False positive

[Porthos]

Here is one that shows on 2 different systems both having the intel video chipset.

The bold one is the culprit, The others I already know are false

Malwarebytes' Anti-Malware 1.35

Database version: 1919

Windows 5.1.2600 Service Pack 3

3/30/2009 1:34:37 PM

mbam-log-2009-03-30 (13-34-30).txt

Scan type: Quick Scan

Objects scanned: 71904

Time elapsed: 4 minute(s), 47 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 5

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

HKEY_CLASSES_ROOT\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

HKEY_CLASSES_ROOT\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

HKEY_CLASSES_ROOT\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

HKEY_CLASSES_ROOT\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\SYSTEM32\MSWINSCK.OCX (Trojan.BHO) -> No action taken. [4054423730921921256969252624146767212214181868711426666768141717251768247024672

4256994]

C:\WINDOWS\SYSTEM32\DRIVERS\wadv07nt.sys (Rootkit.Agent.V) -> No action taken. [5253514247403017181717213917172419171723261717232417172326171723381717231817172

33617172123171723261717233617172322171723381717231817172337171723221717171717172

3

18171723211717242317172017171720241717242417172019171723351717193817172321171723

3

61717233617171717171717171717]

[nosirrah]

Can you zip and attach a copy of wadv07nt.sys please .

[Porthos]

Here you go

[nosirrah]

Also update and scan again , these should be resolved but the sys file I do need to check , there is the potential that it is malicious and I need to double check .

[nosirrah]

Did you click upload before sending ? I don't see a file attached to your post .

[Porthos]

Here it is

[nosirrah]

I see the problem now , this should be 100% resolved .

[Porthos]

All good.

Malwarebytes' Anti-Malware 1.35

Database version: 1921

Windows 5.1.2600 Service Pack 3

3/30/2009 2:07:17 PM

mbam-log-2009-03-30 (14-07-17).txt

Scan type: Quick Scan

Objects scanned: 72056

Time elapsed: 4 minute(s), 11 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[nosirrah]

Thanks for confirming .