Hi guys,
Wondering if anyone can help me identify a couple of results from a recent scan ( using Malwarebytes ). I scanned my computer last night and the results showed the following two items this morning:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\bak_Application
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\application\http://www.helpmeopen.com/?n=app&ext=%s\http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s
I've quarantined the items, but I wanted to ask for advice before allowing malwarebytes to delete them for two reasons:
1) I'd like to know what these do in the event that they are malware
2) And I'd like to confirm that they are in fact malware since I'd hate to delete a good file by accident and cause system problems
Item 2 is really my biggest concern as I've been googling the strings all morning but cannot find anything definitive about them. It seems they show up for people using the malwarebytes tool, although very few other programs pick them up. I also came accross a thread on another site where a fellow had the same strings, but it was determined they may be associated with finding the correct program to open unidentified files ( ie. a legitimate string from microsoft ).
The last thing I wasn to do is mess up my system by getting rid of a good file.
If anyone can shed any light on these guys, I'd be very grateful and thank you in advance.
Phil
Wondering if anyone can help me identify a couple of results from a recent scan ( using Malwarebytes ). I scanned my computer last night and the results showed the following two items this morning:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\bak_Application
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations\application\http://www.helpmeopen.com/?n=app&ext=%s\http://shell.windows.com/fileassoc/%04x/xml/redir.asp?Ext=%s
I've quarantined the items, but I wanted to ask for advice before allowing malwarebytes to delete them for two reasons:
1) I'd like to know what these do in the event that they are malware
2) And I'd like to confirm that they are in fact malware since I'd hate to delete a good file by accident and cause system problems
Item 2 is really my biggest concern as I've been googling the strings all morning but cannot find anything definitive about them. It seems they show up for people using the malwarebytes tool, although very few other programs pick them up. I also came accross a thread on another site where a fellow had the same strings, but it was determined they may be associated with finding the correct program to open unidentified files ( ie. a legitimate string from microsoft ).
The last thing I wasn to do is mess up my system by getting rid of a good file.
If anyone can shed any light on these guys, I'd be very grateful and thank you in advance.
Phil
