How to get purchased antimalware to run in user account on startup

[glennc]

Possible solution!

Hello,
After checking and testing and eliminating everything I could think of, I examined Firefox. I have a add-on that forces redirects to HTTPS sites. So does the Ubuntu Box. I disabled it and immediately connected with malwarebytes.org. So does this sound like the probable cause of my failure to communicate? And so is it possible that I am NOT infected??
Could use the moral support!!
Thanks again to all.
Glenn

 

[Golden]

Hi Glenn,

I think you are right. Its not coincidental that making that change to both your Windows and Ubuntu PC fixed the problem. To be 100% sure, please do the following:

1. Flush your DNS and reset Windows hosts file

Copy the following text in bold exactly as shown into a new instance of NotePad:

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save this NotePad file as FLUSH.BAT on your Desktop. Right-click on it, and choose 'Run as administrator'. It will automatically shutdown, and then reboot, your computer.

2. Run a final scan with ESET online scanner

http://www.eset.eu/eset-online-scanner

If it comes up clean, then i think that the infection was probably a false alarm.

Regards,
Golden

 

[glennc]

Hi Glenn,

I think you are right. Its not coincidental that making that change to both your Windows and Ubuntu PC fixed the problem. To be 100% sure, please do the following:

1. Flush your DNS and reset Windows hosts file

Copy the following text in bold exactly as shown into a new instance of NotePad:

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save this NotePad file as FLUSH.BAT on your Desktop. Right-click on it, and choose 'Run as administrator'. It will automatically shutdown, and then reboot, your computer.

2. Run a final scan with ESET online scanner

http://www.eset.eu/eset-online-scanner

If it comes up clean, then i think that the infection was probably a false alarm.

Regards,
Golden

Thanks Golden,
You are great. But being fairly inexperienced could you, if you have the time, expound a bit on the concept of flushing your DNS and resetting the Windows Host Files? I have no real clue as to what that is. Also the batch file what does that do?
I will run the ESET scanner!
Glenn

 

[Layback Bear]

Just a thought, could Ubuntu be infected.

 

[DavidE]

Glad to see you are making some progress with this!

If you still can't run MBAM from your Standard account after following Golden's instructions, I would create a new Standard User Account.
See if MBAM runs for the new account.

Could something corrupt in the current account prevent MBAM from running?

 

[Jacee]

Thanks Golden,
You are great. But being fairly inexperienced could you, if you have the time, expound a bit on the concept of flushing your DNS and resetting the Windows Host Files? I have no real clue as to what that is. Also the batch file what does that do?
I will run the ESET scanner!
Glenn

Sometimes a bad DNS entry will be cached and you will need to flush the DNS cache to get rid of it.

Understanding the Hosts file http://en.wikipedia.org/wiki/Hosts_(file)

 

[glennc]

Just a thought, could Ubuntu be infected.

Thanks for the thought, but since I got it to connect I believe it is because of the program. I can connect fine when the extra program is disabled. Thanks!
Glenn

 

[glennc]

Hi Glenn,

I think you are right. Its not coincidental that making that change to both your Windows and Ubuntu PC fixed the problem. To be 100% sure, please do the following:

1. Flush your DNS and reset Windows hosts file

Copy the following text in bold exactly as shown into a new instance of NotePad:

@Echo on
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save this NotePad file as FLUSH.BAT on your Desktop. Right-click on it, and choose 'Run as administrator'. It will automatically shutdown, and then reboot, your computer.

2. Run a final scan with ESET online scanner

http://www.eset.eu/eset-online-scanner

If it comes up clean, then i think that the infection was probably a false alarm.

Regards,
Golden

Howdy Golden,
Since I have made contact with Malwarebytes Forum Administrators and Technical Support, I have been allowing them to assist me in getting the program to auto protect in all or at least the Admin account and my mainly used user account.
They have been unsuccessful as yet. I did not forget the above style you wanted to me to try and will be back if they can not get it running right. They thanked me for finding out that HTTPSEverywhere causes an inability to connect to their servers.
Thanks again and it should only be a few more days. Boy is it hard to get MBAM out of your system!!
L8tr and thanks
Glenn