Jump to content

Malwarebytes

trojan on taskman.


6 replies to this topic

#1
norris123

    New Member

  • Members
  • Pip
  • 4 posts
Hi! I have the same problem with this guy:
http://www.malwarebytes.org/forums/index.p...mp;#entry125024

I downloaded the latest updates but the trojan is still there. :/

Here is my mbam log.

Malwarebytes' Anti-Malware 1.41
Database version: 2866
Windows 6.0.6000

9/28/2009 7:00:59 PM
mbam-log-2009-09-28 (19-00-59).txt

Scan type: Quick Scan
Objects scanned: 92734
Time elapsed: 7 minute(s), 37 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Thanks. B)

#2
Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 16,158 posts
  • Gender:Male
  • Location:127.0.0.1
Hi Norris123 and welcome to the MBAM forums B)

Please unzip and double click the attached file . There will be a file called export placed on your desktop . Zip and attach that to your next post please .

Attached Files


Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
norris123

    New Member

  • Members
  • Pip
  • 4 posts
Wait, what attacked file? How? Sorry to sound stupid but I really didn't get that. :|

Attached Files



#4
norris123

    New Member

  • Members
  • Pip
  • 4 posts
I think I got it. Haha

Attached Files



#5
Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 16,158 posts
  • Gender:Male
  • Location:127.0.0.1
Hi norris123,

Second attempt got the data i needed B)

New signature will be added to the MBAM core database(2867) in the next few hours on the next update to attack your variant.

When the update is available,please run a Quick scan,allow MBAM to delete what it finds and then reboot!

Rerun quick scan just to confirm the kill,thanks in advance :)
Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook

#6
norris123

    New Member

  • Members
  • Pip
  • 4 posts
Thank you very much! B)

#7
Fatdcuk

    Malware BBQ'er

  • Moderators
  • PipPipPipPipPipPip
  • 16,158 posts
  • Gender:Male
  • Location:127.0.0.1
Please update and run MBAM quickscan B)
Ade Gill
Research Engineer

Posted Image

Follow us: Twitter, Become a fan: Facebook





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us