Удалите в
MBAM:
Код:
Заражённые ключи в реестре:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{456A3B12-8FE6-41AE-9E5C-5E55F0712C09} (Rogue.PCDefender) -> No action taken.
Объекты реестра заражены:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.StartPage) -> Bad: (http://webalta.ru) Good: (http://www.google.com/) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL (Hijack.StartPage) -> Bad: (http://webalta.ru) Good: (http://www.google.com/) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Default_Page_URL (Hijack.StartPage) -> Bad: (http://webalta.ru) Good: (http://www.google.com/) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.StartPage) -> Bad: (http://webalta.ru) Good: (http://www.google.com/) -> No action taken.
Заражённые файлы:
c:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054629.dll (Trojan.SpyAgent) -> No action taken.
c:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054655.exe (Trojan.Agent) -> No action taken.
c:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054658.exe (Trojan.Agent) -> No action taken.
d:\ExtHDD\Distr\AV\avz4\quarantine\2010-12-27\avz00001.dta (Trojan.SpyAgent) -> No action taken.
d:\ExtHDD\Distr\AV\avz4\quarantine\2010-12-27\avz00002.dta (Trojan.SpyAgent) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054676.dll (Hacktool) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054660.exe (PSW.Tibia) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054662.exe (Trojan.Agent) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054665.exe (Trojan.Agent) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054667.exe (Malware.Packer.Gen) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054669.exe (PUP.PWDump) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054671.exe (Trojan.Downloader) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054675.dll (Hacktool) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054677.exe (PUP.PWDump) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054679.exe (Trojan.Downloader) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054684.exe (Trojan.Downloader) -> No action taken.
d:\system volume information\_restore{212839dd-a758-437f-bb62-2068e2ffdd6e}\RP155\A0054686.EXE (Hacktool.Agent) -> No action taken.
Лог
RSIT прикрепите.