Author Topic: It's not a valid windows 32bit application (Read 13,906 times)

Contro · « **on:** February 13, 2014, 01:45 AM »

As I result of a virus the past week I think i am still alive and trying to solve some little problems remaining.

One of this problem are two or perhaps more executables that don't go after that damn virus.

The message is

<program> it's not a valid windows 32 bit application
<programa> no es una aplicación win32 válida

What can I do to recover those affected executables.

One of them is the program MaxMax.exe

Target · « **Reply #1 on:** February 13, 2014, 02:42 AM »

reinstall?

Contro · « **Reply #2 on:** February 13, 2014, 02:50 AM »

Quote from: Target on February 13, 2014, 02:42 AM

reinstall?

Sure is an answer. The only one ?
I have mirror copies, but never applies. Always trying to go against the river.......
I would like more sophisticated answers

wraith808 · « **Reply #3 on:** February 13, 2014, 03:14 AM »

Sometimes the simplest answer is the correct one.

skwire · « **Reply #4 on:** February 13, 2014, 03:14 AM »

I think Target meant to reinstall the application that won't launch...not your whole operating system.

Contro · « **Reply #5 on:** February 13, 2014, 03:39 AM »

Quote from: skwire on February 13, 2014, 03:14 AM

I think Target meant to reinstall the application that won't launch...not your whole operating system.

Yes. I know. I tried ccleaner and finally i am reinstalling. I am with this virus from 08.02.2014. Time to work !!!!!!!
Reinstall, but first delete the exe affected or may fail the reinstallation.....

Best Regards

Stoic Joker · « **Reply #6 on:** February 13, 2014, 12:55 PM »

Quote from: Contro on February 13, 2014, 01:45 AM

What can I do to recover those affected executables.

OS isn't mentioned, but if it is Win7 Previous Versions may be an option if it's enabled.

mouser · « **Reply #7 on:** February 13, 2014, 12:58 PM »

Best thing to do if you get infected by a bad virus (one not known to be easily and reliably cleanable) is restore a system backup that you know is clean, or reinstall windows -- rather than try to "clean it"

Contro · « **Reply #8 on:** February 13, 2014, 01:53 PM »

Quote from: mouser on February 13, 2014, 12:58 PM

Best thing to do if you get infected by a bad virus (one not known to be easily and reliably cleanable) is restore a system backup that you know is clean, or reinstall windows -- rather than try to "clean it"

Yes, yes and yes. You are right . But, I am in reverse mode. Save the system !!!!!!!!!!!!!!!!!!!
I recognized is one of my many stupid attitudes.

Contro · « **Reply #9 on:** February 13, 2014, 01:56 PM »

The last thing is Malwarebytes antimalware.
"C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe"
I can't find that executable.
I can't reinstall
what can i do ?
Precisaly i think the tool allows me to neutralize the virus was : CureIt. Seems of malwarebytes too.
$:-\$

Contro · « **Reply #10 on:** February 13, 2014, 02:06 PM »

I have a lot of mbam.exe, but in other parallel systems with xp. But in the only windows 7 system dissapeared !!!!!!!!
I was in an antivirus forum but the way they usually offer support don't go with me because the tell me : do this, do , do , do and gives no explanations at all. So finally i decided to do "searching" the web.....

Now the virus is dissapeared but i have this final circunstance.

tomos · « **Reply #11 on:** February 13, 2014, 02:10 PM »

Quote from: Contro on February 13, 2014, 01:56 PM

I can't reinstall

why not?

Contro · « **Reply #12 on:** February 13, 2014, 02:21 PM »

Quote from: tomos on February 13, 2014, 02:10 PM

Quote from: Contro on February 13, 2014, 01:56 PM
I can't reinstall

why not?

That's the question . I was documenting for you :

Well. I have to give you my data.
I've tried also uninstall with revo free.
Now when i try to install :
see screenshot.
I translate the relevant points.
I don't remember the level of uninstalling with revo. Perhaps are rests in the windows registry.

Now the screenshot

Contro · « **Reply #13 on:** February 13, 2014, 02:24 PM »

Error

An error occurred when trying to create a file in the target folder:
The installation program couldn't create the folder
'c:\programData\Malware......

