Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4429 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 14.08.2010 22:31:07 mbam-log-2010-08-14 (22-31-07).txt Scan type: Quick scan Objects scanned: 134806 Time elapsed: 5 minute(s), 43 second(s) Memory Processes Infected: 2 Memory Modules Infected: 3 Registry Keys Infected: 1 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 2 Files Infected: 16 Memory Processes Infected: C:\Program Files (x86)\RelevantKnowledge\rlservice.exe (Adware.RelevantKnowledge) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe (Adware.RelevantKnowledge) -> No action taken. Memory Modules Infected: C:\Program Files (x86)\RelevantKnowledge\rlls.dll (Adware.RelevantKnowledge) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\MSVCP71.DLL (Spyware.MarketScore) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\MSVCR71.DLL (Spyware.MarketScore) -> No action taken. Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{d08d9f98-1c78-4704-87e6-368b0023d831} (Adware.RelevantKnowledge) -> No action taken. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken. Folders Infected: C:\Program Files (x86)\RelevantKnowledge (Spyware.MarketScore) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge (Spyware.MarketScore) -> No action taken. Files Infected: C:\Program Files (x86)\RelevantKnowledge\rlservice.exe (Adware.RelevantKnowledge) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe (Adware.RelevantKnowledge) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rlls.dll (Adware.RelevantKnowledge) -> No action taken. C:\Users\Tor Einar\AppData\Local\Temp\C49D.tmp (Rootkit.Dropper) -> No action taken. C:\Users\Tor Einar\AppData\Local\Temp\ukdoi.exe (Adware.BHO) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\MSVCP71.DLL (Spyware.MarketScore) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\MSVCR71.DLL (Spyware.MarketScore) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rlls64.dll (Spyware.MarketScore) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rloci.bin (Spyware.MarketScore) -> No action taken. C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.exe (Spyware.MarketScore) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\About RelevantKnowledge.lnk (Spyware.MarketScore) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Privacy Policy and User License Agreement.lnk (Spyware.MarketScore) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Support.lnk (Spyware.MarketScore) -> No action taken. C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RelevantKnowledge\Uninstall Instructions.lnk (Spyware.MarketScore) -> No action taken. C:\Users\Tor Einar\Local Settings\Application Data\Windows Server\admin.txt (Malware.Trace) -> No action taken. C:\Users\Tor Einar\Templates\memory.tmp (Trojan.Agent) -> No action taken.