Jump to content

Can't open Malwarebyte menu


Recommended Posts

  • Replies 55
  • Created
  • Last Reply

Top Posters In This Topic

  • Root Admin

If you still have the document and can zip it up and attach to me in a private message I'll check on it and see what's up.

Okay, at this point since no other antivirus scanner or malware scanning is finding an obvious infection at this point, let me have you download the latest installer and reinstall Malwarebytes over the top of your current installation and restart the computer. It won't ask you to reboot, but please do.

https://downloads.malwarebytes.com/file/mb3/

Then if you're still unable to open the main program go ahead and let me know and I'll send you another tool in private messages.

Ron

 

Link to post
Share on other sites

  • 2 weeks later...

I'm sorry i've been so long getting back.  Work gets in the way.

I did the uninstall/reinstall as requested.  I know that Malware bytes is running because I see it in the Task Manager.  Also, I've been having a problem with a website pop up referencing Adobe Shock Player from some "Milkilove" domain. It's completely random and multiple tabs will come up frequently.  A few minutes ago, while running Chrome, a tab opened that i haven't seen before with the below text and image.  I'm wondering if Malware bytes has blocked the Milkilove thing.  In any case, a new item was added to the Malware bytes popup menu on the task bar "Add Web Exclusion for quickremovevirus.com".  However, still can't open the dashboard for Malware bytes.  Log file attached.

FYI - I ran ADWCLEANER, but it ddn't find anything.

                                                                                                                                logo.png

Malwarebytes
blocked a suspected bad URL or an unwanted program.

mb-check-results.zip

Link to post
Share on other sites

I restarted in safe mode, opened Malwarebytes, and saved all of the Reports in the attached file.  I hope that's useful.  I also included a current mb-check-results file.

The program's behavior is unchanged.  After first rebooting, the pop up menu offers the option to open Malwarebytes, but doesn't do so when selected.  After once selecting, that option is no longer available.

mb-check-results.zip

Malwarebytes Reports.zip

Link to post
Share on other sites

  • Root Admin

If your computer does not have the Windows Recovery Environment installed and available you can use the following method to run the Recovery Environment from a bootable USB disk.

NOTE: This USB disk needs to be created from a clean computer. You cannot use an infected computer for this process

NOTE: An 8GB USB 2.0 stick is required or at least recommended. In some cases a USB 3.0 disk can be used but some computers have issues booting from USB 3.0 disks.

Example drive (no endorsement implied, example only) - This drive example has not been tested by me. It is an older 2015 model with many good reviews though.
Amazon: Kingston 8GB DataTraveler 101 G2 USB 2.0 Flash Drive (DT101G2/8GBZ)
NewEgg: Kingston 8GB DataTraveler 101 G2 USB 2.0 Flash Drive (DT101G2/8GBZ)


STEP 1
Download a Windows 10 ISO image from Microsoft.

Method A: Using the Microsoft Media Creation Tool
https://www.microsoft.com/en-gb/software-download/windows10
Download the Media Creation Tool: https://go.microsoft.com/fwlink/?LinkId=691209

Follow the instructions displayed on the tool to download the Windows 10 ISO image.

In my testing I was not prompted for a license key to download the latest Windows 10 ISO image.
At the time of this writing 2017/12/21 there was only one ISO image offered. Windows 10

32-bit x86  or  64-bit x64

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit
 

Method B: If Method A: above is not working for you then you can try the following method
Microsoft Windows and Office ISO Download Tool (this is not an authorized Microsoft tool, but appears to be legal)
https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool
Download: https://www.heidoc.net/php/Windows%20ISO%20Downloader.exe

STEP 2
If you were unable to use the Windows Media Creation Tool in STEP 1 to create a USB disk then you can use this tool to burn the Windows 10 ISO image from STEP 1 above.

Download the Windows USB/DVD Download Tool from Gitbub and save to your computer.
English version: https://github.com/mantas-masidlauskas/wudt/raw/master/Downloads/Windows7-USB-DVD-Download-Tool-Installer-en-US.exe

Then install the Windows USB/DVD Download Tool and run it to burn a bootable USB disk from the ISO image. Browse to the location where you saved the Windows 10 ISO image in STEP 1
Note: This tool should work on XP, Vista, Windows 7, or Windows 10 - it is simply used to make a bootable USB disk. Remember, all of this needs to be done on a clean computer.

