What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Can not run Malwarebytes and Hijackthis

9 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi I notices few pop-ups on PC and know that I have some sort of malware on my pc. I can not even open my Firefox browser, so I am using IE 7 When I try to run Malwarebytes, it opens for few secounds and auto closes it. Also, Hijackthis does not open either and thats why I can not post any logs?
Post #2
Can you try running DDS? See if it works …

Download and run DDS

We need to see some information about what is happening in your machine. Please perform the following scan:
  • Download DDS by sUBs from one of the following links. Save it to your desktop.
    • DDS.pif
    • DDS.scr
  • Double click on the DDS icon, allow it to run.
  • A small box will open, with an explanation about the tool. No input is needed, the scan is running.
  • Notepad will open with the results soon.
  • Follow the instructions that pop up for posting the results and then click Ok.
  • The black and message box window shall then disappear.
  • Please save both log files on your desktop and post the DDS.txt and zip up and attach Attach.txt as instructed.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE
Post #3
yes, I was able to run DDS. attached are logs. Before your post, I downloaded the Spybot Search & destroy from download.com and fix few problems using that program. and I was able run MABM… My firefox closed automatiacally after 2 to 5 mins in use. Whenever, I press Ctrl + V to paste into search box of yahoo or google.com and closes. but everything is normal. with my PC

Attachments:

Post #4
Can you try RootRepeal and see if it runs…

Download and run RootRepeal CR

Please download RootRepeal from the following location and save it to your desktop.


  • Unzip the RootRepeal.zip file it to it's own folder. (If you did not use the "Direct Download" mirror to download RootRepeal).
  • Close/Disable all other programs especially your security programs (anti-spyware, anti-virus, and firewall) Refer to this page, if you are unsure how.
  • Physically disconnect your machine from the internet as your system will be unprotected.
  • Double-click on RootRepeal.exe to run it. If you are using Vista, please right-click and run as Administrator…
  • Click the [external image: Posted Image] tab at the bottom.
  • Now press the [external image: Posted Image] button.
  • A box will pop up, check the boxes beside All Seven options/scan area
    🖼Click to load external image (Posted Image)
  • Now click OK.
  • Another box will open, check the boxes beside all the drives, eg : C:\, then click OK.
  • The scan will take a little while to run, so let it go unhindered.
  • Once it is done, click the Save Report button. [external image: Posted Image]
  • Save it as RepealScan and save it to your desktop
  • Reconnect to the internet.
  • Post the contents of that log in your reply please.
Post #6
We need to create an OTL Report
  • Please download OTL from one of the following mirrors:
    • This is THE Mirror
  • Save it to your desktop.
  • Double click on the [external image: Posted Image] icon on your desktop.
  • Click the "Scan All Users" checkbox.
  • Under "Extra Registry" please check "Use Safelist" and also check "LOP Check" and "Purity Check" as pictured.[external image: Posted Image]
  • Copy and Paste the following code into the [external image: Posted Image] textbox. Do not include the word "Code"

    netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%ALLUSERSPROFILE%\Application Data\*.
%ALLUSERSPROFILE%\Application Data\*.exe /s
%APPDATA%\*.
%APPDATA%\*.exe /s
%SYSTEMDRIVE%\*.exe
/md5start
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
sceclt.dll
ntelogon.dll
logevent.dll
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\*. /mp /s
%systemroot%\system32\*.dll /lockedfiles
CREATERESTOREPOINT
  • Push [external image: Posted Image]
  • A report will open. Copy and Paste that report in your next reply.
  • Two reports will open, copy and paste them in a reply here:
    • OTListIt.txt <– Will be opened
    • Extra.txt <– Will be minimized
Post #9
Hello.

Sorry about the previous post above. I was looking at another topic and posted to this topic by mistake. Let's continue here…

I see a flash-drive infection. Please do the following.

Download and Run FlashDisinfector

  • Please download Flash_Disinfector.exe by sUBs and save it to your desktop.
  • Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
  • The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
  • Wait until it has finished scanning and then exit the program.
  • Reboot your computer when done.
Note: Flash_Disinfector will create a hidden file named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder. It will help protect your drives from future infection.

Download and Run Combofix

Please visit this webpage for instructions for downloading and running ComboFix:

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

* Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Refer to this page on instructions on doing so.

Please include the C:\ComboFix.txt in your next reply for further review.

Take out your Removable drives now and post the Combofix log in your next reply.
Post #10 last edited
i was unable to disable symantic endpoint protection, but still ran combofix. still can't run MABM Still can't install Hijacthis/ Also, I can open Windows Firewall window to enable windows Firewall.

Attachments:

Post #11

Also, I can open Windows Firewall window to enable windows Firewall.

You CAN or you CAN'T ?

still can't run MABM
Still can't install Hijacthis/

What exaclty happens when you try installing/running them?

Run OTL again and post the log so we can deal with the rest.
Post #12 last edited
I have MABM installed already. It opens for about 2–3 secounds and auto closes it. I dont have Hijackthis installed, so it does the same thing with installtion window. (auto-closes) I dont have any pop-ups. but ONLY sometimes my yahoo, google, search results go to random sites. Whenever, I press Ctrl + V into search box at yahoo.com, while running Firefox, it auto-crashes firefox. Also my speakers are not working….its says "There are no active mixers device avaiable…..To install mixeer……"

Attachments:

Post #14
Hello again,

Does the issue also happen in Safe Mode with Network? Please try that for me.

How to Boot into Safe Mode

I suggest you read over the instructions on how to boot into Safe Mode and then print these instructions out or save them in Notepad because you won't have access to this page while in Safe Mode.

Start in Safe Mode Using the F8 method:
  • Restart the computer.
  • As soon as the BIOS is loaded begin tapping the F8 key until the boot menu appears.
  • Use your arrow keys to navigate and highlight Safe Mode with Networking.
  • Hit Enter.
  • You will now be asked to choose your operating system. Again, use the arrow keys to select Microsoft Windows XP.
  • Hit Enter.
Your computer will proceed to booting into Safe Mode. During the boot process, you may see random code go past your screen. Simply wait for it to pass. Your computer should boot like usually, except with Safe Mode written in the corners of your screen. Your screen may also appear to be a different size because the video drivers are not loaded properly in Safe Mode.

After the boot, you will be asked whether you wish to use system restore, or to continue to Safe Mode. Select OK to choose Safe mode.

Additional instructions on booting into Safe Mode can be found here
Post #15
I tried, but same problem. When I rebooted the PC after using in Safe Mode. My windows bar at the bottom of the window, where is says "Start" is no longer in windows XP style. Its look likes windows 98.

Attachments:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI