• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs

Not what you are looking for? Ask the experts!

Kudos0

Extension.Mismatch

Malwarebytes found this in scan.I do not know what to do.I scanned with Norton 360 and Norton did not show this.

  Here is log from Malwarebytes scan.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4531

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943

9/2/2010 3:33:32 PM
mbam-log-2010-09-02 (15-33-32).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 275200
Time elapsed: 1 hour(s), 43 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\QBackup\{7253AF9A-AFA6-4D0F-A071-867D9B9EC265}\bookmarksite_google[1].gif (Extension.Mismatch) -> No action taken.
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\QBackup\{7253AF9A-AFA6-4D0F-A071-867D9B9EC265}\b[4].gif (Extension.Mismatch) -> No action taken.

Replies

Kudos0

Re: Extension.Mismatch

It looks as though MBAM found an infected file inside N360 quarantine.  Security products will remove malware from each other's quarantines on occasion.  You should also be able to upgrade your version for free.  It is at 4.2.0.12.

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: Extension.Mismatch

Should I delete those 2 files or quarantine them?

    My version of 360 is 4.2.0.12

  I am not very saavy at this stuff,sorry.

Kudos0

Re: Extension.Mismatch

Hi glenwood,

Open Norton Security History and see if these two files are in Quarantine.  If so, tell Malwarebytes' to ignore them, since they are already removed from your computer and are being held in quarantine where they cannot harm your PC.  If you have Malwarebytes' attempt to remove them from Norton's safe keeping you risk an all out war as Norton may mistakenly regard an outside effort to remove these files from quarantine as a malicious act.  You can manually remove the quarantined entries by selecting each and clicking Remove from history, which will permanently delete them from your computer.

Kudos0

Re: Extension.Mismatch

Interesting.  I wonder if the older engine number stays as the current number for some of the folders, as it does in NIS/NAV.  The version on the quarantine is 4.1.0.32.  I can't confirm that as I don't have 360, but it might be interesting to confirm it.

Glenwood, if you go to C:>Program Files>N360 do you have Branding, Engine, and MUI?  What is the number in Branding?

Under certain circumstances profanity provides relief denied even to prayer.Mark Twain
Kudos0

Re: Extension.Mismatch

Hello,

  I cleared history in section where you look at recent actions from security scans.I hope that removed it,Quarantine is empty now.Thanks for your help!

Kudos0

Re: Extension.Mismatch

Hi,

   The number I see in Branding is 4.1.0.32.I do have  Branding, Engine, and MUI.

Replies are locked for this thread.