguard (Worm.Archive) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceswinsecguard (Worm.Archive) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstallSystemSecurity2009 (Rogue.SystemSecurity) -> Quarantined and deleted successfully.

Заражено значений реестра:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogontaskman (Backdoor.Bot) -> Quarantined and deleted successfully.

Заражено параметров реестра:
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterAntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterFirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterUpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpipParametersNameServer (Trojan.DNSChanger) -> Data: 85.255.115.237 85.255.112.78 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet001ServicesTcpipParametersNameServer (Trojan.DNSChanger) -> Data: 85.255.115.237 85.255.112.78 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINESYSTEMControlSet003ServicesTcpipParametersNameServer (Trojan.DNSChanger) -> Data: 85.255.115.237 85.255.112.78 -> Quarantined and deleted successfully.

Заражено папок:
C:Documents and SettingsAll UsersГлавное менюПрограммыBitAccelerator (Adware.BHO) -> Quarantined and deleted successfully.
C:Program FilesBitAccelerator (Adware.BHO) -> Quarantined and deleted successfully.
C:Documents and SettingsАдминистраторГлавное менюПрограммыSystem Security (Rogue.SystemSecurity) -> Quarantined and deleted successfully.

Заражено файлов:
C:Program FilesBitAcceleratorBitAccelerator.dll (Adware.BHO) -> Quarantined and deleted successfully.
C:WINDOWSsystem32urlmon.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:Documents and SettingsАдминистраторLocal SettingsTempdb.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:Documents and SettingsАдминистраторwin.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:Documents and SettingsAll UsersГлавное менюПрограммыBitAcceleratorBitAccelerator.lnk (Adware.BHO) -> Quarantined and deleted successfully.
C:Documents and SettingsAll UsersГлавное менюПрограммыBitAcceleratorUninstall.lnk (Adware.BHO) -> Quarantined and deleted successfully.
C:Program FilesBitAcceleratorBitAccelerator.exe (Adware.BHO) -> Quarantined and deleted successfully.
C:Program FilesBitAcceleratorUninstall.exe (Adware.BHO) -> Quarantined and deleted successfully.
C:Documents and SettingsАдминистраторГлавное менюПрограммыSystem SecuritySystem Security (Rogue.SystemSecurity) -> Quarantined and deleted successfully.
C:Autorun.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:WINDOWSFontszpx2.exe (Worm.Archive) -> Quarantined and deleted successfully.
C:autorun.inf (Trojan.Agent) -> Quarantined and deleted successfully.
C:autorun.vbs (Trojan.Agent) -> Quarantined and deleted successfully.
C:Documents and SettingsАдминистраторРабочий столexplorer.exe (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.

Спасибо огромное!!!

[Автор]

Сообщения