Jump to content

lurkingatu2

Honorary Members
  • Posts

    173
  • Joined

  • Last visited

Posts posted by lurkingatu2

  1. hello

    as a original Beta tester of the first Versions Malwarebytes since July 19, 2007

    i was thinking on trying this new 3.0 Beta but my lifetime license i got for testing will not work

    this happened before with a version in 2015 and i asked support for help to reset and
    they said they could not find my license but would fix it anyhow and it worked for like
    6 months and now will not accept my license anymore

    so not sure what to do

    could i get some help or should i ask support again

    thanks

    James

     

  2. if you upgrade to Win 10 from a OEM Win 8 Computer be aware


    if you have a OEM Windows 8 computer (Hewlett-Packard,Acer,Toshiba ect.) and installed Windows 8.1
    it adds a extra 350mb recovery partition

    now if you had to restore back to Windows 8 from the OEM recovery Partition the extra 350mb recovery
    gets left on the hard drive

    now from a fresh install back to Windows 8 from the OEM recovery partition you upgrade to Windows 8.1 it adds another 350mb recovery partition so now there is 2 350mb recovery partition and if you keep going back to Windows 8 from the OEM recovery partition and upgrade to Windows 8.1 it adds another

    Windows defrag see's these 350mb recovery partition as Local Disk (\\?\VOLUME and can not defrag them

    this persion had this happen to him (13 350mb recovery partitions)

    Too Many Recovery Partitions
    http://malwaretips.com/threads/too-many-recovery-partitions.32625/

    i also found this

    Too many recovery partitions Windows 8.1
    http://www.eightforums.com/general-support/67348-too-many-recovery-partitions-windows-8-1-a.html

    in post #2 topgundcp says

    "If you have another HD then I would suggest to re-install the OS and get ready to upgrade to Windows 10. Having too many reserved partitions might cause upgrade to Windows 10 to fail as seen in Windows 10 Forum."

    i'v asked this question at the Microsoft Community forum on July 8
    http://answers.microsoft.com/en-us/windows/forum/windows_10-win_upgrade/upgrade-to-win-10-but-too-many-recovery-partitions/a58f421f-fdfd-4d6d-bd58-82b8168e84f1

    the Microsoft Support Engineer says that if i try to upgrade with the added 350mb partitions Windows 10 will not install and could be trouble and says i should Wipe the Hard drive and reinstall

    ok i know how to do this but what about everyone else

    to me i think people should know about this before Windows 10 is out

    what do you think?

    this is a post i asked this same
    http://malwaretips.com/threads/if-you-upgrade-to-win-10-from-a-oem-win-8-computer-be-aware.48249/


    :)

    James
     

  3. hello Maurice

    i'v also found in Webroot under Quarantine a place to allow Mbam called Detection Configuration it says

    :you can change how SecureAnywhere detects files on your computer (e.g. to manuaily blpck specific

    programs or allow others)

    so i would think thats where i add exclusions to so i'v added and set to allow

    Mbamscheduler.exe

    Mbamservice.exe

    Mbamgui.exe

    Mbam.exe

    i will keep checking if it happens again and let you all know

    thanks

    James

  4. hello Maurice

    yes after i restore my pc Norton is on my computer and i don't let it complately install then the first thing i use is

    the Norton uninstall tool to uninstall it then i go into documents and settings and delete all the Symantec folders i

    find there then install and run Ccleaner and Ccleaner's registry cleaner to get what Norton stuff Ccleaner finds in the

    registry and i see nothing running in the task manager from Norton

    SuperAntispyware is on-demand nothing running from it realtime but SASCore.exe in task manager

    ok i added WRSA.exe in the ignore list of Mbam

    in Webroot SA Mbam.exe and Mbamscheduler.exe is allowed under control active processes

    i understand about the error is from Microsoft and is sent to them from Windows not Mbam

    the error do's not happen everytime i update and then run a scan i can update Mbam and do a quick scan like over 10 times

    or more then 1 time i update and run a scan it will happen

    here is the start of the Dr.watson log

    Application exception occurred:

    App: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (pid=2904)

    When: 9/5/2012 @ 23:25:11.922

    Exception number: c0000005 (access violation)

    Mbam Log

    Malwarebytes Anti-Malware (PRO) 1.65.0.1000

    www.malwarebytes.org

    Database version: v2012.09.06.11

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    lurk :: ACER [administrator]

    Protection: Disabled

    9/6/2012 1:59:48 PM

    mbam-log-2012-09-06 (13-59-48).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 196297

