Delete on Reboot(Always)

[marcintes]

Malwarebytes' Anti-Malware 1.34

Database version: 1800

Windows 5.1.2600 Service Pack 3

2/25/2009 12:27:03 PM

mbam-log-2009-02-25 (12-27-03).txt

Scan type: Quick Scan

Objects scanned: 58433

Time elapsed: 4 minute(s), 31 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 2

Registry Values Infected: 4

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ea4f3845-929b-4e9a-abb0-07d44d83b336} (Trojan.BHO.H) -> Delete on reboot.

HKEY_CLASSES_ROOT\CLSID\{ea4f3845-929b-4e9a-abb0-07d44d83b336} (Trojan.BHO.H) -> Delete on reboot.

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> Delete on reboot.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> Delete on reboot.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\system32\ostkl.dll (Trojan.BHO.H) -> Delete on reboot.

C:\Documents and Settings\intes\Local Settings\Temp\vtccmtku.dat (Rootkit.Agent) -> Delete on reboot.

What does this mean.... are they really Trojans?

It keeps on saying Delete on reboot after scans.

But after reboot and i scan again.

They are still detected.. and still there.

Same Log Report over and over again.

[marcintes]

any help pls

[Fatdcuk]

Hi and welcome to MBAM forums,

They are not F/P's and you have Rootkit Sentinel currently active on the computer.

Please start a fresh topic on the HJT help forum and i will assist you from there

http://www.malwarebytes.org/forums/index.php?showforum=7