MalwareBytes Ignore list , how to remove item and keep it on PC?

Discussion in 'Software' started by slava37, Feb 2, 2010.

  1. slava37

    slava37 Private E-2

    Hello I am new here!
    I have scanned my PC with MalwareBytes Antimalware. It found this:Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good
    Norton 360 confirmed that it is a False Positive. I put this item on MalwareBytes 'ignore list' part of the program interface. There are two buttons: "remove" and "remove all", part of Ignore interface. Just to be sure, does that take the items off of the ignore list and still leave them on the computer, or does it remove the items from the computer? I just want to make sure because I really, really don't want to mess anything up on my system. I am 99.9% sure it's a false positive report, so I would like to keep the items there.
     
  2. slava37

    slava37 Private E-2

    THIS IS MORE INFORMATION TO MY PC PROBLEM. Please ignore my Previous post.
    Hello I am new here!
    I got two issues, and I am wondering whether yiou can help me?
    1. I have scanned my PC with MalwareBytes Antimalware. It found this:Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good
    Norton 360 confirmed that it is a False Positive. I put this item on MalwareBytes 'ignore list' part of the program interface. There are two buttons: "remove" and "remove all", part of Ignore interface. Just to be sure, does that take the items off of the ignore list and still leave them on the computer, or does it remove the items from the computer? I just want to make sure because I really, really don't want to mess anything up on my system. I am 99.9% sure it's a false positive report, so I would like to keep the items there.
    2. Here's the item that might be a spyware. I removed a BitSpirit torrent download manager because MalwareBytes found this infection PUP.Bitspirit. I don't know whether it was legitimate part of the program or an actual spyware. When I removed BitSpirit malwarebytes don't find this item anymore. Should I have uninstalled BitSpirit? Perhaps, unrelated question--what would be agood torrent download manger program?
    Malwarebytes' Anti-Malware 1.44
    Database version: 3674
    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385

    2/1/2010 5:12:14 PM
    mbam-log-2010-02-01 (17-12-08).txt

    Scan type: Quick Scan
    Objects scanned: 98827
    Time elapsed: 1 minute(s), 16 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 1
    Registry Values Infected: 0
    Registry Data Items Infected: 1
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\ByteLinker (PUP.BitSpirit) -> No action taken.

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken.

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
     
  3. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    Hi

    1. It removed them from the ignore list (white list as some call it), are you running Vista or Windows 7 are they 32bit ot 64bit? just leave it in the Ignore list.

    NoActiveDesktopChanges was added to Vista and above to stop malware changing the Active Desktop on and allowing changes.

    2. Answered in your other thread on Torrent Managers.

    2.
     
  4. slava37

    slava37 Private E-2

    Thanks,
    I am running Windows 7, 64 bit.
    Actually, I removed the item below from ignore list of Malwarebytes. I also have removed check mark on that item.Although, it is listed as infection, I got e-mail from Norton 360 Technical support telling me this item is False Positive. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken. SHOULD I PUT IT BACK TO AN IGNORE LIST?

    Now as of this,Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\ByteLinker (PUP.BitSpirit) -> No action taken. I uninstalled BitSpirit download manager, and now this infection is not being detected by Malwarebytes. Do you know anything about BitSpirit download torrent manager. Should I have kept it?
    Thanks
     
  5. slava37

    slava37 Private E-2

    Thanks,
    I am running Windows 7, 64 bit.
    Actually, I removed the item below from ignore list of Malwarebytes. I also have removed check mark on that item.Although, it is listed as infection, I got e-mail from Norton 360 Technical support telling me this item is False Positive. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoActiveDesktopChanges (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> No action taken. SHOULD I PUT IT BACK TO AN IGNORE LIST?

    Now as of this,Registry Keys Infected:
    HKEY_CURRENT_USER\SOFTWARE\ByteLinker (PUP.BitSpirit) -> No action taken. I uninstalled BitSpirit download manager, and now this infection is not being detected by Malwarebytes. Do you know anything about BitSpirit download torrent manager. Should I have kept it?
    Thanks
    Edit/Delete Message

     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds