Jump to content

"Invalid Path" error on install - Lingering malware, help with FRST


Go to solution Solved by nasdaq,

Recommended Posts

Hi,
I  could not download Chrome when accessing it through Firefox and Edge as both would freeze up. Something seemed to stop them from running properly. So I tried to download MB to see if this computer was infected, I was getting the "Invalid Path" error when I was trying to install MB using default settings. 
Thanks to various posts on the MB forums, I have done the following which all have picked up various viruses/ malware/ adware but I suspect some are still left.
When I finally changed the default path on MB and it did finally install (to my surprise) and picked out another few more malwares. 

Q1.Why cant I install on the default path?
Q2. I cant open the "SuperAntispyware" website from this laptop but the site is accessible from my other machine. This would imply some malware/ process is stopping me from doing so. How do I find the culprit?
Q3. I ran Farbar Recovery Scan Tool (FRST). I deleted the entries in the HOSTS file as there were only 2. I don't know how to interpret the "Addition" and "FRST" files and need help in creating a Fixlist file.
Tools used so far:
--------------------------
"Malwarebytes Anti-Rootkit (MBAR)" for infection removal
"Malwarebytes Support Tool" for cleaning up any previous MB installs
"AdwCleaner" for infection removal
"rKill" to help stop any malware processes that might be interfering. 
"Microsoft's Safety Scanner" - for infection removal, this still picked up a few issues
"AVG Free" - could not download initially. Eventually was able to download and install it. Windows scan picked up a few issues but when I ran AVG on boot and it picked up more items.
Thanks
 

FRST.txt Addition.txt

Link to post
Share on other sites

  • Solution

Hello, Welcome to Malwarebytes.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

Please download the attached Fixlist.txt file to  the same folder where the Farbar tool is running from.
The location is listed in the 3rd line of the FRST.txt log you have submitted.

Run FRST and click Fix only once and wait.

The Computer will restart when the fix is completed.

It will create a log (Fixlog.txt) please post it to your reply.
===

Is the problem solved?

fixlist.txt

Edited by nasdaq
Link to post
Share on other sites

When I tried to run the fix on FRST, AVG quarantined the executable saying it was infected with IDP.HELU.AID15.

I tried downloading it again, and Chrome gave me a warning saying "FRST64.exe is not commonly downloaded and may be dangerous."

Do you have a reliable link to download FRST from?

Link to post
Share on other sites

I ignored the warning and ran the app anyway as I had downloaded FRST from the link in the other post.

This time I got a message saying "Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk."

Should I just run it anyway?

 

Link to post
Share on other sites

  • Root Admin

Hello @Ibz

FRST is safe - due to how the program is packed security software will often block it.

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

 

image.png

 

Do not download anything and don't click on any Ads - this shows how to disable the Microsoft Smartscreen feature if needed to download the file

https://www.maketecheasier.com/disable-smartscreen-filter-windows10/

NOTE: If you install a content blocker such as our free BrowserGuard it will stop most annoying Ads
https://www.malwarebytes.com/browserguard/

 

Once you have FRST64.EXE downloaded place the attached file that @nasdaq provided FIXLIST.TXT in the same location as the FRST64 program.
Then run it and click on the FIX button and when ready post back the FIXLOG.txt file.

 

Thank you

 

 

Link to post
Share on other sites

  • Root Admin

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you

 

 

  • Thanks 1
Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.