Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

BSOD while booting computer in normal mode.


  • Please log in to reply
No replies to this topic

#1 ValterK

ValterK

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:07:40 AM

Posted 06 January 2011 - 10:34 AM

Restart revealed that I could no long log into Windows in normal mode: it resulted in a 0X0000005 error (0X7C9106C3 0X0052ED04) and the blue screen of death.

I scanned computer with MBAV and here is the log(the log is in estonian, but i have translated it into english):

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5144

Windows 5.1.2600 Service Pack 2 (Safe Mode)
Internet Explorer 6.0.2900.2180

6.01.2011 17:04:36
mbam-log-2011-01-06 (17-04-36).txt

Check type: Fast control
Controlled objeckts: 142008
Time spent: 17 minut(id), 8 sekund(id)

Nakatunud mälu objekte: 0 -Infected memory objeckts
Nakatunud mälu mooduleid: 0 -Infected memory moduls?
Nakatunud registrivõtmeid: 0 - Infected registry keys
Nakatunud registri väärtusi: 4 - Infected registry values
Nakatunud registriandmeid: 0 -Infected registry detail
Nakatunud kaustu: 0 - Infected folders
Nakatunud faile: 3 - Infected files

Nakatunud mälu objekte: Infected memory objeckts: No spyware
(Pahavara ei tuvastatud)

Nakatunud mälu mooduleid: Infected memoery moduls : No spyware
(Pahavara ei tuvastatud)

Nakatunud registrivõtmeid: Infected registry keys: No spyware
(Pahavara ei tuvastatud)

Nakatunud registri väärtusi: - Infected registry values
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\userini (Rootkit.ADS) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\userini (Rootkit.ADS) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\userini (Rootkit.ADS) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\userini (Rootkit.ADS) -> No action taken.

Nakatunud registriandmeid: Infected registry details: No spyware
(Pahavara ei tuvastatud)

Nakatunud kaustu: Infected folders: No spyware
(Pahavara ei tuvastatud)

Nakatunud faile: Infected folders
C:\Documents and Settings\Administrator\My Documents\downloads\XvidSetup.exe (Adware.Hotbar) -> No action taken.
C:\Documents and Settings\Administrator\Local Settings\Temp\csrss.exe (Trojan.Agent) -> No action taken.
C:\WINDOWS\Explorer.exe:userini.exe (Rootkit.ADS) -> No action taken.

Attached Files


Edited by hamluis, 06 January 2011 - 10:38 AM.
Moved from XP to Am I Infected ~ Hamluis.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users