Malwarebytes will not run + more - HJT logs inside

[freddie112]

Hi all,

My problems are:

1) These programs don't run - Malwarebytes, Spybot Search & Destroy, Firefox (FF runs only in safe mode), Internet Explorer 8 (crashes periodically)

2) Getting redirects with google searches.

What I have done so far:

1) Updated and did a full scan using AVG 8.5

2) Updated and did a full scan using Ad-aware

Let me know if you need any more information.

Please help me fix my problems.

My Hijackthis Log:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 7:19:17 AM, on 4/4/2009

Platform: Windows Vista SP1 (WinNT 6.00.1905)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Safe mode with network support

Running processes:

C:\Windows\Explorer.EXE

C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe

C:\Windows\system32\wbem\unsecapp.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Windows\system32\igfxsrvc.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://www.toshibadirect.com/dpdstart

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

*.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

R3 - URLSearchHook: Yahoo!

[freddie112]

anybody?

[AdvancedSetup]

It looks like you may have word wrap enabled in Notepad. Please turn off word wrap.

Disable the Spybot Tea Timer - DO NOT continue until you've disabled the Tea Timer

Disable Teatimer

First step:

• Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
• If you have the new version 1.5, Click once on
  Resident Protection
  , then Right click the Spybot icon again and make sure
  Resident Protection
  is now
  Unchecked
  . The Spybot icon in the System tray should now be now colorless.
  
  
• If you have Version 1.4, Click on
  Exit Spybot S&D Resident
  
  

Second step, For Either Version :

• Open Spybot S&D
• Click
  Mode
  , choose
  Advanced Mode
  
  
• Go To the bottom of the Vertical Panel on the Left, Click
  Tools
  
  
• then, also in left panel, click
  Resident
  shows a red/white shield.
  
  
• If your firewall raises a question, say
  OK
  
  
• In the
  Resident protection status
  frame,
  Uncheck
  the box labeled
  Resident "Tea-Timer"(Protection of over-all system settings) active
  
  
• OK
  any prompts.
  
  
• Use
  File, Exit
  to terminate Spybot
  
  
• Reboot
  your machine for the changes to take effect.
  
  

Then take a look here and see if this helps.

Potential Malware infection issues to review

• MB won't run(Fix) - Total-Security (FakeAlert)
• MBAM wont run (Fix) - av360 (Fakealert)
  
• MBAM wont install or will not run. - CLB Rootkit driver=TDSS/Seneka/GAOPDX/UAC
  

If it does work and you can get MBAM to run then please run the following.

Update and Scan with Malwarebytes' Anti-Malware

• Start MalwareBytes AntiMalware (Vista users must Right click and choose RunAs Admin)
  
• Please DO NOT run MBAM in Safe Mode unless requested to, you MUST run it in normal Windows mode.
  
  • Update Malwarebytes' Anti-Malware
  • Select the Update tab
    
  • Click Update
    

  [*]When the update is complete, select the Scanner tab

  [*]Select Perform quick scan, then click Scan.

  [*]When the scan is complete, click OK, then Show Results to view the results.

  [*]Be sure that everything is checked, and click Remove Selected.

  [*]When completed, a log will open in Notepad. please copy and paste the log into your next reply

  • If you accidently close it, the log file is saved here and will be named like this:
    
  • C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
    

Then post back the MBAM log and a new Hijackthis log.

[freddie112]

I turned word wrap and teatimer off. I can't open Spybot neither Malwarebytes. When I doubleclick on their icons nothing happens. What should I do now?

[AdvancedSetup]

Did you try the suggested methods here: http://www.malwarebytes.org/forums/index.php?showtopic=12709

[AdvancedSetup]

Please post a status update. Do you still need further assistance?

[AdvancedSetup]

Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.