Malwarebytes question

[DemReadingDU]

I have a problem computer I am trying to fix because of this error, originally posted here
http://www.democraticunderground.com/discuss/duboard.php?az=show_topic&forum=242&topic_id=29181

My question concerns how to run Malwarebytes from the flash drive on the problem computer. I am technically challenged so bear with me please.

1. Do I download the Malwarebytes link to a good computer and run the executable file mbam-setup.exe on the good computer so it creates a Malwarebytes folder. Then do I transfer the entire Malwarebytes folder to the flash drive? Then would I run mbam.exe from Malwarebytes folder on the flash drive to open Malwarebytes to scan the 'c' drive?

or
2. Do I download the executable file mbam-setup.exe to a flash drive and run the mbam-setup.exe so it creates the Malwarebytes folder to the flash drive or 'c' drive? Then I would run the mbam.exe from the Malwarebytes folder (either flash drive or 'c' drive)

or
3. maybe there is a better way to run Malwarebytes?


Thanks for your help.

[CK_John]

1. You can specify where you what the program to reside during setup. Just click on browse and select

where the program should be placed. (On the flash drive or you c: drive). This choice appears after the accept page.

1) Use Ccleaner to uninstall any current version on your system. Click on "tools" on left and highlight installed and look for MalWareBytes.

2) I would suggest download to the desktop (or copy the mbam-setup to the desktop) and rename it by removing the dash and leading m. (bamsetup)

3) double click "bamsetup" and install.

4) MalWB will create a shortcut pointing to anyplace you put the program (flash drive).

[DemReadingDU]

2. another question

so I want to setup/expand the Malwarebytes program and folder on the flash drive, not the 'c' drive of the problem computer?


if that is the case to put the Malwarebytes folder on the flash drive, why don't I copy the folder c:\program files\Malwarebytes from my good computer to the flash drive?
Then run Malwarebytes application ( mbam.exec ) from the Malwarebytes folder on the flash drive to clean the problem computer?

[CK_John]

3. Just copying a program file doesn't adjust the registry and other internal settings.

The problem you are trying to fix is not where it runs from, but the virus usually is keyed in on the name of the antimalware tool. So the virus will try and prevent antimalware from being installed.

Why make things more complex than need be? Keep it simple is the best rule.

Do you have Ccleaner and do you have any installed versions (or partial versions). I told you to use the uninstaller in Ccleaner because some virus block you from using the normal add/remove in the control panel.
If you are sure none exist then Ccleaner is not needed.

To me the flash thing is overkill. Change the name and install it, then run your antimalware program.

The program will either install or be blocked. It will find the rootkit or not if it can run. Quit thinking it out and do it.

[DemReadingDU]

4. I ran Ccleaner

Ccleaner did not find Malwarebytes. I am not familiar enough with Ccleaner to understand what all it should remove, but it did not show Malwarebytes as an application (the uninstall of Malwarebytes must have worked).

Next, I loaded mbam-setup on the desktop and changed name to bamsetup. When I click on the icon (bamsetup) to install Malwarebytes, the installation completes as I see the icon for Malwarebytes. I click on the icon for Malwarebytes, but the mbam.exe will not execute successfully.

I went to the task manager and ended mbam.exe

I then went to c:\program files\Malwarebytes folder and changed name of mbam.exe to fluffy.exe. I doubleclicked on fluffy.exe, and the Malwarebytes application is performing a scan.

Thanks for your assistance!

[CK_John]

5. Good on you! I hope it finds the problem rootkit, it will be in red. Follow instructions to

remove or fix and check quarantine when your done. I leave mine for a week and then delete them from quarantine.

[DemReadingDU]

8. Malwarebytes found Rootkit.TDSS and Trojan.DNSchanger, also

I ran SuperAntiSpyware, and it found Rootkit.Agent/Gen-Alureon and Rogue.SmartProtector

Nasty stuff, got all those deleted (I hope), but I will recheck tomorrow and see how the computer runs. At least the GoogleInstaller error message doesn't display and there are no more audio ads.

Thanks for your help!

[defendandprotect]

10. Why aren't these things immediately deleted?

Why, for instance, a Virus Vault?

Why keep these things in the computer?

[RC]

6. Any time you are trying to get rid of suspected mal ware, go into Safe Boot and

work from there. Less likely to wake up the bad stuff. If you don't, you may think you are clean when you actually are not.

Use safe boot with Networking, and you can then download and install most tools you find you might need while fixing the problem.
Some anti-virus programs will not work in Safe Boot mode - MacAfee is one. Another reason not to use it.
Malwarebytes does install and run in safe boot.

[DemReadingDU]

7. Well, I tried to go to SafeMode

but I kept missing the beep to hit F8 for SafeMode. So I ran the fix-it programs from the booted up computer. I'll see how things run tomorrow. If still issues, will try to re-run fix-it programs from SafeMode. Thanks for replying.

[RC]

9. Forget the beep. Keep hitting the F8 key as soon as it starts to boot up.

Some computers are easier than others to boot into Safe mode.

[defendandprotect]

11. I'm in sympathy . . . when I get into Safe Mode, everything is so distorted and off center

that I can't work anything or do anything!!???