Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan.BHO detected in MBAM


  • Please log in to reply
4 replies to this topic

#1 golfdude

golfdude

  • Members
  • 219 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ft Wayne, Indiana
  • Local time:04:58 PM

Posted 02 April 2009 - 08:10 AM

I ran MBAM this morning and it reported no infections. I updated the definitions and MBAM reported the following infections:

Posted Image

MBAM said my system needed to be restarted to remove these infections. I did this, re-ran MBAM and they are still there. Do I have a problem?

Thanks,
Golfdude

America is all about speed. Hot, nasty, badass speed. -Eleanor Roosevelt, 1936
Intel i7-3820, 32 GB DDR3-1600, Intel 330 SSD Boot Drive, WD 3TB Data Drive, Radeon HD7770 GHz Edition, Windows 10 Professional 64 Bit
 


BC AdBot (Login to Remove)

 


#2 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:58 PM

Posted 02 April 2009 - 08:28 AM

These are a faalse positive with database version 1932, just corrected with 1933
Chewy

No. Try not. Do... or do not. There is no try.

#3 golfdude

golfdude
  • Topic Starter

  • Members
  • 219 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ft Wayne, Indiana
  • Local time:04:58 PM

Posted 02 April 2009 - 08:37 AM

Thanks Chewy. Freaked me out!

Thanks,
Golfdude

America is all about speed. Hot, nasty, badass speed. -Eleanor Roosevelt, 1936
Intel i7-3820, 32 GB DDR3-1600, Intel 330 SSD Boot Drive, WD 3TB Data Drive, Radeon HD7770 GHz Edition, Windows 10 Professional 64 Bit
 


#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:58 PM

Posted 02 April 2009 - 01:31 PM

One of the discussions about the FPs is here.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 DaChew

DaChew

    Visiting Alien


  • Members
  • 10,317 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:millenium falcon and rockytop
  • Local time:05:58 PM

Posted 02 April 2009 - 04:08 PM

Which program installs these affected BHO's?


Even if the user fixes them, they will just reappear again when (s)he launches IE.
Everyone with a registered webcheck.dll will get these FPs with the 1932 database. I've had these FPs as well when I ran MBAM, but fixing them doesn't break anything.
Hence, some people even delete their webcheck.dll since it causes problems. In this case, MBAM can't delete webcheck.dll anyway since it's whitelisted


I guess I don't have a webcheck.dll?

:thumbsup:

Edited by DaChew, 02 April 2009 - 04:10 PM.

Chewy

No. Try not. Do... or do not. There is no try.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users