Start up and OS is acting up.

At this point I dont think the problem with malwarebytes is malware related.

Your AV: RemoveIT Pro v4. You only need one resident AV running on your machine, you have MS Security Essentials which is a antivirus app. as well as a anti-malware. Need only one AV, but you can have more than one anti-malware app.

From MSSE website:

Before installing Microsoft Security Essentials, we recommend that you uninstall other antivirus software already running on your PC. Running more than one antivirus program at the same time can potentially cause conflicts that affect PC performance.
Click to expand...
source

Iam pressed for time today. I will post back for something else you can try to get MBAM going.
 
shelf life said:
At this point I dont think the problem with malwarebytes is malware related.

Your AV: RemoveIT Pro v4. You only need one resident AV running on your machine, you have MS Security Essentials which is a antivirus app. as well as a anti-malware. Need only one AV, but you can have more than one anti-malware app.

From MSSE website:

source

Iam pressed for time today. I will post back for something else you can try to get MBAM going.
Click to expand...

Right I'm sticking with just one antivirus namely the microsoft SE.
I did some looking and I found a copy of hijackthis that I cannot rename or delete.


Regards, Louis
 
you can try this, then its probably time to head over to the malwarebytes forum if this dosnt fix the problem.
We will use a cmd prompt to cd in the malwarebytes directory. To get a cmd prompt you would go to start and click Run then type in cmd and click ok or enter.

Everything else will be done in the shell window. I made two screen shots.
You have to do it once, reboot then do it again. You get to the malwarebytes directory the same way each time, the only difference is what you type last as you will see in the screenshots.
Marked in red is what you will have to type in. After you type in a line hit enter.
If you make a mistake just close the windows and retype cmd again and start over or you can use the backspace key to erase previous letters.
Follow cmd1 first then cmd2. Post back if you have questions.

this goes in the last line the first time, you could copy/paste it in (note the space after32 and before the /)

Regsvr32 /u vbalsgrid6.ocx

this goes in the last line after the reboot, notice theres no /u switch
Regsvr32 vbalsgrid6.ocx
 
shelf life said:
you can try this, then its probably time to head over to the malwarebytes forum if this dosnt fix the problem.
We will use a cmd prompt to cd in the malwarebytes directory. To get a cmd prompt you would go to start and click Run then type in cmd and click ok or enter.

Everything else will be done in the shell window. I made two screen shots.
You have to do it once, reboot then do it again. You get to the malwarebytes directory the same way each time, the only difference is what you type last as you will see in the screenshots.
Marked in red is what you will have to type in. After you type in a line hit enter.
If you make a mistake just close the windows and retype cmd again and start over or you can use the backspace key to erase previous letters.
Follow cmd1 first then cmd2. Post back if you have questions.

this goes in the last line the first time, you could copy/paste it in (note the space after32 and before the /)

Regsvr32 /u vbalsgrid6.ocx

this goes in the last line after the reboot, notice theres no /u switch
Regsvr32 vbalsgrid6.ocx
Click to expand...

I tried to get this to work but it didn't intially.
I had to go to the win32 directory and noticed that the Regsvr32 was still missing.
I checked the entire drive to see if it had been relocated as you suggested in a previous post. As I did not find it I picked up another copy of the program from a friends computer which was runing the same OS Ver I had and replaced my missing copy.

As a side note I noticed that the Regsvr32a program had similar but limited/fewer switch commands when compared to the Regsvr32 orginal.:confused:

I'm ready for the next step.
 
ok good. This regserv32a, I dont know why it has a letter a on the end of it. The copy you uploaded checked out ok. The one in combofix's quarantine folder is there for a reason, or it wouldnt have been quarantined.
Why dont you do a online scan for another opinion as far as virus and malware go: I assume re-registering the .ocx didnt help as far as running malwarebytes.

ESET online scanner:

http://www.eset.com/onlinescan/

Use Internet Explorer
check "YES" to accept terms
click start button
allow the ActiveX component to install
click the start button. the Scanner will update.
check both "Remove found threats" and "Scan archives" Leave the defaults checked under Advanced settings
click scan. When it completes click "List found threats"
click "Export to text file.." and save it to your desktop. Post the saved log.
Click "back" and "finish"
 
shelf life said:
ok good. This regserv32a, I dont know why it has a letter a on the end of it. The copy you uploaded checked out ok. The one in combofix's quarantine folder is there for a reason, or it wouldnt have been quarantined.
Why dont you do a online scan for another opinion as far as virus and malware go: I assume re-registering the .ocx didnt help as far as running malwarebytes.

