Error code 6

[OceansEdge]

I t was suggested in the Malwarebytes Anti-Malware Help forum that I post my problem here for specific help..

 

Since the new release...

Fixed the issue yesterday with the "Malicious Website Protection" being disabled with a reinstall

 

This morning I'm getting an Error code 6 - right at the very end of the scan

 

Have gone through the prescribed steps -

Removed MBAM and done a clean reinstall - still getting the error code 6

 

Have run the Diagnostic scans and attached them here

 

It was suggested from the logs that I do in fact have an infection

 

Thank you for your assistance

 

Ocean's Edge

 

CheckResults.txt FRST.txt Addition.txt

[Maurice Naggar]

Hello Oceansedge,

 

I will be helping you, going forward from this point.

 

When you  have a chance, let's please give this a try.

Start the Anti-Malware program. Don't do anything just yet. But click on Settings icon up on the top bar and then select History settings on the left.
Then look at the line tagged as "Help fight malware by anonymously providing historical information" and UN-check the box if it is selected.

Once done, give One try to do a Threat scan with the Anti-Malware program. Scan icon >> Threat scan.

Please let me know if that has helped / how it went.

 

Later on, I will ask you to attach a few scan logs and protection logs for review and further analysis.

Regards,
Maurice

[OceansEdge]

Well nope - no help there, same result as before, right at the very end, after the scan is complete, it still gives an 'error code 6'

 

[Maurice Naggar]

Set Windows to show all files and all folders.
Press and hold Windows-key+E key on the keyboard.  This will start Windows Explorer.
from the Windows Explorer menu options, select Tools, then  Folder Options, and then select VIEW Tab and look at all of settings listed.

"CHECK" (turn on) Display the contents of system folders.

Under column, Hidden files and folders----choose ( *select* ) Show hidden files and folders.
Next un-check Hide protected operating system files.
 

I would like to get the latest Scan and protection logs from this system, for review.

from this folder C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes Anti-Malware\Logs

 

protection-log-2014-10-15.xml

 

protection-log-2014-10-16.xml

 

mbam-log-2014-10-16 (......) .xml

 

and make a reply with those as attachments.

Thanks.

Please keep having lots of patience, as this is still a bit of a mystery.

 

[OceansEdge]

No worries, I'm happy for the help...

mbam-log-2014-10-15 (10-47-29).xml

mbam-log-2014-10-16 (01-51-54).xml

mbam-log-2014-10-16 (02-12-00).xml

mbam-log-2014-10-16 (12-38-28).xml

protection-log-2014-10-15.xml

protection-log-2014-10-16.xml

[Maurice Naggar]

Thank you for the logs.

Close all of your open program windows, saving any of your open work documents, if any.
This next procedure will do a system restart when it finishes.

Download TFC by OldTimer to your desktop
http://oldtimer.geekstogo.com/TFC.exe

Please double-click TFC.exe to run it. (Note: If you are running on Vista or Windows 7, right-click on the file and choose Run As Administrator.)

It will close all programs when run, so make sure you have saved all your work before you begin.
Click the "Start" button to begin the process. Depending on how often you clean temp files. Let it run uninterrupted to completion.
IF prompted to Reboot, reply "Yes"

Once done, give One try to do a Threat scan with the Anti-Malware program. Scan icon >> Threat scan.

 

b) if it still has the same "error code" then
restart Windows into Safe mode.
• A description of the Safe Mode Boot options in Windows XP
Select an option when the Windows Advanced Options menu appears, and then press ENTER. When the Boot menu appears again, and the words "Safe Mode" appear in blue ...
http://support.microsoft.com/kb/315222

Then do a Threat scan in Safe mode and tell me the results.

When done, then restart back into normal mode Windows.

 

 

C) Information:  Was the program just upgraded or installed on the 15th?

Was it a in-place upgrade ?  or had you done a brand new install?

Regards,

[OceansEdge]

will do all of the above...

 

was an automatic upgrade overnight on the 14th - then when having problems on the 15th

Fixed the issue yesterday with the "Malicious Website Protection" being disabled with a simple reinstall which fixed that problem,

But then the error code 6 thing came up and I was instructed to do a clean install - so I ran the clean install protocol

[OceansEdge]

results:

a) - same as above - error code 6 -right at the end of the scan

b) - safe mode - same result - still 'error code 6" - right at the end of the scan

(although I did notice in safe mode 'real time protection' was turned off)

[Maurice Naggar]

By the way, is Safe mode there is no internet connection nor does it load all drivers.

 

Lets get back to normal mode Windows.

Lets give this one try:

Please download MiniToolBox, save it to your desktop and run it.

Checkmark the following boxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.

 

[OceansEdge]

heh.. I'm game if you are...

 

Result.txt

[Maurice Naggar]

These steps are for  member Oceansedge only. If you are a casual viewer, do NOT try this on your system!

 

Hi Oceansedge,

 

There are about 4 or so very important communications ( windows) services either awol or not starting, which ( needless to say) are show-stoppers.

I wonder if by any chance anyone ran some sort of "cleaner" tool or so called optimizer tool ?

( 1 )
This will make a backup copy of the registry, just for safe-keeping.
1. Go Here and download ERUNT and Save it to your Desktop
http://dundats.mvps.org/Files/erunt-setup.exe

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts
(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start "ERUNT"
(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup
(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked
6. Press "OK"
7. Press "YES" to create the folder.

( 2 )

Now I would like for you to save the file attached XPSERV.zip to your system.
Then un-zip it  ---extracting the content to your system.
There will be a XPSERV.bat  there, which is a batch scrip file to get some services to normal defaults.

This will restart Windows at the end ( after it has run in a command prompt window).
So be sure to Close any and all opened work documents beforehand.

Double click on XPSERV.BAT to start the run.

( 3 ]
After Windows is restarted:

 

Please click Start > Programs > Accessories, select Command prompt.

Type each the following and press ENTER-key after each line.

netsh winsock reset

netsh int ip reset

When done restart the computer

 

 

I would like for you to start the program.  Please look at the Dashboard screen.  Does it have the green-color bar with the check-mark "Your system is fully protected" ?

Does the top bar on the window show version 2.0.3.1025 ?    { you can also check Settings >> About button }

now, click on the **My Account** icon at the very top bar.   Does that show license state as "Licensed" ?  
let me know about all those

Click the Settings icon >> then Detection and Protection
are the 2 protections on for Malware protection + Malicious website protection ?    

Please let me know if you have any questions and tell me how it went.

XPSERV.zip

[OceansEdge]

Hurmmmmmm

the only cleaner tools run were the ones I've done today with you (and earlier with the remove malwarebytes) ... getting a bit late this evening ... I will have my live-in tech support guru computer god look at this in the morning and report back.

[Maurice Naggar]

Hi Oceansedge,

Ok.  Take your time.  Let me know after. 

[OceansEdge]

Just to give you a quick update...

 

Windows did a XP-Pro update last night overnight w/reboot figuring as your last post was about windows files - I figured I'd try a scan after the security update.

 

It ran fine no error code after the windows update

 

I admit I was a tad trepidatious about your proposed solution .... not to be disparaging, but if that many critical windows files were missing, I'm guessing I'd probably have other symptoms and problems than a simple malwarebytes error code at the end of a scan.

 

And as we'd now gone past the simple turn this off / try this / send this scan log stage - I figured I'd best get my own tech support here to take a look before we went any further.

 

He agreed it sounded a bit odd - to have that many missing files - and was more comfortable using his own tools
(I'm sure you're very nice and very good - but you are still a random body on an internet forum - a good forum and a good body but still nothing like the experience of he who does the machine maintenance ) And every tech geek has his own favourite tools.

Just to cover our bases - he ran a system mechanic professional scan - which did have some problems with some registry entries - and did a back up and then clean up of the registry files.

Anyway to cut a long story short

Windows Update cleared up the problem with the error code 6
System Mechanic run AFTERWARDS did find some issues and a 'repair' was run
There was aoparently one issue with a malwarebytes anti-malware registry entry

I've attached the logs from system mechanic - which may or may not be helpful/educational for you - but it doesn't cost anything to share the knowledge.

Thank you for your help, I think we're probably all good now. I'll let you know if anything else goes pear shaped.

 

Thanks
OE

 

registry 20141017.xml security 20141017.xml

[OceansEdge]

And just for giggles - the protection log from after I ran it problem free this morning

 

after the windows update, but before system mechanic

 

protection-log-2014-10-17.xml

[Maurice Naggar]

Hi,

Thanks for the protection log.   Yes, once you got database version 2014.10.17.4  at your 2014-10-17T08:58:08.031250-03:00

all thereafer is Good.

