Malwarebytes neće da se updateuje!

[- TERMINATOR -]

Ljudi pls pomagajte ne znam sta da radim, kad god zelim da update-ujem Malwarebytes Anti-Malware, on nece!

Normalno, idem na Update karticu i kliknem dugme Check for updates, ali prijavljuje mi sledecu gresku:

An error occurred. Please report the following error code to Malwarebytes' Anti-Malware support team.
Error code: 732 (0, 0)

Nemam pojma sta da radim, al jos od kad sam ga instalirao, nece da se update-uje. Cak nece ni na www.malwarebytes.org sajt da mi ide Firefox (U pitanju je 3.5 verzija)!

Sta bi trebalo da uradim da bih update-ovao Malwarebytes?

[NIx Car]

proveri u internet exploreru da ti nije slucajno podesen na offline mod

[- TERMINATOR -]

NIx Car kaže:

proveri u internet exploreru da ti nije slucajno podesen na offline mod

Kako da znam da li mi je podesen na offline mod??
Uostalom, imam IE7 al ga reetko kad koristim. Iskljucivo koristim firefox 3.5

[ivanza]

Koji antivirus i firewall koristis za zastitu ?

[Basa Mrkalj]

@terminator, ajde postavi HJT log http://www.trendsecure.com/portal/en...HiJackThis.exe

[- TERMINATOR -]

ivanza kaže:

Koji antivirus i firewall koristis za zastitu ?

AV: Avast 4.8 Pro za kljucem koji vazi jos oko 1100 dana
Firewall: COMODO

[- TERMINATOR -]

Evo loga (P.S. nesto mi nije u redu sa Mozillom kada trebam da prekopiram neki text - nije mi u redu Paste kad je u pitanju Firefox pa sam morao ovaj post da posaljem preko Explorera ):

Logfile of HijackThis v1.99.1
Scan saved at 13:01:59, on 20/07/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
E:\Program Files\Comodo Firewall\Comodo\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
E:\Program Files\Comodo Firewall\Comodo\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
C:\WINDOWS\svcadmin.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ViOrb\ViOrb.exe
C:\Program Files\ViStart\ViStart.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ivan\Desktop\Jabuka\kruska.exe

Ovo su bili aktivni procesi. Za par sekundi je drugi deo hijackthis loga.

[- TERMINATOR -]

Evo nastavka...

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60077
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60077
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60077
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60077
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = http://hebnetfinder.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Search The Web
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: NP Helper Class - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.3.0.4160\NPIEAddOn.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
O2 - BHO: System Search Dispatcher - {CDBFB47B-58A8-4111-BF95-06178DCE326D} - C:\Program Files\System Search Dispatcher\1.2.0.750\ssd.dll
O2 - BHO: C:\WINDOWS\system32\rakmdlkd83indfgnbu.dll - {D5BF4552-94F1-42BD-F434-3604812C807D} - (no file)
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\YTSingleInsta nce.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Program Files\AskBarDis\bar\bin\askBar.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

Nastavak loga za par sekundi...

[- TERMINATOR -]

Evo nastavka...


O4 - HKLM\..\Run: [COMODO Internet Security] "E:\Program Files\Comodo Firewall\Comodo\COMODO Internet Security\cfp.exe" -h
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
O4 - Startup: Shortcut to ViOrb OneStep.lnk = C:\Documents and Settings\Ivan\My Documents\Dokumenti\ViOrb OneStep.exe
O4 - Startup: Shortcut to ViStart OneStep.lnk = C:\Documents and Settings\Ivan\My Documents\Downloads\Compressed\ViStart Beta 6\ViStart OneStep.exe
O4 - Startup: TransBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\TransBar\TransBar.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\UberIcon\UberIcon Manager.exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper200711281.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5F9FFB31-7990-4231-A82A-7CED3E749613}: NameServer = 85.255.116.72,85.255.112.140

I zadnji deo stize za par sekundi...

[- TERMINATOR -]

Zadnji deo!

O17 - HKLM\System\CCS\Services\Tcpip\..\{AF77259A-20D5-442A-92F6-A6CBE4013341}: NameServer = 85.255.116.72,85.255.112.140
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.116.72,85.255.112.140
O17 - HKLM\System\CS1\Services\Tcpip\..\{5F9FFB31-7990-4231-A82A-7CED3E749613}: NameServer = 85.255.116.72,85.255.112.140
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.116.72,85.255.112.140
O17 - HKLM\System\CS2\Services\Tcpip\..\{5F9FFB31-7990-4231-A82A-7CED3E749613}: NameServer = 85.255.116.72,85.255.112.140
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.116.72,85.255.112.140
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DL L
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Anyplace Control Security - Unknown owner - C:\WINDOWS\svcadmin.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - Unknown owner - E:\Program Files\Comodo Firewall\Comodo\COMODO Internet Security\cmdagent.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Update Service (gupdate1ca023cf219fa44) (gupdate1ca023cf219fa44) - Unknown owner - C:\Program Files\Google\Update\GoogleUpdate.exe" /svc (file missing)
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: Window Net Dns (MyDNS) - Unknown owner - C:\Program Files\Internet Explorer\svchost.exe (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

To je to, a sad vi protumacite .

[Basa Mrkalj]

Brate koje su tebe karakondzule spopale , ko zna sta ti otvara kad klikces na linkove a .

Klikni na ikonicu Avasta pored sata i iskljuci stalnu zastiru.

