MBAM - run time error 93

[Danapba]

Good morning,

I started working with a forum over at Bleepingcomputer.com regarding my computer. I was running MBAM as a precautionary measure and it listed an infection or two but before concluding, it gave a Run Time Error 93 - invalid Pattern String error and wouldn't finish. When I clicked OK, it wouldn't continue.

I worked for the last week or so with one of their tech's on a number of fixes to identify if there was an error or what should be done.

We created OTL reports, created a GMER log, etc., ran Combofix,...uninstalled, reinstalled MBAM....Lots of stuff.

I'm attaching a link to what we were doing.

http://www.bleepingcomputer.com/forums/topic311003.html

The final resolution was perhaps this is something a tech on this forum might be able to address, they thought it was perhaps a software issue.

Can someone advise on this?

Thanks, Daniel

[marktreg]

Please try the following to see if it helps:

Windows XP:

• Click on Start and select Control Panel
  
• Open Add/Remove Programs
  
• Uninstall Malwarebytes' Anti-Malware
  
• Restart your computer very important
  
• Download and run mbam-clean.exe from here
  
• It will ask to restart your computer, please allow it to do so very important
  
• After the computer restarts, temporarily disable your Anti-Virus and install the latest version of Malwarebytes' Anti-Malware from here
  
  • Note: You will need to reactivate the program using the license you were sent via email if using the Pro version
    
  • Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
    Restart the computer again and verify that MBAM is in the task tray if using the Pro version. Now setup any file exclusions as may be required in your Anti-Virus/Internet-Security/Firewall applications and restart your Anti-Virus/Internet-Security applications. You may use the guides posted in the FAQ's here or ask me and I'll explain how to do it.
    

Please post back with the results.

[Danapba]

Followed the steps as outline below, disabled anti-virus, ran MBAM, still got the Run-time error. I did run it in quick scan mode, if that matters.

[noknojon]

@ Danapba -

Please try this item that has worked for some people with similar problems - It will restore some items that they may have altered -

As long as it is NOT due to current live Malware preventing the update then this method may help restore the ability to run updates

After each step please try to run the Update again in the MBAM program.

STEP 01

Backup the Registry:

Modifying the Registry can create unforeseen problems, so it always wise to create a backup before doing so.

• Please download ERUNT from here
  
• ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.
  
• Double click on erunt-setup.exe to Install ERUNT by following the prompts.
  
• Use the default install settings but say NO to the portion that asks you to add ERUNT to the Start-Up folder. You can enable this option later if you wish.
  
• Start ERUNT either by double clicking on the desktop icon or choosing to start the program at the end of the setup process.
  
• Choose a location for the backup.
  
• Note: the default location is C:\Windows\ERDNT which is acceptable.
  
• Make sure that at least the first two check boxes are selected.
  
• Click on OK
  
• Then click on YES to create the folder.
  

Note: if it is necessary to restore the registry, open the backup folder and start ERDNT.exe

Once you've completed backing up your Registry, please perform the following fixes until fixed or all methods have been tried

• Open Internet Explorer
  
• Note: It MUST be Internet Explorer, not Firefox, Opera, Chrome or any other internet browser
  
• Click on Tools at the top and select Internet Options
  
• Note: If you do not see Tools, press the Alt key on your keyboard and it will show up
  
• Click on the Connections tab
  
• Click on the LAN settings button
  
• Under Automatic configuration make sure that the box next to Automatically detect settings is checked, if it is not, then click the box next to it to check it
  
• Click on the OK button to close the Local Area Network (LAN) Settings window
  
• Click on the OK button to close the Internet Options window
  
• Use this diagram as a guide
  
• Try updating Malwarebytes' Anti-Malware again and if it does not work then please proceed to Step 02
  

STEP 02

Disable Internet Explorer Proxy Settings and Reset TCP/IP

It is very important that these steps be carried out exactly as shown otherwise the fix will not work.

If you have any questions please ask before moving on.

• Please start Notepad and using your mouse make sure you select and copy all the information below in the Code box into your new document.
  
• Then save the file as "fixme.bat" to your Desktop - The .bat extension is important
  
• In the drop down box for Save as type: make sure you select All Files (*.*) and keep the quotes on the name as well. Then close the new file.
  

  @ECHO OFF
  reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f
  reg delete "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyOverride /f
  reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable  /t REG_DWORD /d 0 /f
  reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v GlobalUserOffline /t REG_DWORD /d 0 /f
  netsh int ip reset resetlog.txt

  
  

• On Windows XP you can double-click the file to run it.
  
• On Vista/Win7 you need to Right click the file and choose Run as administrator to run it. With User Account Control on it should ask permission to run it. Click Yes
  
• This will flash a black DOS box very quickly and go away, this is normal.
  
• Restart your computer now.
  
• Launch Internet Explorer and see if you can connect to the Internet.
  
