This program is blocked by administration. Help.

[gaiger]

I don't know what to do with this problem. Im the admin of my PC but after i open the malwarebytes app a pop up appear and said "This program is blocked by admin etc etc etc"

i found a topic with same problem with me but i think i not follow it because we have different way to fix it. Here the attach of farbar recovery scan tool.

Thanks.

Addition.txt

FRST.txt

[kevinf80]

Hello gaiger and welcome to Malwarebytes, Run the following: Check for and delete untrusted root CA certificates:   Select Windows key and R key together,, In the Run dialog box type MMC, and then click OK. The Microsoft Management Console (MMC) appears. In the MMC, on the Console menu, click File then Add/Remove Snap-in.... In the Add or Remove Snap-in dialog box, click Certificates, and then click Add. In the Certificates snap-in dialog box, click My User Account, and then click Finish. click OK on Add or Remove Snap ins. Expand the Certificates Current User node by double click Expand UnTrusted Certification by double click Double Click Certificates Trust List. The details pane appears, showing all of the root CA certificates that are currently untrusted. If there an untrusted Certificates listed for Malwarebytes or any other Security Programs delete them.... Let me know the results. Kevin.

[gaiger]

ok i did what you said buy there is no untrusted certificate in certificate current user

[pedroerkul]

I have same problem

[kevinf80]

Thanks for the update gaiger, continue with the following:

Download and save RogueKiller to your Desktop from this link: https://www.fosshub.com/RogueKiller.html/setup.exe Right click setup.exe and select Run as Administrator to start installing RogueKiller. At the next window Checkmark "Install 32 and 64 bit versions, then select "Next" In the next window skip Licence I.D. and Licence Key, select "Next" In the next window make no changes and select "Next" In the next window leave both "Additional Shortcuts" checkmarked, then select "Next" In the next window make no changes and select "Install" RogueKiller will extract and complete installation, in the new window leave "Launch Roguekiller" checkmarked, then select finish. RogueKiller will launch. Accept UAC, then read and accept "User Agreements" In the new window the "Home" tab should already be selected, Change by selecting "Scan" tab, then select "Start Scan" When the scan completes select "Open Report" In the new Window select "Export text" name that file RK.txt, save to your Desktop and attach to your reply Let me see that log in your reply...   Thank you,   Kevin

[gaiger]

Ok sir here's the result.

thanks

rkreport.txt

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

 

fixlist.txt

[gaiger]

Ok sir here's the result of farbar fix.

 

Thanks 

Fixlog.txt

[kevinf80]

Continue as follows..... Totally Remove Malwarebytes from your system: Download the latest version of Malwarebytes cleanup tool from here: https://downloads.malwarebytes.com/file/mb_clean and save to your Desktop.. If applicable, backup your Malwarebytes license key information and deactivate the product. Close all open applications and deactivate Malwarebytes <---- Very important, do not miss that step To deactivate Malwarebytes: Right click on tray icon, from the opened list select "Quit Malwarebytes" an UAC alert will open, select "Yes" to deactivate Malwarebytes... Double-click mb-clean.exe to run it A prompt to confirm the cleanup will appear, select Yes or No Yes - will proceed with the cleanup process <---- Select this option to start the tool No - will exit the utility The Utility will launch a Command Prompt window which will disappear once the the cleanup process completes. Once completed, a log file ("mb-cleanresult.txt") will be on your desktop and you'll be prompted to reboot We recommend an immediate reboot <--- Do Not miss out this step Suppressing the reboot may result in an incomplete cleanup Upon reboot Malwarebytes will be totally removed from your system To re-install Malwarebytes: Download Malwarebytes version 3 from the following link: https://www.malwarebytes.com/mwb-download/thankyou/   Double click on the installer and follow the prompts. If necessary select the Blue Help tab for video instructions.... When the install completes and is updated do the following: Open Malwarebytes, select > "settings" > "protection tab" Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Go back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes deal with any found entries... Then select "Export Summary" then "Text File (*.txt)" name that log and save , you can copy or attach that to your reply... If you have lost the activation licence key information it can be located here: http://www.cleverbridge.com/342/?scope=cusecolp Thank you, Kevin...

[gaiger]

The problem is still there. Can't open the mb clean because of blocked by administrator.

[kevinf80]

See if this will run..   Download mbam-check.exe from here: https://downloads.malwarebytes.org/file/mb3_check and save it to your desktop Double-click on mbam-check.exe to run it, it should then open a log file Please do not copy and paste the entire contents of the log into your next post, instead, please attach the log CheckResults.txt file which should now be located on your desktop to your next post. Attach the log to your reply

[gaiger]

Can't run either. It said This publisher has been blocked from running software on your machine.

[kevinf80]

Ok, leave the reinstall and MB check... Try the following:

Download RKill from here: http://www.bleepingcomputer.com/download/rkill/ There are three buttons to choose from with different names on, select the first one and save it to your desktop.   Double-click on the Rkill desktop icon to run the tool. If using Vista or Windows 7/8/10, right-click on it and Run As Administrator. A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully. A log pops up at the end of the run. This log file is located at C:\rkill.log. Please post this in your next reply. If you do not see the black box flash on the screen delete the icon from the desktop and go back to the link for the download, select the next button and try to run the tool again, continue to repeat this process using the remaining buttons until the tool runs. You will find further links if you scroll down the page with other names, try them one at a time. If the tool does not run from any of the links provided, please let me know. If RKill runs successfully see if Malwarebytes will run...

[gaiger]

Hmm... Still I can't open any malwarebytes app.

Rkill.txt

[kevinf80]

Navigate here C:\Program Files\Malwarebytes\Anti-Malware Scroll to MBAM.exe Right click on that file and rename explorer.exe  Double click see if it will run..

You will need to show file extensions to find above: http://www.thewindowsclub.com/show-file-extensions-in-windows

 

[gaiger]

Hello, i did what you said but still i can't run malwarebytes.

Edited May 21, 2017 by gaiger

[kevinf80]

Ok, change the name back to MBAM.exe... continue with the following:

Download Portable Windows Repair (all in one) from one of the following: www.tweaking.com/files/setups/tweaking.com_windows_repair_aio.zip http://www.majorgeeks.com/mg/getmirror/tweaking_com_windows_repair_portable,1.html https://www.bleepingcomputer.com/download/windows-repair-all-in-one/ Unzip the contents into a newly created folder on your desktop. Boot your system to Safe mode, instructions here: https://support.microsoft.com/en-gb/help/12376/windows-10-start-your-pc-in-safe-mode Open the Tweaking.com folder, run the tool by right click on Repair_Windows (icon with red briefcase) select "Run as Administrator" From the main GUI do the following: Select Tab 5 to make Registry backup, use the recommended option... When complete select "Repairs" tab, from there select "Open Repairs" tab.. From that window select the default option and checkmarck "Select All" box. When ready select "Start Repairs" tab.... When complete re-boot your system to Normal mode, see if there is any improvement... Logs are saved to the Tweaking.com folder on your Desktop, the one to post is _Windows_Repair_Log.txt   See if Malwarebytes will run when tweaking is completed...

[gaiger]

Hello sir,

Still i can't open any of malwarebytes software and adwcleaner.

_Windows_Repair_Log.txt

Edited May 21, 2017 by gaiger

[kevinf80]

Please download GrantPerms and save it to your desktop.

elect GrantPerms.exe (32bit system) or GrantPerms64.exe (64bit system)

Unzip to your Desktop, open the folder and run the tool.

Copy and paste the following in the edit box:

 

C:\Program Files\Malwarebytes

 

Click List Permissions and post the result (Perms.txt) that pops up. A copy of Perms.txt will be saved in the same directory the tool is run.

[gaiger]

Good day sir kevin.

I did what you said but the problem still persistent.

[gaiger]

33 minutes ago, gaiger said:

Good day sir kevin.

I did what you said but the problem still persistent.

sorry for double posting. here the result of grantperms.

 

 

Perms.txt

[kevinf80]

Thanks for that log, this is a strange one for sure. Permissions are all correct, Default service settings are correct and there were no Untrusted Certificates.... I want you to set your system up for a "Clean Boot" then see if Malwarebytes will run.... Clean boot is all none MS services disabled, lets see if that makes any difference... Full instructions at the following link:

https://support.microsoft.com/en-sg/help/929135/how-to-perform-a-clean-boot-in-windows

[gaiger]

still nothing happen.

[kevinf80]

Next, Scan with HitmanPro In any case don't remove on your own anything that Hitman Pro detects! This scanner is really good for checking, it has however been known for deleting files instead of curing them, in some cases this may render the machine unbootable. Any removals will be done manually after careful analysis of the scan results! Please download HitmanPro by SurfRight and save it to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here.   Right-click on icon and select Run as Administrator to start the tool. If the program won't run please run it while holding down the left CTRL key until it's loaded! Click on the Next button. You must agree with the terms of EULA (if asked). Check the box beside No, I only want to perform a one-time scan to check this computer. Click on the Next button. The program will start to scan the computer. It would only take several minutes. When the scan is done click on drop-down menu of the found entries (if any) and choose - Apply to all => Ignore. If there isn't a dropdown menu when the scan is done then please don't delete anything and close HitmanPro!Navigate to C:\ProgramData\HitmanPro\Logs, open the report and include it it your next reply. Click on the Next button. Click on the Save Log button. Save that file to your desktop. Please include that logfile in your next reply. Don't forget to re-enable your security!

[gaiger]

Hello again sir Kevin,

Here's the result of HItmanPro scan tool. 

HitmanPro_20170522_1725.log