Malware and Backdoors.. Need assistance.

[nooba]

Hey, ive run out of options and Im not sure what to do next .exe's are showing up in my c drive.

here is the latest Malwarebytes' scan log.

Malwarebytes' Anti-Malware 1.44

Database version: 3745

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

17/02/2010 12:16:34 AM

mbam-log-2010-02-17 (00-16-34).txt

Scan type: Full Scan (C:\|)

Objects scanned: 308933

Time elapsed: 1 hour(s), 12 minute(s), 47 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 13

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Qoobox\Quarantine\C\jvbfrms.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\ydbkaxo.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\Documents and Settings\Winter\Application Data\AntiVirus Plus\AntiVirus Plus.70700.dll.vir (Rogue.AntivirusPlus) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\kbdsock.dll.vir (Backdoor.Bot) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\mshlps.dll.vir (Backdoor.Bot) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\net.net.vir (Trojan.Downloader) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\smss32.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\winlogon32.exe.vir (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Qoobox\Quarantine\C\WINDOWS\system32\spool\prtprocs\w32x86\0000228e.tmp.vir (Rootkit.TDSS) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP1\A0002264.dll (Rogue.AntivirusPlus) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP16\A0008750.exe (Trojan.Bredolab) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP16\A0008753.exe (Rogue.Security.Tool) -> Quarantined and deleted successfully.

C:\System Volume Information\_restore{0346B5B9-80D9-4E1E-A17D-541A262BD4D6}\RP17\A0008835.exe (Rogue.Security.Tool) -> Quarantined and deleted successfully.

[Maurice Naggar]

Hello,

Please tell me if you had a malware infection in the past (as I'm sure you did --- the log shows that) and on which forum you had guided help?

The items listed in the log are not active. But there was left on your system a quarantine folder from Combofix.

Please reply to me here, and I'll help you.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!