11 replies to this topic

[RedDawn]

Hi,

As requested Here


MBAM Results:

Malwarebytes' Anti-Malware 1.11
Database version: 642

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 138532
Time elapsed: 38 minute(s), 21 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent (Adware.Agent) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


Just to add, the Reg key seemed to be marked as infected during the Heuristics part of the scan. I've also run a full scan with SAS and F-secure online scanner, all results clear.

[RedDawn]

Panda ActiveScan 2.0 Results:


;*******************************************************************************
******************************************
ANALYSIS: 2008-04-18 14:42:56
PROTECTIONS: 1
MALWARE: 5
SUSPECTS: 0
;*******************************************************************************
*****************************************
PROTECTIONS
Description Version Active Updated
;===========================================================================
McAfee VirusScan No Yes
;===========================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===========================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\U
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\U
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\U
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\U
00180246 Cookie/XXXCounter TrackingCookie No 0 Yes No C:\U
;============================================================================
SUSPECTS
Sent Location

��-��C
3

;===========================================================================
;===========================================================================
VULNERABILITIES
Id Severity Description

��-��C
3

;===========================================================================
;===========================================================================

[RedDawn]

HJT Log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:52:52, on 18/04/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\sttray.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\McAfee\MSK\mskagent.exe
C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
C:\Program Files\Common Files\logishrd\LComMgr\Communications_Helper.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\notepad.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.ie/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.ie/ig/dell?hl=en&cli...amp;ibd=6070412
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft....k/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft....k/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft....k/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer provided by Dell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O1 - Hosts: ::1 localhost
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: SecureBrowsingBho Helper - {7632ABCA-B104-4fbc-9C70-419C4147061B} - C:\Program Files\Finjan Secure Browsing\bho.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\PROGRA~1\mcafee\VIRUSS~1\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6253\SiteAdv.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Finjan Secure Browsing - {B99F805C-F0B1-48EA-8C8B-753BFCBED913} - C:\Program Files\Finjan Secure Browsing\bho.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [MskAgentexe] C:\Program Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [ECenter] c:\dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [SiteAdvisor] C:\Program Files\SiteAdvisor\6253\SiteAdv.exe
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1984928037-2126404895-2216295374-1003\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'net#lomster11')
O4 - HKUS\S-1-5-18\..\RunOnce: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P5 /q C:\Users\NET#LO~1\AppData\Local\Temp\Low\~DF7527.tmp C:\Users\NET#LO~1\AppData\Local\Temp\Low\~DF7518.tmp C:\Users\NET#LO~1\AppData\Local\Temp\Low\Low\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\Gerry\AppData\Local\Temp\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\TEMPOR~1\Content.SH! C:\Users\NET#LO~1\AppData\Local\Temp\TEMPOR~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History\History.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History.SH! C:\Users\NET#LO~1\AppData\Local\Temp\Cookies.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History\History.IE5\MSHIST~1.SH! C:\Users\Gerry\AppData\Local\Temp\Low\HSPERF~1.SH! C:\$Recycle.Bin\S-6159~1\$RWCG2RO.SH! C:\$Recycle.Bin\S-6159~1\$RMMKGKP\HSPERF~1.SH! C:\$Recycle.Bin\S-6159~1\$RMMKGKP.SH! C:\Users\Gerry\AppData\Local\Temp\TEMPOR~1\Content.SH! C:\Users\Gerry\AppData\Local\Temp\TEMPOR~1.SH! C:\Users\Gerry\
O4 - HKUS\.DEFAULT\..\RunOnce: [DelayShred] c:\PROGRA~1\mcafee\mshr\ShrCL.EXE /P5 /q C:\Users\NET#LO~1\AppData\Local\Temp\Low\~DF7527.tmp C:\Users\NET#LO~1\AppData\Local\Temp\Low\~DF7518.tmp C:\Users\NET#LO~1\AppData\Local\Temp\Low\Low\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\Low\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\HSPERF~1.SH! C:\Users\Gerry\AppData\Local\Temp\HSPERF~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\TEMPOR~1\Content.SH! C:\Users\NET#LO~1\AppData\Local\Temp\TEMPOR~1.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History\History.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History.SH! C:\Users\NET#LO~1\AppData\Local\Temp\Cookies.SH! C:\Users\NET#LO~1\AppData\Local\Temp\History\History.IE5\MSHIST~1.SH! C:\Users\Gerry\AppData\Local\Temp\Low\HSPERF~1.SH! C:\$Recycle.Bin\S-6159~1\$RWCG2RO.SH! C:\$Recycle.Bin\S-6159~1\$RMMKGKP\HSPERF~1.SH! C:\$Recycle.Bin\S-6159~1\$RMMKGKP.SH! C:\Users\Gerry\AppData\Local\Temp\TEMPOR~1\Content.SH! C:\Users\Gerry\AppData\Local\Temp\TEMPOR~1.SH! C:\Users\Gerry\
O4 - Global Startup: Belkin Wireless USB Utility.lnk = C:\Program Files\Belkin\USB F5D7050\Wireless Utility\Belkinwcui.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O13 - Gopher Prefix:
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoft...s/as2stubie.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-sec...m/ols/fscax.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: McAfee Application Installer Cleanup (0098011208521330) (0098011208521330mcinstcleanup) - McAfee, Inc. - C:\Windows\TEMP\009801~1.EXE
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel® Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service (MPS9) - McAfee, Inc. - C:\PROGRA~1\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller Service (MSK80Service) - McAfee Inc. - C:\Program Files\McAfee\MSK\MskSrver.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SiteAdvisor Service - Unknown owner - C:\Program Files\SiteAdvisor\6253\SAService.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe

--
End of file - 12146 bytes

[JeanInMontana]

What is the status here? It doesn't look to me like you posted the entire Panda log. There is no incident report, yet it states there is 5 malwares.

