2 replies to this topic

[evilmonster12]

I just scanned my computer using MBAM, and it came up that i have mpgdec.ax, which is a backdoor bot. However, I'm not sure what to do next. HJT log was done and nothing negative really showed up.

Malwarebytes' Anti-Malware 1.39
Database version: 2530
Windows 5.1.2600 Service Pack 3

7/30/2009 12:58:52 PM
mbam-log-2009-07-30 (12-58-52).txt

Scan type: Full Scan (C:\|)
Objects scanned: 169389
Time elapsed: 1 hour(s), 18 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\c:\WINDOWS\system32\mpgdec.ax (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\WINDOWS\system32\mpgdec.ax (Backdoor.Bot) -> Quarantined and deleted successfully.

[nosirrah]

Double check this in 2532 .

[evilmonster12]

I was looking through the false positive and this is a false positive? Am I in any danger?