QUOTE(chrisling @ Apr 4 2013, 10:47 AM)
A result log from MBAM posted over here would be much helpful and at least can let us go through which entries or value did not get cleared.
Malware that infects Windows has different execution method and Mac is running in a totally different environment. So do not worry the Mac will get infected, instead, if you send your Windows PC to any shop, people will just ask you to format it.
That would be last resort for you if the malware could not be got rid.
My dad has already sent it to the shop. He always goes there whenever the pc/printer has problems.
Anyways I've posted both mbam report.
MBAM log (pc)
» Click to show Spoiler - click again to hide... «
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org
Database version: v2013.04.03.05
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
CHOWPK :: CHOWPK-PC [administrator]
3/4/2013 9:20:25 PM
mbam-log-2013-04-03 (21-20-25).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 237231
Time elapsed: 7 minute(s), 31 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 2
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (PUM.UserWLoad) -> Data: C:\Users\CHOWPK\LOCALS~1\Temp\msdicjkr.com -> Delete on reboot.
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows|Load (Trojan.Ransom) -> Data: C:\Users\CHOWPK\LOCALS~1\Temp\msdicjkr.com -> Delete on reboot.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 0
(No malicious items detected)
(end)
MBAM log (pendrive)
» Click to show Spoiler - click again to hide... «
Malwarebytes Anti-Malware 1.70.0.1100
www.malwarebytes.org
Database version: v2013.04.03.05
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
CHOWPK :: CHOWPK-PC [administrator]
3/4/2013 10:14:47 PM
mbam-log-2013-04-03 (22-14-47).txt
Scan type: Custom scan (G:\|)
Scan options enabled: File System | Heuristics/Shuriken | PUP | PUM
Scan options disabled: Memory | Startup | Registry | Heuristics/Extra | P2P
Objects scanned: 6
Time elapsed: 3 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 1
G:\~$WB.FAT (Backdoor.Bot) -> Quarantined and deleted successfully.
(end)
Apr 4 2013, 07:34 PM
Quote
0.0330sec
0.61
6 queries
GZIP Disabled