[mbam-clean.exe leaves zillions of files!]

Please see @Firefox's reply in your other topic:

https://forums.malwarebytes.org/index.php?/topic/160490-missing-files/#entry904384

 

The expert help in the Malware Removal section is free.

It will only cost you a bit of your time.

They will have additional tools to use to check and clean the system and to try to repair any damage.

They can also assist you with getting MBAM up and running.

>>As you have already run FRST, you just need to start a new thread in the correct area of the forum, attaching your logs to that new post.

 

It's entirely up to you, but that is what is recommended as a first step, both here and in your other thread.

 

Thanks for your understanding.

[Malwarebytes Anti Malware and Anti-Exploit]

Hello and welcome back:
 
You wrote:
 

Leaving me wondering what combo is best then?

The general recommendation for home computer security for many years has been a "layered" approach.
For the security software part of the strategy, that entails a minimum of one robust, real-time anti-virus (AV) and one robust, real-time anti-malware (AM), such as MBAM.
Additional layers of security can be added, e.g. other specialized tools, such as Malwarebytes Anti-Exploit (MBAE).
In simple terms, MBAM blocks the "what" of malware, and MBAE blocks the "how".
You ought to be able to run an AV + MBAM + MBAE.
 
There is no "best" combination.
If there were, there would be only 1 AV vendor, 1 AM vendor, etc.
The choice of security applications depends on many different user and system variables.
 
Here are a few links to resources about this, and you will find vigorous discussions at other fora, such as Wilders, bleepingcomputer, etc:
The complexity of finding, preventing, and cleanup from malware
So how did I get infected in the first place?
How did I get infected?
Answers to common security questions - Best Practices
List of well known antivirus products
Six tips to help you stay safer online

 

Thanks,

[Trying to install and cant get support]

Hello and :

 

The Help Desk can be very busy.  So, there may be a bit of a wait to get a reply.

 

But let's start here:

• Please carefully follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
• If that does not correct the issue, then please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
• NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

[Paid for Malwarebytes a year ago, but it says my trial ends in 4 days.]

Hi:
 
Well, if cleverbridge has no record of your purchase, then most likely either you are providing an email address that is NOT the one used for the purchase, or else you didn't purchase from the Malwarebytes online store.

You might want to go back through your email messages from last year to find the confirmation email sent by cleverbridge at the time of purchase.
Perhaps you purchased from Newegg, Amazon or somewhere else?
If that's the case, then you'll need to contact that seller directly.
 
There are two more options to try.

1. Contact Malwarebytes Customer Service by email >>here<<. They do not normally have access to license info.  But perhaps they can try to help.

2. Try running this tool and see if it can find your license key from your previous/current version of MBAM 1.x PRO.

• However, this will work ONLY if you previously had a valid, licensed version of MBAM Pro version 1.x installed and ACTIVATED on this same machine previously, and if the Windows OS has not been reinstalled on this machine.
• It will save a text file copy of your license ID/key on your desktop (this is a program written by AdvancedSetup, our forum Admin).
• Run this: GetMalwarebytesRegistration
• It is a good idea to then copy this file with the license info from your desktop to a more appropriate location, such as your Documents folder.

If you cannot locate your purchase information, and if cleverbridge or other vendor cannot find your purchase information, and if the registration lookup tool cannot find your information on the computer, then there's really nothing else I can suggest.  Sorry.

 

FWIW, when the MBAM Trial ends, the program will automatically revert to MBAM Free.  You can always upgrade to Premium any time, by activating the program with a valid, purchased license ID and key.

 

Thank you,

[Memory leak like PC issue(Probably not malware)]

Well, your previous topic in the malware removal section was locked because of lack of response from you, after your helper asked you to run a malware removal tool.

So, I don't know how you can be so sure of your suggestion that your problems are not malware related.

Moreover, abandoning topics is considered a violation of forum etiquette, and it wastes precious forum resources (most of the malware helpers and other forum helpers are volunteers).

 

You are welcome to stay here, of course.

EDIT: But without the requested diagnostic logs, it's not likely that anyone can help you very much.

