Please help. XP Home, SP3. After searching for a site in IE and Firefox, I click on the link and it takes me to a bogus site.
I ran malwarebytes antimalware and got this log...thanks
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 6729
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
6/1/2011 8:20:51 AM
mbam-log-2011-06-01 (08-20-51).txt
Scan type: Full scan (C:\|)
Objects scanned: 713615
Time elapsed: 3 hour(s), 36 minute(s), 49 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 6
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\NoChangingWallPaper (PUM.Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDesktop (PUM.Hidden.Desktop) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
c:\C\documents and settings\jennifer\local settings\application data\xee(2).exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\C\documents and settings\jennifer\local settings\application data\xee(3).exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\C\documents and settings\jennifer\local settings\application data\xee.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{67fb539d-8bd5-46bc-a11b-489b5d592db5}\RP107\A0014441.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{67fb539d-8bd5-46bc-a11b-489b5d592db5}\RP107\A0014442.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\system volume information\_restore{67fb539d-8bd5-46bc-a11b-489b5d592db5}\RP107\A0014443.sys (Rootkit.TDSS) -> Quarantined and deleted successfully.
Page 1 of 1
search engine redirect
Share this topic:
Page 1 of 1

Help

Back to top








