PDA

View Full Version : What does this warning mean?



Billy T
03-07-2014, 12:38 PM
Hi Team

I recently upgraded my MWB program, which now contains chameleon, and it has twice popped up the alert attached below.

I also get repeats of pup-optional.....etc with various endings and that is a way more frequent visitor.

I don't know where they originate, but they are deleted/quarantined each time they appear. I'd like to stop them permanently and it seems strange that they are not now blocked to prevent them from reappearing.

Any ideas as to what they are and why they keep coming back?

My Web surfing is mostly business related plus PF1 and a couple of vintage radio sites, so I'm hardly straying on the wild side. :D

Cheers

Billy 8-{) :confused:

Speedy Gonzales
03-07-2014, 12:44 PM
Looks like this is a false + with system mechanic if you use it (https://forums.malwarebytes.org/index.php?/topic/115948-brokenopencommand-infected/)

Billy T
04-07-2014, 05:14 PM
Looks like this is a false + with system mechanic if you use it (https://forums.malwarebytes.org/index.php?/topic/115948-brokenopencommand-infected/)

Nope, don't have System Mechanic (that I know of, unless it is part of XP).

I'll maintain a watch on it and see what develops.

Cheers

Billy 8-{)

wratterus
04-07-2014, 05:34 PM
More than likely nothing to worry about, it seems to just be an unused file extension? Run the reg cleaner built into CCleaner and see if it finds the same thing.

kahawai chaser
04-07-2014, 07:00 PM
scr = screensaver. You have it running maybe?

pif (Info here (https://www.google.co.nz/search?gs_rn=48&gs_ri=psy-ab&tok=T8KgZjbyhXKRUNe4Le6WhA&pq=mwb%20chameleon&cp=14&gs_id=3a&xhr=t&q=what+is+a+pif+file&es_nrs=true&pf=p&rlz=1C1GGGE_enNZ451NZ489&es_sm=122&sclient=psy-ab&oq=what+is+a+pif+&gs_l=&pbx=1&biw=1024&bih=513&cad=cbv&sei=k0G2U723NI7JkwWRroGADw))= shortcut to ms-dos program of which defaults/properties are altered. MWB may have recognized this or interfered.

Billy T
04-07-2014, 07:21 PM
scr = screensaver. You have it running maybe? pif (Info here (https://www.google.co.nz/search?gs_rn=48&gs_ri=psy-ab&tok=T8KgZjbyhXKRUNe4Le6WhA&pq=mwb%20chameleon&cp=14&gs_id=3a&xhr=t&q=what+is+a+pif+file&es_nrs=true&pf=p&rlz=1C1GGGE_enNZ451NZ489&es_sm=122&sclient=psy-ab&oq=what+is+a+pif+&gs_l=&pbx=1&biw=1024&bih=513&cad=cbv&sei=k0G2U723NI7JkwWRroGADw))= shortcut to ms-dos program of which defaults/properties are altered. MWB may have recognized this or interfered.

Hmm......... I do have DOS programs, but not running. They are opened using icons calling up a batch file (remember them?). Those icons & files have been there for a couple of years so I think that if they were going to, they would have created the problem way back then. None of them have been used for some time anyway as my (at that time new) computer wouldn't cooperate with downloads so I've been firing up my old W2K computer for those jobs.

I don't use a screen saver either, unless you'd call the display time-out a screen saver, but that has been there since my initial set-up as well.

Cheers

Billy 8-{)

kahawai chaser
04-07-2014, 07:55 PM
Yeah - made batch files (V5 - 6 mid to late 80's -(deltree, edlin editor, xcopy comes to mind and doctor dos) at work prior and during when windows 3.1. came out. Long got rid of my personal batch files...

Changes may have occurred since to your pc, affecting the registry entries, or any un-installations you may have done thus altering the keys, or leaving orphans. Or some kind of corruption has occurred. Also recent updates/upgrades to MWB may have better detected changes. One approach is here (http://forums.techguy.org/general-security/977550-malwarebytes-false-positive.html) - using regedit. Also long stop using that too...

Paul.Cov
04-07-2014, 08:04 PM
The usual ambiguous descriptions from an AntiMalware product.

I take it that the Broken.... bit means it's a shortcut / startup / Run command that no longer links to the target file, so is of no threat at all. Just a dead shortcut.

I could be wrong, but I think it's a nothing.

Seems odd though that a link to nothing would continue to reappear.