Error 183: It's not possible to create a preexisting file.

Make click to retry , omit to exclude this file (not recommended) , o in Cancel to cancel the installation.

cance ..... Retry ...... Ignore.....

tomos · « **Reply #14 on:** February 13, 2014, 02:26 PM »

Maybe this might help (?)

Quote from: Jibz on February 06, 2014, 03:03 PM

Quote from: crabby3 on February 06, 2014, 01:29 PM
Maybe uninstall/reinstall is needed?

Looks like it, plus some rebooting, if you read for instance this forum post:

https://forums.malwarebytes.org/index.php?showtopic=63720

you're missing the step with mbam-clean.exe

Contro · « **Reply #15 on:** February 13, 2014, 05:30 PM »

Trying.
Mine is free version of malwarebytes antimalware. I suppose apply too to the free version. All my antivirus are free. the main avast! free.

Doing the cleaning

Contro · « **Reply #16 on:** February 13, 2014, 06:28 PM »

Not luck day.
Continues the same message after reinitiate.
Perhaps is in the registry. What chains can I look for ?

Candidates strings :
Malwarebytes
Anti-Malware
mbam.exe
mbamgui.exe
mbamservice.exe
mbam*

tomos · « **Reply #17 on:** February 13, 2014, 07:51 PM »

^ I say you need help from the malwarebytes forums

Quote from: Contro on February 13, 2014, 02:06 PM

I was in an antivirus forum but the way they usually offer support don't go with me because the tell me : do this, do , do , do and gives no explanations at all. So finally i decided to do "searching" the web.....

-
I removed a virus last week - some things got temporarily messed up from the fixes recommended, but in general I'd say you're better off going with the instructions from the antivirus forum -- but that's easy for me to say now ;-)

*****
Do you have a recent image of the OS partition(s) ?

Contro · « **Reply #18 on:** February 13, 2014, 08:23 PM »

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\MBAMShlExt was not possible to elliminate. Searching mbam.

Now with malwarebytes
in the registry

in the system
c:\ProgramData\Malwarebytes , no access
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware, no access

I paciently take control of administration rights.
I decided not delete the prior directories

i elliminate two entries about malwabytes, but I forgot to capure the key....

so . By fear i reiniate again and try again.

This virus take possession of several folders, and seems put to zero the groups of users of some files. And those files was not possible to open. After about 48 hours i haven't observed the virus. But may be some strange behaviours stay in some place......

After reinition i will try to install again and inform you.

Owwww. i find the string malwarebytes in :
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware
and this other one possibly old
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (portable)
error opening the last key
HKEY_USERS\S-1-5-21-1755684145-2953533415-1880356850-1000\Software\Malwarebytes' Anti-Malware

Contro · « **Reply #19 on:** February 13, 2014, 08:25 PM »

Quote from: tomos on February 13, 2014, 07:51 PM

^ I say you need help from the malwarebytes forums

Quote from: Contro on February 13, 2014, 02:06 PM
I was in an antivirus forum but the way they usually offer support don't go with me because the tell me : do this, do , do , do and gives no explanations at all. So finally i decided to do "searching" the web.....
-
I removed a virus last week - some things got temporarily messed up from the fixes recommended, but in general I'd say you're better off going with the instructions from the antivirus forum -- but that's easy for me to say now ;-)

*****
Do you have a recent image of the OS partition(s) ?

Do you read my mind ?

Let me reinitiate and try again . if no results i will go malwarbytes forums but will inform you here too about final results.

Best Regards

tomos · « **Reply #20 on:** February 13, 2014, 08:32 PM »

Quote from: Contro on February 13, 2014, 08:25 PM

Do you read my mind ?

I hope so

Contro · « **Reply #21 on:** February 13, 2014, 09:22 PM »

Quote from: tomos on February 13, 2014, 08:32 PM

Quote from: Contro on February 13, 2014, 08:25 PM
Do you read my mind ?

I hope so

It's raining again. La la lá, la la lá. It's raining again.
ejem. Is running again.
Now , aparently, i have the system up and running 99.999%....

Best Regards

Now to work and continuing studying javascript and AHK, and DOM, and COM, and .....