Jump to content


Photo

What is this new startup program? REGSVRMODE?


  • Please log in to reply
8 replies to this topic

#1 wado

wado

    New Member

  • Members
  • Pip
  • 4 posts

Posted 01 December 2010 - 02:43 AM

Upon installing the newest version of MBAM, I was notified by WinPatrol that I had a new, run once startup program named "C:\Windows\is-MAQE8.exe /REG /REGSVRMODE"

Can you please clarify what this is and why it is here? And is it safe?

Thanks.

#2 noknojon

noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 6,090 posts
  • Gender:Male

Posted 01 December 2010 - 04:12 AM

Hi and Welcome -
I have spent over 30 mins searching for this item , but I have not yet found any related match -
Please disable your Antivirus , remove your copy of the program , reinstall and run a Quick Scan to see if anything is found -
To Fully Remove and Reinstall a Fresh New Copy of Malwarebytes - Read Carefully
Windows XP:
  • Click on Start and select Control Panel
  • Open Add/Remove Programs
  • Uninstall Malwarebytes' Anti-Malware
  • Restart your computer very important !
  • Download and run mbam-clean.exe from Here
It will ask to restart your computer, please allow it to do so, very important
After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from Here

Windows Vista and Windows 7:
  • Click on the Start button and select Control Panel
  • Click on Programs and Features
  • Uninstall Malwarebytes' Anti-Malware
  • Restart your computer very important !
  • Download and run mbam-clean.exe from Here
It will ask to restart your computer, please allow it to do so, very important
After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from Here

Note: You will need to reactivate the program using the license you were sent via email if using the Paid version only
Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now reset any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications.
You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it.


Thank You - ;)
Just another private helper .......................... The answer is always 42, or Reboot
If you are waiting for an answer Press F5 ................. you may have one waiting for you ........

#3 screen317

screen317

    MBAM Sentinel

  • Moderators
  • PipPipPipPipPipPip
  • 19,486 posts
  • Gender:Male
  • Location:New Haven, CT

Posted 01 December 2010 - 04:23 AM

I think something similar has been brought up and someone commented that the file in question was part of the installer..
Chris Fistonich
Research Team

Posted Image

Follow us: Twitter, Become a fan: Facebook

#4 noknojon

noknojon

    you know why ---

  • Honorary Members
  • PipPipPipPipPipPip
  • 6,090 posts
  • Gender:Male

Posted 01 December 2010 - 04:30 AM

The REGSVRMODE section is a part of some installers , and as above , it may be part of V1.50 installer - (Not my department) I cannot find this item still -
Reinstall with the method I left (if you wish) or wait and see if it is only the one instance -

Thank You -
Just another private helper .......................... The answer is always 42, or Reboot
If you are waiting for an answer Press F5 ................. you may have one waiting for you ........

#5 wado

wado

    New Member

  • Members
  • Pip
  • 4 posts

Posted 01 December 2010 - 08:12 AM

I can confirm that if I go to the properties of this .exe and go to "Digital Signatures", there is definately a digital signature from the "Malwarebytes Corporation".

Are you sure this is not supposed to happen? I do not see reinstlaling the program as a way to find out what this is all about. I am more interested as to why this is here in the first place. If it has a Digital Signature from the Malwarebytes Corporation, then surely you must know why this is here?

Thankyou for your help and anything further would be great.

#6 wado

wado

    New Member

  • Members
  • Pip
  • 4 posts

Posted 01 December 2010 - 08:13 AM

Keep in mind that the .exe is named "is-MAQE8.exe"

#7 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,016 posts
  • Gender:Male

Posted 01 December 2010 - 12:08 PM

The is represents InnoSetup, the type of installation package that we use. Often there will be several such files which are used for registering our exe's and dll's and also replacing files on reboot that were in use when an upgrade install is being performed (ie, installing 1.50 over a previous version).
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#8 wado

wado

    New Member

  • Members
  • Pip
  • 4 posts

Posted 01 December 2010 - 06:00 PM

Okay, but what is MAQE8.exe? And what does the /REG /REGSVRMODE after it mean?

#9 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,016 posts
  • Gender:Male

Posted 01 December 2010 - 07:06 PM

That's just a file name, it can't have the same name as the file it's going to replaced and must be renamed after reboot to overwrite the in-use file. As for /reg /regsvrmode, that means it's being registered, the way an exe or dll is registered upon installation.
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users