Unsolved

This post is more than 5 years old

5014

November 15th, 2010 11:00

Can you put Malwarebytes onto a USB?

If you can, can someone please tell me how, because I have the System tool 2011 thing on my laptop and it doesn't let my download it from the internet. I'd really be grateful if someone can help.

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 12:00

Do you have access to another (clean) PC so that you can download Malwarebytes Anti-Malware ?
alternate download link

  • * If you are unable to download or install MBAM on your computer, see if you can use a friend's or family member's computer to download MBAM. Use the update link mentioned below to manually update. Once downloaded, rename the program installer "mbam-setup.exe" file to something else like "manveer.exe". Copy the installer file and the update file to a CD or flash drive. Transfer the files to the infected computer. Install the "manveer.exe" file, then run the update so that you will have the current definitions.

     

    The update is here: http://data.mbamupdates.com/tools/mbam-rules.exe

November 15th, 2010 12:00

When I tried to open it on the infected computer, I got a message saying the system cannot find the path specified. Can you tell me what that means please?

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 13:00

Try downloading the following and running it before transferring MBAM:

Please download  Rkill and save it to your USB Stick to transfer it to the desktop of the infected computer.  If that does not work try this alternate Link

 

  • Double-click on the Rkill desktop icon to run the tool in order to automatically attempt to stop any processes associated with the Rogue programs.
  • If using Vista ore Windows 7, right-click on it and Run As Administrator.
Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that rkill is an infection, please ignore it, and run rkill.com again. This message is just a fake warning given by the malware when it terminates programs that may potentially remove it.
Therefore, please run rkill quite a few times until the malware is no longer running. You will then be able to proceed with the rest of the instructions below.


Do not reboot after running RKill or the malware will activate again and you will not be able to run MBAM.

November 15th, 2010 14:00

Oh, I've ran it on the infected comp, what do I do next? The Malwarebyte on my USB won't open on my infected computer.

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 14:00

You need to use a clean computer to download it.

can't find any documents for it
What type of documents are you looking for?

November 15th, 2010 14:00

I've ran RKill on the infected computer in safe mode, what do I do next?

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 15:00

Then you have not stopped the malware..

Try this: Please download exeHelper to your USB stick. Before you save it rename it to exehelper.com
Transfer to the infected machine. Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).

November 15th, 2010 15:00

It doesn't let me do it, System tool 2011 keeps showing balloons in which it says that RKill is infected and it doesn't let me dowland Malwarebytes.

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 15:00


Did you change the name of MBAM before or after trying to open it on the infected computer?  Try renraming MBAM when you save it to the USB stick. I cannot give you more specific  information because you have not provided any information about the system.

November 15th, 2010 15:00

Before I think

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 15:00

1. Please run rkill  a few times until the malware is no longer running. You will then be able to proceed with the rest of the instructions below.

Do not reboot your computer after running rkill as the malware programs will start again.

2. Now you should download Malwarebytes' Anti-Malware, or MBAM, from one of the following special locations and save it to your desktop:

Malwarebytes Anti-Malware
alternate download link 1
alternate download link 2


3. Once downloaded, close all programs and Windows on your computer, including this one.

4. Double-click on the icon on your desktop named mbam-setup.exe. This will start the installation of MBAM onto your computer.

5. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing and is at the last screen, make sure you uncheck both of the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware check boxes. Then click on the Finish button. If Malwarebytes' prompts you to reboot, please do not do so.

6. As this infection deletes a core executable of Malwarebytes' we will need to download a new copy of it and put it in the C:\program files\Malwarebytes' Anti-Malware\ folder. To download the file please click on the following link:
Malwarebytes Anti-Malware

When your browser prompts you where to save it to, please save it to the C:\program files\Malwarebytes' Anti-Malware\ folder. When downloading the file, it will have a random filename. Please leave the filename the way it is as it is important that it is not changed. You may want to write down the name of the file as you will need to know the name in the next step.

7. Once the file has been downloaded, open the C:\program files\Malwarebytes' Anti-Malware\ folder and double-click on the file you downloaded. MBAM will now start and you will be at the main program screen.

8. Before you can perform a scan, you must first update the program. To do this click on the Update tab, and that at the new screen click on the Check for Updates button. Malwarebytes' will now check for new updates and download and install them as necessary. When the update is completed, you will be prompted with a message stating either that you already have the latest updates or that they have been updated. Either way, you should now click on the OK button to continue.

9. Now click on the Scanner tab and make sure the the Perform full scan option is selected. Then click on the Scan button to start scanning your computer for Security Tool related files.

10. MBAM will now start scanning your computer for malware. This process can take quite a while, so we suggest you go and do something else and periodically check on the status of the scan.
When the scan is finished a message box will appear.

11. You should click on the OK button to close the message box and continue with the malware removal removal process.

12. You will now be back at the main Scanner screen. At this point you should click on the Show Results button.

13. A screen displaying all the malware that the program found will be shown.

14. When MBAM has finished removing the malware, it will open the scan log and display it in Notepad. Review the log as desired, and then close the Notepad window.

15. Please post that log in your next reply here.

16. You can now exit the MBAM program.

* Due to the fact that this infection deletes certain MalwareBytes' files, and we had to work around this, if you wish to continue using MalwareBytes' Anti-Malware, which we suggest you do, then you should uninstall and then install it again so that the files are created properly.

November 15th, 2010 15:00

Oh, I've downloaded Malwarebytes, I'm currently scanning it on my infected computer.

November 15th, 2010 15:00

oh thanks, I'll see if this works

3 Apprentice

 • 

20.5K Posts

November 15th, 2010 17:00

Did you get RKill to work, or did you have to use exehelper?

Please post the MBAM log when you are finished. I need to see what it removed.

3 Apprentice

 • 

20.5K Posts

November 19th, 2010 17:00

Due to the lack of feedback this topic is closed. If you need continued support, please begin a new thread, and provide a link to this topic. This applies only to the original topic starter. Other members who need assistance please start your own topic in a new thread. Thanks!

The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you.

No Events found!

Top