oneluv

Malwarebytes' Anti-Malware 1.37 Database version: 2182 Windows 5.1.2600 Service Pack 2 5/31/2009 5:31:04 AM mbam-log-2009-05-31 (05-31-04).txt Scan type: Quick Scan Objects scanned: 100210 Time elapsed: 36 minute(s), 31 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 2 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} (Trojan.BHO) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{0ed403e8-470a-4a8a-85a4-d7688cfe39a3} (Adware.Gamevance) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecycleFiles (Disable.Recycle) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: c:\documents and settings\mike\results.txt (Malware.Trace) -> Quarantined and deleted successfully. Thats all. Im Loveing it.

It worked perfectly; thank you. Now only 4 infections.

Ok illl try and thanks for the help; more heads better outcomes. Ill go ahead and try your advice and Ill reply tomorrow . I think I got It figureed out now. I downloaded a programs that scans for clone files and I found out the my CSRSS.exe was cloned and had a virus written within the program. I have a a problem downloading Binary freeware files without scanning them first for virus's, but in this case it would not have helped because my virus, malware, adware programs are soo outdated. Again thanks Ill go ahead and up go to http://www.malwarebytes.org/mbam-download.php

I am using 1.30, (if that is the updated Vers.). Or do you mean purchase the whole program I cant afford too. But if you could offer any info from this poit, it would be greatly appreciated, if not I understand; half my comp. id running off freeware and trial progs; Im broke. Still thank you. Ill figure something out. IT TOOK ME 10 MINUTES FOR THIS POST; NOT INCLUDEING LOGGIN IN etc...RRRRRR!!

