Techy Help AGAIN!!!! Please. This time it's Malware Bytes.

[SOD'EM]

Hi all, It's me again8)

 

 

I have used Malware Bytes for a while now and had no problems. But since I installed Tune Up Utilities (which I think is brilliant), and freed up disk space and basically gave my laptop an overhaul, Malware Bytes will no longer work. Here is the message that I get when I try to start it up.

 

C:\Windows\System32\MSVBVM60.DLL is either not designed to

run on Windows or it contains an error. Try installing the program

again using the original installation media or contact your system

administrator or the software vendor for support.

 

Since using Tune Up Utilities my internet connection icon has a red cross through it on my task bar and says:

 

Connection status: Unknown

Access is denied

 

My internet seems to be working fine though. (I'm thinking both problems may just be a processor saving thing by Tune Up Utilities to help my system run faster). I used the option "make windows run faster by fixing certain processors to a more basic level so as to not use up so much of your CPU" (or something like that). It actually changed my desktop background and appearance to the most basic level. After all this, I do have a lot more disk space and my laptop is running considerably faster than it was before. I just can't get my head around the Malware Bytes thingy. I have uninstalled the program and re-installed a new version, still the same problem as above.

 

 

Any help greatly appreciated.

 

SOD'EM

 

 

 

I have got a feeling that Tune UP Utilities has changed how my system works or something:confused:

[ukaviator]

Have you tried this version?

 

Malwarebytes.org

[SOD'EM]

I will try that now UK.

 

I've just tried to open a PDF file and I have had the same message, this time it is for Adobe Reader. This has definitely been caused by either a virus or Tune Up Utilities:mad:

[SOD'EM]

Same problem with that version UK.

 

 

It's giving me the message before it's even fully installed.

[dx100uk]

its an over hang from the vituk [sic] virus

download a reg cleaner [CCleaner under tools is good]

install it

 

reboot in safe mode navigate to the .dll file and delete it.

 

run ccleaner tools regcleaner.

 

reboot normally

 

then you could either download a new copy of the .dll or reinstall the app that needs it.

 

as for the network connection/red x

sure thats not a second port? not your main ethernet port?

 

dx

[SOD'EM]

Thanks dx,

 

How do I navigate to the .dll file?

 

ps I already have CCleaner installed on my system.

 

Thanks

[dx100uk]

windows explorer

tools

folder options

view

hit tit show hidden files

untick hide known ext file types

untick hide protected sys files

apply

ok

 

then drill through the folder sturcture of local disk

till you find

 

C:\Windows\System32\MSVBV M60.DLL

 

right click

delete it.

 

 

you must do this in safe mode

 

then run cleaner/tools/ reg cleaner thingy.

 

then reboot

out of safemode

 

dx

[SOD'EM]

Found it, wouldn't let me delete.

Turned User Account Control off, wouldn't let me delete.

Tried to erase beyond recovery (Cyber Scrub), got the same message as Malware Bytes.

Finally got rid by using Tune Up Utilities shredder.

Used Ccleaner Reg cleaner in safe mode (MSVBVM60.dll was one of the files to be cleaned).

I am about to reinstall Malware Bytes, will let you know how I got on.

 

Thanks dx

[SOD'EM]

Hi dx,

 

how can I re-install MSVBV69.dll application? I've deleted it:confused:

[dx100uk]

its not an application

its most prob an over hanger from an old virus.

 

if an app does need it , then it will tell you so or just not run.

all you need to do them is to re-install the app that requests it

it will be in the setup routine of that apps install prog.

 

if the PC doesn't scream it wants it or everything is going ok

 

foget about it.

 

else post ERR msg here

 

dx

[SOD'EM]

This is really winding me up now:mad:

 

I completely removed any trace of Malware Bytes and deleted C:\Windows\System32\MSVBV60.DLL. Then I tried to re-install Malware Bytes and just as it's nearly completed, it says:

 

This application has failed to start because MSVBV60.DLL was not found. Re-installing the application may fix this problem.

 

Also i briefly got my internet icon back to normal after restarting before (had the blue disc on it and everything:p). But that has just gone again after restarting yet again. I really want Malware Bytes as I feel that there is a virus of some sort giving me these problems. Have blasted 2 Trojans this morning with Avast but I usually follow up with a Malware Bytes scan also.

 

It seems that the MSVBVM60 was an application/application extension after all. Even though it's size was 0kb:confused:. Any other suggestions will be really appreciated.

 

SOD'EM:mad:

[dx100uk]

turn off system restore and ok the deletion of any held restore points

use CCleaner to remove traces of mal/bytes

empty recycle bin

download combofix to a penstick

reboot in safe mode

disable any anti virus

run combofix from penstick.

 

reboot to normal

 

go up to the housecall site and run the online scanner

 

report back

 

dx

[SOD'EM]

No restore points are held on my system dx? I used Ccleaner to get rid of M/Bytes anyway. Do I have to download combofix onto my computer before putting it on penstick. Or can I just download directly to the pen drive?

