Runtime Error (at 47:120) : Could not call proc

[shaharpit809]

I can't seem to install latest version of malwarebytes. The .exe that I have on my system is mb3-setup-consumer-3.1.2.1733.exe. Even after following the steps on given in this link 

 I cannot install. 
Please help and Thank you

[kevinf80]

Hello shaharpit809 and welcome to Malwarebytes,

Can you do the following and check for untrusted certificates:

• Select Windows key and R key together,,
• In the Run dialog box type MMC, and then click OK.
• The Microsoft Management Console (MMC) appears.
• In the MMC, on the Console menu, click File then Add/Remove Snap-in....
• In the Add or Remove Snap-in dialog box, click Certificates, and then click Add.
• In the Certificates snap-in dialog box, click My User Account, and then click Finish.
• click OK on Add or Remove Snap ins.
• Expand the Certificates Current User node by double click
• Expand UnTrusted Certification by double click
• Double Click Certificates Trust List.
• The details pane appears, showing all of the root CA certificates that are currently untrusted.
  

If there are untrusted Certificates listed for Malwarebytes or any other Security Programs delete them....

Let me know the outcome...

Thank you,

Kevin...

[shaharpit809]

Followed all the steps you mentioned and then tried installing it again. Still faced the same error.
Though whenever I try to run that .exe file, I get the message "This app has been blocked for your protection" so I try giving it administrator rights and then run it. It runs but then gives out the same error.

[kevinf80]

Thanks for the update, was there any untrusted certificates... ? Run the following and post the two produced logs...

Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status...   Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin...

 

[shaharpit809]

Was there any untrusted certificates... ? Yes. There were 2 malwarebytes certificates.

And I had tried using this tool before, as suggested in the above link, I clicked on the fix button and followed the steps but still it didn't work. So this time I clicked on the scan button as suggested by you.

Here are the two files you asked for 

Addition.txt

FRST.txt

[kevinf80]

Did you remove the two untrusted certificates..? Continue with the following:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Try Malwarebytes install again.....

Thanks,

Kevin...

 

fixlist.txt

[shaharpit809]

Did you remove the two untrusted certificates.? Yes

Followed all the steps and then tried installing but still it didn't work. But when the fixing process was completed, Google chrome was deleted by itself.

Fixlog.txt

[kevinf80]

Yes you had rogue versions of Chrome and Firefox running on your system... As Malwarebytes will still not run try the following:

Install Malwarebytes via Chamelon... Download the Chameleon zip file from https://downloads.malwarebytes.org/file/chameleon and extract it to a new folder on your desktop. Make certain that your PC is connected to the internet and then open the new folder. Inside the folder expand each sub folder until you have windows folder open with list of entries of renamed Malwarebytes executable files.... Double click on each in turn until one will work... If successful follow the prompts to install and update. When the update completes amend these settings :-   Select Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits". Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware Click on the Scan tab, When complete post the log.. and run a threat scan...... Post that log... Thank you, Kevin

[shaharpit809]

After following your instructions, the first file ie. firefox worked completely fine. But even after updating the application, the application still has a 2.2.1.1043 version and was not upgraded to a 3+ version. Hopefully there won't be any issues. Anyway, it worked and I was able to delete the malwares in my system.

Thank you, Kevin

 

protection log.txt

scan log.txt

[kevinf80]

Thanks for the logs and the update, continue with the following:

