Malwarebytes' Anti-Malware 1.

46
www.malwarebytes.org
Database version: 4052
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512
Scan type: Quick scan
Objects scanned: 139092
Time elapsed: 38 minute(s), 36 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 4
Registry Keys Infected: 9
Registry Values Infected: 5
Registry Data Items Infected: 6
Folders Infected: 1
Files Infected: 11
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\system32\yupujufo.dll (Trojan.Vundo) -> No action taken.
c:\WINDOWS\system32\figasibu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rutihuku.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gilavofi.dll (Trojan.Vundo.H) -> No action taken.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{86c75b3e-f80f-4ff8-948b-2e8755766233} (Trojan.Vundo.H) -> No actio
n taken.
HKEY_CLASSES_ROOT\CLSID\{86c75b3e-f80f-4ff8-948b-2e8755766233} (Trojan.Vundo.H)
-> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser He
lper Objects\{f64619ff-e19f-4016-bf9c-147cff821b46} (Trojan.Vundo.H) -> No actio
n taken.
HKEY_CLASSES_ROOT\CLSID\{f64619ff-e19f-4016-bf9c-147cff821b46} (Trojan.Vundo.H)
-> No action taken.
HKEY_CLASSES_ROOT\CLSID\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H)
-> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{86c75b3e-
f80f-4ff8-948b-2e8755766233} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{f64619ff-
e19f-4016-bf9c-147cff821b46} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\AvScan (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\dslcnnct (Trojan.Vundo) -> No action taken
.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\peyijivare (Tro
jan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\cpmd7ee178b (Tr
ojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTask
Scheduler\{ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} (Trojan.Vundo.H) -> No action t
aken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectD
elayLoad\ssodl (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\system tool (Ro
gue.SysGuard) -> No action taken.
Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_
DLLs (Trojan.Vundo) -> Data: c:\windows\system32\yupujufo.dll -> No action taken
.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Notification Packages (T
rojan.Vundo) -> Data: c:\windows\system32\yupujufo.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_
DLLs (Trojan.Vundo) -> Data: system32\yupujufo.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_
DLLs (Trojan.Vundo.H) -> Data: c:\windows\system32\figasibu.dll -> No action tak
en.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_
DLLs (Trojan.Vundo.H) -> Data: system32\figasibu.dll -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disa
bled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
C:\Documents and Settings\All Users\Application Data\17287914 (Rogue.Multiple) -
> No action taken.
Files Infected:
C:\WINDOWS\system32\figasibu.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\gilavofi.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\jukabama.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\pewayoje.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\rutihuku.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\yupujufo.dll (Trojan.Vundo.H) -> No action taken.
C:\WINDOWS\system32\falanasi.exe (Rogue.SystemSecurity) -> No action taken.
C:\WINDOWS\system32\logikema.dll (Trojan.Vundo) -> No action taken.
C:\Documents and Settings\All Users\Application Data\17287914\17287914 (Rogue.Mu
ltiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\17287914\17287914.exe (Rogu
e.Multiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\17287914\pc17287914ins (Rog
ue.Multiple) -> No action taken.