Malwarebytes' Anti-Malware 1.30
Database version: 1345
Windows 6.0.6001 Service Pack 1

10/31/2008 11:58:00 AM
mbam-log-2008-10-31 (11-58-00).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 124652
Time elapsed: 1 hour(s), 1 minute(s), 20 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 14

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{2bb89980-ccf8-4d24-9745-332d348d217e} (Adware.Vapsup) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{d6fa7926-488d-4ead-a71e-8c848d867e07} (Adware.Vapsup) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{dd3ec823-d3a1-48b3-a18a-a1958795a18a} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{14e1f47e-33ae-4a87-877c-91b58b3a2ce5} (Adware.Vapsup) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\MS Track System (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\gksraemq.bgow (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{dd3ec823-d3a1-48b3-a18a-a1958795a18a} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MSServer (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cmds (Malware.Trace) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\QooBox\Quarantine\C\Users\Cory\AppData\Local\Temp\geBuTlkk.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Windows\System32\iifcCvvv.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\QooBox\Quarantine\C\Windows\System32\rqRHwXnm.dll.vir (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\tmp00007f90 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\tmp00008099 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\tmp0001146d (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\tmp00011817 (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\tmp0001cdda (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\iifdeebx.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\ljJDVmmJ.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\vtUlIxwv.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\nfmrgkxt.exe (Trojan.LowZones) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\Temp\awdmpisq.dll (Trojan.Vundo) -> Quarantined and deleted successfully.
C:\Users\Cory\AppData\Local\VirtualStore\Windows\System32\winjnr32.rom (Trojan.FakeAlert) -> Quarantined and deleted successfully.