Charles in Cleve Posted March 23, 2009 ID:66702 Share Posted March 23, 2009 Malwarebytes' Anti-Malware 1.34Database version: 1884Windows 5.2.3790 Service Pack 23/22/2009 8:33:39 PMmbam-log-2009-03-22 (20-32-49).txtScan type: Quick ScanObjects scanned: 68671Time elapsed: 50 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 2Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: c:\windows\system32\userinit.exe -> No action taken.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit (Trojan.Agent) -> Data: system32\userinit.exe -> No action taken.Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
nosirrah Posted March 23, 2009 ID:66709 Share Posted March 23, 2009 Your userinit.exe file has been replaced by a malware version , I will get someone to assist you . Link to post Share on other sites More sharing options...
sjpritch25 Posted March 23, 2009 ID:66714 Share Posted March 23, 2009 Welcome to Malwarebytes !We will begin with ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix * Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Please include the C:\ComboFix.txt in your next reply for further review. Link to post Share on other sites More sharing options...
Staff TeMerc Posted March 23, 2009 Staff ID:66727 Share Posted March 23, 2009 I've moved this topic to the proper forum Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 2, 2009 Root Admin ID:69567 Share Posted April 2, 2009 Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you. Link to post Share on other sites More sharing options...
Recommended Posts