Malwarebytes' Anti-Malware 1.51.2.1300
Database version: 7622
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
04/08/2012 12:46:52
mbam-log-2012-08-04 (12-46-52).txt
Scan type: Full scan (C:\|D:\|F:\|)
Objects scanned: 237592
Time elapsed: 41 minute(s), 33 second(s)
Memory Processes Infected: 2
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 4
Memory Processes Infected:
c:\program files\CDROM\CDROM.exe (Worm.Agent.H) -> 1908 -> Failed to unload process.
d:\logiciel\super.exe (Worm.Agent.H) -> 1932 -> Unloaded process successfully.
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\C:\Program Files\CDROM\CDROM.exe (Worm.Agent.H) -> Value: CDROM.exe -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\D:\logiciel\super.exe (Worm.Agent.H) -> Value: super.exe -> Quarantined and deleted successfully.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Folders Infected:
(No malicious items detected)
Files Infected:
c:\RECYCLER\s-1-5-21-1644491937-1004336348-839522115-1003\Dc4.exe (PUP.BundleInstaller.MG) -> Not selected for removal.
d:\system volume information\_restore{24fceb7a-ef27-49b1-85b3-2752c7372f1b}\RP7\A0016216.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
c:\program files\CDROM\CDROM.exe (Worm.Agent.H) -> Delete on reboot.
d:\logiciel\super.exe (Worm.Agent.H) -> Quarantined and deleted successfully.
