Couldnt open malwarebytes

[venie]

Hello i couldn't open malwarebytes and i had to delete it and reinstall it. I am scared for some virus cause strange things happened on the pc. But after i reinstall it i did a full scan with all boxes checked for everything and it found no virus or threats on the pc. Is this enough for me ? should i do something else?

[AdvancedSetup]

Hello @venie

It's late for me and I'm off work but please go ahead and run the following and I'll check back on you again in the morning.

 

Please run the following steps and post back the logs as an attachment when ready.

STEP 01

• If you're already running Malwarebytes then open Malwarebytes and check for updates. Then click on the Scan tab and select Threat Scan and click on Start Scan button.
• If you don't have Malwarebytes installed yet please download it from here and install it.
• Once installed then open Malwarebytes and select Scan and let it run.
• Once the scan is completed click on the View Report button, then the Export button and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know in your next reply.

STEP 02

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Right-click on the program and select Run as Administrator to start the tool.
• Accept the Terms of use.
• Wait until the database is updated.
• Click Scan Now.
• When finished, please click Clean & Repair.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Attach or Copy its content into your next reply.

 

RESTART THE COMPUTER Before running Step 3

STEP 03
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a checkmark here.
• Please attach the Additions.txt log to your reply as well.

 

Thanks

[venie]

UPDATE i am doing another scan on all drives with rootkin on and it scan for 20 minutes now and found on threat and its saying :unspecified. i am waiting for it to end to post the result and go to step 2.

is this normal for this to take so long?

 

 

[venie]

test1.txt

the first one is the custom scan found 1 threat and i quarantined it but it stuck on one file and i cancelled it... at around 45 mins...

then i did a threat scan and it found no threats test2.txt

i am going to step 2 now

[venie]

AdwCleaner[C00].txt

STEP 2: found 19 items and quarantined them  i posted the txt above

[venie]

FRST.txtAddition.txt

STEP 3: completed,

i  am waiting for your response

i pressed one phising email yesterday but firefox stopped the website from running and that's maybe where the virus came from.

[AdvancedSetup]

Hello @venie

The logs do not really indicate any real infections at this point. Perhaps some minor leftover elements of previous infections.

Let's go ahead and do some general clean up though to ensure the computer is working well

Make sure you temporarily disable Norton antivirus while you run this fix.

 

Please download the attached fixlist.txt file and save it to the Desktop or location where you ran FRST from.
NOTE. It's important that both files, FRST or FRST64, and fixlist.txt are in the same location or the fix will not work.

Please make sure you disable any real time antivirus or security software before running this script. Once completed make sure you re-enable it.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system that cannot be undone.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt) or wherever you ran FRST from. Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

NOTE-1:  This fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files. It will also run a disk check on the restart to ensure disk integrity. Depending on the speed of your computer this fix may take 30 minutes or more.

NOTE-2: As part of this fix all temporary files will be removed. If you have any open web pages that have not been bookmarked please make sure you bookmark them now as all open applications will be automatically closed. Also, make sure you know the passwords for all websites as cookies will also be removed. The use of an external password manager is highly recommended instead of using your browser to store passwords.

The following directories are emptied:

• Windows Temp
• Users Temp folders
• Edge, IE, FF, Chrome and Opera caches, HTML5 storages, Cookies and History
• Recently opened files cache
• Flash Player cache
• Java cache
• Steam HTML cache
• Explorer thumbnail and icon cache
• BITS transfer queue (qmgr*.dat files)
• Recycle Bin

Important: items are permanently deleted. They are not moved to quarantine. If you have any questions or concerns please ask before running this fix.

The system will be rebooted after the fix has run.

fixlist.txt

Thanks

 

[venie]

 

test3.txt

i did another scan with malware bytes and it detected 10 threats! i am going to follow the method you said now

[AdvancedSetup]

Thanks, please attach the Fixlog.txt file when ready

 

[venie]

Fixlog.txt

here is the fixlog

[AdvancedSetup]

Windows Resource Protection found corrupt files but was unable to fix some

Yes, it looks like something prevented the script from completing properly.

