Backdoor.Celefot - MBAM cannot clean it

All of a sudden, after an MAM update, it says I am infected with:

Backdoor.Celofot in:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\protect_ie (Backdoor.Celofot)

But even after removing it in MAM, it returns.

Does MAM report this for anyone else?

HELP please? How I remove it?

 

Re: Backdoor.Celefot - MAM cannot clean it

It is a FP.

http://forums.malwarebytes.org/index.php?showtopic=44113

 

Re: Backdoor.Celefot - MAM cannot clean it

Assuming you mean MBAM I would always recommend checking their forum before posting here.

http://forums.malwarebytes.org/index.php?showtopic=44113

 

Re: Backdoor.Celefot - MAM cannot clean it

Yes MBAM. So Backdoor.Celofot keeps showing up for you too?

 

Re: Backdoor.Celefot - MAM cannot clean it

It don't say it IS a FP. It says "possible". That's what concerns me.

I cannot find any official comments by BMAM that confirms it's a FP, so unless they do, I have to treat it as a threat!

 

Re: Backdoor.Celefot - MAM cannot clean it

Unless it is a big coincidence, chances are it is a FP, since two different people on two other sites have had the same problem today.

http://forum.avast.com/index.php?topic=57402.0

http://forums.techguy.org/malware-removal-hijackthis-logs/911677-here-we-go-again-2nd.html

 

Re: Backdoor.Celefot - MAM cannot clean it

Scan with HMP, see if anything comes up there.

 

Per the updated thread at MB's forum, try updating and rescanning and the "bug"/"FP" should now be clear.

 

Cheers. I just did an malwarebytes update and now it reports no backdoor infection.

 

Re: Backdoor.Celefot - MAM cannot clean it

In the link I provided I see that nosirrah, Malwarebytes VP of Research, confirmed that it is a bug/FP on more than one occasion.

 

Re: Backdoor.Celefot - MAM cannot clean it

What's HMP?

 

Re: Backdoor.Celefot - MAM cannot clean it

Hit Man Pro