Jump to content

wolf_b

Members
  • Posts

    8
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Tested Malwarebytes with an infected file: WPA_Kill.exe Trojan.Siggen3.47407 It does not detect this Trojan.
  2. Now I repeated the monitoring with process monitor and let it more time watching. So it showed that Malwarebytes opened the file, sorry for my last posting! That was in error. The only complaint I have is that malwarebytes does not list the files scanned and that it makes no difference in the final message: Malwarebytes has finished scanning your computer. If only one file was scanned this message is misleading.
  3. This is the last scan result: ((It did not post the screenshot.)) Malwarebytes Anti-Malware www.malwarebytes.org Scan Date: 10.08.2014 Scan Time: 08:58:45 Logfile: Administrator: Yes Version: 2.00.2.1012 Malware Database: v2014.08.07.01 Rootkit Database: v2014.08.04.01 License: Free Malware Protection: Disabled Malicious Website Protection: Disabled Self-protection: Disabled OS: Windows 7 Service Pack 1 CPU: x64 File System: NTFS User: Wolf Scan Type: Threat Scan Result: Completed Objects Scanned: 1 Time Elapsed: 0 min, 24 sec Memory: Disabled Startup: Disabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Enabled PUM: Enabled Processes: 0 (No malicious items detected) Modules: 0 (No malicious items detected) Registry Keys: 0 (No malicious items detected) Registry Values: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Folders: 0 (No malicious items detected) Files: 0 (No malicious items detected) Physical Sectors: 0 (No malicious items detected) (end) I see in this log, the object scanned is only one! But it does not tell, which object has been scanned.
  4. Hi, I have tested it with Process Monitor: it shows that the file to be scanned is not opened by Malwarebyte. The only command that contains this file (CAPTURE88 QVC 2.AVI) is the following: C:\Program Files (x86)\WinRAR\RarExtLoader.exe "C:\Program Files (x86)\WinRAR\RarExtLoader.exe" RarLdrTitle252730480#RarExtMapFile252730480 Date & Time: 10.08.2014 08:58:29 Event Class: File System Operation: QueryOpen Result: SUCCESS Path: M:\Public Videos\CD\CD-R5\CAPTURE88 QVC 2.AVI TID: 5700 Duration: 0.0000118 CreationTime: 08.08.2014 13:21:20 LastAccessTime: 08.08.2014 13:21:20 LastWriteTime: 27.09.2001 13:09:30 ChangeTime: 08.08.2014 13:31:33 AllocationSize: 5.722.112 EndOfFile: 5.722.072 FileAttributes: A I think, malwarebytes should open this file also and there should be an appropriate command. Furthermore, Windows event viewer reports an error: Log Name: Application Source: Application Error Date: 10.08.2014 08:58:48 Event ID: 1000 Task Category: (100) Level: Error Keywords: Classic User: N/A Computer: Wolf-PC Description: Faulting application name: mbam.exe, version: 1.0.0.532, time stamp: 0x53518532 Faulting module name: QtCore4.dll, version: 4.8.4.0, time stamp: 0x51352df8 Exception code: 0xc0000005 Fault offset: 0x001256a3 Faulting process id: 0x4fc Faulting application start time: 0x01cfb46882331499 Faulting application path: C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe Faulting module path: C:\Program Files (x86)\Malwarebytes Anti-Malware\QtCore4.dll Report Id: c66a95a8-205b-11e4-9bae-50465d082d91 Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Application Error" /> <EventID Qualifiers="0">1000</EventID> <Level>2</Level> <Task>100</Task> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2014-08-10T06:58:48.000000000Z" /> <EventRecordID>25325</EventRecordID> <Channel>Application</Channel> <Computer>Wolf-PC</Computer> <Security /> </System> <EventData> <Data>mbam.exe</Data> <Data>1.0.0.532</Data> <Data>53518532</Data> <Data>QtCore4.dll</Data> <Data>4.8.4.0</Data> <Data>51352df8</Data> <Data>c0000005</Data> <Data>001256a3</Data> <Data>4fc</Data> <Data>01cfb46882331499</Data> <Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe</Data> <Data>C:\Program Files (x86)\Malwarebytes Anti-Malware\QtCore4.dll</Data> <Data>c66a95a8-205b-11e4-9bae-50465d082d91</Data> </EventData> </Event> So, there is probably a bug in Malwarebytes new version. It is too easy to say, the system is infected and the software does not run correctly!!! Where did you locate the infection in my logs posted?
  5. Hello, Sorry, I have already made a scan few days ago and removed 3 possibly unwanted Programs. However, if it is infected anyway, malwarebytes should run in the way it is designed or there is a bug in the new version! :angry2:
  6. Hello, installing 2.0.2.1012 new did not change anything. Addition.txt FRST.txt CheckResults.txt
  7. The context menu is available but it does not scan anything. Only the main screen of MBAM opens. New version 2.0.2.1012.
  8. It is always written so. What forum shall I post in???
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.