3 replies to this topic

[Tom1986]

Hi all,

This is the first time my pc got infected with some strange trojan when i ran the full scan on mbam.
I tried to google this particular trojan, but nothing came up. So this has to be a pretty new trojan i guess.
I deleted the trojan ofcourse and putted it in quarantaine, but my question is: Is this trojan really dangerous or is it a false positive? Thanks.

Here is the log:

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org
Databaseversie: v2012.07.17.10
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Tom :: xxxx[administrator]
17-7-2012 18:56:58
mbam-log-2012-07-17 (18-56-58).txt
Scantype: Volledige scan (C:\|F:\|)
Ingeschakelde scanopties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM
Uitgeschakelde scanopties: P2P
Objecten gescand: 217304
Verstreken tijd: 29 minuut/minuten, 30 seconde(n)
Geheugenprocessen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Geheugenmodulen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registersleutels gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerwaarden gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Registerdata gedetecteerd: 3
HKLM\SOFTWARE\Microsoft\Security Center|AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Slecht: (1) Goed: (0) -> Geen actie ondernomen.
HKLM\SOFTWARE\Microsoft\Security Center|FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Slecht: (1) Goed: (0) -> Geen actie ondernomen.
HKLM\SOFTWARE\Microsoft\Security Center|UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Slecht: (1) Goed: (0) -> Geen actie ondernomen.
Mappen gedetecteerd: 0
(Geen kwaadaardige objecten gedetecteerd)
Bestanden gedetecteerd: 1
C:\WINDOWS\ServicePackFiles\i386\explorer.exe (Trojan.Bootkit.Dropper) -> Succesvol in quarantaine geplaatst en verwijderd.
(einde)

[AdvancedSetup]

Please update Malwarebytes and scan your system again and post back the new Quick Scan log.

[Maurice Naggar]

@Tom1986

Are you still with us? Have you resolved your issue? Kindly provide status update.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!