LoneWolf Posted September 19, 2007 ID:8349 Share Posted September 19, 2007 Malwarebytes' Anti-Malware Version 0.68Database version: 152This logfile was saved after the removal process completed.Scan type: Quick ScanObjects scanned: 16728Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 44Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 2I had to do a restore and believe some bad things got back on my pc cause of this. All in quantine , should i permenently remove ? Thanks.Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\Typelib\{2d5e2d34-bed5-4b9f-9793-a31e26e6806e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0a95be2d-1543-46be-ad6d-18653034bf87} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0b8edb8d-4575-4942-9c34-55591e415909} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{278ead7a-2a45-4d4e-acb4-a1a4ad9bb54b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2b539d9c-127a-4f10-855f-ef31c83d2007} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2d91877a-468c-4802-8cd7-21f6bf776790} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3120a5e4-552d-4edf-8c48-70c5d5ff22d2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{31ce2164-4d5c-4508-bca7-b10e11d08e6b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{359a062f-cda8-4a9c-9b28-588446d35098} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{35efad55-134a-47bf-912a-44a9d9fd556f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{38f95b22-32bf-4378-b3ec-47b2c09de1f5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3d177ba8-bf8c-45e2-8ca2-20aca6269a68} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3e1392bb-3b66-4a39-bbd0-259fc2bdc979} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{45128c11-a7e5-46d2-a164-3d1273e92c44} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{47146231-b550-4b13-b9e7-4257f740f39d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{5c61669e-f0ce-4126-b365-316588e6228f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{60e5f55e-236f-422d-a5f9-560f1778ccd4} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{62b6a513-3764-42cd-8410-9b81e8dff135} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6a5d680a-8f9f-4752-a056-2c0273f60b4e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6ccd925e-e833-4be3-a62e-d3c8838c5d6d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6cdd1f89-fc3b-401c-b1f1-932c48f45eb5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{78412eb9-e06b-4484-bc85-0b1594f6e23a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{7ee495f3-345b-4cc1-aab7-a255ed85eed2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{82b58fcb-73f3-46dc-a52d-74d3fe359702} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{86797248-1a4e-41d0-a0c3-2175a36b3d0e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{919df860-d321-4d02-ac3d-1c25efae551a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{aa6ccb5d-0f97-4a37-a077-8b49fb5bc60d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c18d120c-b7ab-4499-8bdc-0cd2bd0861fd} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c1dfd382-e253-434d-b22d-2e47233b6147} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cacb61e0-aeea-404d-88e1-7f3bca8b8726} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cd5b9523-6eaf-4d63-8fe8-c081c51d1673} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d45b0772-5801-4e61-9cba-84120557a4d7} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d7e6fb7c-a22f-4a9d-a89d-653d1aa37324} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d80ac53d-e102-4a55-a265-529a626515e5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{dbcad616-bfd4-4c72-8d87-c5926921d378} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e16f1874-c5b1-4400-a9f0-08e7fd4d3f8c} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e3ec74bb-5522-462d-a00f-2728c53fca04} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ebb4eba9-d546-4c85-a05a-167bf875fb83} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f71d2854-2609-4a63-b4bf-bf2ba61a61cf} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f7919641-3978-4668-8388-7310329c800e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f961ce9d-ae2b-4cfb-887c-3a055ff685c9} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ffbbdece-4363-4b4d-b35e-39eff228c723} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{33564d57-0000-0010-8000-00aa00389b71} (Rogue.WinAntivirus) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\MSWinsock.Winsock (BackDoor.Ciadoor) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Documents and Settings\Cindy\Local Settings\Temp\TMP1.tmp (Malware.Trace) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Local Settings\Temp\tmp16.tmp (Malware.Trace) -> Quarantined and deleted successfully. Link to post Share on other sites More sharing options...
Root Admin RubbeR DuckY Posted September 20, 2007 Root Admin ID:8361 Share Posted September 20, 2007 No, certain ones are false positives. Wait for Bruce's opinion. Link to post Share on other sites More sharing options...
nosirrah Posted September 20, 2007 ID:8365 Share Posted September 20, 2007 Give it about 10 minutes , update and scan again . Link to post Share on other sites More sharing options...
nosirrah Posted September 20, 2007 ID:8366 Share Posted September 20, 2007 I think I have them all now . Link to post Share on other sites More sharing options...
LoneWolf Posted September 20, 2007 Author ID:8368 Share Posted September 20, 2007 Malwarebytes' Anti-Malware Version 0.68Database version: 153This logfile was saved after the removal process completed.Scan type: Quick ScanObjects scanned: 16774Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 42Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 29Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\Typelib\{2d5e2d34-bed5-4b9f-9793-a31e26e6806e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0a95be2d-1543-46be-ad6d-18653034bf87} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0b8edb8d-4575-4942-9c34-55591e415909} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{278ead7a-2a45-4d4e-acb4-a1a4ad9bb54b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2b539d9c-127a-4f10-855f-ef31c83d2007} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2d91877a-468c-4802-8cd7-21f6bf776790} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3120a5e4-552d-4edf-8c48-70c5d5ff22d2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{31ce2164-4d5c-4508-bca7-b10e11d08e6b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{359a062f-cda8-4a9c-9b28-588446d35098} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{35efad55-134a-47bf-912a-44a9d9fd556f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{38f95b22-32bf-4378-b3ec-47b2c09de1f5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3d177ba8-bf8c-45e2-8ca2-20aca6269a68} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3e1392bb-3b66-4a39-bbd0-259fc2bdc979} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{45128c11-a7e5-46d2-a164-3d1273e92c44} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{47146231-b550-4b13-b9e7-4257f740f39d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{5c61669e-f0ce-4126-b365-316588e6228f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{60e5f55e-236f-422d-a5f9-560f1778ccd4} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{62b6a513-3764-42cd-8410-9b81e8dff135} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6a5d680a-8f9f-4752-a056-2c0273f60b4e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6ccd925e-e833-4be3-a62e-d3c8838c5d6d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6cdd1f89-fc3b-401c-b1f1-932c48f45eb5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{78412eb9-e06b-4484-bc85-0b1594f6e23a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{7ee495f3-345b-4cc1-aab7-a255ed85eed2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{82b58fcb-73f3-46dc-a52d-74d3fe359702} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{86797248-1a4e-41d0-a0c3-2175a36b3d0e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{919df860-d321-4d02-ac3d-1c25efae551a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{aa6ccb5d-0f97-4a37-a077-8b49fb5bc60d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c18d120c-b7ab-4499-8bdc-0cd2bd0861fd} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c1dfd382-e253-434d-b22d-2e47233b6147} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cacb61e0-aeea-404d-88e1-7f3bca8b8726} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cd5b9523-6eaf-4d63-8fe8-c081c51d1673} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d45b0772-5801-4e61-9cba-84120557a4d7} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d7e6fb7c-a22f-4a9d-a89d-653d1aa37324} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d80ac53d-e102-4a55-a265-529a626515e5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{dbcad616-bfd4-4c72-8d87-c5926921d378} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e16f1874-c5b1-4400-a9f0-08e7fd4d3f8c} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e3ec74bb-5522-462d-a00f-2728c53fca04} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ebb4eba9-d546-4c85-a05a-167bf875fb83} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f71d2854-2609-4a63-b4bf-bf2ba61a61cf} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f7919641-3978-4668-8388-7310329c800e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f961ce9d-ae2b-4cfb-887c-3a055ff685c9} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ffbbdece-4363-4b4d-b35e-39eff228c723} (Adware.Hotbar) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\iTunes.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Logitech ImageStudio.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\MSN Explorer.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\QuickTime Player.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Sharks, Terrors of the Deep 2.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Joe\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Messenger.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\MSN Explorer.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Application Data\Microsoft\Internet Explorer\Quick Launch\MSN Explorer.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\All Users\Application Data\Microsoft\Internet Explorer\Quick Launch\Yahoo! Mail.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Administrator.BEAR\Application Data\Microsoft\Internet Explorer\Quick Launch\DESKTOP.INI (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Administrator.BEAR\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Administrator.BEAR\Application Data\Microsoft\Internet Explorer\Quick Launch\MSN Explorer.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Administrator.BEAR\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Administrator.BEAR\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk (Rogue.TrustedProtection) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Local Settings\Temp\TMP1.tmp (Malware.Trace) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Local Settings\Temp\tmp16.tmp (Malware.Trace) -> Quarantined and deleted successfully. Link to post Share on other sites More sharing options...
lurkingatu2 Posted September 20, 2007 ID:8369 Share Posted September 20, 2007 hello i got some of these also Malwarebytes' Anti-Malware Version 0.68Database version: 153This logfile was saved before the removal process.Scan type: Full Scan (C:\|)Objects scanned: 31779Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 6Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\desktop.ini (Rogue.TrustedProtection) -> No action taken.C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk (Rogue.TrustedProtection) -> No action taken.C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk (Rogue.TrustedProtection) -> No action taken.C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\MSN.lnk (Rogue.TrustedProtection) -> No action taken.C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\Show Desktop.scf (Rogue.TrustedProtection) -> No action taken.C:\Documents and Settings\x86master\Application Data\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk (Rogue.TrustedProtection) -> No action taken. Link to post Share on other sites More sharing options...
nosirrah Posted September 20, 2007 ID:8373 Share Posted September 20, 2007 I fixed it Link to post Share on other sites More sharing options...
LoneWolf Posted September 20, 2007 Author ID:8375 Share Posted September 20, 2007 Malwarebytes' Anti-Malware Version 0.68Database version: 154This logfile was saved after the removal process completed.Scan type: Quick ScanObjects scanned: 16781Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 42Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 2Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\Typelib\{2d5e2d34-bed5-4b9f-9793-a31e26e6806e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0a95be2d-1543-46be-ad6d-18653034bf87} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{0b8edb8d-4575-4942-9c34-55591e415909} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{278ead7a-2a45-4d4e-acb4-a1a4ad9bb54b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2b539d9c-127a-4f10-855f-ef31c83d2007} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{2d91877a-468c-4802-8cd7-21f6bf776790} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3120a5e4-552d-4edf-8c48-70c5d5ff22d2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{31ce2164-4d5c-4508-bca7-b10e11d08e6b} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{359a062f-cda8-4a9c-9b28-588446d35098} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{35efad55-134a-47bf-912a-44a9d9fd556f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{38f95b22-32bf-4378-b3ec-47b2c09de1f5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3d177ba8-bf8c-45e2-8ca2-20aca6269a68} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{3e1392bb-3b66-4a39-bbd0-259fc2bdc979} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{45128c11-a7e5-46d2-a164-3d1273e92c44} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{47146231-b550-4b13-b9e7-4257f740f39d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{5c61669e-f0ce-4126-b365-316588e6228f} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{60e5f55e-236f-422d-a5f9-560f1778ccd4} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{62b6a513-3764-42cd-8410-9b81e8dff135} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6a5d680a-8f9f-4752-a056-2c0273f60b4e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6ccd925e-e833-4be3-a62e-d3c8838c5d6d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{6cdd1f89-fc3b-401c-b1f1-932c48f45eb5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{78412eb9-e06b-4484-bc85-0b1594f6e23a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{7ee495f3-345b-4cc1-aab7-a255ed85eed2} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{82b58fcb-73f3-46dc-a52d-74d3fe359702} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{86797248-1a4e-41d0-a0c3-2175a36b3d0e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{919df860-d321-4d02-ac3d-1c25efae551a} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{aa6ccb5d-0f97-4a37-a077-8b49fb5bc60d} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c18d120c-b7ab-4499-8bdc-0cd2bd0861fd} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{c1dfd382-e253-434d-b22d-2e47233b6147} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cacb61e0-aeea-404d-88e1-7f3bca8b8726} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{cd5b9523-6eaf-4d63-8fe8-c081c51d1673} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d45b0772-5801-4e61-9cba-84120557a4d7} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d7e6fb7c-a22f-4a9d-a89d-653d1aa37324} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{d80ac53d-e102-4a55-a265-529a626515e5} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{dbcad616-bfd4-4c72-8d87-c5926921d378} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e16f1874-c5b1-4400-a9f0-08e7fd4d3f8c} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{e3ec74bb-5522-462d-a00f-2728c53fca04} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ebb4eba9-d546-4c85-a05a-167bf875fb83} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f71d2854-2609-4a63-b4bf-bf2ba61a61cf} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f7919641-3978-4668-8388-7310329c800e} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{f961ce9d-ae2b-4cfb-887c-3a055ff685c9} (Adware.Hotbar) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\Interface\{ffbbdece-4363-4b4d-b35e-39eff228c723} (Adware.Hotbar) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Documents and Settings\Cindy\Local Settings\Temp\TMP1.tmp (Malware.Trace) -> Quarantined and deleted successfully.C:\Documents and Settings\Cindy\Local Settings\Temp\tmp16.tmp (Malware.Trace) -> Quarantined and deleted successfully. Link to post Share on other sites More sharing options...
LoneWolf Posted September 20, 2007 Author ID:8378 Share Posted September 20, 2007 So I would be assumeing correctly that the last scan has no FP's and is safe to permanently delete ? Link to post Share on other sites More sharing options...
Recommended Posts