PDA

View Full Version : malware or rootkit ?



Kamel
2009-10-10, 20:05
Good evening!

Mine's Kamel! I write in French and I translate ... in English!
Thank you kindly help me ... :thanks:

I do not know if it's a rootkit malware!
But Mbam find myself every time the same "bugs"! :devil:
I delete, they come back ... what?

There are also key events in HKLM \ Software \ Microsoft \ Security Center that I delete manually every time ...

Report Mbam:

Malwarebytes' Anti-Malware 1.41
Version of the database: 2784
Windows 5.1.2600 Service Pack 2

10/10/2009 17:39:14
mbam-log-2009-10-10 (17-39-01). txt

Search Type: Quick Review
Items discussed: 193,904
Time elapsed: 6 minute (s), 16 second (s)

Memory Processes Infected (s): 0
Module (s) infected memory (s): 0
Key (s) Registry Keys Infected (s): 0
Value (s) Registry Keys Infected (s): 0
Item (s) Registry Data infection (s): 2
File (s) infected (s): 0
File (s) infected (s): 0

Memory Processes Infected (s):
(No malicious items detected)

Module (s) infected memory (s):
(No malicious items detected)

Key (s) Registry Keys Infected (s):
(No malicious items detected)

Value (s) Registry Keys Infected (s):
(No malicious items detected)

Item (s) Registry Data infection (s):
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ BITS \ ImagePath (Hijack.WindowsUpdates) -> Bad: (fystemRoot%% \ System32 \ svchost.exe-k netsvcs) Good: (% SystemRoot% \ System32 \ svchost.exe-k netsvcs) -> No action taken.
HKEY_LOCAL_MACHINE \ System \ CurrentControlSet \ Services \ wuauserv \ ImagePath (Hijack.WindowsUpdates) -> Bad: (fystemroot%% \ System32 \ svchost.exe-k netsvcs) Good: (% SystemRoot% \ System32 \ svchost.exe-k netsvcs) -> No action taken.

File (s) infected (s):
(No malicious items detected)

File (s) infected (s):
(No malicious items detected)

tashi
2009-10-10, 20:45
Hello Kamel :welcome:

This forum's FAQ: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

However if you would prefer to seek advice in a French speaking forum: Forum d'Assiste.com (http://assiste.forum.free.fr/index.php)

Best regards. :)