mhhack

Hi, Like many of you I sometimes get PUPs on my PC. Would it make sense to install any downloaded programs in sandboxes to avoid any potential unwanted software? Thanks

Just updated - I had done it earlier today! In any event, it has not tagged wextract.exe this time around. Thanks

mbam.exe /developer: Malwarebytes' Anti-Malware 1.34 Database version: 1785 Windows 5.1.2600 Service Pack 2 2/21/2009 1:56:32 PM mbam-log-2009-02-21 (13-56-24).txt Scan type: Quick Scan Objects scanned: 71295 Time elapsed: 1 minute(s), 6 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\wextract.exe (Backdoor.Bot) -> No action taken. [5253514247403037391723252324363419363425182436192118342517243621391837251724361 818172025182436221924172519243623192239251924363418262425202436]

Yes.

Hi: Malwarebytes' Anti-Malware 1.34 Database version: 1785 Windows 5.1.2600 Service Pack 2 2/21/2009 12:21:07 PM mbam-log-2009-02-21 (12-21-00).txt Scan type: Quick Scan Objects scanned: 71253 Time elapsed: 2 minute(s), 46 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\wextract.exe (Backdoor.Bot) -> No action taken. Is this a false positive? Thanks