 |  |  |  |  |  |  |  |
Back Again....Another virus/another family member computer
Thread Solved |
•
•
Join Date: Jun 2005
Posts: 88
Reputation: 
Solved Threads: 0
Junior Poster in Training
Sorry I forgot to post this. I became preoccupied trying to post that other log without those darn smilies.
malbytes malware log.
Malwarebytes' Anti-Malware 1.25
Database version: 1071
Windows 5.1.2600 Service Pack 2
11:50:05 AM 8/20/2008
mbam-log-08-20-2008 (11-50-05).txt
Scan type: Full Scan (C:\|F:\|)
Objects scanned: 192993
Time elapsed: 1 hour(s), 10 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\SYSTEM32\__c0058BA6.dat (Trojan.Agent) -> Delete on reboot.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c0058ba6 (Trojan.Agent) -> Delete on reboot.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Program Files\mozilla.org\Mozilla\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\__c0058BA6.dat (Trojan.Agent) -> Delete on reboot.
malbytes malware log.
Malwarebytes' Anti-Malware 1.25
Database version: 1071
Windows 5.1.2600 Service Pack 2
11:50:05 AM 8/20/2008
mbam-log-08-20-2008 (11-50-05).txt
Scan type: Full Scan (C:\|F:\|)
Objects scanned: 192993
Time elapsed: 1 hour(s), 10 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\SYSTEM32\__c0058BA6.dat (Trojan.Agent) -> Delete on reboot.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\__c0058ba6 (Trojan.Agent) -> Delete on reboot.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Program Files\mozilla.org\Mozilla\regxpcom.exe (Trojan.FBrowsingAdvisor) -> Quarantined and deleted successfully.
C:\WINDOWS\SYSTEM32\__c0058BA6.dat (Trojan.Agent) -> Delete on reboot.
•
•
Join Date: Feb 2004
Posts: 10,112
Reputation: 
Solved Threads: 769
•
•
•
•
Originally Posted by Ancient Dragon 
Hey sampson: don't you guys ever run an antivirus program on your computer? I have one running whenever I boot my computer and have never in the past 10 years had a problem. The antivirus program won't allow a download if the file contains a virus. There is no excuse for catching a computer virus today (except in rare cases where its a new virus).
C:\PROGRA~1\Grisoft\AVG7 Quick, delete this 
Proud member of ASAP (Alliance of Security analysis Professionals).
Opera AVAST anti-virus Comodo Firewall Spywareblaster
Opera AVAST anti-virus Comodo Firewall Spywareblaster
•
•
Join Date: Feb 2004
Posts: 10,112
Reputation:
Solved Threads: 769
Log looks ok. How is the pc?
Proud member of ASAP (Alliance of Security analysis Professionals).
Opera AVAST anti-virus Comodo Firewall Spywareblaster
Opera AVAST anti-virus Comodo Firewall Spywareblaster
•
•
Join Date: Jun 2005
Posts: 88
Reputation:
Solved Threads: 0
Junior Poster in Training
from the little I have used it, it seems fine...thanks for the assistance.
•
•
Join Date: Jun 2005
Posts: 88
Reputation:
Solved Threads: 0
Junior Poster in Training
thanks crunchie for the assist....again. Will bring back the computer to them tonight. Have installed the avast AV.....
•
•
Join Date: Feb 2004
Posts: 10,112
Reputation:
Solved Threads: 769
You are welcome .
This thread is now closed. If you need it reopened, please send a PM to one of our Mods.
Include the link to the thread and detail why you need it reopened.
If this is not your thread please start a New Topic.
. This thread is now closed. If you need it reopened, please send a PM to one of our Mods.
Include the link to the thread and detail why you need it reopened.
If this is not your thread please start a New Topic.
Proud member of ASAP (Alliance of Security analysis Professionals).
Opera AVAST anti-virus Comodo Firewall Spywareblaster
Opera AVAST anti-virus Comodo Firewall Spywareblaster
 |
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Annoying adaware called cast blue.exe
- Next Thread: How can I Remove Generic Rootkit.d trojan
Views: 1391 | Replies: 16
| Thread Tools | Search this Thread |
Latest Viruses, Spyware and other Nasties Posts
Related Forum Features
Tag cloud for Viruses, Spyware and other Nasties
acrobat adobe adware anti-virussitesaccessissue antivirus apple audio avg botnet censorship combofix commercial commercials conficker connect crosssitescripting cyber cybercrime cyberwarfare ddos domains e-mafia education email europe exploit explorer facebook gaming gtaiv gumblar halloween herss.exe hosting internet iphone kaspersky legal logfiles mail malware mcafee mega-d messagelabs microsoft mobile msn nazi news norton obama onlinethreats paedophile panel patch pdf phishing police policeprovirusmba-mblockedinternetaccess privacy pro problem redirecting reliability report research risk samhain sans scareware school search security sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen threat translate trojan unabletoaccessanti-virussites unwanted usa virus viruses vista volume vulnerability war warning web windows worm yahoo zeroday
