Can't open Malwarebytes

[ZaroxDK]

I can't open up the program _ when I open it, it shuts down instant!

and when I type "malwarebytes" , in the search engine, chrome or any other browser crashes and close everything...

mbst-grab-results.zip FRST.txt Addition.txt

[Maurice Naggar]

Hello.  . 

My name is Maurice. I will guide you.

Let me suggest you do one scan with Adwcleaner to check for adwares.

First download & save it 

https://support.malwarebytes.com/hc/en-us/articles/360038520054-Download-and-install-Malwarebytes-AdwCleaner

 

Then do a scan with Adwcleaner 

https://support.malwarebytes.com/hc/en-us/articles/360038520114-Malwarebytes-AdwCleaner-scan-and-clean

 

Attach the clean log.

We will do more later. I will be guiding you.

[ZaroxDK]

 Here you go, and thank you :)

AdwCleaner[C01] log.txt

[Maurice Naggar]

Ok. Thanks. I will be making another reply soon. There much more work to do.

A major goal is to remove Advanced Windows Manager which has entangled itself many ways onto this system.

The following needs to be done.

Close any user programs that are open that you do not now need.

 

Then get & run the Malwarebytes MBAR anti-rootkit tool to do 1 run with it.

Disregard the title subject of the topic.

 

Run the MBAR tool as listed here 

 

https://forums.malwarebytes.com/topic/198907-requested-resource-is-in-use-error-unable-to-start-malwarebytes/

 

 

when done, I need the MBAR log.

 

Upon completion of the scan or after the reboot, two files named mbar-log.txt and system-log.txt will be created.

Both files can be found in the extracted MBAR folder on your Desktop.

Please attach both files in your next reply

Have patience. We will be doing different runs with several tools.

[Maurice Naggar]

By the way, since I noticed on the report, that Windows is in Safe Mode with Networking ....

Run the MBAR tool there if still in Safe mode.

But just be sure to Restart Windows in regular mode AND there be sure to run MBAR one more time.

It is important we do the procedures in regular Windows mode.

[ZaroxDK]

15 minutes ago, Maurice Naggar said:

By the way, since I noticed on the report, that Windows is in Safe Mode with Networking ....

Run the MBAR tool there if still in Safe mode.

But just be sure to Restart Windows in regular mode AND there be sure to run MBAR one more time.

It is important we do the procedures in regular Windows mode.

Okay, I will try that. 

Right now I cant go to your page in 'regular windows mode' , as the browser shuts down when writing 'malwarebytes' so I can only acces the page from here (in windows safe mode)...

 

I'll get back when I have tried it all :)

[ZaroxDK]

these two is from 'safe mode' ...

mbar-log-2021-05-18 (20-26-09).txt system-log.txt

[ZaroxDK]

normal windows mode

mbar-log-2021-05-18 (20-54-48).txt system-log.txt

[ZaroxDK]

Thank you SO much!!

It works now - I can open it all again in 'normal mode'   :D 

 

system-log.txt mbar-log-2021-05-18 (21-25-32).txt

[Maurice Naggar]

Hi. Thanks.  That report & your news is good.  But...however..

There is something that is named "Advanced Windows Manager" that has a big grip on this system. It needs to be removed. It's grip includes the use of 7 auto-started scheduled tasks. Following is a custom cleanup.

.

The script Fixlist.txt  needs to be saved to the Downloads folder.

Fixlist.txt

The custom script on this post is ONLY for this machine and NO other.   

 

Please be sure to Close any open work files, documents,  any apps you started yourself  before starting this.

 

If there are any CD / DVD / or USB-flash-thumb or USB-storage drives attached,  please disconnect any of those.

 

The system will be rebooted after the script has run.

Please save the (attached file named) FIXLIST.txt   to the  Downloads folder

 

Start the Windows Explorer and then, to the Downloads folder.

 

RIGHT click on  FRSTENGLISH.exe   and select RUN as Administrator and allow it to proceed.  Reply YES when prompted to allow to run the tool.

 If the tool warns you the version is outdated, please download and run the updated version.

IF Windows prompts you about running this, select YES to allow it to proceed.

 

IF you get a block message from Windows about this tool......

click line More info information on that screen

and click button Run anyway on next screen.

 

on the FRST window:

Click the Fix button just once, and wait.

PLEASE have lots and lots of patience when this starts. You will see a green progress bar start. Lots of patience. 

If you receive a message that a reboot is required, please make sure you allow it to restart normally.

The tool will complete its run after restart.

When finished, the tool will make a log ( Fixlog.txt) in the same location from where it was run.

 

Please attach the FIXLOG.txt with your next reply later, at your next opportunity   

 

Please know this will do a Windows Restart.   Just let it do its thing.  

