Snowleopard Posted September 1, 2010 ID:307827 Share Posted September 1, 2010 Hi all, hope you are well. I recently bought a laptop but on switching it on, I get what I know are fake reports of malware and virus`s, I have installed MBAM, but the Security Suite maleware stops the process of MBAM. I have tried renaming MBAM to winlogon.exe as 1 thread advised, but still no go. Also tried Process explorer to identify the malware, but even that fails to run. So, to clarify, previos owner used software or clicked something which installed the Security Suite, Mbam wont run, nothing else will run, browser disabled. Does anyone else know of a work around to disable the Security Suite so I can blast it with MBAM? Help please, SL Link to post Share on other sites More sharing options...
Snowleopard Posted September 1, 2010 Author ID:307886 Share Posted September 1, 2010 Just giving this thread a poke as Im at my wits end LOL. Anyway, update..none, nothing will run apart from the damn Security Suite infection and I cant open up task manger to find its process either...clever little crappy software. Anybody with a suggestion apart from full re-install? If I had a hot swap port Id connect the HD up to another working machine with MBAM on it, but I havnt so Im stuck with this All help appreciated.SL Link to post Share on other sites More sharing options...
MrCharlie Posted September 1, 2010 ID:307898 Share Posted September 1, 2010 Welcome to the forum.See if following this guide works, post the logs back here.Try to run both rkill and exeHelper.Please let me know, MrC Link to post Share on other sites More sharing options...
Snowleopard Posted September 1, 2010 Author ID:307911 Share Posted September 1, 2010 Thankyou Mr Charlie!!! r-kill worked a treat, running a scan now with Mbam, then will see were it stands once the stuff has been caught and removed, then reboot..fingers crossed!! SL Link to post Share on other sites More sharing options...
MrCharlie Posted September 1, 2010 ID:307918 Share Posted September 1, 2010 Great!!! , MrC Link to post Share on other sites More sharing options...
Snowleopard Posted September 1, 2010 Author ID:307921 Share Posted September 1, 2010 Heres the log file for curiosity from the laptop (attached), glad Ive got my big PC to work from and fix this laptop..phew..ty again Mr C Link to post Share on other sites More sharing options...
MrCharlie Posted September 1, 2010 ID:307925 Share Posted September 1, 2010 Next to all the malware in the log it says:No action taken.Are you sure you applied this after the scan:Make sure that everything is checked, and click Remove Selected.MrC Link to post Share on other sites More sharing options...
Snowleopard Posted September 1, 2010 Author ID:307928 Share Posted September 1, 2010 Aye, have done and now running full scan to be sure. Nothing in the Quarantine box after quick scan. Full scan now, will see if Mbam has picked up anything else. Link to post Share on other sites More sharing options...
MrCharlie Posted September 1, 2010 ID:307929 Share Posted September 1, 2010 also you didn't update MBAM before running it. I suggest you update MBAM and run and run a quick scan.After the scan is done:Make sure that everything is checked, and click Remove Selected.Post the log back here, MrC Link to post Share on other sites More sharing options...
Snowleopard Posted September 2, 2010 Author ID:308312 Share Posted September 2, 2010 Hi Mr C, all done :-) Laptop is running fine and roadtested today. Thanks again, SLmbam.txt Link to post Share on other sites More sharing options...
MrCharlie Posted September 3, 2010 ID:308730 Share Posted September 3, 2010 OKTake a look at My Preventive Maintenance to avoid being infected again.Good Luck and Thanks for using the forum, MrC Link to post Share on other sites More sharing options...
Staff screen317 Posted September 11, 2010 Staff ID:312222 Share Posted September 11, 2010 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts