JRT will not run on Windows XP

[Geo791]

I have had issues with JRT completing it's scan on two different Windows XP systems recently. I have been working with thisisu on the problem but as of yet we have had no luck. Wondering if any one else is having issues using JRT on the older Windows XP systems? I have never had a problem until just lately.

[hayc59]

seems ok with me running windows xp pro??

[thisisu]

The issue exists, I saw a couple of topics with the same issue recently. Working on a debug version of the tool people can try to help me isolate where it's breaking.

[thisisu]

Geo,

 

Can you try running the following file? https://www.dropbox.com/s/zq694f90rlzvjjf/JRT_Debug_7.6.3.exe?dl=0

 

If the tool runs successfully, the report will appear as normal. An additional report should be created on your desktop. The report is named JRT_DEBUG.txt

 

If the tool ends unexpectedly for you again, copy and paste the last 15-20 lines of JRT_DEBUG.txt here for review.

 

Thanks!

[Geo791]

I downloaded the debug program and ran it. This time the dos window only showed a few lines...it appeared to be stalled and then terminated closing the window. The debug.txt file was created on the desktop. I will just attach the entire file for your review.

JRT_DEBUG.txt

[thisisu]

Thanks for the log, it helped a lot and I was able to replicate the issue on my end. The tool is ending abruptly because of the '&' letter in the username. In your case, Geo & Gail.

 

I will try to find some sort of workaround to prevent that from happening.

[sotd]

Hello,I am experiencing exactly the same problem. Here is the debug text. 

 

C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt>for /F "usebackq delims=" %g in ("C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\taskswin.txt") do (

schtasks /query /v /TN "%g" /FO LIST  2>nul  | "C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\GREP.DAT" -P -i ".*\\\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}\\[0-9a-f]{32,64}\.exe"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DIR "C:\WINDOWS\Tasks\%g.job"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DEL /A/F/Q "C:\WINDOWS\Tasks\%g.job"  1>nul 2>&1  

 DIR "C:\WINDOWS\Tasks\%g.job"  1>nul 2>&1  

 IF ERRORLEVEL 1 (Echo(Successfully deleted: [Task] C:\WINDOWS\Tasks\%g 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" )  else (Echo(Failed to delete: [Task] C:\WINDOWS\Tasks\%g 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" ) 

)  

 DIR "C:\WINDOWS\System32\tasks\%g"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DEL /A/F/Q "C:\WINDOWS\System32\tasks\%g"  1>nul 2>&1  

 DIR "C:\WINDOWS\System32\tasks\%g"  1>nul 2>&1  

 IF ERRORLEVEL 1 (Echo(Successfully deleted: [Task] C:\WINDOWS\System32\tasks\%g 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" )  else (Echo(Failed to delete: [Task] C:\WINDOWS\System32\tasks\%g 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" ) 

)  

 SCHTASKS /Delete /TN "%g" /f  1>nul 2>&1 

) 

) 

 

C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt>(

schtasks /query /v /TN "Adobe Flash Player PPAPI Notifier.job" /FO LIST  2>nul  | "C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\GREP.DAT" -P -i ".*\\\{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\}\\[0-9a-f]{32,64}\.exe"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DIR "C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job.job"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DEL /A/F/Q "C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job.job"  1>nul 2>&1  

 DIR "C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job.job"  1>nul 2>&1  

 IF ERRORLEVEL 1 (Echo(Successfully deleted: [Task] C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" )  else (Echo(Failed to delete: [Task] C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" ) 

)  

 DIR "C:\WINDOWS\System32\tasks\Adobe Flash Player PPAPI Notifier.job"  1>nul 2>&1  

 IF NOT ERRORLEVEL 1 (

DEL /A/F/Q "C:\WINDOWS\System32\tasks\Adobe Flash Player PPAPI Notifier.job"  1>nul 2>&1  

 DIR "C:\WINDOWS\System32\tasks\Adobe Flash Player PPAPI Notifier.job"  1>nul 2>&1  

 IF ERRORLEVEL 1 (Echo(Successfully deleted: [Task] C:\WINDOWS\System32\tasks\Adobe Flash Player PPAPI Notifier.job 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" )  else (Echo(Failed to delete: [Task] C:\WINDOWS\System32\tasks\Adobe Flash Player PPAPI Notifier.job 1>>"C:\DOCUME~1\Owner\LOCALS~1\Temp\jrt\temp\tasks.txt" ) 

)  

 SCHTASKS /Delete /TN "Adobe Flash Player PPAPI Notifier.job" /f  1>nul 2>&1 

) 

) 

[thisisu]

 

Hello,I am experiencing exactly the same problem. Here is the debug text. 

 

 

Thanks for the report. That one looks like a much easier fix. Will try to have that corrected in the next version.

[sotd]

Thank you. 

[thisisu]

@sotd: Just a heads up that the new version is out which hopefully fixes the issue you were experiencing.

 

@Geo971, Still looking to fix this. Appears to happen on other operating systems as well. Will let you know as soon as I know more.

[sotd]

Thank you. It seems to work now.Here is my new report.

[sotd]

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 7.6.4 (09.28.2015:1)

OS: Microsoft Windows XP x86

Ran by Owner on 04/10/2015 at 11:43:03.64

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

 

 

 

~~~ Services

 

 

 

~~~ Tasks

 

 

 

~~~ Registry Values

 

 

 

~~~ Registry Keys

 

 

 

~~~ Files

 

 

 

~~~ Informational

 

C:\WINDOWS\system32\tasklist.exe doesn't exist [Process check skipped . Windows XP Home Edition?]

 

 

 

~~~ Folders

 

Successfully deleted: [Folder] C:\Documents and Settings\Owner\Application Data\iobit\driver booster

Successfully deleted: [Folder] C:\Documents and Settings\Owner\Application Data\productdata

Successfully deleted: [Folder] C:\Documents and Settings\Owner\Local Settings\Application Data\systemdir

 

 

 

 

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 04/10/2015 at 11:47:26.96

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[thisisu]

Glad to hear it sotd

 

The other bug mentioned by Geo has been fixed in version 8.0.0 which should be available for download soon.

 

Thanks for your patience.

[Elizabeth23]

Hello, I realize that this question is 4 months old, but I am having the same problem, I tried an older jrt, it did not work, tried to download from the droplink in above reply, but it has been removed.

 

I have run it before on this same system with no problems, it will not run now, scans with 360 total security and malwarebytes both are clean.

 

win xp sp3 fully updated.

 

Thanks in advance.

[Geo791]

Hello Elizabeth. Thisisu worked with me several times to correct this problem on my Windows XP sp3 desktop. He sent me an email asking me to try the latest version, which on 11/17/15 was version 8.0.0. I downloaded the new version and it ran flawlessly to completion. Thisisu is the creator of JRT, which is now part of Malwarebytes. It took him over two months to finally have the time to fix this little tool so it would again run on my machine. If you have tried using the latest version of JRT and it won't run for you, try clicking on thisisu's picture, and then click on the button to send him a personal message regarding your issue. He is very responsive and will interact with you personally to remedy you specific issue with JRT. That's his baby and he very much wants to support it. I would say also that 360 Total Security is probably not a good option. I recently had to remove it from a client's system because of adware/malware. I highly recommend VIPRE Internet Security based out of Clearwater, FL, or Emisoft. These are US based companies and their products out perform Norton or McAfee products. As far as JRT running, any of the antivirus programs could interfere and you may have to disable them temporary. JRT 8.0.0 ran fine with my VIPRE Internet Security running though. This is a nice little tool and I hope you can get it to run on your system soon.

[Elizabeth23]

Thanks for your response, I will try to contact Thisisu after tomorrow, tonight I am going to reinstall my os and that takes approx 13 hours with all the updates etc.

 

If there is a free version or your two suggested antivirus' I will try them, I have been using 360 for a year now and have not had any problems on 4 xp pcs until this one.  I am using 360 as they will be supporting xp for quite awile yet.

 

If jrt will not run after I reinstall my os, then I will contact Thisisu, as this is not the only thing that will not suddenly run, cannot get security check to run either and both used to run fine, so I must have gotten infected even though scans with an online scanner, malwarebytes free, and 360 all come out clean.

 

will post my results, by Tuesday.

 

Thanks.

[Elizabeth23]

After a reinstall of xpprosp3, both security check and JRT now run, therefore there was some infection somewhere or I maybe tweaked something a little too far. Thanks.