Attention MalwareDefender users - I need help!

Discussion in 'other anti-malware software' started by bellgamin, Jun 9, 2014.

Thread Status:
Not open for further replies.
  1. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    I recently installed MalwareDefender.

    Today I finally got around to doing my routine weekly check of my system files so as to detect any significant changes. As is to be expected, I found some new files put there by MalwareDefender. However, I also found a new system file that I cannot directly relate to MalwareDefender. That file is:

    hobpephe.sys

    On my XP system it is located at C:\WINDOWS\system32\drivers\hobpephe.sys.

    I Google-searched hobpephe.sys. RESULT: "Your search - hobpephe.sys - did not match any documents."

    I scanned the file with Avast & VirusTotal. Both said it's okay. Even so, I would like to find out if this file is a component of MalwareDefender.

    REQUEST: If you are a user of MalwareDefender, PLEASE check and see whether hobpephe.sys is on your computer.
     
  2. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Can you share the MD5 of the file and the properties of the file? It sounds like it very well could be one of MalwareDefenders randomly generated SYS files but I am not sure it been forever since I used MD.
     
  3. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    MD5 = 62EB760FB6FE72AE0500C6FB42EC8979. 258,392 bytes. Signer 360.cn, dated Jan. 9, 2012.
     
  4. Ibrad

    Ibrad Registered Member

    Joined:
    Dec 8, 2009
    Posts:
    1,949
    Yeah 360.cn is a MalwareDefender file. I cant find any hits online so it has to be randomly named.
     
  5. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Agree! Thanks.
     
  6. Windows_Security

    Windows_Security Registered Member

    Joined:
    Mar 2, 2013
    Posts:
    3,081
    Location:
    Netherlands
    When I remember correctly, there is an option in the settings to switch on/off the random name assignment of this driver.
     
  7. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Thanks Kees. I found the option per your comment. I opted to not switch it off.

    I can't stop wondering if I should have installed SystemSafety Monitor vice MD. Problem is, I think MD is better but I am not adept at configuring it. OTOH, I DO know how to configure SSM, but I don't think it's as powerful a HIPS as is MD. Which is preferable, I wonder: MD weakly configured or SSM strongly configured?? :oops:
     
  8. Minimalist

    Minimalist Registered Member

    Joined:
    Jan 6, 2014
    Posts:
    5,067
Loading...
Thread Status:
Not open for further replies.