FTP Hacked - How often to run full scan?

[Zinter]

Hi,

I discovered MBAM after getting websites hacked because malware stole the FTP passwords out of FileZilla's very unprotected xml storage of saved FTP data on my computer.

the malware was located inside the ...appdata/local/microsoft/Windows/Temp Internet Files/Low/content.IE5/, MBAM successfully removed the nasties that mt latest Trend Micro Titanium couldn't. I purchased MBAM- worth every cent.

So, what I need to know is how often the experts would recommend doing a full scan with MBAM? (quick scan didn't find the malware).

I am now deleting saved FTP data after each upload but I'm paranoid now that if I get more Malware before it is discovered & do an upload then I will get malicious scripts in my websites again before I realise the problem has occured.

I could do a full scan prior to every upload but that is very time consuming.

Any thoughts?

Anyone know of a better FTP software that isn't as vulnerable to malware theft of ftp password data?

All advice much appreciated.

[daledoc1]

Hi, Zinter:

Sorry to hear you recently were infected, but glad to know MBAM helped get you cleaned up.

MBAM PRO is an excellent investment!

I'm just a home user, so I'll have to defer your specific questions to someone more expert, especially re: FTP software.

As far as the frequency of MBAM full scans, it is generally recommended that regular Quick Scans (+ Flash Scans with database updates) should typically be sufficient, so long as the computer is well-protected by a robust AV and firewall, with added real-time protection from MBAM.

Full scans are typically recommended only to clean up remnants of malware, and to be done from time to time -- many of us run a Full Scan monthly.

But, if you are more paranoid, they can certainly be run more often.

There is an excellent article about how to enhance one's computer security here:

http://forums.malwarebytes.org/index.php?showtopic=9365

The other thing I might suggest -- given your recent infection -- is to have one of the malware experts take a look at your system to be sure you are clean.

Even with MBAM's excellent protection and malware removal, it sometimes takes more than one tool to completely eradicate infections.

If you would like expert assistance with cleaning your system, there are 3 support options from which to choose:

• Option 1 -- Free, Expert advice in the Malware Removal Forum
  
• Option 2 -- Paying customer using MBAM PRO -- Contact MBAM Support via email
  
• Option 3 -- Premium, Fee-Based Support
  

OPTION 1

As we don't deal with malware removal in this General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so that a qualified helper can help you fix any malware related problems/infections you may have.

• First, please print out, read and follow the directions here, skipping any steps you are unable to complete.
  
• If the infection has so crippled the computer that you cannot follow most/all of the requested steps, then please just proceed as advised below:
  
• Then please post a NEW topic here.
  
• When posting your new thread, please make sure that, under "options", you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post.
  
• One of the expert helpers there will give you free, one-on-one assistance when one becomes available.
  
• Please refrain from making any further changes to your computer such as (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine.
  

NOTE: Please DO NOT post back to ("bump") your topic within the first 48 hours.

Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post, helpers may think that you're already being helped and thus overlook your post.

• 
  o If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again.
  Or
  o You may send a Private Message to a Moderator asking for assistance.
  

OPTION 2

Alternatively, as a paying customer using MBAM PRO, you can contact the help desk at support@malwarebytes.org or here.

OPTION 3

If you would like to use the Malwarebytes Premium Services (Comprehensive solutions to all your computer support needs -- from installation and set-up to troubleshooting and tune-ups), please go to the Malwarebytes Premium Services support site.

Please be patient, someone will assist you as soon as it is possible.

With the weekend holiday in the US, the wait may be a bit longer than usual, at the moment.

I hope this helps a bit. I'm sure the more expert folks will have some specific recs re: FTP software.

daledoc1

PS: Please use the button instead of other ones when you reply here and at the other forums, so that it will be easier to read.

NOTE: If you are a reseller, affiliate, technician, corporate, business, educational, government or non-profit customer then please contact corporate-support@malwarebytes.org and include full contact details along with your Reference # when you do, in order to ensure that you receive prompt assistance.

[Zinter]

Thanks for your reply.

I read through the option 1 directions link you gave & it says after running all the scans IF you have any further problems to do the other suggestions, I am no longer having problems.

I have done multiple full scans with Trend Micro & also run 2 other extra removal software programs they provided, as well as several full scans & a flash scan with MBAM. I have spent hours on the phone talking with Trend Micro making sure my Trend Micro Titanium software is correctly configured & have increased it to max security. I have spent hours talking with my hosting company & answered many emails etc etc.

I am feeling quite overwhelmed so is it really necessary to do anymore?

If MBAM & Trend can no longer find anything is it likely there is more there???

I started to do it anyway but my Trend Micro blocked the dss file as being a virus! I don't need any more problems.

So I deleted it.