Malware Help (Broken.OpenCommand)

[Rotmammoth]

I was wondering if this was actually bad because I've read that "Vendor: Broken.OpenCom Category: Registry Data Items:HKEY_CLASSES_ROOT\scrfile\shell\open\command " was not bad and just a minor data mess up that MBAM has made. The one I have is slightly different though, it says, "HKEY_CLASSES_ROOT\regfile\shell\open\command\(default). It said no action was taken and said it was bad.

Thank you for your help and if this thing is actually bad, please tell me more on it.

[noknojon]

Hello Rotmammoth ,Welcome to Malwarebytes Forum -

I have found a few conflicting reports on this item - It seems that it should be recognised by Malwarebytes, and was in earlier versions, but the removal process may not always be the same each time - It has been removed some times but not others - I would prefer you submit this to the experts area -

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problem -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

[TeMerc]

I was wondering if this was actually bad because I've read that "Vendor: Broken.OpenCom Category: Registry Data Items:HKEY_CLASSES_ROOT\scrfile\shell\open\command " was not bad and just a minor data mess up that MBAM has made. The one I have is slightly different though, it says, "HKEY_CLASSES_ROOT\regfile\shell\open\command\(default). It said no action was taken and said it was bad.

Thank you for your help and if this thing is actually bad, please tell me more on it.

Hello.

This setting is actually something which was changed by another piece of software likely a registry tool and is only detected because of that. This isn't really a false positive in malwarebytes. Malwarebytes sees and reports that the association for these files are not the default ones as set by Windows (since malware may alter these associations as well). When you select to remove in mbam, mbam restores it to the default associations again (as set by Windows).

You can either add it to your ignore list or allow it to be quarantined. There will be no negative affect on your system either way.

[Rotmammoth]

Alright, good news. Thanks for the help and I'll just leave it in the quarantine section since there are'nt any negative effects. Once again, thanks.