We’d like to remind Forumites to please avoid political debate on the Forum.
This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.
📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
Malwarebytes Log-can anyone please check this?

beachlou
Posts: 760 Forumite
in Techie Stuff
Hi all,
When on the computer earlier I got a virus take over (System Tool). I searched the forum and did the recommended necessary things (ran kRill) & have just run the malwarebytes and this is the log. Can anyone tell me where I go from here? Thanks
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5363
Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 8.0.6001.19019
26/02/2011 21:26:26
mbam-log-2011-02-26 (21-26-26).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 308737
Time elapsed: 41 minute(s), 56 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FD31ED6-7C94-4BBC-8E95-F927F4D3A949} (Adware.180Solutions) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
When on the computer earlier I got a virus take over (System Tool). I searched the forum and did the recommended necessary things (ran kRill) & have just run the malwarebytes and this is the log. Can anyone tell me where I go from here? Thanks
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5363
Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 8.0.6001.19019
26/02/2011 21:26:26
mbam-log-2011-02-26 (21-26-26).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 308737
Time elapsed: 41 minute(s), 56 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6FD31ED6-7C94-4BBC-8E95-F927F4D3A949} (Adware.180Solutions) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
0
Comments
-
Malwarebytes is way out of date.
Update and rescan.
Current database version is 58880 -
How can I get the latest version? I tried it again but now have 5750. Thanks0
-
theres an update tab on malwarebytes, update from there
and do not run it in safe modeEx forum ambassador
Long term forum member0 -
When you've done the latest updates, run the scan again and when done it will give you an option to remove (or words to that effect) the malware it finds. You may have to shut or move the log page out of the way to see the 'remove' bar.
I remove everything it finds.Best regards
MikeWhen I was young I knew all the answers.
Now I'm only just beginning to understand the questions.0 -
If you are running Vista, your Service Packs are way out of date-you should be on SP2 as of nearly 2 years ago.
Check you are set to Auto Updates in Security Center.No free lunch, and no free laptop0 -
Go Control Panel>Security Center and set to Auto Updates. Then Go to Windows Updates and download manually until up to date.
Please confirm what OS you are using.
Get your system clean before you worry about this though. But it could explain why you have got infected.No free lunch, and no free laptop0 -
I've had to save malwarebytes to a USB stick & now I've opened up my laptop in normal mode & it won't let me run it. What do I do?!
you need to download Rkill
http://www.bleepingcomputer.com/download/anti-virus/rkill
all the variants to the USB drive, then run them one by one on the laptop untill you see a black square screen pop up and its working , if memory serves me right you should try this version
eXplorer.exe Download Link
first
then try malwarebytes againEx forum ambassador
Long term forum member0 -
you need to download Rkill
http://www.bleepingcomputer.com/download/anti-virus/rkill
all the variants to the USB drive, then run them one by one on the laptop untill you see a black square screen pop up and its working , if memory serves me right you should try this version
eXplorer.exe Download Link
first
then try malwarebytes again
Ok, many thanks for your help. I've just tried the one you posted and a black screen popped up. Should I now run malwarebytes in normal moe rather than safe mode?0
This discussion has been closed.
Confirm your email address to Create Threads and Reply

Categories
- All Categories
- 351.7K Banking & Borrowing
- 253.4K Reduce Debt & Boost Income
- 454K Spending & Discounts
- 244.7K Work, Benefits & Business
- 600.1K Mortgages, Homes & Bills
- 177.3K Life & Family
- 258.4K Travel & Transport
- 1.5M Hobbies & Leisure
- 16.2K Discuss & Feedback
- 37.6K Read-Only Boards