Odd Folder/Location?

[NIS2010]

My set up

HP Desktop

Vista Home premium 32 bit OS with Vista SP2

Have an admin account and a limited user account

Always log in via limited user account

So the morning of 11/30/10 I go ahead and click the shortcut on my desk top for malwarebytes

I right click then select run as administrator

Vista OS asks for the admin password, I enter it, no problem

So the malwarebytes window opens ( GUI?)

I select the tab that says update

Update runs and tells me there is new version of malwarebytes 1.5

I allow it to install

It is in C:\ProgramFiles

Rebooot my PC and log in again as limited user account

again right click the Malwarebytes shortcut Icon and run as admin

update defs

then run a quick scan

scan goes well, nothing detected

BUT....

when I go t the C drive of my computer, I see a a folder Malwarebytes

C:\Malwarebytes

it has a subfolder Malwarebytes Ant-Malware

then two sub folders under that

Logs

Quarantine

I never had these folders showing in C:\

then when I open up the GUI, the tabs for the logs show nothing

Should there be a folder Malwarebytes located/

C:\Malwarebytes\Malwarebytes Ant-malware

I hecked with several others and nobody has such a folder in such a location

[exile360]

No, that folder should not be there. It should be located in C:\ProgramData on Windows Vista and Windows 7, not the root of C:. I'd recommend uninstalling the program as outlined in the following procedure, deleting that folder, then reinstalling version 1.50 from your admin account. It is generally recommended that you install applications from an administrative user account anyway, not a limited account running the program with administrative privileges.

Windows Vista and Windows 7:

• Click on the Start button and select Control Panel
  
• Click on Programs and Features
  
• Uninstall Malwarebytes' Anti-Malware
  
• Restart your computer very important
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• Delete the folder C:\Malwarebytes
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  

Please post back with your results to let us know if it installs correctly the second time or not.

Thanks

[NIS2010]

thanks

I have a few questions, though

1.So is this od file location anything to do with malware or infection, or just a messed up download?

2. Is mbam-clean.exe a malwarebytes clean up tool?

3. when I clicked the link you gave to download Mlawarebytes 1.5, it took me to a website

fileforum.betanews.com the download from there???

4. Is imperative that I do this immediately, since I only use malwarebytes as an on demand scanner? Meaning is this messed up malwarebytes a security vulnerability?

[NIS2010]

also, any sense as to the reason why it happened, the odd folder location?

I also notice my desktop icon properties did not change as far as modification date. might this be the problem?

[Firefox]

1. The Od folder location is probably not an infection, we can determine that once you do the removal and clean install, by running a quick scan or full scan afterwards.

2. mbam-clean.exe is indeed malwarebyes clean up tool. It will remove all files including what you had in the quarenteen and log files as well as the registry settings. Make sure you have your ID and Key because you will have to re-enter those to register Malwarebytes once again.

3. The link will take to to one of several places that hosts the Malwarebyes setup program, it could be Cnet, Major Geeks, Fileforum, to name a few.

4. Does not have to be done immediately, but you should do it as soon as you get a chance. If it is working ok then its not a vulnerability, but we would like to have it installed the way it was designed....

As to how it happened not to sure what caused it.

[NIS2010]

My set up

HP Desktop

Vista Home premium 32 bit OS with Vista SP2

Have an admin account and a limited user account

Always log in via limited user account

So the morning of 11/30/10 I go ahead and click the shortcut on my desk top for malwarebytes

I right click then select run as administrator

Vista OS asks for the admin password, I enter it, no problem

So the malwarebytes window opens ( GUI?)