ESET online scanner:

http://www.eset.com/onlinescan/

Use Internet Explorer
check "YES" to accept terms
click start button
allow the ActiveX component to install
click the start button. the Scanner will update.
check both "Remove found threats" and "Scan archives" Leave the defaults checked under Advanced settings
click scan. When it completes click "List found threats"
click "Export to text file.." and save it to your desktop. Post the saved log.
Click "back" and "finish"
Click to expand...


Hi Shelf Life.

Terribly sorry, I have good news.
Malwarebytes installed and ran FINE.

It identified and quarantined a
"Heuristics.Reserved.Word.Exploit"
in a hidden file located in :

c:\documents and settings\Bobo\mydocuments\downloads\Svchost.exe

Unfortunetly now I'm getting 403
"website requires you to log in"
issues from my online community website.
ie: www.ahpkicksass.com.

Other than that the IE behavior looks ok. if not improved and HJT seems to be working fine now as well.

I suspect it may be related to the word exploit being removed.

I am presently up loading the latest security updates for Ms Office 2000 to close down any other known exploits.

Things are looking up :)

Mbam Log to follow shortly if unless I hear otherwise from you.

Regards Louis
 
shelf life said:
ok good. This regserv32a, I dont know why it has a letter a on the end of it. The copy you uploaded checked out ok. The one in combofix's quarantine folder is there for a reason, or it wouldnt have been quarantined.
Why dont you do a online scan for another opinion as far as virus and malware go: I assume re-registering the .ocx didnt help as far as running malwarebytes.

ESET online scanner:

http://www.eset.com/onlinescan/

Use Internet Explorer
check "YES" to accept terms
click start button
allow the ActiveX component to install
click the start button. the Scanner will update.
check both "Remove found threats" and "Scan archives" Leave the defaults checked under Advanced settings
click scan. When it completes click "List found threats"
click "Export to text file.." and save it to your desktop. Post the saved log.
Click "back" and "finish"
Click to expand...

Here is the Mbam log and I will post the scan from the above instructions shortly.

Regards, Louis
 
shelf life said:
ok good. This regserv32a, I dont know why it has a letter a on the end of it. The copy you uploaded checked out ok. The one in combofix's quarantine folder is there for a reason, or it wouldnt have been quarantined.
Why dont you do a online scan for another opinion as far as virus and malware go: I assume re-registering the .ocx didnt help as far as running malwarebytes.

ESET online scanner:

http://www.eset.com/onlinescan/

Use Internet Explorer
check "YES" to accept terms
click start button
allow the ActiveX component to install
click the start button. the Scanner will update.
check both "Remove found threats" and "Scan archives" Leave the defaults checked under Advanced settings
click scan. When it completes click "List found threats"
click "Export to text file.." and save it to your desktop. Post the saved log.
Click "back" and "finish"
Click to expand...

Hi Shelf Life
I followed the instructions as noted above and it the scan found one more problem. I missed the export to text file option.

I re ran the the scan a second time but I found nothing and there were no options to download a text file.

Thank you Shelf Life you saved us a lot of headaches on this side.

Regards, Louis
 
hi,

Looks good, and your welcome. Now that you can get to internet options, go ahead and set IE back to its defaults. Tools>Internet Options>advanced tab> Reset.
 
hi,

You can remove combofix like this: start>run and type in combofix /u
click ok or enter, note the space after the x and before the /

Note that the free version of Malwarbytes must be updated manually and a scan started manually. Its good practice to check for updates on a regular basis even if you dont do a scan with it at that time.

if all is good, some tips to help you remain malware free:

10 Tips for Prevention and Avoidance of Malware:
There is no reason why your computer can not stay malware free.

No software can think for you. Help yourself. In no special order:

1) It is essential to keep your operating system (Windows) browser (IE, FireFox, Chrome, Opera) and other software up to date to "patch" vulnerabilities that could be exploited. Visit Windows Update frequently or use the Windows auto-update feature. Staying updated is also essential for web based applications, browser plugins and addons like Java, Adobe Flash/Reader, iTunes etc. More and more third party applications are being targeted. Use the auto-update features available in most software. Not sure if you are using the latest version of software? Check their version status and get the updates here.

