Jump to content

Unable to run any malwarebytes related software

prstorero

By prstorero
in Resolved Malware Removal Logs

 Share

Recommended Posts

prstorero

prstorero

Posted
Posted

I've been a long time user of malwarebytes, but have recently encountered an issue. I'm no longer able to run malwarebytes anti malware, or anything related to it such as anti rootkit, chameleon, etc. Any time I try and run one of the programs, I get an error message saying "the application was unable to start correctly 0xc0000279". I've been doing some heavy research and the most useful thing I found was another post here on the forums. Since each repair attempt is specific to the user, I couldn't follow everything in that thread. I already ran farbar and have attached the two logs from that below. Hopefully someone can help me resolve this. I've never had to resort to external help like this before, so this will be my first time  :P I should also note that I'm running windows 10 developer preview.

Addition.txt

FRST.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Hello and welome,

 

P2P/Piracy Warning:

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Run FRST one more time, type or copy paste in the edit box after "Search:". wininit.exe

 

Click Search button and post the log (Search.txt) it makes to your reply.

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

Run FRST and press the Fix button just once and wait.

The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Please run a Threat Scan with MBAM.  If you're unable to run or complete the scan as shown below please see the following:

MBAM Clean Removal Process 2x

Follow the relevant steps and ensure to run mbam-clean tool after UNinstalling Malwarebytes.

 

When reinstalling the program please try the latest version from here:

http://www.malwarebytes.org/mwb-download/

Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link

Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.

Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.

Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

Thanks,

 

Kevin

 

 

 

Fixlist.txt

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into.

NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

 

Run FRST and press the Fix button just once and wait.

The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

Next,

 

Please run a Threat Scan with MBAM.  If you're unable to run or complete the scan as shown below please see the following:

MBAM Clean Removal Process 2x

Follow the relevant steps and ensure to run mbam-clean tool after UNinstalling Malwarebytes.

 

When reinstalling the program please try the latest version from here:

http://www.malwarebytes.org/mwb-download/

Right click and choose "Run as administrator" to open Malwarebytes Anti-Malware and from the Dashboard please Check for Updates by clicking the Update Now... link

Open up Malwarebytes > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.

Click on the SCAN button and run a Threat Scan with Malwarebytes Anti-Malware by clicking the Scan Now>> button.

Once completed please click on the History > Application Logs and find your scan log and open it and then click on the "copy to clipboard" button and post back the results on your next reply.

 

Thanks,

 

Kevin

The Fixlog.txt has been attached. MBAM is unable to run with the same error code in the original post, and I also get the same error when trying to run the MBAM Clean Removal Process exe, but the dialog did come up to reboot, so I believe it did actually run. Before the reboot I was getting a constant popup that my recycle bin was corrupted (perhaps due to the farbar). The scan from malwarebytes completed with a PUP for Riot (a software used for optimizing images). I was not able to update the database prior to the scan due to a "unable to access update server" error. The log it produced has also been attached. Though the software actually opens now. So it seems my initial problem is resolved? :)

Fixlog.txt

MBAM Log.txt

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

I`m sort of lost off, you say Malwarebytes will not run, then say your original problem is resolved??

Sorry I was writing the post when the error was popping up for the Clean Removal Process and when the dialog popped up to reboot i grabbed what I already wrote and put it in a text file, rebooted, then continued writing on it without editing out the beginning. It should have been more like below:

 

The Fixlog.txt has been attached. The scan from malwarebytes completed with a PUP for Riot (a software used for optimizing images). I was not able to update the database prior to the scan due to a "unable to access update server" error. The log it produced has also been attached. Though the software actually opens now. So it seems my initial problem is resolved?  :)

 

The part about the initial problem being resolved is referring to the error message that used to pop up saying "the application was unable to start correctly 0xc0000279", which now no longer occurs. It seems doing the Clean Removal Process fixed that issue.

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks for the update, so I assume we can now clean up and close out...

 

Download "Delfix by Xplode" and save it to your desktop.

 

Or use the following if first link is down:

 

"Delfix link mirror"

 

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

 

Make Sure the following items are checked:

 

 


    Remove disinfection tools

 

Now click on "Run" and wait patiently until the tool has completed.

 

The tool will create a log when it has completed. We don't need you to post this.

 

Any remnant files/logs from tools we have used can be deleted…

 

Are we now ok to close out....

 

Kevin..

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Thanks for the update, so I assume we can now clean up and close out...

 

Download "Delfix by Xplode" and save it to your desktop.

 

Or use the following if first link is down:

 

"Delfix link mirror"

 

Double Click to start the program. If you are using Vista or higher, please right-click and choose run as administrator

 

Make Sure the following items are checked:

 

 

 

  •  

       

  • Remove disinfection tools

     

     

 

 

Now click on "Run" and wait patiently until the tool has completed.

 

The tool will create a log when it has completed. We don't need you to post this.

 

Any remnant files/logs from tools we have used can be deleted…

 

Are we now ok to close out....

 

Kevin.

