cythreal Posted April 30, 2012 ID:547432 Share Posted April 30, 2012 Malwarebytes Anti-Malware (Trial) 1.61.0.1400www.malwarebytes.orgDatabase version: v2012.04.30.03Windows 7 x86 NTFSInternet Explorer 9.0.8112.16421Castro :: CASTRO-PC [administrator]Protection: Enabled4/30/2012 7:15:42 PMmbam-log-2012-04-30 (19-21-47).txtScan type: Quick scanScan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUMScan options disabled: P2PObjects scanned: 188675Time elapsed: 3 minute(s), 9 second(s)Memory Processes Detected: 0(No malicious items detected)Memory Modules Detected: 0(No malicious items detected)Registry Keys Detected: 4HKCR\CLSID\{B730DCB1-C2BA-BDD3-FFDB-A9DA7CBBDDD9} (Trojan.Agent) -> No action taken.HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{B730DCB1-C2BA-BDD3-FFDB-A9DA7CBBDDD9} (Trojan.Agent) -> No action taken.HKCU\SOFTWARE\Microsoft\Active Setup\Installed Components\{B730DCB1-C2BA-BDD3-FFDB-A9DA7CBBDDD9} (Trojan.Agent) -> No action taken.HKCU\Software\VB and VBA Program Settings\SrvID (Malware.Trace) -> No action taken.Registry Values Detected: 3HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|svchost (Trojan.Agent) -> Data: C:\Users\Castro\AppData\Roaming\/Microsoft\svchost.exe -> No action taken.HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|svchost (Trojan.Agent) -> Data: C:\Users\Castro\AppData\Roaming\/Microsoft\svchost.exe -> No action taken.HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|svchost (Trojan.Agent) -> Data: C:\Users\Castro\AppData\Roaming\/Microsoft\svchost.exe -> No action taken.Registry Data Items Detected: 0(No malicious items detected)Folders Detected: 0(No malicious items detected)Files Detected: 2C:\Users\Castro\AppData\Roaming\Microsoft\svchost.exe (Trojan.Agent) -> No action taken.C:\Users\Castro\AppData\Roaming\processname.exe (Backdoor.Agent) -> No action taken.(end)I tried removing those.. But it keeps coming back. Link to post Share on other sites More sharing options...
daledoc1 Posted April 30, 2012 ID:547434 Share Posted April 30, 2012 Hello and welcome to MBAM, cythreal: We cannot review scan logs or work on malware removal in this section of the forums.So, if you think you are infected, please read below for assistance with cleaning your system.IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.IF YOU WOULD LIKE EXPERT ASSISTANCE WITH MALWARE REMOVAL, PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.OPTION 2: For paid users of MBAM PRO, free, one-on-one, expert assistance from MBAM support.OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.OPTION 1:Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.Then please start a new post in the Malware Removal Forum.When starting your new post, please note the following:Please do NOT post in a topic started by someone else, even if their problem sounds similar.Please COPY/PASTE the requested logs into your post, rather than attaching them.Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.Please do NOT "bump" your topic or reply back to it for at least 48 hours.Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.OPTION 2:If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them here.OPTION 3:If you prefer the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to the Premium Support site here.Please be patient – someone will assist you as soon as possible.Thank you very much,daledoc1PS Please use the "Reply to this Topic" or "More Reply Options" buttons (instead of the “Quote” and “MultiQuote” buttons) when replying here & at the other forums. That will make your topic easier to follow. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now