MalwareBytes still on PC after uninstall

[questionaboutstuff]

Hi, I uninstalled MB last night and it auto opened the page where it says "Sorry to see you go". I assumed it was good until earlier today when I saw a MB popup/notification - I don't remember what it said; believe it said something about Browser Protection. This was very weird so I went to the system tray and saw it. I closed it and then my SSD software was at the spot where MB's tray icon just was (8 icons in the system tray before MB was closed, 8 after it was closed). I assume that was just a UI bug from Windows, but the fact that MB was still on my computer after I uninstalled made me feel suspicious. I previously ran a malicious file so I'm worried that it's preventing MB from being uninstalled successfully.  I've uninstalled MB before without this happening. I just uninstalled it again and got the "Sorry to see you go" page as well. Is there any reason this happened? Thanks

[Malwarebytes]

***This is an automated reply***

Hi,

Thanks for posting in the Malwarebytes for Windows Help forum.

If you are having technical issues with our Windows product, please do the following:

Malwarebytes Support Tool - Advanced Options

This feature is designed for the following reasons:

• For use when you are on the forums and need to provide logs for assistance
• For use when you don't need or want to create a ticket with Malwarebytes
• For use when you want to perform local troubleshooting on your own

How to use the Advanced Options:

Spoiler

1. Download Malwarebytes Support Tool
2. Double-click mb-support-X.X.X.XXXX.exe to run the program
   • You may be prompted by User Account Control (UAC) to allow changes to be made to your computer. Click Yes to consent.
3. Place a checkmark next to Accept License Agreement and click Next
4. Navigate to the Advanced tab
5. The Advanced menu page contains four categories:
   • Gather Logs: Collects troubleshooting information from the computer. As part of this process, Farbar Recovery Scan Tool (FRST) is run to perform a complete diagnosis. The information is saved to a file on the Desktop named mbst-grab-results.zip and can be added as an email attachment or uploaded to a forum post to assist with troubleshooting the issue at hand.
   • Clean: Performs an automated uninstallation of all Malwarebytes products installed to the computer and prompts to install the latest version of Malwarebytes for Windows afterwards. The Premium license key is backed up and reinstated. All user configurations and other data are removed. This process requires a reboot.
   •  Repair System: Includes various system-related repairs in case a Windows service is not functioning correctly that Malwarebytes for Windows is dependent on. It is not recommended to use any Repair System options unless instructed by a Malwarebytes Support agent.
   • Anonymously help the community by providing usage and threat statistics: Unchecking this option will prevent Malwarebytes Support Tool from sending anonymous telemetry data on usage of the program.
6. To provide logs for review click the Gather Logs button
7. Upon completion, click OK
8. A file named mbst-grab-results.zip will be saved to your Desktop
9. Please attach the file in your next reply.
10. To uninstall all Malwarebytes Products, click the Clean button.
11. Click the Yes button to proceed. 
12. Save all your work and click OK when you are ready to reboot.
13. After the reboot, you will have the option to re-install the latest version of Malwarebytes for Windows.
14. Select Yes to install Malwarebytes.
15. Malwarebytes for Windows will open once the installation completes successfully.

Screenshots:

Spoiler

 

 

 

 

Spoiler

 

 

 

 

If you are having licensing issues, please do the following: 

Spoiler

For any of these issues:

• Renewals
• Refunds (including double billing)
• Cancellations
• Update Billing Info
• Multiple Transactions
• Consumer Purchases
• Transaction Receipt

Please contact our support team at https://support.malwarebytes.com/hc/en-us/requests/new to get help

If you need help looking up your license details, please head here: Find my premium license key

 

 

Thanks in advance for your patience.

-The Malwarebytes Forum Team

[Porthos]

14 minutes ago, questionaboutstuff said:

Is there any reason this happened? Thanks

Did you restart after the uninstall? Try that first.

If that fails,

Download the Malwarebytes Support Tool.

Please close all browsers and programs before running the tool.

Once done it will attempt to reinstall Malwarebytes. Close the installation and restart the computer.

After the restart, you may delete the support tool and the FRSTEnglish file located in your Downloads folder.

 

[questionaboutstuff]

8 minutes ago, Porthos said:

Did you restart after the uninstall? Try that first.

If that fails,

 

Download the Malwarebytes Support Tool.

 

 

 

 

Please close all browsers and programs before running the tool.

 

Once done it will attempt to reinstall Malwarebytes. Close the installation and restart the computer.

After the restart, you may delete the support tool and the FRSTEnglish file located in your Downloads folder.

