exile360

Alright, I've got an idea. Go to the folder NeroPreview and right click on the default folder and click Scan with Malwarebytes' Anti-Malware and tell me if it scans it successfully or not.

I would try installing Malwarebytes' Anti-Malware http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.html Update it and run a quick scan and it should get rid of it. To make sure, after it removes it, reboot and do another quick scan to verify.

Could be because of UAC. Go to Computer (formerly My Computer in XP) and right click on your C drive and click Properties. Go to the Tools tab and under Error Checking click the Check Now button, a UAC alert will come up, just click Continue. Once the little Check Disk window comes up make sure that there's a check mark next to Automatically fix file system errors and click on Start. Another window will pop up telling you it can't be run because it's in use and will present the option to schedule it when the computer is restarted, click the Schedule disk check button. Save anything you're working on and reboot. After you reboot the disk check will run, go ahead and log in after it's done and try running the full scan again.

Are you on XP or Vista? edit: Found this on the web, might be helpful, give it a try and keep us posted: Runtime error 50003 A runtime error 50003 indicates that there is a file conflict. There are likely two different programs on the system which use two different versions of the same dll or ocx file. To rename DLL and ocx files please Click on Start, choose Find(or Search) files or folders. Ensure that "Look in:" is looking on the C drive. Under "Named:" type the name of one of the below files and click Find Now. comctl32.dll comdlg32.dll The only files that you will need to be concerned with are those located in the folder C:\Windows, C:\Windows\System, or C:\Windows\System32. Please note the size of the file and the date that it was modified. Then Right click on the file and choose rename. Rename the file, and add ".old" to the end of the name. ( For example Comctl32.ocx will become Comctl32.ocx.old ). It is important to rename the file in case it is ever necessary to reinstall it. This can be the case for example if another program receives the runtime error 50003. In this case, look up the old file and rename it back to its original name. Once a file has been renamed, please reinstall the software. The correct version of the file that the program needs to run will be installed on your system. After the installation, the program should launch. If it does not, then there is another file which is causing the conflict.

Well, in the meantime can I get some more info? Are you running Vista 32 bit or 64 bit? What other security software do you have installed? Are you able to complete a quick scan with Malwarebytes' or does that freeze as well?

OK, thanks for the info, I was just checking because some others have had issues with ZA and Malwarebytes'. I'm not sure what might be the cause so I'll wait and let one of the experts help you out. Sorry I wasn't more helpful.

Hello and welcome to the forum. Do you use Zone Alarm firewall?

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. Good luck and safe surfing.

Well, at least it's working. I look forward to hearing back from you.

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I realize that without an internet connection some of the steps will be impossible, just do what you can and post the logs using a USB flash drive if you have one. Good luck and safe surfing.

I'm sure as long as you're only doing it to the copy on YOUR machine, then there should be no problem with it, just keep in mind of course that if you use a tool like reshacker etc to do it (which you would pretty much have to except for the shortcuts to the program) that the devs won't support it if it causes problems.

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Welcome to the forum. SwissArmy is one of the drivers MBAM uses in it's scans/removals so if it isn't loading that could be a problem. Since you're on Vista try uninstalling MBAM, reboot and then reinstall by right clicking the installer and clicking Run as administrator to see if that helps. Also, if you're running in safe mode it could be blocking MBAM's drivers from loading as safe mode boots with minimal drivers/services.

The database probably got corrupted when you lost connection. I would simply uninstall MBAM and the reboot/reinstall then update and see how it works. If you still have issues, post here with the errors and someone here should help you out.

Greetings and welcome to the forum. To get you fixed up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Most likely one of the experts can help you out and also make sure your system is totally cleaned up please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing. Honestly, I'd recommend sending a PM to AdvancedSetup or posting in the Malwarebytes' HijackThis forum, but if you're sure you're clean, I'd just send the PM.

Nice one AdvancedSetup, MBAM should absolutely look like one of those, cuz then I would really feel safe!

Excellent! Thanks for the update. I'm glad I could help.

Sweet (but prepare for server overload as Malwarebytes' is always faster).

I appreciate it too, as it means I don't have like 50mb of databases to download each time I install the software.

You are correct that malware is a very general term, however Malwarebytes' is not an antivirus, it is basically a program designed to detect and remove infections that most antivirus programs tend to miss or are unable to remove. You should absolutely have an antivirus software along with a good firewall and of course a good antispyware/antimalware app like Malwarebytes'. If you want programs that are low on resource usage some good AV's would be Kaspersky and Avira Antivir (just use one of course), and for antispyware/antimalware: Malwarebytes' (of course) and SUPERAntiSpyware. If you really wanted a "suite" or all-in-one solution, I can't say that I can recommend any of them, because if you think about it you're relying on one company, one group of investigators to positively identify every single piece of malware on the internet at any given time, and that just isn't going to happen, that's why I believe the layered approach is always better. I'm sure you've heard the old saying "jack of all trades, master of none", that's how I see all-in-one security suites, they just can't detect everything on any given day.

The database version should always increase, but for the reasoned I mentioned previously, the number of fingerprints may increase or decrease.

The only question that's stupid is the one you let go unasked. Your curiosity and attention to detail are admirable and the users here in my experience are very patient and helpful and more than willing to answer any questions (that includes the developers as well as they are very open with us).

Unfortunately, you can expect more of the same in the future, these infections are ever increasing in complexity and are targeting the tools to remove them. I would recommend since you got rid of the driver for the rootkit that you read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

A very common phenomenon for any scanner when it is under high load/cpu usage etc.