Люди, нельзя же так легко попадаться на трояны:
Итак, будьте внимательнее, судя по всему - эпидемия.
AntiVir
Found Worm/Stration.H
ArcaVir
Found nothing
Avast
Found nothing
AVG Antivirus
Found nothing
BitDefender
Found DeepScan:Generic.Stration.25B4D41B
ClamAV
Found nothing
Dr.Web
Found Win32.HLLM.Limar
F-Prot Antivirus
Found W32/Warezov.gen4
F-Secure Anti-Virus
Found W32/Warezov.HH
Fortinet
Found nothing
Kaspersky Anti-Virus
Found nothing
NOD32
Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control
Found Sandbox: W32/Malware; [ General information ]
* Decompressing UPX.
* Creating several executable files on hard-drive.
* File length: 63488 bytes.
[ Changes to filesystem ]
* Creates file C:\windows\system32\cfgmwmid.exe.
* Creates file C:\WINDOWS\SYSTEM32\olecmsre.dll.
* Creates file C:\WINDOWS\SYSTEM32\oaklrass.exe.
* Creates file C:\WINDOWS\SYSTEM32\ntlamsht.dll.
* Creates file C:\WINDOWS\SYSTEM32\e1.dll.
[ Changes to registry ]
* Creates value "cfgmwmid"="c:\windows\system32\cfgmwmid.exe" in key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run".
[ Changes to system settings ]
* Creates WindowsHook monitoring cbt activity.
[ Process/window information ]
* Creates an event called ZAAllowEvent.
* Creates an event called SGAllowEvent.
* Creates an event called NISAllowEvent.
* Creates an event called OPAllowEvent.
* Creates an event called MAAllowEvent2.
* Attempts to access service "vsmon".
* Creates an event called ActiveZA.
* Attempts to access service "SmcService".
* Creates an event called ActiveSG.
* Attempts to access service "wscsvc".
* Attempts to access service "SharedAccess".
* Attempts to access service "Symantec Core LC".
* Creates an event called ActiveNIS.
* Attempts to access service "OutpostFirewall".
* Creates an event called ActiveOP.
* Attempts to access service "MpfService".
* Creates an event called ActiveMA.
* Attempts to access service "WinRoute".
* Will automatically restart after boot (I'll be back...).
* Enumerates running processes.
* Modifies other process memory.
* Creates a remote thread.
VirusBuster
Found Trojan.Opnis.Gen.29
VBA32
Found MalwareScope.Worm.Warezov.1