MCWx4mf.jpg

5IvFX1o.jpg

1hzeggf.jpg

g1iLLSH.jpg

KkzebK6.jpg

 
STEP 3
Please download the Farbar Recovery Scan Tool and save it to your desktop or other location you know where it's saved to. Then copy it to the USB disk you just created.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

STEP 4
Shut down the infected computer. Do Not insert the USB disk you created until the infected computer has been shut down.
Once the computer is shut down then insert the newly created Windows 10 USB disk into the infected computer and power it back on and press the appropriate key to bring up the boot menu. The link below will help show you which key for various computers manufacturers is used to bring up the boot menu. Most will be either USB or UEFI depending on hardware and settings. If the computer boots up into the Normal Windows instead of the USB stick it may become infected and need to be completely redone again. Make sure you select the correct boot option.

How to Boot Your Computer from a USB Flash Drive

STEP 5
Once the computer starts to boot up from the USB disk, follow the screens and directions below.

Gvt31DC.jpg

wk8hs0E.jpg

F2gCAoF.jpg

X8NEEvb.jpg

You will need to open NOTEPAD.EXE to help find out which drive is your Windows drive and which drive is your USB disk drive you just created

O27kz3e.jpg

RRI6og4.jpg

For the more advanced user you could also use DISKPART to help locate which drive is mapped to your USB disk. In most cases the USB disk will be either D: or E: but depending on hardware the drive could be a much higher level such as H: or higher.

Example only - your hardware will look different

DISKPART> list volume
	  Volume ###  Ltr  Label        Fs     Type        Size     Status     Info
  ----------  ---  -----------  -----  ----------  -------  ---------  --------
  Volume 0     Z                       DVD-ROM         0 B  No Media
  Volume 1     C                NTFS   Partition    931 GB  Healthy    System
  Volume 2     Q   SEA-USB-4.0  NTFS   Partition   3725 GB  Healthy
  Volume 3     D                NTFS   Removable   7636 MB  Healthy


Go back to the DOS Command Prompt (if you used DISKPART type in Exit and press the Enter key) and type in the following and press the Enter key.

CD /D  D: (or E: or whichever drive letter the USB stick is on)

Then type in CD\
and press the Enter key to get to the root or top of the USB disk.

Then type in FRST   or   FRST64  (depending on which version your computer uses) and click the Scan button.

A log called FRST.txt will be saved on your USB Flash Drive. Attach it in your next reply.

If all went well you should now be able to boot into Normal Mode and run Malwarebytes and run a Threat Scan to have it finish the removal process.

 

Link to post
Share on other sites

  • Root Admin

These 2 files are not legitimate signed files from Microsoft. You need to restore these files from a known good source.

C:\Windows\System32\winlogon.exe
[2018-01-04 17:47] - [2017-12-31 17:50] - 000455680 _____ (Microsoft Corporation) 11D6A262B617130F7C16E308C12E0D41


C:\Windows\System32\rpcss.dll
[2018-01-04 17:47] - [2017-12-31 18:18] - 000512000 _____ (Microsoft Corporation) BA6C9EE518A11DA4AD061B223EBED3D3


You may be able to copy the ones from the USB bootable disk you made. Rename the files that are on your computer with an extension of .BAD

Then copy the ones from the USB disk into place onto your computer. If you need help doing that please let me know. You'll need to do it from the Recovery Console you cannot replace them from within Windows.

 

Link to post
Share on other sites

Correct me if i'm wrong, but one option would be to run the System File Checker tool (SFC.exe).

And a second option, and preferred option is to boot from the Windows 7 DVD (which I do have) and use the "repair your computer" option.

Does that sound right???

Once again, thank you for the time and effort you've contributed to helping me resolve a, no doubt, self inflicted problem.

Link to post
Share on other sites

  • Root Admin

Yes, if the system is intact you should be able to use the SFC tool to restore the files. Please give it a try.

I would not recommend the "repair' feature as that would do many other things and sometime it can screw up and cause more problems

If SFC does not work I can help you get the files replaced.

Thanks

Ron

 

Link to post
Share on other sites

  • 2 weeks later...
  • Root Admin

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Link to post
Share on other sites

  • 2 weeks later...
On 1/24/2018 at 6:55 PM, AdvancedSetup said:

Okay, I don't think the computer is infected, but I'll go ahead and move your topic into the malware removal forum and we'll run some scans and see what we find.

 

Please download and run the following Kasperksy tool to remove any found threats and let me know if it finds anything.

Kaspersky Virus Removal Tool

Ron

 

I ran Kaspersky and it found no threats.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.