failed to load rootkit driver - error 20025

[danmcb]

Hello,

I am using MWB Premium on windows 7. I see this error once in a while at boot time. What is the recommended procedure? Clean re-install? please advise.

(I have run mbam-check that I saw mentioned on another thread about this issue, the results are attached.)

Thank you in advance for the advice.

 

Daniel

 

CheckResults.txt

[Aura]

Hi dan

May I ask you if your hard drive is encrypted (with BitLocker, TrueCrypt, VeraCrypt, etc.)?

The reason I'm asking is because I found this thread, where users reported the same issue as you, and the cause was that their hard drive was encrypted and Malwarebytes Anti-Malware 2.0 (at least), doesn't support Anti-RootKit scan for encrypted drives.

https://forums.malwarebytes.org/topic/144813-unable-to-load-the-anti-rootkit-driver/?page=1

[daledoc1]

Hello and welcome, @danmcb:

Your log shows a few malware items in quarantine and it shows that you upgraded to the current version on 3/30/2016 on top of your existing build (your protection logs go back to 11/2015).

So, yes, the first step to resolve the 20025 error would be a clean reinstall.

MBAM Clean Removal Process 2x

Please be sure to have your license info handy and to deactivate your account before you start.
Please be sure to reboot when prompted by the removal tool.

Let us know if that resolves your issue -- if it does not, we may need to send you to another area of the forum for a deeper look for hidden malware.

Thanks,

 

[danmcb]

hello aura - thanks, no, there is no encryption.

 

Daledoc - thank you, I'll try this and see what happens. thanks!

[daledoc1]

Hi:

For the record, the encryption issue was resolved many moons ago.

The 20025 error is most often resolved by a clean reinstall of MBAM.

So, let's please start there.

If it does not resolve the issue, we'll dig a bit deeper.

Thanks,

[Aura]

Quote

For the record, the encryption issue was resolved many moons ago.

Thanks DD, I wasn't sure about it since it mentionned 2.0 and I didn't know it was fixed in the future release  

[daledoc1]

2 minutes ago, Aura said:

Thanks DD, I wasn't sure about it since it mentionned 2.0 and I didn't know it was fixed in the future release  

Actually, the encryption issue tended to generate a 20026 error, not a 20025 error. 
But it's a bit "moot" now, as those compatibility issues with 3rd-party encryption products have (AFAIK) been resolved.

The 20025 error was a bit harder to track down. It *can* be due to a latent rootkit, but in many cases it is resolved by a clean reinstall.  That is why I suggested that process as the first step.  If it does not resolve it, we'll get some logs to see what might be happening.

Thank you,

[danmcb]

I did the clean, reboot,  reinstall as per instructions. It is now activated again and doing a scan. No problems  seen as yet.  Let's see how we are at the end of the scan.  Thanks all.

[danmcb]

hmm,  "scan for rootkits"was off, so was "self-protection". I am stopping the scan, enabling, and starting again.

[daledoc1]

Great!
I'm glad you were able to resolve your issue.

Feel free to monitor the situation and to post back if the problem returns.

If it does, it would help us to better assist you if we had a bit more system information.
So, if you do need to post back, I suggest that you please attach to that post the 3 logs from this pinned topic: Diagnostic Logs

Thank you again.

[danmcb]

the scan for rootkits seems to have completed with no issues, so looks good. I will leave it run to completion now. Thanks again.

[daledoc1]

5 minutes ago, danmcb said:

hmm,  "scan for rootkits"was off, so was "self-protection". I am stopping the scan, enabling, and starting again.

Yes, those are disabled by default.

The user needs to enable those manually.

There are 3 places to enable "scan for rootkits":

1. The global setting: dashboard > "settings" > "detection and protection"; AND
2. The ADVANCED scan settings in the scheduler for automated scans (Trial and Premium versions); AND
3. The custom configuration options for a manual, custom scan (if one runs a manual, custom scan).

Cheers,

[danmcb]

Hmm,  seems that my problems are not yet over. After a clean re-install, and a scan, I get this (see attached image). Now running the scans you asked for, the logs will be in my next post.

[danmcb]

results of Farbar scan attached ...

Addition.txt

FRST.txt

[danmcb]

... and here are the MBAM-Check results. Both of these scans were taken as soon as I saw the message window,  before reboot (which I am now going to do).

CheckResults.txt

[daledoc1]

Hi:

The best course of action at this time might be to head over to the malware removal section for some cleanup and a deeper look at the system.

I suggest starting with the advice here: Available Assistance for Possibly Infected Computers
Then, please attach the latest set of logs to a new, separate post in the malware removal area.
One of the expert helpers will guide you through scanning, cleanup and repair.

Thanks,