هذا التقرير تفضل اخي
Malwarebytes' Anti-Malware 1.51.2.1300
Database version: 7622
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
26/01/2012 10:42:54 م
mbam-log-2012-01-26 (22-42-54).txt
Scan type: Full scan
Objects scanned: 219064
Time elapsed: 40 minute(s), 53 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 3
Folders Infected: 1
Files Infected: 8
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CLASSES_ROOT\CLSID\{9D71D88C-C598-4935-C5D1-43AA4DB90836} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9D71D88C-C598-4935-C5D1-43AA4DB90836} (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Bifrost (Bifrose.Trace) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Bifrost (Bifrose.Trace) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies (Backdoor.HMCPol.Gen) -> Value: Policies -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies (Backdoor.HMCPol.Gen) -> Value: Policies -> Not selected for removal.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
c:\program files\Bifrost (Backdoor.Bifrose) -> Quarantined and deleted successfully.
Files Infected:
c:\program files\Bifrost\Server.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
c:\Pass.exe (Trojan.Inject) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\application data\addons.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\IEPASS.abc (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\MSN.abc (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\XxX.xXx (Malware.Trace) -> Quarantined and deleted successfully.
c:\documents and settings\administrator\local settings\Temp\xxxyyyzzz.dat (Malware.Trace) -> Quarantined and deleted successfully.
c:\program files\Bifrost\logg.dat (Backdoor.Bifrose) -> Quarantined and deleted successfully.
