field3d Posted January 4, 2019 ID:1290540 Share Posted January 4, 2019 Hello, I can’t run in Windows 10 malwarebytes uninstalling and reinstalling as says here using a clean app. I have this message: Faulting application name: mbam.exe, version: 3.1.0.1662, timestamp: 0x5c070ab0 Faulting module name: Qt5Gui.dll, version: 5.11.1.0, timestamp: 0x5bd23319 I don’t know what happened because also the microsoft store also not work. What I noted is that appeared in the name of computer “kuikdelivery.com”. I have eset antivirus and also I scanned with defender and nothing is found. Also I made the test with spybot and nothing. How can I make run the malwarebytes? Thank you Link to post Share on other sites More sharing options...
kevinf80 Posted January 4, 2019 ID:1290583 Share Posted January 4, 2019 Hello field3d and welcome to Malwarebytes, Run the following: Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.htmlNote: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Thank you, Kevin... Link to post Share on other sites More sharing options...
field3d Posted January 4, 2019 Author ID:1290653 Share Posted January 4, 2019 Here are the files. What could be the problem? FRST.txt Addition.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 4, 2019 ID:1290701 Share Posted January 4, 2019 Thanks for those logs, continue.. Uninstall the following: Software Updater Spybot - Search & Destroy Next, Download attached fixlist.txt file (end of reply) and save it to the Desktop, or the folder you saved FRST into. "Do not open that file when running FRST fix" NOTE. It's important that both FRST and fixlist.txt are in the same location or the fix will not work. Open FRST and press the Fix button just once and wait. The tool will make a log on the Desktop (Fixlog.txt) or the folder it was ran from. Please post it to your reply. Next, Do the following to perform a clean removal/reinstall of the application to make certain there aren't any corrupt remnants being left behind which may be causing this issue: Download and run the Malwarebytes Support Tool Accept the EULA and click Advanced tab on the left (not Start Repair) Click the Clean button, and allow it to restart your system and then reinstall Malwarebytes, either by allowing the tool to do so when it offers to on restart, or by downloading and installing the latest version from here Does Malwarebytes work now...? fixlist.txt Link to post Share on other sites More sharing options...
field3d Posted January 5, 2019 Author ID:1290740 Share Posted January 5, 2019 I attach the log of the fix but sadly not work the malware. I could make run the store of Microsoft fixing the windows with the ISO another app Adobe XD did the same kind of erro but that was fixed giving permissions in some dlls inside windows/system32. But malware not run including with your fix and your instructions. What could be or what other solution can be done? Fixlog.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 5, 2019 ID:1290749 Share Posted January 5, 2019 Thanks for the log and information update, continue: Select the Windows key and X key together, from the winx menu select "Command Prompt (Admin)" If command prompt has been replace with powershell do the following to change back: Select > start > settings > Personalization > Taskbar > flick switch to OFF under "Replace Command prompt with PowerShell etc etc" At the prompt type or copy/paste :- DISM /Online /Cleanup-Image /CheckHealth then hit the enter key. What results do you get..? Link to post Share on other sites More sharing options...
