MBAM Hangs on Removal

[Michael_Leide]

Good Morning,

One of my clients computers is infected with a piece of malware. While attempting to remove the malware, i've run Malware Bytes Anti-Malware software. After dealing with the installation (changing file names, etc) i've managed to get the scan to run. However, after the scan, the removal process hangs while quarantining what appears to be a registry entry. Trend Micro Internet Security Pro is running, and I am unable to shut it down.

Please assist, i will provide whatever logs and additional information are necessary.

Thanks!

-Michael

[GT500]

Please add the following file to the exclusions list in Trend Micro's anti-virus:

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

[Michael_Leide]

Please add the following file to the exclusions list in Trend Micro's anti-virus:

C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe

Unfortunately whatever piece of software is attacking the system is disallowing me from accessing Trend Micro in any way. I cannot open the main dashboard or close the program.

Any suggestions on a workaround?

[Michael_Leide]

Unfortunately whatever piece of software is attacking the system is disallowing me from accessing Trend Micro in any way. I cannot open the main dashboard or close the program.

Any suggestions on a workaround?

I should add that Task Manager has been disabled as well.

[noknojon]

Hi Michael -

This is from the FAQ section and may also help as it shows in pictures all details related to Trend - The link is listed below -

http://www.malwarebytes.org/forums/index.p...st&p=162099

Thank You -

[Michael_Leide]

Hi Michael -

This is from the FAQ section and may also help as it shows in pictures all details related to Trend - The link is listed below -

http://www.malwarebytes.org/forums/index.p...st&p=162099

Thank You -

Thanks for the response Nokonojon, unfortunately the set of instructions provided there rely on my ability to be able to interact with Trend Micro. I need to find a way to completely disable Trend Micro without use of the program itself or the Task Manager.

[noknojon]

Sorry Michael I did not realise you had NO access to a frozen Trend -

From the list of antivurus products shown in the link below choose Trend and see if you can uninstall it - You will always be able to reinstall later -

This list is provided for use in cases like this - I keep it in Favorites always and it is updated as things change -

http://uninstallers.blogspot.com/

Hope this helps -

[dus]

Michael,

Start > Run > gpedit.msc

- Select User Configuration

- Select Administrative Templates

- Select System

- Select Ctrl+Alt+Delete Options

- Select Remove Task Manager

- Right Click and select properties, now check Not Configured.

PS: If the police is Not Configured change to Disabled (its normal you will enable your task manager)

Done, reboot and try access your task manager again.

Works in all Service Packs of Windows XP

You can try it too:

Start > Run > Type cmd > Now copy & paste it

reg add HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableRegistryTools /t REG_DWORD /f

Looks if u can access your task manager again.

Good luck!

[AdvancedSetup]

Hello , and welcome to Malwarebytes.org

We don't work on Malware removal in the general forums.

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org