I went ahead and ran that and also checked out the other components of malwarebytes such as anti rootkit and chameleon. Turns out Malwarebytes Anti Malware was the only program that was fixed. Trying to run chameleon gets a similar error as stated in the OP, but with the last three digits being 142 instead. And when trying to run the anti rootkit, I get "error during execution "C:\Users\Username\Desktop\mbar\mbar.cmd" "C:\Users\Username\Desktop\mbar"" these programs not being able to run may not be an immediate issue, but since I've still got this post going, I figure it's best to go ahead and get those resolved if possible. 

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

When you mention the following

 

 

Do you mean you are trying to run MBAR? if so Malwarebytes has to be disabled before MBAR will run...

Yes that one. And I already closed all of MBAM's processes and it gives me the same result. That also doesn't explain why chameleon won't run.

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

How are you starting Chameleon?

I tried launching the programs from "C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows" and also the chameleon HTML page where it has the 13 different buttons to try. Each button gets "the application was unable to start correctly 0xc0000142". 

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Open Malwarebytes > select > settings > advanced settings > Untick "Enable self protection module" close malwarebytes

 

Next,

 

Right click on the Malwarebytes icon on system tray and select Exit to close out Malwarebytes...

 

Next

 

Select > Start > all programs > Malwarbytes anti-malware > Tools > Malwarebytes anti-malware Chameleon. That should open chameleon tabs 1 to 13.

 

See if any will run,

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Open Malwarebytes > select > settings > advanced settings > Untick "Enable self protection module" close malwarebytes

 

Next,

 

Right click on the Malwarebytes icon on system tray and select Exit to close out Malwarebytes...

 

Next

 

Select > Start > all programs > Malwarbytes anti-malware > Tools > Malwarebytes anti-malware Chameleon. That should open chameleon tabs 1 to 13.

 

See if any will run,

Looks like MBAM is now giving me the same error as it was in the first post once again... :( so back to not being able to open it.

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Thanks for the update, i`m just asking in our private forum if Malwarebytes is actually compatible with Windows 10 (Windows Technical Preview)

 

Can you close MB out from the system tray, then try Chameleon as I listed previously

I made sure to close all processes and stop all services related to MBAM and chameleon is still a no-go. It could be an incompatibility issue. It used to work fine, so maybe one of their updates since the original release borked the compatibility with it. I don't run it very often, so I'm not sure how long it's been out of commission for. 

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Thanks for the logs, Malwarebytes is currently under test aat the QA dept against W10, have no information available as to any results etc. One guy MB installed on W10 system as yet no issues, I`ve also got MB running on W10 and have had no issues.

 

I`d like you to run another clean install MB and see what happens, before that try an online AV scan with ESET, not sure what will happen or if it will run successfully.

 

Run an online AV scan to ensure there are no remnants of any infection left on your system that may have been missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete:

 

Run Eset Online Scanner

 

**Note** You will need to use Internet explorer for this scan - Vista and Windows 7/8 right click on IE shortcut and run as admin.

 

(To run ESET Online Scanner in a browser other than Internet Explorer, you'll need to download ESET SMART  Installer during the process)

 

Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET.

 


Turn off the real time scanner of any existing antivirus program while performing the online scan
click on the Run ESET Online Scanner button
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the add/on to be installed
Click Start
Make sure that the option "Remove found threats"  is UNticked
Click on Advanced Settings, ensure the following options are checked:
 
Scan for potentially unsafe applications
Enable Anti-Stealth Technology
 
Click Scan
wait for the virus definitions to be downloaded
Wait for the scan to finish

 

When the scan is complete

 


If no threats were found
put a checkmark in "Uninstall application on close"
close program
report to me that nothing was found

 

If threats were found

 


click on "list of threats found"
click on "export to text file" and save it as ESET SCAN and save to the desktop
Click on back
put a checkmark in "Uninstall application on close"
click on finish

 

close program

 

Copy and paste the report in next reply.

 

Thanks,

 

Kevin...

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Thanks for the logs, Malwarebytes is currently under test aat the QA dept against W10, have no information available as to any results etc. One guy MB installed on W10 system as yet no issues, I`ve also got MB running on W10 and have had no issues.

 

I`d like you to run another clean install MB and see what happens, before that try an online AV scan with ESET, not sure what will happen or if it will run successfully.

 

Run an online AV scan to ensure there are no remnants of any infection left on your system that may have been missed. This scan is very thorough and well worth running, it can take several hours please be patient and let it complete:

 

Run Eset Online Scanner

 

**Note** You will need to use Internet explorer for this scan - Vista and Windows 7/8 right click on IE shortcut and run as admin.

 

(To run ESET Online Scanner in a browser other than Internet Explorer, you'll need to download ESET SMART  Installer during the process)

 

Go to Eset web page http://www.eset.com/us/online-scanner/ to run an online scan from ESET.

 

 

  •  

     

  • Turn off the real time scanner of any existing antivirus program while performing the online scan

     

     

  • click on the Run ESET Online Scanner button

     

     

  • Tick the box next to YES, I accept the Terms of Use.

