Install Malwarebytes Anti-Malware on PCs where it is blocked

Martin Brinkmann
Jan 15, 2013
Updated • Jan 15, 2013
Antivirus, Software
|
5

While most malware ignores software installed on a PC it is trying to infect, some have been designed to block security software from running or being installed on a system it has successfully infected. Malware designed this way tries to make it harder for admins and users to disinfect the system or even detect that malware is running on it. Various techniques are used to achieve that goal, from redirecting security software websites to other sites so that antivirus solutions can't be downloaded that easily to monitoring running processes to automatically kill processes created by security software.

Malwarebytes, the makers of the popular Anti-Malware application for Windows have created a program they call Chameleon for these situations that can install the security software in cases where the program is blocked from being installed or run on the system.

Start the Windows Help file once you have downloaded and unpacked Chameleon on an infected system. You may notice many common file names such as firefox.exe, iexplore.exe or rundll32.exe in the folder which all have the same size. All these files are disguised Malwarebytes Anti-Malware instances that you can try to run using the help file.

When you open the help file you will notice the Chameleon buttons which you should try one after the other until you notice a black DOS window appearing after an UAC prompt. If it does it means that Chameleon successfully launched. You need to press a key in that window to start the installation of Anti-Malware on the system.

You are then taken through the normal installation procedure of the program after which you can run a system scan to detect and remove malware running on the PC at that time.

Just click on the first button below and see if it runs. You'll know it's working if a black DOS window appears, slays malicious programs, and then starts Malwarebytes Anti-Malware. If the first button doesn't work, try the next one. If that one doesn't work, just keep trying until you find one that does! Then use Malwarebytes Anti-Malware as you normally would to run a Quick Scan and remove the malware.

Verdict

If you are in a situation where malware is blocking the installation of antivirus software, you may want to give Chameleon a try to sneak past the defenses to get a security solution installed on the system. While it may not work in all cases, it is definitely worth a try as it will install one of the best cleaners on the system if it succeeds.
Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. rickxs said on January 16, 2013 at 10:53 pm
    Reply

    pretty sure it always came in M/B – I have copied the folder in the past to USB
    for clients rogueware removal

  2. Krishna said on January 16, 2013 at 10:09 am
    Reply

    Thanks for this wonderful article. Never know when we may need it.

    BTW Popular Searches pane is cutting the article right upto DOS screenshot. Nothing worked. Couldn’t read but could make out. Chrome 24.

  3. TheRube said on January 16, 2013 at 1:23 am
    Reply

    . . . simply Put . . . I LOVE MBAM!!!
    (Nothing really compares to it!)
    I LOVED the free version it so much that I installed MBAM PRO.

  4. Ray Radbod said on January 15, 2013 at 8:15 pm
    Reply

    Hmmmm, to defeat this all that’s needed then is for the bad guys to toss in something that’ll prevent chm files from opening??

    While Chameleon is a noble effort, Malwarebytes needs to also adopt the strategy (like SurfRight and others) and create a builder for booting from USB or optical media. Probably something that could gain momentum in their paid-for Pro version.

  5. Injeun said on January 15, 2013 at 8:13 pm
    Reply

    Nice article. Thanks for the heads up on this interesting software.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.