Tried everything to get rid of this virus.....

johnnytee

....... all to no avail. Here is the Malwarebytes log:

Malwarebytes' Anti-Malware 1.39
Database version: 2421
Windows 5.1.2600 Service Pack 2

11/09/2009 06:17:49
mbam-log-2009-09-11 (06-17-49).txt

Scan type: Full Scan (C:\|)
Objects scanned: 122028
Time elapsed: 38 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Spooler SubSystem App (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

I know it says it was successfully deleted, however it shows up everytime i do a scan. Cananyone help?
My debit card was scammed last week. I'm sure this virus has something to do with it. :mad:

aerostar

Have you used superantispyware ?

http://www.superantispyware.com/
and a rootkit finder
http://www.gmer.net/

fiddiwebb

Did you update Malwarebytes?

According to this thread it is a false positive

http://www.malwarebytes.org/forums/index.php?showtopic=7199

-TangleFoot-

Try the ESET Online Scanner.

johnnytee

ESET found no threats. Yes I've updated MB. Can someone explain what a 'false positive' is.

-TangleFoot-

A false positive is a legitimate process, program or system setting that has been incorrectly identified as being malicious.

Note: MBAM is currently up to version 1.41.

John_Gray

-TangleFoot- wrote: »

Note: MBAM is currently up to version 1.41.

... and database version 2780 (as I type!)...

johnnytee

Cripes! d/l version 1.41 and its picked up something else:

Malwarebytes' Anti-Malware 1.41
Database version: 2780
Windows 5.1.2600 Service Pack 2

11/09/2009 08:47:03
mbam-log-2009-09-11 (08-47-03).txt

Scan type: Quick Scan
Objects scanned: 84058
Time elapsed: 4 minute(s), 59 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Network Data Management System Service (Trojan.Downloader) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Spooler SubSystem App (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Donnie

Don't forget to reboot once you have scanned and Remove Selected.

-TangleFoot-

And install Service Pack 3 too!

johnnytee

Donnie wrote: »

Don't forget to reboot once you have scanned and Remove Selected.

Yep, have done that. Will installing service pack 3 make any differance? I'll install it anyhow.