14 replies to this topic

[dezed]

Hi, I have winbluesoft on my computer and i tried to remove any i could and i couldnt,
it seems that it doesnt even allow me to open malwarebytes to destroy it,
please help me and tell if there is any way to open malwarebytes.
Thanks

[yardbird]

Hello! Welcome to the forum! I'm going to post a link with instructions please look it over. post back after you give it a try.

http://www.malwareby...showtopic=16755

[dezed]

yardbird, on Jun 22 2009, 09:25 AM, said:

Hello! Welcome to the forum! I'm going to post a link with instructions please look it over. post back after you give it a try.

http://www.malwareby...showtopic=16755

Hi thank you
I tried your link, i have double clicked it to install it and then it says finishing installation
but then it stops.
Thanks for the help, really appreciate

[yardbird]

Plesae go over these: and post back here

• Total-Security (FakeAlert)
  
• av360 (Fakealert)
  
• CLB Rootkit driver=TDSS/Seneka/GAOPDX/UAC/ovfst
  
• SystemSecurity

[dezed]

yardbird, on Jun 22 2009, 09:39 AM, said:

Plesae go over these: and post back here

• Total-Security (FakeAlert)
  
• av360 (Fakealert)
  
• CLB Rootkit driver=TDSS/Seneka/GAOPDX/UAC/ovfst
  
• SystemSecurity

Hi, it doesnt let me download the rootrepeal, says that tha bandwidth or pageview quota exceeded
Thanks

[yardbird]

I suggest you rename mbam.exe to something like "bob.exe" Do you need instructions, on how to find it.. this way it may run before we go to the next step. C:\Program Files\ let me know?

[yardbird]

C:\Program files\Malwarebytes' Anti-Malware\mbam.exe rename mbam.exe--- post back please

[dezed]

yardbird, on Jun 22 2009, 10:15 AM, said:

C:\Program files\Malwarebytes' Anti-Malware\mbam.exe rename mbam.exe--- post back please

Hi i renamed it what do i do next???
Thanks

[yardbird]

wait one please: RootRepeal page has exceeded the allocated bandwidth.

[yardbird]

Now that you renamed it Run Malwarebytes, try to update it and do a quick scan, removing anything found and rebooting if necessary. Then post back with the logs and any further issues.

[yardbird]

Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.

• Please read and follow the instructions provided here: I'm infected - What do I do now?
  
• If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  
• When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

[Fatdcuk]

Work around for the issue

Locate mbam.exe in MBAM's installation folder.

Rename it to winlogon.exe and then double click on that file to open.

Run MBAM quick scan,allow it to delete what it finds and reboot.

HTH

[dezed]

yardbird, on Jun 22 2009, 11:38 AM, said:

Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.

• Please read and follow the instructions provided here: I'm infected - What do I do now?
  
• If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  
• When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Hi sorry i had to go to work earlier,
Thanks ever so much for the help i appreciate it,
now i got a problem..... i tried to download the malware software by clicking on mbam setup and
it begins ok with the wizard but then it freezes midway through so i end up having the malware device showing on my
computer but it doesnt start. what shall i do? because even when i try to uninstall it, it doesnt work and it freezes again.

[yardbird]

Since the RootRepeal page has exceeded the allocated bandwidth. I contacted Fatduck so if you can follow his instructions now, he will get you fixed up. Read the instructions please:


Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.

• Please read and follow the instructions provided here: I'm infected - What do I do now?
  
• If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  
• When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

[Fatdcuk]

yardbird, on Jun 22 2009, 07:26 PM, said:

Since the RootRepeal page has exceeded the allocated bandwidth. I contacted Fatduck so if you can follow his instructions now, he will get you fixed up.

I have edited the download link in my walkthrough to point to new Rootrepeal download location after the author gave me permission to upload elsewhere and share