Jump to content

Malwarebytes

False positive?


4 replies to this topic

#1
Tin

    New Member

  • Members
  • Pip
  • 3 posts
Hello i recently upgraded to Windows 7 Home Premium (clean install), and i also just recently installed MBAM when i scanned my computer it came up with 2 infections (listed below)

Hijack.StartMenu and Hijack.DisplayProperties

nothing feels wrong with my computer it runs fine so i was wondering if i should remove both or just ignore. Any tips/info would be great.

Thank you all for your time.

#2
exile360

    exile

  • Moderators
  • PipPipPipPipPipPip
  • 12,969 posts
  • Gender:Male
Greetings and welcome :)

Please post a copy of the scan log so that I may see the exact detections.

For the Hijack.DisplayProperties entry please take a look at this thread.

Thanks ;)
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#3
Tin

    New Member

  • Members
  • Pip
  • 3 posts

View Postexile360, on Nov 15 2009, 11:34 PM, said:

Greetings and welcome :)

Please post a copy of the scan log so that I may see the exact detections.

For the Hijack.DisplayProperties entry please take a look at this thread.

Thanks :)

Posted below is my scan log, sorry i forgot to do that

Malwarebytes' Anti-Malware 1.41
Database version: 3178
Windows 6.1.7600

11/16/2009 9:02:39 AM
mbam-log-2009-11-16 (09-02-32).txt

Scan type: Quick Scan
Objects scanned: 105958
Time elapsed: 3 minute(s), 23 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#4
exile360

    exile

  • Moderators
  • PipPipPipPipPipPip
  • 12,969 posts
  • Gender:Male
The Start_ShowSearch indicates that the Search option is not in the Start Menu which is quite normal for Vista and 7 since Microsoft was forced to remove it by Google in the anti-trust lawsuit. You can safely have Malwarebytes' ignore both of these detections as they aren't directly malicious and are quite normal in the operating system you're running :) .
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#5
Tin

    New Member

  • Members
  • Pip
  • 3 posts

View Postexile360, on Nov 16 2009, 08:25 PM, said:

The Start_ShowSearch indicates that the Search option is not in the Start Menu which is quite normal for Vista and 7 since Microsoft was forced to remove it by Google in the anti-trust lawsuit. You can safely have Malwarebytes' ignore both of these detections as they aren't directly malicious and are quite normal in the operating system you're running :D .


thanks Exile for your help and the quick replies :)





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us