Win32.Worm.Mabezat/I?
I am not sure of this service which is running in my Startup Services. NIVIDIA Display Driver Service is running in my Services.I have been having problems and thought I found a couple of worms, but I decided to check my Startup Services and I do not remember having this running normally.Thanks
January 31st, 2011 2:33pm

Hi,That is the Nvidia Graphics (Video driver) control. Check with Nvidia Support, their on-linedocumentation and drivers, and ask in the Nvidia Forums.Nvidia - Drivers - Use OPTION 1 to manually enter your driver info to get most current drivers. http://www.nvidia.com/Download/index.aspx?lang=en-usNvidia Support - check with Support as it could be a known issuehttp://www.nvidia.com/page/support.htmlNvidia Forums - also check for forums as it could be a known issue and/or others likely to have ithttp://forums.nvidia.com/==============================================================This general performance troubleshooter might help.What antivirus/antispyware/security products do you have on machine? Include any you have EVERhad on this machine including those you uninstalled (they leave remnants behind which can causestrange issues).----------------------------------------------------Do these :Start - type this in Search Box -> COMMAND find at top and RIGHT CLICK - RUN AS ADMINEnter this at the prompt - sfc /scannowHow to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) programgenerates in Windows Vista cbs.loghttp://support.microsoft.com/kb/928228Also run CheckDisk so we can rule out corruption as much as possible.How to Run Check Disk at Startup in Vistahttp://www.vistax64.com/tutorials/67612-check-disk-chkdsk.html==========================================After the above :How to troubleshoot a problem by performing a clean boot in Windows Vistahttp://support.microsoft.com/kb/929135How to troubleshoot performance issues in Windows Vistahttp://support.microsoft.com/kb/950685Optimizing Microsoft Windows Vista Performancehttp://support.microsoft.com/kb/959062To see all that is loading bootup - wait a few minutes without doing anything - then Right ClickTaskBar - Task Manager - take a look at Appplications - Processes - Services - this is a quickreference (if you have a little box on Lower Left - Show for All Users then check that).How to Check and Change the Startup Programs in Vistahttp://www.vistax64.com/tutorials/79612-startup-programs-enable-disable.htmlA quick check to see which are loading is Method 2 there - using MSCONFIG then post a list ofthose here.--------------------------------------------------------------------Tools that should help :Process Explorer - Free - Find out what files, registry keys and other objects processes have open,which DLLs they have loaded, and more. This uniquely powerful utility will even show you who ownseach process.http://technet.microsoft.com/en-us/sysinternals/bb896653.aspxAutoruns - Free - See what programs are configured to startup automatically when your system bootsand you login. Autoruns also shows you the full list of Registry and file locations where applications canconfigure auto-start settings.http://technet.microsoft.com/en-us/sysinternals/bb963902.aspxProcess Monitor - Free - Monitor file system, Registry, process, thread and DLL activity in real-time.http://technet.microsoft.com/en-us/sysinternals/bb896645.aspxThere are many excellent free tools at Sysinternalshttp://technet.microsoft.com/en-us/sysinternals/default.aspxWhatsInStartUP - Free - This utility displays the list of all applications that are loaded automaticallywhen Windows starts up. For each application, the following information is displayed: Startup Type (Registry/Startup Folder), Command -Line String, Product Name, File Version, Company Name,Location in the Registry or file system, and more. It allows you to easily disable or delete unwantedprograms that runs in your Windows startup. http://www.nirsoft.net/utils/what_run_in_startup.htmlThere