Wirusy - skan z Ewido

Dla specjalistów Bezpieczeństwo
#1

__________________________________________________

ewido anti-spyware online scanner

http://www.ewido.net

__________________________________________________

Name: TrackingCookie.Advertising

Path: C:\Documents and Settings\ZOMO\Cookies\zomo@advertising[2].txt

Risk: Medium

Name: TrackingCookie.Webtrends

Path: C:\Documents and Settings\ZOMO\Cookies\zomo@m.webtrends[2].txt

Risk: Medium

Name: TrackingCookie.Skype

Path: C:\Documents and Settings\ZOMO\Cookies\zomo@skype[2].txt

Risk: Medium

Name: TrackingCookie.Tacoda

Path: C:\Documents and Settings\ZOMO\Cookies\zomo@tacoda[1].txt

Risk: Medium

Name: TrackingCookie.Gemius

Path: C:\Documents and Settings\ZOMO\Cookies\zomo@hit.gemius[2].txt

Risk: Medium

Name: Trojan.Copier

Path: C:\Documents and Settings\ZOMO\Pulpit\Nowy folder\temp1.exe

Risk: High

Name: Downloader.Wimad.n

Path: C:\My Downloads\Cest la revolution.mp3

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011445.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011446.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011464.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011465.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011482.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011483.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011496.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011497.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011510.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011511.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011555.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011556.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011578.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011579.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011605.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP37\A0011606.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011648.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011649.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011666.exe

Risk: High

Name: Backdoor.Small.lo

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011667.exe

Risk: High

Name: Trojan.Copyself

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011698.exe

Risk: High

Name: Dropper.Small.apl

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011699.exe

Risk: High

Name: Dropper.Small.apl

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011700.exe

Risk: High

Name: Trojan.Copyself

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011701.exe

Risk: High

Name: Trojan.Copier

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011712.exe

Risk: High

Name: Dropper.Small.apl

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011736.exe

Risk: High

Name: Worm.Perlovga.a

Path: C:\System Volume Information_restore{77EE5949-5DD7-4657-B175-4F17E078EA41}\RP38\A0011737.inf

Risk: High

Name: Worm.Perlovga.a

Path: C:\WINDOWS\autorun.inf

Risk: High

Name: Backdoor.Small.lo

Path: C:\WINDOWS\system32\temp2.exe

Risk: High

Name: Trojan.Copyself

Path: C:\WINDOWS\xcopy.exe

Risk: High

#2

Iga.m , nie podpinaj się pod istniejące tematy - jeżeli masz problem, załóż własny temat.

Wydzielono.

#3

Frog , jeszcze pozwole sobie rpzypomnieć, że logi wklejamy na http://wklej.org i tu dajemy tylko linki do nich.

Jeżeli dasz logi z HiJackThis to chętnie pomogę :slight_smile:

#4

Podaj log z Combofix

Logi dajesz na http://wklej.eu lub na http://wklej.org a w poście dajesz tylko link

– Dodane 28 sty 2009 12:46 –

Podaj log z Combofix

Logi dajesz na http://wklej.eu lub na http://wklej.org a w poście dajesz tylko link