Solved

Can't open programs, Malwarebytes won't install or run.

Posted on 2013-01-02
10
6,332 Views
Last Modified: 2013-11-22
I have a client that I'm trying to help out via remote login. They tried installed a game off the Internet on Monday night and every since then they cannot open any programs off their desktop like Quickbooks, Word, Excel etc. I can use Firefox to browse the Internet just fine and download any program.

So I have ran full scan with avg in normal mode and safe mode with no infections found. I've also ran Rkill and Combo Fix which didn't help anything. I've also disabled all start up items via msconfig (after getting access to it).

When I go to install Malwarebytes, I get errors towards the end on the .lnk files that it won't work all the way through. The error is CoCreateInstance failed; code 0x80040154. Class not registered.

If i manually browse to program files > malwarebytes I can see the .exe to run but get a run-time error '372' failed to load control 'webbrowser' from ieframe.dll. your version if ieframe.dll may be outdated. make sure you are using the version of the control that was provided with your application.

Computer is older with Windows XP SP3

Any ideas?
0
Comment
Question by:ZephyrM
10 Comments
 
LVL 22

Accepted Solution

by:
plusone3055 earned 500 total points
Comment Utility
Run System Restore to a day prior to the game installation
0
 
LVL 5

Expert Comment

by:mlaise
Comment Utility
You have a virus.  There are a few options you can follow:

1) Like the person above said... Do a system restore.

2) Right as the computer boots up open Task Manager (Ctrl-Alt-Del) as quickly as possible and end any task that should not be running (requires you to know what are standard system tasks).  A lot of viruses will start when your computer does but there is normally a few seconds of lag before they do and you can sneak in some commands before that.  If you have a second computer available check the running tasks on the internet.  More times then not the major antivirus makers will post instructions on how to manually remove a virus from your system if you can locate which one it is.

My advice would be to forgo trying to recover the system though and just restage it.
0
 
LVL 14

Expert Comment

by:Rob Miners
Comment Utility
Use Malwarebytes Chameleon to install Malwarebytes Anti-Malware on an already infected system

http://forums.malwarebytes.org/index.php?showtopic=85715&st=0&p=434003&#entry434003
0
 

Author Comment

by:ZephyrM
Comment Utility
I had already tried running those chameleon files as they get placed in a folder during the install process of malwarebytes. I would get the same error.
0
 
LVL 14

Expert Comment

by:ThomasMcA2
Comment Utility
Have them create a bootable AVG CD or USB stick from here, then reboot and scan using AVG. Running AVG from a different boot device keeps the virus from loading into memory, and the virus can no longer protect itself from being deleted.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 
LVL 32

Expert Comment

by:willcomp
Comment Utility
Instead of Rkill, try RogueKiller: http://www.bleepingcomputer.com/download/roguekiller/

Also download and run TDSSKiller:  http://www.bleepingcomputer.com/download/tdsskiller/
0
 

Author Comment

by:ZephyrM
Comment Utility
I did also try RogueKiller if I remember right. TDSSKiller I did forget about it. I do have the system going through arestore, just have to wait for the client to call me back to see where it is as I can't remote log in currently.
0
 

Author Closing Comment

by:ZephyrM
Comment Utility
Restored, worked fine aftewards. Did run scans/updates etc afterwards to make sure.
0
 

Expert Comment

by:narenxp
Comment Utility
Nothing will work except for a system restore.What will users do if they dont have a restore point?

I'm noticing this error on many XP systems with IE 8.

I was able to fix it by importing LNK registry key on the customer's computer.Install malwarebytes and when you receive this error click ok .Do not update or try to run malwarebytes

Download

LNK FIX

Extract and launch the registry key and click YES to import.Restart the PC or restart explorer.exe  alone.You should be able to run mbam.exe from C:\programFiles\malwarebytes folder now.

Corrupted IEframe.dll has somehow corrupted the icon too.Another fix one can use is to just copy the mbam.exe from C:\programFiles\malwarebytes folder on any vista or windows7 systems and paste it in same location on XP PC with the issue.

good luck
0
 
LVL 1

Expert Comment

by:TXSolution79
Comment Utility
rename mbam.exe to something like "aaa.com", try running in safe mode as well.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

Sub-Titled: “My Way” (with apologies to Francis Albert Sinatra) Let me start by stating emphatically that I am one of those Experts who prefer doing things “My Way”. It’s kind of a no-brainer. “The following procedure works for me, so here is …
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now