PUP FPs?

[JerryM]

Hope it is OK to post here, as I have posted on Wilders.

When I scan with MBAM Pro it always identifies some registry items as malware. A couple of months ago I quarantined several and W7 crashed a couple of times. When I restored those items all was well. Accordingly I have ignored all registry items in the scan.

A quick scan this AM showed two, one of which is listed here.
PUP.Optional...Registry Key HKCR\237FDFDB-3722-470E-88A

The other entry was similar.

I scan with my AV, currently Bit Defender IS, and nothing is found. I then wonder if MBAM has become too aggressive?

 

How do I send the entries to Support?


Thanks. Jerry

[Fatdcuk]

Hi Jerry

 

Can you please zip and attach the quick scan log containing those detections. in a reply.

 

Thanks in advance.

[JerryM]

I deleted those, but will do it in a few days, and will learn how to zip the files.

Regards,

Jerry

[Fatdcuk]

No worries Jerry.

 

If you cant zip then just copy and paste the full contents of the log into a reply would be enough.

 

I have subscribed to this thread and will take a look a look when the data is posted

[JerryM]

Malwarebytes Anti-Malware (PRO) 1.75.0.1300
www.malwarebytes.org

Database version: v2013.10.30.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 8.0.7601.17514
Owner :: ARK1MGJ75Z4 [administrator]

Protection: Enabled

10/30/2013 10:26:23 AM
MBAM-log-2013-10-30 (11-21-42).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 248971
Time elapsed: 7 minute(s), 56 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 1
HKCR\AppID\{BDB69379-802F-4eaf-B541-F8DE92DD98DB} (PUP.Optional.BabylonToolBar.A) -> No action taken.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)
 

Thank you.

Jerry

[Fatdcuk]

Ok can now see what is occuring and thanks for providing the log.

https://www.google.co.uk/search?site=&source=hp&q={BDB69379-802F-4eaf-B541-F8DE92DD98DB}&oq={BDB69379-802F-4eaf-B541-F8DE92DD98DB}&gs_l=hp.12...1965.1965.0.3040.1.1.0.0.0.0.65.65.1.1.0....0...1c.2.30.hp..1.0.0._XO7-2YE7YY

The GUID is assoicated with Babyon ToolBar but looks to be cross plaform with other Conduit Toolbars.

 

Will fix this on the next update cycle.

 

Thanks for bringing this to our attention Jerry

[JerryM]

Ok can now see what is occuring and thanks for providing the log.

https://www.google.co.uk/search?site=&source=hp&q={BDB69379-802F-4eaf-B541-F8DE92DD98DB}&oq={BDB69379-802F-4eaf-B541-F8DE92DD98DB}&gs_l=hp.12...1965.1965.0.3040.1.1.0.0.0.0.65.65.1.1.0....0...1c.2.30.hp..1.0.0._XO7-2YE7YY

The GUID is assoicated with Babyon ToolBar but looks to be cross plaform with other Conduit Toolbars.

 

Will fix this on the next update cycle.

 

Thanks for bringing this to our attention Jerry

 

Thank YOU for the help. I admit that I have little expertise with all this, and it is refreshing to get timely help as you have provided.

Best Regards,

Jerry

[JerryM]

I should have asked if I can remove that Babylon Toolbar, or will it adversely affect the registry?

Thanks,

Jerry

[AdvancedSetup]

Yes you should be able to remove it.  The best way is if they have their own uninstaller from the Control Panel, Add\Remove.  Otherwise if you do have trouble removing it then you can follow the advice below and one of the trained Experts will assist you with cleaning your system.

 

I would suggest following the advice from the topic here if needed Available Assistance for Possibly Infected Computers and having one of the Experts assist you with looking into your issue.

Thanks

[JerryM]

Many thanks,

Jerry