Malwarebytes issue

[nickkyua]

Hey, guys! I have installed Malwarebytes on my PC. Whenever I start my computer or reboot it, the message "Invalid command line parameter" pops up. On the top of this message it says "Malwarebytes". So, what's wrong with it?

[BeeCeeBee]

Has Malwarebytes ever worked for you or is this a new download?

 

What other security measures do you have?

 

While this could be a simple matter of uninstalling and downloading again, it also is symptomatic of a worm that may have infected your machine.

 

Were you having any problems that cause you to select malwarebytes or was it just normal precaution?

[nickkyua]

Has Malwarebytes ever worked for you or is this a new download?

 

What other security measures do you have?

 

While this could be a simple matter of uninstalling and downloading again, it also is symptomatic of a worm that may have infected your machine.

 

Were you having any problems that cause you to select malwarebytes or was it just normal precaution?

 

1. First of all, I never had that message popping up before, although I've used Malwarebytes for a while. It has just happened lately when I scanned my system with it, and this software found something wrong in the registry and recommended to delete it. So I did. Unfortunately, I didn't leave that log, so I can't tell you what was it.

 

2. I have ESET Smart Security 3.0.672, Trojan Remover installed. And none of them show any signs of infection on my PC.

 

3. I've used it just for normal precaution, with now special intentions.

 

P.S. Sorry for off-top, but recently I've realized, that I'm not getting XP updates, although they are on automatic mode. So, I'm surprised with that as well.

 

Any ideas? Thank you

[BeeCeeBee]

and this software found something wrong in the registry and recommended to delete it. So I did.

 

This confuses me. What software are you referring to Malwarebytes?

[nickkyua]

This confuses me. What software are you referring to Malwarebytes?

What do you mean?

 

Malwarebytes found that wrong registry itself.

 

By the way, despite this message for wrong command line parameter Malwarebytes loads and works.

[Dalo Harkin]

It just sounded unclear what had recommended you to remove what.

 

If you get an error when you load the program then the install didn't complete correctly

[BeeCeeBee]

Your lack of updates concerns me because that too is a sign of infection. There are a few tests I would like you to run. Simple stuff really. See if there is any problem logging into any security sites such as Symantic, Avira, McAfee etc.

 

Next check if any Microsoft technical sites are blocked.

 

Finally try a system restore to before you did anything with the registry. It also may well be that your restore points are gone too. Hopefully not.

[nickkyua]

Your lack of updates concerns me because that too is a sign of infection. There are a few tests I would like you to run. Simple stuff really. See if there is any problem logging into any security sites such as Symantic, Avira, McAfee etc.

 

Next check if any Microsoft technical sites are blocked.

 

Finally try a system restore to before you did anything with the registry. It also may well be that your restore points are gone too. Hopefully not.

 

Yes, I was able to log on Microsoft support, Symantec, McAfee.

 

I've run different antispyware like SuperAntiSpyware, Trojan Remover, ESET Smart Security. And all of them report OK.

 

To Dalo Harkin: I've re-installed MalwareBytes couple times. So, the installation can't be uncomplete.

 

Well, the restore would be as the last resort. I don't use restore points. I prefer Acronis True Image, and have already the image of my partition C:\

[BeeCeeBee]

A system restore is not the same as a system recovery and it is a simple useful tool. Simply go to your programs and click on accessories. Select system tools and then system restore. You will see a calender and need only select a bold date prior to your allowing a registry change.

 

This is a reversible process that will not lose any of your data. It is not at all like acronis.

[nickkyua]

Talking about updates, I've seen the history of my updates on Microsoft site. The last update is dated on March, 12th. Could anyone tell me were updates after that date?

[BeeCeeBee]

There appear to be about 3 since then for XP. You were posting your query as I was replying to you. Have you reviewed what I said about a system restore. I believe that you have it confused with a recovery.

[nickkyua]

There appear to be about 3 since then for XP. You were posting your query as I was replying to you. Have you reviewed what I said about a system restore. I believe that you have it confused with a recovery.

Yes, I've reviewed. But in my case, it's helpless. The only date available is March 31, and I need 29.

 

Here's an entry from MalwareBytes log about infected registry.

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple)

Edited April 1, 2009 by nickkyua

[BeeCeeBee]

That is not good, there is no reason for you to have no restore points unless something has removed them. The fact that you do have one point from yesterday and that you apparently have not used the restore tool means that it is not disabled. Coupled with a lack of ability to get updates, this is pretty convincing evidence of an infection.

 

The following program has a proven success rate for most (not all) infections and includes the use of Malwarebytes.

 

Your computer appears to be infected with Malware. Malware is software designed to infiltrate or damage a computer system without the owner's informed consent. It is a combination of the words malicious and software. The expression is a general term used by computer professionals to mean a variety of forms of hostile, intrusive, or annoying software or program code.

 

 

 

It is in your best interest to note the following:

1. Please disable your resident security applications (such as AVG, Spybot, WinPatrol, etc.) before performing the below procedure so that they do not interfere with the process.
   
2. Perform all the steps in the order listed to avoid any conflicts.
   
3. If unsure, please stop and voice your doubts.
   
4. You might be required to go offline during the disinfection process. Therefore, it is recommended to print off the instructions below for ease of reference.
   

