Malwarebytes not opening

Viruses and worms
1

Hi, im hoping that someone can help me. Ive tried running malware bytes on my pc but will not open. Ive uninstalled it and downloaded again but still will not open. could this be a possible infection?? I have uninstalled it completely now. Does anyone have any suggestions please? Im running windows 8.1. Thanks in advance :slight_smile:

2

Hello,

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

3

Hi sorry for the late reply, just got back from my hols. I have attached both logs for you to have a look at. Thanks ever so much for helping :slight_smile:

4

can somebody please help me with this? thanks in advance :slight_smile:

5

Hello sticky74,
Somehow, THE has missed your post. It happens even to the best. I’ve look at your logs and I do not see the malware in your system. Let’s run ARK scan as well …

Please download Malwarebytes AntiRootkit (MBAR) and save it to your desktop.
[i]For full instructions how MBAR works, read this article

> Doubleclick on the MBAR file (
http://www.mcshield.net/personal/magna86/Images/mbar.png
) and allow it to run.
• Click OK on the next screen, to allow the package to extract the contents of the file to its own folder named mbar.
• mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.
• After reading the Introduction, click Next if you agree.

• On the Update Database screen, click on the Update button. Once you see ‘Success: Database was successfully updated’ click on Next
• Under Scan Targets ensure all boxes are ticked. Then click the Scan button.

Notice: with some infections, you may see two messages boxes:

  • ‘Could not load protection driver’. Click ‘OK’.
  • ‘Could not load DDA driver’. Click ‘Yes’ to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions.

>> If malware is not detected, click the Exit button to close the program and post the mbar-log-year-month-day.txt and system-log.txt reports.

>> If an infection/s are found ensure Create Restore Point are ticked. Then select the "Cleanup! button to remove threats.
• The clean up procedure will be scheduled for process, pop-up will be shown.
Select the Yes button and the system should re-boot to complete the cleaning process.

>> Notice: only if an RootKit are detected, ensure to run fixdamage.exe tool located in mbar folder, \Plugins\fixdamage.exe

  • Run fixdamage.exe, at the black window to continue type Y (alias for Yes). Wait few seconds for execution …
  • When you see “press any key to exit” fix is completed, press any key to close the window. Reboot the system.

> The following reports will be created in mbar folder:

  1. mbar-log-year-month-day (hour-minute-second).txt
  2. system-log.txt

Please post both logs in your next reply.

6

Magna,
only 2 things I see are:
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

and cleaning of the temp folder.

7

Hi Eddy,

Cleaning the $Temp file is completely unnecessary step for malware removal, although a very popular to many helper. It’s another story if something is active from the %temp% folder but in this case it would be active malware, and it would be presented in some other section together with their loading point. :slight_smile:

E.g:
HKLM.…\Run: [hliltiuskc] - C:\Users\Borislav\AppData\Local\Temp\hliltiuskc…vbe [18727 2013-12-15] ()

The files in users defaults Temp folders are AdwCleaner related and some leftover files from drivers (HP, Relatek …). Nothing problematic there that may stop the launching of MBAM instalation. :wink:

The listed CLSID (ToolBar related) are avast! related. As well, here and even malicious CLSID can’t be dangerous if there is no value, and malicious related (loaded) file. :slight_smile:

8

I had this issue too. Finished uninstalling MBAM as I couldn’t solve this issue…

9

Hi and thank you so much for getting back to me. I have attached the logs for you to take a look at. It did not find any malware so where do we go from here? It is extremely frustrating to say the least!

10

Just to make sure,
do you have all latest (security) updates installed for W8.1 ?
Is Windows defender disabled?

11

Hi
My computer updated last night so I presume I have all the security updates

I have checked on windows defender, clicked on it and it says its turned off. I cant find how to turn it on though. I have been through to the files, opened them but tells me to go through the action centre???

12

Updates sounds good to me.
Leave Defender off.

Have you asked on the Malwarebytes webboard already?
They may have suggestions on what is possibly wrong.

13

https://forums.malwarebytes.org Via SafeSurf Evangelist… Malwarebytes (MBAM) has a special Uninstaller tool. You can find this tool at their forum. I suggest you download it to your desktop in case you need it in the future. It will get rid of remnants. After using, reboot, then re-install.

Worked for me.