Totally Remove Malwarebytes from your system: Download the latest version of Malwarebytes cleanup tool from here: https://downloads.malwarebytes.com/file/mb_clean and save to your Desktop.. If applicable, backup your Malwarebytes license key information and deactivate the product. Close all open applications and deactivate Malwarebytes <---- Very important, do not miss that step To deactivate Malwarebytes (If applicable): Right click on tray icon, from the opened list select "Quit Malwarebytes" an UAC alert will open, select "Yes" to deactivate Malwarebytes...   Double-click mb-clean.exe to run it A prompt to confirm the cleanup will appear, select Yes or No Yes - will proceed with the cleanup process <---- Select this option to start the tool No - will exit the utility The Utility will launch a Command Prompt window which will disappear once the the cleanup process completes. Once completed, a log file ("mb-cleanresult.txt") will be on your desktop and you'll be prompted to reboot We recommend an immediate reboot <--- Do Not miss out this step Suppressing the reboot may result in an incomplete cleanup Upon reboot Malwarebytes will be totally removed from your system To re-install Malwarebytes: Download Malwarebytes version 3 from the following link: https://www.malwarebytes.com/mwb-download/thankyou/   Double click on the installer and follow the prompts. If necessary select the Blue Help tab for video instructions.... When the install completes and is updated do the following: Open Malwarebytes, select > "settings" > "protection tab" Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on.... Go back to "DashBoard" select the Blue "Scan Now" tab...... When the scan completes deal with any found entries... Then select "Export Summary" then "Text File (*.txt)" name that log and save , you can copy or attach that to your reply... Thanks, Kevin...

 

[shaharpit809]

Downloaded the cleaner from the link you provided, after running it, I was asked to reboot and after rebooting a prompt was generated which asked to install 3x version of malwarebytes, so when it was downloaded I tried running it but again it generated the same error ie. Could not call proc. But unlike the prior error no (47:120) this time this time it generated (49:120) if it matters in anyway. Since the above method didn't work, I tried downloading the software from the site you provided but still it didn't work. Can you please tell me what the issue actually is? Since the latest version doesn't seem to work on my system.

 

mb-clean-results.txt

[kevinf80]

The issue you have is normally associated to an untrusted certificate being created that will stop Malwarebytes from either installing, or running if already installed.

When you checked for untrusted certificates were there any others apart from the two you mentioned earlier?

[shaharpit809]

This are the only 2 certificates that I could find.

And I deleted both the certificates and then tried to install. It worked but at the end it showed that it couldn't connect to the service.

[kevinf80]

Other threads with this problem usually show maybe 20 plus untrusted certificates, all of them must be deleted....

Can you check once more and see exactly how many are present, post a full screen shot if possible...

[shaharpit809]

[kevinf80]

All of those entries are designed to stop the named program from either running or installing, I no longer see Malwarebytes in the list so there is maybe a group policy or similar still doing a similar job..

Delete all of those entries you have listed...

Next,

Download and save RogueKiller to your Desktop from this link: https://www.fosshub.com/RogueKiller.html/setup.exe Right click setup.exe and select Run as Administrator to start installing RogueKiller. At the next window Checkmark "Install 32 and 64 bit versions, then select "Next" In the next window skip Licence I.D. and Licence Key, select "Next" In the next window make no changes and select "Next" In the next window leave both "Additional Shortcuts" checkmarked, then select "Next" In the next window make no changes and select "Install" RogueKiller will extract and complete installation, in the new window leave "Launch Roguekiller" checkmarked, then select finish. RogueKiller will launch. Accept UAC, then read and accept "User Agreements" In the new window the "Home" tab should already be selected, Change by selecting "Scan" tab, then select "Start Scan" When the scan completes select "Open Report" In the new Window select "Export text" name that file RK.txt, save to your Desktop and attach to your reply Let me see that log in your reply... Next, Scan with HitmanPro In any case don't remove on your own anything that Hitman Pro detects! This scanner is really good for checking, it has however been known for deleting files instead of curing them, in some cases this may render the machine unbootable. Any removals will be done manually after careful analysis of the scan results! Please download HitmanPro by SurfRight and save it to your desktop. Temporary disable your AntiVirus and AntiSpyware protection - instructions here.   Right-click on icon and select Run as Administrator to start the tool. If the program won't run please run it while holding down the left CTRL key until it's loaded! Click on the Next button. You must agree with the terms of EULA (if asked). Check the box beside No, I only want to perform a one-time scan to check this computer. Click on the Next button. The program will start to scan the computer. It would only take several minutes. When the scan is done click on drop-down menu of the found entries (if any) and choose - Apply to all => Ignore. If there isn't a dropdown menu when the scan is done then please don't delete anything and close HitmanPro!Navigate to C:\ProgramData\HitmanPro\Logs, open the report and include it it your next reply. Click on the Next button. Click on the Save Log button. Save that file to your desktop. Please include that logfile in your next reply. Don't forget to re-enable your security! Let me see those two logs in your reply... Thank you, Kevin...

