Jump to content

Malwarebytes

Can't remove Worm.Autorun & Backdoor.Agent

- - - - -

2 replies to this topic

#1
1978Slim

    New Member

  • Members
  • Pip
  • 1 posts
I have run Malwarebytes to rid myself of malicious software I downloaded (stupid I know) from Facebook :lol: , including koobface.worm.

Malwarebytes removed most of these but three files remained even after another scan and subsequent reboot. I hope you can help me get rid of them.
This is the log for the scan i ran today:

Malwarebytes' Anti-Malware 1.40
Database version: 2671
Windows 6.0.6001 Service Pack 1

22/08/2009 19:48:15
mbam-log-2009-08-22 (19-48-15).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 213622
Time elapsed: 1 hour(s), 16 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Public\Favorites\netservice.exe (Backdoor.Agent) -> Delete on reboot.
C:\Users\Public\Favorites\NginuL_na.exe (Worm.AutoRun) -> Delete on reboot.
C:\Users\Public\Favorites\plug\001.dll (Backdoor.Agent) -> Delete on reboot.

#2
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Hi,

You can ignore above 3 detections as this is a read error.
Please see here for more info: http://www.malwareby...showtopic=19652
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
miekiemoes

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 7,127 posts
  • Gender:Female
  • Location:Belgium
Since there is no feedback anymore, I assume this issue is resolved ... so, this Topic is closed.
If you need this topic reopened for continuations of existing problems, please request this by sending me a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Mieke Verburgh
Assistant Director of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us