Jump to content
Dachs

Malewarebytes does not find virus

Recommended Posts

My system is Windows 10 Pro in German. I am having a problem with an apparently old virus sticking to install.exe. I can not call a bunch of programs, like B. as Malwarebytes. Instead, the request comes from whether I want to allow an app from an unknown manufacturer, namely "1958925.msi" or a window: "Windows Installer installation is being prepared" and then a bluescreen with the announcement, then "1958925.msi" will be installed. If I refuse, the window "Windows Installer installation is being prepared" still appears. If I reject it again, the window becomes inactive, but remains in place. After a while, the message "Server not found" appears. Incidentally, the problem also occurs when restarting Windows.
After all, I can call most programs as an administrator, including Malewarebytes, which, however, only after a few minutes of reflection. Unfortunately my virus killer programs (Malewarebytes and IObit Malware Fighter) do not find the virus.
Obviously, the install process has continued, but luckily the virus server no longer exists. Can you help me to solve the problem?

Share this post


Link to post
Share on other sites

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Lets check further.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Choose a File.
Navigate to the location of the File.
Click the file. It will appear in section.
Click the Saving button.

Please post the logs for my review.

Wait for further instructions

Share this post


Link to post
Share on other sites

Hi,

Remove these programs in bold via the Control Panel > Programs > Programs and Features.
Auslogics Anti-Malware (HKLM-x32\...\{A5A6F7C9-F91E-45C7-8DAA-289CBB0C817D}_is1) (Version: 1.18.0.0 - Auslogics Labs Pty Ltd)
Driver Booster 7 (HKLM-x32\...\Driver Booster_is1) (Version: 7.0.2 - IObit)

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Firefox:
Reset Firefox, Default Browsing settings:
https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

====

If the problem persists and you are Syncing Firefox it with other Devices reset it.

Navigate to this page and Remove it as suggested.

https://support.mozilla.org/en-US/kb/remove-synced-device-firefox-accounts

When done restart the computer normally.

If all is well.

Return to your Firefox Account and Click the Connect button.

Reset the sync.

Restart the computer normally.
<<<>>>

Please post the Fixlog.txt and let me know if your problem is solved.

fixlist.txt

Share this post


Link to post
Share on other sites
22 hours ago, nasdaq said:

Hi,

Remove these programs in bold via the Control Panel > Programs > Programs and Features.
Auslogics Anti-Malware (HKLM-x32\...\{A5A6F7C9-F91E-45C7-8DAA-289CBB0C817D}_is1) (Version: 1.18.0.0 - Auslogics Labs Pty Ltd)
Driver Booster 7 (HKLM-x32\...\Driver Booster_is1) (Version: 7.0.2 - IObit)

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Firefox:
Reset Firefox, Default Browsing settings:
https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings

====

If the problem persists and you are Syncing Firefox it with other Devices reset it.

Navigate to this page and Remove it as suggested.

https://support.mozilla.org/en-US/kb/remove-synced-device-firefox-accounts

When done restart the computer normally.

If all is well.

Return to your Firefox Account and Click the Connect button.

Reset the sync.

Restart the computer normally.
<<<>>>

Please post the Fixlog.txt and let me know if your problem is solved.

fixlist.txt 2.61 kB · 3 downloads

I have worked with the program FRST as instructed and Mozilla resseted, but unfortunately no result. What was new was that the virus first tried to load the install.exe. Then the same procedure as always. The fixlog attached.
I could not do the rest of your instructions because I did not understand Mozilla's instructions. Maybe my English is too bad, maybe it refers to pages that no longer exist.
Dachs

Fixlog_11-11-2019 22.57.15.txt

Share this post


Link to post
Share on other sites

Hi,

I do not use Firefox on a daily basis ad my Firefox is not Synced.
I also had difficulties in following the instructions, may be because I do not use the Synded.

I did find this may that may help you.

https://support.mozilla.org/en-US/questions/1220660#answer-1119546

In the bottom of the article look at:

Did you previously used Sync?

Follow these instructions

If you want to remove your Sync account then try this website:

    https://accounts.firefox.com/signin

Hope that helps.

Let me know if your problem is solved?

Share this post


Link to post
Share on other sites

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Thanks

 

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.