A Suspicious Keygen

Sure. It takes a lot of weight off.

here

Malwarebytes' Anti-Malware 1.31
Database version: 1456
Windows 6.0.6000

12/30/2008 4:22:43 PM
mbam-log-2008-12-30 (16-22-41).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Objects scanned: 158249
Time elapsed: 1 hour(s), 6 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Owner\AppData\Local\Temp\wz11d2\keygen.exe (Backdoor.SDBot) -> No action taken.
C:\Users\Owner\AppData\Local\Temp\wz2459\keygen.exe (Backdoor.SDBot) -> No action taken.
C:\Users\Owner\AppData\Local\Temp\wz94d6\keygen.exe (Backdoor.SDBot) -> No action taken.
C:\Users\Owner\AppData\Local\Temp\wz9b2d\keygen.exe (Backdoor.SDBot) -> No action taken.

Your computer has multiple infections, including a backdoor. A backdoor gives intruders complete control of your computer, logs your keystrokes, steal personal information, etc.

You are strongly advised to do the following:

• Disconnect the computer from the Internet and from any networked computers until it is cleaned.
  
• Back up all your important data except programs. The programs can be reinstalled back from the original disc or from the Net.
  
• Call all your banks, financial institutions, credit card companies and inform them that you may be a victim of identity theft and put a watch on your accounts. If you don't mind the hassle, change all your account numbers.
  
• From a clean computer, change all your passwords (ISP login password, your email address(es) passwords, financial accounts, PayPal, eBay, Amazon, online groups and forums and any other online activities you carry out which require a username and password).
  

Do NOT change your passwords from this computer as the attacker will be able to get all the new passwords and transaction records.

Due to its backdoor functionality, your computer is very likely to have been compromised and there is no way that it can be trusted again. Many experts in the security community believe that once infected with this type of Trojan, the best course of action would be to do a reformat and reinstallation of the operating system (OS). However, if you do not have the resources to reinstall your OS and would like me to attempt to clean your machine, I will be happy to do so.

To help you understand more, please take some time to read the following articles:

What are Remote Access Trojans and why are they dangerous
How do I respond to a possible identity theft and how do I prevent it
When should do a reformat and reinstallation of my OS
Where to backup your files
How to backup your files in Windows XP
Restoring your backups

Ummmm... so how do you clean my system without reformatting?

[i] don't want to go through installing all my programs again. it's a HASSLE. and plus I don't use the bank on this computer.

Okay.
MBAM says that it scanned but hasn't removed the problem.
Did you get that before removing them or forget to remove them?

well heres the new log





Malwarebytes' Anti-Malware 1.31
Database version: 1456
Windows 6.0.6000

12/30/2008 4:37:24 PM
mbam-log-2008-12-30 (16-37-24).txt

Scan type: Full Scan (C:\|D:\|E:\|F:\|G:\|H:\|I:\|)
Objects scanned: 158249
Time elapsed: 1 hour(s), 6 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 4

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Owner\AppData\Local\Temp\wz11d2\keygen.exe (Backdoor.SDBot) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Temp\wz2459\keygen.exe (Backdoor.SDBot) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Temp\wz94d6\keygen.exe (Backdoor.SDBot) -> Quarantined and deleted successfully.
C:\Users\Owner\AppData\Local\Temp\wz9b2d\keygen.exe (Backdoor.SDBot) -> Quarantined and deleted successfully.

Since this issue is resolved, this topic is closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter.

Everyone else, please open a new topic for your questions.