Richard_P

Are the updates of malware definitions integrated directly into the program or are they stored elsewhere? I am trying to help a friend with his infected computer which is not on the Internet. Ultimately I need to download the program, update it, and then somehow get it on his system via USB to try and eliminate the virus. Thanks.

Thanks. That explains it.

Ok, just put the reply on my original post. Thanks.

I had one more issue I wanted to bring up: I orignally ran an MBAM "Perform full scan" and MBAM detected the trace on the two files (WORK.DAT & wupd) in my system. I did not clean the files, because I was wondering if MBAM was detecting a false positive which I addressed earlier. You educated me very effectively and so I went back to detect the trace again so as to have MBAM clean the mess. In order to be as efficient as possible I right-clicked on each file and chose to scan the files individually. The single file scan did not detect the trace. Only when I ran the full scan, which takes over an hour to perform, did it find the trace. I was then able to clean it. Why didn't MBAM detect the trace in the individual file scan?

I ran an MBAM "Perform full scan" and MBAM detected a trace on two files in my system. I did not clean the files, because I was wondering if MBAM was detecting a false positive which I addressed in the False Positives forum. Your team educated me very effectively and so I went back to detect the trace again so as to have MBAM clean the mess. In order to be as efficient as possible I right-clicked on each file and chose to scan the files individually. The single file scan did not detect the trace. Only when I ran the full scan, which takes over an hour to perform, did it find the trace. I was then able to clean it. Why didn't MBAM detect the trace in the individual file scan? Thanks, -Richard

I really appreciate the help. Thanks again. -Richard.

OK, I understand now what you mean by cleaning them. I guess my real question is, are these files (WORK.DAT & wupd.dat) necessary system files that are "infected" and need to be replaced with good working files, or are they non-system extraneous files that were put there by the malware? Thanks again for your continued correspondence and education, -Richard

OK, but doesn't MBAM simply quarantine them instead of cleaning the malware from them, or am I getting this wrong? The two files I had MBAM "clean" are in the quarantine area now. Thanks for your help, -Richard

Does this mean that I need to clean these two files in some way? Replace them maybe with new ones or should they be ok now that the other two files are gone? Thanks for your help. -Richard

I scanned my laptop today and it found 4 problems. Two were obvious problems the other two I am not sure are real problems. I scanned the first file using the Jotti's Website and of the twenty scanners, only one "found" anything for WORK.DAT. The other file is wupd.dat and is a hidden, zero-byte file. I have attached the files and the log after running MBAM using the /developer switch. Please find the log file and both files attached. Thanks for your help, -Richard mbam_log_2010_08_26__19_12_09_.txt WORK.zip

Excellent. Thanks.

I ran a Malware scan today and MBAM appears to have identified a false positive. I have attached the log file after running mbam.exe /developer which shows the file. I am also including a copy of the file as outlined in your instructions for this forum. Thanks for you help in determining if this is indeed a false positive. -Richard mbam_log_2010_08_26__12_37_43_.txt DbgHelp_RemoveThisPartIfOnWin98.zip