Malwarebytes Threats

Repa,
1. This is the first time I've found threats with this scanner...I did manage to Quarantine them but unsure what to do now....Please advise?

2. Screenshot:



3. Can you tell me if I need to do the Export option or the Clipboard option, I don't know what they do?

4. Please advise?
Thanks

It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following:

https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/

https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/

Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts

When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad.

Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here.

Update Malwarebytes and run it again to see if you are still getting the hijack detections or not.

Repa, thanks.... I'll get back......

I spoke too quick where do I find:
Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts

I opened Malwarebytes but didn't see hosts file?

I assume....the following is found with hosts file also? Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also

thanks

WC, C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions.

Repa wrote:

WC,  C:\ > Windows > System32 > Drivers > etc > Hosts is the path on your computer to the Hosts file. I want you to open it and look in it according to my instructions above to see what is in it. As always, you click on Computer > C drive, etc until you get to the Hosts file and then click on it and follow the rest of my instructions.

Repa, I went to C:\ > Windows just to make sure I was doing it correctly & it appears I'm on the right track, I'll try again tomorrow if I have the time & report back here.

One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before....
Thank You.....

QUOTE:
It looks like these are false positives. Malwarebytes has created an update to their malware definitions to fix this problem. Read the following:

https://forums.malwarebytes.org/index.php?/topic/177645-hijackhost-false-positive/

https://forums.malwarebytes.org/index.php?/topic/177652-hijackhost-malware-or-not/     I read both web pages....appears the folks said they are updating to a "NEWER VERSION", Is this correct?


Take a look at your hosts file: C:\ > Windows > System32 > Drivers > etc > Hosts

When you click on Hosts, A window will pop up asking you what application you want to use to open the file. Choose Notepad.

Scan down the file after the lines that begin with # and observe the values in the left column. You should only see 127.0.0.1. You may see the last line in the file with a # also. If you see anything else make a copy of that entire row and post it here.   All I saw was  127.0.0.1

Update Malwarebytes and run it again to see if you are still getting the hijack detections or not.  Does  "Update Malwarebytes" mean  Update to the newest Version of Malwarebytes  or just update the "Database Version" that I currently have, which is an older version?


When I run the scan again, do I just run a "Quick" Scan or what?

One more thing, I can understand your frustration with me, but, the reason I had to ask how to find the hosts thing is I've never looked up Hosts file before....
Thank You.....

false positives are caused a fault in the database definition of the malware, not the program. Just update the database malware definitions and rerun it the same way you did when you got the threats. If it doesn't happen again, problem with malwarebytes is solved.

Repa,
no threats found on just completed scan....

BTW, I assume I need to delete the "hijacks" in quarantine?

thanks very much for your help!

No problem! Yes, you can delete them.