1 reply to this topic

[rmooler]

Hi All!

OK, appologies 1st, compleste NOOB alert, so be gentle with me please.

My situation is this, I factory reset my PC after it was a little sluggish, and in the time between me starting Windows from fresh and installing the fire wall I think my PC was nobbled.

Malwarebytes tells me there is, Windows\rundll32.exe (Backdoor.Bot) in place.

Log as follows,

Malwarebytes' Anti-Malware 1.34
Database version: 1876
Windows 6.0.6001 Service Pack 1

20/03/2009 11:46:04
mbam-log-2009-03-20 (11-46-04).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|)
Objects scanned: 184773
Time elapsed: 1 hour(s), 37 minute(s), 25 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Windows\rundll32.exe (Backdoor.Bot) -> Delete on reboot.

Please note the "delete on reboot", it does'nt! its still there after another scan.

I dont know what info you might need to help me but my PC is running the following,

Spybot S&D
AVG 8.0.238
Comodo firewall 3.8.65951.477


I really need as much help as possible, I have looked through the forums and there is way too much info to take in.

Thanks in advance.

[grandpaG]

I'm new to this particular forum, so I don't want to step on any toes, but if you use Spybot's Teatimer function be sure to disable it while running malware tools