    Time elapsed: 2 minute(s), 22 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    i will try for while since i added WRSA.exe in the ignore list of Mbam and see what happens i could also unstall SuperAntispyware

    and try for while if you would like

    thanks

    James

  5. hello

    i installed Mbam beta 1.65.0.1000 over 1.62.0.1300 and it installed fine but i'v had trouble with the

    last few versions of Mbam where right after i update the database and then run a quick scan Mbam errors

    and sends a error report to microsoft and then closes

    i'v reported this before

    http://forums.malwarebytes.org/index.php?showtopic=112807

    it don't happen every time i update then run a scan i'v even restored my pc less than 30 days ago i'm

    not running Mbam in realtime just on-demand and the only secirity programs that run at startup are

    Webroot SecureAnywhere v8.0.1.233 and Sandboxie v3.74

    my pc is a Acer t180 with Winxp MCE sp3 2gb of memory

    it only makes a Dr Watson log and user.dmp i have the new one that it made tonite when it happend but can't

    see no way to attach it here

    thanks

    James

  6. hello

    a few times when i update Mbam and then click on quick scan to do a scan Mbam crashes and it sends a report to microsoft

    it happend with Mbam version 1.61 but i waited for version 1.62 to come out thinking it would stop but it has not

    i found the Dr watson log and thought i would give it to you guy's

    i'm running windows xp sp3 Mce i use Webroot SecureAnyware essentials and Emsisoft Mamutu (i'v excluded Mbam in Mamutu)

    and have Sandboxie at startup

    i use Mbam pro and Superantispyware pro and Hitmanpro on-demand only and thats my security programs

    i'v done scans and have not found nothing

    thanks

    James

    :)

    Dr Watson log.txt

    user dmp.zip

  7. ok now after i posted i went to run a quick scan with Mbam clicked on quick scan and it closed then i

    opend Mbam again and the scan started and ran ok

    Malwarebytes Anti-Malware (PRO) 1.61.0.1400

    www.malwarebytes.org

    Database version: v2012.04.20.03

    Windows XP Service Pack 3 x86 NTFS

    Internet Explorer 8.0.6001.18702

    lurking :: ACER [administrator]

    Protection: Disabled

    4/20/2012 11:14:03 AM

    mbam-log-2012-04-20 (11-14-03).txt

    Scan type: Quick scan

    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM

    Scan options disabled: P2P

    Objects scanned: 194047

    Time elapsed: 2 minute(s), 48 second(s)

    Memory Processes Detected: 0

    (No malicious items detected)

    Memory Modules Detected: 0

    (No malicious items detected)

    Registry Keys Detected: 0

    (No malicious items detected)

    Registry Values Detected: 0

    (No malicious items detected)

    Registry Data Items Detected: 0

    (No malicious items detected)

    Folders Detected: 0

    (No malicious items detected)

    Files Detected: 0

    (No malicious items detected)

    (end)

    so i'm thinking a reinstall of Mbam maybe ?

    i use Mbam and SuperAntispyware as on-demand only not in realtime

    Thanks

  8. hello

    today i updated Mbam 1.61.0.1400 and got this error

    an error has occurred please report this issue to our support team (include the content of all error

    message(s) and codes(s) in your submission

    PROGRAM_ERROR_UPDATING(1812,0,Config missing or corrupt,please reinstall)

    The specified image file did not contain a resource section

    then i tryed to update again and Mbam updated with no problem

    Thanks

    :)

  9. Mbam log

    Malwarebytes' Anti-Malware 1.50.1.1100

    www.malwarebytes.org

    Database version: 5516

    Windows 6.1.7600

    Internet Explorer 8.0.7600.16385

    1/13/2011 10:01:31 PM

    mbam-log-2011-01-13 (22-01-17).txt

    Scan type: Full scan (C:\|)

    Objects scanned: 343128

    Time elapsed: 1 hour(s), 39 minute(s), 58 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 1

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    c:\SWSetup\LSSS\LSSetup.exe (Trojan.WinLock) -> No action taken.

    virustotal

    LSSetup.exe

    Submission date: 2011-01-14 05:55:07 (UTC)

    Current status: queued queued (#2) analysing finished

    Result: 0/ 41 (0.0%)

