7 replies to this topic

[Herser]

Hello

I'm French and my english is not sure
I help on french forum and newsgroup
And a user asks me for this line :

Fichier(s) infecté(s):
C:\Documents and Settings\Blmp\Bureau\ProcessManager.lnk (Rogue.Link)
-> No action taken

It's the program Bill2's Process Manager :
http://www.bill2-sof...processmanager/
And not a rogue

Thanks for MBAM

Herser

[TeMerc]

Hi and welcome to the forums.

Thanks for bringing this to our attention, please follow the directions in the link below to get us what we need:
http://www.malwareby...?showtopic=3228

[Herser]

TeMerc, on Jul 28 2009, 12:20 AM, said:

Hi and welcome to the forums.

Thanks for bringing this to our attention, please follow the directions in the link below to get us what we need:
http://www.malwareby...?showtopic=3228

Yes i know
But it's not my computer.
I help a user
And he don't reply.
So i can't use "mbam.exe /developer" for him !!!

I wait a reply for him

Thank's

Herser

[Herser]

Hi ! The log :


Malwarebytes' Anti-Malware 1.39
Version de la base de données: 2522
Windows 5.1.2600 Service Pack 3

28/07/2009 20:34:39
mbam-log-2009-07-28 (20-34-04).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 153835
Temps écoulé: 10 minute(s), 54 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 3
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 1

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. [5138494534363830414438586445483634456446343641424738615248395356345138614674688
38084807185615270688683748590013670798570839334798574557483868437748466677770478
0
857471903018130117]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. [5138494534363830414438586445483634456446343641424738615248395356345138614674688
38084807185615270688683748590013670798570839339748370886677773774846667777047808
5
7471903018130117]
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. [5138494534363830414438586445483634456446343641424738615248395356345138614674688
38084807185615270688683748590013670798570839354816966857084377484666777704780857
4
71903018130117]

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Blmp\Bureau\ProcessManager.lnk (Rogue.Link) -> No action taken. [3857535134303627613780688678707985840166796901527085857479728461357778816135868
370668661498380687084844666796672708315777976]

[Herser]

Hi !

It's the last line which is false positive :

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
C:\Documents and Settings\Blmp\Bureau\ProcessManager.lnk (Rogue.Link) -> No action taken. [3857535134303627613780688678707985840166796901527085857479728461357778816135868
370668661498380687084844666796672708315777976]

It's a french programme for priority to multiprocessor :
http://www.bill2-sof...processmanager/

It's not a rogue

Thank's

Herser

[nosirrah]

C:\Documents and Settings\Blmp\Bureau\ProcessManager.lnk <- this was fixed a while ago , I am unable to affect detection of this unless you update .

[Falkra]

Hi, I get no detection with latest update 2557_1.40, even if I manually place a copy of the shortcut on desktop.

[Herser]

Thank's nosirrah
Merci Falkra

I post to the user who asked me

Regards

Herser