mpam-7b8db5c5.exe|>mpavbase.vdm._p Error 42127 (Win8)

system · June 2, 2016, 6:29pm

The kids were downloading Transformer Cartoons from youtube via http://www.clipconverter.cc/ and watching Japanese dubs of Transformer Headmasters via http://www.idcloak.com/web-proxy/Japan-web-proxy/a6.html using a Tokyo proxy.

After running a boot time scan I received the following (from aswBoot.txt):

06/01/2016 07:15
Scan of C:

Scan of *STARTUP

File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-7b8db5c5.exe|>mpavbase.vdm._p Error 42127 {CAB archive is corrupted.}
File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-9baac6bf.exe|>mpavdlta.vdm Error 42127 {CAB archive is corrupted.}
File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-a616ca61.exe|>mpavbase.vdm Error 42127 {CAB archive is corrupted.}
File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-ef0cb648.exe|>mpavbase.vdm Error 42127 {CAB archive is corrupted.}
File C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\mpam-f5dad4c0.exe|>mpasdlta.vdm Error 42127 {CAB archive is corrupted.}
Number of searched folders: 44849
Number of tested files: 534253
Number of infected files: 0

Is this malware trying to install itself or something I should be concerned with?

Thank you.
Kevin

Pondus · June 2, 2016, 6:33pm

No just what is say … not a detection but a scan error message

and located in a temp folder so if you run CCleaner they should be gone

Eddy · June 2, 2016, 6:37pm

Clipconverter is known adware.
Please follow these instructions > https://forum.avast.com/index.php?topic=53253.0

system · June 2, 2016, 7:10pm

I installed Malwarebytes and ran a scan. It did NOT detect anything. Can Malwarebytes and Avast get along together? Or do I need to set Malwarebytes for manual use?

Thank you again for the advice.
– Kevin

Pondus · June 2, 2016, 7:40pm

malwarebytes is designed to run alongside your AV as it is a complementary tool

Userguide >> https://www.malwarebytes.org/support/guides/mbam/

Forum >> https://forums.malwarebytes.org

Also recomended if you use removable drives > MCShield usb protector > http://www.mcshield.net
It is a install and forget tool. Used by this forums malware removal experts to clean removable drives

system · June 3, 2016, 2:35am

Thank you for the help. After visiting clipconverter and the youtube proxy (but still before installing Malwarebytes), my Avast scan log showed numerous files such as:

Avast Scan Report
This file is generated automatically
Scan name: Full system scan
Started on: Wednesday, June 1, 2016 9:13:01 PM
VPS: 160601-7, 06/01/2016

C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\10948_2905235500.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\25860_2905201875.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\28228_2905186282.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\31820_2905184875.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\32828_2905207938.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\34412_2905233735.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\46768_2905197625.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\4732_2905196219.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\47920_2905210047.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\48472_2905199047.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\50096_2905203344.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\servicing\Sessions\7408_2905200454.back.xml [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_10.0.10586.0_fi-fi_b1ae9cbdb266c6de.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-winpe-mul…ge-admin-deployment_31bf3856ad364e35_10.0.10586.0_none_61a8ec0fbfc52009.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\FileMaps$$_temp_401038c9a18c18c0.cdf-ms [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\FileMaps$$_vss_3f582555a4c8be22.cdf-ms [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_c_smartcardreader.inf.resources_31bf3856ad364e35_10.0.10586.0_en-us_003074ed6000d9b0\c_smartcardreader.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\en-US\c_smartcardreader.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_c_mouse.inf.resources_31bf3856ad364e35_10.0.10586.0_en-us_9cd0fc42dfb29717\c_mouse.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\en-US\c_mouse.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-userpowermanagement_31bf3856ad364e35_10.0.10586.0_none_2f9f36b9a72f92a2.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\wow64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_en-us_4dc39a0b69c40b81.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\wow64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_el-gr_4d68f1a569fb684a.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\DriverStore\en-US\c_infrared.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_c_infrared.inf.resources_31bf3856ad364e35_10.0.10586.0_en-us_a9257198f0973823\c_infrared.inf_loc [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…l-keyboard-00011809_31bf3856ad364e35_10.0.10586.0_none_1a6b6b58fedcaf79.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\System32\wbem\en-US\ncprov.mfl [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\amd64_microsoft-windows-wmi-mof.resources_31bf3856ad364e35_10.0.10586.0_en-us_f9b255c96a428952\ncprov.mfl [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_en-us_d3a7886709179c2d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_es-es_d372e54b093e8dd2.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_es-es_d372e54b093e8dd2.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_es-mx_d5a9d2f107d2717d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_es-mx_d5a9d2f107d2717d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_et-ee_cd32b0db0d446a61.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_et-ee_cd32b0db0d446a61.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pl-pl_42b73b99a38db341.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pl-pl_42b73b99a38db341.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pt-br_450b263da2174725.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pt-br_450b263da2174725.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-d…oyment-languagepack_31bf3856ad364e35_10.0.10586.0_en-us_90015a1111cb3892.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_ar-sa_3f07e4e74415124d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_ar-sa_3f07e4e74415124d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_bg-bg_e547c670349563a4.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-mlang.resources_31bf3856ad364e35_10.0.10586.0_fr-fr_b54b0e0fb01eeb16.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pt-pt_45ecf5a9a186b701.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_pt-pt_45ecf5a9a186b701.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_qps-ploc_020ae76a78ae3585.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_qps-ploc_020ae76a78ae3585.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fi-fi_728de9f7fe587ffc.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fi-fi_728de9f7fe587ffc.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fr-ca_6ea0a59400e90a5a.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fr-ca_6ea0a59400e90a5a.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fr-fr_762a5b49fc10a434.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_fr-fr_762a5b49fc10a434.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_he-il_ba4a02ebe27fa522.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_he-il_ba4a02ebe27fa522.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_de-de_2ab6b26e1a399068.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_de-de_2ab6b26e1a399068.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_el-gr_d34ce001094ef8f6.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_el-gr_d34ce001094ef8f6.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_en-gb_cc1ecd490deee868.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_en-gb_cc1ecd490deee868.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-i…er-engine.resources_31bf3856ad364e35_10.0.10586.0_en-us_d3a7886709179c2d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_ko-kr_15a914a4e51a0ffc.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_ko-kr_15a914a4e51a0ffc.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_nb-no_fe3b95d9bd3f3bb8.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_nb-no_fe3b95d9bd3f3bb8.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Manifests\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_nl-nl_fc7ae117be6b458d.manifest [E] The file cannot be accessed by the system (1920)
C:$WINDOWS.~BT\Sources\SafeOS\SafeOS.Mount\Windows\WinSxS\Backup\amd64_microsoft-windows-b…iagnostic.resources_31bf3856ad364e35_10.0.10586.0_nl-nl_fc7ae117be6b458d.manifest [E] The file cannot be accessed by the system (1920)

Are these file part of the Win10 update “offer”? I have been turning it down since I did not see a need to upgrade.

Thank you again.
– Kevin

mpam-7b8db5c5.exe|>mpavbase.vdm._p Error 42127 (Win8)

Announcements