2) Know what you are installing to your computer. Alot of software can come bundled with unwanted add-ons, like adware, toolbars and malware. More and more legitimate software is installing useless toolbars if not unchecked first. Do not install any files from ads, popups or random links. Do not fall for fake warnings about virus and trojans being found on your computer and you are then prompted to install software to remedy this. See also the signs that you may have malware on your computer.

3) Install and keep updated: one antivirus and two or three anti-malware applications. If not kept updated then they will soon be worthless. If either of these frequently find malware then its time to *review your computer habits*.

4) Refrain from clicking on links or attachments via E-Mail, IM, IRC, Chat Rooms, Blogs or Social Networking Sites, no matter how tempting or legitimate the message may seem. Do you trust the source? See also E-mail phishing Tricks.

5) Do not click on ads/pop ups or offers from websites requesting that you need to install software to your computer--*for any reason*. Use the Alt+F4 keys to close the window.

6) Don't click on offers to "scan" your computer. Install ActiveX Objects with care. Do you trust the website to install components?

7) Consider the use of limited (non-privileged) accounts for everyday use, rather than administrator accounts. Limited accounts can help prevent *malware from installing and lessen its potential impact.* This is exactly what User Account Control (UAC) in Windows Vista and Windows 7 attempts to address.

8) Install and understand the *limitations* of a software firewall.

9) The why and how for securing your browser for safer surfing.

10) Warez, cracks, keygens and p2p are very popular for carrying malware payloads. A file can be named anything, be nothing but malware or have malware bundled in it. Do you really trust the source of the file?


More info/tips with pictures, links below

Happy Safe Surfing.
 
shelf life said:
hi,

You can remove combofix like this: start>run and type in combofix /u
click ok or enter, note the space after the x and before the /

Note that the free version of Malwarbytes must be updated manually and a scan started manually. Its good practice to check for updates on a regular basis even if you dont do a scan with it at that time.

if all is good, some tips to help you remain malware free:

10 Tips for Prevention and Avoidance of Malware:
There is no reason why your computer can not stay malware free.

No software can think for you. Help yourself. In no special order:

1) It is essential to keep your operating system (Windows) browser (IE, FireFox, Chrome, Opera) and other software up to date to "patch" vulnerabilities that could be exploited. Visit Windows Update frequently or use the Windows auto-update feature. Staying updated is also essential for web based applications, browser plugins and addons like Java, Adobe Flash/Reader, iTunes etc. More and more third party applications are being targeted. Use the auto-update features available in most software. Not sure if you are using the latest version of software? Check their version status and get the updates here.

2) Know what you are installing to your computer. Alot of software can come bundled with unwanted add-ons, like adware, toolbars and malware. More and more legitimate software is installing useless toolbars if not unchecked first. Do not install any files from ads, popups or random links. Do not fall for fake warnings about virus and trojans being found on your computer and you are then prompted to install software to remedy this. See also the signs that you may have malware on your computer.

3) Install and keep updated: one antivirus and two or three anti-malware applications. If not kept updated then they will soon be worthless. If either of these frequently find malware then its time to *review your computer habits*.

4) Refrain from clicking on links or attachments via E-Mail, IM, IRC, Chat Rooms, Blogs or Social Networking Sites, no matter how tempting or legitimate the message may seem. Do you trust the source? See also E-mail phishing Tricks.

5) Do not click on ads/pop ups or offers from websites requesting that you need to install software to your computer--*for any reason*. Use the Alt+F4 keys to close the window.

6) Don't click on offers to "scan" your computer. Install ActiveX Objects with care. Do you trust the website to install components?

7) Consider the use of limited (non-privileged) accounts for everyday use, rather than administrator accounts. Limited accounts can help prevent *malware from installing and lessen its potential impact.* This is exactly what User Account Control (UAC) in Windows Vista and Windows 7 attempts to address.

8) Install and understand the *limitations* of a software firewall.

9) The why and how for securing your browser for safer surfing.

10) Warez, cracks, keygens and p2p are very popular for carrying malware payloads. A file can be named anything, be nothing but malware or have malware bundled in it. Do you really trust the source of the file?


More info/tips with pictures, links below

Happy Safe Surfing.
Click to expand...

Shelf Life again a hearty thank you. I am going to give these sugguestions to the Roomies and the wife and hopefully we will avoid any future issues.

If there is ever anything I can do to help please let me know.

Regards, Louis
 
You must log in or register to reply here.
Back
Top