ThreeGuser

Thank you, Bruce!

Hi! My netbook came with Linux. It has pretty much the same tech specifications as Dell Inspiron Mini netbooks. Although it could run Windows 7 Starter, I installed Windows XP on it. Windows XP will be lighter and you'll have more options that with Windows 7 Started. Just an idea. If you have spare XP licence, you can install it using USB Multiboot Sorry for the offtopic///

Your computer may still not be clean. Follow the instructions here : http://forums.malwarebytes.org/index.php?showtopic=9573 Repost your problem with the information/logs required here : http://forums.malwarebytes.org/index.php?showforum=7 In that forum section some trained people will help you check and clean your computers. Additionally, you'll be helped with your Windows Update issues as it is related to the malware infection.

The fact that you ask such a questions means you are still not ready to hunt for malware I think you should first know very well how to prevent and clean malicious code before you start hunting. Let your interesing grow and you'll find the answer of this question yourself when you are ready

Oh, thank you so much miekiemoes about posting this tool. It will be really helpful! May be a month ago I had a case with client's computer that was severly infected. Although I cleaned the malware and everything seemed fine, most of the files remained hidden. I have never seen anything like this before - malware to hide all the files on a computer. I did a research but couldn't find anything on this. I ended up manually turning files and folders that were hidden to visible. This "dirty" job took me about an hour . This tool could have saved me. Anyway, I will keep a note of it and will use it in case I need it in future . Thank you!

According to AVIRA Labs and Jotti: http://virusscan.jotti.org/en/scanresult/a14573fc04372c7ab8b6efac1b3a19aee3f36f91 this file should be clean archive password: infected oreans32.rar

Before posting the logs, try this solutions here: http://forums.malwarebytes.org/index.php?showtopic=10138&view=findpost&p=417944

In order to fix your problem, you need to provide more information. Additionally, your machine could be infected. Follow the instructions here : http://forums.malwarebytes.org/index.php?showtopic=9573 Repost your problem with the information/logs required here : http://forums.malwarebytes.org/index.php?showforum=7 In that forum section some trained people will help you check and clean your computers if the problem is related to malicious software.

Hey guys! I was wondering shouldn't Ardamax be detected as it is a keylogger , even as PUP ? Installation file is not detected now. http://www.ardamax.com/ install_akl.zip

Hello! A file part of a game was just detected with recent update. I think it may be FP. A client of mine reported this to me. I am sending it to you to check it. I checked with old base 6292 - it is not detected with it. Archive password: info VT 0 http://www.virustotal.com/file-scan/report.html?id=d2c68406d73e92ca8dd6d9b4a311937f76fdbefccbdabda0fc546dba0e2466a3-1302714640 UNINSTALL.zip

What do you mean by "I have lockup issues" ? Does MBAM freeze during scan or your whole computer freeze/stops responding ? I see you have SuperAntiSpyware and IOBit - I strongly recommend you uninstall them as they may interfere with your other protection and programs . Leave just Norton for now.

My company resellers MBAM , SurfRight products , AVIRA and ESET products. ESET's , AVIRA's and SurfRight's way of partnering is very simple and easy . I am really please with them all. Even though we reseller MBAM too I don't like their way of partnering at all. It definitely needs improvement. The company , staff , program - they are all excellent , brilliant , just the partner part needs changes. My own opinion is that you should make your own partner portal just like AVIRA , SurfRight and ESET have and you should NOT care about so much about site reputation . You should accept more resellers and partners. The more partners you have , bigger amount of sells. Examples of good way of handling partners: - the company SurfRight (that makes Hitman Pro and Caretaker) uses Cleverbridge's services for any type of reseller including affiliates , home/office products and enterprise products . I don't understand why you don't do the same - you do it just for affiliates. Their partners (resellers/affilates/etc) have access to their website portal for the prices and for ordering any type of licences including business ones , too. You may have a preferred distributor for boxed products and big sales but I my self don't like working with 3rd party like DSolution in our case. I have nothing against DSolution , I just don't fancy working with 3rd parties but would prefer working with the vendor directly. So , partners have access to the portal and when it comes to the real purchase , all kind of purchases go though Cleverbridge , which is prefered by me. - AVIRA and ESET do the same . AVIRA and ESET even offer more in their portals like logos , contacting support dept. , marketing dept. or sales dept. AVIRA uses Cleverbridge , too . ESET uses Netsuit - but just for the payment - the portal is all vendor's. Currently only affiliates that are accepted work with Cleverbridge , there is no such thing as partner portal for small resellers and you transfer your small resellers work with third party distributor like DSolution .