[dx100uk]

direct to penstick from their site or majorgeeks tec etc.

dx

[SOD'EM]

Does it make any difference if I already have ComboFix on my laptop?

 

I've had it for ages.

[dx100uk]

probably

it often changed

 

use the newone

 

dx

[SOD'EM]

Well, I can't say I never tried. It's really Knackered now. Got the new version of CombiFix and let it rip in safe mode. As it was scanning it kept saying that some areas cannot be done because you need to give an administrators command prompt to complete:confused:. I am the only user of this laptop so I am the administrator. Anyway, I let it do it's thing and wanted to see the results. However, I can't open Notepad as it is saying that Notepad.exe is not a Win32 application:mad:. How many other programs are the same I don't know. This is one beauty of a virus. I thought myself as being ok at this type of stuff. Obviously not.

 

 

The worst thing about all this is my Firewall was turned off and It won't give access to turn it back on again, it's just saying access denied when I click on "Turn On Now". This could prove very expensive.

 

I can't even turn my user account control back on.:mad::mad:

[dx100uk]

ok you need to try and get this up on housecall and scan the PC

 

you have one of the many virus that renames loads of things to .exe as it eats it way through.

 

there are removal tools here:

Browse Free Removal Tools

 

you just need to find out what version you have .

 

xsoftspyse is a good general remover , but your trouble is now that anything you install and run will get infected itself

 

housecall is your best bet

 

had this with the nippers PC a few weeks ago, took a good while to get rid of it.

 

sadly you have introduced it yourself by running an attachment from an email [even a picture - cause if you have hide known extensions turned off - you will not have seen the file is really called picture.jpg.exe ....get the idea.?] or downloading something that was infected.

 

now IF you could find where you went & what you did you should be able to find out what the pc is infected with that way, then run the removal tool.

 

all is not lost, but it just might take a while,

 

housecall might be your best bet.

 

dx

[SOD'EM]

A quick update folks, and thank you all for helping.

 

I have managed (wioth help) to re-install MSVBM60DLL file to system 32 folder. Then (after 1,000,000 attempts) managed to install malware bytes. Done a full scan and there were 16 infected files (14 were registry keys). I deleted all found and then went to view the log file. Then I got this message:-

 

C:\users\myname\appdata\roaming\malwarebytes\malwarebytes'anti-malware\logs\mbam-log-2009-10-01(09-37-41).txt is not a valid win32 application.

 

I then tried to open notepad and that doesn't work. It has obviously destroyed some of my applications. I guess I will just have to remove and replace them as I come across them.

 

I have managed to get my internet icon back to normal and the machine is working slightly faster. I can now use user account control as normal (I could only get to it in safe mode before). So I think I am on the right tracks to a normal computer.

 

Is it possible that the laptop is now virus free but the apps that won't work were irreparably damaged so need replacing?

 

Thanks again all

[dx100uk]

sorry been at a remote transmitter site all day on this freeview switchover.

 

what has happened, is the virus renames extensions on certain files

notepad being one of them

in theory, all you do is put them back to the correct name.

 

some however do get corrupted because the virus uses them.

 

suck it and see,.

 

dx

[locutus]

Try this:-

 

Insert the Windows Setup Disc into your computer

Click Start, select Run

Type in: sfc /scannow and click OK

Follow the instructions on the screen.

[SOD'EM]

Try this:-

 

Insert the Windows Setup Disc into your computer

Click Start, select Run

Type in: sfc /scannow and click OK

Follow the instructions on the screen.

 

I have tried this Locotus, when I pressed OK the scan screen flashed up for about 0.5 seconds and then disappeared. I also tried this in safe mode and got the same result. I also uninstalled notepad because it didn't work. I then downloaded a new version and double clicked to install and got this message:-

 

The Windows installer service could not be accessed. This can occur if the Windows installer is not correctly installed. Contact your support personnel for assistance.

 

 

I think this all started when I stupidly clicked on a link that was in an email.

[SOD'EM]

sorry been at a remote transmitter site all day on this freeview switchover.

 

what has happened, is the virus renames extensions on certain files

notepad being one of them

in theory, all you do is put them back to the correct name.

 

some however do get corrupted because the virus uses them.

 

suck it and see,.

 

dx

 

 

I think you are spot on dx, I just hope that somehow I can resolve this. It is better than it was, but there are a lot of programs that no longer work.

[dx100uk]

well the resolution is either a rebuild [which overall will take less time]

or deal with the programs that dont work by reinstalling them as the rrors present themselves.

 

now. if you have not already done so

i would let housecall rip the system apart overnight with there online scanner.

then i'd be happy i was not wasting my time using sticking plasters.

 

dx

[SOD'EM]

I will do the housecall tonight dx.

 

Thanks.