Malwarebytes Variable (0, 9) Error

Woodssi · October 25, 2010

Guys, here's all the relevant info as requested....

DDS (Ver_10-10-21.02) - NTFSx86

Run by Stephen at 22:27:46.40 on 25/10/2010

Internet Explorer: 8.0.7600.16385

Microsoft Windows 7 Ultimate 6.1.7600.0.1252.44.1033.18.3071.2242 [GMT 1:00]

============== Running Processes ===============

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Program Files\Microsoft Security Essentials\MsMpEng.exe

C:\Windows\system32\Ati2evxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Windows\system32\Ati2evxx.exe

C:\Windows\system32\taskhost.exe

C:\Windows\Explorer.EXE

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Program Files\Seagate\SeagateManager\Sync\FreeAgentService.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\svchost.exe -k HsfXAudioService

C:\Windows\system32\sppsvc.exe

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Program Files\Microsoft Security Essentials\msseces.exe

C:\Program Files\Common Files\Java\Java Update\jusched.exe

C:\Program Files\PowerISO\PWRISOVM.EXE

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe

C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe

C:\Program Files\Seagate\SeagateManager\FreeAgent Status\stxmenumgr.exe

C:\Program Files\DivX\DivX Update\DivXUpdate.exe

C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted

C:\Windows\system32\WUDFHost.exe

C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

C:\Windows\system32\wbem\wmiprvse.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Windows\system32\DllHost.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Users\Stephen\Desktop\dds.scr

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uSearch Bar = Preserve

uStart Page = hxxp://www.google.co.uk/

uInternet Settings,ProxyOverride = *.local

BHO: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - c:\program files\vshare\vshare_toolbar.dll

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Java Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: vShare Plugin: {043c5167-00bb-4324-af7e-62013faedacf} - c:\program files\vshare\vshare_toolbar.dll

mRun: [MSSE] "c:\program files\microsoft security essentials\msseces.exe" -hide -runkey

mRun: [sunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"

mRun: [startCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun

mRun: [PWRISOVM.EXE] c:\program files\poweriso\PWRISOVM.EXE

mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"

mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"

mRun: [MaxMenuMgr] "c:\program files\seagate\seagatemanager\freeagent status\StxMenuMgr.exe"

mRun: [DivXUpdate] "c:\program files\divx\divx update\DivXUpdate.exe" /CHECKNOW

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableLUA = 0 (0x0)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll

DPF: {138E6DC9-722B-4F4B-B09D-95D191869696} - hxxp://www.bebo.com/files/BeboUploader.5.8.05.cab

DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - hxxp://download.divx.com/player/DivXBrowserPlugin.cab

DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab

DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: vsharechrome - {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - c:\program files\vshare\vshare_toolbar.dll

Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll

============= SERVICES / DRIVERS ===============

R1 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2009-6-18 151216]

R2 FreeAgentGoNext Service;Seagate Service;c:\program files\seagate\seagatemanager\sync\FreeAgentService.exe [2009-9-26 189736]

R2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe -k HsfXAudioService [2009-7-14 20992]

R3 MpNWMon;Microsoft Malware Protection Network Driver;c:\windows\system32\drivers\MpNWMon.sys [2009-6-18 42368]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 VST_DPV;VST_DPV;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]

S3 VSTHWBS2;VSTHWBS2;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752]

S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2010-5-18 1343400]

=============== Created Last 30 ================

2010-10-25 17:13:46 6146896 ----a-w- c:\progra~2\microsoft\microsoft antimalware\definition updates\{daba56d1-8aa4-49cb-8e04-997b59784581}\mpengine.dll

2010-10-23 12:51:01 -------- d-----w- c:\users\stephen\appdata\local\Microsoft Corporation

2010-10-22 08:46:59 94208 ----a-w- c:\windows\system32\drivers\ezplay.sys

2010-10-22 08:46:59 94208 ----a-w- c:\users\stephen\appdata\roaming\ezplay.sys

2010-10-21 18:11:38 -------- d-----w- c:\progra~2\{C3243856-7746-4A05-8837-51A28C1CDD82}

2010-10-20 17:59:52 -------- d-----w- c:\progra~2\RegSERVO

2010-10-20 17:04:17 -------- d-----w- c:\users\stephen\appdata\roaming\Windows Live Writer

2010-10-20 17:04:17 -------- d-----w- c:\users\stephen\appdata\local\Windows Live Writer

