Infected, but not getting cleaned.

[Christian]

Hi,

 

I keep getting popup warnings from MBAM saying that "rubyw.exe" is trying to connect to a malicious address and is blocked and I'm contantly infected with "PUP.Optional.BabylonA" and similar. MBAM keeps removing them bu they keep coming back the next day. I am wondering if this is related to the "rubyw.exe" warnings. I have searched for "rubyw.exe" and found several of them here:

 

C:\Users\XXXXX\AppData\Local\Temp\ocr207A.tmp\bin\rubyw.exe
C:\Users\XXXXXAppData\Local\Temp\ocr8574.tmp\bin\rubyw.exe
C:\Users\XXXXXX\AppData\Local\Temp\ocrB598.tmp\bin\rubyw.exe
C:\Users\XXXXXX\AppData\Local\Temp\ocrF131.tmp\bin\rubyw.exe

 

I have tried to delete them but not been able to. I'm told they can't be deleted. I have tried an Unlocker program which claims to be able to delete them during a reboot, but they are still there.

 

Any advice would be appreciated, I am running Windows 7 x64

 

 

 

[Firefox]

Hello and Welcome to Malwarebytes

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

[Christian]

Hello and Welcome to Malwarebytes

Being that you are probably infected, feel free to follow the instructions below to receive free, one-on-one expert assistance in checking your system and clearing out any infections and correcting any damage done by the malware.

Please see the following pinned topic which has information on how to get help with this: Available Assistance for Possibly Infected Computers

Thank you

 

Thanks. I am using and owning PRO but can't find my order # since it's a long time since I purchased MBAM. I do have my registration information though. Is there a way I can get hold of my order # so I can ask for PRO support?

[AdvancedSetup]

You can submit it to the help desk and they'll assist you with looking it up.