Jump to content

Jace

Members
  • Posts

    11
  • Joined

  • Last visited

Everything posted by Jace

  1. Thanks Nosirrah - Is there any chance you could say how an FP actually occurs ? I'm not au fait with these areas but this one did cause me a nuisance in that I tried so many times to get rid of something that turns out wasn't there to begin with, including running Mbam in safe mode, and then deleting some Apps. that there was nothing wrong with. Thanks to the team regardless.
  2. Thanks Mieki. - Apparently you were technically correct, but not in my case - It seems it is OK to be showing as an 04 but only until it's completed the Q. and Delete task, whereas in my case it had completed it's task but was STILL a HJT entry and caused a 732 (0,0) Error repeatedly - I removed the line from the reg. and then HJT, but your Expert - Ex.360 advised me to add several Mbam exceptions to AVG and that fixed the 732 Error so I could update Mbam once again. Regards.
  3. Hoping that you are still here around Ex., Yesterday I did what I said and it didn't appear to work because Mbam still showed the 732.... when I pretended to update while offline - So I then added your list to AVG Excepts., exited, and restarted AVG, tried to update Mbam, again a pretend because I was offline, still showed the 732 - Said bugger it and switched off in disgust. This morning I got on the Net and immediately tried to update, NO sign of the 732, updated without a hitch to 2821. So Ex. I would have lost my bet and gladly because you saved me going via the cape, uninstall/reinstall, my sincere thanks to you, Ex. for Expert is correct - Noted your thought re. the possible future call on /cleanupscript, so hopefully all will be OK. Kindest Regards and Thanks.
  4. Having read that link to which JT pointed me Ex. - I noted the poster also had Mbam Qu'ed and delete whatever from his machine and seeing as JT thought the Mbam entry in my HJT was probably not supposed to stay there, I decided to try something. I ran a HJT scan and then tried to delete the 04 Mbam entry I referred to above but it would not delete it, so I went into regedit and the path to 'RUN' - the same Mbam /cleanupscript entry was there, I right clicked and Deleted it. Re-ran HJT and deleted it from there too, which it did this time. Opened Mbam and tried to Update but got the same 732.. Error, so quickly exited so as it would not delete me off the net again - I reopened it and ran a quick scan, no problems - I think maybe it won't update because even though I've deleted the reg. entry it won't take effect until I reboot - So, I will reboot when offline and tomorrow see if the reg. entry deletion worked and hopefully I will be able to update again. If not, then I shall try your idea of adding the Mbam's to AVG' s Exceptions list - My bet is that it has nothing whatever to do with AVG but I won't know for sure until my next reboot finds out if my thought worked - If it has then I shall be back to ask you if deleting that Mbam entry from the reg. as I did will put the kibosh on Mbam being able to Q. and Delete any future malware ? Regards.
  5. Thanks very much JT. for a bit of decent help and the link - Have taken a couple of scroll down pics. to read offline later - Ex's last post suggests the same as your first sentence so hopefully your people will come up with the problem cure. I shall also get rid of the HJT entry later, since you mentioned it would not normally be there - I just have the feeling it only went there after having qu'ed and deleted the possible FP referred to by Ex. in this thread, Spyware.Banker, that's the exact moment my Mbam problem began. Have run several scans via AVG, SAS, SPYBOT S&D - zilch found. Regards.
  6. on XP with Mbam 1.41 there is a 04 line in HJT like this below ? O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript I ask because I am copping a 732 Error when I tried to update Mbam which also cut me off the Net and wonder if the above is a legit. inclusion in HJT.
  7. I think you misunderstood my question Yard. - was not asking about a post - I asked if the Mbam entry in HJT is a legit. entry because I had not noticed it before this mess began, here it is thanks, O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
  8. Absolutely thanks Yardbird, BUT I prefer not to go through a whole lot of moves to no avail - I mean until that moment I mentioned everything was going well - I think Mbam is the problem - My A-V is AVG but I do have quite a few other security guards. Can I ask you this please - I just took a look at my HJT list and Mbam has one there which I had not noticed before, it ends with something like /cleanupscript Is that a legit. Mbam item ?
  9. Well didn't I ask at the wrong moment in time - After reading your reply Ex. I went to update Mbam and not only got an immediate 732 etc. error BUT it also cut me straight off the Net with a click, gone ! Now I have noticed the long list here on the Forum re. Mbam having gone haywire for everyone - I read one moderators 'how to' but it didn't work for the OP so I won't try that. If this problem with Mbam gets solved I shall do as you suggested, and thanks for your help.
  10. Thanks to you Ex. - Oh yes, it's on XP Home and Mbam was updated to 2809 onboard 1.41 As shown in the log, Mbam Qu'ed, and Deleted. I jumped too quick I guess, in asking Mbam to Delete, should have looked at the thing to which they were referring because it didn't have an .ext - If you are still here around Ex. can you tell me for future ref. please, can these grubs have NO extension ? and still be Trojans or whatever ? even if not in this case ? Have just used a tiny App. 'Cathy', which tells me there is no sign of anything named Spyware.Banker, but I am now wondering what exactly Mbam Deleted ?
  11. I updated and then scanned - Mbam suddenly found two areas of the one problem. I googled to see Mbam does find this thing, but I am surprised because it's a couple of months since I installed 'Drop My Rights' and several Mbam scans didn't pick it up until yesterday. Could anyone hazard a guess how this thing could have suddenly got into 'Drop My Rights' please ? Registry Keys Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ie dropmyrights (Spyware.Banker) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Program Files\IE DropMyRights\Uninstall.exe (Spyware.Banker) -> Quarantined and deleted successfully.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.