Doomsday Posted December 2, 2011 ID:500550 Share Posted December 2, 2011 I really need to know what I should do, do I remove the selected file or do I follow the main topic at the top of this forum? Link to post Share on other sites More sharing options...
David H. Lipman Posted December 2, 2011 ID:500569 Share Posted December 2, 2011 I really need to know what I should do, do I remove the selected file or do I follow the main topic at the top of this forum?I'm sorry, you supplied insufficient information to give you a good response.In the subject you infer the Registry with "HKey_local" and in the body of your post you mention a "file".Please do reply with all pertinent information about the problem you are experiencing and any log or log snippet you may be referring to. Link to post Share on other sites More sharing options...
Doomsday Posted December 2, 2011 Author ID:500577 Share Posted December 2, 2011 I'm sorry, you supplied insufficient information to give you a good response.In the subject you infer the Registry with "HKey_local" and in the body of your post you mention a "file".Please do reply with all pertinent information about the problem you are experiencing and any log or log snippet you may be referring to.ya sorry about that. In Malwarebytes the scanner came up with an Adware, under Item it says HKey_LOCAL_MACHINE.Do I copy and paste the Mbam-log? Link to post Share on other sites More sharing options...
David H. Lipman Posted December 2, 2011 ID:500578 Share Posted December 2, 2011 ya sorry about that. In Malwarebytes the scanner came up with an Adware, under Item it says HKey_LOCAL_MACHINE.Do I copy and paste the Mbam-log?Yes please. Realize that a Registry key under HKLM or HKCU are not "files". Registry keys are anomalous to leaves and twigs on a tree where the entire Registry itself exists as disk files. Link to post Share on other sites More sharing options...
Doomsday Posted December 2, 2011 Author ID:500582 Share Posted December 2, 2011 Malwarebytes' Anti-Malware 1.51.2.1300www.malwarebytes.orgDatabase version: 8291Windows 6.1.7600Internet Explorer 8.0.7600.1638512/2/2011 3:47:27 PMmbam-log-2011-12-02 (15-47-09).txtScan type: Quick scanObjects scanned: 170150Time elapsed: 12 minute(s), 54 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 1Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
David H. Lipman Posted December 2, 2011 ID:500586 Share Posted December 2, 2011 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> No action taken.Yes, it can be removed and Quarantined.Since it is a singular event in the log, keep it in quarantine. If after a few weeks where you have rebooted the PC and no software shows any detriment (complains, Pop-Up errors, etc) due to the removal of the Registry key, it can be purged from quarantine. Link to post Share on other sites More sharing options...
Doomsday Posted December 2, 2011 Author ID:500593 Share Posted December 2, 2011 Yes, it can be removed and Quarantined.Since it is a singular event in the log, keep it in quarantine. If after a few weeks where you have rebooted the PC and no software shows any detriment (complains, Pop-Up errors, etc) due to the removal of the Registry key, it can be purged from quarantine.What do I do to quarantine it, do I just "remove selected" Im guessing not but im not sure. Link to post Share on other sites More sharing options...
David H. Lipman Posted December 2, 2011 ID:500597 Share Posted December 2, 2011 What do I do to quarantine it, do I just "remove selected" Im guessing not but im not sure.You are correct. When you choose "remove selected", items removed are automatically quarantined. The objective is to keep this in quarantine for roughly 3 weeks. By that time you will either know there is no problem or have no indications of a problem with that registry key being removed, After that quarantine period of roughly 3 weeks, it can be purged from the quarantine. Link to post Share on other sites More sharing options...
Doomsday Posted December 2, 2011 Author ID:500598 Share Posted December 2, 2011 You are correct. When you choose "remove selected", items removed are automatically quarantined. The objective is to keep this in quarantine for roughly 3 weeks. By that time you will either know there is no problem or have no indications of a problem with that registry key being removed, After that quarantine period of roughly 3 weeks, it can be purged from the quarantine.Ok thank you very much for all the help. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now