leofelix

Thank you Marcin for your suggestions and efforts:) Regards

Hello, Thank you all. Great job as usual. Congratulations I've upgraded with no problems. Cheers

Hi it is a false posotive have a look here http://forums.malwarebytes.org/index.php?s...mp;#entry218889

Sorry for late reply, answer 1: yes issue has been addressed , thank you answer 2: not here (I didn't allow MBAM to delete that registry entry) Once again thank you

Hi All. I've just scanned 3 computers of mine (Laptop with Windows 7 home premim x64 - Desktop PC with Windows 7 Ultimate x86 - Virtual PC with XP SP3) with MBAM database version 3896 Backdoor.Celofot has been detected in all my computers and only as a registry entry. Log is attached in rar format. I believe it is a false positive, since my computers are fully up to date, I practice a safe surfing and my default browser is sanboxed and I never download from untrusted sources. Windows 7 64 bit security software installed: ESET NOD 32 v 4 PC Tools Firewall Plus 6 SpywareBlaster 4.2 WinPatrol 2010 on demand a-squared free and HitMan Pro 3.5 sandboxie3.44 Windows 7 Ultimate 32 bit GData antivirus 2010 PC Tools Firewal Plus 6. PREVX Safe OnLine 3.0.5 WinPatrol 2010 on demand a-squared free and HitMan Pro 3.5 sandboxie3.44 Virtual PC with XP SP 3 avira free 9.0 spywareblaster 4.2 a-squared free WinPatrol 2010 sandboxie 3.44 I also just perfomed a full scan with SAS online scanner which found no malware on my Windows 7 x64. I'm under a router Thank you mbam_log_2010_03_22__00_02_14_.rar

Hi All I'm using Google DNS now and finally I'm able to update MBAM . More: Surfing seems to be faster. Regards

Hi AdvancedSetup Should I change DNS I think my ISP won't recognize my router (I have to use my ISP router and my ISP configuration) and I think I will no longer able to get connected. I'll wait for tomorrow, this is likely to be a temporary issue. Thank you @ Gristle, thank you. please,stop, this is not a competition (Gristle: Grazie, ma fermati, non

Hi welcome:-) I'm starting to think that this is a problem for italian only (or some europeans at least) Even user Chaos is italian and he faces the same issue. Translation into italian: Ciao, benvenuto:-) Sto inziando a sospettare che questo sia un problema solo per noi italiani (o solo di alcuni europei) Anche l'utente Chaos

Well, here are the results:) ("Richiesta scaduta" stands always for "Expired request", of course) Thank you

ehr I'm sorry I mispelled, my mistake I can ping the server

Hello exile360 I've Just followed the steps you provided. I cannot ping the server (see attached image, please. In Italian: "Richiesta scaduta" stands for Request Expired) I'm under a Router at home, yesterday I could perfectly update MBAM (same configuration) Cheers

Hi all I'm sorry I 'hijacked' another similar thread. My Apologies I cannot update MBAM on all my computers and I got error code 732 (0,0) MBAM has fully access to the internet. I do not use proxies and no Personal Firewalls are blocking MBAM. Laptop with Windows 7 Home premium 64 bitt and laptop with Windows Vista Home premium SP2 32 bit Firefox 3.6 + adblock plus + WOT ESET NOD 32 v.4 JavaCool SpywareBlaster 4.2 PC Tools Firewall Plus 6 WinPatrol 2010 Sandboxie 3.44 RETURNIL Home lux 2010 (antivirus built in disabled) on demand a-squared free 4.5 Dekstop PC With Windows 7 Ultimate edition 32 bit Firefox 3.6 + adblock plus + WOT Gdata Antivirus 2010 PC Tools Firewall Plus 6.0 WinPatrol 2010 Sanboxie 3.44 PREVX Safe OnLine 3.05.85 All my systems are fully up to date, Sun Java JRE, Adobe Reader and Flash Player are up to date. I practice safe surfing, I do not use P2P software or torrents, I scan every single software I want to install, autorun is disabled and I do not use IM software I hardly believe my systems are infected and I do not think this is a coincidence http://forums.malwarebytes.org/index.php?showtopic=42781 http://forums.malwarebytes.org/index.php?showtopic=42793 http://forums.malwarebytes.org/index.php?showtopic=42790 Regards

Hi all same here I cannot update MBAM on all my computers. MBAM has fully access to the internet. I do not use proxy and no Personal Firewalls are blocking MBAM Laptop with Windows 7 Home premium 64 bit and laptop with Windows Vista Home premium SP2 32 bit Firefox 3.6 + adblock plus + WOT ESET NOD 32 v.4 JavaCool SpywareBlaster 4.2 PC Tools Firewall Plus 6 WinPatrol 2010 Sandboxie RETURNIL Home lux 2010 (antivirus built in disabled) on demand a-squared free 4.5 Regards

Thank you so much for your fast reply exile360:) So I'm going to wait for data base version 3801 BTW I had taken a snapshot in english as well in case my post was unclear Regards

