When I didn’t have avast {I installed Avast 2 days after that scan}
On that scan, the database was outdated by 8 and a half MONTHS!
And it was only a QUICK scan.
Before I scanned, the only sign my comp was infected was my comp being slower than normal.
Copy pasted log:
Malwarebytes’ Anti-Malware 1.42
Database version: 3412
Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18943
9/7/2010 5:08:05 PM
mbam-log-2010-09-07 (17-08-05).txt
Scan type: Quick Scan
Objects scanned: 117463
Time elapsed: 8 minute(s), 46 second(s)
Memory Processes Infected: 23
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 10
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 37
Memory Processes Infected:
C:\Users\Jack\AppData\Local\Temp\sysedit.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\csrss.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\lsass.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\drweb.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\spoolsv.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\wininst.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\avp32.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\mdm.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\taskmgr.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\smss.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\win16.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\winlogon.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\cmd.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\801712208.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\1375342768.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\services.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\winamp.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\3096274448.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\nvsvc32.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\hexdump.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\login.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\522268832.exe (Trojan.Downloader) → Unloaded process successfully.
C:\Users\Jack\AppData\Local\Temp\1095919392.exe (Trojan.Downloader) → Unloaded process successfully.
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) → Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnxb (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnuf (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnsb (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnep (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnsf (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvjrqfeefnb (Trojan.Downloader) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\winid (Malware.Trace) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvlzpiejlrf (Trojan.Agent) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvlzpiejlpe (Trojan.Agent) → Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\lvlzpiejlne (Trojan.Agent) → Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Users\Jack\AppData\Local\Temp\sysedit.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\csrss.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\drweb.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\avp32.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\lsass.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\mdm.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\spoolsv.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\wininst.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\taskmgr.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\smss.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\win16.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\winlogon.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\cmd.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\801712208.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\1375342768.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\services.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\winamp.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\3096274448.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\nvsvc32.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\hexdump.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\login.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\522268832.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\1095919392.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\1948983328.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\2118677824.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\228041648.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\2522623888.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\3409173281.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\3669915008.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\3949368384.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\4243565568.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\dapc5oq6z.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\install.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\setup.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\zsmq08436z0eale.exe (Trojan.Downloader) → Quarantined and deleted successfully.
C:\Users\Jack\AppData\Local\Temp\Temp1_hyper_pi_0.99b.zip\hyper_pi_0.99\super_pi_mod-1.5\super_pi_mod.exe (Malware.Packer.Krunchy) → Quarantined and deleted successfully.
C:\Users\Jack\downloads\blender-2.49b-windows.exe (Adware.AdRotator) → Quarantined and deleted successfully.
