Previously used it, and well, it found ONLY the app itself (Malwarebytes 
Anit-Malware).  That’s partly why I wanted to dissect the app to show those 
parts of it that are hidden or imbedded.

-russ


> On Jul 9, 2017, at 8:21 PM, John Robinson <[email protected]> wrote:
> 
> Can Spotlight find it? 
> 
> Sent from my iPhone
> 
>> On Jul 9, 2017, at 7:56 PM, [email protected] wrote:
>> 
>> Well, can’t find anything so far…
>> 
>> Macintosh HD
>>> Library
>>>> Application Support
>>>>> Adobe
>>>>> App Store
>>>>> Apple
>>>>> ApplePushService
>>>>> com.apple.TCC
>>>>> CrashReporter
>>>>> GarageBand
>>>>> iLifeMediaBrowser
>>>>> Macromedia
>>>>> ProApps
>>>>> regid.1986-12.com.adobe
>>>>> Script Editor
>>>>> SubRosaSoft
>> 
>> Macintosh HD
>>> System
>>>> Library
>>>>> Accessibility
>>>>> Accounts
>>>>> Address Book Plug-Ins
>>>>> Assistant
>>>>> Automator
>>>>> AWD
>>>>> BridgeSupport
>>>>> CacheDelete
>>>>> Caches
>>>>> Colors
>>>>> ColorSync
>>>>> Components
>>>>> Compositions
>>>>> ConfigurationProfiles
>>>>> CoreServices
>>>>> CryptoTokenKit
>>>>> DirectoryServices
>>>>> Displays
>>>>> DTDs
>>>>> DuetKnowledgeBase
>>>>> Extensions
>>>>> Filesystems
>>>>> Filters
>>>>> Fonts
>>>>> Frameworks
>>>>> Graphics
>>>>> IdentityServices
>>>>> Image Capture
>>>>> Input Methods
>>>>> Intelligent Suggestions
>>>>> InternetAccounts
>>>>> Java
>>>>> KerberosPlugins
>>>>> Kernels
>>>>> Keyboard Layouts
>>>>> Keychains
>>>>> LaunchAgents
>>>>> LaunchDaemons
>>>>> LinguisticData
>>>>> LocationBundles
>>>>> LoginPlugins
>>>>> Messages
>>>>> Metadata
>>>>> MonitorPanels
>>>>> OpenDirectory
>>>>> OpenSSL
>>>>> Password Server Filters
>>>>> Perl
>>>>> PreferencePanes
>>>>> PrelinkedKernels
>>>>> Printers
>>>>> PrivateFrameworks
>>>>> QuickLook
>>>>> QuickTime
>>>>> Receipts
>>>>> Recents
>>>>> Sandbox
>>>>> Screen Savers
>>>>> ScreenReader
>>>>> ScriptingAdditions
>>>>> ScriptingDefinitions
>>>>> SDKSettingsPlist
>>>>> Security
>>>>> Services
>>>>> Sounds
>>>>> Speech
>>>>> Spotlight
>>>>> StagedFrameworks
>>>>> StartupItems
>>>>> SyncServices
>>>>> SystemConfiguration
>>>>> SystemProfiler
>>>>> Tcl
>>>>> TextEncodings
>>>>> User Template
>>>>> UserEventPlugins
>>>>> Video
>>>>> WidgetResources
>> 
>> 
>> 
>>> On Jul 9, 2017, at 6:23 PM, John Robinson <[email protected]> 
>>> wrote:
>>> 
>>> Many times files are in the Library, under Application Support, under the 
>>> name of the software.  I collect data several times a day, its Library, 
>>> Application Support, Investor R/T, Administration & then the files I'm 
>>> looking for.  You can see the file is kept in the catacombs of the 
>>> software.  I would imagine your signature file is stored in a similar 
>>> manner   If you can find it make an alias & put it on your desktop to 
>>> quickly go back to the original.  
>>> 
>>> John
>>> 
>>> Sent from my iPhone
>>> 
>>>> On Jul 9, 2017, at 5:51 PM, R. D. Preston <[email protected]> wrote:
>>>> 
>>>> What I’m using is a freebee version, not a business version.
>>>> 
>>>> Perhaps a different approach?…
>>>> 
>>>> Is there something that will show the various contained components of an 
>>>> app, hidden or otherwise?  The ‘signature’ file in question is what is 
>>>> apparently the part usually updated when Malwarebytes Anti-Malware 
>>>> automatically checks for updates, and so updates the app on the local 
>>>> system.  
>>>> 
>>>> -russ
>>>> 
>>>> 
>>>>> On Jul 9, 2017, at 3:03 PM, John Robinson <[email protected]> 
>>>>> wrote:
>>>>> 
>>>>> Contact the company, often there are “chat” sessions available.  Ask them 
>>>>> if there is a way to capture the signature file within the program, or if 
>>>>> you can simply go to the file (possibly a text file) and open it once a 
>>>>> day to see if any new items appear?
>>>>> 
>>>>> John
>>>>> 
>>>>> 
>>>>>> On Jul 9, 2017, at 2:56 PM, R. D. Preston <[email protected]> wrote:
>>>>>> 
>>>>>> 2nd followup…
>>>>>> 
>>>>>> The trouble with stepping through the movie scan file is that the 
>>>>>> signature file is constantly updated, so there’s always something new in 
