Ignore List Question

[Marc47]

I have used this program in the past, but just downloaded the current version again, and updated the definitions.

I looked under the ignore list tab, and there are 11 items listed there!

Is this something that would be loaded with the 2067 database, or do I have a problem?

This was a clean install, and I have not even done a scan yet.

If this is not meant to be here, should I hit the remove all button?

I am a bit confused,.......thanks for any help you can provide a new member.

[Marc47]

Nobody??

I would have thought this would be a simple question,.........guess not!

What I am attempting to figure out is do the databases automatically load items into the ignore list, possibly to avoid false positives?

All I know is I am the only person with physical access to this computer, and I did not put them there after installing the product, and updating it.

I just don't want to remove them if I should not.

Thanks Again!

[gonwk]

Nobody??

I would have thought this would be a simple question,.........guess not!

What I am attempting to figure out is do the databases automatically load items into the ignore list, possibly to avoid false positives?

All I know is I am the only person with physical access to this computer, and I did not put them there after installing the product, and updating it.

I just don't want to remove them if I should not.

Thanks Again!

Hi Marc47,

Out of curiosity I just looked under my MBAM "Ignore List" and it is clean as Whistle ... so something is Fishy. Now, I am not a AntiVirus Software Specialist ... more of Click & Go type of a person ... but at the least this is what I would do ... "Assuming" you have ADMIN RIGHTS to that computer ... unless it belongs to Company and your Software Folks dump those in there ...

1) Try to remove the 11 entries form Ignore List and then close MBAM and Restart your Computer. After restart check your Ignore List again ... see if the 11 items if they have popped again.

2) If so, unistall MBAM completely > Restart > reinstall MBAM clean and do a "Complete Normal Install". Check Ignore list if nothing ... restart and check again. If they popped again ... then Follow this FORUM way of Posting VIRUS Problem ... a HiJack list and os forth.

BTW, do you have any Other On-Demand AntiVirus Cehcker that you can run after you uninstall MBAM!?!?

Hope I was of some help!

G!

[Marc47]

Thanks for the response.

This is simply my personal computer, and as I said before nobody can use it without being signed on by me.

That is what confused me,.......this WAS a clean install.

I always send the install folder to other than default, so that I can easily find a folder, and delete it after using the uninstaller. I assume that this program points its ignore lists to a different location possibly, and that it was picked up again with the new install.

I run Avast for an anti-virus, and I ran it just yesterday,.......nothing came up.

I rarely get problems, as I don't go to strange websites, but it seems that they are becoming more insidious by the day, and the methods of obtaining a virus or malware.

Don't know if you have the answer for this,.........but, if I remove the 11 items on my ignore list, does the program delete those files from my system, or simply start checking them again?

That is my main concern BTW.

I know for a fact that at least a few of the entries are files that were known to be false positives in prior databases, and therefore have the feeling that the new install picked up the old ignore list from a different location.

Thanks!

[gonwk]

... Don't know if you have the answer for this,.........but, if I remove the 11 items on my ignore list, does the program delete those files from my system, or simply start checking them again?

That is my main concern BTW. ...

HI Marc,

I have "No Idea" and don't want to stray you ... so let's hope some of the More Experienced folks here pop-in with an answer to this.

I googled your concern and did not find something worth a dime ... so!!!

G!

[yardbird]

Hi Marc47! The support team should address this in 24-48hrs. I would update your database & rescan and post a log unless it comes back clean. But there is a help desk if a support tech does not stop by with some instructions.. Since I'm not on the support team, think about leaving the 11 items in there for now to be safe. http://helpdesk.malwarebytes.org/login Welcome to the forum...YB

[TeMerc]

I have used this program in the past, but just downloaded the current version again, and updated the definitions.

I looked under the ignore list tab, and there are 11 items listed there!

Is this something that would be loaded with the 2067 database, or do I have a problem?

This was a clean install, and I have not even done a scan yet.

If this is not meant to be here, should I hit the remove all button?

I am a bit confused,.......thanks for any help you can provide a new member.

What are the 11 items in ignore?

[AdvancedSetup]

Items listed in the IGNORE tab are not removed unless you did a clean removal of the program. They're customized for you and are not removed by a normal uninstall of the program. If you remove the folder: C:\Documents and Settings\All Users\Application Data\Malwarebytes and all files and sub folders that will remove most of the stored information. If you really want to ensure that MBAM is fully removed then use this procedure.

FULL removal of Malwarebytes Anti-Malware program.
NOTE: DO NOT use this method if you have a licensed copy as it will remove that information as well
1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel or on the Malwarebytes menu
2. Restart your computer (very important).
3. Download and run this utility.
4. It will ask to restart your computer (please allow it to).

