Jump to content

Malwarebytes

False Positives??


7 replies to this topic

#1
Hans001

    New Member

  • Members
  • Pip
  • 1 posts
Hej,

I'm a noob and have a new laptop right out of the box (two days old). One of the first things I did was download and install MAMB and then updated Windows 7 & Microsoft Office. Then I ran MBAM, wish I ran it before installing updates but really had no reason to, computer was fresh from factory. Anyway I got the below FPs (I hope). Can someone comfirm these FPs? Many thanks!

Malwarebytes' Anti-Malware 1.41
Database version: 3171
Windows 6.1.7600

11/14/2009 1:06:45 PM
mbam-log-2009-11-14 (13-06-27).txt

Scan type: Full Scan (C:\|D:\|G:\|)
Objects scanned: 257576
Time elapsed: 27 minute(s), 5 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{abd3b5e1-b268-407b-a150-2641dab8d898} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{abd3b5e1-b268-407b-a150-2641dab8d898} (Trojan.BHO) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Program Files (x86)\Common Files\Homepage Protection\HomepageProtection.dll (Trojan.BHO) -> No action taken.

#2
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
Please post a developers log :

http://www.malwareby...?showtopic=3228
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
If you could also zip and attach a copy of HomepageProtection.dll to your next post that would help .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4
kcazzie

    New Member

  • Members
  • Pip
  • 14 posts
  • Gender:Male
  • Location:USA
Looks like I had the same 'badboys' (hopefully FP) as the OP... I made a jpeg of my problems ...
If there is anything else you need just ask...
Thanks...

PS... I may have had one more...!...

Attached Files



#5
kcazzie

    New Member

  • Members
  • Pip
  • 14 posts
  • Gender:Male
  • Location:USA

View Postkcazzie, on Nov 16 2009, 01:35 AM, said:

Looks like I had the same 'badboys' (hopefully FP) as the OP... I made a jpeg of my problems ...
If there is anything else you need just ask...
Thanks...

PS... I may have had one more...!...
I was going to edit this post but it looks like you can't edit ... 2nd...I just read you don't like others except mods/helpers of this forum answering posts...Sorry, I didn't know this at the time I posted, I was adding that I had the same 'badboys' and thought it may help with understanding the problem... 3rd... Looks like 'Hijack.DisplayProperties' (Win 7-64) was already talked about and solved in this thread -> http://www.malwarebytes.org/forums/index.p...=7653&st=80 by just changing the Reg or applying a fix made here...
I'll leave the thread to the OP and the ppl here...
Thanks again for a wonderful application...

#6
kcazzie

    New Member

  • Members
  • Pip
  • 14 posts
  • Gender:Male
  • Location:USA
The OP, Hans001, never returned your, "Please post a developers log :" to find out if these are FPs ...

-> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{abd3b5e1-b268-407b-a150-2641dab8d898} (Trojan.BHO)

-> HKEY_CLASSES_ROOT\CLSID\{abd3b5e1-b268-407b-a150-2641dab8d898} (Trojan.BHO)

- > C:\Program Files (x86)\Common Files\Homepage Protection\HomepageProtection.dll

My wife's pretty new W 7 64 also has these on her PC...

Would you want me to post a developers log on these... My wife has these Quarantined ...

Thanks...

#7
nosirrah

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 5,158 posts
  • Location:Northampton, MA USA
I believe this was fixed already . If you have quarantined this please restore it , update and scan again .

At this point a copy of HomepageProtection.dll would help us more . If you can zip and attach a copy to your next post .
Bruce Harrison
Vice President of Research

Posted Image

Follow us: Twitter, Become a fan: Facebook

#8
kcazzie

    New Member

  • Members
  • Pip
  • 14 posts
  • Gender:Male
  • Location:USA

View Postnosirrah, on Nov 17 2009, 05:12 AM, said:

At this point a copy of HomepageProtection.dll would help us more . If you can zip and attach a copy to your next post .
Here's the 'zipped' Attached copy of the 'HomePro.dll' you asked for...

Running the scan now and so far it looks good...

Thanks...

Attached Files







1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us