John A Posted October 27, 2010 ID:334524 Share Posted October 27, 2010 Starting a new thread as requested.In reply to Noknojon http://forums.malwarebytes.org/index.php?s...20&start=20 post #36I think I am clean after resetting the router, resetting the TCP/IP stack and flushing the DNS. Everything seems normal. I have scanned all computers with Microsoft Security Essentials, Malwarebytes, Superantispyware and can't see anything unusual with Hijackthis and other tools. I think that I won't bother the malware removal experts at this stage, but will keep an eagle eye on activities on my computer.I will also heed the advise of Haider in post #37 in the above thread.I really appreciate the advice given by others here. I thought I was on top of computer security, but this has opened up another dimension. Link to post Share on other sites More sharing options...
noknojon Posted October 27, 2010 ID:334527 Share Posted October 27, 2010 Hi -These are rapidly growing problems , so always keep your eyes open for any odd events -Thank You - Link to post Share on other sites More sharing options...
John A Posted October 27, 2010 Author ID:334541 Share Posted October 27, 2010 Another purchase of MBAM Full Version coming up! Link to post Share on other sites More sharing options...
Haider Posted October 27, 2010 ID:334542 Share Posted October 27, 2010 Hello John A:Couple of suggestion if you don't mind:Please read and follow instructions in MS-KB967715Always keep your system completely patched, not only Windows but all installed software. This is your first line of defense, a good program to use is Secunia PSIHave any good Antivirus plus MBAM Full/PROA firewallBottom line is no security program/combination is 100% guaranteed Link to post Share on other sites More sharing options...
yardbird Posted October 27, 2010 ID:334561 Share Posted October 27, 2010 Post # 4 above is good advise John !!!! regards... Link to post Share on other sites More sharing options...
noknojon Posted October 27, 2010 ID:334595 Share Posted October 27, 2010 Hi -Thank you for that - I am glad that we were able to help -Always post back , and now as a paid member you will get priority help each time from our help desk -Thank You - Link to post Share on other sites More sharing options...
John A Posted October 27, 2010 Author ID:334614 Share Posted October 27, 2010 Thanks Haider & YardbirdDoes MBAM real-time protection prevent router hijacks? How?1. I will look at Autoruns2. I always keep system fully patched - will look at Secunia PSI3. I have MS Security Essentials and now MBAM Pro4. I use Windows firewall plus hardware firewallI used to use Kaspersky but too much effort was required to keep it operational and it was too complicated for the other user of my PC Link to post Share on other sites More sharing options...
Haider Posted October 27, 2010 ID:334618 Share Posted October 27, 2010 Hello John A:You'd need following exclusions in MSE for MBAM to avoid conflict(s) if any due to real-time protection of both:Windows XP 32-bitC:\Program Files\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\Program Files\Malwarebytes' Anti-Malware\zlib.dllC:\Program Files\Malwarebytes' Anti-Malware\mbam.dllC:\Program Files\Malwarebytes' Anti-Malware\mbamext.dllC:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.refC:\Windows\System32\drivers\mbam.sysC:\Windows\System32\drivers\mbamswissarmy.sysWindows 7 32-bitC:\Program Files\Malwarebytes' Anti-Malware\mbam.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exeC:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exeC:\Program Files\Malwarebytes' Anti-Malware\zlib.dllC:\Program Files\Malwarebytes' Anti-Malware\mbam.dllC:\Program Files\Malwarebytes' Anti-Malware\mbamext.dllC:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.refC:\Windows\System32\drivers\mbam.sysC:\Windows\System32\drivers\mbamswissarmy.sysNow with MBAM Full/PRO you may want to configure Automatic Updates and Schedule Scans please check How To Use The New Scheduler Link to post Share on other sites More sharing options...
noknojon Posted October 27, 2010 ID:334638 Share Posted October 27, 2010 Does MBAM real-time protection prevent router hijacks? How?This is still an unknown as the infection has not actually entered your computer to run an exe -But in saying that , there has not been a report from any paid users (that I can find) that have been infected this way -The IP module should prevent you from accessing sites that contain these infections -Thank You - Link to post Share on other sites More sharing options...