You will need to reactivate the program using the license you were sent via e-mail if you're a licensed user and you use this method to remove it.

[Marc47]

What are the 11 items in ignore?

You will have to use the enlarge link, and then click the pic to magnify to read the print.

[Marc47]

Well, I followed Admins directions, and now have an empty ignore list, and am running a scan right now.

I still have no idea where that stuff came from, as I don't recall EVER adding anything to the ignore list.

Here is what it picked up.

Are both of these legit items that should be deleted?

I have read about a lot of false positives here before, and am hesitant to delete some of this stuff.

Thanks again.

[TeMerc]

Well, I followed Admins directions, and now have an empty ignore list, and am running a scan right now.

I still have no idea where that stuff came from, as I don't recall EVER adding anything to the ignore list.

Here is what it picked up.

Are both of these legit items that should be deleted?

I have read about a lot of false positives here before, and am hesitant to delete some of this stuff.

Thanks again.

Those findings are not actually false\positives or actual infections but rather settings which you have made and in some cases, malware also makes. So we scan those sections of the drive for changes which differ from default settings

Please see the link below for an explanation:

http://www.malwarebytes.org/forums/index.p...c=12624&hl=

Add them to your ignore list

[Marc47]

Thanks for your input.

I let MBAM delete the entry labeled Hijack.Tray, and ignored the Security Center issue as I am a bit familiar with that one.

I run Avast for an anti-virus, and maybe that is what causes this flag.

Deleting the other entry did solve a problem for me though, and so far has caused nothing negative.

My network connection icon in the tray notification area disappeared a bit ago, and I have tried everything to get it back with no luck.

As soon as I removed Hijack.Tray,......it came back again.

What are the advantages to the paid version, as this seems to be a worthwhile program, and I have no problem in paying for a good product.

I have used it on and off a number of times.

[miekiemoes]

Hi,

My network connection icon in the tray notification area disappeared a bit ago, and I have tried everything to get it back with no luck.

As soon as I removed Hijack.Tray,......it came back again.

From your mbam I can see that the reference to stobobject.dll was replaced by malware. Please let mbam remove what it found - because mbam will restore it with the default valuedata instead.

Also do this:

Go to start > run and copy and paste next command in the field:

regsvr32 stobject.dll

Hit enter

You should get the message: "DllRegisterServer in stobject.dll succeeded,"

click OK

If it returns, then there's more present here..and means you're still infected with something that mbam may or may not detect yet. Scan and post logs - read note at bottom in green

If you're having Malware related issues with your computer that you're unable to resolve.

1. Please read and follow the instructions provided here: I'm infected - What do I do now?
2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
   
3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.
   

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review
  

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.
  

[Marc47]

I ran the command as you said, and all went like you stated.

I then ran another scan and mbam came back clean,.........although I still have the security center issue on ignore.

My Avast shows up in security center, and it updates automatically with no issues.

Also shows Windows firewall as working. The only change I have made in Security Center from the default, is for Windows Update to inform me when updates are available. I don't like all of that done without my knowledge.

Could that setting be causing the Security Center issue that mbam is detecting?

Should I let it remove that also, and see what happens?

In all honesty the only thing I have ever been hit with that was bad was the XP Police deal.

My fiancee was on the computer, and she thought it was my anti-virus detecting something and of course hit the wrong button. I cleaned it up, and haven't had an issue since. That was about 3 months ago I believe.

Could the Hijack.Tray entry have been left over from that?

I dumped all of my system restore points also BTW after that joyous event.

Should I do the same now, or leave it be since all seems well?

Thank you all again very much.

[miekiemoes]

although I still have the security center issue on ignore.

that's OK and you may leave it there.

The Hijack.Tray is this infection: http://threatinfo.trendmicro.com/vinfo/vir...AXT&VSect=T

Mbam removed it already and restored the default data to stobject.dll if you've chosen to remove what mbam found.

This should also restore your networking icon and sound icon in system tray.

Is this restored now? If not, then run the command I posted previously ( regsvr32 stobject.dll )

[Marc47]

Yes,.....my network icon is back. I never noticed the sound icon being gone though,.......that may have been my oversight, or the fact that I don't use the Windows sound icon. I have the Creative volume control in the notification area.

I really don't know about that one, but my network icon missing was driving me crazy!

I just updated mbam again, and ran another scan.

Looks like all is well, and I will leave all of you fine folks in peace.

Thank you very much, once again!

[miekiemoes]

You're most welcome