are many excellent free tools at NirSofthttp://www.nirsoft.net/utils/index.htmlWindow Watcher - Free - Do you know what's running on your computer? Maybe not. The WindowWatcher tells all, reporting every window created by every running program, whether the windowis visible or not. http://www.karenware.com/powertools/ptwinwatch.aspMany excellent free tools and an excellent newsletter at Karenwarehttp://www.karenware.com/===========================================Vista and Windows 7 love updated drivers so here is how to update the major ones.This is my generic how to for proper driver updates :This utility makes it easy to see which versions are loaded :DriverView - Free - utility displays the list of all device drivers currently loaded on your system.For each driver in the list, additional useful information is displayed: load address of the driver,description, version, product name, company that created the driver, and more.http://www.nirsoft.net/utils/driverview.htmlFor Drivers check System Maker as fallbacks and Device Maker's which are the most current.Control Panel - Device Manager - Display Adapter - write down the make and complete modelof your video adapter - double click - Driver's tab - write down the version info. Now click UPdateDriver (this may not do anything as MS is far behind certifying drivers) - then Right Click -Uninstall - REBOOT this will refresh the driver stack.Repeat that for Network - Network Card (NIC), Wifi, Sound, Mouse and Keyboard if 3rd partywith their own software and drivers and any other major device drivers you have.Now go to System Maker's site (Dell, HP, Toshiba as examples) (as rollback) and then DeviceMaker's site (Realtek, Intel, Nvidia, ATI as examples) and get their latest versions. (Look forBIOS, Chipset and software updates at System Maker's site while there.)Download - SAVE - go to where you put them - Right Click - RUN AD ADMIN - REBOOT aftereach installation.Always check in Device Manager - Drivers tab to be sure the version you are installing actuallyshows up. This is because some drivers rollback before the latest is installed (sound driversparticularly do this) so install a driver - reboot - check to be sure it is installed and repeat asneeded.Repeat at Device Makers - BTW at Device Makers DO NOT RUN THEIR SCANNER - checkmanually by model.Manually look at manufacturer's sites for drivers - and Device Maker's sites.http://pcsupport.about.com/od/driverssupport/ht/driverdlmfgr.htmHow to Install a Device Driver in Vista Device Managerhttp://www.vistax64.com/tutorials/193584-device-manager-install-driver.htmlIf you update drivers manually then it is a good idea to disable Driver Installations in WindowsUpdates, this leaves Windows Updates ON however it will not install drivers which will usually beolder and cause issues. If Updates suggests a new driver then HIDE it (Right Click on it) and thengo look for new ones manually if you wish.How To Disable Automatic Driver Installation In Windows Vista - Drivershttp://www.addictivetips.com/windows-tips/how-to-disable-automatic-driver-installation-in-windows-vista/http://technet.microsoft.com/en-us/library/cc730606(WS.10).aspx===========================================Refer to these threads for many more excellent tips however be sure to check your antivirusprograms, update major drivers and BIOS, and also troubleshoot with the cleanboot methodfirst.Problems with overall system speed and performancehttp://support.microsoft.com/gp/slow_windows_performance/en-usPerformance and Maintenance tipshttp://social.answers.microsoft.com/Forums/en-US/w7performance/thread/19e5d6c3-bf07-49ac-a2fa-6718c988f125Windows Explorer has stopped workinghttp://social.answers.microsoft.com/Forums/en-US/w7performance/thread/6ab02526-5071-4dcc-895f-d90202bad8b3Hope these help.Rob Brown - Microsoft MVP - Windows Expert - Consumer : Bicycle - Mark Twain said it right.
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 2:41pm

