Jump to content

Where did mbam.exe go? It disappeared March28

Recommended Posts


I thought that I should let you know. I updated like everyone else to the latest version. And I had been having some updating problems of late (In as much as no update would take place.) When this happens with any of my malware detection programs or anti-virus software I tend to go to my alert mode.

Today it appears that perhaps my apprehension was justified. I noticed that the icon for Malwarebytes was not normal in my Startup Menu. I looked to the Malwarebytes installation folder (I use an alternate location) and found that mbam.exe was no where to be found. mdor existed as well as a few dll files and the uninstall file. I reinstalled Malwarebytes from scratch and it seems to be OK. (I guess that remains to be seen.) But where did it go? It is, after all, almost April 1, the notoroius day of 'pranking'.

My system is Windows XP Pro Sp2 (where I stopped because I hate some of the copy 'protection' added along with Sp3.) I have Directx10. My browser usually is Firefox. I also have Home XP Pro 2 installed on the same computer. Everything runs quite well and it's a clean machine. Avast4 and Comodo Internet Security Suite Personal (Now that could be a little conflict of interest to work out) are also in play. My only recent detections have been false ones (Comodo detecting Avast4 update temps) and 2 cookies detected as trojans by Malwarebytes most recent version update, which were removed.

I hope that this is nothing serious. Thanks for your attention.

Link to post
Share on other sites

Hello again. This is an update regarding this report.

I think that it was 2 days later that a download to my new installation of Malwarebytes 1.35 allowed me to detect and remove the following (I am copying part of the Malwarebytes log to this report):


Registry Keys Infected:

HKEY_CLASSES_ROOT\CLSID\{248dd897-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> Delete on reboot.

HKEY_CLASSES_ROOT\TypeLib\{248dd890-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{248dd892-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{248dd893-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{248dd896-bb45-11cf-9abc-0080c7e7b78d} (Trojan.BHO) -> Delete on reboot.

Registry Values Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\System32\MSWINSCK.OCX (Trojan.BHO) -> Quarantined and deleted successfully.

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\system32\MSWINSCK.OCX (Trojan.BHO) -> Delete on reboot.


I do not know, but perhaps there might be some relationship to the disappearance of my original installation of Malwarebytes operating files and the trojan which Malwarebytes 1.35 detected at a later date. I have not experienced any further problems.

Thanks again for everything.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.