THIS CANT BE RIGHT..HALF OF THE INFECTIONS SHOW BY MALWAREBYETES ARE PART OF MY CYBER DEFENDER PROGRAMS...IS IT SHOWING UP AS TROJANS BECAUSE OF TRIAL PROG.S, BINARY PROGS. etc..? Malwarebytes' Anti-Malware 1.30 Database version: 1306 Windows 5.1.2600 Service Pack 2 5/24/2009 4:22:10 PM mbam-log-2009-05-24 (16-22-10).txt Scan type: Quick Scan Objects scanned: 61988 Time elapsed: 24 minute(s), 45 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 7 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\cdmyidd.securitytoolbar (Trojan.BHO) -> Not selected for removal. HKEY_CLASSES_ROOT\TypeLib\{cd24eb02-9831- 4838-99d0-726d411b1328} (Trojan.BHO) -> Not selected for removal. HKEY_CLASSES_ROOT\Interface\{f20da564-9254- 49fe-a678-cc3cef172252} (Trojan.BHO) -> Not selected for removal. HKEY_CLASSES_ROOT\CLSID\{a26503fe-b3b8-4910 -a9dc-9cbd25c6b8d6} (Trojan.BHO) -> Not selected for removal. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wind ows\CurrentVersion\Explorer\Browser Helper Objects\{a26503fe-b3b8-4910-a9dc-9cbd25c6b8d6} (Trojan.BHO) -> Not selected for removal. HKEY_CLASSES_ROOT\cdmyidd.securitytoolbar.1 (Trojan.BHO) -> Not selected for removal. HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d- 9366-d71cdeda3179} (Adware.MyWebSearch) -> Not selected for removal. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Inter net Explorer\Toolbar\{a26503fe-b3b8-4910-a9dc- 9cbd25c6b8d6} (Trojan.BHO) -> Not selected for removal. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Intern et Explorer\URLSearchHooks\{a26503fe-b3b8-4910- a9dc-9cbd25c6b8d6} (Trojan.BHO) -> Not selected for removal. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Intern et Explorer\Toolbar\WebBrowser\{a26503fe-b3b8- 4910-a9dc-9cbd25c6b8d6} (Trojan.BHO) -> Not selected for removal. Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\cdmyidd.dll (Trojan.BHO) -> Not selected for removal. C:\Documents and Settings\mike\results.txt (Malware.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\system32\drivers\csrss.PIF (Heuristics.Reserved.Word.Exploit) -> Not selected for removal. ************************************************************ [cast] C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender={0} C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Includes={1} C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Scam Alert={2} C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Scam Alert\images={3} C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\UserGuide={4} HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wind ows\CurrentVersion\Uninstall={5} HKEY_CLASSES_ROOT\CLSID={6} HKEY_CURRENT_USER\Software\CyberDefender= {7} HKEY_LOCAL_MACHINE\SOFTWARE\CyberDefender ={8} C:\Documents and Settings\mike\Local Settings\Application Data={9} [token] {0}=C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender {1}=C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Includes {2}=C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Scam Alert {3}=C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\Scam Alert\images {4}=C:\Documents and Settings\mike\Local Settings\Application Data\CyberDefender\UserGuide {5} =HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Win dows\CurrentVersion\Uninstall {6}=HKEY_CLASSES_ROOT\CLSID {7} =HKEY_CURRENT_USER\Software\CyberDefender {8} =HKEY_LOCAL_MACHINE\SOFTWARE\CyberDefend er {9}=C:\Documents and Settings\mike\Local Settings\Application Data [file] cdinstx.exe={0} cdmyidd.dll={0} database.db={0} st.ico={0} stbarpat.dat.03={0} Loading.htm={1} NoItems Index.htm={1} Password Cookie.htm={1} Passwords Index.htm={1} Privacy Index.htm={1} charset.html={2} cookie.html={2} defaultCharset.html={2} form.html={2} frame.html={2} gray.htm={2} green.htm={2} host.html={2} popup.html={2} port.html={2} protocol.html={2} red.htm={2} referrer.html={2} scamalert.htm={2} scamalert.htm1={2} script.html={2} security.html={2} style.css={2} yellow.htm={2} bg.jpg={3} bg_button.jpg={3} bg_top.jpg={3} bt_go.gif={3} bt_go_down.gif={3} bt_go_over.gif={3} bt_grey.gif={3} bt_red - Copy.gif={3} bt_red.gif={3} bt_red_down.gif={3} bt_red_over.gif={3} caution.gif={3} frame.gif={3} logo.gif={3} logo.jpg={3} logo_orange.gif={3} topbar.gif={3} topbar_orange.gif={3} warning.gif={3} cybdefstbar.set={4} stbarchk.ini={4} cdinstx.log={0} sssTbarcfg.ini={0} sssTbarSettings.ini={0} sssTbarUpdateHost.ini={0} ssstbar.ini={0} [system] label=CyberDefender Early Detection Center [com] cdmyidd.dll={0} <<<<<<<-----"THATS PART OF MY CYBERDEFENDER"? SAYS HAS PROBS? [iE] Search Bar= [dir] Ads Blocker={0} Download={0} Password Alert={0} Patch Alert={0} Scam Alert={0} UserGuide={0} Virus Alert={0} CyberDefender={9} [rkey] {83682B4C-B98C-4BEB-97CC-8EAD2AF9E4C6}={5} {68FF9E0F-2E96-4467-87FA-1A8B9734C7E7}={6} {F35CE83E-9EBF-40d5-AE87-53F982389740}={6} {A26503FE-B3B8-4910-A9DC-9CBD25C6B8D6}={6} SecurityToolbar={8},{7} ******************************************************** Malwarebytes' Anti-Malware 1.30 Database version: 1306 Executable location: C:\Program Files\Malwarebytes' Anti-Malware Database location: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref Username: mike Windows folder: C:\WINDOWS System folder: C:\WINDOWS\system32 Root drive: C: Program Files: C:\Program Files Common Files: C:\Program Files\Common Files Desktop: C:\Documents and Settings\All Users\Desktop Desktop: C:\Documents and Settings\Default User\Desktop Desktop: C:\Documents and Settings\Guest\Desktop Desktop: C:\Documents and Settings\LocalService\Desktop Desktop: C:\Documents and Settings\mike\Desktop Desktop: C:\Documents and Settings\NetworkService\Desktop Start Menu: C:\Documents and Settings\All Users\Start Menu Start Menu: C:\Documents and Settings\Default User\Start Menu Start Menu: C:\Documents and Settings\Guest\Start Menu Start Menu: C:\Documents and Settings\mike\Start Menu Start Menu: C:\Documents and Settings\All Users\Start Menu User Root: C:\Documents and Settings\Administrator User Root: C:\Documents and Settings\All Users User Root: C:\Documents and Settings\Default User User Root: C:\Documents and Settings\Guest User Root: C:\Documents and Settings\LocalService User Root: C:\Documents and Settings\mike User Root: C:\Documents and Settings\NetworkService Favorite: C:\Documents and Settings\Administrator\Favorites Favorite: C:\Documents and Settings\All Users\Favorites Favorite: C:\Documents and Settings\Default User\Favorites Favorite: C:\Documents and Settings\Guest\Favorites Favorite: C:\Documents and Settings\mike\Favorites Application Data: C:\Documents and Settings\Administrator\Application Data Application Data: C:\Documents and Settings\All Users\Application Data Application Data: C:\Documents and Settings\Default User\Application Data Application Data: C:\Documents and Settings\Guest\Application Data Application Data: C:\Documents and Settings\LocalService\Application Data Application Data: C:\Documents and Settings\mike\Application Data Application Data: C:\Documents and Settings\NetworkService\Application Data Application Data: C:\Documents and Settings\All Users\Application Data Quick Launch: C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\Quick Launch Quick Launch: C:\Documents and Settings\Guest\Application Data\Microsoft\Internet Explorer\Quick Launch Quick Launch: C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\Quick Launch Quick Launch: C:\Documents and Settings\mike\Application Data\Microsoft\Internet Explorer\Quick Launch Quick Launch: C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\Quick Launch Temporary Folder: C:\Documents and Settings\Administrator\Local Settings\Temp Temporary Folder: C:\Documents and Settings\Default User\Local Settings\Temp Temporary Folder: C:\Documents and Settings\Guest\Local Settings\Temp Temporary Folder: C:\Documents and Settings\LocalService\Local Settings\Temp Temporary Folder: C:\Documents and Settings\mike\Local Settings\Temp Temporary Folder: C:\Documents and Settings\NetworkService\Local Settings\Temp Temporary Folder: C:\WINDOWS\Temp