    VT Community

    not reviewed

    Safety score: -

    Compact Print results Antivirus Version Last Update Result

    AhnLab-V3 2011.01.14.00 2011.01.13 -

    AntiVir 7.11.1.122 2011.01.13 -

    Antiy-AVL 2.0.3.7 2011.01.14 -

    Avast 4.8.1351.0 2011.01.13 -

    Avast5 5.0.677.0 2011.01.13 -

    AVG 10.0.0.1190 2011.01.14 -

    BitDefender 7.2 2011.01.14 -

    CAT-QuickHeal 11.00 2011.01.14 -

    ClamAV 0.96.4.0 2011.01.14 -

    Command 5.2.11.5 2011.01.14 -

    Comodo 7385 2011.01.14 -

    DrWeb 5.0.2.03300 2011.01.14 -

    Emsisoft 5.1.0.1 2011.01.14 -

    eSafe 7.0.17.0 2011.01.13 -

    eTrust-Vet 36.1.8098 2011.01.13 -

    F-Prot 4.6.2.117 2011.01.13 -

    F-Secure 9.0.16160.0 2011.01.14 -

    Fortinet 4.2.254.0 2011.01.13 -

    GData 21 2011.01.14 -

    Ikarus T3.1.1.97.0 2011.01.14 -

    Jiangmin 13.0.900 2011.01.14 -

    K7AntiVirus 9.75.3535 2011.01.13 -

    Kaspersky 7.0.0.125 2011.01.14 -

    McAfee 5.400.0.1158 2011.01.14 -

    McAfee-GW-Edition 2010.1C 2011.01.14 -

    NOD32 5785 2011.01.13 -

    Norman 6.06.12 2011.01.13 -

    nProtect 2011-01-13.01 2011.01.13 -

    Panda 10.0.2.7 2011.01.13 -

    PCTools 7.0.3.5 2011.01.14 -

    Prevx 3.0 2011.01.14 -

    Rising 22.82.04.00 2011.01.14 -

    Sophos 4.61.0 2011.01.14 -

    SUPERAntiSpyware 4.40.0.1006 2011.01.14 -

    TheHacker 6.7.0.1.114 2011.01.13 -

    TrendMicro 9.120.0.1004 2011.01.14 -

    TrendMicro-HouseCall 9.120.0.1004 2011.01.14 -

    VBA32 3.12.14.2 2011.01.13 -

    VIPRE 8067 2011.01.14 -

    ViRobot 2011.1.14.4253 2011.01.14 -

    VirusBuster 13.6.144.0 2011.01.13 -

    Additional informationShow all

    MD5 : 3ebe572247b754634eae5c1a34dfa3eb

    SHA1 : 8c78af53925cdd9ce661e6764525d68cc95c58be

    SHA256: 316b070bc9b057ffae2772f1c10d9a8ebeefc9bc05ee5207b926cf27a9cc447e

    ssdeep: 196608:m1BiG/zppkfG8KhF16hZQ8GDy3a+hMWKDqHeuwIqx1EAFG2CYU:mfbr/10qJuKQMW0oe

    Wqx1RFG2CY

    File size : 8929824 bytes

    First seen: 2008-03-22 06:06:19

    Last seen : 2011-01-14 05:55:07

    TrID:

    Win64 Executable Generic (59.6%)

    Win32 Executable MS Visual C++ (generic) (26.2%)

    Win32 Executable Generic (5.9%)

    Win32 Dynamic Link Library (generic) (5.2%)

    Generic Win/DOS Executable (1.3%)

    sigcheck:

    publisher....: LightScribe

    copyright....: Copyright © 2007 Hewlett-Packard Develo

    product......: LS_HSI

    description..: LS_HSI

    original name: Setup.exe

    internal name: Setup

    file version.: 1.12.33.

    comments.....: n/a

    signers......: Hewlett-Packard Company

    VeriSign Class 3 Code Signing 2004 CA

    Class 3 Public Primary Certification Authority

    signing date.: 11:19 PM 2/26/2008

    verified.....: -

    PEiD: Armadillo v1.71

    PEInfo: PE structure information

    [[ basic data ]]

    entrypointaddress: 0x2996C

    timedatestamp....: 0x4626BFD3 (Thu Apr 19 01:03:15 2007)

    machinetype......: 0x14c (I386)

    [[ 4 section(s) ]]

    name, viradd, virsiz, rawdsiz, ntropy, md5

    .text, 0x1000, 0x34252, 0x35000, 6.52, c9197aa9b527836ce29af10d2ddf924d

    .rdata, 0x36000, 0x6D26, 0x7000, 4.77, bf4b45ddeeea5d7f1fb47b800a27cf48

    .data, 0x3D000, 0x9D04, 0x6000, 3.14, 83c11175151189b2c495762e2f027778

    .rsrc, 0x47000, 0x157EC, 0x16000, 7.54, 72a7b55ba74e3c1250a7af683373d5d2

    [[ 10 import(s) ]]

    VERSION.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA

    SHELL32.dll: SHGetPathFromIDListA, ShellExecuteA, SHBrowseForFolderA, SHGetMalloc

