Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Unable to open malwarebytes, hjt, or update avira or windows


  • Please log in to reply
3 replies to this topic

#1 jwrite

jwrite

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 09 June 2009 - 10:18 PM

Another user logged on to my computer, and since that log-in I have had multiple problems. Virus scan with Avira originally showed one infection. Infection was removed, but now I have all sorts of other problems. I am unable to open Malwarebytes, or HJT. Windows update is not working and Avira will not update.

The original infection (TR/Alureon.BP.7) was playing podcasts and advertisements thru my speakers. This is the first time I have had any infections on my computer. My Computer specs are:

Gateway GT5670
AMD Phenow 8400 Tri-Core 2.10 GHz
3.00 GB RAM
Windows Vista Home Premium 32-Bit w/ Service Pack 1

Malware Bytes problem signature:
Problem signature:
Problem Event Name: APPCRASH
Application Name: mbam.exe
Application Version: 1.37.0.0
Application Timestamp: 4a1c3007
Fault Module Name: mbam.exe
Fault Module Version: 1.37.0.0
Fault Module Timestamp: 4a1c3007
Exception Code: 80000003
Exception Offset: 00002dc0
OS Version: 6.0.6001.2.1.0.768.3
Locale ID: 1033
Additional Information 1: 9642
Additional Information 2: ae4d667f021e2f38615b5829d1b89b9c
Additional Information 3: f428
Additional Information 4: f47dbc3904e71a6d5a14f4f0c02ecc2c

HJT problem signature:
Problem signature:
Problem Event Name: APPCRASH
Application Name: HijackThis.exe
Application Version: 2.0.0.2
Application Timestamp: 466838c1
Fault Module Name: HijackThis.exe
Fault Module Version: 2.0.0.2
Fault Module Timestamp: 466838c1
Exception Code: 80000003
Exception Offset: 00142830
OS Version: 6.0.6001.2.1.0.768.3
Locale ID: 1033
Additional Information 1: 5820
Additional Information 2: ab1a1fcf1922452605e60fc5194ea39c
Additional Information 3: 1160
Additional Information 4: df646c81d810ffd0b02981e3ee525add

Avira update failure:
09.06.2009 19:45:07 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
09.06.2009 19:45:07 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\
09.06.2009 19:45:07 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4a2f1023\
09.06.2009 19:45:07 - Using System's global Proxy settings
09.06.2009 19:45:07 - Launching GUI... display mode: 0
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
09.06.2009 19:45:07 - Installation Directory: C:\Program Files\Avira\AntiVir PersonalEdition Classic\
09.06.2009 19:45:07 - Backup Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\BACKUP\
09.06.2009 19:45:07 - Temp Directory: C:\ProgramData\Avira\AntiVir PersonalEdition Classic\Update\AVUPDATE_4a2f1023\
09.06.2009 19:45:07 - Using System's global Proxy settings
09.06.2009 19:45:07 - Launching GUI... display mode: 0
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlib.dll
09.06.2009 19:45:07 - selftest successful: C:\Program Files\Avira\AntiVir PersonalEdition Classic\updlibrc.dll
09.06.2009 19:45:07 - Avira AntiVir Personal - Free Antivirus
09.06.2009 19:45:10 - Connection failed while downloading via the system proxy the file http://dl8.freeav.net/upd/idx/master.idx.
09.06.2009 19:45:10 - Switching to next update server
09.06.2009 19:45:13 - Connection failed while downloading via the system proxy the file http://dl1.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:13 - Switching to next update server
09.06.2009 19:45:15 - Connection failed while downloading via the system proxy the file http://dl7.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:15 - Switching to next update server
09.06.2009 19:45:18 - Connection failed while downloading via the system proxy the file http://dl3.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:18 - Switching to next update server
09.06.2009 19:45:20 - Connection failed while downloading via the system proxy the file http://dl6.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:20 - Switching to next update server
09.06.2009 19:45:23 - Connection failed while downloading via the system proxy the file http://dl2.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:23 - Switching to next update server
09.06.2009 19:45:26 - Connection failed while downloading via the system proxy the file http://dl10.freeav.net/upd/idx/master.idx.
09.06.2009 19:45:26 - Switching to next update server
09.06.2009 19:45:28 - Connection failed while downloading via the system proxy the file http://dl5.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:28 - Switching to next update server
09.06.2009 19:45:31 - Connection failed while downloading via the system proxy the file http://dl4.avgate.net/upd/idx/master.idx.
09.06.2009 19:45:31 - Switching to next update server
09.06.2009 19:45:38 - Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Classic |UpdateInProgress
09.06.2009 19:45:38 - Critical error: Connection failed while downloading via the system proxy the file http://dl9.freeav.net/upd/idx/master.idx.

Windows update failure:
Failed: 1 update
Error(s) found:
Code 80244019

This is my first time posting if any other info is needed please let me know. I don't know what else to do would appreciate any info.

BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,047 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:04 PM

Posted 10 June 2009 - 11:00 AM

Some types of malware will disable Malwarebytes Anti-Malware and other security tools. If MBAM will not run, try renaming it first.
  • Open the Malwarebytes' Anti-Malware folder in Program Files.
  • Right-click on the mbam.exe file and rename it to myscan.exe.
  • Double-click on myscan.exe to launch the program.
If that did not work, then try renaming and changing the file extension. <- click this link if you do not see the file extension
  • Open the Malwarebytes' Anti-Malware folder in Program Files.
  • Right-click on the mbam.exe file, rename it to myscan and change the .exe extension to .scr, .com, .pif, or .bat.
  • Double-click on myscan.scr (or whatever extension you renamed it) to launch the program.
If using Windows Vista, refer to How to Change a File Extension in Windows Vista.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 jwrite

jwrite
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:04 PM

Posted 10 June 2009 - 10:06 PM

Renaming worked and after multiple scans everything seems to be in order. Thanks for the help. :thumbsup:

#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,047 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:04 PM

Posted 11 June 2009 - 06:30 AM

You're welcome.

If there are no more problems or signs of infection, you should Create a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been backed up, renamed and saved in System Restore. Since this is a protected directory your tools cannot access to delete these files, they sometimes can reinfect your system if you accidentally use an old restore point. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.

The easiest and safest way to do this is:
  • Go to Start > Programs > Accessories > System Tools and click "System Restore".
  • Choose the radio button marked "Create a Restore Point" on the first screen then click "Next". Give the R.P. a name, then click "Create". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
  • Then use Disk Cleanup to remove all but the most recently created Restore Point.
  • Go to Start > Run and type: Cleanmgr
  • Click "Ok". Disk Cleanup will scan your files for several minutes, then open.
  • Click the "More Options" tab, then click the "Clean up" button under System Restore.
  • Click Ok. You will be prompted with "Are you sure you want to delete all but the most recent restore point?"
  • Click Yes, then click Ok.
  • Click Yes again when prompted with "Are you sure you want to perform these actions?"
  • Disk Cleanup will remove the files and close automatically.
Vista users can refer to these links: Create a New Restore Point in Vista and Disk Cleanup in Vista.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users