2010-10-20 11:54:40 -------- d-----w- c:\windows\en

2010-10-20 11:48:41 469256 ----a-w- c:\program files\common files\windows live\.cache\bc4410561cb704c2a\InstallManager_WLE_WLE.exe

2010-10-20 11:48:16 15712 ----a-w- c:\program files\common files\windows live\.cache\ae90ed301cb704c20\MeshBetaRemover.exe

2010-10-20 11:47:56 94040 ----a-w- c:\program files\common files\windows live\.cache\a27319ce1cb704c18\DSETUP.dll

2010-10-20 11:47:56 525656 ----a-w- c:\program files\common files\windows live\.cache\a27319ce1cb704c18\DXSETUP.exe

2010-10-20 11:47:56 1691480 ----a-w- c:\program files\common files\windows live\.cache\a27319ce1cb704c18\dsetup32.dll

2010-10-20 11:47:53 94040 ----a-w- c:\program files\common files\windows live\.cache\a03220ba1cb704c17\DSETUP.dll

2010-10-20 11:47:53 525656 ----a-w- c:\program files\common files\windows live\.cache\a03220ba1cb704c17\DXSETUP.exe

2010-10-20 11:47:53 1691480 ----a-w- c:\program files\common files\windows live\.cache\a03220ba1cb704c17\dsetup32.dll

2010-10-20 11:47:01 -------- d-----w- c:\users\stephen\appdata\local\Windows Live

2010-10-20 11:46:45 3181568 ----a-w- c:\windows\system32\mf.dll

2010-10-20 11:46:45 196608 ----a-w- c:\windows\system32\mfreadwrite.dll

2010-10-20 11:46:44 1619456 ----a-w- c:\windows\system32\WMVDECOD.DLL

2010-10-09 19:39:36 -------- d-----w- c:\users\stephen\appdata\roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1

2010-10-06 16:09:49 -------- d-----w- c:\users\stephen\appdata\local\ElevatedDiagnostics

2010-09-29 10:24:08 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll

2010-09-29 10:24:08 527192 ----a-w- c:\windows\system32\XAudio2_7.dll

2010-09-29 10:24:08 239960 ----a-w- c:\windows\system32\xactengine3_7.dll

2010-09-29 10:24:08 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll

2010-09-29 10:24:08 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll

2010-09-29 10:24:07 470880 ----a-w- c:\windows\system32\d3dx10_43.dll

2010-09-29 10:24:07 248672 ----a-w- c:\windows\system32\d3dx11_43.dll

2010-09-29 10:24:07 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll

2010-09-29 07:19:02 190976 ----a-w- c:\windows\system32\drivers\ks.sys

2010-09-29 07:19:02 146304 ----a-w- c:\windows\system32\drivers\usbvideo.sys

2010-09-29 07:07:31 2048 ----a-w- c:\windows\system32\tzres.dll

2010-09-29 07:07:24 13312 ----a-w- c:\program files\internet explorer\iecompat.dll

