Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Malwarebytes, runtime error 50003, unexpected error


  • Please log in to reply
20 replies to this topic

#1 greenhound

greenhound

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 26 September 2013 - 10:12 AM

Very inexperienced in fixes and repairs. I rely on programs to work.

Windows XP

Nortons internet security

Malwarebytes (just downloaded 2 days ago)

CC cleaner

Just got the computer back 2 days ago after contracting some kind of trojan. Was reformated.

 

I loged on this morning, opened outlook, opened firefox-to facebook.

 

A malwarebytes window flashed up, closing all programs

.

It was the quarintine box, saying that it had found 2 seperate trojan...something sign something.

 

I tried to highlight and delete the 2 entries. Wouldn't do anything.

 

X it out and turned off the computer tried to bring it back in safe mode. Husband tried 12 times to get safe mode.

Tapping F9 would only bring it to some re-boot screen.

 

Had to msconfig to get to safe mode.

 

Tried to run malwarebytes in safemode, got the same runtime error code 50003

 

Use windows remove program to remove malwarebytes to (in my mind) get rid of corrupt program.

 

Doing a search found this site and used it to download Malewarebytes

 

in this process also downloaded rkillls from here, it found one thing

 

Then Installed maLWAREBYTES, tried to run it and still got run time error 50003

 

Help? Be gentle. I don't even understand how to copy log files to show you.

 

Thank you,

Glenna

 

 



BC AdBot (Login to Remove)

 


#2 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:03 PM

Posted 29 September 2013 - 08:06 AM

Hello, Welcome to BleepingComputer.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps.
===

Please download AdwCleaner by Xplode onto your Desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Click the Report button and the report will open in Notepad.

  • IMPORTANT

  • If you click the Clean button all items listed in the report will be removed.

  • If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.

  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click the Scan button and wait for the process to complete.
  • Check off the element(s) you wish to keep.
  • Click on the Clean button follow the prompts.
  • A log file will automatically open after the scan has finished.
  • Please post the content of that log file with your next answer.
  • You can find the log file at C:\AdwCleaner[Sn].txt (n is a number).
  • ===

    thisisujrt.gif Please download
    Junkware Removal Tool to your Desktop.
  • Please close your security software to avoid potential conflicts.
  • Run the tool by double-clicking it. If you are using Windows Vista or 7, right-mouse click it and select Run as administrator.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete, depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your Desktop and will automatically open.
  • Please post the contents of JRT.txt into your reply.
  • ===

    Please download and run this DDS Scanning Tool. Nothing will be deleted. It will just give me some additional information about your system.

    Download DDS by sUBs from one of the following links if you no longer have it available. Save it to your desktop.

    1: DDS.scr (Not recommended if you use Chrome to download this .scr file. Use the other options.)
    2: DDS.pif
    3: DDS.COM

    Double click on the DDS icon, allow it to run.
    A small box will open, with an explanation about the tool. No input is needed, the scan is running.
    Notepad will open with the results.
    Follow the instructions that pop up for posting the results.[/list]Please note: You may have to disable any script protection running if the scan fails to run.

    dds_scr.gif

    Please just paste the contents of the DDS.txt log in your next post. DO NOT attach the log.
    ===

    Please paste the logs in your next reply, DO NOT ATTACH THEM
    Let me know what problem persists.


#3 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 01 October 2013 - 05:39 AM

I am sorry I have not done anything sooner. I found this in my spam box this morning 10/1/13. I have children obligations today and probably won't get back to this until late afternoon. Thank you



#4 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:03 PM

Posted 01 October 2013 - 08:18 AM

No problems.

