Выполнил все. Выкладываю то, что требуется.
Ответ, который пришел на почту:
___________________________________________________________
Hello,
This message is generated by automatic letter reception system. The report contains information on what the verdicts on the files (if any in the letter) makes antivirus with latest updates. Letter will be passed to the virus analyst.
a.s.k.exe
autorun.inf,
autorun_0.inf,
autorun_1.inf,
autorun_2.inf,
run.bat
These files are in process.
bcqr00015.dat,
bcqr00016.dat,
qbb08c7.sys
No malicious code were found in these files.
svchost.exe - not-a-virus:RemoteAdmin.Win32.RAdmin.20
This file is already detected by our extended bases as a potentially risk program. See more info about extended databases here:
http://www.kaspersky.com/extraavupdates
Best Regards, Kaspersky Lab
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com
__________________________________________________
Лог MBAM:
__________________________________________________
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Версия базы данных: 4529
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
02.09.2010 14:24:58
mbam-log-2010-09-02 (14-24-58).txt
Тип сканирования: Полное сканирование (C:\|D:\|E:\|F:\|)
Просканированные объекты: 262678
Времени прошло: 1 часов, 7 минут, 6 секунд
Зараженные процессы в памяти: 0
Зараженные модули в памяти: 0
Зараженные ключи в реестре: 7
Зараженные параметры в реестре: 0
Объекты реестра заражены: 3
Зараженные папки: 0
Зараженные файлы: 13
Зараженные процессы в памяти:
(Вредоносных программ не обнаружено)
Зараженные модули в памяти:
(Вредоносных программ не обнаружено)
Зараженные ключи в реестре:
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{e24211b3-a78a-c6a9-d317-70979ace5058} (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Monopod (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\kbupdate (Backdoor.Bot) -> Quarantined and deleted successfully.
Зараженные параметры в реестре:
(Вредоносных программ не обнаружено)
Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Зараженные папки:
(Вредоносных программ не обнаружено)
Зараженные файлы:
C:\Documents and Settings\Admin\Мои документы\Downloads\K2010\AntiHacker\Crack.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Рабочий стол\Quarantine\2010-09-02\avz00007.dta (BackDoor.Gootkit) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Рабочий стол\Quarantine\2010-09-02\bcqr00015.dat (BackDoor.Gootkit) -> Quarantined and deleted successfully.
C:\Documents and Settings\Admin\Рабочий стол\Quarantine\2010-09-02\bcqr00016.dat (BackDoor.Gootkit) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\nd.sys (Trojan.Ndiswrap) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\drivers\qbb08c7.sys (BackDoor.Gootkit) -> Delete on reboot.
C:\WINDOWS\Help\admdll.dll (PUP.RemoteAdmin) -> Quarantined and deleted successfully.
C:\WINDOWS\Help\raddrv.dll (PUP.RemoteAdmin) -> Quarantined and deleted successfully.
D:\Program Files\Guitar Pro 5.2\Keygen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\crt.dat (Malware.Trace) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kboem32.dat (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\Temp\0.4168274061019166.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
C:\WINDOWS\Tasks\{BB65B0FB-5712-401b-B616-E69AC55E2757}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
___________________________________________
Логи AVZ в приложениях.