[RedDawn]

JeanInMontana, on Apr 24 2008, 12:25 AM, said:

What is the status here? It doesn't look to me like you posted the entire Panda log. There is no incident report, yet it states there is 5 malwares.

Hi Jean,

If you look at the Panda log again, you'll see the 5 malwares listed as being 5 cookies. I just deleted the paths as the log wasn't rendering properly when posted.

Thanks for any help.

[JeanInMontana]

I did look at the log and that's why I mentioned it is not complete. Your issue is whether or not the line from MBAM is a F/P correct? Complete logs are what will help to determine this. Has anyone from the MBAM dev team been in contact and is this issue on going or resolved?

[RedDawn]

JeanInMontana, on Apr 24 2008, 06:49 PM, said:

I did look at the log and that's why I mentioned it is not complete. Your issue is whether or not the line from MBAM is a F/P correct? Complete logs are what will help to determine this. Has anyone from the MBAM dev team been in contact and is this issue on going or resolved?

Hi Jean

Below is the full Panda log results that I recieved.


I have not had any contact or help to resolve my problem from anyone except yourself.


Thanks.


Panda ActiveScan 2.0 Results:


;*******************************************************************************
********************************************************************************
*
*******************
ANALYSIS: 2008-04-18 14:42:56
PROTECTIONS: 1
MALWARE: 5
SUSPECTS: 0
;*******************************************************************************
********************************************************************************
*
*******************
PROTECTIONS
Description Version Active Updated
;===============================================================================
================================================================================
=
===================
McAfee VirusScan No Yes
;===============================================================================
================================================================================
=
===================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===============================================================================
================================================================================
=
===================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\net#lomster11\AppData\Roaming\Microsoft\Windows\Cookies\Low\net#lomster11@net[6].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Gerry\AppData\Roaming\Microsoft\Windows\Cookies\Low\gerry@atdmt[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Gerry\AppData\Roaming\Microsoft\Windows\Cookies\Low\gerry@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Gerry\AppData\Roaming\Microsoft\Windows\Cookies\Low\gerry@bs.serving-sys[2].txt
00180246 Cookie/XXXCounter TrackingCookie No 0 Yes No C:\Users\net#lomster11\AppData\Roaming\Microsoft\Windows\Cookies\Low\net#lomster11@net[10].txt
;===============================================================================
================================================================================
=
===================
SUSPECTS
Sent Location ��-��C
3

;===============================================================================
================================================================================
=
===================
;===============================================================================
================================================================================
=
===================
VULNERABILITIES
Id Severity Description ��-��C
3

;===============================================================================
================================================================================
=
===================
;===============================================================================
================================================================================
=
===================

[JeanInMontana]

Ok well I am sorry. The team is very busy right now with behind the scenes issues. Let's get another full system scan [C drive] with updated MBAM and see what its showing now. Please also recap any symptoms your having.

[RedDawn]

JeanInMontana, on Apr 25 2008, 08:20 AM, said:

Ok well I am sorry. The team is very busy right now with behind the scenes issues. Let's get another full system scan [C drive] with updated MBAM and see what its showing now. Please also recap any symptoms your having.

Hi Jean,

As requested, the updated MBAM log is below. I don't seem to be having any noticeable adverse symptoms. The Reg. file is definitely being marked as infected during the heuristics part of the scan.

Thanks.



MBAM Results:


Malwarebytes' Anti-Malware 1.11
Database version: 681

Scan type: Full Scan (C:\|D:\|E:\|)
Objects scanned: 139302
Time elapsed: 47 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Tencent (Adware.Agent) -> No action taken.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[JeanInMontana]

OK here is what the lead researcher says.

Quote

That hit in his first log was either a left over piece from a long dead infection or a FP .

I have removed that def because I think there are a small number of apps that use it as well .

Either way its just a trace and has no power to do anything either way .

I have also pasted your new MBAM log into that topic.

Sorry for the rude interjection into this topic it has been taken care of.

[RedDawn]

Hi Jean,

Scan is clear now (see below), must have been a FP as I've never had any infections. Thanks so much for all your help.

Take care.


Malwarebytes' Anti-Malware 1.11
Database version: 686

Scan type: Quick Scan
Objects scanned: 35179
Time elapsed: 3 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[JeanInMontana]

Thank you for bringing it to our attention. We appreciate users letting us know of any problems, that's how MBAM gets to be better than the rest.

Since this topic has been resolved I will now close it to prevent others from posting into it.