False positive ?

[MikeW]

FP caused I believe by Cryptoprevent version 6

Malwarebytes Anti-Malware

www.malwarebytes.org

Scan Date: 16/06/2014

Scan Time: 08:14:33

Logfile: log.txt

Administrator: Yes

Version: 2.00.2.1012

Malware Database: v2014.06.16.02

Rootkit Database: v2014.06.02.01

License: Premium

Malware Protection: Enabled

Malicious Website Protection: Enabled

Self-protection: Disabled

OS: Windows 7 Service Pack 1

CPU: x64

File System: NTFS

User: User

Scan Type: Threat Scan

Result: Completed

Objects Scanned: 293389

Time Elapsed: 4 min, 19 sec

Memory: Enabled

Startup: Enabled

Filesystem: Enabled

Archives: Enabled

Rootkits: Disabled

Heuristics: Enabled

PUP: Warn

PUM: Enabled

Processes: 0

(No malicious items detected)

Modules: 0

(No malicious items detected)

Registry Keys: 0

(No malicious items detected)

Registry Values: 0

(No malicious items detected)

Registry Data: 2

Broken.OpenCommand, HKCR\piffile\shell\open\command, "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.exe" *"Good: ("Bad: ("C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.exe" *"%1" %*),No Action By User,[ffffffffffffffffffffffffffffffff]" %*)" %*, %4, %5

Broken.OpenCommand, HKCR\scrfile\shell\open\command, "C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.exe" "Good: ("Bad: ("C:\Program Files (x86)\Foolish IT\CryptoPrevent\CryptoPreventFilterMod.exe" "%1" %*),No Action By User,[ffffffffffffffffffffffffffffffff]" /S)" %*, %4, %5

Folders: 0

(No malicious items detected)

Files: 0

(No malicious items detected)

Physical Sectors: 0

(No malicious items detected)

(end)

[miekiemoes]

Hi,

 

Please add this to your whitelist in Malwarebytes. By default, the .scr and .pif files should have “%1” %* as valuedata for the command.

[MikeW]

Many thanks for swift reply