    COMCTL32.dll: -

    KERNEL32.dll: DuplicateHandle, GetCurrentProcess, ExitProcess, WaitForSingleObject, CreateProcessA, lstrcpyA, GetWindowsDirectoryA, SetErrorMode, GetTempPathA, ExpandEnvironmentStringsA, lstrcmpA, lstrcmpiA, GetTickCount, GetExitCodeThread, CreateThread, CopyFileA, InterlockedIncrement, InterlockedDecrement, QueryPerformanceFrequency, CreateEventA, lstrcatA, GetTempFileNameA, CompareStringA, CompareStringW, GetVersionExA, SetFilePointer, SetFileAttributesA, SetFileTime, LocalFileTimeToFileTime, DosDateTimeToFileTime, FreeLibrary, GetProcAddress, LoadLibraryA, LockResource, LoadResource, SizeofResource, FindResourceA, GetSystemDefaultLCID, GlobalHandle, VerLanguageNameA, FormatMessageA, LocalFree, GetLocalTime, MoveFileA, SetCurrentDirectoryA, FindClose, FindNextFileA, CompareFileTime, FindFirstFileA, GetSystemTimeAsFileTime, GetSystemInfo, MulDiv, IsValidCodePage, GetVersion, FlushFileBuffers, SetEndOfFile, GetDiskFreeSpaceA, GetDriveTypeA, CreateDirectoryA, MapViewOfFile, GetCurrentThread, GetLocaleInfoA, GetFileType, GetStdHandle, GetThreadContext, GetEnvironmentStringsW, SetLastError, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, GetOEMCP, GetACP, GetCPInfo, SetUnhandledExceptionFilter, LCMapStringW, LCMapStringA, IsBadWritePtr, VirtualAlloc, VirtualFree, HeapCreate, HeapDestroy, GetEnvironmentVariableA, TlsGetValue, TlsAlloc, TlsSetValue, GetCurrentThreadId, HeapSize, HeapReAlloc, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, DeleteCriticalSection, InterlockedExchange, IsBadReadPtr, SystemTimeToFileTime, QueryPerformanceCounter, ResetEvent, SetEvent, GetShortPathNameA, VirtualProtect, VirtualQuery, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, TerminateProcess, GetModuleHandleA, SearchPathA, SetStdHandle, UnmapViewOfFile, lstrlenA, CreateFileA, GetFileSize, GlobalAlloc, CloseHandle, VirtualProtectEx, WriteProcessMemory, FlushInstructionCache, SetThreadContext, ResumeThread, DeleteFileA, Sleep, RemoveDirectoryA, IsDBCSLeadByte, GetFileAttributesA, GetProcessHeap, HeapAlloc, HeapFree, WriteFile, lstrcpynA, GetModuleFileNameA, lstrlenW, WideCharToMultiByte, MultiByteToWideChar, SetHandleCount, GetLastError, GlobalLock, ReadFile, GlobalUnlock, GlobalFree, GetEnvironmentStrings, CreateFileMappingA, GetStringTypeA, GetStringTypeW, IsBadCodePtr, GetExitCodeProcess

    USER32.dll: GetDlgItemTextA, GetWindow, SetCursor, UpdateWindow, GetClassInfoA, CharUpperA, CharLowerBuffA, wvsprintfA, EnableWindow, GetParent, GetWindowTextLengthA, GetWindowTextA, MoveWindow, GetWindowPlacement, DrawIcon, DestroyIcon, GetDlgCtrlID, SetWindowTextA, FillRect, GetSysColor, GetSysColorBrush, SendMessageA, LoadStringA, GetSystemMetrics, SetRect, FindWindowA, IntersectRect, SubtractRect, IsWindow, DestroyWindow, CreateDialogParamA, CharNextA, MessageBoxA, WaitForInputIdle, GetWindowLongA, BeginPaint, EndPaint, SetWindowLongA, GetClientRect, ClientToScreen, SetWindowPos, GetWindowDC, EndDialog, GetDlgItem, ShowWindow, DialogBoxParamA, GetDesktopWindow, wsprintfA, MsgWaitForMultipleObjects, PeekMessageA, DefWindowProcA, PostMessageA, KillTimer, PostQuitMessage, SetTimer, LoadIconA, LoadCursorA, RegisterClassA, CreateWindowExA, GetMessageA, TranslateMessage, DispatchMessageA, GetDC, ReleaseDC, CharPrevA, ExitWindowsEx, SendDlgItemMessageA, GetWindowRect, IsDialogMessageA

    GDI32.dll: CreateFontA, GetTextExtentPoint32A, SetBkMode, SetTextColor, GetObjectA, CreateFontIndirectA, CreateSolidBrush, CreateCompatibleDC, SelectObject, BitBlt, DeleteDC, DeleteObject, GetStockObject, GetSystemPaletteEntries, CreatePalette, GetDeviceCaps, SelectPalette, RealizePalette, CreateDIBitmap, TranslateCharsetInfo

