skip to main content

Start with malwarebytes?

14 years ago

I have a friend whose laptop has slowed to a crawl. She says she has no antivirus or anti-malware program on it. I want to download and install Malwarebytes for her and then Avast. Is there anything else I should do first? Defrag? Disk Clean Up? I'm no pro by any means, but I thought if I could run those two, it might help her.

Sort by:Oldest

Comments (18)

azinoh
14 years ago
If you suspect her computer is infected, I would install MBAM and Avast in SAFE MODE and then run the scans. A defrag wouldn't hurt.
pfmastin
Original Author
14 years ago
Thank you azinoh, I didn't know I could install them in safe mode. Thank you so much.
Related Discussions
Should Malwarebytes run at startup?
Q
Comments (3)
MalwareBytes free updated here right before christmas. Its now Pro version & does run at start up with some added protection - I assume for 30 days. I maybe was tired or busy when it updated, and possibly didnt pay attention & got pro by accepting it quickly.
...See More
Major problems via Malwarebytes
Q
Comments (15)
Here it is. I don't understand one iota of what's in this log file. Thanks, Tom Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:20:54 PM, on 5/14/2009 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Plextor2000\AFSSVC.EXE C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINNT\System32\CTSvcCDA.exe C:\WINNT\System32\svchost.exe c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\devldr32.exe C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE C:\WINNT\system32\RUNDLL32.EXE C:\WINNT\system32\LVCOMSX.EXE C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Qualcomm\Eudora\Eudora.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank O2 - BHO: HelperObject Class - (00C6482D-C502-44C8-8409-FCE54AD9C208) - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll O2 - BHO: Yahoo! Companion BHO - (02478D38-C3F9-4efb-9B51-7695ECA05670) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - (8E718888-423F-11D2-876E-00A0C9082467) - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: Yahoo! Companion - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: SnagIt - (8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3) - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [AudioHQ] C:\Program Files\Creative\SBLive2k\AudioHQ\AHQTB.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user') O4 - Global Startup: APC UPS Status.lnk = C:\Program Files\APC\APC PowerChute Personal Edition\Display.exe O16 - DPF: (156BF4B7-AE3A-4365-BD88-95A75AF8F09D) (HPSDDX Class) - http://www.hp.com/cpso-support-new/SDD/hpsddObjSigned.cab O16 - DPF: (17492023-C23A-453E-A040-C7C580BBF700) (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: (2BC66F54-93A8-11D3-BEB6-00105AA9B6AE) (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab O16 - DPF: (56762DEC-6B0D-4AB4-A8AD-989993B5D08B) (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: (644E432F-49D3-41A1-8DD5-E099162EEEC5) (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL mizkjs.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: afssvc - Plextor Corp. - C:\Program Files\Plextor2000\AFSSVC.EXE O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINNT\System32\CTSvcCDA.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\System32\HPHipm11.exe -- End of file - 5854 bytes
...See More
malwarebytes fixed my computer
Q
Comments (6)
Thanks for the advice, and I am heading over to the link now. I have Home XP, 2004 HP pavilion a410e, and as my PC was working fine after installing the power supply, but started slowing down a day or day and half later believe that is when I got infected. I have used Norton for 6? years without trouble and is on auto update. However, it is possible that the trojan/virus did something there. I tried to contact Norton and was very distressed to find that it was difficult to reach them through site or email. It took several tries for me to even find the contact site, or the discussion forum; but then couldn't register or use chat to speak with a tech. That was probably on my end and I needed to adjust some setting = but it sure didn't set well with me. thanks again, heading to link!
...See More
Can't download Malwarebytes
Q
Comments (4)
Usually it's a two step process - a file is downloaded to your PC, then it needs to be "run" If you're using Firefox, after the download, click on the downward pointing arrow at the upper right on the tool bar. Then you should see a file that ends in .exe. Click on that, that will install the product. If using Chrome, a bar appears on the bottom that shows the download's progress. When it's complete, click on the box for the file to run. Either way, the same. Where it downloads to, the desktop or a different folder, is of no consequence so long as you access it from the browser when the download shows as having finished.
...See More
kudzu9
14 years ago
Don't worry about doing any maintenance on the computer until you have eliminated the viruses that I am sure are on it.
mike_kaiser_gw
14 years ago
There's lots of reasons computers slow that aren't related to viruses. Without sounding judgmental, I've found those who aren't particularly computer savvy, tend to install everything suggested to them. Those are often the folks with a half dozen tool bars in their browser... ;-)
kudzu9
14 years ago
mike-
I agree that computers slow down for other reasons, like too many toolbars and programs running in the background. However, the OP also says that this computer has been running with no anti-virus, so I thought the odds were high that it was infected. After it's cleaned, then maybe we can help the OP sort through the other things that may be wrong with it.
mikie_gw
14 years ago
I recently tried the emsisoft virus/spyware scanner. Impressed actually.

They have a good page read on TOOLBARS ...

Here is a link that might be useful: http://www.emsisoft.com/en/kb/articles/tec120110/
john_wc
14 years ago
Install Avast and select the Boot Time scan. This scan interrupts the Windows restart and does a raw scan of the hard drive. It should find anything and everything. Leave Avast installed as it includes a resident shield which offers real-time protection.
mikie_gw
14 years ago
On a comp that has had no av program, Microsoft Security Essentials is the perfect choice. Install and forget about it. Rather than see all those crazy all the time updating popups from other av programs.
munch
14 years ago
Is Microsoft Security Essentials part of Microsoft 7,or do you have to download from a different site? Thanks.
BC.
bob414
14 years ago
It's not part of windows. Download it here.
pfmastin
Original Author
14 years ago
Thank you for all the helpful advice, everyone. Does everyone agree that I should install/run MWB in safe mode first and go to Lanzdown if viruses are found. Otherwise, would it be ok to clean up whatever is found (other than viruses), do a defrag then install MSE?
mikie_gw
14 years ago
Your plan sounds ok to me.. I use MWB & SuperAntispyware.. superantispyware seems best choice lately. That emisoft scanner.. its good for root/boot kits.. its like 100mb download & 70mb update.. slightly complicated to use first time.
pfmastin
Original Author
14 years ago
Just a quick update...I like to let people know "what happened". All went well. I installed MWB (although it wouldn't allow me to access the internet in safe mode ("unable to open page"). There were no viruses, removed lots of adware, defragged,cleared cache and installed MSE. Machine is running faster. I just want to run a Secunia scan and type out a "how to" list for my friend. Thank you SO much!
mike_kaiser_gw
14 years ago
Just as an FYI, you need to choose "safe mode with networking" if you want to use the Internet.

Glad to hear there were no viruses. I hope you installed an AV program for your friend.
pfmastin
Original Author
14 years ago
Hi mike,
Thanks for the hint on using safe mode.

Oops, I didn't realize I needed an AV program with MSE. Does it just remove malware? If so, would Avast be all right?
bob414
14 years ago
MSE is anti virus and very good at it.
mikie_gw
14 years ago
MSE beta 4, is even better :)
(but not as pretty)
pfmastin
Original Author
14 years ago
Thank you both...done! And her computer is running faster. Yay!

Related Stories

KITCHEN DESIGN Houzz Quiz: What Kitchen Countertop Is Right For You?

By Jennifer Ott Design

The options for kitchen countertops can seem endless. Take our quiz to help you narrow down your selection

Sponsored

NME Builders LLC

2 Reviews

Remodeling Company in New Albany, Ohio

More Discussions

Tired of MS Office 365 Monthly Fees?

1