redransom

I know this is an old topic but I have a problem on a clients website today - notjusthockney.info - they are getting people saying it's hacked but it's only a misunderstanding due to it being blacklisted on MBAM Guard. Kinsley

Ok it failed to complete - I can see some of the items were cleared out but not all (even after another reboot). So I have run another scan - to see what other files need removing. Anyway this stalled so I have had to cancel it. Can you let me know what I can do next please as currently the client can still not use their server. Fixlog.txt

Thank you I will have to check first thing in the morning! I did see your private message but didn't want to disturb you considering you are are US based!

Finally managed to get the tool to run - blocked by a process first time it appears. I didnt' get an addition file - I tried to run it again with the file but it's stalled again. FRST.txt

Well this is going real great I guess. No progress after two days. The Farbar application has created the registry but is stuck on the same message and won't go any further. The server is a VPS so I don't have access to go into safe mode / recovery mode or boot from usb. I think I am truly stuffed at this point. Really dont know what else I can do. Kinsley

Well the install of MBAM won't open no matter what I run but it's still there in the background. I did a dump as I was concerned that the Farbar application had hung. Its been running for nearly two hours and is still on the Backing up registry message.

Well how long would you expect it to take? I asked for a dump and the file was 110mb in size. I will restart it as I was under the impression that it would be done in seconds normally?

Ok I'm not able to close MBAM from the task tray as its not there for me when I login to the VPS. I can see in the tasks list that there are: Malwarebtyes Service Amd nothing else runnign but the MBAM software is taking up 9-20% of any memory whilst I am unable to stop it. The server was all ok until I put this s/w on it and so it stands to reason that it has caused the server to unresponsive. Any help would be great in uninstalling it at least? Kinsley

Anyone able to help with this?

Hi I have downloaded the app and started it and it gets stuck on the registry backup - could a Trojan be cayusing the machine to run so slowly nevermind MBAM?

Hi Kevin, It was the Malwarebytes Anti-Malware application which I appreciate is the wrong one now. So, how do I remove it? I can't seem to uninstall it from the Add Programs app on Windows or the Removal App from Malwarebytes. Kinsley

Hi All, I found that when I zipped a file on my server I had a Trojan present in the zip (and so wasn't able to open it), so I installed Malwarebytes on the Windows Server 2016 machine and it stalled on the final part of the installation. This wouldn't finish even though I left it overnight and so I had to end the task and then reboot. When I had rebooted the server was running very slow and it seemed to be down to a bad version of the Malwarebytes application running in te background, so I tried to un-install it only to be told 'Access is denied 5'. So, I downloaded the support tool as suggested on this forum (https://downloads.malwarebytes.com/file/mbst?src=Forums-Automated-Reply) and once I had finally got it onto the server ran it. The application hangs indefinitely on both the logging and the clean options whilst the repair option is greyed out. Does anyone have any suggestions as to how I can disable the application to unstall or how I can get it working again as its making the server unresponsive currently. Many Thanks, Kinsley