>>>>>> the file and only stepping through the scan each time would seemingly be 
>>>>>> the only way to reveal the new ones.
>>>>>> 
>>>>>> Anyone know of a way to (directly) capture the content of this signature 
>>>>>> file?
>>>>>> 
>>>>>> -russ
>>>>>> 
>>>>>> 
>>>>>>> On Jul 9, 2017, at 9:40 AM, John Robinson <[email protected]> 
>>>>>>> wrote:
>>>>>>> 
>>>>>>> Russ,
>>>>>>> If you know when the scan will appear one easy solution would be to 
>>>>>>> start QuickTime, an application that is a part of Apple's operating 
>>>>>>> system.  Under "File" click on new video. You can drag to collect just 
>>>>>>> a portion of your screen or do nothing & all your screen will be 
>>>>>>> recorded.  A small box will appear with a red ball in the center.  
>>>>>>> Press on the red dot when you are ready to record.   When you have 
>>>>>>> captured all you want, to stop the recording look to the very top of 
>>>>>>> your screen, in the header,  will be an icon for QuickTime, click on it 
>>>>>>> to stop the recording.  As soon as the file is saved it will 
>>>>>>> automatically open for you to play, now you can start & stop to read 
>>>>>>> your list. 
>>>>>>> 
>>>>>>> John
>>>>>>> 
>>>>>>> Sent from my iPad
>>>>>>> 
>>>>>>>> On Jul 9, 2017, at 6:16 AM, R. D. Preston <[email protected]> wrote:
>>>>>>>> 
>>>>>>>> Hello,
>>>>>>>> 
>>>>>>>> I use Malwarebytes Anti-Malware for Mac.
>>>>>>>> 
>>>>>>>> When scanning, the app uses a 'signature file’, which contains the 
>>>>>>>> names of the various malware items, and are quickly displayed in the 
>>>>>>>> progress dialog.  These names pass by all too fast to read them all.  
>>>>>>>> Is there a way to ‘capture’ this full file and then be able to 
>>>>>>>> actually read them?
>>>>>>>> 
>>>>>>>> Thanks,
>>>>>>>> -russ
>>>>>>>> _______________________________________________
>>>>>>>> MacGroup mailing list
>>>>>>>> Posting address: [email protected]
>>>>>>>> Archive: 
>>>>>>>> <http://www.mail-archive.com/[email protected]/>
>>>>>>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>>>>>>> 
>>>>>>> _______________________________________________
>>>>>>> MacGroup mailing list
>>>>>>> Posting address: [email protected]
>>>>>>> Archive: 
>>>>>>> <http://www.mail-archive.com/[email protected]/>
>>>>>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>>>>>> 
>>>>>> 
>>>>>> _______________________________________________
>>>>>> MacGroup mailing list
>>>>>> Posting address: [email protected]
>>>>>> Archive: 
>>>>>> <http://www.mail-archive.com/[email protected]/>
>>>>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> MacGroup mailing list
>>>>> Posting address: [email protected]
>>>>> Archive: <http://www.mail-archive.com/[email protected]/>
>>>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>>>> 
>>>> 
>>>> _______________________________________________
>>>> MacGroup mailing list
>>>> Posting address: [email protected]
>>>> Archive: <http://www.mail-archive.com/[email protected]/>
>>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>>> 
>>> _______________________________________________
>>> MacGroup mailing list
>>> Posting address: [email protected]
>>> Archive: <http://www.mail-archive.com/[email protected]/>
>>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
>> 
>> 
>> _______________________________________________
>> MacGroup mailing list
>> Posting address: [email protected]
>> Archive: <http://www.mail-archive.com/[email protected]/>
>> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>
> 
> _______________________________________________
> MacGroup mailing list
> Posting address: [email protected]
> Archive: <http://www.mail-archive.com/[email protected]/>
> Answers to questions: <http://erdos.math.louisville.edu/macgroup/>


_______________________________________________
MacGroup mailing list
Posting address: [email protected]
Archive: <http://www.mail-archive.com/[email protected]/>
Answers to questions: <http://erdos.math.louisville.edu/macgroup/>

Reply via email to