• Launch MBAM and check for Updates
  

STEP 03

Ping the Content Delivery Network

For Windows XP:

Click on START - RUN and type in or Copy/Paste the following and verify that you get a response

CMD.EXE /K PING mbam-cdn.malwarebytes.org

For Windows Vista or Windows 7:

Click on START and in the search line type in CMD and you should see cmd.exe show on the menu. Right click over cmd.exe and select Run as administrator

Then in the DOS console window type in the following and press the Enter key and verify that you get a response

PING mbam-cdn.malwarebytes.org

If all the pings failed then please try running the following command

TRACERT mbam-cdn.malwarebytes.org

Then copy and paste back the results on your next reply.

STEP 04

Exclude Malwarebytes' Anti-Malware's Files and Folders From Other Active Security Programs:

For Windows XP:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For Windows Vista or Windows 7:

• C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\System32\drivers\mbamswissarmy.sys
  

For 64 bit versions of Windows Vista or Windows 7:

• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\zlib.dll
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.dll
  
• C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamext.dll
  
• C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\rules.ref
  
• C:\Windows\System32\drivers\mbam.sys
  
• C:\Windows\SysWoW64\drivers\mbamswissarmy.sys
  

Note: If using a software firewall besides the built in Windows Firewall you'll need to exclude MBAM.EXE from it as well

The FAQ contains examples of setting file exclusions for some known AV products -

Thank You -

[Danapba]

I will walk through the steps, but to make sure we are on the same page, I'm able to install MBAM (even uninstalled it, used the MBAM.exe clean up tool), update it fully, but it bombs upon the running of it wit the partial string error.

Appreciate the input and assistance.

[marktreg]

You can also try this:

Correct Malwarebytes' Anti-Malware Runtime Errors:

• Please copy and paste the following text in the Code box exactly as written into notepad (not wordpad or any other text editor):
  

  if exist "%programfiles(x86)%" regsvr32 "%programfiles(x86)%\Malwarebytes' Anti-Malware\mbamext.dll"
  if exist "%programfiles(x86)%" regsvr32 "%programfiles(x86)%\Malwarebytes' Anti-Malware\ssubtmr6.dll"
  if exist "%programfiles(x86)%" regsvr32 "%programfiles(x86)%\Malwarebytes' Anti-Malware\vbalsgrid6.ocx"
  if not exist "%programfiles(x86)%" regsvr32 "%programfiles%\Malwarebytes' Anti-Malware\mbamext.dll"
  if not exist "%programfiles(x86)%" regsvr32 "%programfiles%\Malwarebytes' Anti-Malware\ssubtmr6.dll"
  if not exist "%programfiles(x86)%" regsvr32 "%programfiles%\Malwarebytes' Anti-Malware\vbalsgrid6.ocx"

  
  

• Once you've done that click on File and select Save As...
  
• In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  
• Name the file MBAM Fix.bat (the .bat extension is very important)
  
• Save the file to your desktop and double click it to run it on XP. Note: For Windows Vista and Windows 7 right click on it and choose Run As Administrator
  
• Click OK to each of the 3 dialog boxes that should show a success message for each file registered
  
• If you get an error that REGSVR32 "is not recognized as an internal or external command, operable program or batch file", then ensure that the file REGSVR32.EXE exists in the C:\SYSTEM32 folder. If it's not found there you can copy if from another Computer running the same operating system and service pack level.
  

If that doesn't fix it then please download and install the Service Pack 6 for Visual Basic 6.0 from here to see if it helps.

Please let us know how you get on and include details of any possible error messages, etc.

[Danapba]

Thanks, do I try the last idea first, since it appears updating MBAM is not an issue for me. I've been able to install, un-install, and update perfectly fine. I'll try the second fix first, unless I hear differently. Thanks !

[Danapba]

I went through the process below starting with the words "You can also try this"....the notepad stuff...the Visual basic...stil get the run time error at a program file "safequard" is says. I'm not sure what that is,......

Given I can install, uninstall, and update MBAM, I did not do the part that was listed to help fix the problem of not being able to update.

Thoughts?

[marktreg]

To be quite honest, I'm struggling with this one at the moment. It's possible that the malware may have altered something really obscure on your system which may be extremely difficult to track down.

But we can get the basic checks out of the way first which will give me time to seek some expert advice about the problem.

Please try this:

Run a Disk Check on your C: drive in Windows XP:

• Click Start and open My Computer
  
• Right-click on C: and select Properties
  
• Click on the Tools tab
  
• Under Error-checking click the Check Now... button
  
• Mark the box next to Automatically fix file system errors and Scan for and attempt recovery of bad sectors
  
• When the message box pops up, click the Schedule disk check button and restart your computer
  
• Once your computer restarts it will check the drive, don't press any keys so that it is allowed to do so.
  

When the disk check is finished, please follow the directions again in post #2 above.

Let me know how you get on.