    ADVAPI32.dll: RegQueryValueA, RegOpenKeyA, FreeSid, OpenProcessToken, LookupPrivilegeValueA, AdjustTokenPrivileges, RegEnumValueA, RegCreateKeyExA, RegSetValueExA, RegDeleteValueA, RegOpenKeyExA, RegQueryValueExA, RegCloseKey, AllocateAndInitializeSid, GetTokenInformation, OpenThreadToken, EqualSid

    RPCRT4.dll: UuidCreate, RpcStringFreeA, UuidToStringA

    ole32.dll: CoUninitialize, CoInitialize

    OLEAUT32.dll: -, -, -, -, -, -, -

    ExifTool:

    file metadata

    CharacterSet: Unicode

    CodeSize: 217088

    CompanyName: LightScribe

    EntryPoint: 0x2996c

    FileDescription: LS_HSI

    FileFlagsMask: 0x003f

    FileOS: Win32

    FileSize: 8.5 MB

    FileSubtype: 0

    FileType: Win32 EXE

    FileVersion: 1.12.33.

    FileVersionNumber: 14.0.0.162

    ImageVersion: 0.0

    InitializedDataSize: 143360

    InternalBuildNumber: 62562

    InternalName: Setup

    LanguageCode: English (U.S.)

    LegalCopyright: Copyright © 2007 Hewlett-Packard Develo

    LinkerVersion: 6.0

    MIMEType: application/octet-stream

    MachineType: Intel 386 or later, and compatibles

    OSVersion: 4.0

    ObjectFileType: Dynamic link library

    OriginalFilename: Setup.exe

    PEType: PE32

    ProductName: LS_HSI

    ProductVersion: 1.12

    ProductVersionNumber: 14.0.0.0

    Subsystem: Windows GUI

    SubsystemVersion: 4.0

    TimeStamp: 2007:04:19 03:03:15+02:00

    UninitializedDataSize: 0

    VT Community

    thanks

    :P

  10. hello

    i just updated Mbam deff. version to

    8/20/09

    database version: 2661

    fingerprints loaded: 124284

    and Mbam found

    Malwarebytes' Anti-Malware 1.40

    Database version: 2661

    Windows 5.1.2600 Service Pack 3

    8/20/2009 1:13:26 AM

    mbam-log-2009-08-20 (01-13-10).txt

    Scan type: Quick Scan

    Objects scanned: 94297

    Time elapsed: 1 minute(s), 27 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 3

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    C:\WINDOWS\system32\netsetup.exe (Worm.Autorun) -> No action taken. [5538515242484730563857535134365315385738010101010111]

    C:\WINDOWS\system32\wextract.exe (Worm.Autorun) -> No action taken. [5538515242484730563857535134365315385738010101010111]

    C:\WINDOWS\system32\ERUpdateHidden.EXE (Worm.Autorun) -> No action taken. [5538515242484730563857535134365315385738010101010111]

    and i scaned them at jotti's

    Filename: ERUpdateHidden.EXE

    Status: Scan finished. 0 out of 21 scanners reported malware

    File size: 1168896 bytes

    Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

    MD5: 4bfa1831bdc58b5e7f077892e8b694e6

    SHA1: 11647d69ce7fd25bad69d2089739a3c76eeabcc9

    Filename: netsetup.exe

    Status: Scan finished. 0 out of 21 scanners reported malware.

    File size: 329728 bytes

    Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

    MD5: 04d08be5f163c108bafe2988182f62c2

    SHA1: 6d359bfc9f19e046ccb5680240e6f48ada392c26

    Filename: wextract.exe

    Status: Scan finished. 0 out of 21 scanners reported malware.

    File size: 65024 bytes

    Filetype: PE32 executable for MS Windows (GUI) Intel 80386 32-bit

    MD5: 2fcca89ea18cbabad85b47d8d0cc375b

    SHA1: 7c8e22667d62ef3dcf0ac80b3139c1768d5286e2

    thanks <_<

  11. well i doin't think i would use nothing from pcsecurityshield because there is a lot of good free

    stuff out there and it looks like thay use BitDefender so why not just use BitDefender

    thay also use comodo as there Shield Firewall and comodo is free

    hxxp://www.pcsecurityshield.com/

    :(

  12. hello

    i'm getting this one also

    Malwarebytes' Anti-Malware 1.34

    Database version: 1820

    Windows 5.1.2600 Service Pack 3

    3/5/2009 9:43:35 AM

    mbam-log-2009-03-05 (09-43-26).txt

    Scan type: Quick Scan

    Objects scanned: 63892

    Time elapsed: 1 minute(s), 58 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 2

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    C:\WINDOWS\system32\wextract.exe (Trojan.Vundo) -> No action taken.

