Jump to content

Malwarebytes

Cannot enable XP automatic updates after mbam removed infected

- - - - -

2 replies to this topic

#1
BostonDriver

    New Member

  • Members
  • Pip
  • 6 posts
I'm guessing that I am still infected.

After several mbam scans, removing all as they were found, I'm left with this:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) ->


A little history can be found in an earlier post in another forum asking about what was and was not possible with mbam.

I had malware, mbam.exe was deleted from my system. I could only run mbam.exe by copying from a different machine and calling it xx.exe and not mbam.exe. This found "enough" the first pass such that I could run re-install and run mbam.exe normally.

I re-ran mbam.exe until the only thing reported is UpdateDisableNotify. I remove this and it comes back each reboot.

I can enable automatic updates via control panel. They are disabled upon reboot.

Overnight, McAfee removed a "Artemis" Trojan. Another McAfee scan is in progress as I write this (from a different machine.) Each McAfee scan seems to find at least one Artemis.

Any ideas?

#2
Blade81

    Elite Member

  • Experts
  • PipPipPipPipPip
  • 1,229 posts
  • Gender:Male
  • Location:Finland
  • Interests:Floorball, football, music, computers..
Hi,

Download DDS and save it to your desktop from here or here or here.
Disable any script blocker, and then double click dds.scr to run the tool.
  • When done, DDS will open two (2) logs:
    • DDS.txt
    • Attach.txt
  • Save both reports to your desktop. Post them back to your topic.

Download GMER here by clicking download exe -button and then saving it your desktop:
  • Double-click .exe that you downloaded
  • Click rootkit-tab and then scan.
  • Don't check
    Show All
    box while scanning in progress!

  • When scanning is ready, click Copy.
  • This copies log to clipboard
  • Post log in your reply.

Microsoft MVP Consumer Security 2008 2009 2010 2011
ASAP & UNITE member since 2006
Posted Image Posted Image

#3
AdvancedSetup

    Forum Deity

  • Administrators
  • PipPipPipPipPipPip
  • 22,575 posts
  • Gender:Male
  • Location:US
Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.
Ron Lewis
Manager, Online Support

Posted Image

Follow us: Twitter, Become a fan: Facebook

If you've posted to the HJT forum and it has been over 5 days without a response please send a Private Message asking for assistance.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us