Jump to content

Malware and Backdoors.. Need assistance.


Recommended Posts

Hey, ive run out of options and Im not sure what to do next .exe's are showing up in my c drive.

here is the latest Malwarebytes' scan log.

Malwarebytes' Anti-Malware 1.44

Database version: 3745

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

17/02/2010 12:16:34 AM

mbam-log-2010-02-17 (00-16-34).txt

Scan type: Full Scan (C:\|)

Objects scanned: 308933

Time elapsed: 1 hour(s), 12 minute(s), 47 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 13

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Qoobox\Quarantine\C\jvbfrms.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\ydbkaxo.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\Documents and Settings\Winter\Application Data\AntiVirus Plus\AntiVirus Plus.70700.dll.vir (Rogue.AntivirusPlus) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\kbdsock.dll.vir (Backdoor.Bot) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\mshlps.dll.vir (Backdoor.Bot) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\net.net.vir (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\smss32.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\winlogon32.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\0000228e.tmp.vir (Rootkit.TDSS) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP1\A0002264.dll (Rogue.AntivirusPlus) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP16\A0008750.exe (Trojan.Bredolab) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP16\A0008753.exe (Rogue.Security.Tool) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP17\A0008835.exe (Rogue.Security.Tool) -> Quarantined and deleted successfully.

Link to post
Share on other sites

  • 3 weeks later...


Please tell me if you had a malware infection in the past (as I'm sure you did --- the log shows that) and on which forum you had guided help?

The items listed in the log are not active. But there was left on your system a quarantine folder from Combofix.

Please reply to me here, and I'll help you.

Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.