[shaharpit809]

HitmanPro_20170602_0154.log

rk.txt

[kevinf80]

There is still a lot of issues to clean up from your system.... Continue with the following:

Right click on RogueKiller.exe and select "Run as Administrator" to start the tool, accept UAC.. In the new window the "Home" tab should already be selected, Change by selecting "Scan" tab, then select "Start Scan" When the scan completes make sure all found entries are checkmarked, when ready select Delete. Post the new log.... Next, Uninstall the following via Programs and Features: McAfee Security Scan Next, UNinstall AVAST, removal tool available at this link: https://www.avast.com/uninstall-utility When removal is complete windows should alert to no AV, you should be given the option to enable Windows Defender. Please do so.... Next, Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt" Let me see the produced logs in your reply.... Thank you, Kevin...

fixlist.txt

[shaharpit809]

Successfully deleted avast but cannot delete Mcafee security scan. Tried uninstalling it from Program and Features and also tried to run the uninstall.exe file in the Mcafee security scan folder but both of them don't seem to work. Please help.

 

 

rk1.txt

[kevinf80]

Did you run FRST fix....? can I see that log

[shaharpit809]

Addition.txt

Fixlog.txt

FRST.txt

[kevinf80]

Thanks for those logs, continue with the following:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Go here and click 'SCAN NOW' under 'ESET Online Scanner' save to your Desktop. Turn off the real-time scanner of any existing antivirus program before performing the online scan. Here's how Right click on and select "Run as Administrator" In the new Window accept the terms of service In the new Window select "Enable detection of potentially unwanted applictions" then expand "Advanced Settings" In the new Window checkmark (tick) the entries as shown, make sure "Clean threats automatically" is not checkmarked. Now select "Scan" In the new Window new virus database signatures will download, Do Not Select Stop The Window will progress showing the scan in action.... In the new Window if no threats are found, select "Delete applications data on close" then select "Finish" no log is produced, confirm that in your reply... If threats are found the following Window will open: Click on "Select All" then "Save to Text file" name and save that file, attach to your reply. Now select "Do not clean" and then close out.... Let me see those logs in your reply.... Thank you, Kevin....

fixlist.txt

[shaharpit809]

es_scanner.txt

Fixlog.txt

[kevinf80]

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Download Portable Windows Repair (all in one) from one of the following: www.tweaking.com/files/setups/tweaking.com_windows_repair_aio.zip http://www.majorgeeks.com/mg/getmirror/tweaking_com_windows_repair_portable,1.html https://www.bleepingcomputer.com/download/windows-repair-all-in-one/ Unzip the contents into a newly created folder on your desktop. Boot your system to Safe mode, instructions here: https://support.microsoft.com/en-gb/help/12376/windows-10-start-your-pc-in-safe-mode Open the Tweaking.com folder, run the tool by right click on Repair_Windows (icon with red briefcase) select "Run as Administrator" From the main GUI do the following: Select Tab 5 to make Registry backup, use the recommended option... When complete select "Repairs" tab, from there select "Open Repairs" tab.. From that window select the default option and checkmarck "Select All" box. When ready select "Start Repairs" tab.... When complete re-boot your system to Normal mode, see if there is any improvement... Logs are saved to the Tweaking.com folder on your Desktop, the one to post is _Windows_Repair_Log.txt

Will Malwarebytes install now..?

 

fixlist.txt

[shaharpit809]

Malwarebytes is finally working. Thank you for helping me out and putting so much time into it  

Fixlog.txt

_Windows_Repair_Log.txt