2 replies to this topic

[jenniew1]

Hi,
I tried to download malwarebytes anti-malware and it downloads, but will not open. My trend-mico pc-cillin will not open either- says no network device found or there is a conflict with existing antivirus or security software.
I tried opening MBAM program in safe mode and it doesn't work. I tried going to program files and renaming the file MBAM.exe to winlogon.exe and that didn't work.
When i try to run the hijack program, nothing happens, but an ad plays through my speakers.
What else can I tell you? I need help.
Thanks

[jenniew1]

I just wanted to add that I was able to do a system scan before trying these fixes. Thought this may help. Here are the results:

2009-08-07, 20:50:00, Auto-clean mode specified.
2009-08-07, 20:50:01, Failed to initialize Rootkit Driver.
2009-08-07, 20:50:01, Running scanner "C:\Documents and Settings\Chris\Desktop\System Cleaner\TSC.BIN"...
2009-08-07, 20:50:51, Scanner "C:\Documents and Settings\Chris\Desktop\System Cleaner\TSC.BIN" has finished running.
2009-08-07, 20:50:51, TSC Log:

ÿþD a m a g e C l e a n u p E n g i n e ( D C E ) 6 . 1 ( B u i l d 1 0 2 7 ) ( R C M : D r i v e r n o t r e a d y ! )


W i n d o w s X P ( B u i l d 2 6 0 0 : S e r v i c e P a c k 3 )




S t a r t t i m e : F r i A u g 0 7 2 0 0 9 2 0 : 5 0 : 0 1





L o a d D a m a g e C l e a n u p T e m p l a t e ( D C T ) " C : \ D o c u m e n t s a n d S e t t i n g s \ C h r i s \ D e s k t o p \ S y s t e m C l e a n e r \ T M R D C T . p t n " ( v e r s i o n ) [ f a i l ]


L o a d D a m a g e C l e a n u p T e m p l a t e ( D C T ) " C : \ D o c u m e n t s a n d S e t t i n g s \ C h r i s \ D e s k t o p \ S y s t e m C l e a n e r \ t s c . p t n " ( v e r s i o n 1 0 5 2 ) [ s u c c e s s ]





C o m p l e t e t i m e : F r i A u g 0 7 2 0 0 9 2 0 : 5 0 : 5 1


E x e c u t e p a t t e r n c o u n t ( 3 0 6 1 ) , V i r u s f o u n d c o u n t ( 0 ) , V i r u s c l e a n c o u n t ( 0 ) , C l e a n f a i l e d c o u n t ( 0 )





2009-08-07, 20:50:51, Running scanner "C:\Documents and Settings\Chris\Desktop\System Cleaner\VSCANTM.BIN"...
2009-08-07, 22:16:49, Scanner "C:\Documents and Settings\Chris\Desktop\System Cleaner\VSCANTM.BIN" has finished running.
2009-08-07, 22:16:49, VSCANTM Log:

2009-08-07, 22:16:49, Files Detected:
Copyright © 1990 - 2006 Trend Micro Inc.
Report Date : 8/7/2009 20:50:51
VSAPI Engine Version : 8.950-1092
VSCANTM Version : 3.00-1018 (Official Build)

VSGetVirusPatternInformation is invoked

Virus Pattern Version : 350 (463027/463027 Patterns) (2009/08/07) (635003)

Command Line: C:\Documents and Settings\Chris\Desktop\System Cleaner\VSCANTM.BIN /NBPM /S /CLEANALL /LD /LC /LCF /NM /NB /DCEGENCLEAN /HIDEDCECONSOLE /C /ACTIVEACTION=5 /VSBKENC+ /BK /LR C:\*.* /P=C:\Documents and Settings\Chris\Desktop\System Cleaner\lpt$vpn.350

C:\Documents and Settings\Chris\Local Settings\Temporary Internet Files\Content.IE5\A189V05O\rabetis_net[1].htm [Possible_Hifrm-5]
C:\Documents and Settings\Chris\Local Settings\Temporary Internet Files\Content.IE5\PZFT7EIF\rabetis_net[1].htm [Possible_Hifrm-5]
C:\Documents and Settings\Chris\Local Settings\Temporary Internet Files\Content.IE5\QBDVU128\Install[1].exe [Mal_FakeAV-9]
C:\Program Files\PC_Antispyware2010\htmlayout.dll [TROJ_FAKEALER.KO]
C:\Program Files\PC_Antispyware2010\PC_Antispyware2010.exe [Mal_FakeAV-9]
C:\Program Files\PC_Antispyware2010\Uninstall.exe [Mal_FakeAV-9]
C:\WINDOWS\SYSTEM32\CONFIG\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\OPQRSTUV\fn1[1].exe [Cryp_Zbot-2]
C:\WINDOWS\SYSTEM32\wisdstr.exe [Mal_FakeAV-9]
C:\WINDOWS\Temp\rdlAE.tmp.exe [Cryp_Zbot-2]
95561 files have been read.
95561 files have been checked.
95530 files have been scanned.
248218 files have been scanned. (including files in archived)
9 files containing viruses.
Found 9 viruses totally.
Maybe 0 viruses totally.
Stop At: 8/7/2009 22:16:49 1 hour 25 minutes 57 seconds (5156.66 seconds) has elapsed.(53.962 msec/file)
---------*---------*---------*---------*---------*---------*---------*---------*
2009-08-07, 22:16:49, Files Clean:
Copyright © 1990 - 2006 Trend Micro Inc.
Report Date : 8/7/2009 20:50:51
VSAPI Engine Version : 8.950-1092
VSCANTM Version : 3.00-1018 (Official Build)

VSGetVirusPatternInformation is invoked

Virus Pattern Version : 350 (463027/463027 Patterns) (2009/08/07) (635003)

Command Line: C:\Documents and Settings\Chris\Desktop\System Cleaner\VSCANTM.BIN /NBPM /S /CLEANALL /LD /LC /LCF /NM /NB /DCEGENCLEAN /HIDEDCECONSOLE /C /ACTIVEACTION=5 /VSBKENC+ /BK /LR C:\*.* /P=C:\Documents and Settings\Chris\Desktop\System Cleaner\lpt$vpn.350

Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Documents and Settings\Chris\Local Settings\Temporary Internet Files\Content.IE5\QBDVU128\Install[1].exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Program Files\PC_Antispyware2010\PC_Antispyware2010.exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Program Files\PC_Antispyware2010\Uninstall.exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\WINDOWS\SYSTEM32\wisdstr.exe
95561 files have been read.
95561 files have been checked.
95530 files have been scanned.
248218 files have been scanned. (including files in archived)
9 files containing viruses.
Found 9 viruses totally.
Maybe 0 viruses totally.
Stop At: 8/7/2009 22:16:49 1 hour 25 minutes 57 seconds (5156.66 seconds) has elapsed.(53.962 msec/file)
---------*---------*---------*---------*---------*---------*---------*---------*
2009-08-07, 22:16:49, Clean Fail:
Copyright © 1990 - 2006 Trend Micro Inc.
Report Date : 8/7/2009 20:50:51
VSAPI Engine Version : 8.950-1092
VSCANTM Version : 3.00-1018 (Official Build)

VSGetVirusPatternInformation is invoked

Virus Pattern Version : 350 (463027/463027 Patterns) (2009/08/07) (635003)

Command Line: C:\Documents and Settings\Chris\Desktop\System Cleaner\VSCANTM.BIN /NBPM /S /CLEANALL /LD /LC /LCF /NM /NB /DCEGENCLEAN /HIDEDCECONSOLE /C /ACTIVEACTION=5 /VSBKENC+ /BK /LR C:\*.* /P=C:\Documents and Settings\Chris\Desktop\System Cleaner\lpt$vpn.350

Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Documents and Settings\Chris\Local Settings\Temporary Internet Files\Content.IE5\QBDVU128\Install[1].exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Program Files\PC_Antispyware2010\PC_Antispyware2010.exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\Program Files\PC_Antispyware2010\Uninstall.exe
Fail to Clean [ Mal_FakeAV-9]( 1) from C:\WINDOWS\SYSTEM32\wisdstr.exe
95561 files have been read.
95561 files have been checked.
95530 files have been scanned.
248218 files have been scanned. (including files in archived)
9 files containing viruses.
Found 9 viruses totally.
Maybe 0 viruses totally.
Stop At: 8/7/2009 22:16:49 1 hour 25 minutes 57 seconds (5156.66 seconds) has elapsed.(53.962 msec/file)
---------*---------*---------*---------*---------*---------*---------*---------*
2009-08-07, 22:16:49, Running SSAPI scanner ""...
2009-08-07, 22:50:39, SSAPI Log:

SSAPI Scanner Version: 1.0.1003
SSAPI Engine Version: 5.2.1032
SSAPI Pattern Version: 8.09
SSAPI Anti-Rootkit Version: <Failed>

Spyware Scan Started: 08/07/2009 22:16:53

[sjpritch25]

Welcome to Malwarebytes!!!!

We need to see some additional information about what is happening in your machine.
Please perform the following scan:

• Download DDS by sUBs from one of the following links. Save it to your desktop.
  • DDS.scr
    
  • DDS.pif
• Double click on the DDS icon, allow it to run.
  
• A small box will open, with an explanation about the tool.
  
• When done, DDS will open two (2) logs
  1. DDS.txt
  2. Attach.txt
  
• Save both reports to your desktop.
  
• The instructions here ask you to attach the Attach.txt.
  
  
  
• Instead of attaching, please copy/past both logs into your next reply.
  
  
• Close the program window, and delete the program from your desktop.

Please note: You may have to disable any script protection running if the scan fails to run.
After downloading the tool, disconnect from the internet and disable all antivirus protection.
Run the scan, enable your A/V and reconnect to the internet.
Information on A/V control HERE