#5 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 02 October 2013 - 10:43 PM

# AdwCleaner v3.006 - Report created 02/10/2013 at 23:33:15
# Updated 01/10/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Glenna - WORK
# Running from : C:\Documents and Settings\Glenna\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

[!] Folder Deleted : C:\Documents and Settings\All Users\Application Data\apn
[!] Folder Deleted : C:\Documents and Settings\All Users\Application Data\AskPartnerNetwork
Folder Deleted : C:\Documents and Settings\All Users\Application Data\Babylon
[!] Folder Deleted : C:\Program Files\AskPartnerNetwork
Folder Deleted : C:\DOCUME~1\Glenna\LOCALS~1\Temp\apn
Folder Deleted : C:\Documents and Settings\Glenna\Application Data\Mozilla\Firefox\Profiles\dqirmmjm.default\jetpack

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\5c55d88dbd6aec17
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKCU\Software\BabSolution
Key Deleted : HKCU\Software\DataMngr
[#] Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\Delta
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Delta

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v24.0 (en-US)

[ File : C:\Documents and Settings\Glenna\Application Data\Mozilla\Firefox\Profiles\dqirmmjm.default\prefs.js ]


*************************

AdwCleaner[R].txt - [2310 octets] - [02/10/2013 23:24:16]
AdwCleaner[S].txt - [1900 octets] - [02/10/2013 23:33:15]

########## EOF - C:\AdwCleaner\AdwCleaner[S].txt - [1959 octets] ##########
 



#6 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 06:18 AM

Just thought of something...

My friend , who built the computer for me set up 3 accounts on the computer. One for the husband, one for me and a "control" account.  When I come up in control I don't have the adwcleaner on my desktop nor is it in my husband's account. There are like 3 seperate accounts. I sent the log for doing my account, Glenna. Do I need to do all three accounts? Download the adwcleaner to the desktop of all three and send you all three logs?

He set it up this way to try to stop accidental downloads of trojans. Makes sense to me but I was able to download it in my account with no problem and I shoudn't be able to download from my  account, just through the control account. I may be over thinking this.....

I am going to download adwcleaner in the other accounts and send the logs too. I may be doing more than I need to do.



#7 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 06:42 AM

Here is the log from the control account: I am going to stay in this account and complete the instructions and then move to the other accounts unless I hear from you not to do it.

 

# AdwCleaner v3.006 - Report created 03/10/2013 at 07:24:43
# Updated 01/10/2013 by Xplode
# Operating System : Microsoft Windows XP Service Pack 3 (32 bits)
# Username : Control - WORK
# Running from : C:\Documents and Settings\Control\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

Service Deleted : APNMCP

***** [ Files / Folders ] *****

Folder Deleted : C:\Documents and Settings\All Users\Application Data\apn
Folder Deleted : C:\Documents and Settings\All Users\Application Data\AskPartnerNetwork
Folder Deleted : C:\Program Files\AskPartnerNetwork
Folder Deleted : C:\DOCUME~1\Glenna\LOCALS~1\Temp\apn
Folder Deleted : C:\DOCUME~1\Malcolm\LOCALS~1\Temp\apn
Folder Deleted : C:\DOCUME~1\Control\LOCALS~1\Temp\apn
Folder Deleted : C:\Documents and Settings\Administrator\Local Settings\Application Data\AskPartnerNetwork
Folder Deleted : C:\Documents and Settings\Glenna\Application Data\Mozilla\Firefox\Profiles\dqirmmjm.default\jetpack

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\grusskartencenter.com
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\grusskartencenter.com
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [ApnTbMon]
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
Key Deleted : HKCU\Software\AskPartnerNetwork
Key Deleted : HKLM\Software\AskPartnerNetwork

***** [ Browsers ] *****

-\\ Internet Explorer v8.0.6001.18702

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]

-\\ Mozilla Firefox v24.0 (en-US)

[ File : C:\Documents and Settings\Glenna\Application Data\Mozilla\Firefox\Profiles\dqirmmjm.default\prefs.js ]


[ File : C:\Documents and Settings\Malcolm\Application Data\Mozilla\Firefox\Profiles\e8nx0zae.default\prefs.js ]


