mbam wont open in developer mode

[gostelow]

I'm wanting to check if 15 files found by mbam in the "program files" folder are really infected, or if it's a false positive. Following the instructions found on this forum I've tried several times to open mbam in developer mode, but each time I get an error message saying that Windows can't find mbam.exe/developer. Is there a way round this please? The PC is running Windows XP Home.

[ThexDarksider]

You need to put a space between `mbam.exe' and `/developer'.

[gostelow]

Oh - I didn't think that spaces were allowed in that sort of address. Thank you - I'll try again.

[ThexDarksider]

It's not an address, it's a command line switch.

You're welcome.

[gostelow]

Right - that did the trick and I've run a Quick Developer scan. Confusingly this found zero infected files, even though over the last week, trying to figure out what was going on, I ran half a dozen regular quick scans and each time the same 15 files were reported as being infected. I've now also run another regular quick scan, and finally a full scan, and in both those cases there was no malware found. The 15 files in question are still there in the program files folder. In case anyone can throw light on why I've had contradictory results, this is the log file of an earlier scan when malware was detected:-

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 5963

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

05/03/2011 16:12:18

mbam-log-2011-03-05 (16-12-18).txt

Scan type: Full scan (C:\|)

Objects scanned: 180493

Time elapsed: 28 minute(s), 4 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 15

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

c:\program files\Brush.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\DGUI.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\DibPro.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\EditWin.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\EeUi.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\EzDll.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\EzFileRc.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\ImgPro.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\interface.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\Jpeglib.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\Macro.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\myCtrl.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\ricohdll.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\tipofday.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

c:\program files\Uninst.dll (Spyware.OnlineGames) -> Quarantined and deleted successfully.

As of now, unfortunately, I don't know if the PC is infected or not.

[gostelow]

PS the log file says they were quarantined and deleted successfully, but I lost my nerve at deleteing files from the Program Files folder and restored them.

[AdvancedSetup]

It's possible that if your Anti-Virus or other security software is blocking our driver then it could produce false positives.

Please make sure you've setup file and folder exclusions in your Anti-Virus. You may want to do the following which can also help to clean up any potential issues.

Please do the following:

• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask and we'll explain how to do it.
    

[gostelow]

Thanks for the advice; I'll check it out.