Jump to content

How to ensure the system is clean after MBAM run?


Recommended Posts

Hi,

first of all: Great software! After my anti-virus didn't detect anything your's did it!

So last week MBAM removed the following things on my PC:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\forceclassiccontrolpanel (Hijack.ControlPanelStyle) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.

C:\RECYCLER\S-1-5-21-7460003579-4115401749-178376251-4799\dllhost.exe (Worm.Autorun.B) -> Delete on reboot.

After this I also cleaned the quarantine - sadly for you (for further analyses). After a re-scan nothing more was found.

The symptom of this worm, virus whatever was that on every startup and after connecting a USB drive a setup program appear. On the USB device it renamed the recycler to "usbconfig" and created an autorun.inf with this content:

#################################################

[autorun

;?\mW

:jmp0

;w

Link to post
Share on other sites

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.