Updating Malware in Safe Mode

[bergersr]

I believe I have the Security Suite Virus. I re-booted into Safe Mode and before running a scan to try and remove the virus, I checked for updates (last one done 9/09), but got an error message: "An error occurred. Please report to the Malware team. Error 732 (0,0)." So now I can't even run a scan with the latest updates. Help please??

[Maurice Naggar]

Hello bergersr,

First, you have an old version of MBAM and must get the current version. See my directions just below.

Also, if you used standard Safe mode, the internet connection will not be available.

You must be in either Normal mode, or in "Safe Mode with Networking"

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools

For directions on how, see How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs

Do NOT turn off the firewall

Please download Rkill by Grinler and save it to your desktop.

Link 2
Link 3
Link 4
Double-click on the Rkill desktop icon to run the tool.
If using Vista, right-click on it and Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
If it does not work, repeat the process and attempt to use one of the remaining links until the tool runs.
If the tool does not run from any of the links provided, please let me know.
If your antivirus program gives a prompt message, respond positive to allow RKILL to run.
If a malware-rogue gives a message regarding RKILL, proceed forward to running RKILL

Please read carefully and follow these steps.

• Download TDSSKiller and save it to your Desktop.
  
• Extract its contents to your desktop.
  
• Double-Click on TDSSKiller.exe to run the application, then on Start Scan.
  If running Vista or Windows 7, do a RIGHT-Click and select Run as Administrator to start TDSSKILLER.exe.
  
  
• If an infected file is detected, the default action will be Cure, click on Continue.
  
  
• If a suspicious file is detected, the default action will be Skip, click on Continue.
  
  
• It may ask you to reboot the computer to complete the process. Click on Reboot Now.
  
  
• If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
  
• If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.
  

Please folow this sequence for MBAM removal & re-install:

1) Go to Control Panel and Add-or-Remove programs.

uninstall Malwarebytes' Anti-Malware

Exit Control Panel

2) Logoff and restart your computer

Get, save, and then run the utility at the following link

http://www.malwarebytes.org/mbam-clean.exe

3)Logoff and restart your computer again.

4)Now, reinstall Malwarebytes' Anti-Malware.

You may download a fresh copy for the reinstall from the following link:

http://malwarebytes.org/mbam.php

If you purchased MBAM (have a license) you will need to reenter your ID and Key afterwards to get the Protection module enabled.

5. Once having MBAM setup:

Start your MBAM MalwareBytes' Anti-Malware.

Click the Settings Tab and then the General Settings sub-tab. Make sure all option lines have a checkmark.

Then click the Scanner sub-tab. Make sure all option lines have a checkmark.

Next, Click the Update tab. Press the "Check for Updates" button.

When done, click the Scanner tab.

Do a FULL Scan.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Next:

Please print out, read and follow the directions here, skipping any steps you are unable to complete.

Please Copy & Paste contents of MBAM scan log

Gmer.txt log

the DDS logs

Edited September 13, 2010 by Maurice Naggar

[bergersr]

Thanks Maurice. Before I get too far in to your suggestions, I re-booted, in Safe Mode with Networking, and then tried to check for updates. It started to check, then the same error occurred - Contact the Malware team, error 732(0,0).

Other suggestions?

Edited September 13, 2010 by Maurice Naggar
removed quoted section

[Maurice Naggar]

When starting to reply, please only use the AddReply button at bottom right of forum screen.

For now, skip over any MBAM updates or scans.

See the article I cited and do all of the rest (as much as you can)

We have to see reports before going forward.

Meantime, absolutely no websurfing and certainly NO online transactions.

Just only go to this forum and just the sites I guide you to.

P.S. Confirm that you have done RKILL & TDSSKILLER

Edited September 13, 2010 by Maurice Naggar

[Maurice Naggar]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.