Clouded Posted April 25, 2014 ID:823471 Share Posted April 25, 2014 I did a factory reset on my laptop and had to download the new MBMA, upon running a full scan i got two registry keys deteced as hijackers. I don't think his could be right and would appreciate any guidance. I don't want to keep the files if they are malicious but I am not convienced they are.mj.txt Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 25, 2014 Staff ID:823477 Share Posted April 25, 2014 I would need a registry export of this key to determine what is detecting here. HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\launcher.exe Link to post Share on other sites More sharing options...
Clouded Posted April 25, 2014 Author ID:823479 Share Posted April 25, 2014 how do i do that? sorry.. im a lil confused what your asking me for. Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 25, 2014 Staff ID:823488 Share Posted April 25, 2014 as the risk of walking you through the registry could be dangerous i would suggest if this is a fresh reimage to just go ahead and add it to the ignore list in malwarebytes. This is not a file that malwarebytes is detecting but a setting on your computer. Link to post Share on other sites More sharing options...
Clouded Posted April 26, 2014 Author ID:823611 Share Posted April 26, 2014 ok thanks, so i can basically assume its a safe "setting"? Link to post Share on other sites More sharing options...
Staff shadowwar Posted April 26, 2014 Staff ID:823691 Share Posted April 26, 2014 yep. if its a factory image it should be fine. Link to post Share on other sites More sharing options...
Willer Posted August 30, 2014 ID:873148 Share Posted August 30, 2014 This is not a file that malwarebytes is detecting but a setting on your computer. Wrong ... Version: 2.00.2.1012Malware Datenbank: v2014.08.29.05Rootkit Datenbank: v2014.08.21.01Lizenz: PremiumMalware Schutz: AktiviertBösartiger Webseiten Schutz: AktiviertSelf-protection: AktiviertBetriebssystem: Windows 7 Service Pack 1CPU: x64Dateisystem: NTFS Registrierungsschlüssel: 2Security.Hijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\launcher.exe, In Quarantäne, [27724b7ee09b3cfaa2dd85177f84b34d],Security.Hijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\launcher.exe, In Quarantäne, [fa9f8247b5c64cea3e41c1db05fe2ed2], Regards Willer Link to post Share on other sites More sharing options...
Willer Posted August 30, 2014 ID:873150 Share Posted August 30, 2014 This is not a file that malwarebytes is detecting but a setting on your computer. Wrong ... Version: 2.00.2.1012Malware Datenbank: v2014.08.29.05Rootkit Datenbank: v2014.08.21.01Lizenz: PremiumMalware Schutz: AktiviertBösartiger Webseiten Schutz: AktiviertSelf-protection: AktiviertBetriebssystem: Windows 7 Service Pack 1CPU: x64Dateisystem: NTFS Registrierungsschlüssel: 2Security.Hijack, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\launcher.exe, In Quarantäne, [27724b7ee09b3cfaa2dd85177f84b34d],Security.Hijack, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\launcher.exe, In Quarantäne, [fa9f8247b5c64cea3e41c1db05fe2ed2], Regards Willer Link to post Share on other sites More sharing options...
David H. Lipman Posted August 30, 2014 ID:873162 Share Posted August 30, 2014 Willer: This thread is Clouded's thread. If you have an issue, please start your own thread and don't resurrect some one else's old thread. Reference: Please read before reporting a false positive Post #2If you are not a member of Staff or Experts group please do not reply to other users posts in either the File or Web Blocking forums. Thank you for understanding. Link to post Share on other sites More sharing options...
Staff shadowwar Posted August 30, 2014 Staff ID:873286 Share Posted August 30, 2014 Those are registry settings and not files. If you can start a new thread and export those keys i would be glad to take a look. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now