Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Verze databáze: 7260

Windows 6.1.7601 Service Pack 1 (Safe Mode)
Internet Explorer 9.0.8112.16421

24.7.2011 11:54:56
mbam-log-2011-07-24 (11-54-56).txt

Typ: Úplná kontrola (C:\|Z:\|)
Kontrolované objekty: 359610
Uplynulý čas: 32 minut, 30 sekund

Infikované procesy v paměti: 0
Infikované moduly v paměti: 0
Infikované klíče v registru: 1
Infikované hodnoty v registru: 2
Infikované datové položky v registru: 3
Infikované složky: 0
Infikované soubory: 9

Infikované procesy v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované moduly v paměti:
(Žádné škodlivé položky nebyly zjištěny)

Infikované klíče v registru:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wxpdrivers (Trojan.Dropper) -> Quarantined and deleted successfully.

Infikované hodnoty v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run\wxpdrv (Backdoor.Agent) -> Value: wxpdrv -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wxpDrivers\ImagePath (Trojan.Agent) -> Value: ImagePath -> Quarantined and deleted successfully.

Infikované datové položky v registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Infikované složky:
(Žádné škodlivé položky nebyly zjištěny)

Infikované soubory:
c:\Windows\update.1\svchost.exe (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\Windows\services32.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\Windows\update.1\svchost.ex e.vir (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Qoobox\quarantine\C\Windows\update.tray-5-0\svc host.exe.vir (Trojan.Dropper) -> Quarantined and deleted successfully.
c:\Users\Power\AppData\Roaming\thinstall\microsoft office enterprise 2007\%local appdata%\thinstall\Cache\Stubs\184e236ea88dfe642f1 96923eb5226d106dfa3d\mdm.exe.10201a64.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\Power\AppData\Roaming\thinstall\microsoft office enterprise 2007\%local appdata%\thinstall\Cache\Stubs\184e236ea88dfe642f1 96923eb5226d106dfa3d\mdm.exe.12381910.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\Power\AppData\Roaming\thinstall\microsoft office enterprise 2007\%local appdata%\thinstall\Cache\Stubs\184e236ea88dfe642f1 96923eb5226d106dfa3d\mdm.exe.14fc98c.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\Power\AppData\Roaming\thinstall\microsoft office enterprise 2007\%local appdata%\thinstall\Cache\Stubs\184e236ea88dfe642f1 96923eb5226d106dfa3d\mdm.exe.68083c.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Windows\update.tray-5-0-lnk\svchost.exe (Trojan.Dropper) -> Quarantined and deleted successfully.