Possible infection won't let me start MBAM and Chameleon fails

[sseth]

Hello, I need some help. I am new to this board.

 

I noticed in the last few days that my Malwarebytes program (which I have used for years without any problems, registered user) was starting to show a notification stating that my website protection was disabled.

 

I was able to run the program and I tried to enable the website protection but it was not removing the notification. Then my Windows went to a blue screen error message and I had to restart Windows.

 

Now I am not able to open MBAM at all and it no longer automatically boots up when I restart. I tried Chameleon but it was not able to update the program or launch the program.

 

I then tried uninstalling MBAM completely and downloaded a fresh copy of Chameleon. It installed Malwarebytes (with plenty of runtime errors throughout the install process) and scanned through my system but still failed to open the MBAM program. It still will not open when I click on the icon.

 

I have not noticed any other programs running improperly and have not experienced any browser hijacks or other system errors.

 

My Windows 7 is updated and I also have Avast Antivirus installed. I ran a scan with that and it found nothing (I realize viruses and malware are different categories of infection but thought I would try anyway)

 

I do have the HijackThis program and have run a scan and saved the log file but I am not sure what to do next or what to try next.

 

Any help would be appreciated.

 

 

[TwinHeadedEagle]

Hello,
    
 
They call me TwinHeadedEagle around here, and I'll be working with you.
 
     
    
Before we start please read and note the following:

• Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
• Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
• Stay with me to the end, the absence of symptoms doesn't mean that your machine is fully operational.
• Note that we may live in totally different time zones, what may cause some delays between answers.
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything unexpected happens, please stop and inform me!
There are no silly questions. Never be afraid to ask if in doubt!
 
 
 
  Rules and policies
 
We won't support any piracy.
That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!
The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!
 
Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.
 
 
 
 
 

Please download Farbar Recovery Scan Tool and save it to your desktop.
 
Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[sseth]

Thank you for taking the time to help me TwinHeadedEagle. I much appreciate it!

 

I have downloaded the tool, run the scan, and attached the log files.

FRST.txt

Addition.txt

[TwinHeadedEagle]

It looks good from here. Let's try to reinstall MalwareBytes:
 
 
 
Uninstall outdated Malwarebytes' Anti-Malware
 
Please download MBAM-clean and save it to your desktop.

• Right-click on mbam-clean.exe icon and select Run as Administrator to start the tool.
• It will ask you to reboot the machine - please do so.

After that follow my next instructions to download & install the newset MBAM version.
 
 
 
Scan with Malwarebytes' Anti-Malware
 
Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam and select update.
• Once updated, click the Settings tab, in the left panel choose Detctions & protection and tick Scan for rootkits.
• Click the Scan tab, choose Threat Scan is checked and click Scan Now.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

[sseth]

Thanks so much.

 

I downloaded and ran the uninstaller and rebooted the system.

 

I downloaded a fresh copy of MBAM and it installed without any error messages.

 

I went to settings and ticked the rootkit scan

 

I am currently going through the filesystem object scan. So far no detections but it looks like it might take a few hours to finish.

 

Once it has finished I will include the contents of the log file, as you instructed. Will return to this thread in a few hours...

[TwinHeadedEagle]

No problem, keep me updated

[sseth]

Okay.

 

Finished the scan and rebooted. One threat was found and quarantined. Attached the scan log. What comes next?

scan log.txt

[TwinHeadedEagle]

Tell me how is your PC now, it seems clean.

[sseth]

Thanks again for your help, sorry for the delay in replying.

 

My computer seems to be running much faster now. The startup is faster and programs seem to also run faster.

 

I was able to open MBAM and update the program. I also did an MBAM Hyper Scan an no detections were found.

 

It seems like everything is fine now. Thank you!

 

I did have a few follow up questions: 1) What sort of infection did I have and 2) Was it the Farbar program that cleaned the infection? Because it seems like everything got better after I ran the Farbar Recovery Tool. 3) Is it ok to keep MBAM and Avast Antivirus running at the same time, or is Avast even necessary?

 

Thanks.

[TwinHeadedEagle]

Nice to hear everything is working now
 
1. There are no infection on your PC, MalwareBytes probably got corrupted somehow. It happens sometimes, so we reinstalled it and problem is solved.
 
2. Farbar reports you created are looking clean, I do not see signs of infection. I wanted you to run this tool, just to make sure if there is some infection blocking malwarebytes.
 
3. It is OK, but Antivirus is must have.
 
 
 
Glad I could help. We will delete all used tools and I'll give you some tips to harden your security and learn how to protect yourself
 
 

Recommended reading:

 
 
MUST READ - security tips:

• Computer Security - a short guide to staying safer online.

• Simple and easy ways to keep your computer safe and secure on the Internet

MUST READ - general maintenance:

• What to do if your Computer is running slowly?

The Importance of Software Updating:

 

 
In order to stay protected it is very important that you regularly update all of your software. Cybercriminals depend on the apathy of users around software updates to keep their malicious endeavor running.
 
Operating systems, such as Windows, and applications, such as Adobe Reader or JAVA, are used by tens of millions of computers and devices around the world, making them a huge target for cybercriminals. Downloading updates and installing them can sometimes be tedious, but the advantages you get from the updates are certainly worth it.

• How to configure and use Automatic Updates in Windows
• How to update Java
• How to update Adobe Reader

Recommended additional software:

 
 
TFC - to clean unneeded temporary files.
Malwarebytes' Anti-Malware - to scan your system from time to time in search for malware.
Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
McShield - to prevent infections spread by removable media.
Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
FiheHippo.com Update Checker - to keep your programs up-to-date.
Adblock - to surf the web without annoying ads! 
 
 

Post-cleanup procedures:

 

 
Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report. You do not need to attach it.

The tool will also record healthy state of registry and make a backup using ERUNT program in %windir%\ERUNT\DelFix
Tool deletes old system restore points and create a fresh system restore point after cleaning. 
 
 
 

My help is free for everybody.

If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:

Thank you!

 
 
Stay safe,
TwinHeadedEagle  

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!