False positive: Trojan tbhelper.dll

[pgs]

Hi.

I created the logfile following your instruction and got:

-----------------------

Malwarebytes' Anti-Malware 1.30

Database version: 1446

Windows 6.0.6001 Service Pack 1

03-Dec-08 2:27:25 PM

mbam-log-2008-12-03 (14-27-14).txt

Scan type: Quick Scan

Objects scanned: 55791

Time elapsed: 2 minute(s), 49 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 12

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 2

Files Infected: 4

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook (Trojan.BHO) -> No action taken. [4054423730538380756679153541481301926866207067232526142571172614211719231466661

8171467262220216823261868701794]

HKEY_CLASSES_ROOT\urlsearchhook.toolbarurlsearchhook.1 (Trojan.BHO) -> No action taken. [4054423730538380756679153541481301926866207067232526142571172614211719231466661

8171467262220216823261868701794]

HKEY_CLASSES_ROOT\Interface\{4897bba6-48d9-468c-8efa-846275d7701b} (Adware.SoftMate) -> No action taken. [4054423730346988668370155280718546668570130192212217266920686814672321191421242

12214671720171423212267242622191968236994]

HKEY_CLASSES_ROOT\Interface\{9ebb289a-2d7b-465b-825f-1530b813e95a} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CLASSES_ROOT\Interface\{cd5c92ae-97b0-4bc3-ba65-ba0308d543bf} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CLASSES_ROOT\CLSID\{ca3eb689-8f09-4026-aa10-b9534c691ce0} (Trojan.BHO) -> No action taken. [4054423730538380756679153541481301926866207067232526142571172614211719231466661

8171467262220216823261868701794]

HKEY_CLASSES_ROOT\Typelib\{77aa25e8-6083-4949-a831-9cb11861dc10} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CLASSES_ROOT\CLSID\{1bb22d38-a411-4b13-a746-c2a4f4ec7344} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CLASSES_ROOT\CLSID\{fcbccb87-9224-4b8d-b117-f56d924beb18} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{fcbccb87-9224-4b8d-b117-f56d924beb18} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fcbccb87-9224-4b8d-b117-f56d924beb18} (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

HKEY_CLASSES_ROOT\Typelib\{4509d3cc-b642-4745-b030-645b79522c6d} (Adware.SoftMate) -> No action taken. [4054423730346988668370155280718546668570130192212217266920686814672321191421242

12214671720171423212267242622191968236994]

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

C:\Program Files\IEToolbar (Adware.DosPopToolbar) -> No action taken. [3742513034698866837015378084498081538080776766831301362761498380728366780139747

7708461423853808077676683]

C:\Program Files\IEToolbar\Al-Hora Toolbar (Adware.DosPopToolbar) -> No action taken. [3742513034698866837015378084498081538080776766831301362761498380728366780139747

7708461423853808077676683]

Files Infected:

E:\Softomate\ToolbarStudio\bin\tbcore3U.dll (Adware.DosPopToolbar) -> No action taken. [4054423730346988668370153780844980815380807767668313019224246666192270251423172

520142126212614662520181426686718182523186968181794]

C:\Program Files\IEToolbar\Al-Hora Toolbar\al-hora2.dll (Adware.DosPopToolbar) -> No action taken. [3742513034698866837015378084498081538080776766831301362761498380728366780139747

7708461423853808077676683]

C:\Program Files\IEToolbar\Al-Hora Toolbar\dbghelp.dll (Adware.DosPopToolbar) -> No action taken. [3742513034698866837015378084498081538080776766831301362761498380728366780139747

7708461423853808077676683]

C:\Program Files\IEToolbar\Al-Hora Toolbar\uninstall.exe (Adware.DosPopToolbar) -> No action taken. [3742513034698866837015378084498081538080776766831301362761498380728366780139747

7708461423853808077676683]

-----------------------

Thank you.

[nosirrah]

This is all confirmed malware .

http://www.google.com/search?client=firefo...G=Google+Search

http://www.google.com/search?hl=en&cli...amp;btnG=Search

If you would like to keep your malware tell MBAM to ignore these scan results .