yardbird Posted October 27, 2010 ID:334683 Share Posted October 27, 2010 FROM: John A posted via yardbirdLog received, and I was told your router is clean, Log posted below: Post back if you have any questions, or if theres anything else you need. Glad everything worked out -- regards....Traceroute Malwarebytes CDN version 1.5 Wed 27/10/2010 20:56:48.65 Phase #1 Tracerouting: data-cdn.mbamupdates.com Tracing route to gs1.wpc.edgecastcdn.net [68.232.45.133]over a maximum of 30 hops: 1 1 ms 1 ms 1 ms home [10.0.0.138] 2 44 ms 43 ms 43 ms 172.18.112.37 3 43 ms 42 ms 43 ms 172.18.66.18 4 43 ms 45 ms 43 ms 172.18.239.137 5 42 ms 42 ms 45 ms Bundle-Ether10.chw48.Sydney.telstra.net [203.45.17.13] 6 43 ms 45 ms 43 ms Bundle-Ether6.chw-core2.Sydney.telstra.net [203.50.6.153] 7 41 ms 43 ms 42 ms TenGigabitEthernet7-1.chw38.Sydney.telstra.net [203.50.20.176] 8 44 ms 44 ms 43 ms aaptpeer2.lnk.telstra.net [139.130.248.202] 9 45 ms 44 ms 43 ms 110.232.179.17 10 41 ms 43 ms 43 ms 68.232.45.133 Trace complete.DNS Info Server: homeAddress: 10.0.0.138Name: gs1.wpc.edgecastcdn.netAddress: 68.232.45.133Aliases: data-cdn.mbamupdates.com wpc.1d00.edgecastcdn.net============================================================ Phase #2 Tracerouting: llnw.data-cdn.mbamupdates.com Tracing route to mwbyte.vo.llnwd.net [117.121.253.254]over a maximum of 30 hops: 1 1 ms 1 ms 1 ms home [10.0.0.138] 2 45 ms 43 ms 43 ms 172.18.112.37 3 44 ms 43 ms 43 ms 172.18.66.18 4 44 ms 45 ms 43 ms 172.18.239.137 5 43 ms 43 ms 44 ms Bundle-Ether10.chw48.Sydney.telstra.net [203.45.17.13] 6 43 ms 45 ms 45 ms Bundle-Ether2.ken39.Sydney.telstra.net [203.50.6.182] 7 42 ms 50 ms 49 ms tge5-1.fr3.syd.llnw.net [117.121.252.33] 8 42 ms 43 ms 43 ms cdn-117-121-253-254.syd.llnw.net [117.121.253.254] Trace complete.DNS Info Server: homeAddress: 10.0.0.138Name: mwbyte.vo.llnwd.netAddress: 117.121.253.254Aliases: llnw.data-cdn.mbamupdates.com============================================================ Phase #3 Tracerouting: edge.data-cdn.mbamupdates.com Tracing route to gs1.wpc.edgecastcdn.net [68.232.45.133]over a maximum of 30 hops: 1 5 ms 1 ms 1 ms home [10.0.0.138] 2 42 ms 43 ms 43 ms 172.18.112.37 3 42 ms 42 ms 43 ms 172.18.66.18 4 43 ms 43 ms 42 ms 172.18.239.137 5 44 ms 42 ms 43 ms Bundle-Ether10.chw48.Sydney.telstra.net [203.45.17.13] 6 45 ms 44 ms 45 ms Bundle-Ether6.chw-core2.Sydney.telstra.net [203.50.6.153] 7 42 ms 45 ms 45 ms TenGigabitEthernet7-1.chw38.Sydney.telstra.net [203.50.20.176] 8 42 ms 45 ms 43 ms aaptpeer2.lnk.telstra.net [139.130.248.202] 9 44 ms 43 ms 45 ms 110.232.179.17 10 83 ms 62 ms 145 ms 68.232.45.133 Trace complete.DNS Info Server: homeAddress: 10.0.0.138Name: gs1.wpc.edgecastcdn.netAddress: 68.232.45.133Aliases: edge.data-cdn.mbamupdates.com wpc.1D00.edgecastcdn.net============================================================ Link to post Share on other sites More sharing options...
John A Posted October 27, 2010 Author ID:334962 Share Posted October 27, 2010 ThanksDo the MSE exclusions all go in the "Excluded files and locations" section only? I wasn't sure if I should put some/all the exe files in the "Excluded Processes" section as well. Link to post Share on other sites More sharing options...
Firefox Posted October 27, 2010 ID:334982 Share Posted October 27, 2010 See Section I HERE for exclusions in MSE. Link to post Share on other sites More sharing options...
John A Posted October 27, 2010 Author ID:334993 Share Posted October 27, 2010 Thank you FirefoxSo I don't have to exclude the other ones below listed by Haider in W7 x32?C:\Program Files\Malwarebytes' Anti-Malware\zlib.dllC:\Program Files\Malwarebytes' Anti-Malware\mbam.dllC:\Program Files\Malwarebytes' Anti-Malware\mbamext.dllC:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref Link to post Share on other sites More sharing options...
Firefox Posted October 27, 2010 ID:334997 Share Posted October 27, 2010 John A, it wont hurt one way or the other.... Link to post Share on other sites More sharing options...
John A Posted October 27, 2010 Author ID:335000 Share Posted October 27, 2010 I use IE9 Public Beta and find it very stable. Are there any known problems with MBAM Pro with IE9 (I haven't had a problem yet)? Link to post Share on other sites More sharing options...
noknojon Posted October 27, 2010 ID:335017 Share Posted October 27, 2010 Hi -There are none known with Malwarebytes - Although McAfee has asked their users not to use IE9 at this stage -That is the only Known conflict so far - Thank You -EDIT -Love the new avatar Link to post Share on other sites More sharing options...
YoKenny1 Posted October 27, 2010 ID:335018 Share Posted October 27, 2010 I use IE9 Public Beta and find it very stable. Are there any known problems with MBAM Pro with IE9 (I haven't had a problem yet)?I use MBAM Pro with IE9 and it works great. Link to post Share on other sites More sharing options...
YoKenny1 Posted October 27, 2010 ID:335020 Share Posted October 27, 2010 Hi -There are none known with Malwarebytes - Although McAfee has asked their users not to use IE9 at this stage -That is the only Known conflict so far - Thank You -EDIT -Love the new avatar I would not use McAfee ever. Link to post Share on other sites More sharing options...
noknojon Posted October 27, 2010 ID:335021 Share Posted October 27, 2010 Hi YoKenny1 -After being on their forum (McAfee) for the last week , I certainly agree -Many internal problems with the new versions - Getting like AVG 2011 -Thank You - Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now