    C:\WINDOWS\system32\ERUpdateHidden.EXE (Trojan.Vundo) -> No action taken.

    VirSCAN.org Scanned Report :

    Scanned time : 2009/03/05 09:48:30 (PST)

    Scanner results: All Scanners reported not find malware!

    File Name : ERUpdateHidden.EXE

    File Size : 1168896 byte

    File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit

    MD5 : 4bfa1831bdc58b5e7f077892e8b694e6

    SHA1 : 11647d69ce7fd25bad69d2089739a3c76eeabcc9

    Online report : http://virscan.org/report/bd592ff72e69e295...5be92f6d55.html

    Scanner Engine Ver Sig Ver Sig Date Time Scan result

    a-squared 4.0.0.32 20090305045332 2009-03-05 3.48 -

    AhnLab V3 2009.03.05.03 2009.03.05 2009-03-05 1.55 -

    AntiVir 7.9.0.100 7.1.2.127 2009-03-05 1.86 -

    Antiy 2.0.18 20090305.2210017 2009-03-05 0.12 -

    Authentium 5.1.1 200903041747 2009-03-04 1.46 -

    AVAST! 3.0.1 090305-0 2009-03-05 0.04 -

    AVG 7.5.52.442 270.11.8/1985 2009-03-05 2.37 -

    BitDefender 7.81008.2743764 7.23981 2009-03-05 3.74 -

    CA (VET) 9.0.0.143 31.6.6382 2009-03-05 8.01 -

    ClamAV 0.94.2 9073 2009-03-05 1.40 -

    Comodo 3.8 986 2009-03-05 0.46 -

    CP Secure 1.1.0.715 2009.03.05 2009-03-05 7.95 -

    Dr.Web 4.44.0.9170 2009.03.05 2009-03-05 4.95 -

    F-Prot 4.4.4.56 20090304 2009-03-04 2.00 -

    F-Secure 5.51.6100 2009.03.05.06 2009-03-05 0.56 -

    Fortinet 2.81-3.117 10.120 2009-03-05 0.89 -

    GData 19.3654/19.249 20090305 2009-03-05 6.95 -

    ViRobot 20090305 2009.03.05 2009-03-05 0.41 -

    Ikarus T3.1.01.45 2009.03.05.72386 2009-03-05 5.75 -

    JiangMin 11.0.706 2009.03.05 2009-03-05 1.72 -

    Kaspersky 5.5.10 2009.03.05 2009-03-05 0.50 -

    KingSoft 2009.2.5.15 2009.3.5.21 2009-03-05 0.68 -

    McAfee 5.3.00 5543 2009-03-04 2.86 -

    Microsoft 1.4405 2009.03.05 2009-03-05 5.91 -

    mks_vir 2.01 2009.03.05 2009-03-05 3.12 -

    Norman 6.00.06 6.00.00 2009-03-05 8.01 -

    Panda 9.05.01 2009.03.04 2009-03-04 1.87 -

    Trend Micro 8.700-1004 5.882.03 2009-03-05 0.05 -

    Quick Heal 10.00 2009.03.05 2009-03-05 1.14 -

    Rising 20.0 21.19.32.00 2009-03-05 1.25 -

    Sophos 2.84.1 4.39 2009-03-05 2.51 -

    Sunbelt 5022 5022 2009-03-04 0.59 -

    Symantec 1.3.0.24 20090304.017 2009-03-04 0.08 -

    nProtect 20090305.02 3243337 2009-03-05 5.52 -

    The Hacker 6.3.2.7 v00272 2009-03-04 0.52 -

    VBA32 3.12.10.1 20090304.1443 2009-03-04 8.06 -

    VirusBuster 4.5.11.10 10.101.35/966288 2009-03-05 2.62 -

    thanks

    B)

  13. hello

    sounds like your in selective startup click on start then run and type msconfig then click ok

    when the system configuration utility starts choose normal startup then click ok and it should

    ask you to restart the pc

    it should fix it as long as theres no other problems sometimes when the pc crashes it will go

    into selective startup

    :rolleyes:

  14. hello

    i'm finding it also but when i right click scan msmsgs.exe Mbam doin't say nothing so i scaned

    it at virscan and found nothing

    i do not use windows messenger at all

    Malwarebytes' Anti-Malware 1.34

    Database version: 1790

    Windows 5.1.2600 Service Pack 3

    2/21/2009 7:25:28 PM

    mbam-log-2009-02-21 (19-25-20).txt

    Scan type: Full Scan (C:\|)

    Objects scanned: 103038

    Time elapsed: 9 minute(s), 51 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 1

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    C:\WINDOWS\$NtUninstallKB887472$\msmsgs.exe (Trojan.Autorun) -> No action taken. [6722202021207170231766202070702423226819212423692217691924671923]

    virscan log

    VirSCAN.org Scanned Report :

    Scanned time : 2009/02/22 11:30:10 (CST)

    Scanner results: All Scanners reported not find malware!