[ File : C:\Documents and Settings\Control\Application Data\Mozilla\Firefox\Profiles\fsq3m4k0.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2599 octets] - [03/10/2013 07:22:45]
AdwCleaner[R].txt - [2310 octets] - [02/10/2013 23:24:16]
AdwCleaner[S0].txt - [2259 octets] - [03/10/2013 07:24:43]
AdwCleaner[S].txt - [2038 octets] - [02/10/2013 23:33:15]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [237



#8 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 07:26 AM

Log from the control account after running junkware:

 

~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{44cbc005-6243-4502-8a02-3a096a282664}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{80703783-e415-4ee3-ab60-d36981c5a6f1}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{d8278076-bc68-4484-9233-6e7f1628b56c}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\classes\clsid\{f297534d-7b06-459d-bc19-2dd8ef69297b}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{6978f29a-3493-40b2-8cdc-9c13a02f85a4}"
Successfully deleted: [Registry Key] "hkey_local_machine\software\microsoft\internet explorer\low rights\elevationpolicy\{d7949a66-d936-4028-9552-14f7dc50f38d}"



~~~ Files



~~~ Folders





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Thu 10/03/2013 at  8:06:05.75
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 



#9 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 07:37 AM

Herte is the DDS log, copied and pasted. As an aside, Thank you for the help. I truly don't know what I am doing. It is like my truck, I can drive it with no problem but is something doesn't work I have to take it to the shop.At least people are not trying to insert viruses and trojans in my truck.

 

I will wait to hear something fom you to see if I need to do this to the other "accounts" on the computer or if the control account covers the entire computer.

 

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 8/30/2013 11:23:46 PM
System Uptime: 10/3/2013 7:25:57 AM (1 hours ago)
.
Motherboard: ASUSTeK Computer INC. |  | P4S800D-X
Processor:               Intel® Pentium® 4 CPU 2.40GHz | PGA 478 | 2400/133mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 298 GiB total, 274.764 GiB free.
D: is CDROM ()
F: is Removable
G: is Removable
H: is Removable
I: is Removable
J: is Removable
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Multimedia Audio Controller
Device ID: PCI\VEN_1039&DEV_7012&SUBSYS_810D1043&REV_A0\3&267A616A&0&17
Manufacturer:
Name: Multimedia Audio Controller
PNP Device ID: PCI\VEN_1039&DEV_7012&SUBSYS_810D1043&REV_A0\3&267A616A&0&17
Service:
.
==== System Restore Points ===================
.
RP1: 8/30/2013 11:28:12 PM - System Checkpoint
RP2: 8/31/2013 12:18:34 AM - Installed Windows Internet Explorer 8.
RP3: 8/31/2013 12:32:40 AM - Installed Windows KB954550-v5.
RP4: 8/31/2013 12:32:45 AM - Printer Driver Microsoft XPS Document Writer Installed
RP5: 8/31/2013 12:32:49 AM - Printer Driver Microsoft XPS Document Writer Installed
RP6: 8/31/2013 12:37:47 AM - Installed Microsoft Download Manager
RP7: 8/31/2013 12:42:37 AM - Installed %1 %2.
RP8: 8/31/2013 6:46:59 PM - Software Distribution Service 3.0
RP9: 8/31/2013 7:19:58 PM - Software Distribution Service 3.0
RP10: 8/31/2013 11:01:36 PM - Software Distribution Service 3.0
RP11: 8/31/2013 11:05:34 PM - Software Distribution Service 3.0
RP12: 8/31/2013 11:12:25 PM - Software Distribution Service 3.0
RP13: 8/31/2013 11:18:05 PM - Software Distribution Service 3.0
RP14: 8/31/2013 11:47:19 PM - Software Distribution Service 3.0
RP15: 9/1/2013 2:28:02 PM - Installed Microsoft Office 2000 Professional
RP16: 9/1/2013 2:49:28 PM - Installed Microsoft Office 2000 Professional
RP17: 9/1/2013 2:51:46 PM - Installed Microsoft Office 2000 Professional
RP18: 9/4/2013 7:37:09 PM - System Checkpoint
RP19: 9/8/2013 4:31:17 PM - Removed Microsoft Office 2000 Professional
RP20: 9/8/2013 4:38:20 PM - Installed Microsoft Office XP Professional
RP21: 9/8/2013 5:11:00 PM - Software Distribution Service 3.0
RP22: 9/8/2013 5:42:27 PM - Software Distribution Service 3.0
RP23: 9/8/2013 6:03:19 PM - Software Distribution Service 3.0
RP24: 9/8/2013 6:25:37 PM - Installed Sound Blaster Audigy
RP25: 9/8/2013 6:25:40 PM - Installed Creative AudioHQ
RP26: 9/8/2013 6:25:46 PM - Installed Creative Surround Mixer
RP27: 9/8/2013 6:25:50 PM - Installed Creative Restore Defaults
RP28: 9/8/2013 6:25:54 PM - Installed Creative Diagnostics
RP29: 9/8/2013 6:38:41 PM - Installed Creative Recorder
RP30: 9/8/2013 6:52:14 PM - Restore Operation
RP31: 9/8/2013 6:57:00 PM - Software Distribution Service 3.0
RP32: 9/8/2013 7:04:10 PM - Installed SiSRaidPackage
RP33: 9/8/2013 8:11:51 PM - Installed DirectX
RP34: 9/8/2013 8:12:25 PM - Installed DirectX
RP35: 9/16/2013 8:10:11 PM - Software Distribution Service 3.0
RP36: 9/22/2013 11:28:43 PM - Software Distribution Service 3.0
RP37: 9/23/2013 11:33:38 PM - System Checkpoint
RP38: 9/25/2013 5:20:49 AM - System Checkpoint
RP39: 9/26/2013 8:05:30 AM - System Checkpoint
RP40: 9/27/2013 8:37:48 AM - System Checkpoint
RP41: 9/28/2013 9:19:45 AM - System Checkpoint
RP42: 9/29/2013 10:00:09 AM - System Checkpoint
RP43: 9/30/2013 12:59:00 PM - System Checkpoint
RP44: 10/1/2013 1:39:13 PM - System Checkpoint
RP45: 10/2/2013 2:04:48 PM - System Checkpoint
.
==== Installed Programs ======================
.
Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Ask Toolbar
CCleaner
DirectX 9 Runtime
DirectXInstallService
Free PDF Tablet
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB954550-v5)
Hotfix for Windows XP (KB961118)
HP Photo Creations
HP Photosmart Plus B210 series Basic Device Software
HP Photosmart Plus B210 series Help
HP Photosmart Plus B210 series Product Improvement Study
HP Update
I.R.I.S. OCR
LightScribe System Software
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2833941)
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Download Manager
Microsoft Office XP Professional
Microsoft User-Mode Driver Framework Feature Pack 1.0
Mozilla Firefox 24.0 (x86 en-US)
Mozilla Maintenance Service
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Norton Internet Security
NVIDIA Windows 2000/XP Display Drivers
Roxio Activation Module
Roxio BackOnTrack
Roxio Central Audio
Roxio Central Copy
Roxio Central Core
Roxio Central Data
Roxio Central Tools
Roxio CinePlayer
Roxio CinePlayer Decoder Pack
Roxio Creator 10 CE
Roxio File Backup
Roxio Plextor Driver Documentation
Roxio Update Manager
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2604111)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2657424)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2736416)
Security Update for Microsoft .NET Framework 3.5 SP1 (KB2840629)
Security Update for Microsoft Windows (KB2564958)
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2862772)
Security Update for Windows Internet Explorer 8 (KB2870699)
Security Update for Windows Media Player (KB2378111)
Security Update for Windows Media Player (KB2803821-v2)
Security Update for Windows Media Player (KB2834904-v2)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB2115168)
Security Update for Windows XP (KB2229593)
Security Update for Windows XP (KB2296011)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2387149)
Security Update for Windows XP (KB2393802)
Security Update for Windows XP (KB2419632)
Security Update for Windows XP (KB2423089)
Security Update for Windows XP (KB2440591)
Security Update for Windows XP (KB2443105)
Security Update for Windows XP (KB2478960)
Security Update for Windows XP (KB2478971)
Security Update for Windows XP (KB2479943)
Security Update for Windows XP (KB2481109)
Security Update for Windows XP (KB2483185)