field3d Posted January 5, 2019 Author ID:1290815 Share Posted January 5, 2019 When I run the cmd admin from windows key x I receive this message: ”Deployment Image Servicing and Management tool Version: 10.0.17763.1 Image Version: 10.0.17763.195 No component store corruption detected. The operation completed successfully.” The errors of Event Viewer when you try to run malwarebytes are: ”1000 Error: Faulting application name: mbam.exe, version: 3.1.0.1662, time stamp: 0x5c070ab0 Faulting module name: Qt5Gui.dll, version: 5.11.1.0, time stamp: 0x5bd23319 Exception code: 0xc00000fd Fault offset: 0x002dce89 Faulting process id: 0x614 Faulting application start time: 0x01d4a50c1f01b3c1 Faulting application path: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe Faulting module path: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll Report Id: b42d062e-254b-4d86-83ea-19ea574264d7 Faulting package full name: Faulting package-relative application ID: 1001 Error: Fault bucket 1708997088058985654, type 1 Event Name: APPCRASH Response: Not available Cab Id: 0 Problem signature: P1: mbam.exe P2: 3.1.0.1662 P3: 5c070ab0 P4: Qt5Gui.dll P5: 5.11.1.0 P6: 5bd23319 P7: c00000fd P8: 002dce89 P9: P10: Attached files: \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WER9A35.tmp.dmp \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4A5.tmp.WERInternalMetadata.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4D5.tmp.xml \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4D3.tmp.csv \\?\C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4F4.tmp.txt These files may be available here: \\?\C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_mbam.exe_a1a299524ff5b40554d2a912a8883593abed6c1_b625da5e_321ea8cb Analysis symbol: Rechecking for solution: 0 Report Id: b42d062e-254b-4d86-83ea-19ea574264d7 Report Status: 268435456 Hashed bucket: aa9ea103bfe6fe3a17b793cc03eeccb6 Cab Guid: 0“ Like I mentioned the other one programs had permissions problems but malwarebytes who knows what’s happening. Any idea? Link to post Share on other sites More sharing options...
field3d Posted January 5, 2019 Author ID:1290820 Share Posted January 5, 2019 I attach also the .wer. I just renamed ti .txt to upload here. Report.txt Link to post Share on other sites More sharing options...
kevinf80 Posted January 5, 2019 ID:1290825 Share Posted January 5, 2019 Download Portable Windows Repair (all in one) from one of the following:www.tweaking.com/files/setups/tweaking.com_windows_repair_aio.ziphttp://www.majorgeeks.com/mg/getmirror/tweaking_com_windows_repair_portable,1.htmlhttps://www.bleepingcomputer.com/download/windows-repair-all-in-one/ Unzip the contents into a newly created folder on your desktop. Boot your system to Safe mode, instructions here: https://support.microsoft.com/en-gb/help/12376/windows-10-start-your-pc-in-safe-mode Open the Tweaking.com folder, run the tool by right click on Repair_Windows (icon with red briefcase) select "Run as Administrator" From the main GUI do the following: Select Tab 5 to make Registry backup, use the recommended option... When complete select "Repairs" tab, from there select "Open Repairs" tab.. From that window select the default option and checkmarck "Select All" box. When ready select "Start Repairs" tab.... When complete re-boot your system, see if there is any improvement, will Malwarebytes run...? Logs are saved to the Tweaking.com folder on your Desktop, the one to post is _Windows_Repair_Log.txt Link to post Share on other sites More sharing options...
field3d Posted January 6, 2019 Author ID:1290901 Share Posted January 6, 2019 Well after the tweaking.com indeed worked the malwarebytes but that destroyed again the microsoft store. What I did once tweaking.com fixed the malwarebytes and destroyed the store then fix from the ISO for third time the windows and after that reinstall with power shell the store and n the whole C modify the permissions for full to all apps and administrators. After that everything worked. Thank you for all now all is working! And the best without formatting or a scratch installation. Link to post Share on other sites More sharing options...
kevinf80 Posted January 6, 2019 ID:1290905 Share Posted January 6, 2019 Thanks for the update, good to hear your system is running ok for you.. Continue: Right click on FRST here: C:\Users\Dell\Downloads\FRST64.exe and rename uninstall.exe when complete right click on uninstall.exe and select "Run as Administrator" If you do not see the .exe appended that is because file extensions are hidden, in that case just rename FRST64 to uninstall That action will remove FRST and all created files and folders... Next, Read the following links to fully understand PC Security and Best Practices, you may find them useful....Answers to Common Security Questions and best PracticesDo I need a Registry Cleaner? Take care and surf safe Kevin... Link to post Share on other sites More sharing options...
kevinf80 Posted January 9, 2019 ID:1291641 Share Posted January 9, 2019 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks Link to post Share on other sites More sharing options...
Recommended Posts