This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Zfsearch, ugh.

5 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

This thread's last reply is from February 20, 2009, 5:52 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Katana MRU Teacher Emeritus
Do you have the MBAM log I requested ?
MessianicLegacy
Sorry:

Malwarebytes' Anti-Malware 1.33
Database version: 1714
Windows 5.1.2600 Service Pack 3

14/02/2009 15:09:24
mbam-log-2009-02-14 (15-09-24).txt

Scan type: Full Scan (C:\|)
Objects scanned: 246811
Time elapsed: 1 hour(s), 47 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tversity media server (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\TVersity\Media Server\TVersityConfigWizard_1_0.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\TVersity\Media Server\uninst.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\eMusic Download Manager\winamp_plugin.exe (Trojan.Downloader) -> Not selected for removal.
C:\Qoobox\Quarantine\C\WINDOWS\system32\userinit.exe.vir (Trojan.Downloader) -> Quarantined and deleted successfully.
Katana MRU Teacher Emeritus
Before reporting a false positive, we need to save a log in developer mode. This will allow us to figure out how the false positive came to be. Simply follow these directions.

1. Click the Start Menu.
2. Click Run.
3. Type in "mbam.exe /developer", without the quotes.
4. Run the same type of scan you did before and save the logfile and post it.
NonSuch Administrator
a lack of response,

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.