Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8280 Windows 6.0.6002 Service Pack 2 Internet Explorer 9.0.8112.16421 12/1/2011 12:18:40 PM mbam-log-2011-12-01 (12-18-40).txt Scan type: Full scan (C:\|) Objects scanned: 348534 Time elapsed: 1 hour(s), 8 minute(s), 37 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 1 Files Infected: 3 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\exefile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: () Good: ("%1" %*) -> Quarantined and deleted successfully. Folders Infected: c:\WINDOWS\System32\config\systemprofile\AppData\Roaming\microsoft\Windows\start menu\Programs\opencloud security (Rogue.OpenCloudSecurity) -> Quarantined and deleted successfully. Files Infected: c:\WINDOWS\System32\config\systemprofile\AppData\Roaming\opencloud security\opencloud security.exe (Backdoor.Bot) -> Quarantined and deleted successfully. c:\WINDOWS\System32\config\systemprofile\Desktop\opencloud security.lnk (Rogue.OpenCloudSecurity) -> Quarantined and deleted successfully. c:\WINDOWS\System32\config\systemprofile\AppData\Roaming\microsoft\Windows\start menu\Programs\opencloud security\opencloud security.lnk (Rogue.OpenCloudSecurity) -> Quarantined and deleted successfully.