Author Topic: Help with log - PUM detection  (Read 5320 times)

0 Members and 1 Guest are viewing this topic.

November 02, 2017, 04:28:07 PM

JRottef

  • Newbie

  • Offline
  • *

  • 8
  • Reputation:
    0
    • View Profile
Help with log - PUM detection
« on: November 02, 2017, 04:28:07 PM »
Hi there,

Todays scan showed up a PUM results and im not sure if those enties are false positives or not. Could you check it pls?

tyvm in advance

Reply #1November 02, 2017, 04:33:51 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: Help with log - PUM detection
« Reply #1 on: November 02, 2017, 04:33:51 PM »
Hi JRottef,

The [PUM.StartMenu] detection means that the value of a Registry key is not the default one, but it's not necessarily malicious.
In your case, App Launch Tracking is disabled (Start_TrackProgs value set to 0), it's legit.

For more information, please refer to RogueKiller Documentation.

Regards.

Reply #2November 02, 2017, 05:05:50 PM

JRottef

  • Newbie

  • Offline
  • *

  • 8
  • Reputation:
    0
    • View Profile
Re: Help with log - PUM detection
« Reply #2 on: November 02, 2017, 05:05:50 PM »
Thank you for your help and promptly reply. :)

Reply #3November 02, 2017, 05:15:31 PM

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 2809
  • Reputation:
    100
    • View Profile
Re: Help with log - PUM detection
« Reply #3 on: November 02, 2017, 05:15:31 PM »
Hi JRottef,

You are very welcome.

Regards.