Jacktivity

@mountaintree16 Whatever happened to the lowly cd/dvd burner? They still work, just a little slower - and they're compatible with just about everything. When I work on someone else's machine, I depend heavily on my flash drives but I take along a flock of CD's and DVD's (particularly bootable ones) just in case. Can't beat the price either. Even my Lightscribe DVD's only average 37 cents in lots of fifty from Newegg. Yeah, the downside is they go obsolete quickly, but they ARE cheap - even cheaper if you don't use Lightscribe. I just use those because they look professional and are a lot less hassle than the adhesive labeling systems.

Hello cxander and Welcome to Malwarebytes.org If you're having Malware related issues with your computer that you're unable to resolve, see the instructions below to get you fixed up in the Malware Removal HijackThis forum. Please be patient, they may take a day or two to get to you. Lots of other people need help as well. Also read the note in green at the bottom. Please read and follow the instructions provided here: I'm infected - What do I do now? If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested. Please do not post any logs in the General forum. We do not work on any logs posted in the General forum. Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you. Using these other tools often makes the cleanup task more difficult and time consuming. If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved. Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback. NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

@noah It sounds like something is missing that the clean tool is expecting to see and that's why it is failing. If you can, try re-installing MBAM without any updates. Then go through the whole control panel - add/remove programs, uninstall, reboot, clean, reboot, re-install the latest version process like Yardbird outlines in post #2. If it still fails, you can perform a manual deletion of the program but the clean tool is the preferred method so that you don't have to go into the Windows registry. These directions are for XP32. Note that Vista and X64 file locations are a little different. First delete the following three folders C:\Program Files\Malwarebytes' Anti-Malware C:\Documents and Settings\All Users\Application Data\Malwarebytes C:\Documents and Settings\User Name\Application Data\Malwarebytes and two files C:\Windows\System32\Drivers\mbam.sys C:\Windows\System32\Drivers\mbamswissarmy.sys Then click on Start - Run and type in "regedit" without the quotes. When regedit opens, navigate to the two keys below and right click to delete them: HKEY_CURRENT_USER\Software\Malwarebytes' Anti-Malware HKEY_LOCAL_MACHINE\SOFTWARE\Malwarebytes' Anti-Malware NOTE: Be very careful here. You don't want to delete anything else except those two keys or you may mess up your entire Windows installation to the point that it is unable to boot again. When finished, reboot the computer and re-install the program and see if you are able to run updates.

I too, had been having problems updating Avira for the last several days. For the first day, I could at least get to the site and click around OK. Yesterday, even the site was a dog. Today, I got my normal update and all was well. I have received a couple of update letters from Avira this week about engine upgrades so I figure Prairie Dog is most likely right in saying that the servers are just overloaded right now and will be settling back down.

Hi Jace, The developers are looking into this. That entry is normally not there in a HJT log. Take a look at this thread .

@Mikedawc - Here's another possibility - not sure if this is what's going on here with you, but there is a similar thread with UAC problems here . Unfortunately, no one has figured out the answer yet but they are actively working on it.

Hi Mikedawc, No that is not normal. You should not get a UAC pop up from MBAM starting with Windows. Let's try this and see what happens. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel. Restart your computer (very important). Download and run this utility. MBAM-CLEAN.EXE It will ask to restart your computer (please allow it to). After the computer restarts, install the latest version from here Note: You will need to reactivate the program using the license you were sent Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again Another Note: You should be an administrator when you do the install and run in normal mode. I noticed that on the 13th you were in safe mode when you ran the scan. Actaully, MBAM is designed to be run in normal mode as that is when all drivers, services, etc. are loaded. As for the JavaRa log file, it wants to write to the root of C:\. If you are running as a limited user, you probably don't have rights to place files in the root.

Hi Mikedawc, and welcome to Malwarebytes That is very true in general, particularly in the malware removal forum. So it's good for you to ask. In this case though, you are perfectly safe in following AdvancedSetup's instructions for removing and re-installing Java.

Hi Martin Evans, I'm not aware of any problems with SBS 2003. In the event you thought you had a false positive, regardless of the OS, the best thing to do is to choose not to take any action and then re-run a scan in /developer mode, and submit it for analysis in the False Positives forum. Instructions are here. You could also submit the file to Jotti or Virus Total for analysis. Depending on what AV and firewall you use, you may have to set exclusions in those programs so that they and MBAM can coexist peacefully. See this topic for more information.

Hi kens The infection may prevent you from running it, but yes, in general, you can run HijackThis off a USB flash drive. You don't need to run the installer. All you need is the file HijackThis.exe. Be aware that the flash drive itself may become infected when you plug it into the computer. I'm not saying it will, but it is very possible. At any rate, it sounds like you may have to shuttle back and forth between machines for a little while until the infection can at least be knocked down enough to get your Internet connection back. Don't worry too much if you can't get any logs. Just follow the instructions in I'm Infected - What Do I Do Now? and start a new topic in the Malware Removal HijackThis Logs and one of the experts in there will work with you one on one to get this resolved. Please be patient if it takes a day or so for someone to get to you. A lot of people need help and they are very busy in there.