If you stick to the above guidelines, all should go smoothly.

 

 

================================================

STEP 1

1. Download ATF-Cleaner by Atribune.
   
2. Save the file to your Desktop.
   
3. Double-click on the file to run the program.
   
4. On the Main tab, check the Select All button.
   
5. Next, click on the Firefox tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Firefox, then click No at the corresponding prompt.
   
6. Now, click on the Opera tab (if applicable) and check the Select All button.
    
   Note: If you would like to preserve your saved passwords in Opera, then click No at the corresponding prompt.
   
7. Press the Empty Selected button and click OK to acknowledge the corresponding prompt.
   
8. Click on the Exit button to quit the program.
   

================================================

STEP 2

1. Please click here to download Malwarebytes' Anti-Malware.
   
2. Save the file to your Desktop.
   
3. Double-click mbam-setup.exe and follow the prompts to install the program.
   
4. At the end, make sure a check mark is placed next to:
   
   1. 
      
   2. Update Malwarebytes' Anti-Malware
      
   3. Launch Malwarebytes' Anti-Malware
      

 

[*]Click Finish.

[*]The program will download and update itself if it finds the necessity to do so. Please allow this.

[*]Once the program has loaded, select Perform full scan, then click Scan.

 

Note: Depending on your computer specifications, the scan may take some time to complete. Please wait patiently and do not interrupt the process.

[*]When the scan is complete, click OK, and then Show Results to view the results.

[*]Make sure that every entry is selected, and click Remove Selected.

[*]Restart your computer.

================================================

STEP 3

1. Please click here to download SUPERAntiSpyware (Free Version).
   
2. Save the file to your Desktop.
   
3. Double-click SUPERAntiSpyware.exe and follow the prompts to install the program.
   
4. Open SUPERAntiSpyware.
   
5. Under Configuration and Preferences, click the Preferences button.
   
6. Click the Scanning Control tab.
   
7. Under Scanner Options make sure the following fields checked:
   

    

   [*]Click the Close button to leave the control center screen.

   [*]On the main screen, under Scan for Harmful Software click Scan your computer.

   [*]On the left, make sure you check mark All the Fixed Drives.

   [*]On the right, under Complete Scan, choose Perform Complete Scan.

   [*]Click Next to start the scan. Please be patient while it scans your computer.

   [*]After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.

   [*]Make sure every entry has a check mark next to it and click Next.

   [*]A notification will appear that Quarantine and Removal is Complete. Click OK and then Finish to return to the main menu.

   [*]Restart your computer.

   ================================================

   STEP 4
   1. Please visit the ESET Online Scanner, using Internet Explorer to initiate the scan.
       
      Note: If you are running Windows Vista, then you will need Administrative privileges to complete the latter part of the procedure. To do so, right-click on the Internet Explorer icon in the Start Menu and select the Run As Administrator option in the shell context menu.
      
   2. Check mark the YES, I accept the Terms of Use box.
      
   3. Click the Start button.
      
   4. Click the Install button on the following screen.
      
   5. Click Start. This will will initialize and update the scanner engine.
      
   6. Check mark the box beside Remove found threats.
      
   7. Click the Scan button. This will start the scan. Please be patient while it is in progress.
      
   8. Restart your computer.
      

   ================================================

   STEP 5
   1. Click on Start > Programs > Accessories > System Tools and select System Restore.
      
   2. Choose the radio button marked Create a Restore Point on the first screen and click Next. Give the restore point a name then click Create. The new point will be stamped with the current date and time. Keep a note of this so you can find it easily should you need to use System Restore.
      
   3. Next, click on Start > Run, type Cleanmgr and click on OK.
      
   4. Click on the More Options tab.
      
   5. Click the Clean Up button in the System Restore section to remove all previous restore points except the most recent one.
      

   This will remove any infected files that have been backed up by Windows. The files in "System Restore" are protected to prevent any programs changing those files. This is the only foolproof way to ensure the deletion of those files.

    

   Note: Do not clear restore points on a regular basis as doing so will clear all previous restore points even those that you may need. System Restore is a useful tool to revert your computer back to a working condition if something goes wrong.

    

   Re-enable all your security applications and please return here and tell us how the computer seems to be operating.

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining

[Guest Wolfeymole]

If you do have Eset Security Suite it's out of date, you need version 4.0.314.0

[nickkyua]

If you do have Eset Security Suite it's out of date, you need version 4.0.314.0

 

Did you mean virus signature database out of date?

 

Well, I've followed all these above steps, everything was OK, no infections were detected.

 

The issue has been solved with simply upgrading Malwarebytes to 1.35.

 

Thank you, guys, for your help.

 

Still, I can't understand why I'm missing couple updates

[Guest Wolfeymole]

What aspects of Symantec and McAfee are you using?

[nickkyua]

What aspects of Symantec and McAfee are you using?

 

I don't use them at all

[Guest Wolfeymole]

You said;

 

Yes, I was able to log on Microsoft support, Symantec, McAfee.

 

Please explain.

[RandyL]

Nick was just going to the sites. He's not using the products. The purpose was to see if he was blocked from them to try to determine if this was a malware issue and what kind.

 

I hope that covers it.