Malwarebytes Won't Open

[m3k312]

I think my computer is absolutely infested with malware. My internet explorer instantly closes whenever I try to open it, I have very limited acess with Firefox, my time changed to military time, and my computer as a whole is running very slow. I tried to install and run Malwarebytes Anti-Malware but during the scan, I thought the computer froze and I restarted it. Now, I can't open the program and I can't uninstall it because it says the uninstallation file is corrupted. I tried running the computer in SafeMode but I have the same result. I'm not sure what to do; I ran AVG Free and Ad-Aware but it keeps finding things that I thought I deleted the last time I ran it.

[exile360]

Greetings and welcome, please follow AdvancedSetup's instructions here: http://www.malwarebytes.org/forums/index.p...amp;#entry36254 This will hopefully remove enough of the infection to let other tools run. Then read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. If you are unable to run any of the scans in the instructions from the first link, just skip it and continue to the next. I hope I was helpful. Good luck and safe surfing.

[m3k312]

Greetings and welcome, please follow AdvancedSetup's instructions here: http://www.malwarebytes.org/forums/index.p...amp;#entry36254 This will hopefully remove enough of the infection to let other tools run. Then read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7

Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. If you are unable to run any of the scans in the instructions from the first link, just skip it and continue to the next. I hope I was helpful. Good luck and safe surfing.

I burnt that Avira to a disk and put it in my infected computer but when I tried to run it, it said "Windows cannot find INDEX.html" and then nothing else happened.

[exile360]

It sounds like the ISO may have been corrupted, please try downloading a fresh copy and burning it again. Sorry you had to waste the cd.

[m3k312]

It sounds like the ISO may have been corrupted, please try downloading a fresh copy and burning it again. Sorry you had to waste the cd.

I don't mean to second guess you on this considering that you know more than me but if I download from the exact same site and do the exact same thing, how am I going to get a different result?

[exile360]

Generally when a download gets corrupted it's simply caused by loss of data during the download and it seldom happens twice in a row, but it does happen, and no big deal on second guessing me, if you have any questions, no matter how simple, let me know as the only stupid question is the one that goes unasked . Also please make sure that the disc you use is clean as that can cause corruption in the burning process.

[m3k312]

Generally when a download gets corrupted it's simply caused by loss of data during the download and it seldom happens twice in a row, but it does happen, and no big deal on second guessing me, if you have any questions, no matter how simple, let me know as the only stupid question is the one that goes unasked . Also please make sure that the disc you use is clean as that can cause corruption in the burning process.

Well, I tried the CD in a different computer and did not get the same error message...I'm just wary of using my last CD.

[exile360]

Interesting, it sounds like the infected PC's drive could be misreading the disc. If you can't get it to read, try booting into windows again and follow these instructions to see if it is the culprate: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If not, let me know and we'll try something else.

[m3k312]

Interesting, it sounds like the infected PC's drive could be misreading the disc. If you can't get it to read, try booting into windows again and follow these instructions to see if it is the culprate: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If not, let me know and we'll try something else.

Something strange just happened. I followed the instructions that you just gave me and when I restarted the computer, the AVG started detecting all these Trojans and bad things. The internet explorer opened again and I'm now running the quick scan on Malwarebytes. AVG asked to remove or heal the infections and when I told it to, it said the files could not be found. I think I've seen some of the Trojans that it found just now before, when I first scanned the computer.

[m3k312]

Something strange just happened. I followed the instructions that you just gave me and when I restarted the computer, the AVG started detecting all these Trojans and bad things. The internet explorer opened again and I'm now running the quick scan on Malwarebytes. AVG asked to remove or heal the infections and when I told it to, it said the files could not be found. I think I've seen some of the Trojans that it found just now before, when I first scanned the computer.

I know it's not fixed yet however because pictures aren't displaying in Internet Explorer.

[m3k312]

I know it's not fixed yet however because pictures aren't displaying in Internet Explorer.

Everything seems to be okay now, except that the computer may be running a little bit slower. However, when I open Internet Explorer, .jpg and .gif images don't appear. I can click "Show Picture" and then it will show up but that's kind of irritating to do for every single picture on every single page.

[exile360]

Hello again, I'm glad you got up and running somewhat. I read your post saying you followed the instructions, so I'm guessing you found the TDSSServ driver and disabled it. If that is the case, then good as it is a rootkit (basically a very well hidden type of malware that can do a lot of damage). Now that you are able to run Malwarebytes', please read the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 as I posted earlier. This will give one of the elite experts here a chance to look over your logs and eliminate any remaining problems or infections to get your PC running like it should again. I'm very glad you were finally able to get things running somewhat normally again, but please don't skip those steps because I believe you are still infected with something.

[mrneutron]

I think my computer is absolutely infested with malware. My internet explorer instantly closes whenever I try to open it, I have very limited acess with Firefox, my time changed to military time, and my computer as a whole is running very slow. I tried to install and run Malwarebytes Anti-Malware but during the scan, I thought the computer froze and I restarted it. Now, I can't open the program and I can't uninstall it because it says the uninstallation file is corrupted. I tried running the computer in SafeMode but I have the same result. I'm not sure what to do; I ran AVG Free and Ad-Aware but it keeps finding things that I thought I deleted the last time I ran it.

Try renaming mbam.exe to something else. I renamed it to m.exe and was able to launch and find Trojan.TDSS. Malwarebytes needed to reboot to remove seven infections but I forgot to rename the file back before I rebooted so I got the error that it could not find mbam.exe. So I ran m.exe again expecting to see the same number of infections but was surprised to find only two. I removed them, renamed the file back to mbam.exe, ran an update, full scan and everything is good. Call it a stupid spyware trick if you like but they must be targeting the executable name in order to disable it.

[GT500]

mrneutron is correct. When you cannot launch MBAM, just try renaming mbam.exe to something random, and see if it will launch. Sometimes it can take a few minutes, depending on what has infected your system.

m3k312, if you want to post a HijackThis log as well, I'll go ahead and take a look at it for you.