[CTRL+SHIFT+Q Openning an website]

I found the (item in question) It's not malware as such but, it annoys () me when

changes are made to my stuff without my say so.

[CTRL+SHIFT+Q Openning an website]

ThexDarksider, thanks for responding. I would appreciate it if you'ld point out how to go about

checking my "shortcuts".

This is the normal mapping "View list of open tabs = CTRL+SHIFT+Q"

Windows7 ult 64bit O.S.

[CTRL+SHIFT+Q Openning an website]

Check your shortcuts, maybe one of them has the shortcut key combination set.

ThexDarksider, thanks for responding. I would appreciate it if you'ld point out how to go about

checking my "shortcuts".

Windows7 ult 64bit O.S.

[CTRL+SHIFT+Q Openning an website]

The only light house program i have installed is "Search and Rescue 4". And while using Flightsim,

pressing "ctrl+shift+q" should change the "view" perpective. Everything was fine 'till a few days ago.

I have downloaded and installed a lot of stuff for my games in the last couple of weeks, so i haven't

a clue to when this happened.

I did find out that ctrl+shift+q is supposed to open a new tab.

Both Malwarebytes and Kapersky say my system is clean, and i think it is,

How do I remap ctrl+shifht+q back to "open tabs"?

Tghanks for any advice.

[Flase positive? c:\programdata\reality xp\reality xp.dll (Malware.Gen)]

Hi, I own (Bought) the reality xp prog. Malwarebytes keeps telling me "reality xp.dll (Malware.Gen) -> No action taken"

I used the forum search function and, came up empty. Would appreciate some help on this.

Thanks

[Is wisereboot.exe a virus\trojan? UPDATE]

You can restore them.

Thank You.

[Is wisereboot.exe a virus\trojan? UPDATE]

These will be removed from detection in the next update. These files are a tool of some installer for one of the softwares you installed.

Thanks for your help shadowwar.

Does this mean that I can restore these files?

Here is a summary which i have attached: it may help.

MAR-27_NEW SUBMIT.zip

[Is wisereboot.exe a virus\trojan? UPDATE]

Hi Re-shadowwar:

CAn you please zip and upload the files to the false positive forum so we can investigate them?

Thanks.

http://forums.malwarebytes.org/index.php?showtopic=79156

I am posting this here. I restored the files from the recycle bin but, since

the names of both files are identical in system32 and SysWOW64, the files from SysWOW64

which were the last two I deleted, overwrote the files from system32. Therefore, when I

restored the files from the recycle bin, the system only restored them to the SysWOW64

folder. I can only physically see the files in SysWOW64, but Malwarebytes still finds

all four files, two in system32 and , two in SysWOW64. I've redeleted the files after

doing this "mbam.exe /developer" and, have attached a zipped folder containing all the

requested files.

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6179

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

3/26/2011 8:18:35 PM

mbam-log-2011-03-26 (20-18-28).txt

Scan type: Quick scan

Objects scanned: 163487

Time elapsed: 53 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 4

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\System32\bewisereboot.exe (Trojan.Agent) -> No action taken. [cf5442d6fd03768a45682337ee13d12f]

c:\Windows\System32\bewisereg.exe (Trojan.Bumat) -> No action taken. [fc278a8e03fdab550de0cfdc2ed37888]

c:\Windows\SysWOW64\bewisereboot.exe (Trojan.Agent) -> No action taken. [36ede236a06019e776373624e819a957]

c:\Windows\SysWOW64\bewisereg.exe (Trojan.Bumat) -> No action taken. [c0631bfdb050dd23de0f8d1e80817e82]

Thanks for all help.

Fuggerdemain.

P.S. I haven't done another scan since deleting the files and rebooting today: but, I will in a few moments.

MAR-25_26.zip

[Is wisereboot.exe a virus\trojan?]

I'm going to assume this was a false positive by Malwarebytes and, restore these files.

[Is wisereboot.exe a virus\trojan?]

Hi everyone, I'm new here not new to computers. My windows7 ULT 64Bit install is a few days old. Everything that's installed is paid for or freeware. My Malwarebytes version is paid for and is v1.50.1.1100

I did a C: drive Quick scan and

Malwarebytes returned this:

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6172

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

3/25/2011 9:52:20 PM

mbam-log-2011-03-25 (21-52-13).txt

Scan type: Quick scan

Objects scanned: 544310

Time elapsed: 1 hour(s), 24 minute(s), 24 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 4

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\Windows\System32\bewisereboot.exe (Trojan.Agent) -> No action taken.

c:\Windows\System32\bewisereg.exe (Trojan.Bumat) -> No action taken.

c:\Windows\SysWOW64\bewisereboot.exe (Trojan.Agent) -> No action taken.

c:\Windows\SysWOW64\bewisereg.exe (Trojan.Bumat) -> No action taken.

I did flash my BIOS yesterday and, as i said everthing on this computer

is bought and paid for except for Real temp ,CPU-Z, GPU-Z, 7-ZIP and, maybe a couple others whose names escape me right now.

My question is, was my computer infected or was the result a false positive?

Thanks for your help

P.S. I did delete the infected files.

Fuggerdemain.