Security Update for Windows XP (KB2485663)
Security Update for Windows XP (KB2506212)
Security Update for Windows XP (KB2507938)
Security Update for Windows XP (KB2508429)
Security Update for Windows XP (KB2509553)
Security Update for Windows XP (KB2535512)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2544893-v2)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2570947)
Security Update for Windows XP (KB2584146)
Security Update for Windows XP (KB2585542)
Security Update for Windows XP (KB2592799)
Security Update for Windows XP (KB2598479)
Security Update for Windows XP (KB2603381)
Security Update for Windows XP (KB2618451)
Security Update for Windows XP (KB2619339)
Security Update for Windows XP (KB2620712)
Security Update for Windows XP (KB2624667)
Security Update for Windows XP (KB2631813)
Security Update for Windows XP (KB2653956)
Security Update for Windows XP (KB2655992)
Security Update for Windows XP (KB2659262)
Security Update for Windows XP (KB2661637)
Security Update for Windows XP (KB2676562)
Security Update for Windows XP (KB2686509)
Security Update for Windows XP (KB2691442)
Security Update for Windows XP (KB2698365)
Security Update for Windows XP (KB2705219-v2)
Security Update for Windows XP (KB2712808)
Security Update for Windows XP (KB2719985)
Security Update for Windows XP (KB2723135-v2)
Security Update for Windows XP (KB2727528)
Security Update for Windows XP (KB2753842-v2)
Security Update for Windows XP (KB2757638)
Security Update for Windows XP (KB2758857)
Security Update for Windows XP (KB2770660)
Security Update for Windows XP (KB2780091)
Security Update for Windows XP (KB2802968)
Security Update for Windows XP (KB2807986)
Security Update for Windows XP (KB2813345)
Security Update for Windows XP (KB2820197)
Security Update for Windows XP (KB2820917)
Security Update for Windows XP (KB2834886)
Security Update for Windows XP (KB2845187)
Security Update for Windows XP (KB2849470)
Security Update for Windows XP (KB2850851)
Security Update for Windows XP (KB2850869)
Security Update for Windows XP (KB2859537)
Security Update for Windows XP (KB2864063)
Security Update for Windows XP (KB2876217)
Security Update for Windows XP (KB2876315)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923789)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB970430)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975713)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
SiSRaidPackage
Sound Blaster Live! Web 2K/XP
Spybot - Search & Destroy
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows Internet Explorer 8 (KB2632503)
Update for Windows XP (KB2345886)
Update for Windows XP (KB2492386)
Update for Windows XP (KB2749655)
Update for Windows XP (KB2808679)
Update for Windows XP (KB2863058)
Update for Windows XP (KB898461)
Update for Windows XP (KB951978)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973815)
WebFldrs XP
Windows Genuine Advantage Notifications (KB905474)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
Windows PowerShell™ 1.0
.
==== Event Viewer Messages From Past Week ========
.
9/27/2013 8:37:50 PM, error: SideBySide [59]  - Generate Activation Context failed for C:\WINDOWS\system32\WindowsLogon.manifest. Reference error message: The operation completed successfully. .
9/27/2013 8:37:50 PM, error: SideBySide [58]  - Syntax error in manifest or policy file "C:\WINDOWS\system32\WindowsLogon.manifest" on line 1.
9/27/2013 5:34:28 AM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Spybot-S&D 2 Security Center Service service to connect.
9/27/2013 5:34:28 AM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the LiveShare P2P Server 10 service to connect.
9/27/2013 5:34:28 AM, error: Service Control Manager [7000]  - The Spybot-S&D 2 Security Center Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
9/27/2013 5:34:28 AM, error: Service Control Manager [7000]  - The SessionLauncher service failed to start due to the following error:  The system cannot find the path specified.
9/26/2013 12:27:25 AM, error: DCOM [10005]  - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
9/26/2013 12:24:27 AM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  AFD BHDrvx86 ccSet_NIS eeCtrl Fips intelppm IPSec MRxSmb NetBIOS NetBT RasAcd Rdbss SRTSPX SymIRON SYMTDI Tcpip
9/26/2013 12:24:27 AM, error: Service Control Manager [7001]  - The TCP/IP NetBIOS Helper service depends on the AFD service which failed to start because of the following error:  A device attached to the system is not functioning.
9/26/2013 12:24:27 AM, error: Service Control Manager [7001]  - The IPSEC Services service depends on the IPSEC driver service which failed to start because of the following error:  A device attached to the system is not functioning.
9/26/2013 12:24:27 AM, error: Service Control Manager [7001]  - The DNS Client service depends on the TCP/IP Protocol Driver service which failed to start because of the following error:  A device attached to the system is not functioning.
9/26/2013 12:24:27 AM, error: Service Control Manager [7001]  - The DHCP Client service depends on the NetBios over Tcpip service which failed to start because of the following error:  A device attached to the system is not functioning.
10/3/2013 8:29:26 AM, error: Service Control Manager [7016]  - The SmartLinkService service has reported an invalid current state 0.
10/2/2013 11:35:44 PM, error: Disk [11]  - The driver detected a controller error on \Device\Harddisk0\D.
10/1/2013 5:24:01 AM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Spybot-S&D 2 Scanner Service service to connect.
10/1/2013 5:24:01 AM, error: Service Control Manager [7000]  - The Spybot-S&D 2 Scanner Service service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
.
==== End Of File ===========================
 



