Trojan Dropper or 1.exe help

[skipundo]

Here is my log file. It promises to delete but it keeps coming back.

Malwarebytes' Anti-Malware 1.41

Database version: 2851

Windows 5.1.2600 Service Pack 2

9/23/2009 2:03:31 PM

mbam-log-2009-09-23 (14-03-31).txt

Scan type: Quick Scan

Objects scanned: 203201

Time elapsed: 4 minute(s), 46 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 1

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 3

Folders Infected: 0

Files Infected: 28

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

c:\WINDOWS\system32\admdll.dll (PUP.RemoteAdmin) -> Delete on reboot.

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallpaper (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\Homepage (Hijack.Homepage) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

c:\WINDOWS\system32\admdll.dll (PUP.RemoteAdmin) -> Delete on reboot.

C:\WINDOWS\system32\raddrv.dll (PUP.RemoteAdmin) -> Quarantined and deleted successfully.

C:\Program Files\1\1.exe (Trojan.Agent) -> Delete on reboot.

C:\Program Files\2\2.exe (Trojan.Agent) -> Delete on reboot.

C:\1.exe (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\System32\1.exe (Trojan.Agent) -> Delete on reboot.

C:\WINDOWS\System32\1\1.exe (Backdoor.Bifrose) -> Delete on reboot.

C:\WINDOWS\System32\2.exe (Trojan.Agent) -> Delete on reboot.

C:\Documents and Settings\Administrator\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\All Users\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\bradenb\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\brentm-ops\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\brojames\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\corhect\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\Default User\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\e65146\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\johnir-ops\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\LocalService\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\NetworkService\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\samv-ops\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\smsadmin\1.exe (Trojan.Dropper) -> Delete on reboot.

C:\Documents and Settings\winstond-ops\1.exe (Trojan.Dropper) -> Delete on reboot.

[AdvancedSetup]

I'm sorry for the long delay but the site has been swamped with more requests for help than we can handle in a short period of time.

If you still need help please let me know, otherwise I'll go ahead and close your post as you've probably moved on by now.

[AdvancedSetup]

Okay, well since it looks like you have moved on I'll go ahead and close this post now.

Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.