Please wait for someone to review your logs.

 

Thanks,

[Memory leak like PC issue(Probably not malware)]

Hi:
 
Is this the same computer on which you were recently working with MrC here: https://forums.malwarebytes.org/index.php?/topic/158121-weird-pc-actions/?
 
If so, your best bet might be to send a PM to him or to the forum mod team, asking that it be reopened.

Otherwise, we will need to see some basic system logs to have a better idea.
Please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

• NOTE: As you have already run FRST on this computer before, please be sure to place a check-mark in the "Addition.txt" option before you run it.
   

Thanks,

[right context scan by Malware bytes does not work on exefile]

Hi, The problem solved with your first solution itself. now i can scan file system object scan with exe file in the right context menu.Thanks.

Great!

I'm glad that resolved your issue.

 

But the exe file is scanned as one file by Malware bytes. Other scan shows more file, where as MBM show it as only one file.Is it correct.? Of course, the exe file is one, containing may be more no of files

If I understand you correctly, you are describing the fact that MBAM reports that a file scan of the particular file in question says that it is one file, but some other scanner reports the SAME file as being more than one?

Also, what is the "other scan" to which you refer?

 

In order to better assist you, for starters, we would need to see at least the MBAM scan log showing the scan of the file in question.

To do that, please follow the steps below to attach the relevant MBAM SCAN log to your next reply here.

 

Thanks,

-----------------------

How to get scan logs:

(Export log to save as a txt file for posting in the forum when requested)

• Open MBAM.
• Click on the HISTORY tab > APPLICATION LOGS.
• Double-click on the SCAN LOG which shows the date and time of the scan just performed (or the one you are asked to post).
• Click EXPORT.
• Click TEXT FILE (*.txt)
• In the "Save File" dialog box which appears, click on DESKTOP.
• In the FILE NAME box, type a name for your scan log.
• A message box named "File Saved" should appear, stating that "Your file has been successfully exported".
• Click OK.
• Attach the saved log to your next reply.

[Gone from toolbar]

Hello and :
 
I'm not sure what you mean -- perhaps you are referring to the Windows TASK BAR?

MBAM 2 PREMIUM minimizes to the Windows SYSTEM TRAY (the lower right side of the display, near the clock).
It does not minimize to the TASK BAR (lower left corner of the display).
 
So, what you're seeing could be normal.
But, as we don't know what version of MBAM you are running, or even what version of Windows you have, it's a bit hard to say.

You might wish to start by cleanly reinstalling MBAM. The steps to do so are explained here: MBAM Clean Removal Process 2x

 

Otherwise, we would be better able to help you if we knew a bit more about your system.
Please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)

 

Thanks,

[MWB Gui keeps popping up - every time it checks for a DB update - very annoying]

Hi:

 

When you say the "GUI keeps popping up", are you referring to popup notifications from the system tray (lower right of the display, near the clock)?

In any event, it's rather hard to say, without a specific error message or screen shot or knowing your settings, as there are quite a few different notifications.

 
Can you perhaps post a screenshot of the main program GUI/dashboard?
Does it look something like the one I've attached here?
 
Assuming that the problem is with outdated databases, a couple of easy things to check:
>>First, please be sure your system date/time are correct.
>>Also, please check to be sure there are no "Detected Threats" that need to be dealt with first, as this can prevent the program from updating: Click the "Scan" button at the top of the dashboard and verify that there are no detected threats (especially PUPs or PUMs) awaiting your actions.

>>Then, please be sure that your AV and firewall both give MBAM full permissions. It's possible that your AV or firewall might be treating the new build as a new program and may be blocking it -- the files that need to be excluded can be found HERE (just the one reply, not the entire thread). Please post back if you need help with that.


If those suggestions don't resolve your issue:

• Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
• If that does not correct the issue, then please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
• NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

[right context scan by Malware bytes does not work on exefile]

Hello:

 

Let's start here:

• Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
• If that does not correct the issue, then please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
• NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

[Paid for Malwarebytes a year ago, but it says my trial ends in 4 days.]

Well, the first step is to locate the email with the license ID/key.

