Jump to content

Runtime Error (at 47:120) : Could not call proc


Recommended Posts

Hello shaharpit809 and welcome to Malwarebytes,

Can you do the following and check for untrusted certificates:

  • Select Windows key and R key together,,
  • In the Run dialog box type MMC, and then click OK.
  • The Microsoft Management Console (MMC) appears.
  • In the MMC, on the Console menu, click File then Add/Remove Snap-in....
  • In the Add or Remove Snap-in dialog box, click Certificates, and then click Add.
  • In the Certificates snap-in dialog box, click My User Account, and then click Finish.
  • click OK on Add or Remove Snap ins.
  • Expand the Certificates Current User node by double click
  • Expand UnTrusted Certification by double click
  • Double Click Certificates Trust List.
  • The details pane appears, showing all of the root CA certificates that are currently untrusted.

If there are untrusted Certificates listed for Malwarebytes or any other Security Programs delete them....


Let me know the outcome...

Thank you,

Kevin...

Link to post
Share on other sites

Followed all the steps you mentioned and then tried installing it again. Still faced the same error.
Though whenever I try to run that .exe file, I get the message "This app has been blocked for your protection" so I try giving it administrator rights and then run it. It runs but then gives out the same error.

Link to post
Share on other sites

Thanks for the update, was there any untrusted certificates... ? Run the following and post the two produced logs...

Download Farbar Recovery Scan Tool and save it to your desktop.

Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way...

Be aware FRST must be run from an account with Administrator status...
 
  • Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.)
  • Make sure Addition.txt is checkmarked under "Optional scans"
  • Press Scan button to run the tool....
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The tool will also make a log named (Addition.txt) Please attach that log to your reply.

Thank you,

Kevin...

 

Link to post
Share on other sites

Was there any untrusted certificates... ? Yes. There were 2 malwarebytes certificates.

And I had tried using this tool before, as suggested in the above link, I clicked on the fix button and followed the steps but still it didn't work. So this time I clicked on the scan button as suggested by you.

Here are the two files you asked for 

Addition.txt

FRST.txt

Link to post
Share on other sites

Did you remove the two untrusted certificates..? Continue with the following:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Try Malwarebytes install again.....

Thanks,

Kevin...

 

fixlist.txt

Link to post
Share on other sites

Yes you had rogue versions of Chrome and Firefox running on your system... As Malwarebytes will still not run try the following:

Install Malwarebytes via Chamelon...


Download the Chameleon zip file from https://downloads.malwarebytes.org/file/chameleon and extract it to a new folder on your desktop.


user posted image


Make certain that your PC is connected to the internet and then open the new folder.

Inside the folder expand each sub folder until you have windows folder open with list of entries of renamed Malwarebytes executable files....


user posted image


Double click on each in turn until one will work...

If successful follow the prompts to install and update.

When the update completes amend these settings :-
 
  • Select Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
  • Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
  • Click on the Scan tab,
  • When complete post the log..



and run a threat scan......

Post that log...

Thank you,

Kevin

Link to post
Share on other sites

After following your instructions, the first file ie. firefox worked completely fine. But even after updating the application, the application still has a 2.2.1.1043 version and was not upgraded to a 3+ version. Hopefully there won't be any issues. Anyway, it worked and I was able to delete the malwares in my system.

Thank you, Kevin

 

protection log.txt

scan log.txt

Link to post
Share on other sites

Thanks for the logs and the update, continue with the following:

Totally Remove Malwarebytes from your system:

Download the latest version of Malwarebytes cleanup tool from here: https://downloads.malwarebytes.com/file/mb_clean and save to your Desktop..

If applicable, backup your Malwarebytes license key information and deactivate the product.

Close all open applications and deactivate Malwarebytes <---- Very important, do not miss that step

To deactivate Malwarebytes (If applicable):

Right click on tray icon, from the opened list select "Quit Malwarebytes" an UAC alert will open, select "Yes" to deactivate Malwarebytes...
 
