TonyKlein
-
Posts
1,931 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by TonyKlein
-
-
Have you checked the language settings in MBAM (Settings tab > Language) ?
Changing the language in MBAM should automatically change the context menu language to the one selected as well!
If no joy, first uninstall MBAM again, then run the MBAM-Clean utility following the instructions in this post by AdvancedSetup
Then reinstall MBAM, set the desired language, and all *should* be well.
-
Gefeliciteerd, Merijn!
-
I have Avira myself, and I can't duplicate this.
Also, here are the VirusTotal scan results for the setup file downloaded here
http://www.virustotal.com/file-scan/report...bad2-1281685870
-
@ Nosirrah : np, you're very welcome Bruce.
@ daledoc1 : I've never thought of zipping a file from quarantine, but I do suppose you can go to the %UserName%\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine folder , find the (renamed) quarantined file in there, and zip it right there.
-
Yup, do restore the file from quarantine, and then update MBAM and rescan, if you'd like. The scan should be clean.
As to how to zip/unzip a file/files, Win XP and Vista have support for compressed files built in; here's a tutorial:
-
.... and you re very welcome, daledoc1
-
Yup, all clean here, thanks.
-
Dev log from a quick scan is clean, so I guess this was detected in the course of a full scan.
File scan is positive though:
Files Infected:
C:\Program Files\MediaMonkey\VisHelper.exe (Trojan.Dropper) -> No action taken.
-
... or an actual copy of the detected file.
I can confirm this. Here's a copy of mine + a clean VT report
http://www.virustotal.com/analisis/a17ff1c...f784-1280141983
MBAM scan still running, dev log coming up
-
You're very welcome, glad to help
-
Hi Kelly,
For consumers and personal use, it is a one time fee of $24.95, no strings attached
-
The Ikarus engine does detect it as "Virus.Win32.Obfuscator"
http://www.virustotal.com/analisis/a2afdc0...4288-1268654863
I've pinged the folks at Ikarus; it can't hurt to alert a-squared as well, as I suggested
-
Hi and welcome.
If you report this False Positive to a-squared, I'm sure they'll be quick to fix it.
-
I tend to agree, but the question remains why half a year ago MysteryFCM delisted the IPs in the first place...
-
Happy birthday, mate!
-
Well, I guess we'l have to wait for MysteryFCM (Steven) to drop by and tell us what's up...
-
Hi and welcome.
I can't double-check right now, but according to this post the myway.com IPs were delisted half a year ago.
Are you sure you have the latest database updates installed??
-
There seems to be a missing 'file' or folder here ??
If you're referring to the Windows\Inf folder, it is hidden by default. You need to un-hide hidden files and folders first in order to see it
-
Here's some reading:
http://www.avira.com/en/threats/section/fu...y.zbot.dfr.html
http://www.sophos.com/security/analyses/vi...l?_log_from=rss
http://www.fortiguard.com/encyclopedia/vir...33;tr.dldr.html
In short, this is definitely not a False Positive, prolly a new variant...
-
No they are not stuck I did it deliberately, i believe it gets noticed better, thanks for taking the mickey out of me, but its cool anyway...
It's just that typing in all caps is generally considered "SHOUTING".
Otherwise, no (great) snub intended...
-
I see you just started yet another topic...
IF ANYONE HAS PROBLEMS WITH THEIR PC
Also, your Caps Lock key appears to have gotten stuck...
-
It's not a password stealer, as far as I know, so a light threat, I guess
-
If you uploaded the file to VirusTotal, you'd very likely get something like this:
http://www.virustotal.com/analisis/590cc6c...2a85-1247149284
The registry entries also belong to this Webdir adware variant:
-
Yup, clean slate now, thanks!
Context-Menu: German & English
in Malwarebytes for Windows Support Forum
Posted
You're very welcome. I did have a feeling it had to be a file or registry key that had resisted removal during your previous uninstall.
Good to hear everything is OK now