Malwarebytes' Anti-Malware 1.51.2.1300 www.malwarebytes.org Database version: 8391 Windows 6.1.7601 Service Pack 1 Internet Explorer 8.0.7601.17514 12/21/2011 1:52:23 AM mbam-log-2011-12-21 (01-52-15).txt Scan type: Full scan (C:\|) Objects scanned: 350784 Time elapsed: 34 minute(s), 27 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 3 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\gargaM0NK\AppData\Local\pba.exe" -a "firefox.exe) Good: (firefox.exe) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\safemode\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\gargaM0NK\AppData\Local\pba.exe" -a "firefox.exe -safe-mode) Good: (firefox.exe -safe-mode) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\(default) (Hijack.StartMenuInternet) -> Bad: ("C:\Users\gargaM0NK\AppData\Local\pba.exe" -a "iexplore.exe) Good: (iexplore.exe) -> No action taken. Folders Infected: (No malicious items detected) Files Infected: c:\Users\gargam0nk\AppData\Local\pba.exe (Trojan.ExeShell.Gen) -> No action taken.