Virtumonde Virus trojan.downloader Also disables firewall ---Log Snip--- Malwarebytes' Anti-Malware 1.31 Database version: 1456 Windows ***** Service Pack 3 ***** 10:42:01 mbam-log-2009-01-01 (10-42-01).txt Scan type: Quick Scan Objects scanned: 48010 Time elapsed: 2 minute(s), 30 second(s) Memory Processes Infected: 0 Memory Modules Infected: 1 Registry Keys Infected: 5 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 6 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\WINDOWS\system32\byXQJBUK.dll (Trojan.Vundo.H) -> Delete on reboot. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{f9a30af4-eb67-4424-a28e-e492258f6107} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{f9a30af4-eb67-4424-a28e-e492258f6107} (Trojan.Vundo.H) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxqjbuk -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo.H) -> Data: c:\windows\system32\byxqjbuk -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\byXQJBUK.dll (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\KUBJQXyb.ini (Trojan.Vundo.H) -> Delete on reboot. C:\WINDOWS\system32\KUBJQXyb.ini2 (Trojan.Vundo.H) -> Quarantined and deleted successfully. C:\WINDOWS\system32\prunnet.exe (Trojan.Agent) -> Quarantined and deleted successfully. D:\Local Settings\Temp\xpre.tmp (Trojan.Downloader) -> Quarantined and deleted successfully. C:\WINDOWS\system32\ddccDSig.dll (Trojan.Vundo) -> Quarantined and deleted successfully.

bowenjau

16 years ago

Pop-up and re-direct galore!!!

Helpful

Check If You’ve Been CompromisedConnect with Google to scan your browsing history.

Connect with Google

As seen on

By signing in, you agree to data collection and use as described in our Terms Of Use and Privacy Policy

About WOT

We reviewed more than 2 Million website and counting. WOT is a lightweight extension designed to help you browse quickly and securely. It will clean your browser, speed it up, and protect your private information.