Форум: Форум PHPФорум ApacheФорум Регулярные ВыраженияФорум MySQLHTML+CSS+JavaScriptФорум FlashРазное
Новые темы: 0000000
Самоучитель PHP 5 / 6 (3 издание). Авторы: Кузнецов М.В., Симдянов И.В. PHP 5/6. В подлиннике. Авторы: Кузнецов М.В., Симдянов И.В. Программирование. Ступени успешной карьеры. Авторы: Кузнецов М.В., Симдянов И.В. C++. Мастер-класс в задачах и примерах. Авторы: Кузнецов М.В., Симдянов И.В. PHP на примерах (2 издание). Авторы: Кузнецов М.В., Симдянов И.В.
ВСЕ НАШИ КНИГИ
Консультационный центр SoftTime

Разное

Выбрать другой форум

 

Здравствуйте, Посетитель!

вид форума:
Линейный форум Структурный форум

тема: комп поймал вирусы Win32/TrojanDropper.Agent.NCH и Win32/Dialer.PZ trojan
 
 автор: MadeInUSSR   (06.09.2006 в 13:28)   письмо автору
 
 

каждый раз при выходе в интернет мой антивирус NOD 32 показывает окно о наличии вируса... и так в течении всего времени пока я в интернете... Как с этим бороться?

вот лог за эти два дня:

