Hijack.System.Hidden keeps returning. Sometimes it's detected by MBAM and sometimes not. I remove it with MBAM but it's still present because if I try to update MBAM or visit MS websites i'm redirected to a page like mypendingresults.com.
Malwarebytes' Anti-Malware 1.44
Database version: 3510
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.187029/4/2010 12:28:39 PM
mbam-log-2010-09-04 (12-28-39).txtScan type: Full Scan (C:\|G:\|)
Objects scanned: 235106
Time elapsed: 1 hour(s), 9 minute(s), 34 second(s)Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 0Memory Processes Infected:
(No malicious items detected)Memory Modules Infected:
(No malicious items detected)Registry Keys Infected:
(No malicious items detected)Registry Values Infected:
(No malicious items detected)Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\CheckedValue (Hijack.System.Hidden) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.Folders Infected:
(No malicious items detected)Files Infected:
(No malicious items detected)
you need to download hijack this v2.0.4 run scan and save log file,let me know when u have log file. download TDSS Killer v2.4
and atf file cleanerit some times take 4 to 5 scans to find the problem.but if its a rootkit which it probably is, is the worst of all. but i will help you through the process.
I am here for a reason.
For help or To helplet me know if my advice was of help thank you.
Yes (14) | ![]() | |
No (14) | ![]() | |
I don't know (15) | ![]() |