Firefox

Hi, and Welcome to Malwarebytes! Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Hello and Lets start by checking some settings in your antivirus and firewall settings. Please exclude the following files from your antivirus: Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well For Windows XP: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For Windows Vista or Windows 7: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For 64 bit versions of Windows Vista or Windows 7: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\SysWoW64\drivers\mbamswissarmy.sys Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE from it as well Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site: data-cdn.mbamupdates.com The FAQ contains examples of setting file exclusions for some known AV products Please post back and let us know how it went.

I am glad it worked for you, if you have any other issues or questions don't hesitate to ask.

thanks for that write up and the automated fix..... should come in handy

Hi, and Welcome to Malwarebytes! Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

OK I solved it on the computer I was working on, here is what I did, but it did not work at first. Windows Vista and Windows 7: Click on the Start button and select Control Panel Click on Programs and Features Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here Uninstalled Anti-Virus software (Symantec Endpoint Protection) Searched and cleaned the registry of any values that contained Malwarebytes Restarted Computer Installed fresh copy of Malwarebytes but I again got the same error FIX THAT WORKED! I then thought, lets see what is starting automatically at StartUp so I went to look at the Startup Folder. What I found is that there was no STARTUP folder. (user had deleted it cause it was empty) Being that this was Windows 7 I went to C:\ProgramData\Microsoft\Windows\Start Menu\Programs and I created the folder called Startup. Restarted Computer Tested and error no longer appears At least on the computer I was working on, I think all I did was not really necessary, I believe that just creating the STARTUP folder probably would have corrected the issue. All this done without having to create that new account as well. Hope this helps anyone having this issue.

Hi, and Welcome to Malwarebytes! Please read the following so that you can begin the cleaning process: As we don't deal with malware removal in the General Malwarebytes' Anti-Malware Forum, you need to start a topic in the Malware Removal forum so a qualified helper can help you fix any malware related problems/infections you may have. Please read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. After posting your new post, make sure under options, you select Track this topic and choose Immediate Email Notification, so that you're alerted when someone has replied to your post. One of the expert helpers there will give you one-on-one assistance when one becomes available. Please refrain from making any further changes to your computer (Install/Uninstall programs, use special fix tools, delete files, edit the registry, etc...) unless advised by a malware removal helper. Doing so can result in system changes which may hinder the attempts by a helper to clean your machine. NOTE: Please DO NOT post back to (bump) your topic within the first 48 hours. Replying to your own posts changes the post count and helpers are looking for topics with zero replies. If you reply to your own post helpers may think that you're already being helped and thus overlook your post. If there is no reply from any experts after 48 hours, you can reply to the topic, asking for help again. Or You may send a Private Message to a Moderator asking for assistance. Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or here. Please be patient, someone will assist you as soon as it is possible. PS: Please use the "ADDREPLY" button instead of other ones when you start replying.

Full scans vary depending on how many files you have on your hard drive. To speed up full scans you may try deleting any temp files first, and perhaps running a check disk. Clear Temp Files Using ATF Cleaner: Please download ATF Cleaner by Atribune from here and save the file to your desktop. Close all open internet browser windows Run ATF Cleaner by double clicking it. Once the program opens, click the box next to Select All Note: this will delete all cookies saved by sites that you have visited so if you need to keep any cookies for automatic logins etc then uncheck the Cookies option [*]Once that's all set click on the Empty Selected button and it will remove the temporary files from your system. [*]If you use Firefox or Opera browsers then click the appropriate button at the top of the program and delete the temp files from them as well following the same procedure. Once that's done you may delete ATF Cleaner then do the following: Download CCleaner from here to clean temp files from your computer. Close all open internet browser windows Double click on the ccsetup file to start the installation of the program. Select your language and click OK, then click Next. Read the license agreement and click I Agree. Click Next to use the default install location. Click Install then click Finish to complete installation. Double click the CCleaner shortcut on the desktop to start the program. On the Windows tab, under Internet Explorer, uncheck Cookies if you do not want them deleted. (If deleted, you will likely need to reenter your passwords at all sites where a cookie is used to recognize you when you visit) If you use Firefox or any other Mozilla browsers, the box to uncheck for Cookies is on the Applications tab, under Firefox/Mozilla. Click on the Options icon at the left side of the window, then click on Advanced. uncheck Only delete files in Windows Temp folders older than 24 hours. Click on the Cleaner icon on the left side of the window, then click Run Cleaner to run the program. Caution: It is not recommended that you use the Registry feature unless you are very familiar with the registry as it has been known to find legitimate items for removal, which can cause issues with other programs. After CCleaner has completed its process, click Exit. Thanks

You are quite welcome..... Utilities like that can be dangers....

then undo the changes using tuneup utilities...... I do not like that program, I have had way too many folks get hosed up computer because of its use.... Just my 2 cents

Thanks exile360, I am going to have another go at it tomorrow and see if I find another fix and if I do I will share it, if not then I will just use what you suggested.

