[database updates]

1 hour ago, djacobson said:

MBAMToast, that sounds like a piece from a possible partner build of Anti-Malware by ChicaLogic or the consumer version 2.x. May I have you run an FRST to be sure the correct versions are isntalled and running?

Frst Log

 

Attached you will find the two txts (I needed 64bit).

Last night, I shut down my computers.  Before shutting down, I always do a disk clean up.  This morning I turned on the computer...no change in the update situation.  However, when I came home from the University (it's there program), I found that the program had updated to the latest version...today's.  Now, on my console (as well as everyone at the University) we do not have the tab for settings...it is apparently set-up by the University.  Perhaps they have it that updates are to happen at certain times of the day... I don't know and when I spoke with IT (usually work-study students), they didn't know.

 

Please follow the steps below to run frst.

1.) Download frst and frst64 from the link below and save it to your desktop:

FRST 32-bit version: https://downloads.malwarebytes.com/file/FRST
FRST 64-bit version: https://downloads.malwarebytes.com/file/FRST64

Note: You need to download the version compatible with your system. If you are not sure which version applies to your system, download both of them and try to run them. Only one of them will run on your computer; that will be the right version. Some traditional Anti-Viruses may false positive the download or running frst, I can assure you it is safe. If this happens, please temporarily disable the AV.

2.) Double-click the purple frst or frst64 icon to run the program. Click Yes when the disclaimer appears.
3.) Click the Scan button
4.) When the scan has finished, it will make 2 log files in the same directory the tool is located, frst.txt and Addition.txt.

Please attach frst.txt and Addition.txt in your reply.

 

 

FRST.txt

Addition.txt

[database updates]

By the way...I do not get any message that my MBAMTOAST.DLL is not working.  Also, my computer is 64bit.

[database updates]

I have Malwarebytes Enterprise on two computers (desktop with Windows 10 and laptop with Windows 7).  On the desktop I have no problem with updates to the program.  On the notebook, every time I click to update, it tells me the program has the latest update.  Today, I updated the desktop...no problem.  It went to version 2017.11,05.06...whereas the notebook is at 2017.11.05.01.  I compared, via the C:\ drive the 2 programs and have noticed that the laptop is missing the mbamtoast.dll.  Could this be the problem?  It's the only difference between the 2 units.   Is it something I can download (from where?) and put in?  Where exactly would I put it?  Would this solve the problem?

[pop-up]

Pbust...that's basically it.  I just checked the settings and it has a check mark in "SHOW SYSTEM TRAY NOTIFICATION TOOLTIPS" on the one that makes the beep with the pop-up.  The one that doesn't does not have a check mark.  Thanks for the clarification.  It doesn't bother me that it shows for the entire 3 seconds...in fact, it actually lets me know that it is working.

[pop-up]

I have anti-exploit beta on two computers.  Both have passed the test that the program is working.  However, on one computer a pop-up appears when I open a new file, open (for 1st time) my mail or go to a new site telling me that Anti-Exploit is working;  on the other computer, no pop-up (although, as I said, according to the test, it is working).  Which is correct?  If pop-up is, how to get it?  If not, how to remove it?

 

Thanks.

[ransomware]

One last question:  does this version of Malwarebytes have anti-exploit built in to it?

[ransomware]

Gonzo...thanks for your reply.  According to my computer, the version I have is:  1.80.2.1012 and it was built on February 9, 2016.

[ransomware]

I checked the version of Malwarebytes Enterprise that the University uses and it is the MEE version...which still updates the database.  What is the newer version, Gonzo, that you mentioned in your post that replaced it?

[How do we know]

Actually there is nothing now being detected.  At first Malwarebytes stated that "it is possible that there is ransomware..." and left it to me to make the decision as to keep or delete the file.  But as I have updated the database over the past few days, nothing comes up to indicate a problem.  I believe I got it from either https://www.apkmirror.com/apk/oasis-feng/greenify/greenify-3-7-1-release/greenify-3-7-1-android-apk-download/ or http://xdroidzone.blogspot.com/2014/04/greenify-v23-beta-3-donation-apk-mega.html , although to be honest, I don't remember.   But the question remains:  How would we know if there were a "false positive?"

[How do we know]

How do you know if Malwarebytes Mobile is giving a true or false positive for ransomware? Specifically I am looking at the donation app of Greenify 3.7.1. I do not remember if I downloaded it from Google play or another site. It was the app file, though.

[ransomware]

Well, your analogy works. I will have to check which version of enterprise, but I think they began using it about a year ago. 

The app I installed was Greenify 3.7.1. I do not remember if I downloaded from Google play or another site. It was the donation file. I do know that my McAfee Mobile Premium scan, once updated to the most recent database, showed that it was clean.

[ransomware]

Malwarebytes Enterprise is a version for the corporate world...or in my case, a University. 

Although I understand what you say, one question does remain:  why doesn't it say that there is ransomware and not possibly be ransomware? 

As to my particular situation, I do not leave data or wi-fi on all the time...they are rarely turned on and, more important, I do not use my credit cards or do any banking via the phone...ever.

[ransomware]

The other day I downloaded an app to my computer.  Ran it through my virus scan and then through Malwarebytes Enterprise.  Everything said it was clean.  So, I BT it to my cell phone (LG Fiesta), installed it, and my Malwarebytes Mobile stated that the file "might have ransomware."  My question is (kind of obvious): how could it be clean in one form of Malwarebytes (desktop...Enterprise) and possibly not in the other (mobile...premium)?  Both versions are, and were, up to date.

[Re-post of MBAE test]

Totally agree and that is why I didn't click on it.  Again, thank you so much for the clarification and the test worked beautifully.

[Re-post of MBAE test]

Thanks for the quick response, and yes, it worked.  I mistakenly believed that the zip file was for the techies and that there was another, the .exe, for the regular user.

[Re-post of MBAE test]

Could you please re state (re-post) the link for the test to verify that MBAE is functioning properly?  When I click on the one that claims to have a link, there isn't one present.  There isn't an attachment as stated.

 

Thanks