Cannot start Malwarebytes Pro or Chameleon

[Athalwoif1]

Good morning,

 

I have had Malwarebytes paid version since 2010 and have been pleased with it. I have run into a strange series of events on my PC the past few days and I suspect it may be PC.Keeper.Com. Computer is running very slow and takes 10 minutes or more to log off and shut down.

 

1) Noticed Malwarebytes would not open from Start Menu or taskbar icon . Attempted to run several different Chameleon numbers. It would not progress past stating the driver was successfully installed. Tried the same in safe mode but safe mode freezes up as soon as I try to do open anything.

 

2) Next I system restored back approximately one month. Malware bytes functioned and returned a clean scan. Right clicked on Malwarebytes taskbar icon and saw an (Add PC.Keeper.com to exclusions) which I ignored. Malwarebytes would not open after subsequent restart and then another system restore.

 

3) Attempted to reformat and reinstall Windows 7 from disk. Cannot boot from disk. PC just runs on and on after I press a key after (to boot from CD rom press any key prompt.)

 

4) Attempted to register at  Malwarebytes forums. Waited for confirmation email while using internet explorer. Noticed a (1) on my Inbox- Windows Live Mail taskbar icon. Opened Windows Live Mail and there was not new mail in my inbox, junk folder or elsewhere. Went to Malwarebytes online and attempted to resend validation email three times. Nothing arrived in the past several hours.

 

5) Opened another account at Malwarebytes forums and used a Gmail email account and successfully received confirmation and here I am. Read the info the forum instructed me to read and searched for a way to remove PC Keeper but no luck.

 

Please save me Malwarebytes wizards! 

 

 

 

[TwinHeadedEagle]

Hello,

    

 

They call me TwinHeadedEagle around here, and I'll try to help your with your issue.

 

     

    

Before we start please read and note the following:

• We're primarily oriented on malware removal here, so you must know that some issues just cannot be solved and you must be prepared for this. Some tools we use here will remove your browser search history, so backup your important links and all the files whose loss is unacceptable.
• Limit your internet access to posting here, some infections just wait to steal typed-in passwords.
• Please be patient. I know it is frustrating when your PC isn't working properly, but malware removal takes time. Keep in mind that private life gets in the way too. Note that we may live in totally different time zones, what may cause some delays between answers.
• Don't run any scripts or tools on your own, unsupervised usage may cause more harm than good.
• Do not paste the logs in your posts, attachments make my work easier. There is a More reply options button, that gives you Upload Files option below which you can use to attach your reports. Always attach reports from all tools.
• Always execute my instructions in given order. If for some reason you cannot completely follow one instruction, inform me about that.
• Do not ask for help for your business PC. Companies are making revenue via computers, so it is good thing to pay someone to repair it.
• If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.

I can't foresee everything, so if anything not covered in my instructions happens, please stop and inform me!

There are no silly questions. Never be afraid to ask if in doubt!

 

 

 

  Rules and policies

 

We won't support any piracy.

That being told, if any evidence of illegal OS, software, cracks/keygens or any other will be revealed, any further assistance will be suspended. If you are aware that there is this kind of stuff on your machine, remove it before proceeding!

The same applies to any use of P2P software: uTorrent, BitTorrent, Vuze, Kazaa, Ares... We don't provide any help for P2P, except for their removal. All P2P software has to be uninstalled or at least fully disabled before proceeding!

 

Failure to follow these guidelines will result with closing your topic and withdrawning any assistance.

 

 

---

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.

Only one of them will run on your system, that will be the right version.

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

[Athalwoif1]

Thank you for your quick response.

 

 

FRST.txt

Addition.txt

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on icon and select Run as Administrator to start the tool.

  (XP users click run after receipt of Windows Security Warning - Open File).

• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finished FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

fixlist.txt

[Athalwoif1]

Hi Eagle,

 

I downloaded and saved your fixlist.txt file to my desktop where FRST is also located. Ran FRST as Administrator and pressed the Fix button once. Once complete it said that the Fixlog.txt is saved in the same directory as FRST and that the computer needed a restart which it did without me pressing restart.

 

I do not see Fixtlog.txt on my desktop. In addition to the colored FRST icon I have 3 text documents ; FRST, Addition, and Fixlog. Please advise on how to proceed.

 

Thanks

[TwinHeadedEagle]

Are you sure you sure you do not have Fixlog.txt? Can you run the fix again?

[Athalwoif1]

No Fixlog.txt on desktop. Attempted to run the fix again. FRST message: No fixlist.txt found. The fixlist.txt should be in the same folder/directory the tool is located.

