Microsoft Essentials popped a warning while doing a scan using Malwarebytes that had been just updated to 1.50.1. TrojanDownloader:Java/Openstream.AM The quick scan from Malwarebytes noted one issue in a registry file as highlighted below: Malwarebytes' Anti-Malware 1.44 Database version: 3510 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 6/20/2010 5:13:39 PM mbam-log-2010-06-20 (17-13-39).txt Scan type: Full Scan (C:\|) Objects scanned: 339032 Time elapsed: 40 minute(s), 31 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) MS Essential didn't wait for me to respond and it first quarantined and then deleted the file as I was doing research and typing into this forum. If this was not a part of the new upload (Direct link from Malwarebytes to BleepingComputer....), can someone advise should I have expected a Quick Scan to detect this and if so, why didn't 1.50.1 scan it? Thanks, Happy New Year
