Malwarebytes' Freezes Up While Scanning "E" Drive

[yosemitest]

Hello,

I'm new and need help, so please forgive any mistakes I make.

I scanned with updated Malwarebytes' Anti-Malware 1.46 Free Version.

It found 8 infected files:

Files Infected:

E:\My Folders to Back Up Hard Drive\(my name) Office Programs\Microsoft Office\Office\GRINTL32.DLL (Trojan.Srizbi) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\(my name) Office Programs\Microsoft Office\Office\OUTFORM.DAT (Trojan.ADS) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\(my name)Office Programs\Microsoft Office\Templates\Presentations\Managing HR's Changing Role - Dale Carnegie Training ®.pot (Trojan.ADS) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\(my name) Office Programs\WordDoc\(my name) Resume Feb6, 2000.doc (Trojan.ADS) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\(my name) Office Programs\WordDoc\Backup of Divorce, Answers to pages 4-9.wbk (Trojan.Clicker) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\Program Files\Punch! Home Design - Platinum\Textures\Deck\DECK45.PTX (Spyware.Onlinegames) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\WINDOWS\InstDrvr.exe (Trojan.Dropper) -> Quarantined and deleted successfully.

E:\My Folders to Back Up Hard Drive\WINDOWS\SYSTEM32\JAVAW.EXE (Trojan.FakeAlert) -> Quarantined and deleted successfully.

After Malwarebytes restarted my computer, I scanned "E" drive again, and found the same 8 files infected.

So I restarted my computer in "Safe Mode" and used "RootRepeal.exe" to "Wipe" those files and then "Force Delete" them.

Then I rebooted to the last known Clean "Ghost image of "C" drive.

After that I opened "E" drive and viewed the folders and Files in "Safe Mode", but in "Normal Mode", I could NOT view them.

I got the following message in "Normal Mode" :

E:\is not accessible.

The file or directory is corrupted and unreadable.

Then I tried it again in "Safe Mode" and got the message:

E:\is not accessible.

The file or directory is corrupted and unreadable.

So after that, I opened my Toshiba Satellite A-75 S226 Laptop with F-12 Key to open with my "D" CD/Rom Drive and Norton Ghost 12 Disk.

I used Norton Ghost 12 to explore my "E" Drive and can view the folders/files.

My backup images of "C" drive are kept on "E" drive.

Malwarebytes locks up on "E" drive and can't finish it's scan now.

How do I fix this? How do I get my files and folders out of "E" Drive, a "My Passport Elite 320GB" external USB Drive?

HELP! Yosemitest

What did I do wrong?

Yosemitest

[noknojon]

Hi and Welcome -

Some of the files in the external drive seem infected , Please follow these instructions -

Please let our experts review this problem and solve it for you -

As we do not work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow What do I do now? , skipping any steps you are unable to complete.

The next step is post a New Topic Here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that

you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via This Link

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

EDIT -

In addition to not following instructions, you continually harass our Staff with multiple and frequent personal messages, which is against our rules here. It is clear that you either cannot or will not keep your system safe from malware and practice safe browsing. I strongly suggest you completely reformat your system and reinstall Windows fresh and clean.

As this was posted about 12 hours ago in the spyware hammer forum , please only follow all directions given here and do not stray from the given instructions -

Thank You -

[yosemitest]

Thank you for your response Noknojon,

Do I need to purchase the "Paid Version" of Malwarebytes?

I have to go to town tomorrow, but tomorrow night I'll follow your instructions.

I'm in Mississippi, USA, and realize the time difference.

From your Spywarehammer Quote

"In addition to not following instructions, you continually harass our Staff with multiple and frequent personal messages, which is against our rules here. It is clear that you either cannot or will not keep your system safe from malware and practice safe browsing."

I followed their instructions, and reinstalled Malwarebytes' per their instructions, and updated it, then ran the scan.

It was then, that I found the 8 infected files on that updated scan and asked for help.

I don't know why they thought that I "continually harass our Staff". I just asked for help and stated what I found.

The quote says I "cannot or will not keep your system safe from malware and practice safe browsing.", but I don't know what I did wrong.

Enough on the past, I'll follow your instructions after I get back tomorrow night, from helping my aging parents.

Thank you again.

Sincerely, Yosemitest.

[noknojon]

Hi -

There is no need to purchase anything to get your problem reviewed by the experts panel -

Our members with the paid version do have access to our internal company experts first , but any person is able to post here -

We just ask that they follow the normal forum rules and follow instructions given by the experts -

The choice is yours if you wish to post in the Malware Removal area and supply logs and other details as requested - Follow my post above -

Thank You -

EDIT -

I did not speak to any person at the forum , I only read and listed the comments they used for not taking your case -

We are happy to give any person a chance on this family friendly forum - Please note that some of the experts on that forum also help here - 1972 Vet is one -

Any forum can refuse a case if they feel that previous advice has not been followed -

[AdvancedSetup]

You need to seek help in the Hijack This forum as shown below.

Please note that your posts on another site here indicate that you are not following advice and practicing safe computing. We'll help you but if you come back again infected then you risk that sooner or later no one is going to be willing to help you so please heed the advice provided by the Experts so that you don't get infected so easily.

http://spywarehammer.com/simplemachinesfor...mp;topic=9071.0

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someon has replied to your post.

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

[yosemitest]

To AdvancedSetup,

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org

I want to buy this, but as a retired military member living only on my retirement pay, my funds are limited, and maybe the 1st of November, I can.

I printed out the "I'm Infected _What do I do now?" page, and am following those instructions.

Once I finish those instructions, I post on the page you recommended.

It's going to take me a little time, because of other tasks I have to do for my aging parents.

I can only work on this late at night my time, and my time is limited.

Thank you all for your help.

Sincerely, Yosemitest.

[noknojon]

There are no charges/fees required if you wish the experts to review your problems in the Malware Removal forum area -

We just ask that you visit your problem daily (if you can) and follow any instructions left by the expert on your case -

Cases that are not responded to by posters after 1 week may be removed to clear out the backlog -

It may be up to 3 or more days until an expert has the time to help you , so the sooner you post the problem the quicker your response may be -

If you do not wish to go through the general forum area please refrain from posting until you are ready -

Thank You -

[yosemitest]

To Noknojon,

Thank you. My phone line and computer DSL connection has been down for 2 days and just come back up today.

I can't get the GMER scan to finish. It freezes up after about 1 hour.

I'm going to post with what I've completed and try to run the GMER without the ADS checked and see if it finishes.

Yosemitest.