begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 QuarantineFile('C:\WINDOWS\system32\zsmtjcd.dll','');
 DeleteFile('C:\WINDOWS\system32\zsmtjcd.dll');
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1001', 1);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1004', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
 RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1804', 1);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

begin
 ExecuteRepair(1);
RebootWindows(true);
end.

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Версия базы данных: 6037

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

13.03.2011 3:43:38
mbam-log-2011-03-13 (03-43-38).txt

Тип сканирования: Полное сканирование (C:\|D:\|)
Просканированные объекты: 264488
Времени прошло: 1 часов, 26 минут, 33 секунд

Заражённые процессы в памяти: 0
Заражённые модули в памяти: 0
Заражённые ключи в реестре: 0
Заражённые параметры в реестре: 0
Объекты реестра заражены: 3
Заражённые папки: 0
Заражённые файлы: 18

Заражённые процессы в памяти:
(Вредоносных программ не обнаружено)

Заражённые модули в памяти:
(Вредоносных программ не обнаружено)

Заражённые ключи в реестре:
(Вредоносных программ не обнаружено)

Заражённые параметры в реестре:
(Вредоносных программ не обнаружено)

Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Заражённые папки:
(Вредоносных программ не обнаружено)

Заражённые файлы:
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0050567.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0050568.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0050965.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0050966.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0051064.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0051065.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0051442.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP73\A0051443.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0051869.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0051870.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0052114.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0052115.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0052245.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0052246.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0053028.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0053029.exe (Trojan.Spambot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0053198.exe (Backdoor.RBot) -> Quarantined and deleted successfully.
d:\system volume information\_restore{c3d2f7a3-374b-48ee-be62-8f8f60a8f54a}\RP74\A0053199.exe (Trojan.Spambot) -> Quarantined and deleted successfully.