Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Oct 7th, 2008, 12:01pm
   Mischel Internet Security Forum
   Malware
   Adware, Browser Hijackers and other Malware (Moderators: Helena, Gavin_Coe, Magnus)
   TH reports "msbb" - is this a problem-wa		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: TH reports "msbb" - is this a problem-wa  (Read 682 times)
terrytturtle
Newbie
*



I love YaBB 1G - SP1!

   


Gender: male
 Posts: 23
TH reports "msbb" - is this a problem-wa
« on: Oct 8th, 2004, 7:31pm »		 Quote Quote  Modify Modify
Hi,
 
When scanning, TH reports under the heading Registry Scan (in red writing): "Registry key exists: HKEY_CURRENT_USER\ software\msbb (matches Adware.180SearchAssistant.100)".
 
There are no options on the screen to follow or action (e.g. remove/ delete).  TH seems to be only reporting the existence of the item, without comment unlike when it reports possible trojans etc.
 
Is this something I should worry about or do something about (and if so, what should I do) or just forget about it?  My first thought was to go into the Registry, find that entry and delete it but before I played in the Registry I wanted to check with others.
 
Advice would be appreciated.  Thanks.
IP Logged
Aaron
Administrator
*****





   


Gender: male
 Posts: 286
Re: TH reports "msbb" - is this a proble
« Reply #1 on: Oct 9th, 2004, 4:17am »		 Quote Quote  Modify Modify
Could you post what's in that registry subkey?
 
Thanks,
 
Aaron
IP Logged
Aaron Hulett | Trojan Analyst | Mischel Internet Security
terrytturtle
Newbie
*



I love YaBB 1G - SP1!

   


Gender: male
 Posts: 23
Re: TH reports "msbb" - is this a proble
« Reply #2 on: Oct 9th, 2004, 5:39am »		 Quote Quote  Modify Modify
Hi Aaron, Thanks for replying.  I don't know the expert way to copy these details so I hope the formatting turns out okay for you to read:
 
HKEY_CURRENT_USER\Software\msbb
 
Name      Type      Data
(Default)      REG_SZ      (value not set)
action_url_last_chunk      REG_DWORD      0x00000000 (0)
action_url_last_full_version      REG_DWORD      0x00000011 (17)
action_url_version      REG_DWORD      0x00000011 (17)
boom_ver      REG_DWORD      0x00000001 (1)
key_file      REG_DWORD      0x00000114 (276)
key_int_high      REG_DWORD      0x01c4684c (29648972)
key_int_low      REG_DWORD      0xe6bbe6f6 (3871074038 )
keyword_file_last_full_version      REG_DWORD      0x00000114 (276)
kw_last_chunk      REG_DWORD      0x0000000b (11)
last_conn_h      REG_DWORD      0x01c46886 (29649030)
last_conn_l      REG_DWORD      0x638a35c8 (1670002120)
TimeOffset      REG_DWORD      0xffff9d96 (4294942102)
we      REG_DWORD      0x00000002 (2)
 
 
« Last Edit: Oct 9th, 2004, 5:42am by terrytturtle » IP Logged
Aaron
Administrator
*****





   


Gender: male
 Posts: 286
Re: TH reports "msbb" - is this a proble
« Reply #3 on: Oct 9th, 2004, 4:18pm »		 Quote Quote  Modify Modify
That information coincides to registry entries made by 180SearchAssistant, so it's up to you if you want to remove it out of there or not.
IP Logged
Aaron Hulett | Trojan Analyst | Mischel Internet Security
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register