  • Double-click mb-clean.exe to run it
  • A prompt to confirm the cleanup will appear, select Yes or No
  • Yes - will proceed with the cleanup process <---- Select this option to start the tool
  • No - will exit the utility
  • The Utility will launch a Command Prompt window which will disappear once the the cleanup process completes.
  • Once completed, a log file ("mb-cleanresult.txt") will be on your desktop and you'll be prompted to reboot
  • We recommend an immediate reboot <--- Do Not miss out this step
  • Suppressing the reboot may result in an incomplete cleanup
  • Upon reboot Malwarebytes will be totally removed from your system


To re-install Malwarebytes:

Download Malwarebytes version 3 from the following link:

https://www.malwarebytes.com/mwb-download/thankyou/
 
  • Double click on the installer and follow the prompts. If necessary select the Blue Help tab for video instructions....
  • When the install completes and is updated do the following:
  • Open Malwarebytes, select > "settings" > "protection tab"
  • Scroll down to "Scan Options" ensure Scan for Rootkits and Scan within Archives are both on....
  • Go back to "DashBoard" select the Blue "Scan Now" tab......



When the scan completes deal with any found entries... Then select "Export Summary" then "Text File (*.txt)" name that log and save , you can copy or attach that to your reply...

Thanks,

Kevin...

 

Link to post
Share on other sites

Downloaded the cleaner from the link you provided, after running it, I was asked to reboot and after rebooting a prompt was generated which asked to install 3x version of malwarebytes, so when it was downloaded I tried running it but again it generated the same error ie. Could not call proc. But unlike the prior error no (47:120) this time this time it generated (49:120) if it matters in anyway. Since the above method didn't work, I tried downloading the software from the site you provided but still it didn't work. Can you please tell me what the issue actually is? Since the latest version doesn't seem to work on my system.

 

mb-clean-results.txt

Link to post
Share on other sites

The issue you have is normally associated to an untrusted certificate being created that will stop Malwarebytes from either installing, or running if already installed.

When you checked for untrusted certificates were there any others apart from the two you mentioned earlier?

Link to post
Share on other sites

All of those entries are designed to stop the named program from either running or installing, I no longer see Malwarebytes in the list so there is maybe a group policy or similar still doing a similar job..

Delete all of those entries you have listed...

Next,

Download and save RogueKiller to your Desktop from this link:

https://www.fosshub.com/RogueKiller.html/setup.exe

Right click setup.exe and select Run as Administrator to start installing RogueKiller.

At the next window Checkmark "Install 32 and 64 bit versions, then select "Next"

user posted image

In the next window skip Licence I.D. and Licence Key, select "Next"

user posted image

In the next window make no changes and select "Next"

user posted image

In the next window leave both "Additional Shortcuts" checkmarked, then select "Next"

user posted image

In the next window make no changes and select "Install"

user posted image

RogueKiller will extract and complete installation, in the new window leave "Launch Roguekiller" checkmarked, then select finish.

user posted image

RogueKiller will launch. Accept UAC, then read and accept "User Agreements"

user posted image

In the new window the "Home" tab should already be selected, Change by selecting "Scan" tab, then select "Start Scan"

user posted image

When the scan completes select "Open Report"

user posted image

In the new Window select "Export text" name that file RK.txt, save to your Desktop and attach to your reply

user posted image

Let me see that log in your reply...

Next,

user posted imageScan with HitmanPro

In any case don't remove on your own anything that Hitman Pro detects! This scanner is really good for checking, it has however been known for deleting files instead of curing them, in some cases this may render the machine unbootable.
Any removals will be done manually after careful analysis of the scan results!

Please download HitmanPro by SurfRight and save it to your desktop.
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.
 
