Hello there,
My pc's running a bit slow and the fan is really getting loud. I ran a malwarebytes's Anti-Malware scan and found a few viruses. Please see below for the log. If you could let me know which to delete, it would be greatly appreciated.
Thanks very much,
stacks
Malwarebytes' Anti-Malware 1.36
Database version: 1960
Windows 5.1.2600 Service Pack 3
10/04/2009 1:17:29 AM
MalwareBytes April 10-09
Scan type: Full Scan (C:\|D:\|)
Objects scanned: 240433
Time elapsed: 1 hour(s), 45 minute(s), 20 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Documents and Settings\Compaq_Administrator\My Documents\Program Files - Download\Adobe Acrobat 8 Professional\keygen.exe (Backdoor.Bot) -> No action taken.
C:\Documents and Settings\Compaq_Administrator\My Documents\Program Files - Download\Crack\keygen.exe (Backdoor.Bot) -> No action taken.
C:\Documents and Settings\Compaq_Administrator\My Documents\Windows Keys\MSKey1.exe (Malware.Tool) -> No action taken.
Please do not uninstall/install any programs unless asked to
It is more difficult when files/programs are appearing in/disappearing from the logs.
Please do not run any scans other than those requested
Please follow all instructions in the order posted
All logs/reports, etc.. must be posted in Notepad. Please ensure that word wrap is unchecked. In notepad click format, uncheck word wrap if it is checked.
Do not attach any logs/reports, etc.. unless specifically requested to do so.
If you have problems with or do not understand the instructions, Please ask before continuing.
Please stay with this thread until given the All Clear. A absence of symptoms does not mean a clean machine.
Let's have a look and see what's going on.
Download the diagnostic tool MGADiagand save it to your desktop.
Double-click on MGADiag.exe.
Click Run and Run again.
Click Continue, then Copy.
Paste the report in your next reply.
Next, let's look deeper. Download Rooter.exe to your desktop
Then doubleclick it to start the tool
A Notepad file containing the report will open, also found at %systemdrive%\Rooter.txt (Where %systemdrive% is usually C: or the drive that you have installed Windows). Post that in your next reply.
Next
Click here to download HJTInstall.exe
Please follow the prompts to ensure it is installed in the proper folder and
a shortcut is created.
Save HJTInstall.exe to your desktop.
Doubleclick on the HJTInstall.exe icon on your desktop.
By default it will install to C:\Program Files\Trend Micro\HijackThis.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Continue to follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
Please post back with
MGADiag log
Rooter log
new HJT log taken after all other steps are completed
