Malwarebytes' Anti-Malware 1.33 Database version: 1654 Windows 5.1.2600 Service Pack 3 09/03/2009 17:52:52 mbam-log-2009-03-09 (17-52-52).txt Scan type: Quick Scan Objects scanned: 52020 Time elapsed: 9 minute(s), 2 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 18 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{067f5990-da16-4d2b-bc24-3dc3f1e6c25b}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{067f5990-da16-4d2b-bc24-3dc3f1e6c25b}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{067f5990-da16-4d2b-bc24-3dc3f1e6c25b}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{3f3a0b5c-e8c4-4328-80e0-0179a959d38a}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\DhcpNameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{bececaf1-8796-438f-b0b4-d6c831a077f5}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.68,85.255.112.66 -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\Sumayyas\results.txt (Malware.Trace) -> Quarantined and deleted successfully.