Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Database version: 8026

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

27/10/2011 11:35:12 PM
mbam-log-2011-10-27 (23-35-12).txt

Scan type: Full scan (C:\|)
Objects scanned: 521891
Time elapsed: 1 hour(s), 21 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell (Backdoor.Agent) -> Value: Shell -> Delete on reboot.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files (x86)\rosetta stone\rosetta stone v3\rosetta stone v3.2.11 patch.exe (PUP.Hacktool.Patcher) -> Not selected for removal.
c:\Users\Andrew\downloads\downloads\rosetta stone v3.2.11\rosetta stone v3.2.11 patch.exe (PUP.Hacktool.Patcher) -> Not selected for removal.
c:\Users\Andrew\downloads\downloads\windows 7 ultimate (64 bit)\other windows 7 activation tools\windows loader 1.9.3 (reccomended)\windows loader 1.9.3.exe (RiskWare.Tool.HCK) -> Not selected for removal.
c:\Users\Andrew\downloads\downloads\windows 7 ultimate (64 bit)\windows 7 ultimate (64 bit)\windows 7 activation (reccomended)\windows 7 activation.exe (RiskWare.Tool.HCK) -> Not selected for removal.
c:\Windows\assembly\tmp\U\800000c0.@ (Trojan.Agent) -> Quarantined and deleted successfully.