Help for Windows 7 (x86)

[Teknique]

I'm using Malwarebytes' Anti-Malware and have 3 Trojan.Agents, 1 Backdoor.Bot, 2 Generic.Bot.H, 2 Malware.Trace and 1 Bifrose.Trace. I click 'Remove Selected' but every time my machine restarts they are still there and I can not find any guides for them.

3 of the Trojan.Agents have registry values which are: hklm, policies and policies.

1 of the Backdoor.Bot has a registry value of: hkcu

This may be relevant or irrelevant but an account in a game I play was hacked multiple times through what I believe to be a keylogger as I tracked their IP address to Sweden.

Someone please help. Thank you.

I will post a screen shot of the report shortly.

[mountaintree16]

Hello Teknique, and welcome to the forums here at Malwarebytes.org

Firstly, did you update Malwarebytes prior to scanning?

[Teknique]

I have, all of my antiviruses are up to date and here is the picture of the report:

[mountaintree16]

Unfortunately there is something that is still hanging around on your system preventing complete removal

Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

Please note that it may take 48 hours or more for you to receive a response in the malware removal forum, as it is often busy at times. Please do not reply to your own post asking for help unless its been more than 48 hours since you originally posted, as this can make it appear as though you are being helped and take longer for you to get help.

If you are unable to do all or any of the steps in the link to the directions above, just post your problem into the forum I gave you a link to anyway and someone will be able to assist you.

Also, when replying, please use the "ADD REPLY" button or erase what the person you are replying to said, as this makes the forum easier to read.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

Thank you

[Teknique]

Thank you kindly mountaintree16, went through all the steps and now waiting for a reply. =]

[mountaintree16]

You're very welcome Teknique! Good luck

[DarkSnakeKobra]

Hi Teknique and welcome to malwarebytes'!

Also make sure to click save log after and post it in your reply. This makes it much easier to read.

[Teknique]

I'm confused...kept scanning and hitting 'Remove Selected' and rebooting and now when I scan I don't find anything. Unsure if I got rid of everything either...

Malwarebytes' Anti-Malware 1.44

Database version: 3885

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

3/19/2010 8:51:53 AM

mbam-log-2010-03-19 (08-51-53).txt

Scan type: Quick Scan

Objects scanned: 117570

Time elapsed: 4 minute(s), 17 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[Firefox]

If you had not clicked on Remove Selected, then you were still infected....

If you now clicked on Remove Selected and the infections were removed, you restarted and ran another quick scan and you come out clean, then more than likely you are done with the cleaning process.

If you feel you want to make sure, just wait for the replies in the HJT section and they will check for you. You might want to point the experts to this thread so they can see you cleaned out the infections.

[Teknique]

I was clicking remove selected before but they showed up after I would restart, my computer seems to be clean now but I'm going to wait for a response anyway just to see what they say as there may be some hidden malware somewhere that I may not know of and they can point out to me.

[Firefox]

That is a good idea, keep us posted....