Your Malwarebytes Anti-Malware log indicates you are using an older version
) of MBAM with with an outdated database
. Please download and install the most current version (v1.46
) from here
. You may have to reboot after updating in order to overwrite any "in use" protection module files.
The database shows 3884
. Last I checked it was 4060
.If you cannot use the Internet or download any required programs
to the infected machine, you are going to need access to another computer (family member, friend, library etc) with an Internet connection. Save mbam-setup.exe
to a flash (usb, pen, thumb, jump) drive or CD, transfer it to the infected machine, then install and run the program. If you cannot transfer to or install on the infected machine, try running the setup (installation) file directly from the flash drive or CD by double-clicking on mbam-setup.exe
so it will install on the hard drive. If you cannot copy files to your usb drive, make sure it is not "Write Protected
". Some flash drives have a switch on the side which could have accidentally been moved to write protect.
You will also need to manually download the definition database
from another computer, save and transfer them to the infected machine. After installing MBAM, just double-click on mbam-rules.exe
to apply the update. Then perform a new Quick Scan
in normal mode and check all items found for removal. Don't forgot to reboot afterwards. Failure to reboot normally
(not into safe mode) will prevent MBAM from removing all the malware. When done, click the Logs
tab and copy/paste the contents of the new report in your next reply.
Note: Mbam-rules.exe is not
updated daily. Another way to get the most current database definitions if you're having problems updating through the program's interface or have already manually downloaded the latest definitions (mbam-rules.exe) shown on this page
, is to do the following: Install MBAM on a clean computer, launch the program and update through MBAM's interface. Copy the definitions (rules.ref
) to a USB stick or CD and transfer that file to the infected machine. Copy rules.ref to the location indicated for your operating system. If you cannot see the folder, then you may have to Reconfigure Windows
to show it.
- XP: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
- Vista: C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware
-- Some types of malware will target Malwarebytes Anti-Malware and other security tools to keep them from running properly. Other types of malware may delete
the main mbam.exe
executable file during installation or when attempting to perform a scan which results in various errors. If that's the case, please refer to the suggestions provided in For those having trouble running Malwarebytes Anti-Malware
for using Rkill
or downloading a renamed version of mbam.exe. Do not reboot after running Rkill
. Immediately after running this tool, you need to perform your scan with Malwarebytes Anti-Malware.Note: You may have to make repeated attempts to use Rkill several times before it will run as some malware variants try to block it.
If you get an alert that Rkill is infected, ignore it. The alert is a fake warning given by the rogue software which attempts to terminate tools that try to remove it. If you see such a warning, leave the warning on the screen and then run Rkill again. By not closing the warning, this sometimes allows you to bypass the malware's attempt to protect itself so that Rkill can perform its routine.