Windows Launcher? 1

[Noway2]

All,

My mother is having some strange issues with her computer that seem to be affecting the email and internet access. It is asking for passwords that it doesn't normally ask for, doesn't perform actions when it should, and crashes and shuts down unexpectedly. Her problem description, which I included below, mentions a "Windows Launcher" which I have never heard of and doesn't appear to be a valid application based on name searching I have done.

I am thinking of having her run HijackThis and having the log analyzed by one of the sites recommended in another thread, but I also wanted to post here to see if anyone has any specific suggestions or ideas in light of the description.

Description is as follows:
Yesterday as you know I couldn't send email in the AM.
Every time I tried to send it I was asked for a pass word. Finally found the pass word that was used when this thing was originally set up and put that in. Of course it wouldn't be accepted. Got mad cause the attempts made we a little late getting ready for work so I shut it down and got on my way. When I came home yesterday I managed to forward the email to you. Then the puter really went crazy and shut down three times by itself under the pretense of saving itself. OK. So finally I inserted the recovery disc and it booted up again. Most things seemed to work with the exception of something called the windows launcher.

That had been malfunctioning off and on for the past several weeks but it didn't seem to bother me so I ignored it. Then when I shut the puter down for the night it wouldn't shut off so I had to do it manually. This morning I turned it on and it again said the launcher wasn't working and it had locked up. So I again put the recovery disc in and it tried to resolve the problem. At the end of the recovery it said that it had been taken back to 9/28/09 status. Don't know if that is good or not since the launcher didn't work before that period of time.
Ran a virus scan and nothing showed up. So now I'm again trying to write and send you an email with the hope it will work.

 

[goombawaho]

Just have her run MalwareByte's Anti-Malware and/or GMER and that will show you/clean up malware if it's bugging her.

http://www.gmer.net/

http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

After system is clean, have her run an SFC /SCANNNOW to make sure windows files are not messed up.

 

[Noway2]

Update: apparently the computer behavior got so bad and wouldn't even boot up that it had to go to the computer hospital. Not sure what the diagnosis or prognosis is yet.

Thank you for the suggestions. I think that once this gets resolved that it would be prudent to run a periodic check.

 

[goombawaho]

That's a huge understatement. Once per month, run the MBAM scan even if this problem had nothing to do with Malware. It's how you keep your system clean - that and having an up to date antivirus program.

 

[2ffat]

Once per month, run the MBAM scan...

Heck, us paranoid types run a different scanner each day. I run MBAM on Thurdays. ;-)


James P. Cottingham
^{I'm number 1,229!
I'm number 1,229!}

 

[goombawaho]

You ARE paranoid, unless you're visiting all those "over 18" or gambling web sites which are notorious for throwing junk onto your system - many of which are NOT caught by traditional AV.

For the average user, I can't recommend anything more often than a weekly scan if you have kids or a monthly scan if you're visiting "normal" sites like your bank and checking your online e-mail.

With that said, it wouldn't hurt to check as much as you want. Just a little more disk thrashing.

 

[2ffat]

Who's paranoid?? .... Are you watching me? ... Who's that over there? .... Shh, THEY may be reading this!!....

Actually, virii can be anywhere. I visited a web site for a clock shop last month and up popped a warning about my computer having a virus then offered to remove it for "free."

My boss visited the NY Times web site and got the same thing.

Hmmm. Maybe I AM paranoid for good reason.




James P. Cottingham
^{I'm number 1,229!
I'm number 1,229!}

 

[kjv1611]

Yeah, exploits hijacking all sorts of websites are becoming more and more common every day.

Besides that, there's always the random pingers out there, pinging to their hearts content, or until they find a victim or three.

--

"If to err is human, then I must be some kind of human!" -Me

 

[Noway2]

I am pretty certain in this case, the "over 18" sites are a no but gambling, at least the ones that have a "free" section to hone your skill, are a definite maybe.

Finally got word last night that the PC repair place has been running tests on it for the last few days and was finding that it would shut down in the middle of the tests. Turns out that problem appears to have been caused by a malfunctioning memory module.

Not sure if there is any malware causing additional problems, but at least it has been determined that the hardware is causing a fair bit of grief.

 

[goombawaho]

Right - just gabbing a bit there. But DO have her install and run a Malware scan periodically. You choose the period.

 

[manhunter2826]

unless you're visiting all those "over 18" or gambling web sites which are notorious for throwing junk onto your system - many of which are NOT caught by traditional AV.

Just out of interest, what is the reason for this non-detection? And, what to do about it then if you inadvertently hit an Adult website. I currently use Avast and it's very good. Thanks.

 

[goombawaho]

I wish I could tell you why all the major brands of A/V have let things pass onto the computer, even with up to date definitions. I've seen everything from trojans (often vundo) to fake A/V (XP Antivirus 2009) that were let by by all these brands:
Mcafee, Norton, Bit Defender, Kapersky, AVG free

So, I don't know why, but I do know that MalwareByte's Anti-Malware is what I use when I go out on a call to remove the stuff.

I'd love to hear why these programs that many people pay for are not really protecting you. Microsoft patching level is one reason, if you're behind, but certainly not the full reason.

 

[Noway2]

If I had a dollar for every time I have heard someone say, often after the fact, that Norton, Mcafee, or AVG free is worthless I could retire.

