Quantcast
Channel: Tech Support Forum - Virus/Trojan/Spyware Help
Viewing all articles
Browse latest Browse all 2798

Found a few Trojans and PUPs; are they keyloggers?

$
0
0
Just finished running a scan not too long ago and, to my surprise, a couple of trojans and PUPs popped up and it made me wonder: is a trojan necessarily a keylogger? While the presence of trojans is never a good thing, I feel secure once I have them off my system, but I'm not so sure if I should be. Is there an actual distinction between trojans and keyloggers? I intend to change all of my passwords no matter what, but the possibility that keyloggers made it onto my system worries me because I've been using my debit card recently. Posted below is the log file. How worried should I be?

Malwarebytes Anti-Malware 1.65.0.1400
Malwarebytes : Free anti-malware download

Database version: v2012.09.07.13

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Dave :: DAVE-PC [administrator]

9/11/2012 1:12:17 AM
mbam-log-2012-09-11 (04-06-04).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 718509
Time elapsed: 2 hour(s), 48 minute(s), 50 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 16
HKCR\CLSID\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKCR\TypeLib\{44444444-4444-4444-4444-440044344491} (PUP.GamePlayLab) -> No action taken.
HKCR\Interface\{55555555-5555-5555-5555-550055345591} (PUP.GamePlayLab) -> No action taken.
HKCR\CrossriderApp0003491.BHO.1 (PUP.GamePlayLab) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110011341191} (PUP.GamePlayLab) -> No action taken.
HKCR\CrossriderApp0003491.BHO (PUP.GamePlayLab) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Vid-Saver (Adware.GamePlayLabs) -> No action taken.
HKCR\CrossriderApp0003491.FBApi (PUP.CrossFire.Gen) -> No action taken.
HKCR\CrossriderApp0003491.FBApi.1 (PUP.CrossFire.Gen) -> No action taken.
HKCR\CrossriderApp0003491.Sandbox (PUP.CrossFire.Gen) -> No action taken.
HKCR\CrossriderApp0003491.Sandbox.1 (PUP.CrossFire.Gen) -> No action taken.
HKCU\SOFTWARE\INSTALLEDBROWSEREXTENSIONS\215 APPS (PUP.CrossFire.SA) -> No action taken.

Registry Values Detected: 2
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|kowuzpecxaxj (Trojan.Phex.THAGen9) -> Data: C:\Users\Dave\kowuzpecxaxj.exe -> No action taken.
HKCU\Software\InstalledBrowserExtensions\215 Apps|3491 (PUP.CrossFire.SA) -> Data: Vid-Saver -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 9
C:\Users\Dave\kowuzpecxaxj.exe (Trojan.Phex.THAGen9) -> No action taken.
C:\Program Files (x86)\Vid-Saver\Vid-Saver.dll (PUP.GamePlayLab) -> No action taken.
C:\$Recycle.Bin\S-1-5-18\$dacfecbb120bc22c1fb9e19fdbbb9e61\n (Trojan.0Access) -> No action taken.
C:\$Recycle.Bin\S-1-5-18\$dacfecbb120bc22c1fb9e19fdbbb9e61\U\00000001.@ (Trojan.0Access) -> No action taken.
C:\$Recycle.Bin\S-1-5-18\$dacfecbb120bc22c1fb9e19fdbbb9e61\U\80000000.@ (Trojan.0Access) -> No action taken.
C:\$Recycle.Bin\S-1-5-18\$dacfecbb120bc22c1fb9e19fdbbb9e61\U\800000cb.@ (Trojan.0Access) -> No action taken.
C:\$Recycle.Bin\S-1-5-21-921460983-3056730930-4089156627-1000\$dacfecbb120bc22c1fb9e19fdbbb9e61\n (Trojan.0Access) -> No action taken.
C:\Program Files (x86)\Vid-Saver\Uninstall.exe (Adware.GamePlayLabs) -> No action taken.
C:\Users\Dave\AppData\Local\Temp\422516914.exe (Trojan.Phex.THAGen9) -> No action taken.

(end)

Viewing all articles
Browse latest Browse all 2798

Trending Articles