 

Hi,

 

Yes, I shut down my computer last night and then turned it back on today. I will see if it does it again. I am just worried it is malware doing this.

[Porthos]

2 minutes ago, questionaboutstuff said:

I shut down my computer last night and then turned it back on today.

By default with Windows that is not the same as a restart unless Fast Start is off.

Disable-Fast-Startup
https://forums.malwarebytes.com/topic/299350-disable-fast-startup/

[questionaboutstuff]

Just now, Porthos said:

By default with Windows that is not the same as a restart unless Fast Start is off.

Disable-Fast-Startup
https://forums.malwarebytes.com/topic/299350-disable-fast-startup/

Hi,

I turned off Fast Startup and when I go to my CPU in Task Manager, the uptime is starting from today instead of counting from the day before.

[Porthos]

7 minutes ago, questionaboutstuff said:

I am just worried it is malware doing this.

If you think you are infected, why uninstall Malwarebytes in the first place?

[questionaboutstuff]

Just now, Porthos said:

If you think you are infected, why uninstall Malwarebytes in the first place?

 

I have ESET installed. I ran MB for a second opinion scan.

[questionaboutstuff]

3 minutes ago, Porthos said:

If you think you are infected, why uninstall Malwarebytes in the first place?

Also, in the guide, I ran the command in Method 3 a few days ago. However, when I check the registry value in Method 2, the value is still 1. I am on W11. It is weird because the CPU uptime is normal.

[questionaboutstuff]

51 minutes ago, Porthos said:

If you think you are infected, why uninstall Malwarebytes in the first place?

Hi, I have restarted my computer. In my AppData/Local/Temp folder, I have a MBsetup.txt from earlier today. I believe it overwrote the one from last night. I will note that the MBsetup.exe is still in my Downloads folder, yet I did not receive a prompt earlier for its installation. I do not see MB installed on my computer, but earlier it installed after about 6 hours of uptime.

[questionaboutstuff]

1 hour ago, Porthos said:

If you think you are infected, why uninstall Malwarebytes in the first place?

Is it okay if I send the logs of uninstalling from last night?

[Porthos]

Do want to be rid of Malwarebytes or do want someone to check your computer for malware??

[questionaboutstuff]

Just now, Porthos said:

Do want to be rid of Malwarebytes or do want someone to check your computer for malware??

Hi,

 

I install MB occasionally o use its rootkit scanner but I don't keep it as I know it can interfere with ESET. I was using it to scan for malware, but I am also very uncertain as to why MB stayed on the system after I uninstalled it. I have the logs from the uninstall last night and the uninstall from the logs today, but they look very different. The one from today is much longer. Ideally, I'd want my PC checked for malware while also making sure that the reason it was still on my PC isn't related to malware messing with my files. Sorry for any confusion, thank you!

[Porthos]

Sounds like it was either a damaged uninstaller or ESET as you say might of interfered with it.

 

Please do the following so that we may take a closer look at your system for any possible infections.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply
  
   

Thank you

[questionaboutstuff]

3 minutes ago, Porthos said:

Sounds like it was either a damaged uninstaller or ESET as you say might of interfered with it.

 

Please do the following so that we may take a closer look at your system for any possible infections.

WARNING: Do Not click the Repair option under Advanced unless requested by a Malwarebytes support agent or authorized helper

NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system.

• Download the Malwarebytes Support Tool
• In your Downloads folder, open the mb-support-x.x.x.xxx.exe file
• In the User Account Control pop-up window, click Yes to continue the installation
• Run the MBST Support Tool
• In the left navigation pane of the Malwarebytes Support Tool, click Advanced
• In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine
• A zip file named mbst-grab-results.zip will be saved to the Desktop or on the hidden Public desktop (usually C:\Users\Public\Desktop), please upload that file on your next reply
  
   

Thank you

Hi, here is the zip:

mbst-grab-results.zip

 

[Porthos]

I do not see any signs of infection, I can also say Malwarebytes is no longer installed as well.

Your logs do say the computer requires a restart to compleate a Windows update.

Quote

Pending Windows Update Reboot
========================================
A reboot is pending
Windows Update: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired
Windows Update: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\RebootPending
Windows Update: C:\Windows\WinSxS\pending.xml

 

[questionaboutstuff]

Just now, Porthos said:

I do not see any signs of infection, I can also say Malwarebytes is no longer installed as well.

Your logs do say the computer requires a restart to compleate a Windows update.

 

Yep, I'll take care of that. I'm still unsure as to why it was still on my computer earlier. I have the uninstall logs and they don't seem quite the same.