Swan Posted February 17, 2010 ID:201565 Share Posted February 17, 2010 Hi,I'm getting the attached reports of backdoor.bot and Trojan.agent in the registry coming up repeatedly, even after selecting for deletion and rebooting the PC.Malwarebytes Anti-malware has not found any other indication of malware on the PC in question - the PC was rebuilt from scratch with a total re-install of XP a few months back following a rootkit infection, and there are no other indicators that the PC is misbehaving in any way at all.Confirmation that these are both FPs would be a relief!Thanks for your time!mbam_log_2010_02_17.zip Link to post Share on other sites More sharing options...
MAM Posted February 17, 2010 ID:201578 Share Posted February 17, 2010 Hello,please make a developer log for us How it goes, READ BEFORE REPORTING A FALSE POSITIVE! can you find http://forums.malwarebytes.org/index.php?showtopic=3228 And please in your case make a Full scan of your System, and report your log here again. MAM Link to post Share on other sites More sharing options...
Swan Posted February 17, 2010 Author ID:201599 Share Posted February 17, 2010 Erm, okay. I was fairly sure I *did* do a developer log first time round, hence the detection checksums present in the original file. If, however, you do prefer to have the results of a full scan for this, it might be worth also making that clear in the "Read this first" post.Anyway, here's the result of a full scan, which shows pretty much the same exact result.Thanks.mbam_log_2010_02_17.zip Link to post Share on other sites More sharing options...
MAM Posted February 17, 2010 ID:201606 Share Posted February 17, 2010 OK, that is the same result, what came out Sorry for my blindness, in da Brain.exe from me We must waiting, for the expert Link to post Share on other sites More sharing options...
nosirrah Posted February 18, 2010 ID:201684 Share Posted February 18, 2010 It is highly unlikely that these are FPs . Please run a HijackThis scan , select the option to scan and save a log and then post that long to your next reply :http://go.trendmicro.com/free-tools/hijack.../HijackThis.exe Link to post Share on other sites More sharing options...
Swan Posted February 18, 2010 Author ID:201826 Share Posted February 18, 2010 HijackThis log is attached.Thanks!hijackthis_log.zip Link to post Share on other sites More sharing options...
nosirrah Posted February 18, 2010 ID:201905 Share Posted February 18, 2010 The next update should fix the rest of the issue here . Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now