{"id":4708,"date":"2012-08-25T13:26:19","date_gmt":"2012-08-25T17:26:19","guid":{"rendered":"http:\/\/thundercloud.net\/infoave\/new\/?p=4708"},"modified":"2012-08-25T13:26:19","modified_gmt":"2012-08-25T17:26:19","slug":"the-best-way-to-use-malwarebytes-to-remove-malware-and-other-unwanted-software","status":"publish","type":"post","link":"https:\/\/www.thundercloud.net\/infoave\/new\/the-best-way-to-use-malwarebytes-to-remove-malware-and-other-unwanted-software\/","title":{"rendered":"The best way to use Malwarebytes to remove malware and other unwanted software"},"content":{"rendered":"

Marsha has Babylon and possibly all kinds of other malware
\n<\/strong><\/span>All of a sudden I’ve got Babylon search on here and I can’t get rid of it. I’ve even found that when I try to download something from 4Shared, a My Start page pops up and I can’t get anything to download. Have you got any ideas on either of these things? Both are a real pain. Thanks in advance.<\/p>\n

Our answer
\n<\/span><\/strong>Your best bet is to download Malwarebytes (free edition will work fine for you). The best and least confusing place to download Malwarebytes free is File Hippo. Here’s the link to the page and also the direct download link:<\/p>\n

http:\/\/www.filehippo.com\/download_malwarebytes_anti_malware\/<\/a><\/p>\n

Or download it directly from:<\/p>\n

http:\/\/www.filehippo.com\/download_malwarebytes_anti_malware\/download\/37befa70d5918267ab7ff946c445c118\/<\/a><\/p>\n

Install it and let it update but stop the scan. We want you to run it in Chameleon mode. And here’s how you do that:<\/p>\n

After Malwarebytes has been installed press Windows Key + E and navigate to C:\\Program Files (X86)\\Malwarebytes and open the folder. Inside that folder is a subfolder called “Chameleon”. Open the Chameleon folder. You’ll see a dozen or so exe files with names like Firefox.exe, Rundll32.exe, Logon.exe — etc. Despite the name you see — they’re all Malwarebytes disguised as something else to fool the malware on your system.<\/p>\n

Click on any one of the exe files in that folder. A Command prompt will open instructing you to “Press any key”. Press a key and the rest is automatic. Once the program starts running you’ll see various messages appear in the Command dialog. One of them is “Killing known malware processes” and this may take some time — depending on how infected your computer is.<\/p>\n

When that is done, you’ll see the Malwarebytes program open and start scanning your computer. When it’s done scanning (10 to 20 minutes) you’ll see a list of malware which will be identified as PUP, Adware, and Trojan. All the Adware and Trojans found will be pre-checked, you’ll need to manually check the boxes next to those items identified as PUP (Potentially Unwanted Programs). Make sure you check them all — then click “Remove selected”. You be prompted to reboot your computer.<\/p>\n

A note about Chameleon mode — Running Malwarebytes in Chameleon mode is similar to running it in safe mode and a lot less hassle for you.<\/p>\n

After you’ve rebooted your computer, open your browser and click on Tools \/ Internet Options \/ Programs \/ Manage Add-ons. Disable Babylon in that dialog (and anything else you don’t recognize). In the Manage Add-ons you’ll see “Search Providers” – Disable Babylon and select Google or Bing (or whatever you want) there then close the dialog and close your browser.<\/p>\n

You should be free from the curse of malware!<\/p>\n","protected":false},"excerpt":{"rendered":"

Marsha has Babylon and possibly all kinds of other malware All of a sudden I’ve got Babylon search on here and I can’t get rid of it. I’ve even found that when I try to download something from 4Shared, a My Start page pops up and I can’t get anything to download. Have you got any ideas on\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4708"}],"collection":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/comments?post=4708"}],"version-history":[{"count":1,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4708\/revisions"}],"predecessor-version":[{"id":4709,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/posts\/4708\/revisions\/4709"}],"wp:attachment":[{"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/media?parent=4708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/categories?post=4708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.thundercloud.net\/infoave\/new\/wp-json\/wp\/v2\/tags?post=4708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}