Scan results

[alicez]

I just ran a scan and got the following:

Scan results

Below is a list of malware that Malwarebytes' Anti-Malware found on this system. Close all application before removal as during removal certain programs may terminate unexpectedly.

Vendor = Adware.BHO Category = File Items: D:\i386\Apps\App10518\setup\synales.exe Other = Blank Action Taken = No action taken

Vendor = Adware.BHO Category = File Items: D:\i386\Apps\App26342\comp\fw\risale.exe Other = Blank Action Taken = No action taken

What should I do please? I am new at this!

Alice

[AdvancedSetup]

First check for UPDATES again and then please run the following and then do the scan again.

Click on START - RUN and type in or Copy/Paste into the run line the following and run another scan.

"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /developer

Then post back the entire log that comes up.

[alicez]

First check for UPDATES again and then please run the following and then do the scan again.

Click on START - RUN and type in or Copy/Paste into the run line the following and run another scan.

"C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /developer

Then post back the entire log that comes up.

I had the latest definitions therefore no new update. No log cam up, but it had Save Logfile, which I did and it is shown below. I also ran a scan on my notebooki and the exact same two items came up after the scan! Is this what you wanted? What do I do now?

Malwarebytes' Anti-Malware 1.40

Database version: 2626

Windows 5.1.2600 Service Pack 3

8/14/2009 5:35:07 PM

mbam-log-2009-08-14 (17-34-54).txt

Scan type: Full Scan (C:\|D:\|)

Objects scanned: 173378

Time elapsed: 39 minute(s), 35 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

D:\i386\Apps\App10518\setup\symales.exe (Adware.BHO) -> No action taken. [5253514247405230211726231301182534361925211717251735383720192135341938263636381

73935171722173622253623232135251722211921183635373637193619213935362525353721173

9

26212121192636383834182435253925253939372535362121362121342438212224193718372126

1

7171725172117253535233438241922181717252020]

D:\i386\Apps\App26342\comps\fw\nisale.exe (Adware.BHO) -> No action taken. [5253514247405230211726231301182534361925211717251735383720192135341938263636381

73935171722173622253623232135251722211921183635373637193619213935362525353721173

9

26212121192636383834182435253925253939372535362121362121342438212224193718372126

1

7171725172117253535233438241922181717252020]

[AdvancedSetup]

Just hang in there and I'll post this over in the False Positive and have one of the Developers take a look. Thanks

[alicez]

Just hang in there and I'll post this over in the False Positive and have one of the Developers take a look. Thanks

Please advise me as soon as possible as we are senior citizens and we use the desktop and notebook quite a lot during the day and wouldn't want anything to happen to either one of them.

I phoned my son and he said the D: drive i386 is Recovery Partition and

They are in the Recovery partition???

False positive then, nothing gets into the partitioned recovery area. If yours is like mine. Under lock and key.

We eagerly await your response.

#1- Will you respond or will someone else respond?

#2- Should we just leave the two items showing and just close the MalwareBytes without doing anything (Remove, ignore, etc.)?

[AdvancedSetup]

I am reasonably certain they are false positives and have posted such over here: http://www.malwarebytes.org/forums/index.php?showtopic=21673

As soon as one of the developers has a chance to get to it they should respond to the post.

Yes, you can close Malwarebytes and do not let it fix or do anything else with it.

[alicez]

I am reasonably certain they are false positives and have posted such over here: http://www.malwarebytes.org/forums/index.php?showtopic=21673

As soon as one of the developers has a chance to get to it they should respond to the post.

Yes, you can close Malwarebytes and do not let it fix or do anything else with it.

Thank you.

I will not do anything and I will wait to hear from your developers.

Will the developers know it is in my D:/i386 System Restore / Recovery Partition ?

[AdvancedSetup]

Yes, they know what they're doing. Thank you for your patience.

[AdvancedSetup]

This was a false positive and the rules have been updated. Please update MBAM and do another scan and they should no longer be detected.

[alicez]

This was a false positive and the rules have been updated. Please update MBAM and do another scan and they should no longer be detected.

Thank you.

I never received an email notification of your post at my aol email address, even though I am subscribed to this thread.

Does anyone know why I didn't recieve email notification?

[exile360]

Hi alicez .

Sorry about no one responding for so long. Your question must've gone unnoticed. It's possible that the email from malwarebytes' was blocked by the spam filter on your email account. If it saves spam messages, please review them to see if the topic reply notification is there and mark the message as "Not spam".