M
Massimo
Hello,
I apologize! It turns out that I have not given the correct
information in my previous postings about VLCPlayer being infected
with Hotbar.
I decided to again make a scan with MalwareBytes Antimalware and to
take a look at the logfile. In this file I read the following:
-------------------------------------------
Registersleutels geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-cd68-4f36-8d02-8c43722ee5da}
(Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\HostOL.MailAnim
(Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\HostOL.MailAnim
(Adware.Hotbar) -> Quarantined and deleted successfully.
Registerwaarden geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\[email protected]
(Adware.Hotbar) -> Quarantined and deleted successfully.
------------------------------------------
(And sorry, but I use a Dutch version of Window XP on this computer.
It says: Registry keys infected -and- Registry values infected.)
By having previously installed a Hotbar infected version of VLCPlayer
and being confronted again with Hotbar I seem to have automatically
presumed that VLCPlayer had to be the infected file this time too.
I am surprised at finding though that the infection by Hotbar is
related to the MS-suite (Word and Outlook) and Firefox while I have
*not* installed anything of the MS-suite and while I only use a
portable version of Firefox, which is supposed not to write to the
registry of any computer.
Well, Hotbar references deleted.
Massimo
I apologize! It turns out that I have not given the correct
information in my previous postings about VLCPlayer being infected
with Hotbar.
I decided to again make a scan with MalwareBytes Antimalware and to
take a look at the logfile. In this file I read the following:
-------------------------------------------
Registersleutels geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-cd68-4f36-8d02-8c43722ee5da}
(Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\HostOL.MailAnim
(Adware.Hotbar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\HostOL.MailAnim
(Adware.Hotbar) -> Quarantined and deleted successfully.
Registerwaarden geïnfecteerd:
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\[email protected]
(Adware.Hotbar) -> Quarantined and deleted successfully.
------------------------------------------
(And sorry, but I use a Dutch version of Window XP on this computer.
It says: Registry keys infected -and- Registry values infected.)
By having previously installed a Hotbar infected version of VLCPlayer
and being confronted again with Hotbar I seem to have automatically
presumed that VLCPlayer had to be the infected file this time too.
I am surprised at finding though that the infection by Hotbar is
related to the MS-suite (Word and Outlook) and Firefox while I have
*not* installed anything of the MS-suite and while I only use a
portable version of Firefox, which is supposed not to write to the
registry of any computer.
Well, Hotbar references deleted.
Massimo