Eagleeye

I appreciate your taking the time to provide the helpful feedback CWB! Every bit certainly helps build one's knowledge base for future reference! (And, mine can certainly use some building-up)! Best regards!

Greetings again Steve, Just wanted to let you know your latest instructions have finally removed the Adobe Air program from my machine! Given the major problem I've just had with it...I think I'll hold off on downloading the current version...especially since it doesn't appear it's going to make much of a difference in my computer's function(s). It would probably just end up causing me even more problems down the road! Thanks very much again for all the help from you and everyone else!

Thanks again for your efforts, daledoc1! Unfortunately, despite all the massive reading I've done at the link you provided...my eyes are bulging out of their sockets & I'm frankly pissed to no end about this blasted issue...and none of the suggestions given at the link have worked. I tried using a 2nd Admin account to uninstall the program...that didn't work either. Adobe seems to DELIBERATELY make it impossible to contact them for help or to report this issue. I've never seen such a d**ned run-around by a business like Adobe in all my life! Gets me how they even stay in business! There's nothing more I can do. The current Adobe Air will just have to remain on my computer as it is. Thanks for the help anyway.

My apologies for having to re-post...but I neglected to ask this: Is there any truly NECESSARY reason for me to even have Adobe Air on my computer, or is it something I can easily do without? Thanks again!

I appreciate each of your respective replies, Daledoc1, Steve, and Buttons! First, I should mention I'm using WIN XP Pro, SP3, with Outpost Security Suite Pro. All programs (Windows and otherwise are updated...except this Adobe Air). I never had any problem with updating Adobe Air in the past either. (For Daledoc1): I tried to uninstall the Adobe Air program from the Add/Remove listing in Control Panel...and got the same error message I received when I tried to do the update. It won't let me remove the program either! (For Steve): I also tried disabling my AV/Firewall. Still could not update or remove the program. Thanks very much again for your time and feedback!

Don't know if anyone else has experienced this issue, but I've tried four times to update Adobe Air from both the FileHippo site and the Adobe site. In each case, about halfway through the update, the dialog box generates a small white-lettered message that an error has occurred and the update cannot proceed. It also states I may need Administrator privileges in order to do the update, despite the fact I'm doing the update while logged on under the Windows Default Administrator Account! Any ideas on this one? (Never had an update problem before either) Thanks for your time and any thoughts.

Quite an interesting article, Steve. The one downside I've encountered is there are a number of websites which will not permit the use of special characters in any password you create. Regards,

I appreciate the additional info, Firefox and Michael!

Thanks very much for your respective replies/information, Michael & GT500! The few games I do have presently are the rather simple variety, such as, Star Defender II, III, & 4; Chessmaster Challenge, Battleship...you get the idea. (At my age & condition...simple games where just the mouse is needed to control the game functions...seem to be best for me). I'll check out that EA site. One other question: Do you happen to know if that major security breach that occurred a while back with Steam's database has been taken care of? Thanks again for the info!

Good evening, I wanted to inquire if there are ANY reputable sites where a person can find pc games for download (paid or free)? To clarify...by reputable...I mean sites which are generally considered to not have a major problem with malware issues, such as,viruses, trojans, and other "nasties" accompanying their game downloads. It seems many of the game sites I check via the hosts-file.net site are flagged as being well-known for being malware-infested. Thank you for your time and any suggestions!

Hello WestSwan & welcome to the MBAM Forums, Since the computer you refer to sounds like it is already infected, we are not able to work on malware removal in this sub-forum. Please read the information provided by AdvancedSetup at the following link where you can obtain needed assistance: http://forums.malwarebytes.org/index.php?showtopic=110068&view=findpost&p=552798 Best regards!

Hi joseibarra, To answer your questions...MBAM Pro and MSE generally run quite well together. It is recommended to place exclusions within BOTH MBAM (for MSE) and within MSE (for MBAM) to prevent any conflicts with the real-time scanning they both do. There is more information within the FAQ Section in the forum on how to place the aforementioned exclusions. MBAM is only an anti-malware program, it is not an antivirus. To answer your last two questions...you do NOT need to disable MBAM Pro. As stated above, MBAM & MSE work well together. There is no problem having MBAM Pro and MSE on the same system. Just ensure you have the necessary exclusions in place within each program to prevent conflicts. Perhaps some of our other forum members will stop by to offer additional feedback to you. Best Regards!

I appreciate your time and help Maurice!