2010-09-27 23:30:36 225280 ----a-w- c:\windows\system32\Stream.dll

==================== Find3M ====================

2010-10-22 15:33:30 87608 ----a-w- c:\users\stephen\appdata\roaming\inst.exe

2010-10-22 08:46:45 47360 ----a-w- c:\users\stephen\appdata\roaming\pcouffin.sys

2010-10-19 20:51:33 222080 ------w- c:\windows\system32\MpSigStub.exe

2010-09-22 23:47:28 49016 ----a-w- c:\windows\system32\sirenacm.dll

2010-09-22 23:32:56 301936 ----a-w- c:\windows\WLXPGSS.SCR

2010-09-21 13:03:14 208768 ----a-w- c:\windows\system32\LIVESSP.DLL

2010-09-08 10:17:46 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx

2010-09-08 10:17:46 69632 ----a-w- c:\windows\system32\QuickTime.qts

2010-09-08 04:30:04 978432 ----a-w- c:\windows\system32\wininet.dll

2010-09-08 04:28:15 44544 ----a-w- c:\windows\system32\licmgr10.dll

2010-09-08 03:22:31 386048 ----a-w- c:\windows\system32\html.iec

2010-09-08 02:48:16 1638912 ----a-w- c:\windows\system32\mshtml.tlb

2010-09-01 04:23:49 12625408 ----a-w- c:\windows\system32\wmploc.DLL

2010-09-01 02:34:52 2327552 ----a-w- c:\windows\system32\win32k.sys

2010-08-31 04:32:30 954752 ----a-w- c:\windows\system32\mfc40.dll

2010-08-31 04:32:30 954288 ----a-w- c:\windows\system32\mfc40u.dll

2010-08-27 05:46:48 168448 ----a-w- c:\windows\system32\srvsvc.dll

2010-08-26 04:39:58 109056 ----a-w- c:\windows\system32\t2embed.dll

2010-08-21 05:36:33 738816 ----a-w- c:\windows\system32\wmpmde.dll

2010-08-21 05:36:24 224256 ----a-w- c:\windows\system32\schannel.dll

2010-08-21 05:33:24 530432 ----a-w- c:\windows\system32\comctl32.dll

2010-08-21 05:32:37 316928 ----a-w- c:\windows\system32\spoolsv.exe

2010-07-29 06:30:49 197632 ----a-w- c:\windows\system32\ir32_32.dll

2010-07-29 06:30:34 82944 ----a-w- c:\windows\system32\iccvid.dll

============= FINISH: 22:28:37.29 ===============

Attach.zip

ark.zip

Attach.zip

screen317 · October 26, 2010

Hi and welcome to Malwarebytes.

1. Uninstall Malwarebytes' Anti-Malware using Add or Remove programs in the Control Panel.

2. Restart your computer (very important).

3. Download and run this utility.

4. It will ask to restart your computer (please allow it to).

5. After the computer restarts, install the latest version from here.

Note: You will need to reactivate the program using the license you were sent via e-mail if you purchased it.

If the error persists, please post a screenshot of it for me here.

-screen317

Woodssi · October 27, 2010

1. Uninstall Malwarebytes' Anti-Malware using Add or Remove programs in the Control Panel.

Done

2. Restart your computer (very important).

Done

3. Download and run this utility.

Done, but I get this Error Message "SHGetValue failed with Error code 126"

5. After the computer restarts, install the latest version from here.

Done, but get Error Message "MBAM_ERROR_EXPANDING_VARIABLES (0, 9)" then Error Message "MBAM_ERROR_LOAD_DATABASE (3, 0)" followed by "MBAM_ERROR_MISSING_FILE (3, 0, mbamswissarmy.sys)"

screen317 · October 29, 2010

Okay. Continue with step 5 above and see if any errors persist.

Woodssi · October 29, 2010

Okay. Continue with step 5 above and see if any errors persist.

Screen, have tried on numerous occasions and always get the same Error Messages.

screen317 · October 30, 2010

Hi,

Okay let me consult our developers and I will be back with you as soon as possible.

screen317 · October 31, 2010

Hi,

Please copy and paste the following text in the Code box exactly as written into notepad (not wordpad or any other text editor):

@color 48
@echo off
if exist "%allusersprofile%\Microsoft\Windows\Start Menu" md "%allusersprofile%\Microsoft\Windows\Start Menu\Programs\Startup"
if not exist "%allusersprofile%\Microsoft\Windows\Start Menu" md "%allusersprofile%\Start Menu\Programs\Startup"
if exist "%appdata%\Microsoft\Windows\Start Menu" md "%appdata%\Microsoft\Windows\Start Menu\Programs\Startup"
if not exist "%appdata%\Microsoft\Windows\Start Menu" md "%userprofile%\Start Menu\Programs\Startup"
del /f /q %0

Once you've done that click on File and select Save As...
In the Save dialogue box click on the drop down menu next to Save as type and select All Files
Name the file Fix.bat (the .bat extension is very important)
Save the file to your desktop and double click it to run it if using Windows XP. If using Windows Vista or Windows 7 you MUST right-click on the file and select Run as administrator otherwise it will not work.
Once that's complete try running Malwarebytes' Anti-Malware again to see if it now works without error or not.

Woodssi · November 1, 2010

Screen,

The Codefix has worked.

I was able to install, update & run the Program without any further Errors.

Just to advise, the scan ran without identifying any Issues, so I am unaware of what actually caused the problem in the first place.

Thanks very much for your (and the Dev Team's) assistance.

screen317 · November 1, 2010

Glad to hear things are working now!

Without going into too much detail, it was an odd glitch in Windows that we fixed by restoring a default setting. It wasn't caused by malware in this case.

Anything else I can do for you?

screen317 · November 26, 2010

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Malwarebytes Variable (0, 9) Error

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information