Monkeys

Just installed Malwarebytes' Anti-Malware and got this on my quick scan. Is this a false positive? If not, is it anything serious? Malwarebytes' Anti-Malware 1.38 Database version: 2306 Windows 5.1.2600 Service Pack 3 18/06/2009 9:19:39 PM mbam-log-2009-06-18 (21-19-34).txt Scan type: Quick Scan Objects scanned: 94704 Time elapsed: 3 minute(s), 3 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 3 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Same here, 0 hits on VirusTotal and I was clean on my quick scan with database version 1228 earlier. Malwarebytes' Anti-Malware 1.28 Database version: 1229 Windows 5.1.2600 Service Pack 3 04/10/2008 11:09:16 PM mbam-log-2008-10-04 (23-09-13).txt Scan type: Quick Scan Objects scanned: 53227 Time elapsed: 3 minute(s), 18 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\Andrew\Local Settings\Temp\_is27.exe (Rogue.Installer) -> No action taken. [5253514247405230518072867015427984856677777083130126232025211301192217171917172 12517361917211717222022222223222425353918382519361726171717172020373525353638222 0 22202334182323341726382538371724171717172535193736362320212117172334172639392423 1 72139393722222022173939182236252321212117172535212320252520392517212422212122202 2 20233419192334171825353638382536201724171717172535212317363539]

All clean now, thanks.

Yep, same here.

Hey, just did a scan with the new DB version. Was clean with a quick scan earlier. Malwarebytes' Anti-Malware 1.25 Database version: 1083 Windows 5.1.2600 Service Pack 2 5:27:15 PM 24/08/2008 mbam-log-08-24-2008 (17-27-06).txt Scan type: Full Scan (C:\|) Objects scanned: 110481 Time elapsed: 21 minute(s), 9 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\oembios.dat (Trojan.Agent) -> No action taken. Virus Total result: 0/36. False positive?

Same here. Pretty sure that's a false positive.

I take it "Operating Systems: Microsoft

Hi guys. My mother was using her computer, and got a popup saying her computer was infected install Power Antivirus 2009, blah, blah, blah. She says she clicked cancel, and then told me when an install box popped up for it. I closed it and the browser with ctrl+alt+delete. Now I just want to make sure nothing got on the computer, but I'm not sure if MBAM works with ME.

I just ended up deleting it since it's just a temp file. Thanks for the help.

Is there a way to upload it without restoring? I have it quarantined right now, and I'm kind of hesitant to restore it.

Malwarebytes' Anti-Malware 1.24 Database version: 1012 Windows 5.1.2600 Service Pack 2 2:23:37 AM 31/07/2008 mbam-log-7-31-2008 (02-23-37).txt Scan type: Full Scan (C:\|) Objects scanned: 110453 Time elapsed: 19 minute(s), 15 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\Andrew\Local Settings\Temp\CmdLineExt.dll (Trojan.Agent) -> Delete on reboot.

I hope this is a FP. Malwarebytes' Anti-Malware 1.24 Database version: 1012 Windows 5.1.2600 Service Pack 2 1:46:27 AM 31/07/2008 mbam-log-7-31-2008 (01-46-21).txt Scan type: Full Scan (C:\|) Objects scanned: 117443 Time elapsed: 22 minute(s), 8 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\Andrew\Local Settings\Temp\CmdLineExt.dll (Trojan.Agent) -> No action taken.