Trojan.FakeAlert - from eBay ads through Java?!

I was browsing the Web, I think I was on eBay when I noticed Firefox (3.6.13) asking on top of eBay tab that "the website requires installing additional add-ins" (which I didn't touch), and my Comodo Firewall saying at the same time that a very obscure filename .exe (which I hadn't launched) is trying to connect to the Internet. Denied that, this time C:\ProgramData\bDpCcJi06308\bDpCcJi06308.exe wanted to connect. Denied that, but it had installed itself anyway. AVG real time protection didn't detect anything. That happened around 2011-02-27 20:26 local time.

Anyway, now it started killing my processes and demanding I pay for the fake Anti-Virus, business as usual.

Rebooted into Safe mode, HJT had the following entry:
O4 - HKCU\..\RunOnce: [bDpCcJi06308] C:\ProgramData\bDpCcJi06308\bDpCcJi06308.exe

Renamed the file (317952 bytes), removed the registry entry. Same folder had another file (98 bytes), same name, no extension.

MBAB detected a Trojan.FakeAlert in the bDpCcJi06308.exe but also it found a file with the same length and only 4 byte diff in Java cache:
c:\programdata\bdpccji06308_really_bad_virus\bdpccji06308.really_bad_exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\Jurrr\AppData\LocalLow\Sun\Java\deployment\cache\6.0\25\582900d9-58bfec26 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

The corresponding .idx file in Java cache links to:


I inserted "REMOVE" in the middle of the link so noone can launch it by accident. That is a known malware site.

So I think there was a rogue ad at eBay which used a Java applet security hole to install malware. I hope I removed all the malware.

Do you think my system is clean now? No keyloggers/rootkits?

HJT, DDS and MBRCheck logs - after cleanup - are attached. GMER won't run right due to 64-bit Windows.

P.S. Will update my Java, it was too old .

P.P.S. MBAB, after cleanup:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5898

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

2011-03-01 9:22:09 AM
mbam-log-2011-03-01 (09-22-09).txt

Scan type: Full scan (C:\|)
Objects scanned: 378912
Time elapsed: 14 minute(s), 41 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

 

My system has no further symptoms and the tools don't detect anything. Still, I'm not sure if it means my system is clean.