Do let me know how things are overall,  after all this.

Sincerely. 

[ZaroxDK]

Thanks, here is the Fixlog :) 

Fixlog.txt

[Maurice Naggar]

Thanks for the log. One P U P classified as adware.onlineguard was removed, along with several dodgy scheduled tasks.

We are not all clear here. There will be more to do yet.

Tell me:. Are you now able to manually start Microsoft Defender ?

Could you / would you now do a Scan with Microsoft Defender ?

[ZaroxDK]

I think so... 

I run the Malwarebyte scan (before I read your post just now), and put all threats i quarantine.

And now i have just run the Microsoft defender quick scan, it says 0 threats  :) 

 

 

[Maurice Naggar]

Hello. Glad to hear that update.

Let me suggest this scan, just to use a different trusted tool from ESET. the ESET Online Scanner

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

 

It will start a download of "esetonlinescanner.exe"

Save the file to your system, such as the Downloads folder, or else to the Desktop.

 

Go to the saved file, and double click it to get it started.

 

When presented with the initial ESET options, click on "Computer Scan".

Next, when prompted by Windows, allow it to start by clicking Yes

When prompted for scan type, Click on Full scan

Look at & tick ( select ) the radio selection "Enable ESET to detect and quarantine potentially unwanted applications" and click on Start scan button.

Have patience. The entire process may take an hour or more. There is an initial update download.

There is a progress window display.

You should ignore all prompts to get the ESET antivirus software program. ( e.g. their standard program). You do not need to buy or get or install anything else.

When the scan is completed, if something was found, it will show a screen with the number of detected items. If so, click the button marked “View detected results”.

Click The blue “Save scan log” to save the log.

If something was removed and you know it is a false finding, you may click on the blue ”Restore cleaned files” ( in blue, at bottom).

Press Continue when all done. You should click to off the offer for “periodic scanning”.

[ZaroxDK]

log from eset. 

:)

blalog.txt

[Maurice Naggar]

This last Eset scan found & removed several trojans, plus some coinminer pest, plus some adware. This is a very beneficial run but points to a need for further scans.

 

Download Sophos Free Virus Removal Tool    and save it to your desktop.

 

If your security alerts to this scan either accept the alert or turn off your security to allow Sophos to run and complete.....

 

Please Do Not use your PC whilst the scan is in progress.... This scan is very thorough so may take several hours...

• Double click the icon and select Run
• Click Next
• Select I accept the terms in this license agreement, then click Next twice
• Click Install
• Click Finish to launch the program
• Once the virus database has been updated click Start Scanning

If any threats are found click Details, then View log file... (bottom left hand corner)

Copy and paste the results in your reply

Close the Notepad document, close the Threat Details screen, then click Start cleanup

Click Exit to close the program

If no threats were found please confirm that result....

 

The Virus Removal Tool scans the following areas of your computer:

• Memory, including system memory on 32-bit (x86) versions of Windows
• The Windows registry
• All local hard drives, fixed and removable
• Mapped network drives are not scanned.

Note: If threats are found in the computer memory, the scan stops. This is because further scanning could enable the threat to spread. You will be asked to click Start Cleanup to remove the threats before continuing the scan.

 

Saved logs are found here: C:\ProgramData\Sophos\Sophos Virus Removal Tool\Logs 

[ZaroxDK]

Hi,

sorry, I havn't tried the last thing you suggested. 

There are so many problems with the computer. Can you tell me, if the problem you are talking about, will be fixet if I reset the PC, and starts over with it ??

Or would I still need to run all the tests above, to remove the trouble you can see.??

 

[Maurice Naggar]

Hello.  I do so wish you had replied much earlier.  I do think if you would just stick with me, we can do more progress.

BUT if you are so set on trying a RESET you can give that a go, if you are wanting that.

HOWEVER, looking back on the old posts, I see no reason for not being able to actually do a Scan with Malwarebytes for Windows. I think you could actually run Malwarebytes.

You should be able to start it from the normal START menu, by scrolling down the list to "Malwarebytes for Windows".

OR else, look for the Malwarebytes blue icon on the Desktop & double click that to start Malwarebytes.

Please give that a good college try.

If Malwarebytes completes the scan, I very much want a copy of the Scan result report.

.

Here is the other thing I very much would like you to do.   Please run FRST / Farbar tool   See this HOW TO Guide

https://support.malwarebytes.com/hc/en-us/articles/360039025013-Run-Farbar-Recovery-Scan-Tool-to-gather-logs

 

when done, attach the FRST.txt  with next reply.    Please stick with me with renewed patience & persistence.

Edited June 5, 2021 by Maurice Naggar

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks