Malwarebytes Anti-Malware (Trial) 1.62.0.1300 www.malwarebytes.org Database version: v2012.08.02.02 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 9.0.8112.16421 James :: JAMES-PC [administrator] Protection: Enabled 2/08/2012 4:46:01 PM mbam-log-2012-08-02 (16-46-01).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 190667 Time elapsed: 5 minute(s), 59 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42AEDC87-2188-41FD-B9A3-0C966FEABEC1}\INPROCSERVER32 (Trojan.Zaccess) -> Quarantined and deleted successfully. Registry Values Detected: 1 HKCU\SOFTWARE\CLASSES\CLSID\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InprocServer32| (Trojan.Zaccess) -> Data: C:\Users\James\AppData\Local\{3dca4766-b38c-dbc8-17bb-c2709fffe3d7}\n. -> Quarantined and deleted successfully. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 4 C:\Users\James\AppData\Local\Temp\~!#259B.tmp (Trojan.LameShield) -> Quarantined and deleted successfully. C:\Users\James\AppData\Local\Temp\~!#2C6F.tmp (RootKit.0Access) -> Quarantined and deleted successfully. C:\Users\James\AppData\Local\Temp\msimg32.dll (RootKit.0Access) -> Quarantined and deleted successfully. C:\Users\James\AppData\Local\Temp\sdhttt.exe (Trojan.Downloader.H) -> Quarantined and deleted successfully. (end)