Jump to content

Recommended Posts

Potentially Unwanted Malware detected controlling IE10's homepage. In deliberation with GeeksToGo was concluded that this is most likely a false positive caused by one of my security programs like OnlineArmor or WinPatrol. The following link is a reference to the topic on the forum of GeeksToGo that discusses whether this could truly be malware, I hope this helps: http://www.geekstogo.com/forum/topic/332496-pumhijackhomepagecontrol-false-is-this-a-false-positive-caused-by/



Here is the MBAM log:


Malwarebytes Anti-Malware



Databaseversie: v2013.08.21.05


Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 10.0.9200.16660

Mattias :: DURRE [administrator]


8/21/2013 7:52:43 PM

MBAM-log-2013-08-21 (21-11-46).txt


Scan type: Volledige scan (C:\|D:\|)

Ingeschakelde scan opties: Geheugen | Opstartitems | Register | Bestanden en mappen | Heuristiek/Extra | Heuristiek/Shuriken | PUP | PUM

Uitgeschakelde scan opties: P2P

Objecten gescand: 315893

Verstreken tijd: 40 minuut/minuten, 41 seconde(n)


Geheugenprocessen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)


Geheugenmodulen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)


Registersleutels gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)


Registerwaarden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)


Registerdata gedetecteerd: 1

HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\control panel|Homepage (PUM.Hijack.HomePageControl) -> Slecht: (1) Goed: (0) -> Geen actie ondernomen. [d9201373175590a60e7b9ea06d9729d7]


Mappen gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)


Bestanden gedetecteerd: 0

(Geen kwaadaardige objecten gedetecteerd)




Link to post
Share on other sites
  • Staff

This doesnt mean this: Potentially Unwanted Malware it means Potentially unwanted Modification


This setting is not set to the default in windows and that is what is being detected. If you want this setting you can add this to the ignore list.


We have seen malware change this setting that is why its labeled PUM or potentially unwanted modification.


This doesnt always mean u have malware. In this case its picking up the homepage being locked. Which malware often does.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.