Malwarebytes false positive
Tommy McClure
Is this unusual?
Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advance
d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action
taken.
I removed this which is the logoff option on the startmenu, and sure enough,
that's what it was. Had to put it back. [ I use it alot ]
--
tommy
Dustin Cook
news:487b610b$0$9832$a726...@news.hal-pc.org:
> Is this unusual?
>
> Registry Data Items Infected:
> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Ad
> vance d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No
> action taken.
>
> I removed this which is the logoff option on the startmenu, and sure
> enough, that's what it was. Had to put it back. [ I use it alot ]
>
>
> --
> tommy
>
>
>
I'll pass this along to Bruce.
--
Regards,
Dustin Cook - http://bughunter.it-mate.co.uk
BugHunter v2.2e AntiMalware Removal Utility
For Windows users, I highly recommend:
http://www.malwarebytes.org - MalwareBytes AntiMalware
Dustin Cook
news:487b610b$0$9832$a726...@news.hal-pc.org:
> Is this unusual?
>
> Registry Data Items Infected:
> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Ad
> vance d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No
> action taken.
>
> I removed this which is the logoff option on the startmenu, and sure
> enough, that's what it was. Had to put it back. [ I use it alot ]
Right click, select ignore. This is not a bug nor a false positive.
It's a VAC hijack point.
Tommy McClure
Dustin Cook wrote:
> "Tommy McClure" <tmDELccDEL72AThalDASHpcDOTorg> wrote in
> news:487b610b$0$9832$a726...@news.hal-pc.org:
>
>> Is this unusual?
>>
>> Registry Data Items Infected:
>> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Ad
>> vance d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) ->
>> No action taken.
>>
>> I removed this which is the logoff option on the startmenu, and sure
>> enough, that's what it was. Had to put it back. [ I use it alot ]
>
> Right click, select ignore. This is not a bug nor a false positive.
> It's a VAC hijack point.
What is a VAC hijack point?
Dustin Cook
VAC is short for Video Access Codec, it's one of the first trojans that
would disable things, such as my computer, run, search, logoff.
So we detect that this is set, and tell you about it. Noobs don't
usually have these set, but more experienced users like you may, so we
suggest you right click/ select ignore.
Dustin Cook
<tmdelccdel72athaldashpcdotorg> wrote in news.hal-pc.org: "tommy
mcclure" <tmdelccdel72athaldashpcdotorg> wrote in
news:488202a3$0$9835$a726
> Dustin Cook wrote:
>> "Tommy McClure" <tmDELccDEL72AThalDASHpcDOTorg> wrote in
>> news:487b610b$0$9832$a726...@news.hal-pc.org:
>>
>>> Is this unusual?
>>>
>>> Registry Data Items Infected:
>>> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
>>> Ad vance d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0)
>>> -> No action taken.
>>>
>>> I removed this which is the logoff option on the startmenu, and sure
>>> enough, that's what it was. Had to put it back. [ I use it alot ]
>>
>> Right click, select ignore. This is not a bug nor a false positive.
>> It's a VAC hijack point.
>
> What is a VAC hijack point?
First trojans that would disable things, such as my computer, run,
search, logoff. vac is short for video access codec, it's one of the
first trojans that would disable things, such as my computer, run,
search, logoff. vac is short for video access codec, it's one of the
first.
Right click/ select ignore. so we detect ignore. so we detect ignore. so
we detect ignore. so we detect ignore. so we detect ignore. so we detect
that that this is set, and tell you right click/ select that this is
set, and tell you may, so we suggest you right click/ select that that
that that this is set, and tell you may, so we suggest you right click/
select.
Dustin Cook
wrote in news.hal-pc.org: "tommy mcclure"
<tmdelccdel72athaldashpcdotorg> wrote in
news:488202a3$0$9835$a726...@news.hal-pc.org: "tommy mcclure"
<tmdelccdel72athaldashpcdotorg> wrote in
> Dustin Cook wrote:
>> "Tommy McClure" <tmDELccDEL72AThalDASHpcDOTorg> wrote in
>> news:487b610b$0$9832$a726...@news.hal-pc.org:
>>
>>> Is this unusual?
>>>
>>> Registry Data Items Infected:
>>> HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\
>>> Ad vance d\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0)
>>> -> No action taken.
>>>
>>> I removed this which is the logoff option on the startmenu, and sure
>>> enough, that's what it was. Had to put it back. [ I use it alot ]
>>
>> Right click, select ignore. This is not a bug nor a false positive.
>> It's a VAC hijack point.
>
> What is a VAC hijack point?
It's one of the first trojans that would disable things, such as my
computer, run, search, logoff. vac is short for video access codec, it's
one of the first trojans that would disable things, such as my computer,
run, search, logoff. vac is short for video access codec, it's one of
the first trojans that would disable things, such as my computer, run,
search, logoff. vac is short for video access codec, it's one of the
first. first trojans that would disable things, such as my computer,
run, search, logoff. vac is short for video access codec, it's one of
the.
That that that this is set, and tell you right click/ select that that
this is set, and tell you may, so we detect that that this is set, and
tell you may, so we detect that that that this is set, and tell you may,
so we detect ignore. so we suggest you right click/ select ignore. so we
detect ignore. so we detect that this is set, and tell you right click/
select this is set, and tell you may, so we detect ignore. so we detect
ignore. so we detect that that this is set, and tell you right click/
select ignore. so we detect ignore. so we detect ignore. so we detect
ignore. so we suggest you right click/ select ignore. so we suggest you
right click/ select ignore. so we suggest you right click/ select
John Mason Jr
Might be good to add that info within program or as a link on website,
so folks can make the determination for themselves.
John
Ant
> Kadaitcha Man posing as Dustin Cook wrote:
>> so we detect ignore. so we suggest you right click/ select ignore. so we
>> detect ignore. so we detect that this is set, and tell you right click/
>> select this is set, and tell you may, so we detect ignore. so we detect
>> ignore. so we detect that that this is set, and tell you right click/
>> select ignore. so we detect ignore. so we detect ignore. so we detect
>> ignore. so we suggest you right click/ select ignore. so we suggest you
>> right click/ select ignore. so we suggest you right click/ select
>> ignore. so we detect ignore.
> Might be good to add that info within program or as a link on website,
> so folks can make the determination for themselves.
Yeah, that'd give them something to think about!