New
#11
Well I am of the old school so if you have any user created data or software licenses stored on the windows partition, back it up to an external hdd before launching repair install.
That's it. I don't know what must I do.Malwarebytes' Anti-Malware 1.50.1.1100
Malwarebytes
Database version: 5617
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
27/01/2011 20:11:58
mbam-log-2011-01-27 (20-11-58).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 313931
Time elapsed: 29 minute(s), 15 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 15
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXCLS (Rootkit.TmpHider) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MRXNET (Rootkit.TmpHider) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\program files\mIRC\IRC Bot\anjing_malingsia.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\Asshole.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\channel_babi.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\****.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\kontol.mrc (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\nama_anjing.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\nama_babi.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\perampok_budaya.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\services.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\Stupid.sys (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\program files\mIRC\IRC Bot\svchost.exe (Backdoor.IRCBot) -> Quarantined and deleted successfully.
c:\Windows\inf\mdmcpq3.PNF (Rootkit.TmpHider) -> Quarantined and deleted successfully.
c:\Windows\inf\mdmeric3.PNF (Rootkit.TmpHider) -> Quarantined and deleted successfully.
c:\Windows\inf\oem6C.PNF (Rootkit.TmpHider) -> Quarantined and deleted successfully.
c:\Windows\inf\oem7A.PNF (Rootkit.TmpHider) -> Quarantined and deleted successfully.
Oh there is such a mess on your pc. Rootkits and Backdoors are most dangerous forms of malware.
Your computer has multiple infections, including a backdoor. A backdoor gives intruders complete control of your computer, logs your keystrokes, steal personal information, etc.
You are strongly advised to do the following:
- Disconnect the computer from the Internet and from any networked computers until it is cleaned.
- Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
- Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
- From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).
Do NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.
Due to its backdoor functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS).
To help you understand more, please take some time to read the following articles:
What are Remote Access Trojans and why are they dangerous
How do I respond to a possible identity theft and how do I prevent it
When should do a reformat and reinstallation of my OS
Where to backup your files
How to backup your files in Windows XP
Restoring your backups
Your computer has multiple infections, including a rootkit. A rootkit is a set of software tools intended for concealing running processes, files or system data from the operating system.
You are strongly advised to do the following:
- Disconnect the computer from the Internet and from any networked computers until it is cleaned.
- Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
- Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
- From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).
DO NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.
Due to its rootkit functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS).
To help you understand more, please take some time to read the following articles:
What are rootkits from Wikipedia
Why are rootkits dangerous
How do I respond to a possible identity theft and how do I prevent it
When should do a reformat and reinstallation of my OS
Where to backup your files
How to backup your files in Windows XP
Restoring your backups
It'd be in your best interest to wipe HDD and do a reinstall of the OS. For help regarding this, follow the below link:
SSD / HDD : Optimize for Windows Reinstallation
You have what is called Stuxnet .... do as EzioAuditore says and perform a "Clean" installation.
Schneier on Security: The Stuxnet Worm