MSVBVM60.DLL not found and MB cannot open or run

[MySickComputer]

I think I've got a pretty bad zero access root kit or something like http://forums.malwarebytes.org/index.php?showtopic=20639

Turned on PC today and add the the MB alerts going crazy.... long story short I have just recently been able to gain access to the web again using dial-a-fix and others which has probably hosed my PC for good. I cannot access firefox browser or system restore. Please help or at least confirm I need to wipe the hard drive.

[exile360]

Greetings,

This issue was the result of a major false positive we had earlier today which has now been corrected. You should restore everything from quarantine in Malwarebytes Anti-Malware. Please refer to this post for detailed instructions, including a link to a tool which will manually restore the files from quarantine for you if Malwarebytes Anti-Malware fails to run.

[MySickComputer]

Thank you, I will give this a try.

[exile360]

Thank you, I will give this a try.

You're welcome. Good luck. I hope that all goes well.

[MySickComputer]

btw, I have XP and have restarted a multitude of times.I got into safe mode, and ran the dffsetup-mss32 but keep having the MSVBVM60.DLL error again when attempting to finish. Also having other dll errors pop up when trying to open hijackthis and firefox. System Restore is inoperable too.

[exile360]

Please try the following if you can get the file downloaded to your affected PC:

Use the Malwarebytes Anti-Malware False Positive Fix Tool:

• Make certain you are logged in as an administrator
  
• Download the Malwarebytes Anti-Malware FP Fix Tool from here and save it to a convenient location such as your desktop
  
• Extract all of the files to a folder and run RunThis.bat NOTE: Windows Vista, Windows 7 and Windows 8 users must right-click on the file and choose Run as Administrator and click Yes or Continue to any User Account Control prompts
  
• Restart your system and verify that it is now working properly
  

If you continue to have trouble, please contact Support directly via this link and they will assist you further.

Thanks

[MySickComputer]

I have Anti-Malware FP Fix Tool running right now, it has been going for about 5 minutes. How long should it take before it finishes?

[MySickComputer]

Please try the following if you can get the file downloaded to your affected PC:

Use the Malwarebytes Anti-Malware False Positive Fix Tool:

• Make certain you are logged in as an administrator
  
• Download the Malwarebytes Anti-Malware FP Fix Tool from here and save it to a convenient location such as your desktop
  
• Extract all of the files to a folder and run RunThis.bat NOTE: Windows Vista, Windows 7 and Windows 8 users must right-click on the file and choose Run as Administrator and click Yes or Continue to any User Account Control prompts
  
• Restart your system and verify that it is now working properly
  

If you continue to have trouble, please contact Support directly via this link and they will assist you further.

Thanks

Well it finished running after about 35 minutes and on the reboot everything is pretty much back to normal. Windows defender claimed it had 3 new dll Trojans which I quarantined. MB is back but not enabled. Is it safe to enable it now?

[John L. Galt]

Befpore enabling, run an update on it and make sure the definition is 2013.04.16.xx - then you can enable it.

[AdvancedSetup]

You can also uncheck the automatic quarantine. Then it would alert you and ask you what you want to do. I would open the program and check the Quarantine tab again and make sure no files are left if there are then try again to restore those.

Then start running and testing other programs you have and make sure they seem to run okay as well.

[MySickComputer]

Do I need to restore all quarantined files or just some of them?

[John L. Galt]

I, luckily, only had 31 items left in Quarantine after I realized what had happened and killed the first flash scan. I just went and verified each file was in the correct location manually, and then when shadow (?) gave me the OK (or was it Mainard) I deleted the items in the quarantine. Just for posterity's sake, though, before I deleted them I used the MBAM fix tool that support made first.

[RCR]

Hi All:

I'm a newbie to the forum and was affected yesterday with the false positive. I was able to boot in safe mode and downloaded the fix from Malwarbytes. I could not use explorer as it would not open in safe mode, so I used Chrome for the download.

I seemed to restore all my files when I hit restore all but the quarantine items did not disappear. They flashed once and all remained. When I rebooted to windows all my programs and applications now seem to work without pop-ups, but when I open malwarebytes and go to quarantine all items are still there (ie: "Trojan Download....) There is presently 117 items. I figured I would wait for another update that would maybe remove these items from the quarantine folder (even though they seem to be returned). I' a little leary of hitting delete all as I'm not sure of what would happen.

Thanks

Bob

[John L. Galt]

Hi, bob, I sent you a reply to your PM. I think it shows that you have PM notifications turned off so you may not know that I did.

Those that are still in the quarantine are duplicate listings - if you pick those files and go to the path listed where they should be located, you should see that they are, in fact, restored. Once you've verified a file has been restored, you can then delete that item in the quarantine.

For your sake, don't take a gamble and assume they are all restored and hit delete all - yes, 117 files is a lot, but if even one of those is a critical system file, you'll spend 5 times as much time reinstalling Windows and all your apps as you will verifiying those 117 files. Trust me.

I also still suggest that you open a ticket with the support channel.

[MySickComputer]

You can also uncheck the automatic quarantine. Then it would alert you and ask you what you want to do. I would open the program and check the Quarantine tab again and make sure no files are left if there are then try again to restore those.

Then start running and testing other programs you have and make sure they seem to run okay as well.

I have 921 files in Quarintine, mostly system32 dlls.

Is there anything MB can do to help know what is what?

[AdvancedSetup]

@MySickComputer

Please see the post here for help with this if needed.

If you're still up and running then do not reboot. From the quarantine tab select the Restore All button. Some of the files may not be able to be restored depending on the OS and other issues.

Otherwise please follow the directions from this post or let us know what additional issues you're having trying to follow those directions.

http://forums.malwarebytes.org/index.php?showtopic=125136

Thanks again

[MySickComputer]

@MySickComputer

Please see the post here for help with this if needed.

If you're still up and running then do not reboot. From the quarantine tab select the Restore All button. Some of the files may not be able to be restored depending on the OS and other issues.

Otherwise please follow the directions from this post or let us know what additional issues you're having trying to follow those directions.

http://forums.malwar...howtopic=125136

Thanks again

I did "Restore All" in regular mode but none of them were restored. I have done both of the fixes in that post. Running XP and have rebooted numerous times with no hiccups, just can't figure out this 921 files quarantined issue. I have not enabled MB protection. MB version says "Build Date 4/4/2013 11:50 am"

[AdvancedSetup]

In some cases it's unable to restore some files depending on location and file permissions. Please try starting your applications and make sure all of them run as expected. Check for updates to your antivirus as well as Windows updates. Make sure you create a new System Restore point and if all still seems okay go ahead and clear the quarantine folder if you like but there is nothing wrong with leaving the files there for a few days just to make sure.

[MySickComputer]

In some cases it's unable to restore some files depending on location and file permissions. Please try starting your applications and make sure all of them run as expected. Check for updates to your antivirus as well as Windows updates. Make sure you create a new System Restore point and if all still seems okay go ahead and clear the quarantine folder if you like but there is nothing wrong with leaving the files there for a few days just to make sure.

It is not allowing any of these 921 quarantines to be restored. Assuming I am understanding what restore actually does, shouldn't they vanish from quarantine after being restored? Can I just leave all 921 dlls in quarantine if everything else is working fine? Is restore the same as "clear"?

[AdvancedSetup]

Yes, you can leave them there for now. Then test out your system for the next week and make sure you don't run into any unexpected issues and if all is still good next week then go ahead and clear out the quarantine files.