BleepingComputer.com: \bvvpwo.exe

Should I do anything further with this one??

Rkill Found the following app running:

Processes terminated by Rkill or while it was running:

C:\Users\ITRS\AppData\Roaming\Microsoft\bvvpwo.exe


Rkill completed on 07/06/2011 at 10:28:31.

Running MBAM.exe results in 4 infected files.
The log as follows:

Malwarebytes' Anti-Malware 1.51.0.1200
www.malwarebytes.org

Database version: 7033

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

7/6/2011 10:40:16 AM
mbam-log-2011-07-06 (10-40-16).txt

Scan type: Quick scan
Objects scanned: 169277
Time elapsed: 3 minute(s), 4 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Hijack.Shell.Gen) -> Value: Shell -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\ITRS\AppData\Roaming\microsoft\bvvpwo.exe (Rogue.FakeMSE) -> Quarantined and deleted successfully.
c:\Users\ITRS\AppData\Roaming\microsoft\cpxohb.exe (Rogue.FakeMSE) -> Quarantined and deleted successfully.
c:\Users\ITRS\AppData\Roaming\microsoft\ydrvyb.exe (Rogue.FakeMSE) -> Quarantined and deleted successfully.

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

• Disable any script blocking protection
  
• Double click dds to run the tool.
  
• When done, two DDS.txt's will open.
  
• Save both reports to your desktop.

---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT

Please download aswMBR ( 511KB ) to your desktop.

• Double click the aswMBR.exe icon to run it
  
• Click the Scan button to start the scan
  
• On completion of the scan, click the save log button, save it to your desktop and post it in your next reply.

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days. Please include a link to your topic in the Private Message. Thank you.