 

I am very glad to know that Windows Update run was all good.  A up-to-date Windows o.s. is a must for the base foundation for any Windows system.

I am glad that the "error code 6" after scan is now gone.

I truly believe that this cleared up just after today's database update.  See the top sticky note on this forum.

As to System Mechanic, I honestly could not tell you what it did.  However, I do not recommend that people use it for "registry optimizing" since it can be over-aggressive in its cleanup routines --- as in causing Windows installer service to not be in place after the run, and in future causing users issues in exactly Windows updates.

Not saying it is the case here, on this box.  But from past experience both here on this forum and also many posts on Microsoft support Answers Windows Update forum, this very same utility was traced to being the origin of failing Windows Update.

 

All that, does not matter.  What does count, and Kudos, is that the "code 6" is gone.

 

Did you do a Scan run since this morning?

 

I also honestly want to point you to this

IF you must stay on Windows XP, then please be sure to read and apply the suggestions by Susan Bradley
Securing XP PCs after Microsoft drops support
http://windowssecrets.com/top-story/securing-xp-pcs-after-microsoft-drops-support/

[OceansEdge]

Excellent point - it may well have been the latest data base update that squared everything away as well.
It may be a combination of factors - Windows Updates, with Database updates ....

Yes, I do am glad the error is gone.
The system mechanic logs are a bit vague - but not looking for an explanation - just shared them in case they might have been any general use to use
(as the specifics of my problem have been resolved)

I appreciate the advice regarding System Mechanic - and I'll pass it along, but heh but like I said -every tech geek has his/her own favourite tools, tips, tricks and debuggers - I expect he's gonna continue to keep this one in his toolbox.

 

And I appreciate the sharing of the article, but in this case, I'm gonna have to respectfully quibble about it, if I may be so bold...

"But those are rare exceptions. By and large, there’s no compelling reason to stick with XP — and, as noted above, there are important reasons not to."

There are all sorts of compelling reasons I stick with XP - not the least of which is cost.

"Disable Web browsing: After support ends next April, consider reconfiguring Windows XP to block its access to the Internet. (Remember: You’ll no longer need IE or Windows Update for system updates from Microsoft.)"

This is in fact BAD advice - as MS is continuing to issue security updates (as last night's update proves), they're not doing so as regularly, however - as they were required to continue support for financial institutions etc - they have been releasing them system wide (after all they have them they might as well) - there is simply no GUARANTEE they'll continue to update. And as you say, "an up to date windows system is a happier windows system.

The other advice? Avoiding IE, keep you anti-malware packages, and virus protections, and bootable virus scans up to date, and watch where you click and what you do on the Web, and keeping software up to date - always good advice/common sense for ANY system. As are backup strategies.

The other suggestions regarding hardware upgrades and ram aren't really about keeping XP any safer, just running better.

No, it's not always about embracing change, it's not always "if it's newer it must be better", it isn't always, and Windows Vista, 7 and 8 ... really weren't better. (Yes, we have windows Vista and 7 machines in the house and after a year of running 7 I gave it to my daughter and went and completely rebuilt my XP-Pro machine - I know I know I'm a troglodyte, heck I'd still be running 2KPro if I could - now there was OS gold! I suspect you don't wanna know about the NT4 machine I'm building *snicker*) Hopefully MS will improve the problems they created with those OS'a with 10 (I'm hoping and watching, but a bit dubious still). However, OS debates aside... sometimes it's "if it ain't broke, I don't need to fix it", I don't need the latest, I need systems that'll do the work I need/want them to do.

So nothing new here - and the only really new advice is bad advice.

 

In the end, I've not had issues in the past, and with continued common sense I expect to be running XP Pro problem free for some time to come.

Thanks for all your help,
OE

 

P.S. ran the scan again this afternoon while reading the article and typing this, and we are indeed still problem free  protection-log-2014-10-17.xml

[Maurice Naggar]

You are very welcome.  All is well that ends well.

The Protection logs entries are normal.  It does show succesful scan with 0 detections of malware.  And the database updates are coming thru fine.

 

I wish you the best.

[Maurice Naggar]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.