jonesliu

Hi: I have update the database rules to 6349,and adjust the DATE and TIME to the correct date and time. but the issue still exist. please refer to the scanning result in detail: Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 6349 Windows 5.1.2600 Service Pack 2 Internet Explorer 6.0.2900.2180 2011-4-13 18:37:22 mbam-log-2011-04-13 (18-37-13).txt Scan type: Quick scan Objects scanned: 138777 Time elapsed: 6 minute(s), 12 second(s) Memory Processes Infected: 1 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 1 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 1 Memory Processes Infected: c:\program files\Dell\upsmanagementsoftware\UPSMS.exe (Worm.P2P) -> 3648 -> No action taken. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\UPSMS (Worm.P2P) -> Value: UPSMS -> No action taken. Registry Data Items Infected: (No malicious items detected) Folders Infected: c:\bthci.dll (Trojan.SpyEyes) -> No action taken. Files Infected: c:\program files\Dell\upsmanagementsoftware\UPSMS.exe (Worm.P2P) -> No action taken.

hello, any update?

The size of Our software is more than 10M, Is there any other way to post the file?or can you kindly to download the installation document from the website as below: http://support.dell.com/support/downloads/download.aspx?c=us&l=en&s=gen&releaseid=R276438&SystemID=PWE_2950&servicetag=&os=WNET&osl=en&deviceid=23061&devlib=0&typecnt=0&vercnt=3&catid=-1&impid=-1&formatcnt=0&libid=31&typeid=-1&dateid=-1&formatid=-1&source=-1&fileid=408115

hi: thank your for your reply. But the file of UPSMS.exe is more than 10MB. I cannot post it

We have developed one of the application software, but it was mistook to worm. Our software works accurately with the other antivirus software,just as "OfficeScan" and "Trend Micro". Can someone kindly to tell me how to judge the software to worm by "Malwarebytes' Anti-Malware"? hope for your advice urgently! The log is post,Please refer to the attachment hope for your advice! mbam-log-2006-01-01 (15-50-32).7z

hi all: We have developed one of the application software, but it was mistook to worm. Our software works accurately with the other antivirus software,just as "OfficeScan" and "Trend Micro". Can someone kindly to tell me how to judge the software to worm by "Malwarebytes' Anti-Malware"? hope for your advice urgently! The results as below after scanning: Memory Processes Infected: c:\program files\Software-name.exe (Worm.P2P) -> 5280 -> Unloaded process successfully. Registry Values Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\software-name (Worm.P2P) -> Value: software-name -> Quarantined and deleted successfully. Files Infected: c:\program files\software-name.exe (Worm.P2P) -> Quarantined and deleted successfully.