Hi all Today MBAM seems to keep on updating always from data base v 3800 to data base v 3800 (Sorry it is in italian, I was in a hurry to swich into english) Cheers

Happy New Year! MalwareBytes' staff and members

Thank you Merry Christmas to you all

IoBit tests were ridicoluos, they compared regular antispyware/antimalware with rogue LOL. I'm with you and I hope they will apologize even if it seems they are able to deny the obvious. Hold your heads up Marcin, Bruce and all MalwareBytes' Corporation! All the best

Please restore the deleted files form quarantine and update immediately MalwareBytes' Antimalware to the latest data base version 3288

Thank you for your advice I didn't delete and quarantine these files Cheers

no problem nosirrah, I know you are very fast and efficient:) Fixed Malwarebytes' Anti-Malware 1.41 Versione del database: 3288 Windows 5.1.2600 Service Pack 3 03/12/2009 20.46.09 mbam-log-2009-12-03 (20-46-09).txt Tipo di scansione: Scansione rapida Elementi scansionati: 121322 Tempo trascorso: 3 minute(s), 0 second(s) Processi delle memoria infetti: 0 Moduli della memoria infetti: 0 Chiavi di registro infette: 0 Valori di registro infetti: 0 Elementi dato del registro infetti: 0 Cartelle infette: 0 File infetti: 0 Processi delle memoria infetti: (Nessun elemento malevolo rilevato) Moduli della memoria infetti: (Nessun elemento malevolo rilevato) Chiavi di registro infette: (Nessun elemento malevolo rilevato) Valori di registro infetti: (Nessun elemento malevolo rilevato) Elementi dato del registro infetti: (Nessun elemento malevolo rilevato) Cartelle infette: (Nessun elemento malevolo rilevato) File infetti: (Nessun elemento malevolo rilevato) -------- Regards

Hi it looks strange I got the same false positive with data base version 3286 and data base version 3287 fixed this issue, same OS

Hi Bruce, fixed thank you so much Regards:)

Hi all. Trojan. downloader has been detected by MBAM in over 65 system files during quick scan, I'm pretty sure this is a false positive, my XP pro is clean ----------- Malwarebytes' Anti-Malware 1.41 Versione del database: 3286 Windows 5.1.2600 Service Pack 3 03/12/2009 20.16.51 mbam-log-2009-12-03 (20-16-49).txt Tipo di scansione: Scansione rapida Elementi scansionati: 121226 Tempo trascorso: 4 minute(s), 18 second(s) Processi delle memoria infetti: 0 Moduli della memoria infetti: 0 Chiavi di registro infette: 0 Valori di registro infetti: 0 Elementi dato del registro infetti: 0 Cartelle infette: 0 File infetti: 65 Processi delle memoria infetti: (Nessun elemento malevolo rilevato) Moduli della memoria infetti: (Nessun elemento malevolo rilevato) Chiavi di registro infette: (Nessun elemento malevolo rilevato) Valori di registro infetti: (Nessun elemento malevolo rilevato) Elementi dato del registro infetti: (Nessun elemento malevolo rilevato) Cartelle infette: (Nessun elemento malevolo rilevato) File infetti: (infected files) C:\WINDOWS\system32\append.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\olesvr.dll (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\drwatson.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\exe2bin.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\fastopen.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\mem.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\mouse.drv (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\nlsfunc.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\share.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\shell.dll (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\vwipxspx.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\gdi.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\vga.drv (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\winspool.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\olecli.dll (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\debug.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\user.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\win87em.dll (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\mscdexnt.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\krnl386.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\comm.drv (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\wowdeb.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\winnls.dll (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\winoldap.mod (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\wfwnet.drv (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\wowexec.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\sysedit.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\system.drv (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\edlin.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\system32\setver.exe (Trojan.Downloader) -> No action taken. C:\WINDOWS\Temp\Perflib_Perfdata_214.dat (Trojan.Downloader) -> No action taken. C:\WINDOWS\UNBOC.EXE (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\8514oeme.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\8514oemg.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\8514oemr.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\8514oemt.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\vga852.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\vga857.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\vga866.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga40737.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega40857.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega40866.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega40869.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega80737.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega80857.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega80869.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga40852.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga40857.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga40866.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga40869.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga80737.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga80852.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga80857.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga80866.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\cga80869.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\dos737.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\ega40737.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\Fonts\vgasys.fon (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\MOUSE.DRV (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\OLECLI.DLL (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\OLESVR.DLL (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\SHELL.DLL (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\SYSTEM.DRV (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\VGA.DRV (Trojan.Downloader) -> No action taken. C:\WINDOWS\system\WFWNET.DRV (Trojan.Downloader) -> No action taken. ---------------- SAS free found no malware a-squared found no malware I use ESET Smart security 4.0 Winpatrol 2010 free Firefox plus WOT and Adblock plus XP PRO SP 3 fully up to date Thank you in advance

Thank you so much:-) Cheers leofelix Just to make you know: SAS online scanner found no malware Windows Defender found no malware TREND Micro Rootkit Buster found no hidden files