Malwarebytes' Anti-Malware 1.41 : 2775 Windows 5.1.2600 Service Pack 2 4/12/2009 23:05:08 mbam-log-2009-12-04 (23-05-05).

).txt : : 100246 : 18 minute(s), 24 second(s) : 0 : 0 : 2 : 1 : 7 : 28 : 9 : ( ) : ( ) : HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSear ch) -> No action taken. HKEY_CLASSES_ROOT\CLSID\MADOWN (Worm.Magania) -> No action taken. : HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\12cfg94-z641-2sf -n31p-5m1er6h6l1 (Worm.AutoRun) -> No action taken. : HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> B ad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Di sabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Dis abled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disa bled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\No FolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> No action taken. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Disa bleRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\F older\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) > No action taken. : C:\Documents and Settings\All Users\Application Data\Seekapp (Adware.SeekApp) -> No action taken. C:\Documents and Settings\user\Local Settings\Application Data\Bron.tok-12-1 (Wo rm.Brontok) -> No action taken. C:\Documents and Settings\user\Local Settings\Application Data\Bron.tok-12-10 (W orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local Settings\Application Data\Bron.tok-12-11 (W orm.Brontok) -> No action taken.

C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local rm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local rm.Brontok) -> No action taken. C:\Documents and Settings\user\Local orm.Brontok) -> No action taken. C:\Documents and Settings\user\Local rm.Brontok) -> No action taken. C:\Documents and Settings\user\Local rm.Brontok) -> No action taken. C:\Documents and Settings\user\Local rm.Brontok) -> No action taken.

Settings\Application Data\Bron.tok-12-12 (W Settings\Application Data\Bron.tok-12-13 (W Settings\Application Data\Bron.tok-12-14 (W Settings\Application Data\Bron.tok-12-15 (W Settings\Application Data\Bron.tok-12-16 (W Settings\Application Data\Bron.tok-12-17 (W Settings\Application Data\Bron.tok-12-18 (W Settings\Application Data\Bron.tok-12-19 (W Settings\Application Data\Bron.tok-12-2 (Wo Settings\Application Data\Bron.tok-12-20 (W Settings\Application Data\Bron.tok-12-21 (W Settings\Application Data\Bron.tok-12-22 (W Settings\Application Data\Bron.tok-12-23 (W Settings\Application Data\Bron.tok-12-24 (W Settings\Application Data\Bron.tok-12-25 (W Settings\Application Data\Bron.tok-12-26 (W Settings\Application Data\Bron.tok-12-27 (W Settings\Application Data\Bron.tok-12-28 (W Settings\Application Data\Bron.tok-12-29 (W Settings\Application Data\Bron.tok-12-3 (Wo Settings\Application Data\Bron.tok-12-30 (W Settings\Application Data\Bron.tok-12-4 (Wo Settings\Application Data\Bron.tok-12-8 (Wo Settings\Application Data\Bron.tok-12-9 (Wo

: C:\Documents and Settings\user\Start Menu\\\Empty.pif (Worm.Brontok) -> C:\WINDOWS\system32\optyhww1.dll (Spyware.OnlineGames) -> No action taken. C:\WINDOWS\system32\user's Setting.scr (Worm.Brontok) -> No action taken. C:\WINDOWS\Temp\NOD63D.tmp (Spyware.OnlineGames) -> No action taken. C:\Documents and Settings\user\Local Settings\Temp\CSM589.tmp (Adware.RelevantKn owledge) -> No action taken. C:\Documents and Settings\user\Local Settings\Temp\CSMF2D.tmp (Adware.RelevantKn owledge) -> No action taken. C:\Documents and Settings\user\Local Settings\Temp\ker44A.tmp (Trojan.Dropper) > No action taken.

C:\Documents and Settings\user\Templates\Brengkolang.com (Worm.Brontok) -> No ac tion taken. C:\RECYCLER\S-1-5-21-6205405065-9693083493-783751159-5665\winigon.exe (Worm.Auto Run) -> No action taken.