a same threat(Registry Keys) is detected by MalwarBytes about twice despite deleting it.

[cooperator]

Hello everyone.
I have a MalwarButes AntiMalwar registered and up to date. I booted to safe mode with enbleing netwring, then  run full scan of my OS partition, and the other partition, I found a threat. After that, I let MalwarBytes deleted all threats. Next, I restart my computer.

After about three days while using internet, I have also scanned my OS partition and the other partition. I found the same threat detected again, although it was removed in the fist scan. Is the same threat possible to be gained again from browsing the internet? OR IS IT AUTOMATICALLY REINSTALLED ITSELF WHEN ACCESSING THE INTERNET????

 

This is the threat detected:

Registry Keys Detected: 1
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{FF103732-4528-4322-AA8B-F7849AB7776B} (PUP.Optional.BestToolbars)

 

Threat sounds as though it is a toolbar. However, I really don't see any newly strange toolbar in all my browsers.

 

Note: I have not installed any program since the previous scan, except I browse the internet

Besides, the Norton Internet Security didn't detect anything at all in all scans

What is the problem?

 

Any comments would be highly appreciated.

 

[MrCharlie]

Welcome to the forum.

It's just a left over registry entry.

You may want to try this:

Lets clean out any adware: (this will require a reboot so save all your work)

Please download AdwCleaner by Xplode and save to your Desktop.

• Double click on AdwCleaner.exe to run the tool.
  Vista/Windows 7/8 users right-click and select Run As Administrator
• Click on the Scan button.
• AdwCleaner will begin...be patient as the scan may take some time to complete.
• When it's done you'll see: Pending: Please uncheck elements you don't want removed.
• Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
• Look over the log especially under Files/Folders for any program you want to save.
• If there's a program you may want to save, just uncheck it from AdwCleaner.
• If you're not sure, post the log for review. (all items found are adware/spyware/foistware)
• If you're ready to clean it all up.....click the Clean button.
• After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
• Copy and paste the contents of that logfile in your next reply.
• A copy of that logfile will also be saved in the C:\AdwCleaner folder.
• Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
• To restore an item that has been deleted:
• Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

Then..................

Open up Malwarebytes > Settings Tab > Scanner Settings > Under action for PUP > Select Show in Results List and Check for removal.

Please Update and run a Quick Scan with Malwarebytes Anti-Malware, post the report.

Make sure that everything is checked, and click Remove Selected.

Please let me know how computer is running now, MrC


 

[AdvancedSetup]

Are you still with us?

[LDTate]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!