Rogue.Antivirus2008

[eliuri]

Hello:

The following shows up in my first quick scan with Malwarebytes AntiMalware 1.44. The Vendor is named as: Rogue.Antivirus2008

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> No action taken.

No other infections were found.

It seems that the vendor is listed as Microsoft. And no other infections were found. Nor does this registry key show up as infected by other anti spyware or av scans.

Question:

Is this likely a false positive?

Thanks in advance:

-eliuri

Malwarebytes AntiMalware 1.44

SuperAntiSpyware

Zone Alarm Security Suite

Since all that was found was this isolated registry key, I cannot upload any file here.

=======================================

Log File for Scan:

Malwarebytes' Anti-Malware 1.44

Database version: 3719

Windows 5.1.2600 Service Pack 3

Internet Explorer 7.0.5730.11

2/10/2010 10:08:02 AM

mbam-log-2010-02-10 (10-07-59).txt

Scan type: Quick Scan

Objects scanned: 120871

Time elapsed: 10 minute(s), 1 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3aa42713-5c1e-48e2-b432-d8bf420dd31d} (Rogue.AntiVirus2008) -> No action taken.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[nosirrah]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\ <- This is a trace location .

{3aa42713-5c1e-48e2-b432-d8bf420dd31d} <- This is the actual detection here and since it is not linked to any other component there is no active infection .

What most likely happened was this infection was cleaned up long ago and this one trace was missed . Let MBAM remove it and all work here is done .

[eliuri]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\ <- This is a trace location .

{3aa42713-5c1e-48e2-b432-d8bf420dd31d} <- This is the actual detection here and since it is not linked to any other component there is no active infection .

What most likely happened was this infection was cleaned up long ago and this one trace was missed . Let MBAM remove it and all work here is done .

========================================

Thank you, Nosirrah:

Two questions:

1) If I choose to put this item into the Ignore List, does it pose any serious problem to my PC?

2) If I choose to remove it, does it automatically go into Quarantine so that it can be restored in case its a needed key?

Thanks again:

-Eliuri

[nosirrah]

It is trace and has no ability to effect your PC one way or another . Other than it no longer showing up in scan results removing it will change nothing . At this point all this is indicating is a past infection that was already cleared up .