Registry Data Items infected

[MARLOWEV07]

Registry Data Items Infected:

HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> No action taken.

HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> No action taken.

I did a security check that was suggested to someone else early, however there was no dialog or follow up regarding the problem. Is this a significant problem for the computer. It is sluggish and some items will not work, especially the automatic updates.

Results of screen317's Security Check version 0.99.18

Windows Vista Service Pack 2 (UAC is enabled)

Internet Explorer 8

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

avast! Internet Security

iolo technologies' System Mechanic

Microsoft Security Essentials

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

Java SE Runtime Environment 6

Flash Player Out of Date!

Adobe Flash Player 9.0.124.0

````````````````````````````````

Process Check:

objlist.exe by Laurent

Windows Defender MSMpEng.exe

Malwarebytes' Anti-Malware mbam.exe

Microsoft Security Essentials msseces.exe

Internet Explorer AvastSvc.exe -?-

Internet Explorer ioloServiceManager.exe -?-

``````````End of Log````````````

[daledoc1]

Hi, MarloweV07:

Please have a look here at the FAQ - Section #18 for an explanation.

ISSUE: I keep getting the following detections, even after allowing Malwarebytes' Anti-Malware to fix them:

HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S)

HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1")

SOLUTION: Most often when these two items return repeatedly it is due to the presence of an IOLO product such as System Mechanic. System Mechanic and other IOLO security products alter these settings from their Windows defaults. If you do have an IOLO product installed, it is best to simply change the security setting in your IOLO product so that it does not change the settings for .reg files and .scr files or that you simply have Malwarebytes' Anti-Malware ignore these particular detections. These entries are not actual infections, just system settings changes that are not set to their defaults, which is something that some infections will do to prevent .reg files and .scr files from executing, which is why Malwarebytes' Anti-Malware detects these items, since it has no way of knowing if the change was made by the user, an infection, or a legitimate software such as IOLO.

Please let us know if this resolves your issue.

Thanks!

daledoc1

[MARLOWEV07]

Thank you so much for your quick reply. I have purchased the pro malware and am better protected now. Regards, MV07

Hi, MarloweV07:

Please have a look here at the FAQ - Section #18 for an explanation.

Please let us know if this resolves your issue.

Thanks!

daledoc1

[daledoc1]

Hello:

Glad to help.

Enjoy your MBAM PRO and feel free to let us know if you need anything else.

Regards,

daledoc1