MBAM removes one folder and registry key - major problems

[VistaRookie]

Based on the problems I had, I have to assume this is a False Positive.

I've have nothing but good things to say about Malwarebytes, except

for these incidents.

The first time this happened, about a week ago, I suspected it came

about because of Malwarebytes but could not believe it. My attempts at

repairing my computer took days. Hours and hours of searching. I

used the current definition at the time I ran this.

I restored the files and registry key, to the hard drive, that MBAM

quarantined. That did not repair the damage.

6-7-12 This is the 2nd time that a complete scan with MBAM caused

major problems. I believe the same folder/files were involved both times.

Again, I updated to the current definition. So, two different definitions both

find the same thing - and cause the same problems.

Moves and enlarges desktop icons. Causes havoc with some programs,

they come up with unexplained errors when trying to run them. Cannot

create system restore points or install previous restore points. Not in

Windows nor safe mode. Caused errors to WMI writer. Causes windows

to not remember where to open. Slow boot up. Slow shutdown. Causes

even more problems which escape me at the moment.

MBAM removed a system folder. I'd like to know everything that you can

figure out about that folder with those files and registry key. Like what they

are and what their purpose is and why they come up as trojans.

Log? I ran it in developer mode but there is no log. I checked all known

directories and cannot find a log file. I will zip the quarantine files for you.

Quarantine.zip

[miekiemoes]

Hi VistaRookie,

As a matter of fact, what is listed in the detection screen are no false positives though. It appears you are dealing with a variant of the 0Access Rootkit, which also explains the additional issues you have now.

It looks like Malwarebytes can't deal with all remnants, so Please read the following so that you can begin the cleaning process:

IMPORTANT: Don't use any temporary file cleaners unless requested - this can cause data loss and make recovery difficult

You have 3 Options that you can choose from as listed below:

• Option 1 —— Free Expert advice in the Malware Removal Forum
  
• Option 2 —— Paying customer -- Contact Support via email
  
• Option 3 —— Premium, Fee-Based Support
  

OPTION 1

As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the

Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have.

• Please read and follow the directions >>Right HERE<<, skipping any steps you are unable to complete.
  
• After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification,
  so that you're alerted when someone has replied to your post.
  

NOTE: Please do not post back to (bump) your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies.

If you reply to your own post helpers may think that you're already being helped and thus overlook your post.

• If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
  Or
  
• You may send a Private Message to a Moderator asking for assistance.
  

OPTION 2

Alternatively, as a paying customer, you can contact the help desk by filling out the form located >>Right HERE<<

OPTION 3

If you would like to use our Malwarebytes Premium Services, Comprehensive solutions to all your computer support needs—from installation and set-up to troubleshooting and tune-ups go to our Malwarebytes Premium Services support site --> >>Right HERE<<

Please be patient, someone will assist you as soon as possible.

[VistaRookie]

Thank you for your time and information. I've gotten rid of the trojan/rootkit.

[miekiemoes]

Hi,

Glad to hear you could solve it