Possible False Positive, Registry Entries

[rtot]

Yesterday I did a fresh install of Windows 7 and it was fully patched through Windows Update before I did any searching and installing of new programs. The computer is behind a router and the Windows Firewall was active before going online to download updates. The only programs that I downloaded were downloaded from the program's official sites, so I don't see how I could have become infected. I downloaded the following: Malwarebytes Anti Exploit Free, Malwarebytes Anti Malware, Panda Internet Security Free Trial, Firefox with the add-ons NoScript and Adblock Plus. These are all reputable programs that I doubt contain any PUPs bundled. I scanned the computer with Malwarebytes and it finds two registry keys that it says are PUP.Optional.MySearchTB.A. Are these false positives? I have no faith in my fresh install now, so I appreciate any insight on these findings. Please see the Malwarebytes log below:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 8/16/2015
Scan Time: 10:50 PM
Logfile: pup.txt
Administrator: No

Version: 2.1.8.1057
Malware Database: v2015.08.17.02
Rootkit Database: v2015.08.16.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: XXXX

Scan Type: Custom Scan
Result: Completed
Objects Scanned: 390375
Time Elapsed: 32 min, 0 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 2
PUP.Optional.MySearchTB.A, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{62155D33-3CE2-401E-8967-5A270628A3D5}, , [72748d7cc9c27abc1a447b582fd34ab6],
PUP.Optional.MySearchTB.A, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{62155D33-3CE2-401E-8967-5A270628A3D5}, , [72748d7cc9c27abc1a447b582fd34ab6],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)


(end)

 

[shadowwar]

Can you explort this registry key and see what it says there?

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}\

[rtot]

How do I attach the registry export file?

[rtot]

Here is the text of the file you requested:

Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5}]"Policy"=dword:00000003"AppPath"="C:\\Program Files (x86)\\pandasecuritytb""AppName"="ToolbarCleaner.exe""AppPathName"="C:\\Program Files (x86)\\pandasecuritytb\\ToolbarCleaner.exe"

[shadowwar]

Thanks. This will be fixed next update. Its a false positive indeed.

[rtot]

Great, thank you!