hijack.start menu

[bondhillboy]

I downloaded mbam to my wife's computer and the first scan detected hijack.start menu. Kaspersky and SAS did not detect it . I have not taken any action since the infection is in the registry. Do you think it is OK to delete this item without causing any other problems?

She is running vista 32-bit. Her computer seems to be running OK.

I had this same infection last month on my computer in the registry, and deleting it seemed to effect the computer start up (maybe just my imagination).

Your help will be greatly appreciated!

[bondhillboy]

I forgot to include the log:

Malwarebytes' Anti-Malware 1.40

Database version: 2642

Windows 6.0.6002 Service Pack 2

8/17/2009 7:17:37 PM

mbam-log-2009-08-17 (19-17-34).txt

Scan type: Full Scan (C:\|D:\|)

Objects scanned: 265128

Time elapsed: 1 hour(s), 16 minute(s), 21 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 1

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[Firefox]

I have remove those and have not had any adverse side effects on my computer.....

[exile360]

It's not actually an infection, it's simply showing that the Search button is set not to be displayed on the Start menu (which is now the default in Vista since Service Pack 1) so you can safely have MBAM ignore this detection in this case since the change wasn't made by any malware, just Microsoft .

[bondhillboy]

Thanks to both of you for your advice. Really appreciate it!