TKB

Topic Should be - Registry Keys infection Detected. Can I delete them safely?

My malwarebytes scan found these three registry keys infected and they have been quarintined. Did one more full scan and no malicious items were detected.Should I do anything more to make sure there is nothing else? Is it safe to delete them? Thanks -------------------------------------------------------- Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5751 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 2/13/2011 8:41:51 AM mbam-log-2011-02-13 (08-41-51).txt Scan type: Full scan (C:\|) Objects scanned: 366394 Time elapsed: 1 hour(s), 52 minute(s), 43 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

My malwarebytes scan found these three registry keys infected and have been quarintined. Should I do anything to make sure there is nothing else? Is it safe to delete them? Thanks -------------------------------------------------------- Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5751 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 2/13/2011 8:41:51 AM mbam-log-2011-02-13 (08-41-51).txt Scan type: Full scan (C:\|) Objects scanned: 366394 Time elapsed: 1 hour(s), 52 minute(s), 43 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{AFD4AD01-58C1-47DB-A404-FBE00A6C5486} (Trojan.BHO) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Thank you. Appreciate your help.

Thanks. Attached are the files you requested. Appreciate your help. FYI - I have restored the quarantined files. Should I scan again and quarantine them till we know for sure? windowsapplication1.zip windowsapplication1.zip

How to do that? Thanks.

I have two files in visual studio 2008 folder which shows up as Trojan. I have never used this software fro a while, and use Malwarebyes for in demand scans. I run a scan recently about 10 days ago and nothing showed up. However, today i had these to files infected. It has been quarantined, but would like to know if I can delete it. Is it a keylogger? Do I need to be worried and change my passwords? Thanks Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5505 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.11 1/12/2011 8:28:16 AM mbam-log-2011-01-12 (08-28-16).txt Scan type: Full scan (C:\|) Objects scanned: 304158 Time elapsed: 56 minute(s), 40 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\documents and settings\tveerab\my documents\visual studio 2008\Projects\windowsapplication1\windowsapplication1\bin\Debug\windowsapplication1.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully. c:\documents and settings\tveerab\my documents\visual studio 2008\Projects\windowsapplication1\windowsapplication1\obj\Debug\windowsapplication1.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.