Annoying bug.

[GTP]

After rethinking this whole scenario and in consultation with the client we have decided to Fabs and N&P rather than waste time screwing around trying to find and remove it.
Its Windows 10 so quick and easy and we know it will be clean afterwards.
Better to be safe than sorry.

Thanks everyone for the helpful suggestions.

Edit: BTW. Whatever this thing was/is it had no problem disabling Malwarebytes.
It would open a tab in the browser called http://disable Malwarebytes=(series of numbers, different each time) and two seconds later Malwarebytes would have an exclamation point on the tray icon.
Hovering on the tray icon revealed "All Protections Disabled"
Malwarebytes would not open to the GUI, nor was it possible to select any option to enable protection.

 

[Galdorf]

After rethinking this whole scenario and in consultation with the client we have decided to Fabs and N&P rather than waste time screwing around trying to find and remove it.
Its Windows 10 so quick and easy and we know it will be clean afterwards.
Better to be safe than sorry.

Thanks everyone for the helpful suggestions.

Edit: BTW. Whatever this thing was/is it had no problem disabling Malwarebytes.
It would open a tab in the browser called http://disable Malwarebytes=(series of numbers, different each time) and two seconds later Malwarebytes would have an exclamation point on the tray icon.
Hovering on the tray icon revealed "All Protections Disabled"
Malwarebytes would not open to the GUI, nor was it possible to select any option to enable protection.

Roguekiller would have easily removed this it is my number one malware removal tool.

 

[GTP]

N & P did the job in less time and guaranteed complete removal. No guessing if it would or not.

 

[Mick]

After rethinking this whole scenario and in consultation with the client we have decided to Fabs and N&P rather than waste time screwing around trying to find and remove it.
Its Windows 10 so quick and easy and we know it will be clean afterwards.
Better to be safe than sorry.

Thanks everyone for the helpful suggestions.

Edit: BTW. Whatever this thing was/is it had no problem disabling Malwarebytes.
It would open a tab in the browser called http://disable Malwarebytes=(series of numbers, different each time) and two seconds later Malwarebytes would have an exclamation point on the tray icon.
Hovering on the tray icon revealed "All Protections Disabled"
Malwarebytes would not open to the GUI, nor was it possible to select any option to enable protection.

Just in case, you can sometimes get round this by renaming the MBAM executable. No idea if this would help with your particular problem - and hoping I don't need to find out anytime soon!

 

[Porthos]

Just in case, you can sometimes get round this by renaming the MBAM executable.

You have to turn off self-protection first. It is on by default in 3.0.

 

[Mick]

You're absolutely correct - I should have said so. Props.

 

[Porthos]

You're absolutely correct - I should have said so. Props.

 

[NYJimbo]

N & P did the job in less time and guaranteed complete removal. No guessing if it would or not.

Until the client re-infects it tomorrow. Then you have to N&P again...

 

[Porthos]

Until the client re-infects it tomorrow. Then you have to N&P again...

That's why I image most all the computers going out of the shop.

 

[GTP]

Disappointing that this bug was able to kill Malwarebytes so easily though.

 

[Porthos]

Disappointing that this bug was able to kill Malwarebytes so easily though.

Was the paid version of MB 3.0 on this computer before the problem started? Did Chrome and/or Firefox have ublock installed and were they using those browsers?

 

[NYJimbo]

It would open a tab in the browser called http://disable Malwarebytes=(series of numbers, different each time) .

I didn't even know a browser string, via http protocol, could do this sort of thing.

 

[ComputerRepairTech]

After rethinking this whole scenario and in consultation with the client we have decided to Fabs and N&P rather than waste time screwing around trying to find and remove it.
Its Windows 10 so quick and easy and we know it will be clean afterwards.
Better to be safe than sorry.

Thanks everyone for the helpful suggestions.

Edit: BTW. Whatever this thing was/is it had no problem disabling Malwarebytes.
It would open a tab in the browser called http://disable Malwarebytes=(series of numbers, different each time) and two seconds later Malwarebytes would have an exclamation point on the tray icon.
Hovering on the tray icon revealed "All Protections Disabled"
Malwarebytes would not open to the GUI, nor was it possible to select any option to enable protection.

Something interesting like this should really be saved in a backup and perhaps loaded up in a VM so I can take a look at it =P