Make sure you disable your Antivirus and also disable the real time antivirus from Windows Defender if it enables after disabling your antivirus.

Then download the script again and run it. You should be able to run it and head to bed if you like. Then post the new log in the morning.

Thank you

 

[venie]

 

Fixlog.txt

here its the last fix now i must sleep hope we complete this tommorow!

[AdvancedSetup]

I don't believe the computer is infected but both SFC and DISM are currently not able to correct some type of file corruption. We'll need to possibly download a Microsoft ISO image to mount and run DISM to repair the Store image which then often will allow SFC to fix the issue.

In the meantime let's go ahead though and run a secondary 3rd party antivirus scanner to double-check that there is no infection.

Make sure you temporarily disable any other security software and run the following scanner. Let me know if it finds anything or not.

 

Please download and run the following Kaspersky antivirus scanner to remove any found threats

Kaspersky Virus Removal Tool

Let me know if it finds anything or not

 

Then tomorrow we'll look at addressing the SFC and DISM issue.

Thank you and goodnight

 

[venie]

The scan ended

It found on trojan multi.brosubsc.gen on memory

And one hacktool.win64.kmsauto.b on system 32 file

[venie]

When the system reboot it did another scan but it found no threats 

Can i be sure the malware was deleted? 

[AdvancedSetup]

Yes, the one in memory would get removed by rebooting. 

Let us try one other scan using a Microsoft tool as that specific file is one used against Microsoft so they may have a better detection routine for it.

 

The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system.

The download links & the how-to-run-the tool are at this link at Microsoft

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Let me know the result of this.

The log is named MSERT.log 

the log will be at  C:\Windows\debug\msert.log

Please attach that log with your reply.

Thanks

 

[venie]

msert.log

Hello sorry the scan took many hours. It found one hacktool win32 keygen!

[AdvancedSetup]

Please go ahead and do a clean removal and reinstall of Malwarebytes

Uninstall and reinstall Malwarebytes using the Malwarebytes Support Tool

Let me know if there are any issues

Thanks

 

[venie]

ok done it with no problems

[AdvancedSetup]

Okay, all should be good at this time. Let me have you scan once and post back that log though before we close up here.

 

Please run the following steps and post back the logs as an attachment when ready.

 

• If you already have Malwarebytes installed then open Malwarebytes and click on the Scan button. It will automatically check for updates and run a Threat Scan.
• If you don't have Malwarebytes installed yet please download it from here and install it.
• Once installed then open Malwarebytes and select Scan and let it run.
• Once the scan is completed make sure you have it quarantine any detections it finds.
• If no detections were found click on the Save results drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If there were detections then once the quarantine has completed click on the View report button, Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If the computer restarted to quarantine you can access the logs from the Detection History, then the History tab. Highlight the most recent scan and double-click to open it. Then click the Export drop-down, then the Export to TXT  button, and save the file as a Text file to your desktop or other location you can find and attach that log on your next reply.
• If Malwarebytes won't run then please skip to the next step and let me know in your next reply that the scanner would not  run.

 

Thanks

 

Edited August 7, 2020 by AdvancedSetup
updated information

[venie]

Ok i will run the scan but whar about  the first thing you said here

Edited August 7, 2020 by AdvancedSetup
removed quote

[venie]

test4.txt

ok scan ended no threats found here is the log

[AdvancedSetup]

Okay, that looks good.

Please exit out of Malwarebytes. Then click on Windows Start and type in "Check for updates" and check for Windows updates and let me know how that goes

 

[venie]

There were some problems installing updates, but we'll try again later. If you keep seeing this and want to search the web or contact support for information, this may help: (0x80070422)

[AdvancedSetup]

Please try the following suggestions on getting Windows 10 to complete updates.

How to fix Windows Update problems on Windows 10
https://www.windowscentral.com/how-fix-windows-update-problems-windows-10#fix_windows_update_troubleshooter_windows10

If that does not work you can review other options as well from Microsoft

Troubleshoot problems updating Windows 10
https://support.microsoft.com/en-us/help/4089834/windows-10-troubleshoot-problems-updating?ocid=20SMC10164Windows10