aliB Posted July 1, 2011 ID:448050 Share Posted July 1, 2011 C:\Documents and Settings\WASCP\Desktop\svchost.com (Heuristics.Reserved.Word.Exploit) -> Quarantined and deleted successfully.svchost.com is a renamed copy of ComboFix.exeLink To Topic Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 1, 2011 Staff ID:448075 Share Posted July 1, 2011 You do realize that was mbam 1.44 and database 3510? We are current version 1.51 and database 6999Regardless.. svchost.com is a known malware name. I would suggest renaming to something different if necessary to rename. firefox.com winlogon.com etc. Link to post Share on other sites More sharing options...
aliB Posted July 1, 2011 Author ID:448086 Share Posted July 1, 2011 missed that info from MBAM header, anyway thanks Link to post Share on other sites More sharing options...
Staff shadowwar Posted July 1, 2011 Staff ID:448105 Share Posted July 1, 2011 No problem. Making sure its up to date will help the cleanup go easier. Thanks for reporting though. Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now