LoneWolf

Updated def's and scanned again, no FP's this time. Thank you Bruce.

Nice to know it's FP's, but another scan and they still appear??? mbam_log_2009_11_04__08_42_30_.txt

Can anyone confirm that these may be FP's ?

False positives? Edit: I believe these may belong to Shadow Defender. http://www.shadowdefender.com/ Edit again: Not a peep out of A-squared or Prevx with their scans. mbam_log_2009_11_03__13_36_58_.txt

I did install a custom Application Filtering GUI replacement for Look n stop firewall a while back from here http://www.mntolympus.org/phpBB3/viewtopic...f=38&t=6028 but have sense uninstalled LnS. Could this possiably be it?

Just did a quickscan with MBAM 1.40 and got the same detection as centralkong, wondering if indeed it is a FP or genuine and safe to remove? This was detected durring the heuristic scan. mbam_log_2009_08_08__09_45_50_.txt mbam_log_2009_08_08__09_45_50_.txt

Should I worry about this or maybe a FP? mbam_log_2009_05_04__19_03_26_.txt mbam_log_2009_05_04__19_03_26_.txt

I see no explorer.exe here???

After updating defs and doing another scan all is clean?????? mbam_log_2009_02_08__16_26_56_.txt mbam_log_2009_02_08__16_26_56_.txt

Detected at the end of quick scan.......Xp home mbam_log_2009_02_08__12_01_43_.txt mbam_log_2009_02_08__12_01_43_.txt

So, should I remove this or leave it alone. Thank you for your help.

Thanks for checking. GTDownDE_87.zip GTDownDE_87.zip

Infection or FP ? Malwarebytes' Anti-Malware 1.31 Database version: 1497 Windows 5.1.2600 Service Pack 1 12/13/2008 6:39:25 PM mbam-log-2008-12-13 (18-39-20).txt Scan type: Quick Scan Objects scanned: 58739 Time elapsed: 11 minute(s), 16 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 4 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\TypeLib\{df058c45-cd18-453e-8745-5a77f60722ab} (Adware.Gdown) -> No action taken. [4134524130346988668370154069808879130170702225196926697026226618247118672320246 82317702567252169182424] HKEY_CLASSES_ROOT\Interface\{b5a33c35-7298-4d15-8753-a2e851e2eab3} (Adware.Gdown) -> No action taken. [4134524130346988668370154069808879130170702225196926697026226618247118672320246 82317702567252169182424] HKEY_CLASSES_ROOT\Interface\{f0d2b812-752d-4af1-a2fb-968c4d8446db} (Adware.Gdown) -> No action taken. [4134524130346988668370154069808879130170702225196926697026226618247118672320246 82317702567252169182424] HKEY_CLASSES_ROOT\CLSID\{e856b973-45fd-4559-8f82-eab539144667} (Adware.Gdown) -> No action taken. [4134524130346988668370154069808879130170702225196926697026226618247118672320246 82317702567252169182424] Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\SYSTEM32\GTDownDE_87.ocx (Adware.Gdown) -> No action taken. [4134524130346988668370154069808879130170702225196926697026226618247118672320246 82317702567252169182424]

Hi gerardwil, Yes thats normal with Rogue Remover, scanning is very fast.

Selected another update and it's back to normal.