Playing with MSE Alert in VB WinXPSP2 guest

[Glooyatlev]

Hey,

Playing with MSE Alert in VB WinXPSP2 guest.

MD5 hash: 2f10d83d16c6447df6eab2f85ddab1cb

Scan and removal with Mbam 1.50 beta DB 5206

Leftovers include a .bat file and 24 tasks scheduled.

I know I don't need to worry about the .bat straggler, but what about the scheduled tasks?

Could the tasks still scheduled allow malware issues to return?

Thanks

P.S. Can I post Buster Sandbox Analyzer Reports in this forum?

[screen317]

To answer your question, if the tasks are referencing files that don't exist, then no, the malware will not magically regenerate.

However, if they do reference files that exist, or if other malware is present which can call home for reinforcements, then yes reinfection is possible.

So to summarize: it depends... It's case-specific.