Jump to content

Unable to load the Anti-rootkit driver?


Recommended Posts

hello,

i have been using Malwarebytes Aint-malware 2.0 on 2 of my PCs and on both i get "Error: Malwarebytes was unable to load the Anti-Rootkit Driver. Error codeL 20025?

I am running windows 8.1 does that have something to do with this?

 

thanks

post-159164-0-75894800-1395686137_thumb.

Link to post
Share on other sites

  • Staff

Hi all. I would like to request a bit more information.

When does this message appear? During a scan attempt? During startup/logon of Windows? Or just when you try to enable the 'Scan for rootkits' setting?

Are you in an admin account, or a standard user account?

Was this an upgrade install to 2.0 from 1.75?

Had you previously run any of the 2.0 Beta builds?

Do you have self-protection enabled?

Link to post
Share on other sites

hello,

when i start up the program it happens and when doing a scan.

scan for rootkits is enabled.

i am using a admin account

i had 1.75 installed before and other versions of 2.0 but uninstalled all before the new update and it also happened with older versions of 2.0

self protection is not enabled 

Link to post
Share on other sites

  • Staff

Hi sean1992. Thanks for your answers.

I have one more question, is this Trial/Premium or Free?

Please do this.

Disable 'Scan for rootkits' and then exit MBAM via the notification area icon in your Windows 8 desktop.

Launch MBAM again.

You should not see the message. Correct?

I'll have more steps, but I want to go through this methodically.

Link to post
Share on other sites

  • Staff

Thanks. One more question. Have you recently run Malwarebytes Anti-Rootkit (MBAR)?

Next...Please download our diagnostic tool, mbam-check-2.1.0.0002.exe to your desktop from this link.

http://downloads.malwarebytes.org/file/mbam_check

Double-click it to run it. The log which opens will be saved to your desktop as CheckResults.txt. Please attach this log to your next reply.

Link to post
Share on other sites

I'm having this exact same problem on Windows 7 x64 using Threat Scan during the Pre-scan Operations portion.  The exact error message is 'Scanner Failed with Error Code: 20026'.  Then it says 'Error: Malwarebytes was unable to load the Anti-Rootkit Driver. Error Code:20026'.  It then asks if I want to continue to scan without looking for root-kits.  If I click Yes or No, it immediately fails and then says "SDK Scanning Error: 20026"

 

System config and things I've tried are below.  The only way I can get the error to go away is to disable the root-kit scanning option.

  • Running local admin
  • Disabled Avast! Free Edition
  • Rebooted
  • Not running any previous version of MalwareBytes
  • Enabled and disabled the self-protection module.
  • Premium license (Obtained via the lifetime one-time-purchase promotion)

 

Thanks,

Link to post
Share on other sites

  • Staff

@sean1992

Exit MBAM again from the notification area icon.

Open a command prompt. From your Windows 8 desktop you can press the Windows key + the X key, then press the C

In the command prompt, type the following then press Enter

sc query mbamswissarmy

Please report back what it says.

Link to post
Share on other sites

  • Staff

I'm having this exact same problem on Windows 7 x64 using Threat Scan during the Pre-scan Operations portion.  The exact error message is 'Scanner Failed with Error Code: 20026'.  Then it says 'Error: Malwarebytes was unable to load the Anti-Rootkit Driver. Error Code:20026'.  It then asks if I want to continue to scan without looking for root-kits.  If I click Yes or No, it immediately fails and then says "SDK Scanning Error: 20026"

 

System config and things I've tried are below.  The only way I can get the error to go away is to disable the root-kit scanning option.

  • Running local admin
  • Disabled Avast! Free Edition
  • Rebooted
  • Not running any previous version of MalwareBytes
  • Enabled and disabled the self-protection module.
  • Premium license (Obtained via the lifetime one-time-purchase promotion)
Thanks,

SizroSpunkmire can you please also download and run mbam-check as detailed in my post #8?

Attach the log it produces.

Link to post
Share on other sites

  • Staff

Attached.  One correction to my previous post is that I did have a previous version of MBAM installed.  Not sure which version but I know it wasn't the 2.0 Beta.

Thanks,SizroSpunkmire.

Are you using any type of drive encryption by any chance? Running drives as a RAID setup?

Uncheck 'Enable self-protection module'. Uncheck 'Scan for Rootkits'.

Uncheck 'Start Malwarebytes Anti-Malware with Windows'

Exit MBAM via the notification area icon.

Reboot the system.

Launch MBAM and run a normal Threat Scan.

Any issues?

Link to post
Share on other sites

Hi all. I would like to request a bit more information.

When does this message appear? During a scan attempt? During startup/logon of Windows? Or just when you try to enable the 'Scan for rootkits' setting?

Are you in an admin account, or a standard user account?

Was this an upgrade install to 2.0 from 1.75?

Had you previously run any of the 2.0 Beta builds?

Do you have self-protection enabled?

It happens when i run a "Threat Scan" after having turned on Scan for Root Kit in Detection and Protection menu.

 

Info:

  • Windows 8.1 Pro, fresh install as of 4 days ago.
  • Eset Smart Security 7
  • Premium activated license of MBAM
  • Running as a standard user
  • Drives encrypted with Microsoft Bitlocker
  • I removed the previous version of MBAM, restarted and then installed MBAM 2.0
  • I hadn't run any beta builds
  • Self protection is unchecked
Link to post
Share on other sites

  • Staff

i ran command on cmd 'sc query mbamswissarmy'

 

[sC] EnumQueryServicesStatus:OpenService FAILED 1060:

 

The specified service does not exist as an installed service.

OK good. That's as expected.

I would ask these same questions of you as well:

Are you using any type of drive encryption by any chance? Running drives as a RAID setup?

I'd like you to try a new Threat Scan with rootkit scanning enabled.

Let me know if the issue persists.

Link to post
Share on other sites

Thanks,SizroSpunkmire.

Are you using any type of drive encryption by any chance? Running drives as a RAID setup?

Uncheck 'Enable self-protection module'. Uncheck 'Scan for Rootkits'.

Uncheck 'Start Malwarebytes Anti-Malware with Windows'

Exit MBAM via the notification area icon.

Reboot the system.

Launch MBAM and run a normal Threat Scan.

Any issues?

 

Yes I'm running BitLocker.  No I'm not running in any RAID configuration.

 

I was able to launch a Threat Scan without error after doing the steps you suggested in this quoted reply.

Link to post
Share on other sites

  • Staff

It happens when i run a "Threat Scan" after having turned on Scan for Root Kit in Detection and Protection menu.

 

Info:

  • Windows 8.1 Pro, fresh install as of 4 days ago.
  • Eset Smart Security 7
  • Premium activated license of MBAM
  • Running as a standard user
  • Drives encrypted with Microsoft Bitlocker
  • I removed the previous version of MBAM, restarted and then installed MBAM 2.0
  • I hadn't run any beta builds
  • Self protection is unchecked

Thanks, jackbrennan2008.

Does the issue occur if you run from an Admin account? I suspect this will not change anything.

To all:

MBAR does not support Bitlocker encrypted drives, nor does MBAM 2.0 when rootkit scanning is enabled.

Link to post
Share on other sites

  • Staff

no i have no drive encrypted or no raid setups, when you click scan it checks for a update before the scan and after the update it gets the problem but if i skip the update i get no error?

That's interesting. I'm inclined to have you perform a clean uninstall and reinstall so that none of the program's data files or registry entries are left behind. First, I'd like to run a different diagnostic tool to see what else is running on the system.

Please download Farbar Recovery Scan Tool and save it to your desktop.

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/?rha=1

Note: You need the 64bit version:

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/

Double-click on FRST to run it.

When the tool opens click Yes to disclaimer.

Press Scan button.

It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.

The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Link to post
Share on other sites

  • Staff

These instructions are for sean1992 only!

Let's perform a clean uninstall and reinstall. If using the PRO version, be sure to have your ID and Key handy.

• Download and run "mbam-clean.exe" from here: http://downloads.malwarebytes.org/file/mbam_clean

• It will ask to restart your computer, please allow it to do so (this is very important)

Then reinstall the latest version of Malwarebytes Anti-Malware via the link below(all downloads and set up files are the Free version, registration with your ID & key activate the Pro features)

https://www.malwarebytes.org/getmbam

Save the file to your desktop then double-click it to begin installation. If you're using the PRO version you will need to re-register.

After installation, try to update and run a rootkit scan.

Let us know if this corrects the problem you're experiencing.

Note:

My day is done. I'll return to check on your progress and this topic tomorrow.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.