     

    Click Start

     

  • When asked, allow the add/on to be installed

     

    Click Start

     

  • Make sure that the option "Remove found threats"  is UNticked

     

     

  • Click on Advanced Settings, ensure the following options are checked:

     

     

    Scan for potentially unsafe applications

    Enable Anti-Stealth Technology

     

    Click Scan

     

  • wait for the virus definitions to be downloaded

     

     

  • Wait for the scan to finish

     

     

 

 

When the scan is complete

 

 

  •  

     

  • If no threats were found

     

     

  • put a checkmark in "Uninstall application on close"

     

     

  • close program

     

     

  • report to me that nothing was found

     

     

 

 

If threats were found

 

 

  •  

     

  • click on "list of threats found"

     

     

  • click on "export to text file" and save it as ESET SCAN and save to the desktop

     

     

  • Click on back

     

     

  • put a checkmark in "Uninstall application on close"

     

     

  • click on finish

     

     

 

 

close program

 

Copy and paste the report in next reply.

 

Thanks,

 

Kevin...

I've attached the file. Looks like some PUP's. NCH is software I use for editing videos, and it was purchased from their site so they shouldn't be of any threat.

ESET SCAN.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

NCH software is not malicious per se, it is usually classed as foistware. Read the following link and make up your own mind...

 

http://www.makeuseof.com/tag/whats-problem-nch-software-remove/

 

Can you run a clean install of Malwarebytes once again:

 

Download and save mbam-clean.exe and save to your desktop from the following:

http://www.malwarebytes.org/mbam-clean.exe

Now do the following:

  •    
       
  • Click on Start and select Control Panel
       
  • Open Uninstall a Program for XP use Add/Remove Programs
       
  • Uninstall Malwarebytes' Anti-Malware
       
  • Restart your computer, very important to do that!!
       
  • Run mbam-clean.exe
       
  • It will ask to restart your computer, please allow it to do so, very important!!

    Next, D/L and install Malwarebytes again and update as follows :-

    Download Malwarebytes Anti-Malware to your desktop.
    • Double-click mbam-setup and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes Select > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
    • Now select > Scan > Threat scan > Scan now
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.



    • After the restart (If applicable) once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the scan log which shows the Date and time of the scan just performed.
    • Click 'Copy to Clipboard'
    • Paste the contents of the clipboard into your reply.


     

    Before you run the Threat Scan turn off BitDefender, see if that makes any difference

     

    Kevin...

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

NCH software is not malicious per se, it is usually classed as foistware. Read the following link and make up your own mind...

 

http://www.makeuseof.com/tag/whats-problem-nch-software-remove/

 

Can you run a clean install of Malwarebytes once again:

 

Download and save mbam-clean.exe and save to your desktop from the following:

http://www.malwarebytes.org/mbam-clean.exe

Now do the following:

 

  •    

       

  • Click on Start and select Control Panel

       

  • Open Uninstall a Program for XP use Add/Remove Programs

       

  • Uninstall Malwarebytes' Anti-Malware

       

  • Restart your computer, very important to do that!!

       

  • Run mbam-clean.exe

       

  • It will ask to restart your computer, please allow it to do so, very important!!

    Next, D/L and install Malwarebytes again and update as follows :-

    Download Malwarebytes Anti-Malware to your desktop.

    • Double-click mbam-setup and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes Select > Settings > Detection and Protection > Enable Scan for rootkit and Under Non Malware Protection set both PUP and PUM to Treat detections as malware.
    • Now select > Scan > Threat scan > Scan now
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.

  • After the restart (If applicable) once you are back at your desktop, open MBAM once more.
  • Click on the History tab > Application Logs.
  • Double click on the scan log which shows the Date and time of the scan just performed.
  • Click 'Copy to Clipboard'
  • Paste the contents of the clipboard into your reply.

 

 

Before you run the Threat Scan turn off BitDefender, see if that makes any difference

 

Kevin...

Unfortunately I'm unable to do a regular uninstall of MBAM. When I try, nothing happens. I tried going to the uninstall exe within the MBAM folder, but that gets the same error as trying to run the program itself. 

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Follow the instructions here: https://helpdesk.malwarebytes.org/hc/communities/public/questions/200486-I-m-trying-to-uninstall-Malwarebytes-Anti-Malware-but-I-m-getting-an-error-how-do-I-fix-it-  See if that helps to remove and make clean install

 

If this was my own system I`d go for a fresh install of Windows, I run W10 myself, my security is the native Firewall, Defender and Malwarebytes premium. I have no issues up to now....

Link to post
Share on other sites
prstorero

prstorero

Posted
  • Author
Posted

Follow the instructions here: https://helpdesk.malwarebytes.org/hc/communities/public/questions/200486-I-m-trying-to-uninstall-Malwarebytes-Anti-Malware-but-I-m-getting-an-error-how-do-I-fix-it-  See if that helps to remove and make clean install

 

If this was my own system I`d go for a fresh install of Windows, I run W10 myself, my security is the native Firewall, Defender and Malwarebytes premium. I have no issues up to now....

I'll take a look. I may end up just having to do a refresh. I just hate to have to reinstall and configure all of my programs again. But it looks like that may be my only option if this doesn't work.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.