Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

MDAB


  • Please log in to reply
5 replies to this topic

#1 roc1911

roc1911

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Titan, Saturn's 6th moon
  • Local time:05:44 PM

Posted 21 March 2009 - 01:27 PM

IF I AM POSTING IN THE WRONG FORUM PLEASE MOVE TO THE CORRECT FORUM!
Below is a partial log of my scan from MBAM, as it states that it showing my MS virus software and MS firewall were disabled,
Being that I don't used either of them I was kinda concern. So I ran MBAM again, and ran MS Onecare scanner, My McAfee software,
and superantispyware, and they all came back clean.
End of story, right? NO.
Today a friend sent me his scan from MBAM and it had the same thing, and he has 3 computers so he
checked them all and they show the same thing.
I am going to post part of log to show you....it will be below mine.

egistry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

THIS IS MY FRIENDS PARTIAL LOG FROM MBAM


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

SO, what do you think this means?
I should do anything else to check my PC?
Thank you in advance!
roc

Edited by roc1911, 21 March 2009 - 01:51 PM.

Posted Image
Posted Image
SI VIS PACEM PARA BELLUM
TO KNOW WHAT IS RIGHT AND NOT TO DO IT,
IS TO BE WITHOUT COURAGE........CONFUCIUS

BC AdBot (Login to Remove)

 


#2 roc1911

roc1911
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Titan, Saturn's 6th moon
  • Local time:05:44 PM

Posted 21 March 2009 - 01:49 PM

double post
sorry

Edited by roc1911, 21 March 2009 - 01:52 PM.

Posted Image
Posted Image
SI VIS PACEM PARA BELLUM
TO KNOW WHAT IS RIGHT AND NOT TO DO IT,
IS TO BE WITHOUT COURAGE........CONFUCIUS

#3 roc1911

roc1911
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Titan, Saturn's 6th moon
  • Local time:05:44 PM

Posted 21 March 2009 - 01:50 PM

where was my post moved to?
thanks
Posted Image
Posted Image
SI VIS PACEM PARA BELLUM
TO KNOW WHAT IS RIGHT AND NOT TO DO IT,
IS TO BE WITHOUT COURAGE........CONFUCIUS

#4 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:06:44 PM

Posted 21 March 2009 - 02:02 PM

I have been testing this for a few days, here's my log, I am not infected with anything

I have disabled the notifications in windows security center

Malwarebytes' Anti-Malware 1.34
Database version: 1861
Windows 5.1.2600 Service Pack 3

3/19/2009 6:54:06 PM
mbam-log-2009-03-19 (18-54-06).txt

Scan type: Quick Scan
Objects scanned: 67252
Time elapsed: 2 minute(s), 13 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


You can simply hit ignore and the warning will go away, if you have allowed MBAM to repair then you can just go back and disable the notifications again

Some firewalls and antivirus programs disable security center and use their own

Malware often makes this change so MBAM is trying to protect you.

This is what I consider collateral damage

Edited by DaChew, 21 March 2009 - 02:03 PM.

Chewy

No. Try not. Do... or do not. There is no try.

#5 roc1911

roc1911
  • Topic Starter

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Titan, Saturn's 6th moon
  • Local time:05:44 PM

Posted 21 March 2009 - 02:18 PM

OK,
Thank you very much....
FYI I have been using McAfee for 4 years as my virus, spy, and firewall......I just wondering why it happen now, and as I said in my original post that a friend had the same happen to all three of his computers today...weird
But thanks for your time...
Posted Image
Posted Image
SI VIS PACEM PARA BELLUM
TO KNOW WHAT IS RIGHT AND NOT TO DO IT,
IS TO BE WITHOUT COURAGE........CONFUCIUS

#6 DaChew

DaChew

    Visiting Alien


  • BC Advisor
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:06:44 PM

Posted 21 March 2009 - 02:25 PM

This detection with MBAM is only a few days old, before they did not bother with it, but after numerous requests made the change and implemented it with a new database, you McAfee must turn of the native windows security center
Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users