DWMAPI Not Found when installing Adware Cleaner

[ulrichburke]

Dear Malwarebytes.

OK, Mindspark International time again (have those guys nothing better to do with their boring, insipid lives?)

Downloaded your Adware Removal software but it wouldn't install, it says DWMAPI.DLL not found. So I did CTRL-ALT-DEL and got the little window that tells you what's going on coming up, which tells me DWMAPI.DLLis being DETECTED by windows, even if your software can't find it (no this is not a complaint about your software, read on.)  If I'm wrong about what I just said, tell me. 

Then I did an SFC SCANNOW and it started coming up with WINDOWS FILES NOT FOUND which is dead scary as I'm running XPSP3 and don't have the disc I used to install this version. I've got OTHER versions of XP but they're all modified in some way (OK, some are more quacked than a box of ducks!) and I just got them incase, in desperation, I needed to reinstall XP.  I can't use anything else because I'm disabled and XP runs my disability software. Buying the versions of the software for 7 or higher would cost me mucho money I do not have.  

Your Malwarebytes Anti Malware cleaned off 61 PUPs. Unfortunately they all came back again. After it cleaned them all off the second time, I suddenly got a whole little list of WEBSITE BLOCKED - OUTBOUND messages but they were too fast to copy the website address from. This tells me ET was trying to phone home, am I right?

Is there ANY way of getting a DWMAPI.DLL without having to reinstall Windows? Can I use System Restore without it deleting all the personal files made since the last time I used it (about 2 years ago?) Do I need too get a backup drive, b ackup EVERYTHING (ouch!) and reformat this one?

In a bit of fear and trembling I tried restarting Windows - it restarts and seems to work fine even though SFC /SCANNOW kept saying about not-found files.  It didn't say WHAT the files were, which doesn't help, just that it couldn't find them. That tells me that Mindspark's munched something, right? 

How do I get rid of Mindspark if I can't run your software? 

Yours very worriedly, 

Chris.  

[ulrichburke]

Dear Malwarebytes.

Chris again, the original poster of the above topic (or of this topic, depending how you look at it.) Same guy who did the original post, anyway. 

I've had a breakthrough. Managed to actually read one of the ET Phoning Home addys I talked about above.  It's 198.134.112.243 and it checks out to Webair International, who seem to be a cloudspace company, renting out cloud computer file storing space.  The other numbers popping up too fast for me to capture them (really am sorry, I'm just not fast enough) shared at least the first two sets of address numbers which tells me they're trying to call places in the same cloud. 

Thing IS, the fact they're there at all tells me your software's missed something. I mean if it had got EVERYTHING, they wouldn't be there TO call home, would they now.  Does this means the moment I restart the computer they're going to call all 61 of their little friends to come back and play again? 

Gonna do a restart, re-scan with Malwarebytes and see what happens!  Going to rescan in normal mode so hopefully Windows works as best it can, assuming it actually restarts with the worrying SFC Scannow messages in mind... If it DOESN'T I've got an alternative version of Windows installed on this 2T drive which SHOULD.  I'm rapidly getting outta my depth with all this.  

Yours respectfully

Chris.

[kevinf80]

Hello Chris and welcome to Malwarebytes, Continue with the following: Open Malwarebytes, select > Reports > then checkmark (tick) most recent "Website Block" entry > then select "View Report" > "Export" > Text File (*.txt) name and save that file to Desktop or somewhere of your choice, attach to your reply... Do that for the 3 most recent block. Next, Download Farbar Recovery Scan Tool and save it to your desktop. Alternative download option: http://www.techspot.com/downloads/6731-farbar-recovery-scan-tool.html Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. If your security alerts to FRST either, accept the alert or turn your security off to allow FRST to run. It is not malicious or infected in any way... Be aware FRST must be run from an account with Administrator status... Double-click to run it. When the tool opens click Yes to disclaimer.(Windows 8/10 users will be prompted about Windows SmartScreen protection - click More information and Run.) Make sure Addition.txt is checkmarked under "Optional scans" user posted image Press Scan button to run the tool.... It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply. The tool will also make a log named (Addition.txt) Please attach that log to your reply. Next, Run FRST one more time: Type the following in the edit box after "Search:". DWMAPI.DLL Click Search Files button and post the log (Search.txt) it makes to your reply. Let me see those logs in your reply. Thank you, Kevin...

[kevinf80]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks