#Mbam offline installer update#

Okay so this gives us the full URL used for the ‘version.check’ page. Hmmm… looked tasty, so I inspected the packet in more detail: I came across several URLs in the output, one of which was:

#Mbam offline installer update#

I used Wireshark to see exactly what was going on when an update was performed in the actual software interface. You are a PC support specialist and like to carry around the latest definition files for portable anti-virus/malware applications on your USB.You want to scan the machine with Malwarebytes but you do not have the latest definitions file… you obviously do not want to connect the machine to the internet in this state who knows what could be transmitted to/fro the machine. You have an infected machine with all sorts of bad things like remote key-loggers etc.Why would one want to manually download the definitions file I hear you ask. (Well, technically they do, however this comes as a 6.5MB file which needs to be installed before being able to download the file (disadvantage for those on-the-go)… also, the file is not updated very often – once a week it seems – See here) One of the annoying things about Malwarebytes though is the fact that they do not offer their definitions files to be downloaded manually. Malwarebytes is no doubt one of the best anti-malware softwares available on the net – I have it as part of my default installation kit when I build/re-build a machine. It will work on any machine with PowerShell v3 and greater. This one is easier to understand and doesn’t require wget.exe. UPDATE 05/2015: See version 2 of the script where I have written it in PowerShell.