Hello community. I'm using avast! Free for over a year, a few days ago I downloaded a patch, turned out to be a virus and unfortunately avast! if it even detects it as if it had not existed. Luckily I had on hand the Malwarebytes' Anti-Malware and SUPERAntiSpyware Free next to root him out. Luckily it was harmless Tongue in my Windows XP.
Anyway I got to Virus Total and these are the results:
http://www.virustotal.com/file-scan/report.html?id=91708162c8496e47f0afe8e4b9ec57365dd7037265c8d7c3faf79e9c271406f6-1297368829 If something is here used as the result of MBAM:
Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org
Version Database: 7809
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
9/27/2011 2:05:50 PM
mbam-log-2011-09-27 (14-05-50). txt
Types of Analysis: Full Scan (C: \ |)
Objects scanned: 182668
Time elapsed: 57 minute (s), 27 second (s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 4
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Active Setup \ Installed Components \ {52D0E803-VXW1-U607-Q1Y3-780I33BN6LE4} (Backdoor.Agent) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT \ CLSID \ {52D0E803-VXW1-U607-Q1Y3-780I33BN6LE4} (Backdoor.Agent) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run \ HKLM (Backdoor.Agent) -> Value: HKEY_LOCAL_MACHINE -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run \ Policies (Backdoor.Agent) -> Value: Policies -> Quarantined and deleted successfully.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run \ HKCU (Backdoor.Agent) -> Value: HKEY_CURRENT_USER -> Quarantined and deleted successfully.
HKEY_CURRENT_USER \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run \ Policies (Backdoor.Agent) -> Value: Policies -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c: \ install \ server.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
c: \ recycler \ s-1-5-21-1957994488-1390067357-1547161642-500 \ Dc99.exe (Backdoor.Agent) -> Quarantined and deleted successfully.
c: \ system volume information \ _restore {-2f1f-4b0d 6bd73f65-8f31-64504602cf64} \ RP56 \ A0010301.exe (PUP.Hacktool.Patcher) -> Quarantined and deleted successfully.
I think that was a magnificent point is that antivirus finger cot.
I am proud not piracy but there is some non essential programs.
Unfortunately the virus can not send hotmail and yahoo virus@avast.com but what I detected as viruses and gmail says that does not allow to be executable.
Thank you and greetings from Argentina:)
