3 replies to this topic

[JasonWade]

I didn't follow the pre-hjt instructions, cause I"m not sure if my topic belongs here and if those steps are necesarry for me. So excuse me if either this topic is wrong or if I did need to follow them.

Yesterday I did an MBAM scan, it found 1 wrong thing which I deleted, here's the log:
Malwarebytes' Anti-Malware 1.28
Database versie: 1142
Windows 5.1.2600 Service Pack 3

12-9-2008 21:31:57
mbam-log-2008-09-12 (21-31-57).txt

Scan type: Snelle Scan
Objecten gescand: 16994
Verstreken tijd: 3 minute(s), 8 second(s)

Geheugenprocessen geïnfecteerd: 0
Geheugenmodulen geïnfecteerd: 0
Registersleutels geïnfecteerd: 0
Registerwaarden geïnfecteerd: 0
Registerdata bestanden geïnfecteerd: 1
Mappen geïnfecteerd: 0
Bestanden geïnfecteerd: 0

Geheugenprocessen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Geheugenmodulen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registersleutels geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registerwaarden geïnfecteerd:
(Geen kwaadaardige items gevonden)

Registerdata bestanden geïnfecteerd:
HKEY_CLASSES_ROOT\scrfile\shell\open\command\ (Broken.OpenCommand) -> Bad: ("%1" %*) Good: ("%1" /S) -> Quarantined and deleted successfully.

Mappen geïnfecteerd:
(Geen kwaadaardige items gevonden)

Bestanden geïnfecteerd:
(Geen kwaadaardige items gevonden)

After I deleted that I keep getting the following message from winpatrol (which I installed after someone who helped me here the last time suggested that):


it keeps coming back after every so many minutes (not sure how much time is in between each time) I keep clicking no,, but should I click yes or is no right? And is this a virus?

[TonyKlein]

This is just MBAM restoring the default Open command for that particular filetype. It is by no means a serious issue, and you should tell WinPatrol to allow it.

[JasonWade]

Ok thank you, I'll click yes next time then

[TonyKlein]

np, you're very welcome.