JonPaulOnLine Posted October 1, 2009 ID:136279 Share Posted October 1, 2009 This should be fixed now .But I still have an issueMalwarebytes' Anti-Malware 1.41Database version: 2882Windows 5.1.2600 Service Pack 310/1/2009 7:27:11 AMmbam-log-2009-10-01 (07-26-55).txtScan type: Quick ScanObjects scanned: 92375Time elapsed: 6 minute(s), 48 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 9Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136284 Share Posted October 1, 2009 This should be fixed now .No it isn't unfortunately. After updating the database I get the same errors.... Link to post Share on other sites More sharing options...
Guest Posted October 1, 2009 ID:136287 Share Posted October 1, 2009 Dear Forum,Just updated MBAM to database version 2882. Unfortunately it wasn't fixed for the scan on my system either.Should we start to worry now? Newbi3Malwarebytes' Anti-Malware 1.41Database version: 2882Windows 5.1.2600 Service Pack 31/10/2009 1:18:44 PMmbam-log-2009-10-01 (13-18-41).txtScan type: Quick ScanObjects scanned: 112195Time elapsed: 4 minute(s), 57 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\TypeLib\{90f3d7b3-92e7-44ba-b444-6a8e2a3bc375} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\Interface\{4921908c-7090-4d37-a6b3-fc447f08378a} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\Interface\{750fc67c-0311-4391-9864-a2efed49bd28} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\Interface\{f3fc950c-7583-4377-bad8-efbeaa33273c} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739]Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922069686919676822142521252614212566701425261871142617682567197118267122239413014739] Link to post Share on other sites More sharing options...
Hiwatt Posted October 1, 2009 ID:136289 Share Posted October 1, 2009 I also have these.I just updated this morning and my quick scan "found" 9 entries for trojan agents.I panicked at first and then came here to see if anyone else had the same.By the way I don't have avast installed so it can't be related to avast. Link to post Share on other sites More sharing options...
nmb Posted October 1, 2009 ID:136290 Share Posted October 1, 2009 I still have the same detections after updating 2882. here is the new developer log file :mbam_log_2009_10_01__17_49_18_.txt Link to post Share on other sites More sharing options...
login123 Posted October 1, 2009 ID:136292 Share Posted October 1, 2009 Yep, me too, newest update. Stopped the scan when they were found. Hope this helps. Malwarebytes' Anti-Malware 1.41Database version: 2882Windows 5.1.2600 Service Pack 310/1/2009 7:53:44 AMmbam-log-2009-10-01 (07-53-34).txtScan type: Full Scan (C:\|)Objects scanned: 24711Time elapsed: 4 minute(s), 34 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\TypeLib\{90f3d7b3-92e7-44ba-b444-6a8e2a3bc375} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{4921908c-7090-4d37-a6b3-fc447f08378a} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{750fc67c-0311-4391-9864-a2efed49bd28} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{f3fc950c-7583-4377-bad8-efbeaa33273c} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\windows\system32\actskin4.ocx (Trojan.Agent) -> No action taken.Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. Link to post Share on other sites More sharing options...
nosirrah Posted October 1, 2009 ID:136294 Share Posted October 1, 2009 We are sorry about the mix up on this one , please confirm that 2883 has this resolved . Link to post Share on other sites More sharing options...
nmb Posted October 1, 2009 ID:136297 Share Posted October 1, 2009 nope still showing the same thing.mbam_log_2009_10_01__18_04_53_.txt Link to post Share on other sites More sharing options...
login123 Posted October 1, 2009 ID:136298 Share Posted October 1, 2009 Same. Malwarebytes' Anti-Malware 1.41Database version: 2883...Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\TypeLib\{90f3d7b3-92e7-44ba-b444-6a8e2a3bc375} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{4921908c-7090-4d37-a6b3-fc447f08378a} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{750fc67c-0311-4391-9864-a2efed49bd28} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{f3fc950c-7583-4377-bad8-efbeaa33273c} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\windows\system32\actskin4.ocx (Trojan.Agent) -> No action taken.Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. Link to post Share on other sites More sharing options...
Guest Posted October 1, 2009 ID:136300 Share Posted October 1, 2009 No change here.Should we start to worry?Malwarebytes' Anti-Malware 1.41Database version: 2883Windows 5.1.2600 Service Pack 31/10/2009 1:48:03 PMmbam-log-2009-10-01 (13-47-59).txtScan type: Quick ScanObjects scanned: 112082Time elapsed: 5 minute(s), 7 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\TypeLib\{90f3d7b3-92e7-44ba-b444-6a8e2a3bc375} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\Interface\{4921908c-7090-4d37-a6b3-fc447f08378a} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\Interface\{750fc67c-0311-4391-9864-a2efed49bd28} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\Interface\{f3fc950c-7583-4377-bad8-efbeaa33273c} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]Registry Values Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739] Link to post Share on other sites More sharing options...
nmb Posted October 1, 2009 ID:136303 Share Posted October 1, 2009 No change here.Should we start to worry?I think we should give them some time. Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136304 Share Posted October 1, 2009 We are sorry about the mix up on this one , please confirm that 2883 has this resolved .nope, it didn't. still the same 19 "trojans".... Link to post Share on other sites More sharing options...
JonPaulOnLine Posted October 1, 2009 ID:136306 Share Posted October 1, 2009 Following update #2883I am down from 10 to 8 Registry Keys Infected--------------------------------------------------------------Malwarebytes' Anti-Malware 1.41Database version: 2883Windows 5.1.2600 Service Pack 310/1/2009 9:10:27 AMmbam-log-2009-10-01 (09-10-22).txtScan type: Quick ScanObjects scanned: 92541Time elapsed: 5 minute(s), 36 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 8Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
leofelix Posted October 1, 2009 ID:136308 Share Posted October 1, 2009 Hi there,same hereMalwarebytes' Anti-Malware 1.41 (Italian)Versione del database: 2883Windows 5.1.2600 Service Pack 301/10/2009 15.17.50mbam-log-2009-10-01 (15-17-47).txtTipo di scansione: Scansione rapidaElementi scansionati: 109922Tempo trascorso: 4 minute(s), 43 second(s)Processi delle memoria infetti: 0Moduli della memoria infetti: 0Chiavi di registro infette: 8Valori di registro infetti: 0Elementi dato del registro infetti: 0Cartelle infette: 0File infetti: 0Processi delle memoria infetti:(Nessun elemento malevolo rilevato)Moduli della memoria infetti:(Nessun elemento malevolo rilevato)Chiavi di registro infette:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Valori di registro infetti:(Nessun elemento malevolo rilevato)Elementi dato del registro infetti:(Nessun elemento malevolo rilevato)Cartelle infette:(Nessun elemento malevolo rilevato)File infetti:(Nessun elemento malevolo rilevato)----------MSE 1.0 found no malwareSUPER AntiSpyware free found no malwareCheers Link to post Share on other sites More sharing options...
Tengil Posted October 1, 2009 ID:136319 Share Posted October 1, 2009 Greetings!The same update that caused the actskin4.ocx (Trojan.Agent) alerts also caused a NTSVC.OCX (Trojan.BHO) alert for meMalwarebytes' Anti-Malware 1.41Database version: 2883Windows 5.1.2600 Service Pack 32009-10-01 15:39:51mbam-log-2009-10-01 (15-39-32).txtScan type: Quick ScanObjects scanned: 113404Time elapsed: 6 minute(s), 18 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 24Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 2Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\ntservice.control.1 (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\TypeLib\{e7bc34a0-ba86-11cf-84b1-cbc2da68bf6c} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\Interface\{e7bc34a1-ba86-11cf-84b1-cbc2da68bf6c} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\Interface\{e7bc34a2-ba86-11cf-84b1-cbc2da68bf6c} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{e7bc34a3-ba86-11cf-84b1-cbc2da68bf6c} (Trojan.BHO) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\TypeLib\{90f3d7b3-92e7-44ba-b444-6a8e2a3bc375} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{4921908c-7090-4d37-a6b3-fc447f08378a} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{750fc67c-0311-4391-9864-a2efed49bd28} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\Interface\{f3fc950c-7583-4377-bad8-efbeaa33273c} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{30f0d9ce-caf3-70a5-aebc-fef714d1cac6} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d2f7114a-c495-6889-0a60-630c480d9f91} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\NTSVC.OCX (Trojan.BHO) -> No action taken.C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136324 Share Posted October 1, 2009 nope still showing the same thing.I compared our logs - mine is identical to yours. Link to post Share on other sites More sharing options...
khakiman Posted October 1, 2009 ID:136328 Share Posted October 1, 2009 I am getting a similar detection -- 9 (!) registry key infected whereas yesterday evening there were none. Is anyone at Malwarebytes available to comment on this? There seems to be an awful lot of us having this problem.Malwarebytes' Anti-Malware 1.41Database version: 2882Windows 5.1.2600 Service Pack 310/1/2009 8:36:02 AMmbam-log-2009-10-01 (08-36-02).txtScan type: Full Scan (C:\|)Objects scanned: 139380Time elapsed: 45 minute(s), 13 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 9Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> Quarantined and deleted successfully.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
JonPaulOnLine Posted October 1, 2009 ID:136372 Share Posted October 1, 2009 I Updated to Database version: 2884and continue to display Registry Keys Infected: 8-------------------------------------------------------------- Malwarebytes' Anti-Malware 1.41Database version: 2884Windows 5.1.2600 Service Pack 310/1/2009 11:16:28 AMmbam-log-2009-10-01 (11-16-23).txtScan type: Quick ScanObjects scanned: 92382Time elapsed: 5 minute(s), 53 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 8Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken.HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136379 Share Posted October 1, 2009 database 2884 - still getting the same stuff :Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1No need to post details - they have been posted several times already ;o((( Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136405 Share Posted October 1, 2009 Database 1885. Nothing changed.Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 17Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected Link to post Share on other sites More sharing options...
toja Posted October 1, 2009 ID:136407 Share Posted October 1, 2009 Ooops... database 2885 of course. I must be getting nervous ;o)) Link to post Share on other sites More sharing options...
ourstanley Posted October 1, 2009 ID:136410 Share Posted October 1, 2009 Mmmm the next update reduced the infected keys from 17 to 15 on my machine.Malwarebytes' Anti-Malware 1.41Database version: 2885Windows 6.0.6002 Service Pack 201/10/2009 16:59:18mbam-log-2009-10-01 (16-59-18).txtScan type: Quick ScanObjects scanned: 82039Time elapsed: 2 minute(s), 51 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 15Registry Values Infected: 1Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1 Link to post Share on other sites More sharing options...
avragorn Posted October 1, 2009 ID:136414 Share Posted October 1, 2009 Hello At first, sorry for posting a similar thread I updated MBAM, with the database 2885 and it still finds the same infections :01/10/2009 18:19:03mbam-log-2009-10-01 (18-19-00).txtScan type: Quick ScanObjects scanned: 105297Time elapsed: 9 minute(s), 12 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 13Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 1Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\CLSID\{52c01a76-19e2-4a50-ae8a-38ffbccf9182} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{0944d16c-d0f4-4389-982a-a085595a9eb3} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{3831331e-0d11-4716-871d-68f3b11d23c9} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{3dcd2bc5-8489-48ae-891f-90c8b2f19f56} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{5954ea75-9bfa-461a-bd34-cea3a861ff19} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{762ec429-1a5d-4ab8-844a-9a552e1241da} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{a506ef88-9efc-4522-bfe1-a8e886a64d80} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{a5704c37-40da-49ef-904b-97e5f5f9b1c5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{b87799af-2ce9-4daa-93cf-65f002035369} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{bbc73c94-337c-43cc-b52c-31eb9fa34013} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{c406f816-318d-4f7d-81cb-ba93ca7b70d5} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{d502d4a3-03e6-4eae-a14e-69606ca63430} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]HKEY_CLASSES_ROOT\CLSID\{ec22770d-3343-4c56-8a8d-3e560475f655} (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739]Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\WINDOWS\system32\actskin4.ocx (Trojan.Agent) -> No action taken. [40544237305383807566791534727079851301922219681718662423141826701914216622171466702566142025717167686871261825199413014739] Link to post Share on other sites More sharing options...
Corona Posted October 1, 2009 ID:136416 Share Posted October 1, 2009 Yeah, I get the 19 trojans too after I updated an ran about 20 minutes ago. I'm not touching them. Link to post Share on other sites More sharing options...
sUBs Posted October 1, 2009 ID:136420 Share Posted October 1, 2009 Please update mbam and perform another scan to verify if this has been fixed. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now