Jump to content

Search the Community

Showing results for tags 'regisry'.

  • Search By Tags

    Type tags separated by commas.
  • Search By Author

Content Type


Forums

  • Announcements
    • Malwarebytes News
    • Beta Testing Program
  • Malware Removal Help
    • Windows Malware Removal Help & Support
    • Mac Malware Removal Help & Support
    • Mobile Malware Removal Help & Support
    • Malware Removal Self-Help Guides
  • Malwarebytes for Home Support
    • Malwarebytes for Windows Support Forum
    • Malwarebytes for Mac Support Forum
    • Malwarebytes for Android Support Forum
    • Malwarebytes for iOS Support
    • Malwarebytes Privacy
    • Malwarebytes Browser Guard
    • False Positives
    • Comments and Suggestions
  • Malwarebytes for Business Support
    • Malwarebytes Nebula
    • Malwarebytes Nebula Modules
    • Malwarebytes Endpoint Security
    • Other Malwarebytes Business Products
    • Malwarebytes Business Products Comments and Suggestions
  • Malwarebytes Tools and Other Products
    • Malwarebytes AdwCleaner
    • Malwarebytes Junkware Removal Tool Support
    • Malwarebytes Anti-Rootkit BETA Support
    • Malwarebytes Techbench USB (Legacy)
    • Malwarebytes Secure Backup discontinued
    • Other Tools
    • Malwarebytes Tools Comments and Suggestions
  • General Computer Help and Security Updates
    • BSOD, Crashes, Kernel Debugging
    • General Windows PC Help
  • Research Center
    • Newest Rogue-Ransomware Threats
    • Newest Malware Threats
    • Newest Mobile Threats
    • Newest IP or URL Threats
    • Newest Mac Threats
    • Report Scam Phone Numbers
  • General
    • General Chat
    • Forums Announcements & Feedback

Find results in...

Find results that contain...


Date Created

  • Start

    End


Last Updated

  • Start

    End


Filter by number of...

Joined

  • Start

    End


Group


AIM


MSN


Website URL


ICQ


Yahoo


Jabber


Location


Interests

Found 5 results

  1. Hello, I installed Malwarebytes free to run a scan. These same 10 issues keep reappearing after I have already quarantined and deleted them multiple times. I'm not adept at computer security, but I am wary of these issues as they may pose a threat to my privacy. Findings From Scan.txt
  2. None of these files were previously detected, and I have reason to believe that they are false positives. I'm not certain what the registry key is for or if it is genuinely malicious. Scan results attached detections.txt
  3. Hello all! I am having quite a difficult time getting this virus out of my system. I "think" its a wmi infection but I'm unsure. a registry entry in windows\current version\run keeps reinstalling itself and i dont know how. Below are a list of cleaners i have ran to see if i can fix the issue. 1. malewarebytes (detects and quarantines it, but it returns within a day or so.... even with out a reboot it comes back) 2.Superantispyware 3. kaspersky TDSS killer 4. rkill 5. eset nod 32 (default anti-virus) 6. adwcleaner 7.hijackthis 8. MBAR
  4. Just found these with the adware scanner.. are they ok to remove? wasnt sure it being registry HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\nicepage.com PUP.Optional.Legacy HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\nicepage.com
  5. Last night I notice that Microsoft System Certificates Roots (which I highlight on the screenshot attached below) were modified by a program called "Firehack" (a premium multi-hack for retail World of Warcraft). Firehack.exe is only supposed to access and modify WoW-64.exe in memory; makes no sense for Firehack.exe to be modifying Microsoft System Certificates like \SmartCardRoot -- \AuthRoot -- \Root 'or HKLM\SYSTEM\ControlSet001\Control\SecurityProviders\Schannel. --------------------------------------------------------------------------------------------- Do programs usually access Microsoft System Certificates like \SmartCardRoot -- \AuthRoot -- \Root or is this unusual behavior? I have sensitive information on my system, I'm worried that this could compromise the integrity of my system's decryption certificates sense its certificate directories have been modified. I though this program was safe to run because my friend uses it and make me install to play with him so I "Allowed" all of the Host Intrution Prevention warnings with out reading me (I know bad move) but after looking at my entry logs for Defense+ the modification to the certificate directory scared me. As of now FireHack.exe has no internet access and all its permissions have been revoked and no significant data transfers 6/kb in 1kb out over the duration of its existence on my system.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.