Two installers

[Markook]

Okay i have a question: 

Why are there two installers?. If you download the installer (free) from the official website it would come up with this name: MBSetup-0009996.0009996-consumer but I have seen in some answers sent by the support where you download one called MBSetup.exe.

Why does this happen? Also, is there a difference?

[Markook]

Im asking this because of this results: https://www.virustotal.com/gui/file/ce820f52d9c8206cd5ca69c6040cf05ef94d9fda4cf01eb272e5459906bcf97b/detection

                                                                https://www.virustotal.com/gui/file/851e715c6cf297fed576a6338eeabfef53fd6462a98d856eafc9130c6170fd30/detection

Anyways, one staff member told me that the first one was false positives, but i want to confirm whats the difference between both

[1PW]

Hello @Markook:

Short version:

The smaller (~2 MB) version could be called the stub installer and requires an Internet connection, during execution, where the remainder of the MB4 installer is safely downloaded only from the appropriate Malwarebytes server.  In terms of frequency, this version is by far the one most downloaded.

The much larger (~185 MB) version is the stand-alone/offline installer chosen occasionally when otherwise rare & undefined system conditions have impeded the use of the stub installer.  Frequently, this version follows a clean uninstall (MBST) of a compromised MB4 install.

Bottom line - from a practical standpoint virtually no difference exists between the two complimentary and equal versions.  For first time installs, either version is applicable although the stub installer is more frequently found in online documentation.

Seasons greetings.

[Markook]

25 minutes ago, 1PW said:

Hello @Markook:

Short version:

The smaller (~2 MB) version could be called the stub installer and requires an Internet connection, during execution, where the remainder of the MB4 installer is safely downloaded only from the appropriate Malwarebytes server.  In terms of frequency, this version is by far the one most downloaded.

The much larger (~185 MB) version is the stand-alone/offline installer chosen occasionally when otherwise rare & undefined system conditions have impeded the use of the stub installer.  Frequently, this version follows a clean uninstall (MBST) of a compromised MB4 install.

Bottom line - from a practical standpoint virtually no difference exists between the two complimentary and equal versions.  For first time installs, either version is applicable although the stub installer is more frequently found in online documentation.

Seasons greetings.

Ok but: why the english version of the malwarebytes website: www.malwarebytes installs the MBSetup.exe while the others language versions like spanish (es.malwarebytes.com) redirects you to a third party downloader and download one called MBSetup-0009996.0009996-consumer.exe

[Markook]

When you download the installer from https://www.malwarebytes.com it will send you to https://www.malwarebytes.com/mwb-download/thankyou/. Whilewhen you install it in es.malwarebytes.com or other language versions it redirects you to https://download.cnet.com/Malwarebytes/3000-8022_4-10804572.html

[1PW]

Hello @Markook:

Malwarebytes has, in the past, and may still in the future, allow sanctioned alternate download partners.  The pitfall being unintended stale library sources.

Be that as it may, as a general rule-of-thumb, users are always best served by downloading from the developer's/author's site when possible.  Then, as you seem already accustomed to doing, upload that executable to VirusTotal for a "second opinion" integrity check.

I am trying to leave you with a "best practices" method that is future proofed.

Cheers

[Markook]

2 minutes ago, 1PW said:

Hello @Markook:

Malwarebytes has, in the past, and may still in the future, allow sanctioned alternate download partners.  The pitfall being unintended stale library sources.

Be that as it may, as a general rule-of-thumb, users are always best served by downloading from the developer's/author's site when possible.  Then, as you seem already accustomed to doing, upload that executable to VirusTotal for a "second opinion" integrity check.

I am trying to leave you with a "best practices" method that is future proofed.

Cheers

To confirm, the installer from Cnet.com is "MBSetup-0009996.0009996-consumer" right?. Anyways about the virustotal thing, https://www.virustotal.com/gui/file/851e715c6cf297fed576a6338eeabfef53fd6462a98d856eafc9130c6170fd30/detection 

[Markook]

@1PW https://www.virustotal.com/gui/file/ce820f52d9c8206cd5ca69c6040cf05ef94d9fda4cf01eb272e5459906bcf97b/detection 

[1PW]

Hello @Markook:

Sure.  I see what you see.  That is the CNET stub installer download you see was valid months ago and is now quite stale.  The stub installer, currently on the Malwarebytes servers, is also valid and newer.

HTH

[Markook]

6 minutes ago, 1PW said:

Hello @Markook:

Sure.  I see what you see.  That is the CNET stub installer download you see was valid months ago and is now quite stale.  The stub installer, currently on the Malwarebytes servers, is also valid and newer.

HTH

I used the CNET installer (because the spanish website redirected me to there), only to check my system. 

There should be no problems right? and the virustotal results are false positives i guess?

 

[1PW]

34 minutes ago, Markook said:

There should be no problems right?

After having checked for and installed any available updates and if your question is strictly confined to the installed Malwarebytes for Windows version, please select the GUI's small gear icon -> Settings -> About -> Version Information and reply to this topic with:

1. Malwarebytes version
2. Component package version
3.  or post a screenshot

Quote

and the virustotal results are false positives i guess?

Asked and authoritatively answered by @Porthos at https://forums.malwarebytes.com/topic/268458-malwarebytes-trojan/

HTH

[Markook]

2 minutes ago, 1PW said:

After having checked for and installed any available updates and if your question is strictly confined to the installed Malwarebytes for Windows version, please select the GUI's small gear icon -> Settings -> About -> Version Information and reply to this topic with:

1. Malwarebytes version
2. Component package version
3.  or post a screenshot

Installed with MBSetup-0009996.0009996-consumer.exe:
 

is in spanish so let me translate: 

"Version de Malwarebytes" = Malwarebytes version

"Actualizar versión de paquete" = Update package version

"Version del paquete de componentes" = Component package version

[1PW]

Hello @Markook:

The above does reflect the current release version.

Thank you.

[Markook]

1 minute ago, 1PW said:

Hello @Markook:

The above does reflect the current release version.

Thank you.

Ok then i was just being paranoid about if the installer was the right one, anyways it only got detected by two mechanisms in virustotal (not very known ones). Thanks for the help

[1PW]

Good luck!

[Porthos]

2 minutes ago, Markook said:

anyways it only got detected by two mechanisms in virustotal (not very known ones).

That is the whole point. A couple of detection's by lesser known products do not make any file bad.