I think it is a given that it is all part of their plan to increase their profits, somehow. Undoubtedly, there is one or more micro brains witha macro skull at these places that has made a "business management decision" accordingly.

In consideration as to what to do in the future, Malwarebytes seems to be highly regarded and I will look into it, but I am curious if anyone has an educated view or experience (positive or negative) with Avast?

 

[manhunter2826]

Thanks goombawaho; yep, MS updates would be one main reason.

^^I've used Avast for several (plus 5) years and with every update it gets better and better with regards to update of definitions and detection rate. Good to see MS Security Essentials now free also, although I have no first hand experience.

 

[kjv1611]

Avira Antivir may possibly be the best free AV, currently. I've been using it on a couple machines of late, instead of AVG, based on specifically BadBigBen's recommendations in these forums. From tests I've seen, I don't think Avast has much to offer over AVG. Avira Antivir USED to be annoying with false positives, but it seems to have GREATLY improved in that area. In most tests, they find THE most, or nearly THE most problems compared to all competitors. They do have a high number of false positives in those tests, but in my personal experience of late, they've had fewer false positives, at least, than AVG or McAffee. I never even thought of McAfee as a false positive headache.... just thought of it as a renouned system resource hog.

Oh, also, Avira seems to use FAR fewer resources than AVG. I couldn't put it into numbers, but when I've had it installed on machines, they do seem to run faster than with AVG. And AVG is far better (or at least was - not sure anymore) than Norton/McAfee.

Anyhow, just thought I'd toss that option out there.

The only thing that's annoying with the free version of Avira Antivir, currently that I can see, is that it will pop up advertisements for it's paid products once in a while. It's not terrible, but that one thing reminds me of so many pieces of ad-ware. Those little pop-up "ads" are a small price to pay for an excellent security product.

Malwarebytes is a great scanning tool, but it alone cannot protect a system. So I'd suggest installing that as a scanner, but also... actually, I'll just list out my personall recommends for now:

Firewall: Online Armor (or Comodo Security if you prefer)
Antivirus: Avira Antivir is quickly becoming my first choice... used to be AVG. I never personally cared for Avast's interface.
Malware/Spyware/Adware:
[ul][li]Windows Defender (free download - included in Vista, has to be downloaded for prior versions of Windows)[/li]
[li]MalwareBytes[/li]
[li]one I think that's been forgotten in these forums of late, SuperAntiSpyware - it includes real time protection as well as system scans. malwarebytes only scans....[/li] [li]SpywareBlaster - provides protection only[/li][/ul]
General CleanUp:
[ul][li]CCleaner[/li]
[li]Advanced System Care by Iobit[/li]
[li]Glary Utilities[/li]
[li]SmartDefrag by Iobit[/li][/ul]

Iobit has also come out with a Security suite as well, some sort of malware scanner. I'm not sure of how powerful it is at this point, but it does have a nice interface. I've tried it once or twice so far, but couldn't really tell if it helped any.

To top it all off, make sure that any PC connected to broadband Internet is behind a firewalled router. The cost of routers is generally pretty low considering what they are, and what they do. If you are connected via broadband with no router, you're just a sitting duck, regardless of all the software. Sadly, I've had a handful of people through the years who didn't believe me, but ended up becoming "cases in point".

--

"If to err is human, then I must be some kind of human!" -Me

 

[2ffat]

I, too, have seen more and more AV companies let "baddies" through and then have to clean them up after the fact. I don't like it either.

This week's Window's Secrets has an article named, Sponsored search results lead to malware, that provides me with more fodder to be paranoid.


James P. Cottingham
^{I'm number 1,229!
I'm number 1,229!}

 

[manhunter2826]

Thanks kjv1611 for such a comprehensive list. I have XP and so have just installed Windows Defender. I did/do have SpyBot installed and I do like it, but it does not offer (not in the free version) 'real-time' protection which WD claims to.

 

[kjv1611]

I'm pretty sure that SpyBot does offer real-time protection, but I don't use it at all anymore. I used to swear by Spybot and Ad-Aware, but they got to be more headache than value in my opinion.

Spybot has a Tea-Timer for Windows, I think it's called, and another similar for Internet Explorer settings... You may have to dig through the Advanced settings to find all of that, I don't recall.

--

"If to err is human, then I must be some kind of human!" -Me

 

[manhunter2826]

^^Ah, that would be it..I disabled Resident TT long ago as I found it annoying but I kept ticked Resident SD Helper.

Quick question? I have just installed Windows Defender, updated the definitions and made sure real-time protection is ticked (in Options), and yet when I close WD (exit) it's not showing in the status bar. How can it therefore offer RT protection? Surely, it needs to be running in the background, so to speak??

 

[kjv1611]

It is running in the background, but not in the task tray. I really like the way that it does run without actually being seen, myself. Too many programs needlessly run in the tray app. Basically, the way WD works is that if you need to do something, you'll see it in the task tray. For instance, if it couldn't get its updates or hasn't run a scan in a while, you'll see it. If it finds something serious, you'll see it. Otherwise, you'll probably forget its there.

If you want to check your processes under Task Manager to see Windows Defender is running, look for this process:
MSASCui.exe

--

"If to err is human, then I must be some kind of human!" -Me