Malwarebytes scan finds FirewallDisableNotify in registry

[Elliek]

Hello,

I today first tried to run a Microsoft Safety Scanner on an XP machine,but while I was not in front of it, (I presume during the scan) it shut the machine down. I was concerned and updated my Malwarebytes software and ran a scan. It found a couple of registry infections. I am pasting below the results of the scan. Can someone please advise me what to do next?

Thanks,

Ellie

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 6701

Windows 5.1.2600 Service Pack 2

Internet Explorer 8.0.6001.18702

5/28/2011 1:11:44 PM

mbam-log-2011-05-28 (13-11-25).txt

Scan type: Full scan (C:\|I:\|)

Objects scanned: 431767

Time elapsed: 1 hour(s), 45 minute(s), 53 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 2

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

[Elliek]

Any ideas anyone?

[Elliek]

Should I just let Malwarebytes delete the offending items? I was concerned in case they are good files and it is a false positive.

[screen317]

Hi and welcome to Malwarebyes.

Bumping your topic makes it seem like you are already being helped, and as you've noticed, you were overlooked because of it.

Those entries are commonly set by security software. If you have a firewall installed, ignore it; if not, have MBAM quarantine it.

[Elliek]

Thanks for letting me know, Chris. I thought that once it went onto page 2 and 3 it would disappear without trace.

I have no firewall installed. I have a firewall running on the router.

When I didn't get a reply I thought I would not have one and I believe I said ignore it. Should I rerun the scan? If so, will a quick scan do it?

Cheers!

Ellie

[screen317]

Sure-- update MBAM and run a Quick Scan.

[screen317]

Are you still with us??

[Elliek]

Sorry, illness with myself an in the family prevented me from dealing with this. Will rerun scan when I can and report back.

Thanks

[screen317]

Thanks for letting us know and I hope everything turns out okay with you and your family.

[screen317]

Any update?

[Elliek]

Hello there,

Thanks for the continued followup.

I just downloaded the latest Malwarebytes software and ran a quick scan. It found nothing wrong.

I then ran a Microsoft Safety Scanner. It found no problems. We can mark this closed, thanks for the advice.

Ellie

[screen317]

Great.

I highly recommend the PRO version of MBAM; with it, it's likely that this issue would have been prevented in the first place.

Now that your computer seems to be in proper working order, please take the following steps to help prevent reinfection:

1) Download and install Javacool's SpywareBlaster, which will prevent malware from being installed on your computer. A tutorial on it can be found here.

2) Go to Windows Update frequently to get all of the latest updates (security or otherwise) for Windows.

3) Make sure your programs are up to date! Older versions may contain security risks. To find out what programs need to be updated, please run Secunia's Software Inspector.

4) WOT, Web of Trust, warns you about risky websites that try to scam visitors, deliver malware or send spam. Protect your computer against online threats by using WOT as your front-line layer of protection when browsing or searching in unfamiliar territory. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous sites:

• Green to go
  
• Yellow for caution
  
• Red to stop
  

WOT has an addon available for both Firefox and IE.

5) Be sure to update your Antivirus and Antispyware programs often!

Finally, please also take the time to read Tony Klein's excellent article on: So How Did I Get Infected in the First Place?

Safe surfing,

-screen317

[screen317]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!