 

Have not used the PC at all except to follow your instructions.

[TwinHeadedEagle]

Can you download Fixlist again?

[Athalwoif1]

Downloaded Fixlist to desktop. I assume you want me to run FRST again?

[Athalwoif1]

Ran FRST. Message states same as previous: Fix completed. "Fixlog.txt is saved in the same directory FRST is located. The computer needs a restart. Please close all open windows. Note that you will not get any notification from the tool after restart. Click OK to restart.

 

There is nothing called fixlog.txt on my desktop. Is the desktop the directory FRST is located. The FRST icon is on the desktop. I have only 8 items on my desktop and 4 are from this malware removal attempt so its not hiding in a mess of shortcuts.

[TwinHeadedEagle]

Okay, let's see if thing are cleared.
 
 
Scan with Farbar Recovery Scan Tool
 
Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on icon and select Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please upload them into your next reply.

[Athalwoif1]

Here they are:

 

Thanks.

FRST.txt

Addition.txt

[TwinHeadedEagle]

Reports look good now. Can you run MalwareBytes now?

[Athalwoif1]

Ran Malwarebytes. 0 infections. Right clicked Malwarebytes taskbar icon. Options and status appeared normally.

 

Restarted PC. Malwarebytes would not open. Right clicking taskbar icon had no effect.

 

Started typing this reply. The taskbar Malwarebytes icon right click box opened randomly but not in its usual location over and above the clock. It opened on the left side of the screen.

 

Now the taskbar icon is functioning normally and I can also start Malwarebytes from the Start Menu.

 

I would like to restart again but await your instructions.

[TwinHeadedEagle]

I suggest to reinstall MalwareBytes and clean all its leftovers.
 
 
Uninstall outdated Malwarebytes' Anti-Malware
 
Please download MBAM-clean and save it to your desktop.

• Right-click on mbam-clean.exe icon and select Run as Administrator to start the tool.
• It will ask you to reboot the machine - please do so.

After that download & install the latest MBAM version.

[Athalwoif1]

Everything seems to be normal again.

 

Thanks very much for your assistance. I appreciated your efforts in resolving the issue.

 

I sent you $20 USD for your beer fund.

[TwinHeadedEagle]

Since there are no more problems, we can declare this PC clean

Now, we can proceed with post-cleanup procedures. Let's remove my tools and create a new, non infected restore point concurrently deleting old ones.

Step 1. - Creation of system restore point and tools removal.

Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run and wait until the tool completes his work.
• All tools we used should be gone. Tool will create an report for you (C:\DelFix.txt). I don't need it for review.

Tool deletes old system restore points and creates a fresh system restore point after cleaning.

Step 2. - Tips and tricks to keep your computer clean, safe and in a good shape.

Security tips - highly recommended reading:

• Simple and easy ways to keep your computer safe and secure on the Internet

Maintenance tips:

• Optimize Windows for better performance

Additional software that I personally use and install on all my clients devices:

• Malwarebytes' Anti-Malware (paid version highly recommended) - to scan your system from time to time in search for malware.
• Malwarebytes' Anti-Exploit - to prevent plenty of mostly exploited vulnerabilities.
• McShield - to prevent infections spread by removable media.
• Unchecky - to prevent from installing additional foistware, implemented in legitimate installations.
• Adblock - to surf the web without annoying ads!
• Qualys BrowserCheck - cloud service that scans your browsers and plugins to see if they’re all up-to-date.

My help is free for everybody.

If you're happy with the help provided and/or wish to buy me a beer for the assistance you received, then you can consider a donation:

Thank you!

Stay safe,

TwinHeadedEagle

[Athalwoif1]

All done. I wasn't aware of Anti-Exploit and will purchase the Pro version.

 

Have a great weekend Eagle.

[Athalwoif1]

One more question. When I plugged my Galaxy S4 into a USB cable to my PC I would get a pop-up asking if I would like to import pictures and videos. If I plugged a USB drive in a pop-up would give me options like 'open to view files'

 

They both stopped doing that today. I was wondering if the fixes we did altered or turned off something?

[Athalwoif1]

A restart resolved the S4 issue but not the USB drive. When I plug it in I am getting a new message that there are faster ports available. It shows six unused ports as options but everyone of these ports are in fact used. Anyway I realize that this is not a malware issue so I will try to figure it our on my own.

[TwinHeadedEagle]

It is normal to have such warning. S4 probably supports USB 3.0 transfer, but when you plug it into USB 2.0 port, this message appears.

[AdvancedSetup]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!