Please download and scan with Dr.Web CureIt
- alternate download link
.Follow these instructions for performing a scan in "safe mode"
If you cannot boot into safe mode, then perform your scan in normal mode. Be aware, this scan could take a long time to complete.
-- Post the log in your next reply. If you can't find the log, try to write down what was detected/removed before exiting Dr.WebCureIt so you can provide that information.
Your Malwarebytes Anti-Malware log indicates you are using an older version of MBAM (v1.37) with an outdated database
. Please download and install the most current version (1.38
) from here
. You may have to reboot after updating in order to overwrite any "in use" protection module files.
Update the database through the program's interface (preferable method
) or manually download the definition updates
and just double-click on mbam-rules.exe
Your database shows 2191. Last I checked it was 2332
Mbam-rules.exe is not
updated daily. Another way to get the most current database definitions if you're having problems updating through the program's interface or have already manually downloaded the latest definitions (mbam-rules.exe) shown on this page
, is to do the following: Install MBAM on a clean computer, launch the program and update through MBAM's interface. Copy the definitions (rules.ref
) to a USB stick or CD and transfer that file to the infected machine. Copy rules.ref to the location indicated for your operating system. If you cannot see the folder, then you may have to Reconfigure Windows
to show it.
- XP: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
- Vista: C:\Documents and Settings\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware
Then perform a new Quick Scan
in normal mode and check all items found for removal. Don't forgot to reboot afterwards. Failure to reboot normally
(not into safe mode) will prevent MBAM from removing all the malware. When done, click the Logs
tab and copy/paste the contents of the new report in your next reply.