    File Name : msmsgs.exe

    File Size : 1694208 byte

    File Type : PE32 executable for MS Windows (GUI) Intel 80386 32-bit

    MD5 : 74e6e96c6f0e2eca4edbb7f7a468f259

    SHA1 : 1b4729d1bd15e4d48422ecb5730959390c0be1c7

    Online report : http://virscan.org/report/4835c1051421c251...91e32cc194.html

    Scanner Engine Ver Sig Ver Sig Date Time Scan result

    a-squared 4.0.0.32 20090221170551 2009-02-21 2.62 -

    AhnLab V3 2009.02.21.00 2009.02.21 2009-02-21 1.12 -

    AntiVir 7.9.0.87 7.1.2.59 2009-02-21 1.87 -

    Antiy 2.0.18 20090222.2199698 2009-02-22 0.12 -

    Authentium 5.1.1 200902211511 2009-02-21 1.19 -

    AVAST! 3.0.1 090221-0 2009-02-21 0.09 -

    AVG 7.5.52.442 270.11.2/1965 2009-02-21 1.95 -

    BitDefender 7.81008.2680327 7.23804 2009-02-22 2.54 -

    CA (VET) 9.0.0.143 31.6.6368 2009-02-21 4.61 -

    ClamAV 0.94.2 9022 2009-02-22 0.32 -

    Comodo 3.8 986 2009-02-20 0.45 -

    CP Secure 1.1.0.715 2009.02.21 2009-02-21 7.11 -

    Dr.Web 4.44.0.9170 2009.02.22 2009-02-22 4.06 -

    F-Prot 4.4.4.56 20090221 2009-02-21 1.17 -

    F-Secure 5.51.6100 2009.02.22.01 2009-02-22 0.10 -

    Fortinet 2.81-3.117 10.71 2009-02-21 0.31 -

    GData 19.3306/19.233 20090222 2009-02-22 3.34 -

    ViRobot 20090220 2009.02.20 2009-02-20 0.98 -

    Ikarus T3.1.01.45 2009.02.22.72336 2009-02-22 3.75 -

    JiangMin 11.0.706 2009.02.21 2009-02-21 1.50 -

    Kaspersky 5.5.10 2009.02.22 2009-02-22 0.07 -

    KingSoft 2009.2.5.15 2009.2.21.20 2009-02-21 0.67 -

    McAfee 5.3.00 5532 2009-02-21 3.11 -

    Microsoft 1.4306 2009.02.22 2009-02-22 4.86 -

    mks_vir 2.01 2009.02.21 2009-02-21 2.78 -

    Norman 6.00.06 6.00.00 2009-02-20 8.01 -

    Panda 9.05.01 2009.02.21 2009-02-21 1.66 -

    Trend Micro 8.700-1004 5.860.23 2009-02-21 0.03 -

    Quick Heal 10.00 2009.02.20 2009-02-20 1.41 -

    Rising 20.0 21.17.52.00 2009-02-21 1.74 -

    Sophos 2.83.3 4.38 2009-02-22 2.60 -

    Sunbelt 4819 4819 2009-02-16 0.50 -

    Symantec 1.3.0.24 20090221.004 2009-02-21 0.07 -

    nProtect 20090222.01 3175936 2009-02-22 3.87 -

    The Hacker 6.3.2.4 v00263 2009-02-21 0.58 -

    VBA32 3.12.10.0 20090221.1740 2009-02-21 2.02 -

    VirusBuster 4.5.11.10 10.101.21/930783 2009-02-21 1.61 -

    thanks

    <_<

  15. hello

    sorry i'm late again lol

    well i'v updated 5 pc's so far to Mbam 1.31 with no problems

    sometimes i also get the error about my firewall when updating from securitywonks

    but not from Malwarebytes i did also sometimes with Mbam 1.30

    i see you also need info from Zonealarm users i got Zonealarm pro on 2 pc's from there

    giveaway not to long ago and i'v had no problems scanning ether pc's with Mbam 1.31

    this pc is a desktop

    AMD Athlon 64 3500+ win xp pro mce sp3 2gb memory

    running with

    Avira Antivir Pe

    zonealarm pro 8.0.059.000

    i'v got the full version of Mbam 1.31 but run it on-demand

    also Superantispyware pro and run it on-demand

    Malwarebytes' Anti-Malware 1.31

    Database version: 1485

    Windows 5.1.2600 Service Pack 3

    12/10/2008 7:01:32 PM

    mbam-log-2008-12-10 (19-01-32).txt

    Scan type: Quick Scan

    Objects scanned: 49696

    Time elapsed: 47 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    Malwarebytes' Anti-Malware 1.31

