Search Results for 'malwarebytes'

Answers to your questions:

Can’t have more than one IE6 window open, otherwise it goes slow.
‘It’ being the entire system – all user accounts.

You don’t get any error messages, do you?
No, no error messages of any kind – except for when I close the IE window (the only area of the screen that doesn’t hourglass) – then I get the usual “this application has stopped working” and “do you want to send an error report?” popups.

And for general reports: have you looked in the Event Viewer?
I think I must be like the auto mechanic who drives a jalopy – I pay so much attention to everyone else’s systems that I sometimes slack off mentally with my own. I don’t usually check the Event Viewer on my own system, but there ARE several Application hang errors present. I “sent one of them to Microsoft” – if that’s where they go. I don’t know if anybody wants to see one of them here, but I’ll include it at the bottom of my post.

Do you have all other security updates for XP and IE prior to the November batch?
Yes.

Has Internet Explorer 6 been stable and working all the time until this?
Yes

Have you checked the PC with the latest definitions for your anti-virus and anti-spyware software? [/b]
Yes – I currently use Avast! antivirus and a combination of Malwarebytes and Spybot malware detectors. AdAware too, occasionally.

The Application Hang error in Event Viewer:

Event Type: Error
Event Source: Application Hang
Event Category: (101)
Event ID: 1002
Date: 11/15/2008
Time: 9:54:36 PM
User: N/A
Computer: MOORE
Description:
Hanging application iexplore.exe, version 6.0.2900.5512, hang module hungapp, version 0.0.0.0, hang address 0x00000000.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 48 61 6e 67 ion Hang
0010: 20 20 69 65 78 70 6c 6f iexplo
0018: 72 65 2e 65 78 65 20 36 re.exe 6
0020: 2e 30 2e 32 39 30 30 2e .0.2900.
0028: 35 35 31 32 20 69 6e 20 5512 in
0030: 68 75 6e 67 61 70 70 20 hungapp
0038: 30 2e 30 2e 30 2e 30 20 0.0.0.0
0040: 61 74 20 6f 66 66 73 65 at offse
0048: 74 20 30 30 30 30 30 30 t 000000
0050: 30 30 00

Might I also suggest Malwarebytes Anti-Malware? I’ve been very impressed with it.

Download the version (from the button on the left) and install, then go to the Update tab first to Check for Updates, update, then back to the Scanner tab to Scan…

BATcher

Plethora means a lot to me.

XPAntivirus is a particularly nasty piece of malware.
Hans.
It is that and more.
I know about malwarebytes as I use it at home and work.{ we are only a small company so we don’t have the usual restrictions on our computers none at all really}
I used malwarebytes to remove it from his computer I think I got it all only time will tell.I also did a manual search.
But my main reason for posting was the method of infection. By just clicking on the link in the results page.Dose this indicate a fake web page??
Gus..

XPAntivirus is a particularly nasty piece of malware.
Malwarebytes Anti-Malware has recently gained a good reputation fighting it; there is a free version and a paid version (the latter has more features).

It would surprise me if this was not a false positive (with the free edition of AVG?), because there were no complaints at home, where I have ZoneAlarm Internet Security. Malwarebytes Anti-Malware says it’s clean, and if I say nothing further it will mean that Spybot Search and Destroy and Ad-Aware have also come up with no problems with SIW…

I will try at work tomorrow, where we have AVG Network Edition (and the less said about recent update problems with this, the better…)

BATcher

Plethora means a lot to me.

Alan

I’ve had good success with Malwarebytes AntiMalware, but I don’t know if you can run it…

BATcher

Plethora means a lot to me.

It’s part of the MyWebSearch search toolbar that is generally described as spyware. Please run a thorough scan with one or more anti-spyware programs such as
Spybot Search & Destroy
Malwarebytes Anti-Malware
Lavasoft Ad-Aware
Windows Defender
(all free)

You’ve probably been infected with AntiVirus2008 or one of its variants, one of the most unpleasant bits of malware around. Even declining to install is enough to become infected

Malwarebytes has a good reputation in fighting it; there’s a fully functional free version.

Hi,

Thanks for getting back quickly. Neither AdAware, Spybot, or MalwareBytes AntiMalware saw these. I am attaching a screenshot of the Prevx CSI report (btw, I’ve contacted them and they have *no idea at all* whether these are legit Vista files or the bad stuff). This report shows the *wrong* location of the files, which are not in sys32 but are in sysWOW64. Also, the original Microsoft version of these files is in the same directory, and each of these are much larger (eg, ipconfig is 26kb, and makecab is 96kb), while all of these are 8kb or so. I have a HijackThis log, and a Prevx CSI log, in txt format if needed, as well as screenshots of the directories showing these V files, but these files exceed the 100k limit in this forum.

Further to what Hans suggests, there’s a good writeup on how to use Malwarebytes Antimalware…

BATcher

Plethora means a lot to me.

I’d also try the program Malwarebytes Anti-Malware mentioned by Sinjin. It’s rapidly gaining a reputation for being able to remove nasties where other programs fail. The free version is fully functional, but the paid version has more features.

The SmitFraudFix from the links on the post Hans made will work but you should run RootKit Revealer after as this nasty will open the door for other malware. If you find the “tdss” root kit Malwarebytes Malware remover should take care of it. I worked on a laptop with these issues this last weekend. This type of malware is making me keep a current image available as it can be quicker to refresh the OS-Program File partition than sweating out the “can I fix it” question. Best of luck.

I would hope whatever antivirus program you have running would have caught any “nasty”. However, if that is not the case for you, download and install Malwarebytes’ Anti-malware and then run a Quick Scan. This is now one of the best anti-malware programs available. I’ve used it many times to fix infected machines that were loaded with trojans, spyware and malware. Virus infection is another issue and needs to be addressed with an antivirus program.

Great. That program ( Malwarebytes’ Anti-Malware ) is not mentioned much in these forums, but I’ve been using it for quite some time, and it certainly comes highly recommended on other sites.

Malwarebytes’ Anti-Malware has been used by many to resolve this problem. Download and install the free version and then follow the instructions on this page .