تقرير مالووير
---------------------
************' Anti-Malware 1.50.1.1100
Database version: 6112
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
22/03/2011 01:20:19 ص
mbam-log-2011-03-22 (01-20-19).txt
Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 228308
Time elapsed: 1 hour(s), 22 minute(s), 56 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 4
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836} (Trojan.Agent) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\RRT-Auto (Autorun.RRT) -> Value: RRT-Auto -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
c:\system volume information\_restore{abafae2c-cc3d-4a8e-b052-914ca36dfa93}\RP167\A0129287.rbf (Adware.WidgiToolbar) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\application data\addons.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\WINDOWS\system32\secushr.dat (Malware.Trace) -> Quarantined and deleted successfully.
d:\downloads\software\RRT.exe (Autorun.RRT) -> Quarantined and deleted successfully.
k: