Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Junkware Removal Tool (JRT) crashes


  • Please log in to reply
3 replies to this topic

#1 MM_john

MM_john

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:43 PM

Posted 13 October 2015 - 01:39 AM

I have a thinkpad which had malware that I am assuming was cleaned.

The PC has Avast Internet Security, and SuperAntispyware (both paid) running when windows starts.

It also has MalwareBytes Antimalware (paid) running daily scans but not real time.

All of these are now clean.

I have not run another root kit detector, altho MBAM's was enabled.

I downloaded from this site AdwCleaner and it found and cleaned things.

I downloaded from this site Junkware Removal Tool (JRT) and it did not find anything but crashed in the middle.

 

It just stopped, no error message, no log, no .txt file. The final message in the cmd window was "Checking registry" which had been there for 2-5 minutes. Watching in process explorer, it was forking reg.exe and GREP.DAT processes repeatedly. And a pair of those was the last thing it forked.

 

I suspect this PC has damage from malware.

For example,

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
was empty

This meant that, eg, the %AppData% environment variable had no value and programs were creating %AppData% folders in their current working directories all over the file system.

I fixed that, and things improved.

But there might still be other damage.

But the only symptom now is JRT cashing.

 

Thanks for your attention!

 

EDIT: Oh yeah, one more thing:

The username contains the '&' (ampersand) character, say, "alice&bob". So in cmd echo %userprofile% eg results in two commands, delimited by the ampersand, and the error "bob is not recognized as a internal or external command..."

 


Edited by MM_john, 13 October 2015 - 01:45 AM.


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:43 PM

Posted 13 October 2015 - 07:54 AM

MalwareBytes acquired JRT in 2015.

If you have an issue or problem with JRT, then start a new topic in the Malwarebytes Support Forum for JRT.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 MM_john

MM_john
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:04:43 PM

Posted 13 October 2015 - 02:55 PM

Ok i posted on Malwarebytes : https://forums.malwarebytes.org/index.php?/topic/173960-junkware-removal-tool-jrt-crashes-just-stops/



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,474 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:43 PM

Posted 13 October 2015 - 03:05 PM

Good luck.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users