да, при отключенном тоже самое.
-профиксил
-выполнил скрипты
-отправил архив через форму
-проверил с помошью Malwarebytes Anti-Malware, почистил, вот лог:
Код:
Malwarebytes' Anti-Malware 1.50 www.malwarebytes.org
Database version: 5224 Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702 01.12.2010 14:40:10
mbam-log-2010-12-01 (14-40-10).txt
Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 305217 Time elapsed: 1 hour(s), 13 minute(s), 14 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 13
Memory Processes Infected: (No malicious items detected)
Memory Modules Infected: (No malicious items detected)
Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\oreans32 (Rootkit.Agent) -> Quarantined and deleted successfully.
Registry Values Infected: (No malicious items detected)
Registry Data Items Infected: (No malicious items detected)
Folders Infected: (No malicious items detected)
Files Infected:
c:\WINDOWS\system32\drivers\oreans32.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
d:\program files\WinRAR\Patcher.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
d:\Windows\System32\portabledevicetypes.dll (Trojan.Agent) -> Quarantined and deleted successfully.d:\Windows\winsxs\x86_microsoft-windows-wpd-portabledeviceapi_31bf3856ad364e35_6.1.7000.0_none_bb6aac722801850d\portabledevicetypes.dll (Trojan.Agent) -> Quarantined and deleted successfully.
e:\$RECYCLE.BIN\s-1-5-21-3141602235-1166271070-2909720209-1000\$RP686IL\fff-reflexv2.exe (Trojan.Backdoor) -> Quarantined and deleted successfully.
e:\SOFT\файл-менеджеры\winrar_3.7_rus_xp_vista\Crack\Patch.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
e:\SOFT\файл-менеджеры\winrar_3.7_rus_xp_vista\Crack\Patcher.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.
e:\SOFT\файл-менеджеры\winrar_3.7_rus_xp_vista\Crack\Unblack.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
e:\TECHNIC\Софт\setup_active_filter_3000.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
e:\для трубы\SE\setool2lite_1.10_1.11\setool2lt.exe (Malware.Packer.T) -> Quarantined and deleted successfully.
e:\для трубы\SE\setool2lite_1.10_1.11\patchwise.bak\setool2lt.exe (Malware.Packer.T) -> Quarantined and deleted successfully.
e:\для трубы\SE\setool2lite_1.10_1.11\qamaker\qamaker.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\documents and settings\Admin\application data\fieryads.dat (Adware.FieryAds) -> Quarantined and deleted successfully.
пока не заработало...
