Spyware, viruses, & security forum: Malwarebytes wont open

Thank you so much that did the trick! Im about to perform a scan now

Hi carol! I installed the program after i realized i had an infection on my computer. & i did as you said & re-named the file & im happy to say that it works now!... This might be a dumb question but I'm kinda clueless when it comes to computers so try to bear with me lol should I switch my computer to safe mode to run the scan or should i just run it in regular mode? Does it make a difference?

Hi Carol! Sorry I took so long to reply I babysat 3 toddlers today so I've been running around like crazy lol.

What you said is very true, I never thought about that lol. And without asking you will never learn!

I ran the MBAM scan & it found 1 trojen today. My computer has been acting strange for almost a month now & for whatever reason I was able to scan my pc using MBAM a few times in the past & it worked fine it just started messing up recently but thats a non-issue anymore since i kno how to fix it now by renaming the file but anyway im getting off topic sorry lol... In my previous MBAM scans (including todays) it picked up 14 trojen viruses but I still suspect I have more that arent coming up because my computer is still acting funny. What should I do?

Thanks

Heres my MBAM logs

Malwarebytes' Anti-Malware 1.38
Database version: 2297
Windows 5.1.2600 Service Pack 3

7/3/2009 6:38:29 PM
mbam-log-2009-07-03 (18-38-28).txt

Scan type: Full Scan (C:\|D:\|E:\|G:\|)
Objects scanned: 242373
Time elapsed: 46 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 3
Registry Data Items Infected: 6
Folders Infected: 3
Files Infected: 5

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windowsupdates (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\windowsupdates (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\wmp (Rootkit.ADS) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0acf9fb5-f486-4567-9c18-ec68f1bf18ce}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{0acf9fb5-f486-4567-9c18-ec68f1bf18ce}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Tcpip\Parameters\Interfaces\{0acf9fb5-f486-4567-9c18-ec68f1bf18ce}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.138,85.255.112.9 -> Quarantined and deleted successfully.

Folders Infected:
c:\documents and settings\CHRISTINA\Application Data\pidle (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\skype32 (Backdoor.Bot) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\lowsec (Stolen.data) -> Quarantined and deleted successfully.

Files Infected:
c:\WINDOWS\system\Update.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\system32:ntsdexts.exe (Rootkit.ADS) -> Quarantined and deleted successfully.
c:\WINDOWS\Tasks\{5B57CF47-0BFA-43c6-ACF9-3B3653DCADBA}.job (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\documents and settings\Christine\Local Settings\Temp\DigitalHQ.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\MSIVXcount (Trojan.Agent) -> Delete on reboot.





Malwarebytes' Anti-Malware 1.39
Database version: 2421
Windows 5.1.2600 Service Pack 3

7/31/2009 11:44:23 PM
mbam-log-2009-07-31 (23-44-23).txt

Scan type: Full Scan (C:\|D:\|E:\|G:\|)
Objects scanned: 243042
Time elapsed: 43 minute(s), 14 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\MSIVXcount (Trojan.Agent) -> Delete on reboot.

carol-
Thank you for all of your help & time. I just updated MBAM & I'm going to run the scans now.

Rename it in the same way you did MBAM. How about renaming it jay.exe ( ) this time?

If you run into any further problems, please don't hesitate to let us know.

Carol