13 replies to this topic

[bgassassin]

A little over a week ago my GF asked me to clean a computer for her parents. Everything went smoothly, but now I have it again and it's even worse than the last time. I have a pretty good idea why it's like this, but that's another story. So I used Malwarebytes, SAS, Ad-Aware and their McAfee. So like I mentioned I have it again and it's worse than before. While I could still use Ad-Aware and McAfee, SAS and MB were being blocked. Even after removing well over 300 pieces of spyware and viruses this time, it didn't get to the root of the problem even with running . After uninstalling Malwarebytes I changed the setup file name to get it to install, but changing the name of mbam did not work. The hourglass would come up and run for a little while then go away. I would then go to the task manager and I would see the newly-named .exe file in the processes list, but the program would not run.

I had this post by AdvancedSetup bookmarked because I ran into that specific problem before helping somebody else awhile back, but it's not here in this situation. Now I did find one thing called qsyddiuueugno and another called tnlfrv that had an exclamation beside them and nothing came up for them on google so I disabled them, but that didn't help. I disabled McAfee based on another thread I found here and that didn't help either. I've just about exhausted my ideas and it took a lot of work just to get the PC to load well enough to access everything (I've come to dislike DEP). I tried to search and see if there was a similar situation to this, but couldn't find anything so I apologize in advance if there is another thread addressing this. I know getting MB to run would make a huge difference and I didn't want to go posting a lot of other things that would make the thread off-topic based on things I've read. Of course I'm sure those "other things" are keeping me from getting it to run. Thanks in advance for any assistance and I will do my best to give a thorough answer to any question to help you help me.

[bgassassin]

Couldn't make an edit I guess, but to finish one of my sentences it didn't get to the root of the problem even after finally getting SDFix to finally run.

[yardbird]

Hello! did you try to uninstall the Malwarebytes program & re-install it? don't do it now, just need an answer please. So you still can't get malwarebytes to run? correct? Post back with what version you have of Malwarebytes please, & do an update on the def's... let me know the version you have, its under the ABOUT tab... then we will try some steps to get you running...regards...

[bgassassin]

Haha. I had already uninstalled it, but since I needed to reinstall it on my laptop as well anyway since that would be easier. The one I had on my jump drive is version 1.36.

[yardbird]

If your still having an issue, and please lets deal with one pc at a time. Follow these instructions please:

1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel.
2. Restart your computer (very important).
3. Download and run this utility. http://www.malwareby.../mbam-clean.exe
4. It will ask to restart your computer (please allow it to).
5. After the computer restarts, install the latest version 1.39 from here. http://www.malwareby...am-download.php
Note: You will need to reactivate the program using the license you were sent
Launch the program and set the Protection and Registration. Then go to the UPDATE tab if not done during installation and check for updates.
Restart the computer again and verify that MBAM is in the task tray and run a Quick Scan.

[yardbird]

bgassassin, on Jul 26 2009, 05:24 PM, said:

Haha. I had already uninstalled it, but since I needed to reinstall it on my laptop as well anyway since that would be easier. The one I had on my jump drive is version 1.36.

If your using for a jump drive a USB flash drive or stick, The program can't run from there. Drivers need to be installed on the main Hard drive......

[bgassassin]

yardbird, on Jul 26 2009, 08:36 PM, said:

If your using for a jump drive a USB flash drive or stick, The program can't run from there. Drivers need to be installed on the main Hard drive......

Oh no, I just have the installer saved there so I wouldn't have to keep downloading it. And my computer is fine. I had to reinstall it on mine because I was experimenting.

Alright, so I followed the steps you gave me for their computer and it still did the same thing. After the install finished, I unchecked the update and launch boxes, then I went to the MB folder and changed the name and it did the same thing as before.

[yardbird]

Please update your malwarebytes def's and tell me what the Database Version number is...

[yardbird]

Follow these instructions please:

Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.

• Please read and follow the instructions provided here: I'm infected - What do I do now?
  
• If needed please post your logs in a NEW topic here: Malware Removal - HijackThis Logs
  
• When posting logs please do not use any Quote, Code, or other tags. Please copy/paste directly into your post and do not attach files unless requested.

• Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  
• Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  
• Using these other tools often makes the cleanup task more difficult and time consuming.
  
• If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  
• Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  
• There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

• NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

[bgassassin]

yardbird, on Jul 26 2009, 09:38 PM, said:

Please update your malwarebytes def's and tell me what the Database Version number is...

Ok. How do I do that though since I can't get it to run? And I'll go to the hijackthis thread as well to see what they can tell me.

[yardbird]

bgassassin, on Jul 26 2009, 08:07 PM, said:

Ok. How do I do that though since I can't get it to run? And I'll go to the hijackthis thread as well to see what they can tell me.

Dis-regard Post # 8 and follow the directions on Post # 9....

[bgassassin]

Thanks for all your help yardbird. Now I need some more. Ok here is where I am at. I decided not to do the Hijackthis, because what I was looking for was not being pulled up by it. I just so happened to find a good part of the problem just by searching google for the errors that were occurring. After doing manual deletes in folders and the registry I was able to do enough to get malwarebytes to run using the winlogon.exe method. I am getting the 732 error when trying to update the database (currently showing 2421). Did a quick scan and come to find out the computer had uacinit.dll on it. I went through the recovery console and deleted all traces of uac from System32 and System32/Drivers. Other than the 732 error, when the clean is complete and MB says to reboot, the computer stops on at black screen after selecting the user profile I want to access. I see the pointer and can move it, but there does not seem to be any response. I look at the HDD light on the PC and I don't see any indication of activity. Shine your guiding light on me once again.

[DaChew]

The recovery console is best left alone unless windows ia already broken and system files need to be replaced, when you use it to remove malware, you are leaving infected registry keys. Those keys must be removed or repaired when removing the infected files.

I assume safe mode does not work either?

[bgassassin]

Safe Mode is where I have been doing everything from. Also I have been deleting registry keys. Unfortunately pretty much all manually due to not being able to get the programs to run. I'm about ready to just start this thing over again.