Skini ComboFix na desktop http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Pokreni ga i sve sto te pita klikni Yes/Ok , ne diraj plavi prozor programa.

Kad zavrsi izbacice ti log, koji ces da zakacis ili kao attachment ili ga uploaduj na rapid pa postavi link, veliki je.

[NIx Car]

opet si dospeo u virus city

[- TERMINATOR -]

Basa Mrkalj kaže:

Brate koje su tebe karakondzule spopale , ko zna sta ti otvara kad klikces na linkove a .

Klikni na ikonicu Avasta pored sata i iskljuci stalnu zastiru.

Skini ComboFix na desktop http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Pokreni ga i sve sto te pita klikni Yes/Ok , ne diraj plavi prozor programa.

Kad zavrsi izbacice ti log, koji ces da zakacis ili kao attachment ili ga uploaduj na rapid pa postavi link, veliki je.

Avast mi je na stalnu zastitu. ComboFix cu instalirati sutra, jer danas necu biti tu ceo dan.
Sve to cu sutra.

NIx Car kaže:

opet si dospeo u virus city

da bre

[Basa Mrkalj]

Dobro, ali pre nego pokrenes CF iskljuci Avast obavezno.

[- TERMINATOR -]

Zavrsio je ComboFix. Log sam stavio u attachmentu. Stavio sam ZIP fajl u kome se nalazi ComboFix log.
Da li moram da zadrzim to cudo jos ili treba da mi tu stoji?

[Basa Mrkalj]

Skini i raspakuj ovaj fajl na desktop. Ponovo ugasi AV.
Levim tasterom misa prevuci skriptu na ikonicu Combofixa i sacekaj da se zavrsi ciscenje.
Zatim ponovo zakaci log koji dobijes
Zatim skeniraj sa HijackThis-om i zakaci i njegov log.

Mozes oba loga da zapakujes u rar.


btw.
Nemoj niko da koristi ovu skriptu, ona je iskljucivo za ovaj slucaj i nijedan drugi.

[- TERMINATOR -]

Kada sam ubacio tu skriptu, posle kada mi se restartovao, komp mi je startovao neke programe koji se ukljucuju kada se komp podigne, a to ne sme zbog ComboFixa. Ponovo cu to da uradim, al mozda nece biti necega u logu sto je bilo kada sam poslednji put skenirao sa skriptom. Nemam pojma.
Sve programe koji se startuju posle pojavljivanja Welcome cu obrisati.
Ponovo cu da startujem ComboFix sa tom skriptom, a onda cu skenirati sa Hijackthis-om i oba loga stavicu u 1 ZIP fajl.

Evo su oba loga
Hijackthis i ComboFix

[Basa Mrkalj]

Ok, ovde smo zavrsili, ostaje samo par sitnica.

Deinstalacija Combofixa:

Start > Run > combofix /u > enter i sacekaj da se deinstalacija zavrsi.

Zatim:

Start > Run. Upisati ipconfig /flushdns > enter.

btw.

Ako zelis mozemo brisati recovery console koja ti se pojavljuje pri podizanju sistema, to je posledica combofixa. Ne smeta nista racunaru, ali ako tebi smeta mozemo da je brisemo, nije problem. Mada pozeljno je imati je.

I jos nesto, preporuka je da deinstaliras program AskToolbar, koji si pokupio sa nekom instalacijom programa. Nalazi se u Add or Remove.

Kada sam ubacio tu skriptu, posle kada mi se restartovao, komp mi je startovao neke programe koji se ukljucuju kada se komp podigne, a to ne sme zbog ComboFixa. Ponovo cu to da uradim, al mozda nece biti necega u logu sto je bilo kada sam poslednji put skenirao sa skriptom. Nemam pojma.

Ovo je nebitno.

[- TERMINATOR -]

Ja vam nisam reko da ni COMODO Firewall nije hteo da se update-uje.
Sad hoce!
Ali Malwarebytes i dalje nece...
doduse, sada hoce da mi internet udje na www.malwarebytes.org
Samo me nervira to sto Malwarebytes nece i dalje da se update-uje, a COMODO Firewall sada hoce.

Ima li jos nekog fixa da omogucim i Malwarebytes-u da se update-uje?

edit: Ponovo nece da udje na Malwarebytes.org. Za update pokazuje mi istu gresku.
Cim sam zavrsio sa oba scan-a koja si mi reko, hteo je da udje na www.malwarebytes.org, a nisam i dalje update-ovao malwarebytes jer sam hteo da mi bude na E hard disku, pa sam ga reinstalirao i ubacio sam ga na E. Sad ne znam da li to nije dobro za Malwarebytes, da li mozda zbog toga nece.
Ahhhhh ima li nekog drugog fixa???

edit 2: Sad ponovo hoce da mi udje na sajt www.malwarebytes.org

YEAH hoce da se update MALWAREBYTES!!

Hvala ti puuuuuuuuuuuuuuunnooo Baso Mrkalj, ne znam kako da ti se oduzim!

P.S. Malo mi je cudno ovo, posle ta 2 fixa nije hteo da se update-uje, a sad hoce

Baso - jos nesto
Ostao mi jedan folder od ComboFixa.
Lokacija: C:\ComboFix
U njemu se nalazi fajl
CF28434
Mislim da je batch file, ima ikonicu command prompta i pise na ikonici C:/_
Mislim da jeste

Sta da radim sa tim folderom? Da li da ga obrisem?

[Basa Mrkalj]

Brisi slobodno ceo folder.

p.s.

Znaci sad radi sve ok ?