ledbonham Posted August 2, 2011 ID:461004 Share Posted August 2, 2011 MBAM detects a Trojan.BHO in my registry and it deletes it but it keeps coming back. I have updated MBAM each time before running a scan. I have also run the scan in Safe Mode. The Registry key of HKEY_Classes_Root\.fsharproj is the key that MBAM detects. I have also noticed a .tmp file that keeps coming back on my desktop named klunimfhnh.tmp. I have manually deleted this file a few times and it keeps coming back also. I have also ran Hijackthis, SuperAntiSpyware, Spybot Search & Destroy and none of these detect it, to no avail the Trojan.BHO keeps coming back.Please help!!!Attaching the latest MBAM log.Malwarebytes' Anti-Malware 1.51.1.1800www.malwarebytes.orgDatabase version: 7356Windows 5.1.2600 Service Pack 3Internet Explorer 8.0.6001.187028/2/2011 10:30:09 AMmbam-log-2011-08-02 (10-30-09).txtScan type: Quick scanObjects scanned: 187024Time elapsed: 4 minute(s), 54 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 1Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_CLASSES_ROOT\.fsharproj (Trojan.BHO) -> Quarantined and deleted successfully.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
Staff screen317 Posted August 3, 2011 Staff ID:461474 Share Posted August 3, 2011 Hi and welcome to Malwarebytes.Please update MBAM, run a Quick Scan, and post its log.Next, download DDS by sUBs and save it to your Desktop.Double-click on the DDS icon and let the scan run. When it has run two logs will be produced, please post only DDS.txt directly into your reply. Link to post Share on other sites More sharing options...
Staff screen317 Posted August 10, 2011 Staff ID:464397 Share Posted August 10, 2011 Are you still with us? This topic will be closed in a few days if you do not respond. Link to post Share on other sites More sharing options...
Staff screen317 Posted August 16, 2011 Staff ID:466346 Share Posted August 16, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts