Strange program connections

Page 2 of 2 FirstFirst 12

  1. Posts : 9
    Windows 7/Ubuntu 9.10 dual boot
    Thread Starter
       #11

    Here's the log from Malwarebytes.

    Code:
    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org
    
    Database version: 4085
    
    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385
    
    5/10/2010 11:03:37 AM
    mbam-log-2010-05-10 (11-03-37).txt
    
    Scan type: Full scan (C:\|D:\|)
    Objects scanned: 490557
    Time elapsed: 8 hour(s), 46 minute(s), 4 second(s)
    
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 7
    Registry Values Infected: 2
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1
    
    Memory Processes Infected:
    (No malicious items detected)
    
    Memory Modules Infected:
    (No malicious items detected)
    
    Registry Keys Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.
    HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\BMIMZMHMFM (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\ROUA3O12PW (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\Software\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
    
    Registry Values Infected:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\bmimzmhmfm (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\roua3o12pw (Trojan.FakeAlert) -> Quarantined and deleted successfully.
    
    Registry Data Items Infected:
    (No malicious items detected)
    
    Folders Infected:
    (No malicious items detected)
    
    Files Infected:
    C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> Quarantined and deleted successfully.
    Do you need any more information?

    Edit: Oh, and they won't get anything from me. I don't store information on my Windows side because of it's many security vulnerabilities.
      My Computer


  2. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #12
      My Computer


  3. Posts : 9
    Windows 7/Ubuntu 9.10 dual boot
    Thread Starter
       #13

    Whew, nasty. Did Malwarebytes take it out completely? Is there still something I must do to restore functionality?
      My Computer


  4. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #14

    I would re-install Windows 7 and change all passwords using a known 'clean' computer... not the infected one.

    You may also need to flush your DNS cache and restore the Hosts file. Do this:

    Copy and paste these lines in Note pad.
    @Echo on
    pushd\windows\system32\drivers\etc
    attrib -h -s -r hosts
    echo 127.0.0.1 localhost>HOSTS
    attrib +r +h +s hosts
    popd
    ipconfig /release
    ipconfig /renew
    ipconfig /flushdns
    netsh winsock reset all
    netsh int ip reset all
    shutdown -r -t 1
    del %0

    Save as flush.bat to your desktop.

    Right click on the batch and run as Administer. Your computer will reboot itself.
      My Computer


  5. Posts : 9
    Windows 7/Ubuntu 9.10 dual boot
    Thread Starter
       #15

    Hmm, I just completed that second step you asked for. The problem persists. Must I really reinstall Windows 7? It would be quite the pain. I can see how it would restore functionality, but...if there is a less nuclear option, I would be most rapt to hear it.
      My Computer


  6. Posts : 8,608
    Windows 7 Ultimate 32bit SP1
       #16

    I don't mess with rootkits. You may be able to work around it, but your computer will never be stable again.
      My Computer


  7. Posts : 9
    Windows 7/Ubuntu 9.10 dual boot
    Thread Starter
       #17

    Very well. I will reinstall and edit this post when I am finished.
      My Computer


  8. Posts : 11,990
    Windows 7 Ultimate 32 bit
       #18

    Jacee said:
    I don't mess with rootkits. You may be able to work around it, but your computer will never be stable again.
    Excellent advice.
      My Computer


 
Page 2 of 2 FirstFirst 12

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 10:14.
Find Us