This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Zfsearch, ugh.

58 min read

This thread's last reply is from February 20, 2009, 5:52 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Do you have the MBAM log I requested ?
Sorry:

Malwarebytes' Anti-Malware 1.33
Database version: 1714
Windows 5.1.2600 Service Pack 3

14/02/2009 15:09:24
mbam-log-2009-02-14 (15-09-24).txt

Scan type: Full Scan (C:\|)
Objects scanned: 246811
Time elapsed: 1 hour(s), 47 minute(s), 31 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\tversity media server (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files\TVersity\Media Server\TVersityConfigWizard_1_0.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\TVersity\Media Server\uninst.exe (Trojan.Downloader) -> Not selected for removal.
C:\Program Files\eMusic Download Manager\winamp_plugin.exe (Trojan.Downloader) -> Not selected for removal.
C:\Qoobox\Quarantine\C\WINDOWS\system32\userinit.exe.vir (Trojan.Downloader) -> Quarantined and deleted successfully.
Before reporting a false positive, we need to save a log in developer mode. This will allow us to figure out how the false positive came to be. Simply follow these directions.

1. Click the Start Menu.
2. Click Run.
3. Type in "mbam.exe /developer", without the quotes.
4. Run the same type of scan you did before and save the logfile and post it.
a lack of response,