I completely agree with you and support your views!

Hey there! Please , repost here providing as much details as possible.

Hey there! You can run them with no problems . MBAM Pro and Free is compatible with any AV on the market , including Avast. In order to prevent any pottential conflict and to make your system run better , open Avast's interface , open its settings , navigate to the Exclusions options and configure Avast not to scan these files and/or folders: For Windows XP: For Windows Vista and Windows 7 (32-bit versions): For Windows Vista and Windows 7 (64-bit versions): Save your settings . Open Malwarebytes' Anti-Malware using its Desktop icon. Go to "Ignore List" tab and using the Add button , add Avast's folder to be ignored and not scanned. Avast's folder should be in C:\Program files\

Yep. The PDF contains the list of used samples. If someone could check it ...

As you might have ready , Symantec started BETA testing (currently private , soon public) for its new business products Symantec Endpoint Protection 12 (both the classic and small business editions). Even though private BETA , they have commisioned few companies to make tests that include comparison between the new product and other business-class products. One of the comparisons (performed by the reputable AV-Test.org) includes Malwarebytes' Anti-Malware. You may see them : http://www.symantec.com/content/en/us/enterprise/other_resources/b-remediation_testing_report_2_10_11_OR.en-us.pdf http://www.symantec.com/content/en/us/enterprise/other_resources/b-endpoint_protection_2011-performance_testing_smb_OR.en-us.pdf http://www.symantec.com/content/en/us/enterprise/other_resources/b-endpoint_protection_2011-performance_testing_ent_OR.en-us.pdf I though we may comment the first one which involves MBAM. Even though performed by AV-Test.org , I don't think it is fair to compare MBAM against full featured AVs. What do you think ?

General suggestions not specific to your post : You may remove application you do not need any more , you can defragment this computer's hard disk , you can run Windows' checkdisk utility to check for errors , # Download , install and run CCleaner http://www.piriform.com/ccleaner/download/slim It will help you remove unnecessary temporary files from your computers. When you start it , place a check on all these: Then Analyze the computer and Clean the temporary files till it tells you no further temp files left to be removed If you suspect virus/malware infection , post here only after you have read these instructions.

Hey there! Have a look at this video from the official MBAM channel and schedule an update every hour or so .

Hi! In case you like ZoneAlarm before changing the antivirus try to exclude each other's program files. Open ZoneAlarm's interface , go to its settings and make sure you exclude all these (so that they are not scanned by ZA) : For Windows XP: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For Windows Vista and Windows 7: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For 64 bit versions of Windows Vista and Windows 7: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\SysWoW64\drivers\mbamswissarmy.sys Then open Malwarebytes' Anti-Malware interface , go to "Ignore list" tab and add Zone Alarms's folders in C:\Program files and C:\Documents and Settings (XP) and C:\ProgramData (Vista/7) Confirm the changes and reboot your computer. If it doesn't help , you may try other antivirus programs . First uninstall ZoneAlarm , reboot the computer , then download one . Good free choice is Avira AntiVir Personal . As for paid products : , AVIRA Premium , Norton Antivirus , ESET NOD32. As a paying customer you are entitled to free support from Malwarebytes Corp. If you wish you may also email them at support@malwarebytes.org

That sound good. Please , let me know if I can be of help for something else.

You are welcome Sha! Wish you good luck and happy weekend!

IE (Internet Explorer) should not ask for incoming access . I don't know Scanfile and from the screenshot you posted I can't be sure since the message there says just scanfile. I think it won't be a bad idea if you post again in the malware removal section.

So now after you reinstalled MBAM , a scan in Normal mode takes just 14 minutes which is way faster than 40 minutes before you posted here ? Am I right ?