Time Module Object Name Threat Action User Information
06.09.2006 14:22:35 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvsqf[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:22:34 AMON file E:\WINDOWS\TEMP\win8BF2.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:22:32 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=4 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 14:20:20 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srveis[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:20:18 AMON file E:\WINDOWS\TEMP\win8AFE.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:20:14 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=3 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 14:17:35 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvacy[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:17:34 AMON file E:\WINDOWS\TEMP\win8037.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 14:17:31 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 14:14:55 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 12:22:57 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvomv[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 12:22:56 AMON file E:\WINDOWS\TEMP\win97A.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 12:22:53 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 12:02:20 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 11:42:02 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvfen[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:42:01 AMON file E:\WINDOWS\TEMP\win459.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:41:59 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=5 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 11:21:24 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvtuc[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:21:23 AMON file E:\WINDOWS\TEMP\win1C8.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:21:21 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=4 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 11:16:24 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvrfx[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:16:23 AMON file E:\WINDOWS\TEMP\win18C.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:16:21 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=3 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 11:10:10 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvhyl[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:10:08 AMON file E:\WINDOWS\TEMP\win14B.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:10:06 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 11:04:36 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 11:01:57 AMON file E:\WINDOWS\TEMP\win52.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:01:56 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvehg[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 11:01:54 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=5 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 10:39:30 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvkye[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 10:39:27 AMON file E:\WINDOWS\TEMP\winB4.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 10:39:23 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=4 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:56:25 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvmkv[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:56:24 AMON file E:\WINDOWS\TEMP\win311.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:56:22 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=3 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:54:08 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvkkt[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:54:07 AMON file E:\WINDOWS\TEMP\win2BF.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:54:05 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:51:32 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 8:46:11 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvbil[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:46:10 AMON file E:\WINDOWS\TEMP\win1E9.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:46:07 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=5 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:43:48 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvumm[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:43:40 AMON file E:\WINDOWS\TEMP\win1C9.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\Program Files\Mozilla Firefox\firefox.exe. The file was moved to quarantine. You may close this window.
06.09.2006 8:43:36 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=4 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:21:46 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvtce[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 8:21:45 AMON file E:\WINDOWS\TEMP\win243.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 8:21:43 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=3 Win32/TrojanDropper.Agent.NCH trojan quarantined - Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:19:27 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\0Z8RYCNE\srvpvb[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 8:19:24 AMON file E:\WINDOWS\TEMP\win118.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 8:19:22 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 8:14:59 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 1:07:27 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\MG1WHDVQ\srvlxz[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 1:07:24 AMON file E:\WINDOWS\TEMP\win1135.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 1:07:19 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 0:44:48 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
06.09.2006 0:22:15 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvaxl[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 0:22:13 AMON file E:\WINDOWS\TEMP\win112A.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 0:22:10 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=5 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
06.09.2006 0:01:42 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\N7KOW8Q8\srvypo[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 0:01:39 AMON file E:\WINDOWS\TEMP\win1114.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
06.09.2006 0:01:36 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=4 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
05.09.2006 23:41:11 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\K9SLGLQ5\srvpqv[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:41:07 AMON file E:\WINDOWS\TEMP\win107E.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:41:00 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=3 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
05.09.2006 23:20:01 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\K9SLGLQ5\srvvbs[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:19:55 AMON file E:\WINDOWS\TEMP\win406.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:19:51 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=2 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
05.09.2006 23:19:23 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\K9SLGLQ5\srvfev[1].exe Win32/TrojanDropper.Agent.NCH trojan renamed to E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\K9SLGLQ5\srvfev[1].Vexe THE-0EF3AE8C2C6\The Best Event occurred at an attempt to access the file by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE.
05.09.2006 23:19:20 AMON file E:\WINDOWS\TEMP\win196.tmp.exe Win32/TrojanDropper.Agent.NCH trojan renamed to E:\WINDOWS\TEMP\win196.tmp.Vexe NT AUTHORITY\SYSTEM Event occurred at an attempt to access the file by the application: \??\E:\WINDOWS\system32\winlogon.exe.
05.09.2006 23:17:13 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
05.09.2006 23:15:05 AMON file E:\WINDOWS\TEMP\win22D.tmp Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:15:00 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\MG1WHDVQ\srvmdf[1].exe Win32/TrojanDropper.Agent.NCH trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: C:\PROGRA~1\MOZILL~1\FIREFOX.EXE. The file was moved to quarantine. You may close this window.
05.09.2006 23:14:54 IMON file http://d.mettere.net/a412/a571.php?m=1&b=779&c=5 Win32/TrojanDropper.Agent.NCH trojan Connection terminated THE-0EF3AE8C2C6\The Best
05.09.2006 23:14:15 AMON file E:\WINDOWS\TEMP\win179.tmp.exe Win32/TrojanDropper.Agent.NCH trojan renamed to E:\WINDOWS\TEMP\win179.tmp.Vexe NT AUTHORITY\SYSTEM Event occurred at an attempt to access the file by the application: \??\E:\WINDOWS\system32\winlogon.exe.
05.09.2006 23:12:26 AMON file E:\WINDOWS\TEMP\win3E.tmp.exe Win32/TrojanDropper.Agent.NCH trojan renamed to E:\WINDOWS\TEMP\win3E.tmp.Vexe NT AUTHORITY\SYSTEM Event occurred at an attempt to access the file by the application: \??\E:\WINDOWS\system32\winlogon.exe.
05.09.2006 22:50:16 AMON file E:\WINDOWS\TEMP\idd19D.tmp.exe Win32/Dialer.U trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: E:\WINDOWS\TEMP\win196.tmp.exe. The file was moved to quarantine. You may close this window.
05.09.2006 22:47:43 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
05.09.2006 22:26:47 AMON file E:\WINDOWS\TEMP\iddE8.tmp.exe Win32/Dialer.U trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: E:\WINDOWS\TEMP\win179.tmp.exe. The file was moved to quarantine. You may close this window.
05.09.2006 22:05:37 AMON file E:\WINDOWS\TEMP\iddFFAA.tmp.exe Win32/Dialer.U trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: E:\WINDOWS\TEMP\win3E.tmp.exe. The file was moved to quarantine. You may close this window.
05.09.2006 21:59:52 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
05.09.2006 21:59:47 AMON file E:\Documents and Settings\The Best\Local Settings\Temporary Internet Files\Content.IE5\K9SLGLQ5\bgates[1].exe a variant of Win32/Dialer.PZ trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a newly created file. The file was moved to quarantine. You may close this window.
05.09.2006 21:38:23 AMON file E:\DOCUME~1\THEBES~1\LOCALS~1\Temp\idd17F.tmp.exe Win32/Dialer.U trojan quarantined - deleted Event occurred on a newly created file. The file was moved to quarantine. You may close this window.
05.09.2006 21:38:19 AMON file E:\WINDOWS\TEMP\idd17E.tmp.exe Win32/Dialer.U trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: E:\WINDOWS\TEMP\win179.tmp.exe. The file was moved to quarantine. You may close this window.
05.09.2006 21:18:34 AMON file E:\WINDOWS\TEMP\idd5E.tmp.exe Win32/Dialer.U trojan quarantined - deleted THE-0EF3AE8C2C6\The Best Event occurred on a new file created by the application: E:\WINDOWS\TEMP\win3E.tmp.exe. The file was moved to quarantine. You may close this window.
05.09.2006 12:43:17 IMON file http://www.content-loader.com/getexe/?wmid=bgates a variant of Win32/Dialer.PZ trojan THE-0EF3AE8C2C6\The Best
05.09.2006 12:42:39 IMON file http://d.mettere.net/a412/an.php?m=1&b=779 Win32/TrojanDownloader.Busky.AM trojan Connection terminated THE-0EF3AE8C2C6\The Best
05.09.2006 12:41:58 IMON self-extracting archive http://d.mettere.net/a412/mc.php?m=1&b=779 Win32/Adware.Softomate application Connection terminated THE-0EF3AE8C2C6\The Best

   
 
 автор: codexomega   (07.09.2006 в 05:33)   письмо автору
 
   для: MadeInUSSR   (06.09.2006 в 13:28)
 

Если сам антивирус не способен справиться с проблемой, просканируйте машину Lavasoft Ad-Aware, если не поможет, приибегните к Registry Mechanic.
Если опять безрезультатно(маловероятно), спасет HijackThis, но это уже другая песня.

   
 
 автор: MadeInUSSR   (08.09.2006 в 18:27)   письмо автору
 
   для: codexomega   (07.09.2006 в 05:33)
 

делала все что только можно..... чем только не проверяла...
но спасло только Восстановление системы...

   
Rambler's Top100
вверх

Rambler's Top100 Яндекс.Метрика Яндекс цитирования