JeanInMontana

This is 1.15. You mean 1.16?

This version is not working for me period. It does seem to update manually the numbers change but no scan will complete and the service will not start. Several users report this same error with the scan, here and here .

I replied in the HJT forum, didn't see this. Panda will not run with Firefox. Most online scans won't because they use ActiveX you must us IE and you must run as an administrator. Seems to be a bug in MBAM right now, I can't get a scan to run and there is another post.

Me too, and the service won't start, manual update worked, but then the error with the scan.

Please follow the instructions for Pre-HighJack This! posting and reply in this thread. Also a link to what ever your referring to in the other forum would be helpful.

Well, if it didn't look like the how to post, most likely you weren't doing the right scan. I made that tutorial with step by step screen shots. Try another scan as you have been told in two replies. Something wasn't right with your Panda attempt. Maybe disable AVG for any scans.

Bugbatter is an excellent helper, however she isn't in that link you posted unless I am blind. I don't see that anyone has responded to you. You are right in sticking with one site or another. I guess it boils down to how long you want to wait for help. That post at Dell is 2 days old and we have a whole new version of MBAM out.

Hi Lessur and welcome to Malwarebytes. Plsease follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936 and start your own topic int that forum someone will be happy to help you.

Hi beversoll I think you should have a total look at your system http://www.malwarebytes.org/forums/index.php?showtopic=2936 follow the instructions there and start a new topic in that forum. Just to be sure.

XP Pro SP2 Not so good here. Two errors on update at scheduled auto update and quick scan. The update was installing the new version as the quickscan on the old version was running. I think it would be good if that didn't happen. Online Armor could also be partially to blame, it just never seems to recognize MBAM service and stops the install until I can get it clicked several times to allow. Then the scan had an old F/P. Malwarebytes' Anti-Malware 1.15 Database version: 834 9:11:05 AM 6/6/2008 mbam-log-6-6-2008 (09-10-58).txt Scan type: Quick Scan Objects scanned: 37630 Time elapsed: 4 minute(s), 45 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 1 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken. Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

This is useless. I really need you to do what has been asked or we close the thread. Follow these directions exactly as they are written and in the order they are written. Make sure your running as an administrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. If you haven't already, please get these programs, update and run a complete scan removing all items found. Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode [b/]link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Please run a quick scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply. Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum. Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This! You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth. I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said. Be patient and persistent. These things can take time and many procedures.

Hi AngerSaxon and welcome to Malwarebytes. Wow, impressive amount of nastiness has been removed and some dating back two years. This system is very outdated. Adobe is 4 versions behind, please uninstall it and get the latest version 8. Also your Java is a known security risk version. You need to uninstall it via Add/Remove programs and delete the program file also. Then go here http://java.sun.com/javase/downloads/index.jsp and install the correct version for your system. Choose the offline installation. You have HJT on the desk top, please move it to Program Files and it's own folder. Run HJT again in scan only mode and put a check next to these items: R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file) O4 - HKCU\..\Run: [PC-Cleaner] "C:\Program Files\PC-Cleaner\PC-Cleaner.exe" hide Now go to Add/Remove programs in the control panel and look for PC-Cleaner. Uninstall it if it's there. Reboot the machine, update MBAM and run another quick scan. Post that log and a new HJT log back into this thread please.

Hi again marilou please follow the instructions I gave you in the other topic.

Thanks for your consideration Rick. I use Avira and SAS is a good program. My point is just having these programs is not enough to prevent. Below is a section of the canned speach I use for closing a HJT thread. If you mean you had the OP use the online analysis of the HJT log, it is not reliable. I don't mean to sound like I'm criticizing your assistance either, it's just I have seen so much of this stuff even as good as MBAM is, rarely is it the only thing needed to clean a system as badly infected as you describe. There is always the risk of root kits without looking for them. Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep Spybot Search & Destroy and always immunize when you update. You will also need at least one other scanning program AVG is good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use. A firewall and antivirus are also essential. The Windows firewall in XP is not sufficient. Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan. SpywareBlaster from Javacool Software WinPatrol by BillPStudios SiteHound by FireTrust RogueRemover hpHosts The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free Also the full protection of MBAM is offered at a very low price. Give it a trial using the link in my signature.

Hi there eason, and welcome to Malwarebytes. Make sure your running as an adminstrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. If you haven't already, please get these programs, update and run a complete scan removing all items found. Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Please run a quick scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply. Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum. Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This! You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth. I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said. Be patient and persistent. These things can take time and many procedures.

Hi flamewalker and welcome to Malwarebytes. Thanks for the compliment on MBAM. We are all proud as punch of our baby. MBAM doesn't go after tracking cookies and SBS&D does; is that what is being found? As GT500 says if it's something new and undetected please do upload a sample.

Hey I need a Grande or a nap.

I just got updated info that you have been instructed in your other thread so ... I'm backing out of this one. Advanced Setup will continue, he is more up to speed with what's going on at this point. Please follow the instructions he has given you and ignore mine.

Ok sounds good. We will start with an updated MBAM scan and a HJT log. Please post both of those and we'll go from there.

Hi there raiseup151z and welcome to Malwarebytes. Do you get error messages? You must be running as the Administrator. Sounds like the malware may recognize MBAM and is blocking the install. Try renaming it to raiseup151z.exe and installing in safe mode. I suggest you start a topic in this forum http://www.malwarebytes.org/forums/index.php?showforum=7 follow the instructions in the Pre- HiJack This! posting topic as best you can. There are other tools we can use to clean you to the point of getting MBAM on the system, if renaming won't work.

What's going on with this thread? Do you need help with this still Sandi? Seems you have been deserted, sorry for that.

Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK. Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it. Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep Spybot Search & Destroy and always immunize when you update. You will also need at least one other scanning program AVG is good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use. A firewall and antivirus are also essential. The Windows firewall in XP is not sufficient. Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan. SpywareBlaster from Javacool Software WinPatrol by BillPStudios SiteHound by FireTrust RogueRemover hpHosts The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free Also the full protection of MBAM is offered at a very low price. Give it a trial using the link in my signature. Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Hi marilou please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936 and start a topic in that forum. Someone will be happy to help you.

Hi Rich and welcome to Malwarebytes. Thanks for the recognition to the team. I hope your client was instructed to get a complete analysis to be sure the machine was completely cleaned up and then given instructions on how to prevent reinfection. MBAM does rock but even it does not find all the newest stuff and some things take more than one tool to get all of it. He really should have someone look at the system with a HiJack This log and the scan logs from MBAM and another AV.

Hi Mr Showtime and welcome to Malwarebytes. Your using an outdated version of HJT. I see you have ComboFix? Have you used this tool? Please delete it for now as it will show as a malware program in many scans. This is a powerful tool and should only be used with supervision. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. Please get these programs, update and run a complete scan removing all items found. Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time. Open SB S&D Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck number 2.. Leave number 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Also please update MBAM and scan again with it using the quick scan Post the logs from the MBAM scan please, along with a log from this program HiJack This! Describe the symptoms your having.