Hi Francis, and Welcome to Malwarebytes. In XP You can copy Rules.ref from C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\ to the same location on the other computers and just overwrite the file. In Vista, the file location is C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\ Note that the Application Data (in XP) and ProgramData (in Vista) folders are hidden by default so you may have to unhide them.

Hi sps72, Please take a look here to see if it gets you going again. If not, please follow the instructions here. If you are unable to post a log, start a new topic in the Malware Removal - HijackThis Logs forum anyway and explain what's been going on.

Hi Erik Heyninck Yes - The MBAM protection module now supports 64-bit, however, the right-click context menu is not implemented yet. Try a fresh install by following these procedures and try it again to see if it updates without the error. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel. Restart your computer (very important). Download and run this utility. MBAM-CLEAN.EXE It will ask to restart your computer (please allow it to). After the computer restarts, install the latest version from here Note: You will need to reactivate the program using the license you were sent Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again

I'm not a big download manager fan but occasionally, you just can't get around using one if a site is overloaded. I've used Free Download Manager in the recent past. It's an open source program with a ton of features and is very configurable. It certainly gets the job done. Might want to at least take a look.

Hi Swagger, There are several ways to do this, but the first is the one I believe you are looking for. The actual service name can be obtained by typing services.msc in Run on the Start Menu and then double clicking the Display Name of the service. That will pop up a dialog box. The name on top is the one you are looking for. It is the service name. The one below it is the display name. Once you know the actual name, you can go back to the command line and run the sc delete and do a reboot. The other way is to run regedit and navigate toHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services then scroll down the left pane, locate the service name, right click it and select delete and do a reboot. The next way is to use HijackThis, if you are comfortable with it, and delete it from there. You could also use Autoruns. Edit: Well, I guess it took me longer to type that than I realized it would. Congrats Swagger.

You're very welcome!

The advice about not fooling with the registry is pretty good advice in general. For this though, I use the advanced mode myself, because I still want to get all those orphans out. One of the first things it will do is create a restore point as long as you don't have that option turned off. Just be careful that you ONLY click on the bolded entries. It will show you a whole section of the registry tree and you don't want to click in the wrong place is all. It will typically find entries in the ARP cache that would otherwise be left, but sometimes you would be surprised what it finds as still left in there. My family likes to try a lot of the one hour game trials at one of the online sites and I typically have to install and uninstall over 20 games a month in addition to regular activities. That also ends up fragmenting the registry so I use NTREGOPT or Sysinternals PAGE DEFRAG to get it all back in order. Here's another little trick to keep in mind if you are uninstalling - open windows explorer to C:\Documents and Settings\ - then perform a search with wildcards (*) for the program you are uninstalling. A lot of the built in uninstallers will leave directories and files somewhere in one of the C:\Documents and Settings\Application Data directories. Sometimes it's in the \All Users and sometimes its in the \username directory. Occasionally, they are in both. I've found that Revo will rarely find those. Nor will it find icons in a folder on the desktop. Also be aware that if you use similarly named programs and decide to uninstall one of them, Revo will very occasionally get mixed up and offer to delete the wrong files - just keep an eye on the directory paths it is pointing to and you should be fine.

Hi Max - Just right click the icon in the system tray and choose start scanner. That will open the gui.

You're Welcome! Please be patient if it takes a day or two for someone to get to you in there. They are pretty busy and a lot of people need help.

Hello Sublime-1 and Welcome to Malwarebytes.org Please see the note in green If you're having Malware related issues with your computer that you're unable to resolve. Please read and follow the instructions provided here: I'm infected - What do I do now? If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested. Please do not post any logs in the General forum. We do not work on any logs posted in the General forum. Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you. Using these other tools often makes the cleanup task more difficult and time consuming. If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved. Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback. There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Please see the note in green.

Hi lonnie, You must have missed the note toward the bottom of that topic. You don't mention it, but did you try to download and run HijackThis?

Hello hogwartsjedi and Welcome to Malwarebytes.org If you're having Malware related issues with your computer that you're unable to resolve. Please read and follow the instructions provided here: I'm infected - What do I do now? If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested. Please do not post any logs in the General forum. We do not work on any logs posted in the General forum. Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you. Using these other tools often makes the cleanup task more difficult and time consuming. If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved. Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback. There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

@srtools1980y and ioni - While I don't know if the copy of Windows Human Bass is using is legitimate or not, it's wrong to automatically assume that someone is a crook just because they have WGA problems or don't want to use it. I for one, do use it and have never had any problems. See this article for example or this There are plenty of others. Just Google wga fail~ or wga hell Edit: Well I see while I was preparing this that Human Bass responded. Still doesn't mean that anyone that doesn't use it is automatically a crook.

Hello bryn7 and Welcome to Malwarebytes.org If you're having Malware related issues with your computer that you're unable to resolve. Please read and follow the instructions provided here: I'm infected - What do I do now? If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested. Please do not post any logs in the General forum. We do not work on any logs posted in the General forum. Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you. Using these other tools often makes the cleanup task more difficult and time consuming. If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved. Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback. There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.