 

If you don't have the confirmation email or a printout of that email, you'll need to contact cleverbridge to get the license info.

This assumes that your original purchase was from the Malwarebytes online store.

If it was from another online vendor (e.g. Newegg), you'll need to contact that vendor to get the info.

If you purchased MBAM in a boxed CD, the license ID and key will be in the box, either on a card or on the CD sleeve.

 

Once you locate the license ID/key, you just need to "Activate" the program with that information.

There's no need to reinstall from the Trial version.

 

Thanks again,

[Great Product but crap support]

Hello and :

 

I am just a home user and forum volunteer, but I have contacted a member of the forum Admin team about your concerns.

 

Thanks for your interest and patience,

 

P.S. The forum mod team might relocate this thread to the Business Support area. No worries, though.

[fff5ee.com keeps popping up please help need an expert!]

You're most welcome.

 

Take care,

[How to use the Chameleon function in MBAM 2.03.1025 ?]

Hi:

 

There are many helpful articles explaining the use of MBAM Chameleon here: https://helpdesk.malwarebytes.org/hc/en-us/sections/200397193-General-Questions

 

However, we cannot work on malware diagnosis and removal in this area of the forum.

So, for expert assistance, I suggest that you might want to please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the preliminary steps to expedite the process.
A malware analyst will guide you through the cleanup process.

Thanks,

[@ David H. Lipman]

Hi, MAM:

 

As you know, this is NOT the correct (or safe) forum area for possible malware submissions.

 

Please refer to the posting guidelines in the Malware Research Center.

 

Thanks,

[fff5ee.com keeps popping up please help need an expert!]

Hello and :

 

We can't work on malware diagnostics and removal in this sub-section of the forum.

So, for expert assistance, I suggest that you please follow the advice in this pinned topic: Available Assistance For Possibly Infected Computers.
It explains the options for free, expert help >>AND<< the preliminary steps to expedite the process.
A malware analyst will guide you through the cleanup process.

Thanks,

[Paid for Malwarebytes a year ago, but it says my trial ends in 4 days.]

Hi:

 

If you paid for a valid, legal, 1-PC, lifetime, consumer license a year ago, then you don't need to pay again.

It sounds as if perhaps EITHER you never activated the program with the license ID/key, OR perhaps you might have recently cleanly uninstalled and reinstalled or updated the program, but did not activate again after doing so?

 

When you open the main program GUI/dashboard, does it say "Free" or "Trial" or "Premium" in the ribbon at the very top???

 

Options:

1. The license info will be in a confirmation email sent at the time of purchase last year. Use that info to "Activate" the program, as explained here: https://helpdesk.malwarebytes.org/hc/en-us/articles/201861536-How-do-I-activate-Malwarebytes-Anti-Malware-
2. If you did not save that email and did not keep a copy, then you can contact the e-commerce partner, cleverbridge. They will look up the license ID/key and send them to you.  Their contact information is here: https://helpdesk.malwarebytes.org/hc/en-us/articles/201956473-How-do-I-obtain-my-license-key-or-confirmation-email- or http://www.cleverbridge.com/342/?scope=cuseco
3. If neither of those options works, please let us know, as there are a couple of other ways to get the license info.

If all else fails, you may wish to start with a clean reinstall, as explained here: MBAM Clean Removal Process 2x

 

Please let us know how it goes,

[Cryptowall 2 -- Does MBAM Premium block stop this malware in real time from encrypting files?]

Now all you guys need is a comparison chart showing differences between;

 

MBAM Premium  and MBAM anti-exploit Premium

 

 

They are different, complementary and mutually compatible applications.

Simply put, MBAM blocks the WHAT of malware, while MBAE blocks the HOW.

So, it would be good to have both of them.

 

Cheers,

[Malwarebytes Anti-Malware and Avira]

Hello:
 
This is a common occurrence with many of the AV vendors.
It is based more on marketing than anything else -- those vendors want you to use *their* software, not someone else's software.
 
The workaround is to temporarily uninstall MBAM before installing the AV program.
Then, once the AV is installed, updated, activated and configured, temporarily pause its protection to install MBAM.
Once MBAM is installed, you can set mutual exclusions between MBAM and the AV.
The screen shot below shows how to add the AV folder to MBAM exclusions.
The instructions below list the MBAM files to add to the AV exclusions.
 
Thanks,
------------------

Please exclude the following files from your Antivirus Software for your version of Windows:


For 32 bit versions of Windows XP, Windows Vista, Windows 7 & Windows 8:

• C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamdor.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbampt.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
• C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
   

For 64 bit versions of Windows Vista or Windows 7 & 8:

• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamdor.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbampt.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
• C:\Program Files (x86)\Malwarebytes Anti-Malware \mbamscheduler.exe

Note: If you are using a software firewall besides the built in Windows Firewall, you'll need to exclude MBAM.EXE and MBAMSERVICE.EXE from it as well.

Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site:

data-cdn.mbamupdates.com

[How to copy the update files to a PC with no internet connection]

Hello:

 

The method for offline updates in version 1.x was not secure, so it was not carried over to version 2.x

 

There is a new mbam-rules link: =>HERE<=

The link will download 1 zip file, where the name of the file is mbam-rules-YYYY-MM-DD.zip

Something to note:
• There are 2 files now in the zip folder:
o Mbam-rules.exe
o Mbam2-rules.exe
•They are specific to the version, so mbam-rules is for any MBAM 1.x installation, whereas mbam2-rules is for any MBAM 2.x installation.
•In the future it will have a README included with instructions for users, but for now it is only the executables.

 

>>However, it will never be the "latest" updates, as the regular database is updated 10 or more times per day.

>>With the advent of Chameleon and other tools, this method of getting MBAM running on heavily infected machines is less helpful.

 

Thanks,

[there is no option on the desktop?]

I'm pretty sure that is "the" answer.

[there is no option on the desktop?]

My understanding is that is disabled by default because, when it is enabled, an "on-top" program update will generally require a system restart (reboot).

As many basic users do not use this context menu scanning feature, it is disabled by default in version 2.

That way, such users would be able to perform most minor program updates in place, without restarting the computer.

 

At least that's how it was explained to me some time ago.

 

Staff will correct me if I am wrong.

 

Thanks,

[there is no option on the desktop?]

Hi:

 

Context menu scanning is disabled by default in version 2.x.

 

Dashboard > Settings > Explorer Context Menu Entry > change to "Yes".

You might want to reboot after changing the setting, for good measure.

 

Thanks,

[Not Sure Desperatly need help I'm illerate on fix problems PC]

Hello and welcome:

 

Let's start here, please. It's not hard, but it might help to print out the instructions at the links below before you start, so that you can refer to them:

• Please follow the steps in this pinned topic to uninstall your current version of MBAM and reinstall the latest build - MBAM Clean Removal Process 2x
• If that does not correct the issue, then please read the following and post back attached to your next reply the 3 requested logs - Diagnostic Logs (the 3 logs are: FRST.txt, Addition.txt and CheckResults.txt)
• NOTE: There is an FAQ section with valuable information located here - Common Questions, Issues, and their Solutions

Please let us know how it goes.

Thanks,

 

P.S. Also, the mod team may move this post to a more suitable location, e.g. MBAM Help section. No worries, though.

[Automated Scheduling 2.0.3.1025]

Yes, if you do not see the Trial version offered, then it means that it had already been used on that particular computer.
(The Trial version is available only ONE time on a particular computer.)
 
Yes, you now have the Free version (please refer to the screen cap below).
Yes, the Automated Scheduling features are only available in the Trial and Premium versions (see screen cap below).

If you were to activate MBAM to the paid, Premium version with a valid, paid license ID/key, those features would be enabled.

They are disabled now because you have the Free, manual, on-demand version that does not offer those advanced features.

ALSO, for additional information:
There is an FAQ Section here: Common Questions, Issues, and their Solutions
And here are links to the MBAM 2.0 User Guide: Online and PDF
And there are many useful KB topics and videos at the helpdesk support page

 

Thanks,