+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Keyloggers (https://hackforums.net/forumdisplay.php?fid=113)
+---- Thread: Malware-bytes deleted itself? (/showthread.php?tid=4125582)
Malware-bytes deleted itself? - Kayoz - Mar 20, 2014
So today I noticed something strange... I downloaded a trusted file (just stating that this can not be the source) and just for the lulz basically I was gonna virus-scan it with MalwareBytes. Then I noticed there was no "Scan with malware-bytes" button when I right clicked the file. Spoiler (Click to View) I then checked the "show hidden icon" thing down at the bottom right of the screen and I discovered that it wasn't even active. Spoiler (Click to View)
![[Image: 4ix2iDd.png]](https://i.imgur.com/4ix2iDd.png)
![[Image: SbAvOCi.png]](https://i.imgur.com/SbAvOCi.png)
I then just searched "all programs" for it and I found it, but it had no icon image. Spoiler (Click to View)
![[Image: jcwqNbD.png]](https://i.imgur.com/jcwqNbD.png)
Finally I tried to run the program and here is what the error message said...Spoiler (Click to View)
![[Image: SOMB7GG.png]](https://i.imgur.com/SOMB7GG.png)
So now I basically want to know if this has happened to anybody else and/or if I should be worried and what I should do about it.
Thanks in advance!
* - Aura - Mar 20, 2014
This can sometimes be caused by a malware that have a feature to kill Malwarebytes and make it unusable to protect itself. Can you still launch it from it's folder in C:\Program Files (x86) ?
* - Kayoz - Mar 20, 2014
(Mar 20, 2014 02:15 PM)Aurа Wrote: This can sometimes be caused by a malware that have a feature to kill Malwarebytes and make it unusable to protect itself. Can you still launch it from it's folder in C:\Program Files (x86) ?
Well I deleted the some things and now it's unusable anyways (not sure if it was unusable before) but when I try to delete the folder with malwarebytes, this is what comes up: http://prntscr.com/32loar
Please help, I fucking hate being paranoid about everything.
EDIT: Also I have no fucking clue what this folder is, but it's protected aswell and seems shady. http://prntscr.com/32lpni
* - Aura - Mar 20, 2014
(Mar 20, 2014 02:19 PM)Kayoz Wrote: Well I deleted the some things and now it's unusable anyways (not sure if it was unusable before) but when I try to delete the folder with malwarebytes, this is what comes up: http://prntscr.com/32loar
Please help, I fucking hate being paranoid about everything.
Try to uninstall it instead of deleting the folder and reinstall it.
* - Kayoz - Mar 20, 2014
(Mar 20, 2014 02:22 PM)Aurа Wrote: Try to uninstall it instead of deleting the folder and reinstall it.
Can't seem to find where to uninstall it, I've tried through CCleaner but I can't find the program there...
Should I just try to install it again without uninstalling and then doing a full virus scan?
* - Aura - Mar 20, 2014
(Mar 20, 2014 02:26 PM)Kayoz Wrote: Can't seem to find where to uninstall it, I've tried through CCleaner but I can't find the program there...
Should I just try to install it again without uninstalling and then doing a full virus scan?
Yes try it and let me know if you can't install it. No need to do a full scan, do a quick scan, it's faster and as efficient as a full scan.
* - Kayoz - Mar 20, 2014
(Mar 20, 2014 02:28 PM)Aurа Wrote: Yes try it and let me know if you can't install it. No need to do a full scan, do a quick scan, it's faster and as efficient as a full scan.
http://prntscr.com/32lsxu
That is what I got as error. Could THIS work?
* - Aura - Mar 20, 2014
(Mar 20, 2014 02:30 PM)Kayoz Wrote: http://prntscr.com/32lsxu
That is what I got as error. Could THIS work?
Yes this is exactly the solution I was about to propose. Install the registry edit then take ownership of the Malwarebytes folder in ProgramData, delete it then click on "Retry".
* - Jagster™ - Mar 20, 2014
If you want to take ownership of a file/folder follow my guide HERE
* - Aura - Mar 20, 2014
(Mar 20, 2014 02:34 PM)Jagster Wrote: If you want to take ownership of a file/folder follow my guide HERE
He's better of using the script Jagster. Sometimes this method doesn't even work on only the script is able to take ownership of the file/folder.
* - Jagster™ - Mar 20, 2014
(Mar 20, 2014 02:37 PM)Aurа Wrote: He's better of using the script Jagster. Sometimes this method doesn't even work on only the script is able to take ownership of the file/folder.
Its included in there on the bottom :)
I feel like using the script is cheating haha 😝
* - immortalwon - Mar 20, 2014
You might have plasma rat infection, use KFC cleaner
* - Kayoz - Mar 20, 2014
Well I had a bluescreen while trying to install malwarebytes but ill try again. Pretty sure avast interfered somehow. Also I noticed the boot time was fast as shit now compared to before so I got to be doing something right.
Edit: it bluescreened again.. Should I start in safe mode?
* - Aura - Mar 20, 2014
(Mar 20, 2014 02:51 PM)Kayoz Wrote: Well I had a bluescreen while trying to install malwarebytes but ill try again. Pretty sure avast interfered somehow. Also I noticed the boot time was fast as shit now compared to before so I got to be doing something right.
You might have disabled a few startup programs that were taking up all your resources. If you ever need help reinstalling or troubleshooting your system, send me a PM, I can assist you via Teamviewer.
* - Kayoz - Mar 20, 2014
(Mar 20, 2014 02:52 PM)Aurа Wrote: You might have disabled a few startup programs that were taking up all your resources. If you ever need help reinstalling or troubleshooting your system, send me a PM, I can assist you via Teamviewer.
I'll download it but I have never used it before.