Re: My Experience With MalwareBytes

[Leythos]

In article <vjfbi4h7g3mkjv0sjkicqjqffmfpcrtrb3@4ax.com>,
georget@hotline.com says...
> I tried their trial anti maleware program. The dang thing tagged a
> whole bunch of window files as being infected with a trojan. When I
> allowed it to "disinfect" the dang files, it screwed up a lot of
> Window XP files. When I rebooted I kept getting error messages about
> incorrect Window image files. Luckily, I always backup with Acronis
> True Image before using new programs. This habit saved my comp from
> disaster.
>
> So much for Malwarebytes crap.

Wrong thinking - the MALWARE SCREWED UP YOUR COMPUTER, MBAM just made
you aware of it.

So, now that you've restored the image, what are you going to do to
clean the malware?

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

[David H. Lipman]

From: <h@h.com>

| On Thu, 20 Nov 2008 15:51:41 -0500, Leythos <spam999free@rrohio.com>
| wrote:

>>In article <vjfbi4h7g3mkjv0sjkicqjqffmfpcrtrb3@4ax.com>,
>>georget@hotline.com says...
>>> I tried their trial anti maleware program. The dang thing tagged a
>>> whole bunch of window files as being infected with a trojan. When I
>>> allowed it to "disinfect" the dang files, it screwed up a lot of
>>> Window XP files. When I rebooted I kept getting error messages about
>>> incorrect Window image files. Luckily, I always backup with Acronis
>>> True Image before using new programs. This habit saved my comp from
>>> disaster.

>>> So much for Malwarebytes crap.

>>Wrong thinking - the MALWARE SCREWED UP YOUR COMPUTER, MBAM just made
>>you aware of it.

>>So, now that you've restored the image, what are you going to do to
>>clean the malware?

| B.S.!

| I had no problems with my machine before installing Malwarebytes. I
| merely installed it out of curiosity.

| I trust my Sunbelt Firewall and Kaspersky AV to keep me reasonably
| safe. I installed Spybot a long time ago for its TeaTimer accessory.
| Tea Timer alerts me when anything tries writing to my registry.

| In light of no problems, plus my defensive programs, why should I
| believe some piece of new junkware that my machine is totally
| corrupted by god knows how many trojans?

| Another thing that bugged me is that piece of junkware tried telling
| me that my Evidence Eliminator and all its plugins were infected.
| Nonsense! Everyone hates what EE did in its spamming days, but that
| doesn't mean the program is - as malwarebytes puts it, a "rogue."

| I've had EE installed since many years ago, almost since its
| introduction. It's a great program - despite what malwarebytes says.
| You can hate their spamming past, but the program should be judged on
| its own merits.

| I just want to warn anyone who intends to install such
| spyware-junkware to backup their disk beforehand.

| I'll now let all the spyware-junkware geniuses take over this thread.

You are suffering from the False Negative syndrome.

Please post the MBAM log.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp

[Leythos]

In article <qspbi4ts75j470rncmr8qaom6utetfnasf@4ax.com>, h@h.com says...
> On Thu, 20 Nov 2008 15:51:41 -0500, Leythos <spam999free@rrohio.com>
> wrote:
>
> >In article <vjfbi4h7g3mkjv0sjkicqjqffmfpcrtrb3@4ax.com>,
> >georget@hotline.com says...
> >> I tried their trial anti maleware program. The dang thing tagged a
> >> whole bunch of window files as being infected with a trojan. When I
> >> allowed it to "disinfect" the dang files, it screwed up a lot of
> >> Window XP files. When I rebooted I kept getting error messages about
> >> incorrect Window image files. Luckily, I always backup with Acronis
> >> True Image before using new programs. This habit saved my comp from
> >> disaster.
> >>
> >> So much for Malwarebytes crap.
> >
> >Wrong thinking - the MALWARE SCREWED UP YOUR COMPUTER, MBAM just made
> >you aware of it.
> >
> >So, now that you've restored the image, what are you going to do to
> >clean the malware?
>
> B.S.!
>
> I had no problems with my machine before installing Malwarebytes. I
> merely installed it out of curiosity.
>

You're seriously mistaken if you think that MBAM actually messed up your
machine. I've run it on close to 200 machines and not had any problems
that could not directly be attributed to the malware corrupting a file.

You've already admitted that it found malware on your machine, so that
means your machine was trashed to start with. I advocate a
wipe/reinstall method of cleaning machines, but I use the various tools
to get them back online long enough to backup files that are then
scanned by other tools - I still wipe the machines.

As for Your entire description and your "assumption", seriously, you're
mistaken if you can't understand how malware can corrupt a system easily
so that when you remove the malware you end up with problems.

What do you suppose happens to file that are part of the OS when they
are replaced with the malware code and not just appended to the code?
What happens with your computer when a critical OS file is deleted
because it's infected? Come on, you've got to understand the basics of
what happens or you're not going to really understand your computer.

So, you said you ran MBAM, it detected malware on your computer, you it
broke things, you said you restored an image and all is happy again....
Sounds like you're still compromised with something you don't see.

You do understand that no single (or even 2 or 3) anti-malware tools
detect everything out there right now, right?

