Jump to content

Question for malwarebytes and ZHPdiag O58


Recommended Posts

Hi, What's that ? This is correct or this is a thread ?

 

Thank You

 

O58 - SDL:2015/10/03 14:06:30 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\1C117660.sys   [113880] ©
O58 - SDL:2015/09/29 06:00:01 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\1E237D9A.sys   [113880] ©
O58 - SDL:2015/08/03 07:30:03 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\226E5CEE.sys   [113880] ©
O58 - SDL:2015/09/28 01:48:23 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\2AEB6EE1.sys   [113880] ©
O58 - SDL:2015/09/05 16:30:52 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\2D100D3F.sys   [113880] ©
O58 - SDL:2015/09/30 08:31:35 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\33A63FBA.sys   [113880] ©
O58 - SDL:2015/07/27 01:43:00 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\3B8D2678.sys   [113880] ©
O58 - SDL:2015/10/01 22:35:22 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\581C13AE.sys   [113880] ©
O58 - SDL:2015/07/29 02:30:01 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\5B5B70A1.sys   [113880] ©
O58 - SDL:2015/10/02 07:19:37 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\609724E6.sys   [113880] ©

Link to post
Share on other sites

Hello and :welcome: :
 
We need a bit more information in order to better assist you. :)
Can you please tell us a bit more about the issue you are reporting?
 
Also, it would help if you would please read the following and attach to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

 

Thanks,

Link to post
Share on other sites

I may be wrong, but I believe those are copies of our Delete On Reboot (DOR) driver which are used whenever Malwarebytes Anti-Malware has detected a threat during a scan and requires a system restart to remove the threat. Normally they should not be left behind but it is possible under certain conditions for that to happen. I would suggest restarting the computer one time and then checking to see if those drivers are still there. If they are, then you may safely delete them. If you also want to double check to make certain that they are not part of some threat you may upload one of the drivers to a scanning website such as VirusTotal.

Link to post
Share on other sites

My client, have uninstall and new install and the file not move.

Yes, those drivers are not created during installation and will not be removed automatically during uninstall. A copy of that driver under a random name is created each time a threat needs to be removed on reboot after a scan. Since the names are random, the uninstaller will not be able to remove them automatically. Each time a copy of that driver is created after a scan it should remove itself after the computer is rebooted but for some reason that did not happen in this case so the drivers were left behind. You may safely delete them manually.
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.