resend Posted May 28, 2011 ID:434155 Share Posted May 28, 2011 Is Backdoor Bifrose a false positive? I have a reg key from it in last nights scan. No exe's. Is a reg key enough to be dangerous? Could a reg key have been left over when a threat was stopped by NAV 2011 as some have. I do not want to do hijack this till i know if reg key dangerous as i think it is an fp as not showing up other scans Link to post Share on other sites More sharing options...
Staff screen317 Posted May 30, 2011 Staff ID:434810 Share Posted May 30, 2011 Hi and welcome to Malwarebytes.Show the actual log where the detection was from. Link to post Share on other sites More sharing options...
resend Posted June 4, 2011 Author ID:436605 Share Posted June 4, 2011 Hi and welcome to Malwarebytes.ThanksShow the actual log where the detection was from.Malwarebytes' Anti-Malware 1.50.1.1100www.malwarebytes.orgDatabase version: 6696Windows 6.0.6002 Service Pack 2Internet Explorer 9.0.8112.1642104/06/2011 11:42:07mbam-log-2011-06-04 (11-41-39).txtScan type: Full scan (C:\|)Objects scanned: 349980Time elapsed: 3 hour(s), 47 minute(s), 30 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 1Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 0Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:HKEY_LOCAL_MACHINE\SOFTWARE\System32 (Backdoor.Bifrose) -> No action taken.Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:(No malicious items detected) Link to post Share on other sites More sharing options...
Staff screen317 Posted June 7, 2011 Staff ID:437692 Share Posted June 7, 2011 Hi,Did MBAM detect things in the past? This looks like a leftover Key but not necessarily a false positive. Link to post Share on other sites More sharing options...
resend Posted June 10, 2011 Author ID:439279 Share Posted June 10, 2011 Hi,Did MBAM detect things in the past? This looks like a leftover Key but not necessarily a false positive.No MBAM did not detect before but NAV blocked some things. But reg key would not be there if NAV blocked the malware would it? Link to post Share on other sites More sharing options...
Staff screen317 Posted June 13, 2011 Staff ID:440299 Share Posted June 13, 2011 Either way, that Registry Key isn't legitimate. Could be a leftover from the past or it could be that it got created before Norton could block it. Just remove it.. Link to post Share on other sites More sharing options...
Staff screen317 Posted June 24, 2011 Staff ID:444944 Share Posted June 24, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts