Tech0utsider

I can repeatedly update MBAM. However, I will get an message like ...

I found that MBAM would not properly on a restricted user account; it says "updated", but the database version and virus sigs stay the same. Run it with admin priv.

McAfee is all marketing and sponsorships. Failed or came in last in just about any AV test that exists.

I believe that is a hardware firewall test ^.-

If your an avid gamer then you need Norton AntiVirus Gaming Edition 2009.

Just another useless program. That's all.

Well first he will have to download HiJack This. Download it on an alt computer and transfer it via flash drive. I had a tricky virus recently that spontaneously shutdown the browser when searching for MBAM, Combofix, Norton, Symantec, Kaspersky, NOD32 .. the list goes on .. and HiJack This. And remember to scan the flash drive when this is sorted out.

Like ComboFix, MBAM uses lots of obsecure methods to remove malware. ComboFix implements NirCmd, which is considered a potentially unwanted program.

And why are we all using Firefox? Security by Obscurity! Seems like every Firefox fanboy is proud that it is occupying ~25% of the browser market and rapidly increasing; however the irony is that with more popularity, Firefox becomes a bigger target! Does that mean we should switch to a niche browser?

Just what passwords does it steal?

What issued the pop-up?

Norton? What version? What year? Are you sure this threat was actually on your computer and not being blocked at the point of entry by Intrusion Prevention? Check your security logs for clarification.

Just another useless program? A variant of it had the intentional FP database and MBAM happens to pick this particular one up?

I installed Perfect Defender because someone claimed that their computer was hijacked and when they tried to access the internet they would get redirected to Perfect Defender's site. Perfect Defender seems to be a legit program, albeit poor in malware detection; it didn't detect EICAR =\. It even has a firewall, which actually worked =\. There are thousands of hits for how to remove the program, and they all claim the symptoms to be similar to that of rouge adware: pop-ups, advertisments, etc etc. I have not experienced any one of the symptoms with Perfect Defender. I even left my VPC which I installed it on idle, to see what would happen; if it would download anything, etc. Nothing. I restarted. Nothing... So, can I ask the rationale behind adding Perfect Defender to Malwarebytes' list of rouge security apps?

Why? I downloaded and install SpyProtecter and using MBAM in quick scan unearthed 3 infected items; with Full scan it unearthed another 20 or so infected items.

Boot of your OS disc and "recover Windows by using the recovery console" Or something similarly labeled; I cannot remember the exact name even though I used it successfully today! Make sure to record the path of the infected files. The parameters are: del [path] Example: C:\system32\del C:\55d.exe

Good point. Big companies often get sued for blocking adware/spyware. Kaspersky blocked Zango from installing, and they faced a showdown in court. Small companies, on the other hand, like this one, go below the radar. I found Adware.Starware on Symantec's site: http://www.symantec.com/security_response/...-050313-4341-99 The initial defs were released 2005, well before N360 v1 was released in 2007

You ran a Quick Scan. The malware could be hiding and restoring itself. Run a Full Scan.

Try using VMware's ThinApp; it packages apps into portable versions. I tried it with several apps, like Safari, and it works. Not sure about MBAM; considering its complexity ...

Thanks for confirming. I hope his bug will be fixed; right now on-demand scanning of particular files with Restricted priv. results in false negatives. I could logon to Admin and scan the file or do a full system scan =( This limits the usefulness; nevertheless still a useful program =)

Will that mess up registry entries and render the invalid?

N360? What version, v1 or v2? Honestly, it doesn't matter; it is next to impossible for well known malware, such as MyWebProducts, to slip past any AV unless you A) turned it off never ran a full system scan C) add all your files to exclusions Even if you disable LiveUpdate, Norton should at least be able to use its heuristic analysis technology, or Bloodhound, or use its signatures. MyWeb dates back a long time. It should be included in most signature sets within the past ... couple years. And you may want to copy/paste your message and post it at the Norton forums. A employee may be able to assist you better in answering your questions or help in removal. http://community.norton.com/norton/board?board.id=Norton_360

I installed MBAM using Admin priv. Using the context menu options to scan a file under a Restricted Acc doesn't seem to work; MBAM never finds malware, even in known infected files. And when attempting to update MBAM under Restricted Acc; the updates say successful; however the update version stays the same.

Probably because you did not run a full scan.