17 ответов в этой теме

[mondeo1]

Hello

My good friend called me because his Dr.Web Demo-version expired today. He wanted to buy full version. When I arrived to assist him the behaviour of PC was suspicious. How big was our disappointment when we checked the computer with Malwarebytes. MB found 140 items. Really! No viruses or trojans but adware and spyware...

[drumut]

I think this is why we call them antimalware and Dr.Web is an antivirus. On the other hand let me ask you a few questions because i wonder. Has your friend made a complete scan with dr.web before which includes adaware, dialer etc..? Has enhanced mode enabled? Can you send *.ini file of dr.web here.

[HHH]

My good friend called me because his Dr.Web Demo-version expired today. He wanted to buy full version. When I arrived to assist him the behaviour of PC was suspicious. How big was our disappointment when we checked the computer with Malwarebytes. MB found 140 items. Really! No viruses or trojans but adware and spyware...

Please visit http://support.drweb.com/sendnew/

[userr]

mondeo1

MB found 140 items. Really! No viruses or trojans but adware and spyware...

Really? Are they real files, or cookies, traces in Registry, etc. ? Do you have these files? Can you show http://www.virustotal.com/ results ?

[mondeo1]

Hi

I swear! This is a bare fact. I didn't make any picture but i think that Malwarebytes creates some "resume". I am going to visit him tomorrow and i will share this file. If you check Dr. Web´s key functions you will see that Dr. Web should protect you also before adware and spyware. Btw. Malwarebytes doesn't look for cookies.

[userr]

mondeo1
Is there any copy of these malware files? Does MB have some kind of quarantine ?

[Eugeny Gladkih]

Hello

My good friend called me because his Dr.Web Demo-version expired today. He wanted to buy full version. When I arrived to assist him the behaviour of PC was suspicious. How big was our disappointment when we checked the computer with Malwarebytes. MB found 140 items. Really! No viruses or trojans but adware and spyware...

and all of 'em were in `infected' folder, yep?

[mondeo1]

mondeo1
Is there any copy of these malware files? Does MB have some kind of quarantine ?

I hope because after the scan put up the message in "txt" format. Yes, MB have quarantine. But I suppose that default action is "delete" and not "quarantine"...

[mondeo1]

Hi

Here is the report...

Прикрепленные файлы:

•  mbam_log_2009_12_28__15_34_47_.txt   24,76К   122 Скачано раз

[Konstantin Yudin]

Hi

Here is the report...

intresting for me only one file C:\WINDOWS\SYSDLG01.EXE other it's trash.

[mondeo1]

Hi

Here is the report...

intresting for me only one file C:\WINDOWS\SYSDLG01.EXE other it's trash.

Thanks for the reply. And the rest? False positive? I can tell you that the system (WinXP) was slow. Mozilla did not work. After the MB scan was everything OK again.

[mrbelyash]

Hi

Here is the report...

intresting for me only one file C:\WINDOWS\SYSDLG01.EXE other it's trash.

Thanks for the reply. And the rest? False positive? I can tell you that the system (WinXP) was slow. Mozilla did not work. After the MB scan was everything OK again.

Send file C:\WINDOWS\SYSDLG01.EXE in virus laboratory
https://vms.drweb.com/sendvirus/?lng=en

[drumut]

I didn't find any information about SYSDLG01.EXE on internet, i really wonder it.

[C.S.J]

Hi

Here is the report...

intresting for me only one file C:\WINDOWS\SYSDLG01.EXE other it's trash.

wow, alot of trash from MBAM then, i always thought it was a decent anti-malware.

(as a second opinion on-demand scanner i mean)

[mrbelyash]

I didn't find any information about SYSDLG01.EXE on internet, i really wonder it.

download Gmer http://www.gmer.net/gmer.zip
run and find hidden file

[Konstantin Yudin]

I didn't find any information about SYSDLG01.EXE on internet, i really wonder it.

restore file from MBAM quarantine

C:\WINDOWS\SYSDLG01.EXE (Trojan.FakeAlert) -> Quarantined and deleted successfully.

[mondeo1]

I didn't find any information about SYSDLG01.EXE on internet, i really wonder it.

restore file from MBAM quarantine

C:\WINDOWS\SYSDLG01.EXE (Trojan.FakeAlert) -> Quarantined and deleted successfully.

why?

[Dr33]

To send it to Dr Web Lab