Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2019.07.03.10 rootkit: v2019.07.03.10 Windows 7 Service Pack 1 x86 NTFS Internet Explorer 11.0.9600.19236 JUNI :: JUNI-PC [administrator] 3-7-2019 22:16:00 mbar-log-2019-07-03 (22-16-00).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Kernel memory modifications detected. Deep Anti-Rootkit Scan engaged. Objects scanned: 151919 Time elapsed: 2 hour(s), 28 minute(s), 32 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 4 C:\Program Files\DAEMON Tools Lite\daemon.tools.lite.v.10.10.0.798.x32-patch.exe (HackTool.FilePatch) -> Delete on reboot. [0561d80e784f5ed81e5855985da60af6] C:\$Recycle.Bin\S-1-5-21-3580717453-3749451280-948394680-1001\$RWBMRD2\qfc.exe (Virus.Virut.Gen) -> Delete on reboot. [570fdc0a646346f01b0ac5798f73a060] C:\Windows\System32\drivers\etc\hosts (RiskWare.DontStealOurSoftware) -> Bad: (0.0.0.0 keystone.mwbsys.com127.0.0.1 systweak.com) Good: () -> Replace on reboot. [5b0b786e3f8810269fcd4de124e05ea2] C:\Windows\System32\drivers\etc\hosts (RiskWare.DontStealOurSoftware) -> Bad: (0.0.0.0 serius.mwbsys.com) Good: () -> Replace on reboot. [30361fc71aad87af115ce74725dfe31d] Physical Sectors Detected: 0 (No malicious items detected) (end)