    Database version: 1485

    Windows 5.1.2600 Service Pack 3

    12/10/2008 7:11:57 PM

    mbam-log-2008-12-10 (19-11-57).txt

    Scan type: Full Scan (C:\|)

    Objects scanned: 92754

    Time elapsed: 9 minute(s), 56 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    this pc is a laptop

    mobile AMD Athlon 2400+ win xp home sp3 512mb memory

    running with

    Avira Antivir Pe

    Zonealarm pro 8.0.059.000

    on-demand

    Mbam 1.31 free

    Superantispyware free

    Malwarebytes' Anti-Malware 1.31

    Database version: 1485

    Windows 5.1.2600 Service Pack 3

    12/10/2008 7:04:24 PM

    mbam-log-2008-12-10 (19-04-24).txt

    Scan type: Quick Scan

    Objects scanned: 48438

    Time elapsed: 4 minute(s), 0 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    Malwarebytes' Anti-Malware 1.31

    Database version: 1485

    Windows 5.1.2600 Service Pack 3

    12/10/2008 7:32:17 PM

    mbam-log-2008-12-10 (19-32-17).txt

    Scan type: Full Scan (C:\|)

    Objects scanned: 78809

    Time elapsed: 27 minute(s), 30 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    thanks :angry:

  16. hello

    well i just got 4 out of 5 pc's updated to Mbam 1.29 yesterday all win-xp 2 sp2 and 3 sp3

    with no problems

    now i got the same 4 updated to Mbam 1.30 with no problems

    i'v got to get to the 5th pc later at my dads but i'm sure it will be ok

    Malwarebytes' Anti-Malware 1.30

    Database version: 1310

    Windows 5.1.2600 Service Pack 3

    10/23/2008 9:12:44 AM

    mbam-log-2008-10-23 (09-12-44).txt

    Scan type: Quick Scan

    Objects scanned: 46166

    Time elapsed: 1 minute(s), 21 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    thanks

    :)

  17. hello

    updated Mbam to 1.27 with no problem

    Malwarebytes' Anti-Malware 1.27

    Database version: 1130

    Windows 5.1.2600 Service Pack 3

    9/8/2008 7:19:37 PM

    mbam-log-2008-09-08 (19-19-37).txt

    Scan type: Quick Scan

    Objects scanned: 41718

    Time elapsed: 1 minute(s), 38 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    (No malicious items detected)

    Registry Values Infected:

    (No malicious items detected)

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    (No malicious items detected)

    thanks :unsure:

  18. hello

    updated Mbam on 4 pc's today within mbam and no problems the only thing i noticed is that

    after mbam updated and the installer ran it did not restart mbam and check for updates again

    my 2 pc's

    pc 1

    Malwarebytes' Anti-Malware 1.25 full

    Database version: 1064

    Windows 5.1.2600 Service Pack 2

    11:11:01 PM 8/17/2008

    mbam-log-08-17-2008 (23-11-01).txt

    Scan type: Quick Scan

    Objects scanned: 40782

    Time elapsed: 2 minute(s), 51 second(s)

    pc 2

    Malwarebytes' Anti-Malware 1.25 free

    Database version: 1064

    Windows 5.1.2600 Service Pack 3

    10:43:36 PM 8/17/2008

    mbam-log-08-17-2008 (22-43-36).txt

    Scan type: Quick Scan

    Objects scanned: 40821

    Time elapsed: 1 minute(s), 55 second(s)

    thanks

    ;)

  19. hello

    updated both my pc's to mbam 1.24 from in the program with no problems

    pc 1

    Malwarebytes' Anti-Malware 1.24

    Database version: 1012

    Windows 5.1.2600 Service Pack 2

    11:17:41 PM 7/30/2008

    mbam-log-7-30-2008 (23-17-41).txt

    Scan type: Quick Scan

    Objects scanned: 39272

    Time elapsed: 4 minute(s), 47 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    pc 2

    Malwarebytes' Anti-Malware 1.24

    Database version: 1012

    Windows 5.1.2600 Service Pack 3

    7:29:04 PM 7/30/2008

    mbam-log-7-30-2008 (19-29-04).txt

    Scan type: Quick Scan

    Objects scanned: 40306

    Time elapsed: 2 minute(s), 11 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 0

    Registry Values Infected: 0

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    thanks :D

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.