Firefox

When you delete the rules.ref file it should give you an error, then you have go update MBAM so that it will download a fresh copy of the file.

I am glad it worked for you, if you have any other issues or questions don't hesitate to ask.

MBAM_ERROR_LOAD_DATABASE Error.... Please follow the instructions below to correct this error..... Show Hidden Files and Folders in Windows XP: Click Start and select My Computer Click the Tools item from the menu at the top of the window (if you don't see Tools press the Alt key on your keyboard and it will appear) Select Folder Options Click the View tab and make sure Show hidden files and folders is selected under Hidden files and folders Next, uncheck the box next to Hide protected operating system files (Recommended) Then, uncheck the box next to Hide extensions for known filetypes Click Apply then click OK Then go to C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware and delete rules.ref. Once you've done that, start MBAM and when it shows the error and asks to update, let it do so and see if that corrects it. Show Hidden Files and Folders in Windows Vista and Windows 7: Click on the Start button and select Computer Press the Alt key on your keyboard and click on Tools Select Folder Options Click the View tab and make sure that Show hidden files and folders is selected under Hidden files and folders Next, uncheck the box next to Hide protected operating system files (Recommended) Then, uncheck the box next to Hide extensions for known filetypes Click Apply then click OK Then go to C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware and delete rules.ref. Once you've done that, start MBAM and when it shows the error and asks to update, let it do so and see if that corrects it. Reset Hidden Files and Folders in Windows XP: Click Start and select My Computer Click the Tools item from the menu at the top of the window (if you don't see Tools press the Alt key on your keyboard and it will appear) Select Folder Options Click the View tab and make sure Do not show hidden files and folders is selected under Hidden files and folders Next, check the box next to Hide protected operating system files (Recommended) Then, check the box next to Hide extensions for known filetypes Click Apply then click OK Reset Hidden Files and Folders in Windows Vista and Windows 7: Click on the Start button and select Computer Press the Alt key on your keyboard and click on Tools Select Folder Options Click the View tab and make sure that Do not show hidden files and folders is selected under Hidden files and folders Next, check the box next to Hide protected operating system files (Recommended) Then, check the box next to Hide extensions for known filetypes Click Apply then click OK

Hi, and Welcome to Malwarebytes! Sounds like you have a combination of a router hijack (you will have to reset your router back to factory settings), and possibly some infected computers as you mention Antivirus 2010 which is a now Malware threat. Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Being that this is a running in a corporate environment.... Please send an email to Corporate Support Team <corporate-support@malwarebytes.org> with your Cleverbridge order reference number and they will assist you.

MBAM_ERROR_EXPANDING_VARIABLES (0,9) MBAM_ERROR_MISSING_FILE (3,0, mbamswissarmy.sys) The system cannot find the path specified. Here's a fix that exile360 made, it is universal for XP, Vista and Windows 7 and should fix the problem: Note: If using Windows Vista or Windows 7 you MUST right-click on the file and select "Run as administrator". Please copy and paste the following text in the Code box exactly as written into notepad (not wordpad or any other text editor): @color 48 @echo off if exist "%allusersprofile%\Microsoft\Windows\Start Menu" md "%allusersprofile%\Microsoft\Windows\Start Menu\Programs\Startup" if not exist "%allusersprofile%\Microsoft\Windows\Start Menu" md "%allusersprofile%\Start Menu\Programs\Startup" if exist "%appdata%\Microsoft\Windows\Start Menu" md "%appdata%\Microsoft\Windows\Start Menu\Programs\Startup" if not exist "%appdata%\Microsoft\Windows\Start Menu" md "%userprofile%\Start Menu\Programs\Startup" del /f /q %0 Once you've done that click on File and select Save As... In the Save dialogue box click on the drop down menu next to Save as type and select All Files Name the file Fix.bat (the .bat extension is very important) Save the file to your desktop and double click it to run it if using Windows XP. If using Windows Vista or Windows 7 you MUST right-click on the file and select Run as administrator otherwise it will not work. Once that's complete try running Malwarebytes' Anti-Malware again to see if it now works without error or not.

I saw in another thread where this is being looked into, and if you update to the latest definition update it should no longer happen. MBAM and Microsoft will sort it out.

Glad to hear you got it working again.

It is part of the pro version 1.46 is the latest, its part of the scheduler.... How To Use The New Scheduler Once you register your full version make sure you schedule your program for automatic updates and scans..... Have a look at How To Use The New Scheduler

Just to add to this thread, you should change the default password on your routers to avoid being hacked as well. Everyone knows what the default password is on most routers, like linksys, netgear, etc. so hackers target those that have not been changed to something else. By changing your password, it can help prevent these attacks from changing your settings. Also make sure you secure your wireless as well.

Hello and What version of Malwarebytes are you using and is it updated? (current version is 1.46 with database version 4703) What is your OS language set to? What language are you using with Malwarebytes? Please try this to see if it works for you.... Disable Heuristics.Shuriken by following these steps. Open Malwarebytes Go to Update Tab and click on Check for Updates Click on Settings Tab and in that tab click on the Scanner Settings tab Uncheck Enable advanced heuistics enging. (Heuristics.Shuriken) Try your quick scan again and let us know how it goes.

