Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help and Spyware Removal Computer Help Forums Windows Startup Programs Database Virus, Spyware, and Malware Removal Guides Computer Tutorials Uninstall Database File Database Computer Glossary Computer Resources
 

Welcome Guest ( Log In | Click here to Register a free account now! )



Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
MalwareByte's Anti-Malware Download

> 

When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

 
Reply to this topicStart new topic
> Unable to open malwarebytes, hjt, or update avira or windows
jwrite
post Jun 9 2009, 10:18 PM
Post #1


New Member
*

Group: Members
Posts: 4
Joined: 9-June 09
Member No.: 340,515
Another user logged on to my computer, and since that log-in I have had multiple problems. Virus scan with Avira originally showed one infection. Infection was removed, but now I have all sorts of other problems. I am unable to open Malwarebytes, or HJT. Windows update is not working and Avira will not update.

The original infection (TR/Alureon.BP.7) was playing podcasts and advertisements thru my speakers. This is the first time I have had any infections on my computer. My Computer specs are:

Gateway GT5670
AMD Phenow 8400 Tri-Core 2.10 GHz
3.00 GB RAM
Windows Vista Home Premium 32-Bit w/ Service Pack 1

Malware Bytes problem signature:
Problem signature:
Problem Event Name: APPCRASH
Application Name: mbam.exe
Application Version: 1.37.0.0
Application Timestamp: 4a1c3007
Fault Module Name: mbam.exe
Fault Module Version: 1.37.0.0
Fault Module Timestamp: 4a1c3007
Exception Code: 80000003
Exception Offset: 00002dc0
OS Version: 6.0.6001.2.1.0.768.3
Locale ID: 1033
Additional Information 1: 9642
Additional Information 2: ae4d667f021e2f38615b5829d1b89b9c
Additional Information 3: f428
Additional Information 4: f47dbc3904e71a6d5a14f4f0c02ecc2c

HJT problem signature:
Problem signature:
Problem Event Name: APPCRASH
Application Name: HijackThis.exe
Application Version: 2.0.0.2
Application Timestamp: 466838c1
Fault Module Name: HijackThis.exe
Fault Module Version: 2.0.0.2
Fault Module Timestamp: 466838c1
Exception Code: 80000003
Exception Offset: 00142830
OS Version: 6.0.6001.2.1.0.768.3
Locale ID: 1033
Additional Information 1: 5820
Additional Information 2: ab1a1fcf1922452605e60fc5194ea39c
Additional Information 3: 1160
Additional Information 4: df646c81d810ffd0b02981e3ee525add

Avira update failure:
09.06.2009 19:45:07 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
09.06.2009 19:45:07 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\
09.06.2009 19:45:07 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4a2f1023\
09.06.2009 19:45:07 - Using System's global Proxy settings
09.06.2009 19:45:07 - Launching GUI... display mode: 0
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
09.06.2009 19:45:07 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
09.06.2009 19:45:07 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\
09.06.2009 19:45:07 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4a2f1023\
09.06.2009 19:45:07 - Using System's global Proxy settings
09.06.2009 19:45:07 - Launching GUI... display mode: 0
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
09.06.2009 19:45:07 - Avira AntiVir Personal - Free Antivirus
09.06.2009 19:45:10 - Connection failed while downloading via the system proxy the file http://dl8.freeav.net/upd/idx/master.idx.
09.06.2009 19:45:10 - Switching to next update server
09.06.2009 19:45:13 - Connection failed while downloading via the system proxy the file http://dl1.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:13 - Switching to next update server
09.06.2009 19:45:15 - Connection failed while downloading via the system proxy the file http://dl7.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:15 - Switching to next update server
09.06.2009 19:45:18 - Connection failed while downloading via the system proxy the file http://dl3.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:18 - Switching to next update server
09.06.2009 19:45:20 - Connection failed while downloading via the system proxy the file http://dl6.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:20 - Switching to next update server
09.06.2009 19:45:23 - Connection failed while downloading via the system proxy the file http://dl2.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:23 - Switching to next update server
09.06.2009 19:45:26 - Connection failed while downloading via the system proxy the file http://dl10.freeav.net/upd/idx/master.idx.
09.06.2009 19:45:26 - Switching to next update server
09.06.2009 19:45:28 - Connection failed while downloading via the system proxy the file http://dl5.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:28 - Switching to next update server
09.06.2009 19:45:31 - Connection failed while downloading via the system proxy the file http://dl4.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:31 - Switching to next update server
09.06.2009 19:45:38 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |UpdateInProgress
09.06.2009 19:45:38 - Critical error: Connection failed while downloading via the system proxy the file http://dl9.freeav.net/upd/idx/master.idx.

Windows update failure:
Failed: 1 update
Error(s) found:
Code 80244019

This is my first time posting if any other info is needed please let me know. I don't know what else to do would appreciate any info.
Go to the top of the page
 
+Quote Post
quietman7
post Jun 10 2009, 11:00 AM
Post #2


Bleepin' Janitor
******

Group: Global Moderator
Posts: 18,909
Joined: 9-July 05
From: Virginia, USA
Member No.: 26,513
Some types of malware will disable Malwarebytes Anti-Malware and other security tools. If MBAM will not run, try renaming it first.
  • Open the Malwarebytes' Anti-Malware folder in Program Files.
  • Right-click on the mbam.exe file and rename it to myscan.exe.
  • Double-click on myscan.exe to launch the program.
If that did not work, then try renaming and changing the file extension. <- click this link if you do not see the file extension
  • Open the Malwarebytes' Anti-Malware folder in Program Files.
  • Right-click on the mbam.exe file, rename it to myscan and change the .exe extension to .scr, .com, .pif, or .bat.
  • Double-click on myscan.scr (or whatever extension you renamed it) to launch the program.
If using Windows Vista, refer to How to Change a File Extension in Windows Vista.


--------------------
"THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"

Microsoft MVP - Windows Security 2007-2010
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Go to the top of the page
 
+Quote Post
jwrite
post Jun 10 2009, 10:06 PM
Post #3


New Member
*

Group: Members
Posts: 4
Joined: 9-June 09
Member No.: 340,515
Renaming worked and after multiple scans everything seems to be in order. Thanks for the help. thumbup2.gif
Go to the top of the page
 
+Quote Post
quietman7
post Jun 11 2009, 06:30 AM
Post #4


Bleepin' Janitor
******

Group: Global Moderator
Posts: 18,909
Joined: 9-July 05
From: Virginia, USA
Member No.: 26,513
You're welcome.

If there are no more problems or signs of infection, you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" tab, then click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista users can refer to these links: Create a New Restore Point in Vista and Disk Cleanup in Vista.


--------------------
"THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"

Microsoft MVP - Windows Security 2007-2010
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Go to the top of the page
 
+Quote Post
« Next Oldest · Am I infected? What do I do? · Next Newest »
 

Reply to this topicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Lo-Fi Version Time is now: 9th February 2010 - 04:09 PM


Advertise   |   About Us   |   Terms of Use   |   Privacy Policy   |   Contact Us   |   Site Map   |   Chat   |   Tutorials   |   Uninstall List
Discussion Forums   |   The Computer Glossary   |   Resources   |   RSS Feeds   |   Startups   |   The File Database   |   Virus Removal Guides

© 2003-2010 All Rights Reserved Bleeping Computer LLC.

Powered By IP.Board © 2010  IPS, Inc.