False Positive Adware.Agent.BHO

[Saladien]

Hello,

i keep getting these

But i think they are FPs.

I uploaded the two dll s password is infected.

Why is there no way to report them from within Malewarebytes?

Thanks

GomHelper.rar

[miekiemoes]

Hi,

This is no False Positive, it's an adware component (OpenCandy) that is bundled in the toolbar.

Also see more info here: http://www.systemlookup.com/CLSID/76249-GomHelper_dll_GomHelper64_dll.html

Thanks.

There is indeed no way to report FPs from within Malwarebytes yet. But I believe this has been requested before and is on the to-do list already.

Edited May 4, 2018 by miekiemoes

[Saladien]

There you go, this "infection" keeps popping up even though im pretty sure its just an unknown software triggered by accident.

log.txt

[miekiemoes]

Hi, 

See my above post, this isn't a false positive after all

 

[Saladien]

O i misread. Could you tell me how to remove it for good?

[Saladien]

Tried that before, deleted them on boot to. Nothing helped they keep coming back. So i guess Malewarebytes is missing some file.

[miekiemoes]

Might be that Gomplayer is probably recreating them again. 

Try uninstalling Gomplayer (in case you have it installed), reboot and then try rescanning again. Make sure you have your Internet Explorer closed (in case it's open)

If that didn't work, I suggest you follow the steps outlined here: 

 and post your logs in this forum: https://forums.malwarebytes.com/forum/7-windows-malware-removal-help-support/

Then someone from support will help you asap.

 

[Saladien]

Thank you guys and girls so much