Expert: Brian Benosky - 5/31/2011

Question
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 6727

Windows 5.1.2600 Service Pack 2
Internet Explorer 8.0.6001.18702

5/30/2011 11:59:23 PM
mbam-log-2011-05-30 (23-59-11).txt

Scan type: Full scan (C:\|G:\|)
Objects scanned: 353060
Time elapsed: 3 hour(s), 23 minute(s), 5 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\QooBox\quarantine\C\documents and settings\all users\application data\18079524.exe.vir (Rogue.WindowsRecoveryConsole) -> No action taken.
c:\QooBox\quarantine\C\documents and settings\all users\application data\sermycvkqxt.exe.vir (Trojan.FakeMS.Gen) -> No action taken.
c:\QooBox\quarantine\C\documents and settings\dimension 3100\my documents\APPATC~1\w?nspool.exe.vir (Adware.PurityScan) -> No action taken.
c:\system volume information\_restore{129201fa-b0ac-49b3-96b2-deb8b91e727b}\RP803\A0084929.exe (Rogue.WindowsRecoveryConsole) -> No action taken.
c:\system volume information\_restore{129201fa-b0ac-49b3-96b2-deb8b91e727b}\RP803\A0084930.exe (Trojan.FakeMS.Gen) -> No action taken.

Answer
Hi David

Sorry for the delay in getting back to you.  I never received notification of your question from AllExperts.  Regardless, It seems that those scans did the trick.  If you are not experiencing any signs of further infection, then I'd say you're good to go.  If there is any problems, just let me know in a follow up.  Cheers!

Brian