Solved Malware scan turns into a bad situation

thelastrider · Jul 26, 2014

Hello everyone. I'm new here and something just happened to me about an hour ago.

I was on my comouter and it was working fine and then malwarebytes kept pulling up the “virus has been detected” message and so I went to scan my PC and malwarebytes got 510 detections. a few of them were installation programs that I had like MySQL installer and what not. There were also system files in the scan. I don't recall which ones, but their file extensions were .sys

So it got done and I clicked “quaratine all” expecting to remove the malwares and it asked to restart my PC like it normally does. So I went a head and rebooted my PC. Now what happened was it loaded up the “Loading Windows file” message from the black background and the grey progress bar.

That message keeps showing up now and it leads me to the system restore part and when I try to do System Restore. It gives me a message saying that the system restore wad unsuccessful and the code was something like 0x8000ffff or something like that.

I'm not sure what's going on now.

Yard Dog · Jul 26, 2014

Hello thelastrider , welcome to the forums ; Try this : http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html Use option one .

gregrocker · Jul 26, 2014

You may have quarantined System files.

Work from System Recovery Options via F8 or the disk, trying Startup Repair and then System Restore again

Then run SFC /SCANNOW Run in Command Prompt at Boot

You may need to further disinfect the OS for it to repair enough to start, starting from the top of Troubleshooting Windows 7 Failure to Start .

At any point you can cut your losses to rescue any files to quarantine and then do a perfect Clean Reinstall - Factory OEM Windows 7

Porthos · Jul 26, 2014

Looks like one of those oh crap false positives....

Here we go again

thelastrider · Jul 26, 2014

Well, I've done about a few System Restore when it was booting and I some how got passed that “Loading Windows file” message, but I always hit the blue screen of death every time it looks like Windows will work properly.

At this current time. I've tried the SFC /SCANNOW and it says

“Beginning system scan. This process will take some time.

There is a system repair pending which requires reboot to complete. Restart Windows and run sfc again.

gregrocker · Jul 26, 2014

Are you running SFC /SCANNOW Run in Command Prompt at Boot?

Run the other repairs first in the order I gave.

thelastrider · Jul 26, 2014

gregrocker said:
Are you running SFC /SCANNOW Run in Command Prompt at Boot?

Run the other repairs first in the order I gave.

No. Sorry, I was all over the place before I submitted this topic. I did a few System Repairs first and on the 3rd System Repair, it asked if I wanted to do a System Recovery from an eariler time so I did that, then I did one of those and went to take a shower and came back and it gave me the 0x8000ffff error and I finally got sick of it and came on here.

I'm redoing this in the order you specified right now as we speak.

Also, when I tried the SFC /SCANNNOW, I did that via in the System Recovery section where it has

System Repair
System Recovery
Image Recovery
Command Prompt

DavidE · Jul 26, 2014

Looks like a false positive, this is from the MBAM forum.

Posted Today, 08:06 PM
If anyone is currently running a scan STOP the scan immediately.

Do not allow anyting to be quarantined or removed.

Update the database and then run another scan.

Source: https://forums.malwarebytes.org/ind...4072609-entire-system32-quarantined/?p=858367

Yard Dog · Jul 26, 2014

Thanks for that info.. a bit late for the OP of this thread tho.
They will now have to repair the OS .

thelastrider · Jul 26, 2014

Yeah after following the order, it just keeps saying

"There is a system repair pending which requires reboot to complete." I've turned off and on my PC and I still get the same message.

Both system repair and system restore fails.

DavidE · Jul 26, 2014

Keep an eye on the MBAM thread about this to see what they come up with for a solution.
Here is a link to the post by the CEO.
https://forums.malwarebytes.org/ind...4072609-entire-system32-quarantined/?p=858388

I got burned on a bad update a couple of years ago, it's no fun.
I restored a System Backup Image to fix it.

thelastrider · Jul 26, 2014

Well, looks like I'll end up having to reformat my PC. I have everything backed up already from a month ago. I kinda knew this day would comw because I kept getting random stuff happening from blue screen of death to some how going from 730 GB to 200 GB. Only thing that actually might of meant something was a few files I recentlly updated on my PC.

ThrashZone · Jul 26, 2014

Beyond belief

Phone Man · Jul 26, 2014

MBAM has fixed the bad Update file v2014.07.26.09 and you should update to v2014.07.27.02 which seems to have fixed the problem. It does not seem to affect realtime functions but only when it does a scan.

Jim

thelastrider · Jul 26, 2014

Phone Man said:
MBAM has fixed the bad Update file v2014.07.26.09 and you should update to v2014.07.27.02 which seems to have fixed the problem. It does not seem to affect realtime functions but only when it does a scan.

Jim

Well, I finally got my new PC settings installed and I'm no longer going to use Malwarebytes due to this problem. If it's not safe now, how is it any safer in 5 years? It's still going to end up doing the same thing again sooner or later.

ThrashZone · Jul 26, 2014

I don't blame you one bit,
I do how ever blame mbam 100%
Their cluster as they put it is bonkers,
Possibly they should install their product on a real machine,
And watch mbam turn it into a large paperweight

derekimo · Jul 27, 2014

Phone Man said:
MBAM has fixed the bad Update file v2014.07.26.09 and you should update to v2014.07.27.02 which seems to have fixed the problem. It does not seem to affect realtime functions but only when it does a scan.

Jim

What about all the systems it hosed in the process?

They need to start over, their name is junk now.

ThrashZone · Jul 27, 2014

Chicken hearts too,
Locked the thread,
They do that allot when they have nothing better to say

Phone Man · Jul 27, 2014

ThrashZone said:
Chicken hearts too,
Locked the thread,
They do that allot when they have nothing better to say

They fixed the problem and then advised anyone with a problem to contact support and open their own ticket and they will be helped. Continuing to post in that one thread would only confuse those that needed help.

Jim

ThrashZone · Jul 27, 2014

I disagree,
It was going fine until people started quoting others,
I got a inquiry replied to about how long the update was in the wild,
3 hours if you believe them,

I have no clue why people participate there when they have no control on policies or program operation do you

Solved Malware scan turns into a bad situation

New member

My Computer

New member

My Computer

New member

New member

My Computer

New member

My Computer

New member

New member

My Computer

____________

My Computer

New member

My Computer

New member

My Computer

____________

My Computer

New member

My Computer

R.I.P. Britton30=Gary

My Computer

Retired Bell Head

My Computer

New member

My Computer

R.I.P. Britton30=Gary

My Computer

New member

My Computer

R.I.P. Britton30=Gary

My Computer

Retired Bell Head

My Computer

R.I.P. Britton30=Gary

My Computer

Similar threads