We are glad Malwarebytes has helped you eradicate this malicious software. If your current security solution let this infection through, you might please consider purchasing the FULL version of Malwarebytes' Anti-Malware for additional protection.

@ exile360, I tried your seteps in post # 8 above to help a friend out with this issue, it worked like a charm, but then he went back an removed the user I had created and now the problem is back. Any thoughts?

I am glad you got it sorted out, if you have any other issues or questions don't hesitate to ask.

Please try the following to see if it helps: Windows XP: Click on Start and select Control Panel Open Add/Remove Programs Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here NOTE: If you get SHGetValue failed with error code 0, that only means that the tool has nothing to perform, continue on with the next step.... It will ask to restart your computer, please allow it to do so very important After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here Note: You will need to reactivate the program using the license you were sent via email if using the Pro version Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it. Windows Vista and Windows 7: Click on the Start button and select Control Panel Click on Programs and Features Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here NOTE: If you get SHGetValue failed with error code 0, that only means that the tool has nothing to perform, continue on with the next step.... It will ask to restart your computer, please allow it to do so very important After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here Note: You will need to reactivate the program using the license you were sent via email if using the Pro version Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it.

Please try the following to see if it helps: Windows Vista and Windows 7: Click on the Start button and select Control Panel Click on Programs and Features Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here NOTE: If you get SHGetValue failed with error code 0, that only means that the tool has nothing to perform, continue on with the next step.... It will ask to restart your computer, please allow it to do so very important After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here Note: You will need to reactivate the program using the license you were sent via email if using the Pro version Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it. Then Follow these instructions: Please exclude the following files from your antivirus: Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well For Windows Vista or Windows 7: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For 64 bit versions of Windows Vista or Windows 7: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\SysWoW64\drivers\mbamswissarmy.sys Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE from it as well Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site: data-cdn.mbamupdates.com The FAQ contains examples of setting file exclusions for some known AV products Please post back and let us know how it went.

Please exclude the following files from your antivirus: Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude them from it as well For Windows XP: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For Windows Vista or Windows 7: C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\System32\drivers\mbamswissarmy.sys For 64 bit versions of Windows Vista or Windows 7: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref C:\Windows\System32\drivers\mbam.sys C:\Windows\SysWoW64\drivers\mbamswissarmy.sys Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE from it as well Note: Once that's done, please make sure that if either of those programs has any sort of web filter, that you add the following as a trusted site: data-cdn.mbamupdates.com The FAQ contains examples of setting file exclusions for some known AV products Please post back and let us know how it went.

Just to add, you could clear temp files, and also run a disk check.... Clear Temp Files Using ATF Cleaner: Please download ATF Cleaner by Atribune from here and save the file to your desktop. Close all open internet browser windows Run ATF Cleaner by double clicking it. Once the program opens, click the box next to Select All Note: this will delete all cookies saved by sites that you have visited so if you need to keep any cookies for automatic logins etc then uncheck the Cookies option [*]Once that's all set click on the Empty Selected button and it will remove the temporary files from your system. [*]If you use Firefox or Opera browsers then click the appropriate button at the top of the program and delete the temp files from them as well following the same procedure. Once that's done you may delete ATF Cleaner then do the following: Download CCleaner from here to clean temp files from your computer. Close all open internet browser windows Double click on the ccsetup file to start the installation of the program. Select your language and click OK, then click Next. Read the license agreement and click I Agree. Click Next to use the default install location. Click Install then click Finish to complete installation. Double click the CCleaner shortcut on the desktop to start the program. On the Windows tab, under Internet Explorer, uncheck Cookies if you do not want them deleted. (If deleted, you will likely need to reenter your passwords at all sites where a cookie is used to recognize you when you visit) If you use Firefox or any other Mozilla browsers, the box to uncheck for Cookies is on the Applications tab, under Firefox/Mozilla. Click on the Options icon at the left side of the window, then click on Advanced. uncheck Only delete files in Windows Temp folders older than 24 hours. Click on the Cleaner icon on the left side of the window, then click Run Cleaner to run the program. Caution: It is not recommended that you use the Registry feature unless you are very familiar with the registry as it has been known to find legitimate items for removal, which can cause issues with other programs. After CCleaner has completed its process, click Exit. First run this full CheckDisk scan - Cut and paste this code into the Run box - It will restart your computer and run a full 5 stage check - Make sure all other programs are closed first - This takes about 30 mins , so let it run and it will check and repair most items - CMD /C ECHO Y|CHKDSK C: /R | SHUTDOWN /R /T 30 Then run sfc /scannow by using the same method as above - If you have your install CD/DVD place that in and run it while this is running - If there is no improvement then please post back - Thank You -

