Tarnak

You're welcome.

Here Look towards the bottom of the OP for the attached AVZHelp.zip ( 63.49k )

http://www.dnsstuff.com/ http://whois.domaintools.com/ I use either of these, then delete the cookies afterwards.

After a reboot, ran the saved setup file exe, and this time the program install was successful. Go figure! See screenshot.

I did notice the first time I tried to update from the Secuitywonks site, but it just quit without obvious reason. I then tried the alternate site. Maybe that has had something to with problem I have now. See screenshots Also, I just tried to run MBAM as admin and got what is shown in the second screenshot.

Have never installed Kaspersky AV, any other ideas please? (I use F-PROT in this snaphot, Rising in another and AVG 7.5 in another.)

Yes.....XP Pro SP2.

Trying to update from 1.29 to 1.30 via the built-in updater, but got the following. Never struck this before. I am using the free version. See screenshot.

I have tried this - "A new rootkit detector - currently in beta." , on XP Pro ......."RootRepeal - Rootkit Detector" - http://rootrepeal.googlepages.com/ Seems stable enough, on my system at least.

No further problem.It appears that this has now been fixed. Thank you. Malwarebytes' Anti-Malware 1.28 Database version: 1143 Windows 5.1.2600 Service Pack 2 13/09/2008 2:25:28 PM mbam-log-2008-09-13 (14-25-28).txt Scan type: Quick Scan Objects scanned: 40623 Time elapsed: 2 minute(s), 41 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Latest scan with 1142 definitions shows all clear. Final proof for me, will be after I update the the definitions to CounterSpy, which should be released later today.....Saturday morning my time. Off to bed for me now! ....it is late Friday night. Malwarebytes' Anti-Malware 1.28 Database version: 1142 Windows 5.1.2600 Service Pack 2 12/09/2008 11:15:36 PM mbam-log-2008-09-12 (23-15-36).txt Scan type: Quick Scan Objects scanned: 40689 Time elapsed: 3 minute(s), 40 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Here we go..... Malwarebytes' Anti-Malware 1.28 Database version: 1141 Windows 5.1.2600 Service Pack 2 12/09/2008 12:39:46 PM mbam-log-2008-09-12 (12-39-38).txt Scan type: Quick Scan Objects scanned: 40472 Time elapsed: 2 minute(s), 27 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\<myname>\Local Settings\Temporary Internet Files\EN CounterSpyConsumer UpGrade-Signed.exe (Trojan.Agent) -> No action taken. [3857535134305383807566791534727079851301362761378068867870798584016679690152708 5857479728461 41667984014970837468614580686677015270858574797284615370788180836683900142798570 8379708501397 4777084611115708970]

Latest update, nothing changed: Still the false positive! Can't but help think it has something to the recent glitch mentioned here - As you can see, I keep getting the WinPatrol popup, which I answer no to! This only started happening around the time of this particular glitch referred in the quote above. Something has changed in the registry. Can you please advise where to check in the registry?.......so I can make the necessary change to it.

See attached folder as requested> Located C:\Documents and Settings\username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware

Since I last posted I have updated and rerun a scan and got the same result. So I decided to ignore instead of quarantining. Did another scan, this time it was clean. I then ran another scan after deleting the ignore list, and the FP is back. However,as you can see after clicking on > jump to location the MBAM program is not responding. This also happened yesterday, but I thought it was one off. See attached screenshot. P.S. This has got me stumped, but I could go back to ignoring the FP, as it only has to do with Sunbelt CounterSpy definitions updates.

I restored from quarantine, but can not find a file.

Just started getting this recently with my Sunbelt CounterSpy program. Surely, this is a false positive. Malwarebytes' Anti-Malware 1.27 Database version: 1131 Windows 5.1.2600 Service Pack 2 9/09/2008 1:44:24 PM mbam-log-2008-09-09 (13-44-24).txt Scan type: Quick Scan Objects scanned: 40621 Time elapsed: 2 minute(s), 47 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Documents and Settings\<username>\Local Settings\Temporary Internet Files\EN CounterSpyConsumer UpGrade-Signed.exe (Trojan.Agent) -> Quarantined and deleted successfully.

I got a request to reboot with the install of 1.23. Also, I got a popup to run once for this - "C:\WINDOWS\is-UG6KE.exe" /REG Is this safe to run? Just wondering.

OPERA after toying with it through the various versions for many years......I finally got to like it! Better late than never...I say. I never tried FF, because I don't feel the need.

Just curious, but I noticed it appears MBAMCatchme has been replaced by MBAMSwissArmy! Is it a change of name only, or something else?

I got the same detection. All fixed now. mbam-log-3-27-2008 (19-22-17).txt Malwarebytes' Anti-Malware 1.09 Database version: 552 Scan type: Quick Scan Objects scanned: 30494 Time elapsed: 2 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 1 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{c4ee31f3-4768-11d2-be5c-00a0c9a83da1} (Rogue.WinFixer) -> No action taken. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) mbam-log-3-28-2008 (13-12-25).txt Malwarebytes' Anti-Malware 1.09 Database version: 558 Scan type: Quick Scan Objects scanned: 30440 Time elapsed: 2 minute(s), 48 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)