  • Right-click on user posted image icon and select user posted imageRun as Administrator to start the tool.
  • If the program won't run please run it while holding down the left CTRL key until it's loaded!
  • Click on the Next button. You must agree with the terms of EULA (if asked).
  • Check the box beside No, I only want to perform a one-time scan to check this computer.
  • Click on the Next button.
  • The program will start to scan the computer. It would only take several minutes.
  • When the scan is done click on drop-down menu of the found entries (if any) and choose - Apply to all => Ignore.
  • If there isn't a dropdown menu when the scan is done then please don't delete anything and close HitmanPro!Navigate to C:\ProgramData\HitmanPro\Logs, open the report and include it it your next reply.
  • Click on the Next button.
  • Click on the Save Log button.
  • Save that file to your desktop.


Please include that logfile in your next reply.

Don't forget to re-enable your security!

Let me see those two logs in your reply...

Thank you,

Kevin...
Link to post
Share on other sites

There is still a lot of issues to clean up from your system.... Continue with the following:

Right click on RogueKiller.exe and select "Run as Administrator" to start the tool, accept UAC..

In the new window the "Home" tab should already be selected, Change by selecting "Scan" tab, then select "Start Scan"

user posted image

When the scan completes make sure all found entries are checkmarked, when ready select Delete. Post the new log....

Next,

Uninstall the following via Programs and Features:

McAfee Security Scan

Next,

UNinstall AVAST, removal tool available at this link: https://www.avast.com/uninstall-utility

When removal is complete windows should alert to no AV, you should be given the option to enable Windows Defender. Please do so....

Next,

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Run FRST one more time, ensure all boxes are checkmarked under "Whitelist" but only Addition.txt under "Optional scan" Select scan, when done post the new logs. "FRST.txt" and "Addition.txt"

Let me see the produced logs in your reply....

Thank you,

Kevin...

fixlist.txt

Link to post
Share on other sites

Thanks for those logs, continue with the following:

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Go here and click 'SCAN NOW' under 'ESET Online Scanner' save to your Desktop.

Turn off the real-time scanner of any existing antivirus program before performing the online scan. Here's how

Right click on user posted image and select "Run as Administrator"

In the new Window accept the terms of service

user posted image

In the new Window select "Enable detection of potentially unwanted applictions" then expand "Advanced Settings"

user posted image

In the new Window checkmark (tick) the entries as shown, make sure "Clean threats automatically" is not checkmarked. Now select "Scan"

user posted image

In the new Window new virus database signatures will download, Do Not Select Stop

user posted image

The Window will progress showing the scan in action....

user posted image

In the new Window if no threats are found, select "Delete applications data on close" then select "Finish" no log is produced, confirm that in your reply...

user posted image

If threats are found the following Window will open:

user posted image

Click on "Select All" then "Save to Text file" name and save that file, attach to your reply.

Now select "Do not clean" and then close out....

Let me see those logs in your reply....

Thank you,

Kevin....

fixlist.txt

Link to post
Share on other sites

Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file"
NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work.

Open FRST and press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply.

Next,

Download Portable Windows Repair (all in one) from one of the following:

www.tweaking.com/files/setups/tweaking.com_windows_repair_aio.zip

http://www.majorgeeks.com/mg/getmirror/tweaking_com_windows_repair_portable,1.html

https://www.bleepingcomputer.com/download/windows-repair-all-in-one/

Unzip the contents into a newly created folder on your desktop.

Boot your system to Safe mode, instructions here: https://support.microsoft.com/en-gb/help/12376/windows-10-start-your-pc-in-safe-mode

Open the Tweaking.com folder, run the tool by right click on Repair_Windows (icon with red briefcase) select "Run as Administrator"

From the main GUI do the following:

Select Tab 5 to make Registry backup, use the recommended option...

user posted image

When complete select "Repairs" tab, from there select "Open Repairs" tab..

From that window select the default option and checkmarck "Select All" box. When ready select "Start Repairs" tab....

user posted image

When complete re-boot your system to Normal mode, see if there is any improvement...

Logs are saved to the Tweaking.com folder on your Desktop, the one to post is _Windows_Repair_Log.txt

Will Malwarebytes install now..?

 

fixlist.txt

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.