Hi again Maurice, My hard drive is only 40 GB. I have two USB flash drives...one is a 4 GB, the other an 8 GB. According to the "Properties" section for the C drive...it indicates something like 16.3 GB of the drive is in use. So, I'm guessing I'd have to go and expend a considerable sum of $$ to acquire a flash drive with enough room to hold that much backup data. As I live on a very limited fixed disability income now, I will just have to forego acquiring the needed item(s). Thanks again for all your advice though!

Thanks very much for the edification, Maurice! Nearly all of your recommendations are practices which I adhere to. One question: You mentioned that Secunia program for checking for updates. I presently have the FileHippo Update Checker. Is that program as good as the Secunia program you referred to, or should I change to Secunia? One other item you mentioned is one I do not really understand; the part about making regular backups to a USB or CD/DVD drive. How do I accomplish that, and how many gigabytes are required to to this? Best regards, (and apologies for my lack of simple knowledge about these things).

EDIT: Forgot to mention, this trojan also managed to remove the ipsec.sys driver.

Good morning everyone, Back on April 2nd, during a normal SAS quick scan, it detected the presence of the Trojan, gen Sirefef. My computer did not display any unusual behavior beforehand, etc...so needless to say...I was rather surprised to find I had acquired this nasty piece of junk! This trojan managed to disable the Web Shield and Mail Scanner functions in my Avast AV (free version), as well as, make it impossible for me to even access the Internet, regardless of whether I used IE8 or FF. Although, SAS removed it & rebooted the computer, I ended up having to haul this machine to a repair shop and shell out $123 just to fix it so I could get on the Internet again. Going by what is in the article on the top of this page entitled, "How did I get infected...". I have everything on my computer updated and in as secure a condition as possible. My question: Should a trojan infection like this occur again at some future time, is there any way to obtain help here...instead of having to once again expend boo-koo $$$ at a repair shop? Thank you for your time and any recommendations!

I'm sorry to say, Ron, what you see below is all I can seem to get. I think it is just better to forget the whole d**m mess. It's doing nothing but causing me unnecessary aggravation which I don't need, Thanks for your help anyway. Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 306195 Time elapsed: 1 hour(s), 1 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\System Volume Information\_restore{70F479AA-2E39-4267-B183-79346D7DBBBE}\RP769\A0173951.exe (PUP.HistoryTool) -> Quarantined and deleted successfully. (end)

Ron, This is all I can find. I'm sorry if it is not enough. I'm just not the well-versed individual as MBAM staff are, so if this is not what you are looking for...PLEASE, PLEASE, provide me with some step-by-step SPECIFIC instructions on HOW to provide you with exactly what it is you are asking for. If I sound angry...it is because I am! I'm trying to provide you all with what you are requesting, but it seems I must be a complete idiot here! Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 306195 Time elapsed: 1 hour(s), 1 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\System Volume Information\_restore{70F479AA-2E39-4267-B183-79346D7DBBBE}\RP769\A0173951.exe (PUP.HistoryTool) -> Quarantined and deleted successfully. (end)

I did as you instructed, daledoc1, though I'm not sure if the screenshot shown below is what is needed. If not, then I have no idea what else to do. Unfortunately, I'm not very adept at doing all this technical stuff. Sorry.

Thanks for the info, daledoc1! I'll try that and see what happens, then post back.

Morning Ron, I regret to tell you that the instructions via the link you provided do not work. After entering "mbam.exe/developer" (without the quotes), and pressing <ENTER>, all I get is a dialog box stating "mbam.exe/developer cannot be found." Any other suggestions? Thanks.

Hi Shadowwar, Is the log I've pasted below what you are looking for? Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM | P2P Scan options disabled: Objects scanned: 306195 Time elapsed: 1 hour(s), 1 minute(s), 1 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\System Volume Information\_restore{70F479AA-2E39-4267-B183-79346D7DBBBE}\RP769\A0173951.exe (PUP.HistoryTool) -> Quarantined and deleted successfully. (end)

Good afternoon everyone, A few days ago, during a SAS scan, it picked up a Sirefef Trojan. SAS asked to reboot in order to complete the removal process...which I did. I subsequently discovered I could no longer access the Internet at all either with Firefox or IE8. I ended up having to take this machine to a repair shop and shell out $123 to get it working again. When I ran a full MBAM scan today, it detects a file (as shown in the attached screenshot). I have no idea just what this is, and placed it in the "Ignore List" for now, until I can obtain some info here about it. Could someone please enlighten me as to just what this file is and whether or not it poses any security issue(s)? Thank you for your time and review.

Hi Greyowl, What type of block is MBAM showing...incoming or outgoing?