Malwarebytes found files multiple times after scans.

By TitanArmadillo ยท 5 replies
Nov 16, 2014
  1. I have under circumstances accidentally plugged in a potentially infected usb drive to my computer. To see if any damage was done I downloaded and ran malwarebytes chameleon and it returned 28 files found. I quarantined these but before I could click save log file the Mbam chameleon restarted my system to finish malware removal, I let my system reboot and ran Mbam chameleon a second time. 5 files found. I quarantined these and saved the log file just barely before the restart. During both of those mbam scans I had time to write down the names of some of the files on a piece of paper.
    Pup Optional Delta Registry Key
    Pup Optional uTorrent Rontrol Registry Rey
    Pup Optional Babylon Registry Key
    Pup Optional Frostwire Regisstry Key
    Pup Optional Conduit File
    Pup Optional BrowserProtector File
    Pup Optional Filescout
    Pup Optional Pricegong
    Pup Optional Babylon Toolbar A Registry Key
    Pup Optional DatamanagerA Registry Key
    Pup Optional Pricegong A Registry Key
    Pup Optional Babylon A Registry Key
    Pup Optional Conduit A Registry Key
    Pup Optional Startpage Registry Data
    After the second reboot I ran Malwarebytes without the chameleon once and it returned clean after which I ran it again with the chameleon and that also returned clean.
    It should be noted that I have Avira installed and have ran multiple fullsystem,rootkit and normal hdd scans and when mbam found files Avira did not. I also have Dropbox installed.and it is actively backing up files to various projects.

    Attached is the log file I managed to get from the second chameleon scan.
    The file is twice zipped because im writing this on a laptop separate from my infected system and I started off by zipping the file and then sending it through filemail which zipps it again, and for some reason it wont let me attach the zip inside the zip so ive attached the double zip,

    Since it took 2 scans to find and remove the files im scared I might have been subjected to some root ot bootkit, any help on how to proceed to make sure my system is clean and safe would be greatly apreciated.

    Attached Files:

  2. Broni

    Broni Malware Annihilator Posts: 54,260   +383

    Welcome aboard [​IMG]

    Please, complete all steps listed here:
    Make sure, you PASTE all logs. If some log exceeds 50,000 characters post limit, split it between couple of replies.
    Attached logs won't be reviewed.

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.
  3. TitanArmadillo

    TitanArmadillo TS Rookie Topic Starter

    Thank you, I will begin your process tomorrow.
  4. Broni

    Broni Malware Annihilator Posts: 54,260   +383

  5. TitanArmadillo

    TitanArmadillo TS Rookie Topic Starter

  6. Broni

    Broni Malware Annihilator Posts: 54,260   +383

Topic Status:
Not open for further replies.

Similar Topics

Add your comment to this article

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...