For the sake of fixing this computer, you will need to plug the laptop directly to your router, or the ADSL Modem, the wireless will be fixed a little later after the virus gets removed. YOU are infected therefore you need to seek help from the experts, they will help you with all the issues on this laptop and get it working again, but you need to seek help from the EXPERTS..... ________________________________________________________________________ Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

I am not sure what kind of equipment you have in that office, but you are having DNS issues, if you use a router, you need to check it. That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked. Try this - It is general solution that works most times - You may want to copy/paste this to notepad as you will disconnect from the internet for a while - 1. Very important: First disconnect your computer from the internet. Just Log Off- while you reset the router - 2. Router Reset: Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). 3. Reset the IP/DNS settings of your interent connection: Download this Microsoft Item 4. Flush the DNS cache: Click the Start logo in the bottom left corner of the screen Click on Run or press Windows Logo+R In the command window copy/paste the following: ipconfig /flushdns Then hit enter and a black box will flash . Exit the command window. Thank You - NOTE: If you are using Malwarebytes in a corporate environment, you need to get it licensed as such so you can continue to receive assistance with Malwarebytes then you can contact Corporate support. The free version of malwarebytes is intended for home users. Please send an email to Corporate Support Team <corporate-support@malwarebytes.org> with your Cleverbridge order reference number and they will assist you.

To both Moses and Larry5555 That traceroute log shows a DNS issue, and it's possible that your DNS settings have been hijacked. Try this - It is general solution that works most times - You may want to copy/paste this to notepad as you will disconnect from the internet for a while - 1. Very important: First disconnect your computer from the internet. Just Log Off- while you reset the router - 2. Router Reset: Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). 3. Reset the IP/DNS settings of your interent connection: Download this Microsoft Item 4. Flush the DNS cache: Click the Start logo in the bottom left corner of the screen Click on Run or press Windows Logo+R In the command window copy/paste the following: ipconfig /flushdns Then hit enter and a black box will flash . Exit the command window. Thank You -

You can try a manuel update..... Manual Update of Definition Database If you cannot update the database to the latest version within the MBAM window, you may follow the instructions below and update it manually: ISSUE: I need to get the latest database onto a computer that cannot access the Internet. SOLUTION: You can manually copy the database from a working computer using a flash drive or CD onto the infected PC. Our database file is stored in the following locations. Windows XP and 2000 C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref Windows Vista and Windows 7: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref You can also download a manual update from HERE - ***NOTE: This manual update will always be way behind in version level compared to updates from within the program. **NOTE: Please note though that this should be a last resort and if at all possible you should attempt to download updates from within the program. Once the system is clean and stable again you should update again from within the program.

Here are some steps to diagnose update issues: Step 1 Click on this link and let me know what it says. It should be just a 4-digit number in the upper-left corner. Step 2 Please download and run the traceroute utility at this link. It will run a traceroute to our update servers to see if it can find the connection issue, and then it will write it to a log, and open that log in Notepad when it is done. Please either save the log as a Text File and then attach it to a reply, or copy and paste it into a reply, and I will forward it on to our server guy. Note that it may take several minutes to run, and it may look like it is not doing anything for a few minutes. Normally it takes longer when there are errors that it has to log, but it's rare for it to go more than 10 minutes. Step 3 Please download TCPView from Microsoft at this link. This utility will monitor everything that is accessing the Internet or your local network. All you have to do is run TCPView, and then run Malwarebytes' Anti-Malware and start the update. Watch TCPView to see if mbam.exe shows up in the list. It will be pretty obvious, because it highlights it in green. I need to know what "Remote Address" Malwarebytes' Anti-Malware is trying to connect to. Once it shows up in the list, you can right-click on the line for mbam.exe, and select 'Copy' in order to paste it into a reply. It will tell me what I need to know. Below is an example of what the line you are looking for will look like inside the following code box: mbam.exe:3656 TCP vista-x64:52135 cdn-208-111-168-7.ord.llnw.net:http ESTABLISHED

Hi, and Welcome to Malwarebytes! Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Hi, and Welcome to Malwarebytes! Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Hi, and Welcome to Malwarebytes! Sorry to hear about your infection, more than likely there is some stuff left over from the infection, I would have the experts look at it, they can help you finish the fix. Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

MsBoo, you should not piggy back to the post from AdamL's page, as the infection or problem may not be exactly the same so the fixes may differ, start your own topic following the instruction below, if you can not do any of the steps or unsure of how to do it, state that in your post and the experts will help you. Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Hi, and Welcome to Malwarebytes! You could try loggin into her email account from a known clean computer and change her password NOW! If you feel that the computer may still be infected let the experts take a look at it. Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

@ Haider I did provide a link in post # 5 above..... @ sho-dan, yes it is similar to that one, in essence they do the same thing....

As this is a business..... Please send an email to Corporate Support Team <corporate-support@malwarebytes.org> with your Cleverbridge order reference number and they will assist you.

@ rms59, it could verywell be some rootkit on your computer blocking it..... Since Malwarebytes is one of the best softwares out there to remove infections and Malware, the malware writers are directly attacking MBAM to keep you from removing their malicious software.

charris here is a better set of instructions for you..... Try this - It is general solution that works most times - You may want to copy/paste this to notepad as you will disconnect from the internet for a while - 1. Very important: First disconnect your computer from the internet. Just Log Off- while you reset the router - 2. Router Reset: Next you must reset the router to its default configuration. This can be done by inserting something tiny like a paper clip end or pencil tip into a small hole labeled "reset" located on the back of the router. Press and hold down the small button inside until the lights on the front of the router blink off and then on again (usually about 10 seconds). 3. Reset the IP/DNS settings of your interent connection: Download this Microsoft Item 4. Flush the DNS cache: Click the Start logo in the bottom left corner of the screen Click on Run or press Windows Logo+R In the command window copy/paste the following: ipconfig /flushdns Then hit enter and a black box will flash . Exit the command window. Thank You -