Jump to content

Will not remove issues after Reboot


Recommended Posts

Need help removing false security alert-

Here is the list of things that have transpired:

Malware had disabled my internet connection, anit-virus software, and Malwarebytes software.

I continue to receive a false "Windows Security Center" pop-up.

The computer will boot in safe mode but only in the "Restore" mode.

I managed to reload Malwarebytes from my laptop- (had to rename the .exe file)-

Malwarebytes finds 5 to 8 issues and indicates that they will be removed on reboot- (Does not happen)-

Here is the following log file:

Malwarebytes' Anti-Malware 1.41

Database version: 2775

Windows 5.1.2600 Service Pack 3

10/27/2009 5:48:26 PM

mbam-log-2009-10-27 (17-48-26).txt

Scan type: Quick Scan

Objects scanned: 99373

Time elapsed: 4 minute(s), 42 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 1

Registry Data Items Infected: 3

Folders Infected: 0

Files Infected: 1

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\WINID (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Documents and Settings\Computer User\Local Settings\Temp\nsrbgxod.bak (Trojan.Agent) -> Delete on reboot.

Thank you for any help that can be given-

Robert-

Link to post
Share on other sites

Hello Data, and welcome to Malwarebytes.org

We don't work on malware removal in the general forums. I see you have a duplicate thread in the HJT forum. Please be patient and an expert helper will assist you when one becomes available. That may be a while. They are very busy in there. The posts in just the last 48 hours stretch back 7 pages or so.

I'm closing this post to eliminate confusion.

Thanks

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.