Jump to content

Recommended Posts

Hi, I am new to this forum.

So, apparently, my computer was infected by this trojan called Antimalware Doctor. Naturally, I used MalwareBytes to scan and fix the issue. I did the scan, fixed the selected problems and restarted the computer. I got the blue screen of death, 0x0000007B.

I looked at my last log file and atapi.sys was not targeted by MalwareBytes, so, that whole avenue is not the problem I am assuming. Can you help me figure out exactly what went wrong?

Here is the last log file, THANKS!!!

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6427

Windows 5.1.2600 Service Pack 3

Internet Explorer 6.0.2900.5512

4/23/2011 3:43:21 PM

mbam-log-2011-04-23 (15-43-21).txt

Scan type: Quick scan

Objects scanned: 149740

Time elapsed: 11 minute(s), 22 second(s)

Memory Processes Infected: 1

Memory Modules Infected: 1

Registry Keys Infected: 2

Registry Values Infected: 1

Registry Data Items Infected: 0

Folders Infected: 1

Files Infected: 14

Memory Processes Infected:

c:\documents and settings\Aseef\application data\f29660111d43854494320866e4bc9ab9\sfmoc700init.exe (Trojan.FakeAlert) -> 1720 -> Unloaded process successfully.

Memory Modules Infected:

c:\WINDOWS\dbderapr.dll (Trojan.Hiloti.Gen) -> Delete on reboot.

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Antimalware Doctor (Trojan.FakeAlert) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\Antimalware Doctor Inc (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\sfmoc700init.exe (Trojan.FakeAlert) -> Value: sfmoc700init.exe -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

c:\documents and settings\Aseef\start menu\Programs\antimalware doctor (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.

Files Infected:

c:\WINDOWS\dbderapr.dll (Trojan.Hiloti.Gen) -> Delete on reboot.

c:\documents and settings\Aseef\application data\f29660111d43854494320866e4bc9ab9\sfmoc700init.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\local settings\Temp\err.log11112000 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\local settings\Temp\3BB.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\local settings\Temp\xncaseowrm.tmp (Trojan.Hiloti.Gen) -> Quarantined and deleted successfully.

c:\WINDOWS\Temp\3BE.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

c:\WINDOWS\Temp\3BF.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

c:\WINDOWS\Temp\3C0.tmp (Trojan.Agent) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\Desktop\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\application data\microsoft\internet explorer\quick launch\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\start menu\antimalware doctor.lnk (Rogue.AntimalwareDoctor) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\start menu\Programs\Startup\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\start menu\Programs\antimalware doctor\antimalware doctor.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.

c:\documents and settings\Aseef\start menu\Programs\antimalware doctor\uninstall.lnk (Rogue.AntiMalwareDoctor) -> Quarantined and deleted successfully.

Link to post
Share on other sites

Hello, and welcome to Malwarebytes.org

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.