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

[Buffalo]

h@h.com wrote:
[snip]

> I've had EE installed since many years ago, almost since its
> introduction. It's a great program - despite what malwarebytes says.
> You can hate their spamming past, but the program should be judged on
> its own merits.
[snip]

When did you try AntiMalware? What date, aprox.
Like you stated above, about EE "You can hate their spamming past, but the
program should be judged on
> its own merits." perhaps they were false positives.
Why don't you try the latest MBAM and see what it finds? You don't have to
delete anything you find, as you well know.
Post back with the results (the log).
Hell, it won't cost you anything and it could benefit others.
Buffalo

[Leythos]

In article <197ci497cvgpsvsrnf16u3k8sksm1dkcft@4ax.com>, h@h.com says...
> On Thu, 20 Nov 2008 18:05:15 -0700, "Buffalo" <Eric@nada.com.invalid>
> wrote:
>
> >
> >
> >h@h.com wrote:
> >[snip]
> >
>
> >Why don't you try the latest MBAM and see what it finds? You don't have to
> >delete anything you find, as you well know.
> >Post back with the results (the log).
> >Hell, it won't cost you anything and it could benefit others.
> >Buffalo
> >
> I did download the latest version. When I tried updating, it told me
> I had the latest update.
>
> It, and all it's parts, are history since I reloaded a prior image
> back onto my C: drive.
>
> As far as I know, my comp is in fine shape. The Sunbelt firewall,
> along with Kaspersky and Spybot have not once warned me of a problem.
> My comp doesn't act strangely, nor does my firewall let anything out
> or in except the programs I'm using. Everything else is blocked. If
> there were something, wrong, I'd be experiencing strange happenings. I
> ain't. So, I'm not worried about it - no matter what some junkware
> proggy says is wrong.
>
> Until my comp starts showing problems, I'll believe it and my own
> judgment.

And if you check with other tools, since you stated MBAM found
something, you are likely to find out that your Personal Firewall and
your other lack of understanding have left you compromised.

I was on a compromised PC two days ago, nothing the user could tell -
the only way to spot it was a registry entry that kept recreating
itself. MBAM, KAS, SAS, Symantec Corp, McAfee, Sophos, nothing could
remove it, but there were no visible (to the operator) signs of it and
what it was doing. I cloned a known clean machine to that drive and it's
running fine.

So, again, your computer was compromised, you restored and image, you
appear to be unwilling to learn if the restored image was also
compromised.....

--
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
spam999free@rrohio.com (remove 999 for proper email address)

[Buffalo]

h@h.com wrote:
> On Thu, 20 Nov 2008 18:05:15 -0700, "Buffalo" <Eric@nada.com.invalid>
> wrote:
>
>>
>>
>> h@h.com wrote:
>> [snip]
>>
>
>> Why don't you try the latest MBAM and see what it finds? You don't
>> have to delete anything you find, as you well know.
>> Post back with the results (the log).
>> Hell, it won't cost you anything and it could benefit others.
>> Buffalo
>>
> I did download the latest version. When I tried updating, it told me
> I had the latest update.
>
> It, and all it's parts, are history since I reloaded a prior image
> back onto my C: drive.
>
> As far as I know, my comp is in fine shape. The Sunbelt firewall,
> along with Kaspersky and Spybot have not once warned me of a problem.
> My comp doesn't act strangely, nor does my firewall let anything out
> or in except the programs I'm using. Everything else is blocked. If
> there were something, wrong, I'd be experiencing strange happenings. I
> ain't. So, I'm not worried about it - no matter what some junkware
> proggy says is wrong.
>
> Until my comp starts showing problems, I'll believe it and my own
> judgment.

Then again, how about helping others out by installing MBAM , running it and
posting the log of what it finds here.
You don't have to delete anything and then all you have to do is uninstall
it again.
Thanks,
Buffalo

[Dustin Cook]

h@h.com wrote in news:qspbi4ts75j470rncmr8qaom6utetfnasf@4ax.com:

> On Thu, 20 Nov 2008 15:51:41 -0500, Leythos <spam999free@rrohio.com>
> wrote:
>
>>In article <vjfbi4h7g3mkjv0sjkicqjqffmfpcrtrb3@4ax.com>,
>>georget@hotline.com says...
>>> I tried their trial anti maleware program. The dang thing tagged a
>>> whole bunch of window files as being infected with a trojan. When I
>>> allowed it to "disinfect" the dang files, it screwed up a lot of
>>> Window XP files. When I rebooted I kept getting error messages about
>>> incorrect Window image files. Luckily, I always backup with Acronis
>>> True Image before using new programs. This habit saved my comp from
>>> disaster.
>>>
>>> So much for Malwarebytes crap.
>>
>>Wrong thinking - the MALWARE SCREWED UP YOUR COMPUTER, MBAM just made
>>you aware of it.
>>
>>So, now that you've restored the image, what are you going to do to
>>clean the malware?
>
> B.S.!
>
> I had no problems with my machine before installing Malwarebytes. I
> merely installed it out of curiosity.

I am sorry you have had a problem with our software. If you could provide
the log file it generated; or better yet, install it and allow it to run
again, generating a log file, and just don't let it make any changes. I'd
like to see what the issue might be.

> In light of no problems, plus my defensive programs, why should I
> believe some piece of new junkware that my machine is totally
> corrupted by god knows how many trojans?

I wouldn't go so far as to call our software Junkware. Seriously, if you
have a problem, I will do my best to help you fix the issue.

> Another thing that bugged me is that piece of junkware tried telling
> me that my Evidence Eliminator and all its plugins were infected.
> Nonsense! Everyone hates what EE did in its spamming days, but that
> doesn't mean the program is - as malwarebytes puts it, a "rogue."

EE is considered a rogue application yes. We're not the only company that
considers it as such, however.


> I just want to warn anyone who intends to install such
> spyware-junkware to backup their disk beforehand.

I'd like to know why you think MBAM is spyware?


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org