I select the tab that says update

Update runs and tells me there is new version of malwarebytes 1.5

I allow it to install

It is in C:\ProgramFiles

Rebooot my PC and log in again as limited user account

again right click the Malwarebytes shortcut Icon and run as admin

update defs

then run a quick scan

scan goes well, nothing detected

BUT....

when I go t the C drive of my computer, I see a a folder Malwarebytes

C:\Malwarebytes

it has a subfolder Malwarebytes Ant-Malware

then two sub folders under that

Logs

Quarantine

I never had these folders showing in C:\

then when I open up the GUI, the tabs for the logs show nothing

Should there be a folder Malwarebytes located/

C:\Malwarebytes\Malwarebytes Ant-malware

I hecked with several others and nobody has such a folder in such a location

Ok I did the remove program and used the mbam-clean.exe

went and did a fresh clean install of mlawarebytes 1.50 (FREE VERSION)

Downloaded and installed without issue.

However, when logged in as limited user account and then run malwarebytes as admin, I still get the folder C:\Malwarebyteswith sub folders logs and quarantine

I checked in C:\ProgramData\ and I have a malwarebytes folder with a subfolder Malwarebytes' Anti-Malware

That folder contains

Config

ignore

links

local

news

rules

But the Log subfolder and the qy=uarantine subfolder are not there but rather in C:\Malwarebyes\malwarebytes' Anti-Malware

Scans work ok and I can get updates, just this one strange issue

Does that mean the product is not correctly installed on my PC?

[Firefox]

Lets remove Anti-Malwarebytes from your computer once again. Then run the clean tool as well, rebooting as necessary. After that delete the folder located in C:\Malwarebytes. Once you have done that you can also check the folder C:\ProgramData\ and see if a Malwarebytes folder still exists there, if so delete that folder as well. Once you make sure there are no more folders for Malwarebytes, then we can install a fresh copy of version 1.50.

Let me know how that goes.

[NIS2010]

so just to clarify, when malwarebytes is correctly installed on a Vista Home premium 32 bit machine

These items should be in C:\ProgramData\malwarebytes\Malwarebytes' Anti-Malware ?

Config

ignore

links

local

news

rules

The "guts" (mbam.exe and such files ) should be in

C:\ProgramFiles\Malwarebytes

And then the quarantine and log folders should be in

C:\Users\"myname"\appdata\roaming\malwarebytes\malwarebytes' anti-malware

C:\Users\Admin\appdata\roaming\malwarebytes\malwarebytes' anti-malware

correct?

[exile360]

Yes, that is correct . You should also have a Logs folder in C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware for protection logs if using the PRO version along with a Quarantine folder where items removed by the protection module for the PRO version are kept.

[NIS2010]

Yes, that is correct . You should also have a Logs folder in C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware for protection logs if using the PRO version along with a Quarantine folder where items removed by the protection module for the PRO version are kept.

But with the free version, there would still be C:ProgramData\Malwarebytes\Malwarebytes' Ant-Mlaware

and contained in there would be things like

ignore

config

rules.ref

among a few other things, right?

also is it correct to have these items with free mlawarebytes version?

C:\Windows\System32\Drivermbam.sys

C:\Windows\Sytem32\Drivers\mbamswissarmy.sys

[Firefox]

Yes that is normal with the free version.... (assuming you are talking about a 32bit OS)

You will have files in the folder named C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware

You will also have the two files located in your C:\Windows\System32\Drivers the files mbam.sys and mbamswissarmy.sys

In a 64 bit OS the locations are a little different....

[NIS2010]

Yes that is normal with the free version.... (assuming you are talking about a 32bit OS)

You will have files in the folder named C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware

You will also have the two files located in your C:\Windows\System32\Drivers the files mbam.sys and mbamswissarmy.sys

In a 64 bit OS the locations are a little different....

Thanks. Yes my system is 32 bit

I just wanted to make sure there wasn't anything else happening that was incorrect

Just can't believe I'm the only one with

C:\Malwarebytes

on my machine

I'm almost 100% sure this is not a virus/malware/spyware issue

I mean what purpose would it serve to hace that folder in C:\ if there were malicious intent? And then why would I be able to update defs and run scans if there was soemthing bad? That is why I do not see this as an infection, but some type of vista quirk

I willl try to uninstall and reinstall again this weekend

Sure would like to know if ANY else has or had the same issue

thanks all