inquiringmind

I did, and that's exactly what happened. Thanks for the information and reassurance. Very clever!

A recent scan for hidden registry entries provided 6 hits related to mbamswissarmy.sys. See: Starting search for hidden objects. HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MBAMSwissArmy\type [NOTE] The registry entry is invisible. HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MBAMSwissArmy\start [NOTE] The registry entry is invisible. HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MBAMSwissArmy\errorcontrol [NOTE] The registry entry is invisible. \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys C:\WINDOWS\system32\drivers\mbamswissarmy.sys [NOTE] The registry entry is invisible. HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MBAMSwissArmy\displayname [NOTE] The registry entry is invisible. HKEY_LOCAL_MACHINE\System\ControlSet003\Services\MBAMSwissArmy\Security\security [NOTE] The registry entry is invisible. This was detected while my free, unregistered version of mbam was not open, and no mbam process was running. I cannot find the file mbamswissarmy.sys anywhere on my hard drive. It certainly is not among the mbam program files and is not in the windows/system32/drivers folder either. Am I infected with some sort of malware?