#10 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 07:46 AM

LOL even after all of this I still get the same error message from malwarebytes. runtime error 50003.

 



#11 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:03 PM

Posted 03 October 2013 - 08:30 AM

Install this VB common controls.

Microsoft Visual Basic 6.0 Common Controls
http://www.microsoft.com/en-ca/download/details.aspx?id=10019

Follow the instructions on the page.

Can you now run Malwarebytes?

#12 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 03 October 2013 - 07:22 PM

Did it and still get the run time error 50003 and won't open.



#13 greenhound

greenhound
  • Topic Starter

  • Members
  • 14 posts
  • OFFLINE
  •  
  • Local time:12:03 AM

Posted 04 October 2013 - 05:51 AM

Very interesting this morning, I closed down the computer this morning 2AM. I opened it up at 6:30 AM. Log on to my account and Firefox  opens just like brand new account. I have no theme picture, windows are popping up to do add ons that I have done weeks ago. No home page, I was going to move back into Firefox and do the add ons again but will wait to hear what you think. I started using Firefox because IE was just running slow and have been pleased with the options but it makes me feel that something is not right on the computer because of this.



#14 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:03 PM

Posted 04 October 2013 - 08:21 AM

Lets try this for now.

Remove Spybot and destroy, using the Add/remove programs.

Restart the computer to reset the registry.

Run the DDS tool and post the DDS.txt log. I already have the other log.
===

--RogueKiller--
  • Download & SAVE to your Desktop RogueKiller for 32bit or Roguekiller for 64bit
  • Quit all programs that you may have started.
  • Please disconnect any USB or external drives from the computer before you run this scan!
  • For Vista or Windows 7, right-click and select "Run as Administrator to start"
  • For Windows XP, double-click to start.
  • Wait until Prescan has finished ...
  • Then Click on "Scan" button
  • Wait until the Status box shows "Scan Finished"
  • click on "delete"
  • Wait until the Status box shows "Deleting Finished"
  • Click on "Report" and copy/paste the content of the Notepad into your next reply.
  • The log should be found in RKreport[1].txt on your Desktop
  • Exit/Close RogueKiller+
I suggest you only use Firefox for now.
Will look at IE when things are running better.

#15 nasdaq

nasdaq

  • Malware Response Team
  • 40,754 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:11:03 PM

Posted 10 October 2013 - 09:39 AM

Are you still with me?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users