MAM

Yes, it is Sunday, and none of the experts is available.😠 MAM

Hello, well what going one in this issue? MAM

Can someone confirm this behavior? MAM

And here is the Log too. Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2018.08.12.01 rootkit: v2018.08.12.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18837 XXXXXXXXXXXXXXX [administrator] 12.08.2018 11:19:33 mbar-log-2018-08-12 (11-19-33).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 203223 Time elapsed: 17 minute(s), 43 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198 (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [278addf1d2e6c472065928bc0ef20cf4] Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198|WOW64 (Trojan.Emotet.Trace.Generic) -> Data: 1 -> Delete on reboot. [278addf1d2e6c472065928bc0ef20cf4] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Windows\System32\drivers\44627198.sys (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [bdfa7a13cc73b180bbdf1aba280e1cf7] Physical Sectors Detected: 0 (No malicious items detected) (end)

Hello, well that is a strange behavior by me.... Pease have a deeper look on the Picture from me. MAM

Hello, why can´t i am not removing/erase Trojan.Emotet.Trace.Generic with Malwarebytes Anti-Rootkit BETA 1.10.3.1001?! Malwarebytes Anti-Rootkit BETA 1.10.3.1001, detect this crap, but can´t remove. The last three reports: Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2018.08.12.01 rootkit: v2018.08.12.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18837 XXXXXXXXXXXXXXX[administrator] 12.08.2018 09:18:32 mbar-log-2018-08-12 (09-18-32).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 203239 Time elapsed: 18 minute(s), 20 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198 (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [129f5579982086b00758459fa35d768a] Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198|WOW64 (Trojan.Emotet.Trace.Generic) -> Data: 1 -> Delete on reboot. [129f5579982086b00758459fa35d768a] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Windows\System32\drivers\44627198.sys (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [bdfa7a13cc73b180bbdf1aba280e1cf7] Physical Sectors Detected: 0 (No malicious items detected) (end) ---- Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2018.08.11.06 rootkit: v2018.08.11.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18837 XXXXXXXXXXX [administrator] 11.08.2018 22:44:50 mbar-log-2018-08-11 (22-44-50).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 203184 Time elapsed: 18 minute(s), 16 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198 (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [ff5367671a9ec472e27bf0f429d7ad53] Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198|WOW64 (Trojan.Emotet.Trace.Generic) -> Data: 1 -> Delete on reboot. [ff5367671a9ec472e27bf0f429d7ad53] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Windows\System32\drivers\44627198.sys (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [bdfa7a13cc73b180bbdf1aba280e1cf7] Physical Sectors Detected: 0 (No malicious items detected) (end) ---- Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2018.08.11.05 rootkit: v2018.08.11.05 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18837 XXXXXXXXXXX [administrator] 11.08.2018 20:07:51 mbar-log-2018-08-11 (20-07-51).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 203133 Time elapsed: 19 minute(s), 22 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198 (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [70e1745a1b9d4de9411c8f55e0208f71] Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198|WOW64 (Trojan.Emotet.Trace.Generic) -> Data: 1 -> Delete on reboot. [70e1745a1b9d4de9411c8f55e0208f71] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Windows\System32\drivers\44627198.sys (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [bdfa7a13cc73b180bbdf1aba280e1cf7] Physical Sectors Detected: 0 (No malicious items detected) (end) ---- Malwarebytes Anti-Rootkit BETA 1.10.3.1001 www.malwarebytes.org Database version: main: v2018.08.11.02 rootkit: v2018.08.11.02 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18837 XXXXXXXXXX [administrator] 11.08.2018 15:22:02 mbar-log-2018-08-11 (15-22-02).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken Scan options disabled: Objects scanned: 203286 Time elapsed: 17 minute(s), 22 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198 (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [85c94985d2e6d85e105fa93ba65ab14f] Registry Values Detected: 1 HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\44627198|WOW64 (Trojan.Emotet.Trace.Generic) -> Data: 1 -> Delete on reboot. [85c94985d2e6d85e105fa93ba65ab14f] Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Windows\System32\drivers\44627198.sys (Trojan.Emotet.Trace.Generic) -> Delete on reboot. [bdfa7a13cc73b180bbdf1aba280e1cf7] Physical Sectors Detected: 0 (No malicious items detected) (end) And so on.... ??? MAM

Hello, are we talking about Android Malware or Malware on the PC? MAM

@MoFish Hello, well maybe is this, https://mobilesecurityzone.com/android-virus-pop-up-remove/ also interesting for you, in this issue. Good Luck! MAM

Hello, I mean this on, https://www.virustotal.com/de/file/2e025b63950a0596a54f75bdda4a7fcb1e9301225e8d1d7380e5997d47fc2766/analysis/1528340617/ Dr. Web mean this: Android.Altamob.1orgin . Path: /storage/extSdCard/appmonster3/backup/com.lenovo.anyshare.gps/rev/40400078.apk. I guess that came not from AppMonster. I use here Appmmonster Free. MAM

Hello, can someone else also confirm the call of Malwarebytes for mobile now takes about 6 minutes or even longer? MAM

Hello, Dr. Web Lite has a different opinion ... MAM

And start sequence, of Malwarebytes for mobile, takes also to long, about ~3, 4 minutes. MAM

Hello, @developer, and Translation Team. I think that's a fatal mistake. From the American, to German language. Please fix that. MAM

Hello, can everyone examine this App: AppMonster Free V 3.6.1 ?. I guess that is Adaware, some parts of it. Or maybe I am wrong. Well, I mean this App, called AppMonster Free in the version 3.6.1. The source is: http://think-android.com Please examine that. Thank you. MAM

Maybe in the future, there will be the Gold version of Malwarebytes for the PC Anti-Malware with this option. PS: Only oracular, from me .... MAM