Jump to content

Not have sufficient permissions (either disk or registry) to install MBytes

xxxmancs

By xxxmancs
in Resolved Malware Removal Logs

 Share

Recommended Posts

xxxmancs

xxxmancs

Posted
Posted

Hello everyone, i just wanted to install MalwareBytes free version for my own PC to see if i have any malitios code using the admin account but after i downloaded the file from the official page i get an note saying that i do not have sufficient permissions to install MB. I tried to modify permissions from the folders in the registry also on the disk but still didn't helped. I also ran the FRSTEnglish.exe tool and got the output from the files attached and my windows defender also blocked some threds called Behavior:Win32/UACBypassExp.ZI and PUA:Win32/Creprote... I hope someone could help me 

Regards Alex

Screenshot 2020-12-09 204853.png

Screenshot 2020-12-09 204931.png

Screenshot 2020-12-09 204958.png

FRST.txt Addition.txt

Link to post
Share on other sites
  • Staff
Malwarebytes

Malwarebytes

Posted
  • Staff
Posted

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

  • For use when you are on the forums and need to provide logs for assistance
  • For use when you don't need or want to create a ticket with Malwarebytes
  • For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler
  1. Download Malwarebytes Support Tool
  2. Double-click mb-support-X.X.X.XXXX.exe to run the program
    • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
  3. Place a checkmark next to Accept License Agreement and click Next
  4. Navigate to the Advanced tab
  5. The Advanced menu page contains four categories:
    • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
    • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
    •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
    • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
  6. To provide logs for review click the Gather Logs button
  7. Upon completion, click OK
  8. A file named mbst-grab-results.zip will be saved to your Desktop
  9. Please attach the file in your next reply.
  10. To uninstall all Malwarebytes Products, click the Clean button.
  11. Click the Yes button to proceed. 
  12. Save all your work and click OK when you are ready to reboot.
  13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
  14. Select Yes to install Malwarebytes.
  15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler
 
 
 
 
Spoiler

 

 

01.png

02.png

03.png

04.png

05.png

06.png

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

  • Renewals
  • Refunds (including double billing)
  • Cancellations
  • Update Billing Info
  • Multiple Transactions
  • Consumer Purchases
  • Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

Link to post
Share on other sites
xxxmancs

xxxmancs

Posted
  • Author
Posted

i serached on google for this kind of note but i couldn't find anything that worked for me. i also tried to change the program files/ 86 to have the owner the administrator and i changed the permission to allow all using a tool that changed something in the reg and i was able take ownership of that folder  

Screenshot_1.jpg

Link to post
Share on other sites
Porthos

Porthos

Posted
Posted

Can you please collect and upload as an attachment the diagnostic data using our MBST?

  • Download and run the Malwarebytes Support Tool
  • Accept the EULA and click Advanced tab on the left (not Start Repair)
  • Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply
Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Hello @xxxmancs

Error: (12/09/2020 08:59:02 PM) (Source: SecurityCenter) (EventID: 3) (User: )
Description: The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus, AntiSpyware and Firewall.

 

Error 5 from RegOpenKeyExW

 

Something is blocking access which often is due to an aggressive antivirus, but in this case I'm not seeing an antivirus setup to do that. Not seeing Controlled Folder access kick in either, so something else is going on. It very well could be due to some type of corruption.

Please try the following and post back what you see or what error you get.

Click on START and type in CMD.EXE and when it shows on the menu right-click and select "Run as administrator" then type in the following and press the Enter key. 

SFC /SCANNOW

Then do the following, you can type it but it might be easier to copy and paste it into the command prompt windows. 

DISM.exe /Online /Cleanup-Image /ScanHealth

 

Thanks

 

  • Thanks 1
Link to post
Share on other sites
xxxmancs

xxxmancs

Posted
  • Author
Posted

i may did something wrong when i tried to resolve the problem and i may messed up with permissions or something but i also don't have any antivirus besides the one of the windows, i had bitdefender before but it was deleted when i proceeded those scans with your app.

14 minutes ago, AdvancedSetup said:

SFC /SCANNOW

C:\WINDOWS\system32>SFC /SCANNOW

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.
 

14 minutes ago, AdvancedSetup said:

DISM.exe /Online /Cleanup-Image /ScanHealth

C:\WINDOWS\system32>DISM.exe /Online /Cleanup-Image /ScanHealth

Deployment Image Servicing and Management tool
Version: 10.0.19041.572

Image Version: 10.0.19041.685

[==========================100.0%==========================] No component store corruption detected.
The operation completed successfully.

Link to post
Share on other sites
  • Root Admin
AdvancedSetup

AdvancedSetup

Posted
  • Root Admin
Posted

Okay, let's go ahead then and do another scan with another tool and see what it says

 

Let me have you run a different scanner to double-check. I don't expect it to find anything, but no harm in checking.

I would suggest a free scan with the ESET Online Scanner

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

  • It will start a download of "esetonlinescanner.exe"
  • Save the file to your system, such as the Downloads folder, or else to the Desktop.
  • Go to the saved file, and double click it to get it started. 
  • When presented with the initial ESET options, click on "Computer Scan".
  • Next, when prompted by Windows, allow it to start by clicking Yes 
  • When prompted for scan type, Click on Full scan 
  • Look at & tick  ( select )   the radio selection "Enable ESET to detect and quarantine potentially unwanted applications"   and click on Start scan button.
  • Have patience.  The entire process may take an hour or more. There is an initial update download.
  • There is a progress window display.
  • You should ignore all prompts to get the ESET antivirus software program.   ( e.g.  their standard program).   You do not need to buy or get or install anything else.
  • When the scan is completed, if something was found, it will show a screen with the number of detected items.  If so, click the button marked “View detected results”.
  • Click The blue “Save scan log” to save the log.
  • If something was removed and you know it is a false finding, you may click on the blue ”Restore cleaned files”  ( in blue, at bottom).
  • Press Continue when all done.  You should click to off the offer for “periodic scanning”.

 

 

Link to post
Share on other sites
xxxmancs

xxxmancs

Posted
  • Author
Posted

i accidentally removed permissions to everyone in registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System to the system folder and now i can't acces it even from the normal user that is admin. i also get an error when i want to open apps and i can't run anything as administrator  

Screenshot_1.jpg

Screenshot_2.jpg

Link to post
Share on other sites
xxxmancs

xxxmancs

Posted
  • Author
Posted

if i try to change the owner of a folder. I can't even open regedit or cmd by default only from shortcut that was set as admin before so i am able to open it as admin but i can't open other apps from it because i will get those errors. the folder i modified was System i guess some apps are located in there or so 

Screenshot_4.jpg

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.

  I accept