roddy32

XPSP3 free version of MBAM and had the same problem. I uninstalled, rebooted, ran MBAB-clean.exe, rebooted again and did a clean install and it works fine now. Edit to add that I do not have ZoneAlarm or another third party firewall installed so in MY case there was no conflict with that.

Looks great, Reminds me of my old hooked on Pac Man days.

Well said and I would also like to thank the MBAM team.

All fixed here also , Thanks for the quick response on this.

Updated and rescanned. It's all fixed, no malware found. Thanks for the quick response on this sUBs.

Thanks sUBs. I left it alone so I am having no problems. There is another thread about this with quite a few more people posting if you have not seen it yet. http://www.malwarebytes.org/forums/index.p...view=getnewpost

A couple more of us posted this same thing in the False Positives forum http://www.malwarebytes.org/forums/index.p...view=getnewpost I am not having any computer problems myself though because I took no action. I also posted a developer mode scan in the above thread. I believe it to be a false positive.

Here is the Developer Mode scan results. Malwarebytes' Anti-Malware 1.41 Database version: 3143 Windows 5.1.2600 Service Pack 2 11/10/2009 9:02:29 PM mbam-log-2009-11-10 (21-02-15).txt Scan type: Quick Scan Objects scanned: 101274 Time elapsed: 6 minute(s), 9 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 3 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_LOCAL_MAC

Just out of curiousity I just did a scan with TrojanHunter too which found nothing and also scanned the driver file with virus total. Results from Virus Total are below. 40 our of 41 found the file clean and the other was a heurustic result. Antivirus Version Last Update Result a-squared 4.5.0.41 2009.11.11 - AhnLab-V3 5.0.0.2 2009.11.06 - AntiVir 7.9.1.61 2009.11.10 - Antiy-AVL 2.0.3.7 2009.11.10 - Authentium 5.2.0.5 2009.11.11 - Avast 4.8.1351.0 2009.11.10 - AVG 8.5.0.423 2009.11.11 - BitDefender 7.2 2009.11.11 - CAT-QuickHeal 10.00 2009.11.10 - ClamAV 0.94.1

I'm getting similiar result. C:\WINDOWS\system32\drivers\atapi.sys (Rootkit) -> No action taken. This file has been on the computer since 2003 without any recent modifications. Also registry keys that are related. Registry Keys Infected: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\atapi (Rootkit) -> No action taken. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\atapi (Rootkit) -> No action taken. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\atapi (Rootkit) -> No action taken. I am about 99.9% sure these are false positves.

They have been red all along with Site Advisor (at least since this started) for having downloads that are considered dangerous. Not sure how long it has been that way because I had never been to their website before yesterday. I added a bad review at Download.com also for bad ethics.

I posted this yesterday at LnR. http://www.lognrock.com/forum/index.php?showtopic=19159 Donna posted it also at CoU http://www.calendarofupdates.com/updates/i...c=24676&hl= And she also posted it at CNET in the news thread in the V&S forum http://forums.cnet.com/5208-6132_102-0.htm...6;forum-threads

I would think these people will think about what they have done with all the uproar but unfortunately it is too late already. I have NO idea how good or bad their programs are but that in unimportant now.

I just heard back from Lee Koo at CNET. Coming from him the download.com people may get on this quickly.

I just e-mailed Lee Koo at CNET about this. He does not run download.com but he runs the forums and I am sure he will let whoever needs to know about this.