API tools faq
paste
Guest User

MBAM

a guest
Feb 18th, 2012
103
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.08 KB | None | 0 0
raw download clone embed print report
  1. Malwarebytes Anti-Malware (Trial) 1.60.1.1000
  2. www.malwarebytes.org
  3.  
  4. Database version: v2012.02.18.01
  5.  
  6. Windows 7 x64 NTFS (Safe Mode/Networking)
  7. Internet Explorer 8.0.7600.16385
  8. Banksy :: BANKSY-PC [administrator]
  9.  
  10. Protection: Disabled
  11.  
  12. 2/18/2012 5:18:44 PM
  13. mbam-log-2012-02-18 (17-18-44).txt
  14.  
  15. Scan type: Quick scan
  16. Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
  17. Scan options disabled: P2P
  18. Objects scanned: 202381
  19. Time elapsed: 3 minute(s), 13 second(s)
  20.  
  21. Memory Processes Detected: 0
  22. (No malicious items detected)
  23.  
  24. Memory Modules Detected: 0
  25. (No malicious items detected)
  26.  
  27. Registry Keys Detected: 1
  28. HKCU\Software\VB and VBA Program Settings\Microzoft (Backdoor.Trace) -> Quarantined and deleted successfully.
  29.  
  30. Registry Values Detected: 4
  31. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|csrss (Worm.AutoRun) -> Data: C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe -> Quarantined and deleted successfully.
  32. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|csrss (Worm.AutoRun) -> Data: C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe -> Quarantined and deleted successfully.
  33. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|csrss (Worm.AutoRun) -> Data: C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe -> Quarantined and deleted successfully.
  34. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|csrss (Worm.AutoRun) -> Data: C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe -> Quarantined and deleted successfully.
  35.  
  36. Registry Data Items Detected: 1
  37. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit (Worm.AutoRun) -> Bad: (C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe) Good: () -> Quarantined and repaired successfully.
  38.  
  39. Folders Detected: 0
  40. (No malicious items detected)
  41.  
  42. Files Detected: 2
  43. C:\Users\Banksy\AppData\Roaming\Microsoft\csrss.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
  44. C:\$Recycle.Bin\S-1-5-21-4146783975-3022033110-2106573168-1000\$RE01ZU7.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
  45.  
  46. (end)
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!