Jump to content

Rootkit Agent V


Recommended Posts

Hey, first - I am not slow but Norvegian :D

I cant delete this Trojan - It was find inn this place :

C: WINDOWS system 32 drivers wadv07nt.sys

I have search in the forum but couldn`t find a solution.

Her is the log file :

Malwarebytes' Anti-Malware 1.35

Databaseversjon: 1919

Windows 5.1.2600 Service Pack 3

30.03.2009 20:08:45

mbam-log-2009-03-30 (20-08-05).txt

Skanntype: Rask Skann

Objekter skannet: 77496

Tid tilbakelagt: 1 minute(s), 44 second(s)

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registern

Link to post
Share on other sites

Hi,

Please restore it from quarantine.

This issue has been fixed, so open mbam > update tab > check for updates.

Let mbam update.

Then rescan again and let me know if that solved your issue.

Thank You :) - it works on safe modus and it was set in karantene - can I delete it there ?

If I can ask one more question :

Her is my new log file :

Malwarebytes' Anti-Malware 1.35

Databaseversjon: 1924

Windows 5.1.2600 Service Pack 3

31.03.2009 16:41:36

mbam-log-2009-03-31 (16-41-22).txt

Skanntype: Rask Skann

Objekter skannet: 77527

Tid tilbakelagt: 1 minute(s), 43 second(s)

Minneprosesser infisert: 0

Minnemoduler infisert: 0

Registern

Link to post
Share on other sites

  • Staff

Hi,

If you select above ones, then Mbam won't delete it, but will restore its values to default again. In this case, when it's restored to default, you'll get a notification when your Antivirus, Firewall and Updates are disabled.

The choice is yours whether you want mbam restore it to default security settings (recommended) or not. :)

And in this place , there is a lot of security companies ?? ----> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Security Center.
Yes, that's normal so Windows Security center recognises them if installed :)
Link to post
Share on other sites

  • Staff

Since this issue appears resolved ... this Topic is closed.

If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.