1 reply to this topic

[John Stephen]

Hello,

I am not much of a PC tech but have used your product in the past with great results.

I have a situation with a current PC where there are several files targeted for delete on boot but never get deleted. I have run SpyBot and it got rid of other stuff but these items are lingering. I tried deleting the actual file noted manually (uuoxqmn.dll) but I get an access denied error.

I have run this several times, both in normal and safe modes. The machine seems to be working fine now but I am concerned if these items are not dealt with that the machine will end up having problems again.

Here is a copy of the log. Any ideas on how I can get these removed?

Malwarebytes' Anti-Malware 1.31
Database version: 1542
Windows 5.1.2600 Service Pack 3

12/25/2008 8:06:10 AM
mbam-log-2008-12-25 (08-06-03).txt

Scan type: Full Scan (C:\|)
Objects scanned: 114142
Time elapsed: 1 hour(s), 40 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96d7886e-3725-4c47-89c8-9b61d31b13e4} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\urbnhpsz (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{96d7886e-3725-4c47-89c8-9b61d31b13e4} (Trojan.Vundo.H) -> No action taken.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bf (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\bk (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\iu (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Settings\mu (Trojan.Agent) -> No action taken.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\WINDOWS\system32\uuoxqmn.dll (Trojan.Vundo.H) -> No action taken.

[exile360]

Greetings and welcome to the forum.

To get you fixed up please follow the instructions here:
http://www.malwareby...?showtopic=2936

and post your logs in a new topic here:
http://www.malwareby...php?showforum=7



Please be sure not to install any software or use any removal/scanning tools exept those that you are
instructed to by the expert who will be assisting you as doing so can make their job much more difficult.


I hope I was helpful. Good luck and safe surfing.