juiceinla

Hi again, I finally got MBAM 1.41 to run on my infected laptop (log attached) At the end of my scan it identified about 30 infected files and I hit "remove the files" it began to do so then indicated about 5-6 could not be removed, and asked me to restart my laptop again to remove them. So I did. Before during and after windows was loading I began to get "Bad Image" errors associated with many programs and a dll file "wifufulu.dll". MBAM idenitfied the wifufulu.dll as malware in the scan. I assume this means the trojan/virus was trying to load at start up, and am wondering if that is right, and if so, has MBAM gotten rid of it? here are the files identified in the"Bad image" error: c:/windows/system32/Lsass.exe c:/windows/system32/services.exe c:/windows/system32/wifufulu.dll c:/windows/system32/mbamgui.exe c:/windows/system32/hkcmd.exe c:/windows/system32/igfxtray.exe c:/windows/system32/igfxpers.exe c:/windows/system32/nerocheck.exe c:/windows/system32/syntpenh.exe c:/windows/system32/mcagent.exe c:/windows/system32/WLtray.exe c:/windows/system32/QTTask.exe c:/windows/system32/iTunesHelper.exe c:/windows/system32/Rundll32.exe c:/windows/system32/ctmon.exe c:/windows/system32/adobeupdate.exe c:/windows/system32/reader_sl.exe c:/windows/system32/MBAM.exe is it normal to get this bad image error? Has MBAM been able to clean my laptop or do I need to do more? again, thanks for your help! mbam_log_2009_11_08__11_40_20_.txt

Hi all. Thank you for responding. I am posting here, because I found a way around the error 2 code. I had already read all the posts you suggested in your reply above, so I was preparing to send you hijack logs when I wanted to try and load MBAM again. I tried, got the Error code 2, and then went about removing the program. I went into my c:/programfiles/malwarebyte's Antimalware folder. While in that folder I renamed the mbam.exe file to explorer.exe, and tried to run it from the folder (as opposed to renaming and trying to run from the desktop or start menu) It is running now, without errors. so far. Interestingly I have alread run my mcAfee virus scan, Super anti-malware and hijackthis, but MBAM has found 10 objects infected. this Vundo virus is a nightmare. thanks again.

HI there, the vundo virus (and/or something else) will not let me run the MBAM executable. I have followed several thread instructions here, with no success. I renamed the exe file to "mb.exe", "explorer.exe", and downloaded the program with a pre established random name "4vLV5tnYn.exe". Each time tried to run any of these, I got error code 2. I also get error code 707(3,0)- only with 4vLV5tnYn.exe after each unsuccessful download, I go to add/remove and remove the program to start again and usually reboot (forgot to a couple times). I also had to manually try to remove the failed programs when I got a file in use or protected error in Add/remove. one exe file could not be removed, I tried to remove it manually, and could not do it. I moved the offending file to my desktop and deleted the rest. eventually the file deleted after several reboots then I tried to run the three above mentioned exe. files again same errors I moved the renamed "explorer.exe" file to c:windows/programfiles/malwarebytes Anti-Malware folder- which was empty at the time. Tried to launch from there- unsuccessful. I tried to run mbam-clean.exe and got "SHgetValue failed error 1114" and SHgetValue failed error 0" it won't run. The MBAM version I am trying to run is 1.41, freeware Any other ideas on how to get around the viruses? Thanks!