Not what you were looking for? Ask our experts!
Reply
Newbie
glenwood
Posts: 4
Registered: ‎09-02-2010

Extension.Mismatch

Malwarebytes found this in scan.I do not know what to do.I scanned with Norton 360 and Norton did not show this.

  Here is log from Malwarebytes scan.

 

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4531

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943

9/2/2010 3:33:32 PM
mbam-log-2010-09-02 (15-33-32).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 275200
Time elapsed: 1 hour(s), 43 minute(s), 15 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\QBackup\{7253AF9A-AFA6-4D0F-A071-867D9B9EC265}\bookmarksite_google[1].gif (Extension.Mismatch) -> No action taken.
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\QBackup\{7253AF9A-AFA6-4D0F-A071-867D9B9EC265}\b[4].gif (Extension.Mismatch) -> No action taken.

delphinium
Posts: 9,862
Kudos: 2,965
Solutions: 293
Registered: ‎11-21-2008

Re: Extension.Mismatch

It looks as though MBAM found an infected file inside N360 quarantine.  Security products will remove malware from each other's quarantines on occasion.  You should also be able to upgrade your version for free.  It is at 4.2.0.12.

Under certain circumstances profanity provides relief denied even to prayer.
Mark Twain
Newbie
glenwood
Posts: 4
Registered: ‎09-02-2010

Re: Extension.Mismatch

Should I delete those 2 files or quarantine them?

    My version of 360 is 4.2.0.12

  I am not very saavy at this stuff,sorry.

SendOfJive
Posts: 10,755
Kudos: 4,795
Solutions: 776
Registered: ‎02-07-2009

Re: Extension.Mismatch

[ Edited ]

Hi glenwood,

 

Open Norton Security History and see if these two files are in Quarantine.  If so, tell Malwarebytes' to ignore them, since they are already removed from your computer and are being held in quarantine where they cannot harm your PC.  If you have Malwarebytes' attempt to remove them from Norton's safe keeping you risk an all out war as Norton may mistakenly regard an outside effort to remove these files from quarantine as a malicious act.  You can manually remove the quarantined entries by selecting each and clicking Remove from history, which will permanently delete them from your computer.

delphinium
Posts: 9,862
Kudos: 2,965
Solutions: 293
Registered: ‎11-21-2008

Re: Extension.Mismatch

Interesting.  I wonder if the older engine number stays as the current number for some of the folders, as it does in NIS/NAV.  The version on the quarantine is 4.1.0.32.  I can't confirm that as I don't have 360, but it might be interesting to confirm it.

 

Glenwood, if you go to C:>Program Files>N360 do you have Branding, Engine, and MUI?  What is the number in Branding?

Under certain circumstances profanity provides relief denied even to prayer.
Mark Twain
Newbie
glenwood
Posts: 4
Registered: ‎09-02-2010

Re: Extension.Mismatch

Hello,

  I cleared history in section where you look at recent actions from security scans.I hope that removed it,Quarantine is empty now.Thanks for your help!

Newbie
glenwood
Posts: 4
Registered: ‎09-02-2010

Re: Extension.Mismatch

Hi,

   The number I see in Branding is 4.1.0.32.I do have  Branding, Engine, and MUI.