[Dominika2102]

Ах да, забыла еще одну важную вещь. При подключении к компьютеру любой флешки все папки сразу скрываются. Знаю что это RECYCLER постарался, научилась возвращать обратно папки, но каждый раз это делать надоело. Не могли бы еще подсказать что со всем этим делать?

[iskander-k]

1.Скачайте утилиту КК и распакуйте его в отдельную папку на зараженном компьютере.
2.Отключите интернет и ваш Антивирус на время работы утилиты,
3.Запустите файл kk.exe.
4.При запуске файла kk.exe без указания каких-либо ключей утилита останавливает активное заражение (удаляет потоки, снимает перехваты), выполняет сканирование основных мест, подверженных заражению, сканирует память, чистит реестр, проверяет flash-накопители.(зараженная флэшка должна быть вставлена )
5.Дождитесь окончания сканирования.
По окончании сканирования на компьютере утилита будет ожидать нажатия любой клавиши для закрытия.
подробная Инструкция
После этого повторите логи .

[Dominika2102]

Отправляю логи снова.

[alex_sev]

Закройте все программы, выгрузите антивирус, файрволл и прочее защитное ПО.

Выполните скрипт в АВЗ (Файл - Выполнить скрипт):

Код:

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFileF('C:\Documents and Settings\Admin\Application Data\', '*.tmp', false, '', 0, 0);
 DeleteFileMask('C:\Documents and Settings\Admin\Application Data\', '*.tmp', false);
 if MessageDLG('Заражение Вашего компьютера произошло через автоматический запуск программ на съемных накопителях. Отключить автозапуск?', mtConfirmation, mbYes+mbNo, 0) = 6 then
 RegKeyIntParamWrite('HKLM', 'SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', 'NoDriveTypeAutoRun', '221');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
 ExecuteWizard('SCU',2,3,true);
RebootWindows(true);
end.

Компьютер перезагрузится, После перезагрузки:
- выполните такой скрипт

Код:

begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.

Полученный архив отправьте с помощью этой формы или на этот почтовый ящик: quarantine <at> safezone.cc (замените <at> на @) с указанием ссылки на тему в теме (заголовке) сообщения. с указанием пароля: virus в теле письма.

Скачайте Malwarebytes' Anti-Malware или с зеркала, установите, обновите базы, выберите "Perform Full Scan", нажмите "Scan", после сканирования - Ok - Show Results (показать результаты) - Откройте лог и скопируйте в блокнот и прикрепите его к следующему посту.

[Dominika2102]

Все сделано

[goredey]

Dominika2102, удалите в МВАМ

Код:

Зараженные папки:  c:\RECYCLER\s-1-5-21-0243556031-888888379-781863308-1413 (Worm.AutoRun) -> No action taken.  c:\RECYCLER\r-1-5-21-1482476501-1644491937-682003330-1013 (Worm.AutoRun.Gen) -> No action taken.  c:\RECYCLER\s-1-5-21-0243556031-888888379-781863308-1830 (Worm.AutoRun) -> No action taken. 
 e:\avz4\avz4\quarantine\2011-12-25\avz00004.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00021.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00022.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00023.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00028.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00029.dta (Spyware.Password) -> No action taken.
e:\avz4\avz4\quarantine\2011-12-25\avz00031.dta (Spyware.Password) -> No action taken.
c:\WINDOWS\logfile32.txt (Malware.Trace) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1038810.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1258593.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1340421.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1358812.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1441754.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1528468.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1532171.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1538934.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1626828.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1633224.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1726734.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1826921.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1852750.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1927203.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1941656.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1946984.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1950937.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\1957546.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2026765.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2031718.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2041328.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2044912.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2046234.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2051983.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2057890.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2113875.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2126227.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2131531.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2151710.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2225836.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2322437.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2340171.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2344234.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2417118.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2434187.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2439685.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2447312.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2534171.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2557609.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2626421.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2641875.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2651598.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2736765.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2813426.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2829984.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2836390.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2855376.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2923107.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2927921.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2936640.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\2949281.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3031343.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3036843.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3043906.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3049343.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3121812.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3133911.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3136406.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3143655.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3143906.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3216610.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3224843.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3237500.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3240125.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3244359.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3254171.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3315328.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3319437.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3333785.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3347593.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3447593.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3511671.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3747820.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3843240.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3910421.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3938890.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\3944551.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4013953.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4032286.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4049359.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4144468.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4244437.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4343136.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4351703.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4420484.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4434390.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4438796.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4446937.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4518343.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4519738.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4528768.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4532703.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4559750.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4610781.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4618234.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4632671.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4634515.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4654375.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4659578.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4729375.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4744703.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4745812.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4753890.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4828781.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4838963.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4844718.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4923359.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4928781.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\4942250.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5035892.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5047703.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5053387.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5141546.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5238178.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5241562.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5347171.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5355312.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5442879.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5455359.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5521375.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5533255.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5550775.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5615671.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5636578.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5659578.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5715421.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5720640.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5730625.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5759703.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5815281.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5859609.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5915609.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5925187.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5951765.exe (Trojan.Downloader) -> No action taken.
c:\documents and settings\Admin\local settings\application data\5958419.exe (Trojan.Downloader) -> No action taken.
c:\RECYCLER\s-1-5-21-0243556031-888888379-781863308-1413\Desktop.ini (Worm.AutoRun) -> No action taken.
c:\RECYCLER\r-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini (Worm.AutoRun.Gen) -> No action taken.
c:\RECYCLER\s-1-5-21-0243556031-888888379-781863308-1830\Desktop.ini (Worm.AutoRun) -> No action taken.

Повторите логи
Смените пароли

[Dominika2102]

Повторяю логи

[Drongo]

По логам ничего вредного не увидел, проблемы и\или жалобы какие-либо остались?

[Dominika2102]

У меня пропадает звук через некоторое время работы компьютера. С этим можно что то сделать?