Jump to content

Recommended Posts

I am trying to get rid of a virus (or ten) on my other computer. MSB.exe was one process that was running that when I did a search, came up that it was a virus.

This is an XP computer, with Norton antivirus installed. I normally run Firefox browser, but also have Opera and IE on the computer. Norton will run, but does not catch the problems. Right not, Firefox will not open at all. If I try to run MWB or spybot, the computer tells me that it cannot find the file to run them. If I re-install the anti-virus programs, they will open up, but just a few seconds into a scan, they will close and then if you try to run them again, the computer tells you it cannot find the file again. So, obviously the virus is disabling them. I am at a total loss what to do. I have seen several others with the same problems as me, but the fixes don't work for me that I've tried. I'm trying to run everything in safe mode with networking, but sometimes the computer crashed and when I hit F8 on reboot, it says 'keyboard failure', which I am assuming is again the virus at work? I'm almost ready to set it to safe mode and move all my pics and special files to another PC, but I would like to give it a good try before doing that. I really liked that computer.........

Karin

Link to post
Share on other sites

Welcome to Malwarebytes! You need your AV/Firewall program to trust the Malwarebytes files below:

Please exclude the following files from your antivirus (if using any firewall besides the built in Windows Firewall, exclude them from it as well):

For Windows XP:

  • C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  • C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  • C:\Documents and Settings\All Users\Application Data\Malwarebytes' Anti-Malware\rules.ref
  • C:\Windows\System32\drivers\mbam.sys
  • C:\Windows\System32\drivers\mbamswissarmy.sys

If you still have issues or an infection, well will take it to the next step. Can you configure your AV program to accept the files above? post back if you have any questions please...

Link to post
Share on other sites

Download and extract this registry fix that will fix the .exe file association -- http://www.dougknox.com/xp/fileassoc/xp_exe_fix.zip

After it's downloaded, you have to run it from a command window. Once it's run, you should have some luck getting mbam and the likes running. I've fixed a few of these the last few days and I think I needed to run combofix before I could even get mbam to run.

Good luck!

Link to post
Share on other sites

@ bkvail Please follow these instructions:

follow these instructions & post it in the HiJackLog Forum please

Scan and post logs - read note at bottom in green

If you're having Malware related issues with your computer that you're unable to resolve.

  1. Please read and follow the instructions provided here: I'm infected - What do I do now?
  2. If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  3. When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

  • Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  • Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  • Using these other tools often makes the cleanup task more difficult and time consuming.
  • If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  • Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  • There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.