Steve1209

Hey MysteryFCM & others, I went off to a Hijackthis forum thinking I must have some serious infection based on your reply, I don't use P2P but am still getting IP detections for 89.149.236.136, 89.149.254.58, 89.149.254.29 and now 219.149.5.209. The Hijackthis forum aided me thru a lot of tests on my system & declared my computer clean see the forum http://forums.maddoktor2.com/index.php?sho...mp;#entry110416. I'm still getting these detections overnight, yes my IE8 is open, I'll begin closing it overnight. Could these be somehow FP's, I don't know what else to do?

MysteryFCM, Since I don't know what caused an access to this IP address, I don't know how to do that, I gave you all the software running overnight, my browser is closed down, what else could cause this? Steve

Hi, Two mornings in a row, I've received an IP detection for 89.149.236.136. As everyone says there is NO browser activity on my part to cause this over night. My browser was closed down. Some things that do occur over night on my system: 1. MBAM update followed by "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /fullscanterminate /minimized 2. Acronis True Image 10 Full system backup occurs with email notification as to result. 3. AntiVir full virus scan occurs. 4. Superantispyware downloads & does a complete system scan Active program AIM with an AWAY message posted... Is it a FP? Thanks, Steve

OK I rebooted the issue has now been cleared for me thanks much!! Steve

I just updated to 2561, my problem still exists???

Well, it still not fixed I have DB 2560 updated now....

Thanks for the reply, Does that mean I don't need to worry about it then & I'll just get the message each time I visit the DVDFab forum or is there something else I can or should be doing? Steve

Hello, Using MBAM 1.40 using DB version 2559. When I go to the DVDFAB forum DVDFAB forum here I see IP protection gives a message for IP 94.102.146.42 blocked. I seem to still be able to do things on the forum page, what is it blocking at the IP? Thanks for any info, Steve

Hey all, One would think this forum would annouce the coming of a beta V1.38 First BUT NOT, it's announced on Twitter FIRST What is going on here?

Hey AdvancedSetup, Thanks much for the reply, I think a small clue is EVERY other system task runs (on my system) as NT AUTHORITY\SYSTEM only Malwarebytes runs with STEVEN\Steve authority (Yes that's an administrator account) but somehow it doesn't work. Again maybe I'm in the minority here NOONE else seems to sound off about scheduled Updates/Scans? Does everyone elses scheduled scan produce a log, I'd be VERY interested in hearing from everyone!! Thanks, Steve

Hey AdvancedSetup, Any news on this? One thing I noticed for every other scheduled task is it runs under the system authority & under properties it has run as NT AUTHORITY\SYSTEM? Could that be a clue to anything? Thanks, Steve

I'm ALWAYS logged on, I never shut my computer down!!!

Hey All, Just one more bit of information, *IF* I invoke the scanner VIA the GUI interface as I said it works and log is produced. *IF* I invoke the scan VIA a Command line scan, the GUI interface also opens and a log is produced, *IF* I invoke the scan from a scheduled scan task the GUI does NOT open and that seems to be the difference, NO log is produced? So AdvancedSetup, is your GUI invoked during a scheduled scan? Mine is NOT but it is invoked during a Command Line scanner scan & of course a GUI scan!! Is anyone else having this problem? Thanks, Steve

Hey AdvancedSetup, Thanks for ALL of your reply's, I really do appreciate them and all of your help on this. The TASK is set up with MY ADMIN account. This is windows XP PRO SP3+ all fixes and I'm the only user of the system there are NO user accounts created. The Update TASK runs fine everyday no problem (same account as the scan). The SCAN task also runs everyday, I know this because I can go to RUN>CONTROL PANEL>SCHEDULED TASKS and at the time when it's to run, it says running for approximately 5 minutes then it finishes. I open the Malwarebytes GUI & click on LOGS tab, no log is produced from the scheduled scan. *IF* I run a manual scan (Quick or Full) from the GUI a log is created (even if no problems are encountered), If I run a Comman Line Scanner, logs are also created, no matter which Command line options I choose. It's only the scheduled scan where a log does NOT seem to be created, Like I said I can see the scheduled task runs, it just does NOT produce a log so I know it ran *IF* I'm not here looking to see if the task is running. Obviously I'm the only person having this problem, is there a diagnostic I can run to see what's happening here? Thanks for your ongoing support, Steve

Hey Advancedsetup, You are 100% correct that Command Line Scanner command works 100% & produces a log, now I ask you to set up a Scheduled SCAN for a particular time. After U set it up, you can go to START >CONTROL PANEL>SCHEDULED TASKS>Malwaewbytes Scheduled SCAN and right click & under properties the same as U added under RUN above, it runs but NO log is created when the task runs!! I think this is a BUG!!! Steve

Hello Everyone, Using MBAM V1.37 and from this topic I found Command Line Scanner options http://www.malwarebytes.org/forums/index.php?showtopic=14247 So I'd like to ask do the following OPTIONS produce a log when SCHEDULED under scheduled SCAN? I don't think either option with TERMINATE produces a log, does anyone know do these quickscan/fullscan option's produce a LOG? /quickscan : Allows you to run a quick scan. /fullscan : Allows you to run a full scan. Thanks, Steve

One thing I noticed the Scheduled San looks like this "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /quickscanterminate /minimized" is that correct to create a log or do I need some other parameter? Thanks for any help, Steve

I installed the beta 1.37 on my home computer Windows XP SP3 installed plus all updates current. I'm of course looking at the beta very carefully, so I have a question about something I never noticed before. I have a scheduled update at 4PM my time, that works fine. I have a scheduled Quick Scan set for 5PM my time, that maybe(?) works. I say maybe because no LOG is produced. Is that correct? If I run a manual Quick Scan (or Full scan) a log is always produced. I know the scheduled quick scan runs becasue today I went to START>CONTROL PANEL>SCHEDULED TASKS and the 5PM scan Scheduled task ran approximately 4 1/2 minutes (said running), the same as a manual quick scan but no log was produced, a manual quick scan I started immediately after and it produced a log. Is this correct? Is there a way to produce a log from a scheduled Quickscan, even if no problems were found? Thanks for any insight! Steve

OK I was looking at the tasks for Malwarebytes' & the other tasks which run & what I saw was the RUN AS box ws different, so I canged it to what the other tasks looked like, changed my system clock and they look like they work Linking code copied to clipboard Looking at the scheduled tasks, it shows they ran & and next run date is now tomorrow, so that's an improvement BUT they in fact did not run, when I open the GUI, Malwarebytes' did not update the database it's still at 1938 from yesterday. The scan also didn't run or it didn't produce a log of it did scan. I'm not 100% sure what run as "NT AUTHORITY\SYSTEM" VS what I had before, it's getting closer to working but still not working. Steve

Hi Swandog46, Not sure what you mean export the information but here are the screen shots of the update task Linking code copied to clipboard Linking code copied to clipboard Linking code copied to clipboard Linking code copied to clipboard Does that give you the info you are looking for? If not can you explain how to export the info Please. If you want the scan task I'll send those screenshots as well Thanks for your assistance

When I tried to run the task from scheduled tasks manually, it did NOT run, I have a couple other scheduled tasks and they ran OK so it's something with the Malwarebytes' update & quckscan scheduled tasks

Yes it updates manually and scans manually just fine

DaChew, Does that mean I have too many things running for Malwarebyte's to schedule properly? I don't fully understand what you mean? Thanks, Steve

Thanks DaChew for your assistance, Process PID CPU Description Company Name System Idle Process 0 85.38 Interrupts n/a 0.77 Hardware Interrupts DPCs n/a Deferred Procedure Calls System 4 smss.exe 820 Windows NT Session Manager Microsoft Corporation csrss.exe 876 Client Server Runtime Process Microsoft Corporation winlogon.exe 908 Windows NT Logon Application Microsoft Corporation services.exe 952 0.77 Services and Controller app Microsoft Corporation ati2evxx.exe 1156 ATI External Event Utility EXE Module ATI Technologies Inc. svchost.exe 1172 Generic Host Process for Win32 Services Microsoft Corporation wmiprvse.exe 3792 WMI Microsoft Corporation unsecapp.exe 2320 WMI Microsoft Corporation svchost.exe 1260 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 1356 Generic Host Process for Win32 Services Microsoft Corporation spoolsv.exe 1540 Spooler SubSystem App Microsoft Corporation sched.exe 1584 Antivirus Scheduler Avira GmbH a2service.exe 2356 a-squared Service Emsi Software GmbH a2service.exe 2380 a-squared Service Emsi Software GmbH schedul2.exe 2420 Acronis Scheduler 2 Acronis avguard.exe 2444 Antivirus On-Access Service Avira GmbH AppleMobileDeviceService.exe 2460 Apple Mobile Device Service Apple Inc. mDNSResponder.exe 2496 Bonjour Service Apple Inc. CTSVCCDA.EXE 2532 Creative Service for CDROM Access Creative Technology Ltd DkService.exe 2560 Diskeeper Service Diskeeper Corporation dlcicoms.exe 2692 Printer Communication System IAANTmon.exe 2764 RAID Monitor Intel Corporation jqs.exe 2832 Java Quick Starter Service Sun Microsystems, Inc. mbamservice.exe 2912 Malwarebytes' Anti-Malware Malwarebytes Corporation NBService.exe 3000 Nero BackItUp Nero AG NMSAccessU.exe 3032 IoctlSvc.exe 3072 PLFlash DeviceIoControl Service Prolific Technology Inc. svchost.exe 3100 Generic Host Process for Win32 Services Microsoft Corporation svchost.exe 3132 Generic Host Process for Win32 Services Microsoft Corporation MsPMSPSv.exe 3192 WMDM PMSP Service Microsoft Corporation CALMAIN.exe 3392 Canon Camera Access Library 8 Canon Inc. iPodService.exe 3484 iPodService Module Apple Inc. alg.exe 3968 Application Layer Gateway Service Microsoft Corporation AAWService.exe 328 10.00 Ad-Aware Service Application Lavasoft lsass.exe 964 LSA Shell (Export Version) Microsoft Corporation ati2evxx.exe 1700 ATI External Event Utility EXE Module ATI Technologies Inc. explorer.exe 1916 0.77 Windows Explorer Microsoft Corporation TrueImageMonitor.exe 392 Acronis True Image Monitor Acronis TimounterMonitor.exe 408 Monitor for Acronis True Image Backup Archive Explorer Acronis schedhlp.exe 420 Acronis Scheduler Helper Acronis gnotify.exe 460 Gmail Notifier Google Inc. iTunesHelper.exe 476 iTunesHelper Module Apple Inc. avgnt.exe 556 Antivirus System Tray Tool Avira GmbH AdMunch.exe 1808 Ad Muncher Murray Hurps Corp Pty Ltd jusched.exe 1648 Java Platform SE binary Sun Microsystems, Inc. weatherpulse.exe 676 Weather Pulse Tropic Designs COOLTI~1.EXE 680 0.77 Scrolling Stock Ticker www.CoolTick.com aim6.exe 732 AIM AOL LLC aolsoftware.exe 1572 AOL AOL LLC LuckyReminder.exe 800 ctfmon.exe 852 CTF Loader Microsoft Corporation SUPERAntiSpyware.exe 1028 0.77 SUPERAntiSpyware Application SUPERAntiSpyware.com tclock2.exe 1320 Customize Taskbar Ver1.2.0 Two_toNe iexplore.exe 1036 Internet Explorer Microsoft Corporation iexplore.exe 760 0.77 Internet Explorer Microsoft Corporation iexplore.exe 1536 Internet Explorer Microsoft Corporation procexp.exe 3512 Sysinternals Process Explorer Sysinternals - www.sysinternals.com MOM.exe 468 Catalyst Control Center: Monitoring program Advanced Micro Devices Inc. CCC.exe 1964 Catalyst Control Centre: Host application ATI Technologies Inc. avnotify.exe 4060 Notification Tool Avira GmbH

Hi DaChew, YIKES I downloaded & Installed that sysinternals, I tried some things on it BUT I don't have a clue where even to BEGIN with that or how it could do to help me troubleshoot my problem????