Jump to content

"This app has been blocked for your protection" When I try to install Malwarebytes


Recommended Posts

Whenever I try to install Malwarebytes I get the error in the attached image

Same happens with ADW Cleaner

I have read this thread

and tried to use the solution there but did not work, you can find my report on what happened there. I was advised to create a new thread as to help keep track of whose problems have been fixed.
 

I have also read this

And have attached the files accordingly (I hope) - in addition I also attached the DxDiag info

 

Also mb-check's log says I do not have a AntiVirus but I do - Avast - which actually had the same issue I'm having to Malwarebytes, however I could fix avast installation by running it from command prompt as admin - solution which results in:http://prntscr.com/fbnwli

I suspected it was related to Signatures even before reading the above thread since Windows couldn't recognize Avast (which had that issue) as the main system antivirus because it couldn't trust Avast's signature (probably explains why the log couldnt identify it)

 

 

Is my computer infected? I while ago I ran your mbar anti rootkit and  also TSA's Adware Removal Tool (probably not pertinent here) and did a Avast smart scan (not the deep one because it takes ages) and also had Avast scan my boot. Some issues were found and fixed, Malwarebytes is still not installing.

Well that's all, thank you in advance.

Screenshot_2.png

mb-check-results.zip

FRST.txt

Addition.txt

DxDiag.txt

Edited by heliojmsemedo
images didnt image as i thought they'd image
Link to post
Share on other sites

You mentioned in your first post that you deleted the certificates, but then they showed up again? If so, that's why you're getting this error. It looks like you're still infected as well, so I'd recommend posting in the following section so they  can clean up your computer

https://forums.malwarebytes.com/forum/7-malware-removal-for-windows/

Be sure to include the information requested in the main thread as well (you should have most of the logs already)

 

Link to post
Share on other sites

13 minutes ago, dcollins said:

You mentioned in your first post that you deleted the certificates, but then they showed up again? If so, that's why you're getting this error. It looks like you're still infected as well, so I'd recommend posting in the following section so they  can clean up your computer

https://forums.malwarebytes.com/forum/7-malware-removal-for-windows/

Be sure to include the information requested in the main thread as well (you should have most of the logs already)

 

I have attached the logs that were mentioned, am I missing something?

13 minutes ago, nikhils said:

Can you try installing in the safe mode to see if it works.

 

In safe mode I get the same error I had gotten when trying to run it as admin from command prompt

Link to post
Share on other sites

No worries at all. The set up logs is similar to the ones with the same 47:120 error.

Lets try this. It might be something you have done before but want to give it one more attempt:

On your keyboard, press the Windows Logo key and the letter R to open the Run box

Type the following into the Run box and click OKcertmgr.msc

Browse under the Certificates - Current User till you reach Untrusted Certificates and click on it.

You may find the Malwarebytes Certificate. Delete all Malwarebytes certificates.

After deleting reboot into safe mode and try to run the Product Installer.

 

If that does not work , we can ping a Malware removal specialist to help you out.

Link to post
Share on other sites

Hi heliojmsemedo :)

Nikhil contacted me about your issue. Right now I'm going to the gym, after which I still have a bit of work to do before going home. Once done, I'll take a look at your logs and see what's going on. I skimmed through them quickly and I can see that you are infected. I recognise 2-3 of the infections present on your system and we'll try to collect samples from it as we're currently looking for the malware that adds these certificates to the Untrusted Certificates list, thus preventing Malwarebytes and other security programs to be installed.

Thank you!

Link to post
Share on other sites

1 minute ago, Aura said:

Hi heliojmsemedo :)

Nikhil contacted me about your issue. Right now I'm going to the gym, after which I still have a bit of work to do before going home. Once done, I'll take a look at your logs and see what's going on. I skimmed through them quickly and I can see that you are infected. I recognise 2-3 of the infections present on your system and we'll try to collect samples from it as we're currently looking for the malware that adds these certificates to the Untrusted Certificates list, thus preventing Malwarebytes and other security programs to be installed.

Thank you!

Thanks, I hope we can fix this, this is getting me F R U S T R A T E D

Link to post
Share on other sites

Thank you for hanging in there. It can get frustrating. You system does seem infected.

I did notice you ran MBAR today. Can you post a copy of the logs from C:\Users\Hélio\Desktop\mbar

Till Aura comes back you could also try and run the Chameleon tool which would install MBAM 2.x but it should still clean out the infections.

1. You can get the tool from : https://www.malwarebytes.com/chameleon/

2. Download the tool and run the Chameleon.html page and click on the Download button to get MBAM 2.x

3. The product will automatically scan your system. Please save the scan logs as a text file and send it to us so we can actually check the infections .

4. After scan and remediation run the FRST tool and post the logs so we can see what is left behind on the system.

Thank you,

 

Link to post
Share on other sites

Before anything, I just wanna say I've managed to install Malwarebytes after running Chamaleon and rebooting (this time I could delete the certs)

But, I noticed that while I was running Chamaleon my computer became rather slow, background disappeared, taskbar disappeared, could not access other programs besides Chamaelon  which was really hard to control, mouse position for example was all weird, At the end, after it took care of the MANY INFECTIONS it found, a message box appeared but I couldnt read it because it almost immediately disappeared and the OS went back to normal, I'm sorry I couldnt get the log. I'm sending attached the mbar log either way

I'm now going to run FRST

mbar-log-2017-05-24 (14-39-09).txt

system-log.txt

Link to post
Share on other sites

  • Staff

Thanks, Aura. Before he does that, I'd like for him to run another scan with Malwarebytes 3.1.2 and send the Scan Report.

Open Malwarebytes and  when it opens, look on the left hand side and click 'Reports'

Double click on the Scan Report

Click 'Export'.

Click 'Text file (*.txt)'

In the Save File dialog box which appears, click on Desktop.

In the file name: box, type a name for your scan log.

A message box indicating 'File Saved' should appear.
Click ok.

Attach that log to your next reply.

 

Link to post
Share on other sites

Thanks Ried :)

Alright, Malwarebytes took care of most of the infection, but there are still remnants that needs to be removed, and we'll use FRST for that.

After running the FRST fix below, a .zip file with the name "DATE-TIME.zip" will be created on your desktop. Please upload that .zip file to the link below.

https://www.bleepingcomputer.com/submit-malware.php?channel=194

iO3R662.pngFarbar Recovery Scan Tool (FRST) - Fix mode
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located);
  • Right-click on the FRST executable and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
  • Click on the Fix button;
    NYA5Cbr.png
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Copy and paste its content in your next reply;

fixlist.txt

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.