This should help you with net access Please try this first - STEP 01 Open Internet Explorer Note: It MUST be Internet Explorer, not Firefox, Opera, Chrome or any other internet browser Click on Tools at the top and select Internet Options Note: If you do not see Tools, press the Alt key on your keyboard and it will show up Click on the Connections tab Click on the LAN settings button Under Automatic configuration make sure that the box next to Automatically detect settings is checked, if it is not, then click the box next to it to check it Click on the OK button to close the Local Area Network (LAN) Settings window Click on the OK button to close the Internet Options window Use this diagram as a guide Try updating Malwarebytes' Anti-Malware again and if it does not work then please proceed to Step 02 STEP 02 Disable Internet Explorer Proxy Settings and Reset TCP/IP It is very important that these steps be carried out exactly as shown otherwise the fix will not work. If you have any questions please ask before moving on. Please start Notepad and using your mouse make sure you select and copy all the information below in the Code box into your new document. Then save the file as "fixme.bat" to your Desktop - The .bat extension is important In the drop down box for Save as type: make sure you select All Files (*.*) and keep the quotes on the name as well. Then close the new file. @ECHO OFF reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyOverride /f reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 0 /f reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v GlobalUserOffline /t REG_DWORD /d 0 /f netsh int ip reset resetlog.txt On Windows XP you can double-click the file to run it. On Vista/Win7 you need to Right click the file and choose Run as administrator to run it. With User Account Control on it should ask permission to run it. Click Yes This will flash a black DOS box very quickly and go away, this is normal. Restart your computer now. Launch Internet Explorer and see if you can connect to the Internet. Launch MBAM and check for Updates If you still have issues The instructions are listed below - Do as many as you can and post in the new forum area as listed - As we don't work on Malware removal or diagnostics in the general forums please follow these directions - Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here. One of the expert helpers there will give you one-on-one assistance when one becomes available. After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times - Also add a brief note to the experts as to your problems - Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org Always use the ADD REPLY Tab at the bottom of the page when you reply - Thank You -

Please try the following to see if it helps: Windows XP: Click on Start and select Control Panel Open Add/Remove Programs Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here NOTE: If you get SHGetValue failed with error code 0, that only means that the tool has nothing to perform, continue on with the next step.... It will ask to restart your computer, please allow it to do so very important After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here Note: You will need to reactivate the program using the license you were sent via email if using the Pro version Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it. Windows Vista and Windows 7: Click on the Start button and select Control Panel Click on Programs and Features Uninstall Malwarebytes' Anti-Malware Restart your computer very important Download and run mbam-clean.exe from here NOTE: If you get SHGetValue failed with error code 0, that only means that the tool has nothing to perform, continue on with the next step.... It will ask to restart your computer, please allow it to do so very important After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here Note: You will need to reactivate the program using the license you were sent via email if using the Pro version Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates. Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it.

Great thanks for the info!

The reason you can not connect to the internet now is because you have all those devices with the yellow bubble expecially the one called Ethernet Controller. That is the Network card that enables you go get on the internet. You have to download drivers for those devices (usually from the manufactures web site). If you give us your brand, and model number of computer we can direct you to the right place to download the drivers.

I am glad it worked for you, if you have any other issues or questions don't hesitate to ask.

I am glad it worked for you, if you have any other issues or questions don't hesitate to ask.

yes according to your picture, things seem to be in order....