Jump to content

Malwarebytes found a Trojan but doesn't remove it

Recommended Posts

I ran a flash scan and got a message indicating that a trojan was found. I clicked the button to remove it, and received a log similar to this one:

Malwarebytes Anti-Malware (PRO)


Database version: v2012.06.14.01

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 9.0.8112.16421

XXXX :: XXXXX [administrator]

Protection: Enabled

6/13/2012 7:51:59 PM

mbam-log-2012-06-13 (19-51-59).txt

Scan type: Full scan

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

Scan options disabled: P2P

Objects scanned: 358668

Time elapsed: 31 minute(s), 2 second(s)


Registry Keys Detected: 1

HKCU\Software\Microsoft\Windows\CurrentVersion\Run (Trojan.Agent) -> Quarantined and deleted successfully.



A dialog that purported to be from Malwarebytes then popped up with this message:

URGENT! You must restart your system to remove all active threats properly. Click Yes to restart now.

Upon clicking 'Yes' the system rebooted. I then ran a flash scan and came up with the same problem. I ran a full scan hoping that more files would be found but the same single threat popped up again. I ran dds.scr per your instructions and attached the Attach.txt and DDS.txt files as suggested.

Link to post
Share on other sites

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.