Crimsoncricket
-
Posts
35 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by Crimsoncricket
-
-
On 5/12/2018 at 7:50 PM, Madeline6 said:
I don't blame you for not wanting to download anything from Cnet, I wouldn't either! I suggest that you download the free version of Revo Uninstaller from its own site:
https://www.revouninstaller.com/revo_uninstaller_free_download.html
Sadly the only download links there seem to go through Cnet and rackcdn.com. It's a shame, as Revo Uninstaller did sound like a promising option.
-
21 minutes ago, Madeline6 said:
Eventually I resolved this by uninstalling MBAE completely. I didn't use the Clean_mbae option, but uninstalled it by using Revo Uninstaller Free which gets rid of all traces of whatever you're uninstalling, including leftover folders and registry entries. I'd downloaded the new version here:
https://malwarebytes.app.box.com/s/bg0dpoeyrw35d1e4jvjs7urin499knsp
That's for v1.12.1.81, but it's the same place as I used for the previous version.
Thanks for the advice. I downloaded my version from https://malwarebytes.box.com/s/bg0dpoeyrw35d1e4jvjs7urin499knsp. I looked into Revo Uninstaller, but the only download options I could find were through cnet (no thank you) and rackcdn.com (which brings up some worrying results when I Googled it). Do you know of another way I can download it? Alternately, does anyone know what I should look for and remove manually after going through the standard uninstall process?
-
I followed the instructions in this forum's "Read Me First" thread and installed Malwarebytes Anti-Exploit 1.12.1.81 (after uninstalling the previous version using the Control Panel and running clean_mbae). I'm on a 64 bit computer running Windows 7. After installing, the program icon did not appear in my system tray and the program refused to open when I tried accessing it through "All Programs." After stopping mbae.exe in Task Manager, I went to Services to try manually starting it. This is the message I got:
"Windows could not start the Malwarebytes Anti-Exploit Service service on Local Computer. Error 1053: The service did not respond to the start or control request in a timely fashion"
I rebooted and still had no luck. I went back to Services and tried refreshing Malwarebytes Anti-Exploit. Nothing. Trying to start it through services resulted in a different error message:
"Windows could not start the Malwarebytes Anti-Exploit Service service on Local Computer. Error 2: The system cannot find the file specified"
I'm stumped and have attached the following to aid in technical support:
-
I'm a Windows 7 user on a 64 bit system. I've had MBAE flake out on me before, but usually a reboot or uninstalling (and running clean_mbae prior to reinstalling) fixed it. But neither worked today. I even tried downloading a different version from Bleeping Computer, but the system tray icon vanished once I put my cursor on it after the installation finished!
I tried activating it manually using Services, but I got the following message when I clicked "Start":
"Windows could not start the Malwarebytes Anti-Exploit Service service on Local Computer. Error 2: The system cannot find the file specified"
What should I do now?
-
Everything seems okay. Thanks for all of your help!
-
-
I did what you said and Malwarebytes ran without a problem. Do you want the "mb-clean-results.txt" log as well? I have a few other questions too. Will this version of Malwarebytes expire and require the purchase of a subscription? Should I delete and reinstall Malwarebytes Anti-Rootkit to see if it runs without issue now?
-
Thanks! I got the "Error: Malwarebytes is unable to load the Anti-Rootkit Driver. Error code:20026. Do you want to continue the scan without anti-rootkit support?" message during my first attempt to run the Malwarebytes scan with the rootkit scanning option enabled. Attempting to continue the scan would result in me being brought back to the dashboard and I was only allowed to see the scan progress on that screen. I could only run scans in a normal manner and get logs by disabling the rootkit option. Here are all the logs:
-
I noticed the files Roguekiller detected are linked to Trendmicro's "Housecall" on demand scanner. Will removing them prevent me from using that program in the future?
-
-
I can't find the fixlist.txt attachment in your message. Could you please try posting it again so I can follow the rest of your instructions?
-
Hi kevinf80,
Thanks for clearing that up. I've previously only seen forums ask for attachments in situations where only the moderators can access them and was confused. Here are the requested scan logs:
-
I'm running Windows 7 Home Premium on a 64 bit desktop. While trying to perform some scans, Malwarebytes Anti-Rootkit Beta v1.09.3.1001 failed to scan and gave me this error message: "The system volume seems inaccessible or encrypted." I tried rebooting and installed the latest updates, but no luck. Since I have Malwarebytes Free Version 2.2.1.1043, I tried enabling rootkit detection. But the scan failed and displayed an error message which read "Error: Malwarebytes is unable to load the Anti-Rootkit Driver. Error code:20026. Do you want to continue the scan without anti-rootkit support?" Upon completion of the scan, I got another message: "SDK Scanning Error: 20026".
Searching the forum archives for that error code found cases where turning off Bitlocker resolved the issue, but I don't have that program. I don't have any encryption enabled and even tried temporarily disabling Avast to see if there was a conflict. There wasn't and I'm wondering if some sort of rootkit or other infection is to blame.
Also, does attaching scan logs make them visible to everyone or can only moderators access them?
-
It looks like I have posted this in the wrong area, as my confidence about a lack of infection has dropped. I'm now moving my issue to the "Malware Removal for Windows" section where it belongs.
-
I've tried updating MBAR and am still having this issue. I've run ESET and some other scanners and it doesn't look like this is due to an infection. How can I get this program to actually scan again?
-
Try turning off your antivirus program and then running Adwcleaner. I had a similar issue with mine suddenly treating Adwcleaner as a false positive.
-
I'm having the same issue as the poster in this thread and can't get MBAR to scan. I've tried updating the program and rebooted my computer, but each scan attempt fails and I get a message that says "The system volume seems inaccessible or encrypted. Scan can't continue." How can I resolve this?
-
1 hour ago, thisisu said:
Hi Crimsoncricket,
No it's not an infection. Think this is simply Mozilla's trash folder
Thanks for clarifying that for me. I was confused since JRT has never emptied that folder in any other scans I have done.
-
I downloaded and ran the latest version of JRT (8.1.3.0) today and found the following listed among the usual assortment of deleted temp files:
Successfully deleted: C:\Users\CrimsonCricket\AppData\Roaming\Mozilla\Firefox\Profiles\oclu93b1.default\extensions\trash (Folder)
Is this some sort of infection? It did not reappear when I rebooted and ran another JRT scan.
-
I ran Adwcleaner today and it detected the following:
HKLM\SOFTWARE\Classes\CLSID\{62BE5D10-60EB-11D0-BD3B-00A0C911CE86}
I tried looking it up online, but couldn't find any exact matches. So is this a false positive or a brand new threat?
-
I sent you the logs in an private message with the subject line "FRST logs." I look forward to hearing what you have to say about them.
-
16 hours ago, pondus said:
Remove “Ads by SearchScopes” virus (Easy Removal Guide) > https://malwaretips.com/blogs/ads-by-searchscopes-removal/
I had ran what they suggested and was told I was clean both before and after JRT removed that key. I did some more research online and it seems like "SearchScopes" isn't always malware according to https://technet.microsoft.com/en-us/library/cc721975(v=ws.10).aspx. I wonder if this has anything to do with my having to reinstall avast the day before I first noticed the issue. It is possible I forgot to uncheck something during the process. Did anyone else experiencing the issue do a similar reinstall beforehand?
-
Sometimes JRT Version: 8.0.9 (09.30.2016) will delete the following registry key:
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{815BDD98-12E6-49EC-9F07-0D457FAE7A95}
I first noticed this on November 12. I ran a few random test scans and this didn't reoccur until the 18th. This hasn't happened again when I ran another test scan a few days ago. I haven't been able to find much about that key online. It might be some sort of Amazon-related preset, but I'm confused as to why it returned. Is this a false positive or should I be more concerned about this?
-
Thanks for getting back to me. I'm not 100% sure when JRT closes by itself, but I think it was when it got to "Shortcuts." I'll keep testing and let you know if it vanishes at some other stage. I don't have any other programs open and I usually only run JRT once or twice a week. Obviously that number went up as I try to figure out what's going on.
Malwarebytes Anti-Exploit refuses to run
in Anti-Exploit Beta
Posted
Thanks for the additional suggestions! I'll keep those in mind if somebody from the MBAM team doesn't chime in soon. In fact, the only reason I haven't tried something like this yet is because I want to see if they need any more logs.