exile360

I've passed this info and link on to our Quality Assurance team for further testing and investigation. If they need any additional info or assistance from you, they'll reply to this thread. Thanks again for all your help, it's very much appreciated .

It's used frequently by our own Support team. It's of little use to anyone who doesn't know how to read the logs and interpret the information it provides. We've done pretty well with what we have so far. We have unique offerings like Chameleon that often eliminate the kinds of problems that result in people resorting to bootable tools. I see little use of 'portable' tools at all because I know from experience that if a program is blocked from running on the system if installed locally, it's also going to be blocked from running from portable media such as a flash drive or CD. We've been diversifying our offerings quite a bit, but we also don't want to stretch ourselves too thin. The entire reason we exist and have been so successful is because these larger vendors with all their great tools have failed to provide adequate protection from all of the nasty 0-day threats in the wild. By keeping our focus on what we do best while still expanding (though gradually) only when we are confident that we can continue to do our primary job of detecting the latest malware, we're able to stay on top of the bad guys instead of having tons of different tools and software that amount to little because they can't eliminate the latest infections. I don't see the decisions we've made up to this point as having hurt us. In fact, if anything, it's helped us. Our company and software has gained steadily in popularity, with more and more users turning up every day and we have a responsibility to them to continue to offer the best protection possible, so that is our primary area of focus.

There are already tons of those, so I don't think we will be using resources to develop one unless there's a need for it. DDS, OTL and other similar tools are quite capable and widely used at the moment and for troubleshooting our own software, we have mbam-check.exe.

Run Windows Repair (All In One): Note: Save any work prior to performing these steps as your system is going to be automatically restarted at the end Download Windows Repair (All In One) from here and install it.Once complete, run the program and click on the Step 4 tab.Click on the Create button under System Restore to allow it to create a restore pointOnce that's complete, click on Backup under Registry BackupOnce that is done, click on the Start Repairs tab and click on StartClick the Unselect All button on the bottom leftCheck the box next to Repair Windows Sidebar/Gadgets and check the box next to Restart/Shutdown System When Finished and click the radio button next to Restart SystemClick StartOnce the tool completes and restarts your system, verify that your Sidebar Gadgets are now functionalLet me know if that corrects the issue or not. Thanks

By the way, if you right-click on one of the detections, you may select Check all items or Uncheck all items. There are also several other options available:

Greetings and welcome I agree, this would definitely be useful and is already in the very long list of tweaks to our user interface that we plan to make once we give Malwarebytes Anti-Malware the massive facelift we have planned at some point down the road, so keep an eye on out. You can find out about our latest products here on our forums, via Facebook and Twitter (links to those in my signature below), our official blog as well as our official newsletter if you choose to sign up for it. Thanks

I moved this post here since it was completely unrelated to the false positive topic you originally posted it in. We welcome your analysis, opinions and discussions, but the false positive area is specifically for assisting users with false positives. These items would technically be possibly false negatives (the opposite of false positives).

You're welcome, I'm glad I could help and I'm glad that at least they're working, even if they are displaying funny . We plan some pretty major changes in the future for Malwarebytes Anti-Malware, which will hopefully include better international language and display support, so hopefully eventually issues like this will be a thing of the past, but for now we'll have to wait and see.

We recently upgraded the forum software, so I'm not sure what the current filesize limitation is, however, if it is too large, you can upload it here and provide us with the download link. Thanks again for working with us to resolve this.

Excellent, thanks a lot. You wouldn't happen to have the installer for that version of the software, would you? It likely shipped with your PC. I ask because I can only find their latest version on their downloads page.

I believe I may have figured out what's causing it. From your log: The time format settings are not the defaults. In addition to that, your code page settings are set to Multilingual (Latin I): This also may be the culprit. Your Terminal Services service is disabled. It should be set to Manual by default.:

Hehe, yeah, back when I was a tech, I actually had a batch file I'd created which deleted all of my existing copies of my tools then used WGET to grab fresh copies of them all and place them in their appropriate folders on my techbench PC. I updated it daily and just copied it over to my flash drive after each daily update and also updated my ISO image of the folder structure (using UltraISO) for making my CD(s)/DVD(s) out of it (which also included some bootable utilities for malware removal and diagnostics, my techie tools were pretty hardcore ). I also used the ISO for my U3 flash drive (it replaced the U3 software with a CD image which was bootable and of my own design as described above). I used to be obsessed with creating and maintaining the 'ultimate toolkit', although the tricky part was finding tools which were not prohibited for commercial use, as most products had EULAs restricting that (thankfully many of the community developed tools had no such restrictions, aside from ComboFix of course).

Nice detective work ! Would you mind zipping and attaching those files so that we might attempt to replicate this and research the issue further?

There's definitely something odd then. I'm glad it's working, but the display issue is not normal. If you wouldn't mind, please do the following: Create an mbam-check log: Download mbam-check.exe from here and save it to your desktopDouble-click on mbam-check.exe to run it, it should then open a log filePlease copy and paste the entire contents of the log into your next post

I used to visit Disneyland all the time back when I lived in Cali. I've not been since they added the Cars themed areas though.

No, I don't believe that's normal, although I suppose it's possible since, after the first time they've each been executed, the product will no longer need the "Starting on" value (it's only relevant if the "Starting on" value is at a point in the future). Are your scheduled updates and scans working?

Links to articles about using System File Checker (SFC) and many other helpful resources can be found here. Ron's compiled quite a handy list of tools and resources there.

Yeah, it doesn't expressly say XP 64 bit is or isn't supported (though it does list newer versions of Windows separately saying 32 bit and 64 bit). The Malicious Website Blocking component is the main piece that doesn't work on that OS.

Since Malwarebytes Anti-Rootkit is intended as a one-off utility to use when dealing with an infected system (much like Malwarebytes Chameleon), I don't see much point in posting about it every time a new version comes out; especially while it's still in beta.

The product is only partially functional on Windows XP x64. It is not officially supported as its architecture is quite different from newer 64 bit Windows versions and Microsoft's support of it is extremely limited.

Did you check permissions on C:\ProgramData? That's where the database itself is stored. If for some reason permissions are odd there, that might be the cause as well. Hopefully this will be something we'll be able to resolve in a later release. It's hard to say at this point though as I'm as confused as you as to why it's happening. I can't see anything about your configuration that would be causing this. At least nothing obvious that stands out.

If you want to further ensure that you're safe from outdated/unpatched software vulnerabilities (including those for which there currently exist not patches from Adobe), you might consider checking out our latest product, Malwarebytes Anti-Exploit. It's currently in beta and you can use it for free for the time being. More info about this new weapon against malware can be found here and a quick writeup about it on CNET here. If you're a Malwarebytes Anti-Malware Pro user, it runs just fine alongside Malwarebytes Anti-Malware and should also work seamlessly with your antivirus and other security applications, though I recommend reading this post to verify that you're not running any applications known to have compatibility problems with it.

I fully agree with David on this. I always disable it, however I check at least once a week for updates for all of my Adobe products as well as Windows Update and other critical internet facing applications. I remove it via Autoruns and it's always proven successful. I've not tried using CCleaner to disable it, but I suspect it fails because I believe Adobe ARM uses a service in addition to a RUN key, which is why it comes back if you just disable the RUN entry with CCleaner (CCleaner does not handle services or drivers).

I'm guessing WSA has some sort of sandboxing function in it, correct? I bet that's the cause of this.

That is alright. I understood you perfectly. Please let us know if there is anything else we can help you with. Thanks