I appreciate your time and advice very much. I will start going over everything today. This is PC was just built, so this was really a disappointment. I have only had it 3 months and had no problems whatsoever until this past week.I usually have Malwarebytes and Avast running and automatically updating. I also, not running until I need them, have AdAware, UnHack Me/Reanimator, Tune Up Utilities, and Hitman Pro as a last resort.There is a boot scan included when necessary, as part of one of the ones running all of the time.I decided to check my startup services after quarantining two worms, and I found this though I do not remember having it as part of my startup services.I keep my PC's pretty clean, but I know that contact who has been getting viruses sending emails from his hotmail account to me. I do not click on them, but I do email him in a new email and tell him what arrived. He has had this happen a number of times, so I do not just open any emails from him. He is now working on removing it, bu0
January 31st, 2011 3:30pm

Hi,Remove ALL power and reseat the cards, memory, and cables (on both ends when possible)- actually remove and replace - do not just snug. Make sure the vents are clear and the fanswill run.That does not sound like malware though it is possible Update the BIOS and low level chipsetdrivers from the System Maker (Motherboard Maker for custom systems) and update all themajor device drivers.Ditch the TuneUp utilities which tend to be problematic if not snake-oil - those type of over-hyped programs will cause a lot more problems than they solve.===============================================================If you need to check for malware here are my recommendations - these will allow you to doa thorough check and removal without ending up with a load of spyware programs runningresident which can cause as many issues as the malware and maybe harder to detect as thecause.No one program can be relied upon to detect and remove all malware. Added that often easyto detect malware is often accompanied by a much harder to detect and remove payload. Soits better to be overly thorough now than to pay the high price later. Check with these to anextreme overkill point and then run the cleanup only when you are very sure the system is clean.These can be done in Safe Mode - repeatedly tap F8 as you boot however you should also run them in regular Windows when you can.TDSSKiller.exe. - Download to the Desktop - then go to it and Right Click on it - RUN AS ADMINit will show any infections in the report after running - if it will not run change the name fromtdsskiller.exe to tdsskiller.com. Whether it finds anything or not does not mean you should notcheck with the other methods below.http://support.kaspersky.com/viruses/solutions?qid=208280684Download malwarebytes and scan with it, run MRT, and add Prevx to be sure it is gone.(If Rootkits run UnHackMe)Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMINMalwarebytes - freehttp://www.malwarebytes.org/Run the Microsoft Malicious Removal Tool Start - type in Search box -> MRT find at top of list - Right Click on it - RUN AS ADMIN.You should be getting this tool and its updates via Windows Updates - if needed you candownload it here.Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMIN(Then run MRT as above.)Microsoft Malicious Removal Tool - 32 bithttp://www.microsoft.com/downloads/details.aspx?FamilyID=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=enMicrosoft Malicious Removal Tool - 64 bithttp://www.microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495E-94E7-6349F4EFFC74&displaylang=enalso install Prevx to be sure it is all gone. Download - SAVE - go to where you put it - Right Click on it - RUN AS ADMINPrevx - Home - Free - small, fast, exceptional CLOUD protection, works with othersecurity programs. This is a scanner only, VERY EFFECTIVE, if it finds something come backhere or use Google to see how to remove. http://www.prevx.com/ <-- informationhttp://info.prevx.com/downloadcsi.asp <-- downloadPCmag - Prevx - Editor's Choicehttp://www.pcmag.com/article2/0,2817,2346862,00.aspTry the trial version of Hitman Pro :Hitman Pro is a second opinion scanner, designed to rescue your computer from malware(viruses, trojans, rootkits, etc.) that have infected your computer despite all the securitymeasures you have taken (such as anti virus software, firewalls, etc.).http://www.surfright.nl/en/hitmanpro--------------------------------------------------------If needed here are some online free scanners to help http://www.eset.com/onlinescan/New Vista and Windows 7 versionhttp://onecare.live.com/site/en-us/center/whatsnew.htmOriginal versionhttp://onecare.live.com/site/en-us/default.htmhttp://www.kaspersky.com/virusscannerOther Free online scanshttp://www.google.com/search?hl=en&source=hp&q=antivirus+free+online+scan&aq=f&oq=&aqi=g1--------------------------------------------------------Also do these to cleanup general corruption and repair/replace damaged/missing system files.Run DiskCleanup - Start - All Programs - Accessories - System Tools - Disk CleanupStart - type this in Search Box -> COMMAND find at top and RIGHT CLICK - RUN AS ADMINEnter this at the prompt - sfc /scannowHow to analyze the log file entries that the Microsoft Windows Resource Checker(SFC.exe) program generates in Windows Vista cbs.loghttp://support.microsoft.com/kb/928228Run checkdisk - schedule it to run at next start and then Apply OK your way out then restart.How to Run Check Disk at Startup in Vistahttp://www.vistax64.com/tutorials/67612-check-disk-chkdsk.html-----------------------------------------------------------------------If any Rootkits are found use this thread and other suggestions. (Run UnHackMe)http://social.answers.microsoft.com/Forums/en-US/InternetExplorer/thread/a8f665f0-c793-441a-a5b9-54b7e1e7a5a4/Hope this helps.Rob Brown - Microsoft MVP - Windows Expert - Consumer : Bicycle - Mark Twain said it right.
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2011 3:38pm

Earlier I asked about a program that is in my startup services since I had found a couple of worms and never saw this in the startup. However, I have WindowsXP and I entered a Vista Forum. I apologize, as not only am I new to this forum, I am tired an frustrated.Can you now tell me anything about Win32.Worm.Mabezat/I?Thanks for your patience.
January 31st, 2011 8:14pm

Hi maris63, Refer the below link which has information on Virus: Win32/Mabezat and the steps you have to perform to prevent and remove the same from your computer. Link: http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Virus:Win32/Mabezat.B Run online virus scan and check if any malware or virus activity found on the computer. You may run online virus scan from the below link: http://onecare.live.com/site/en-us/default.htm I would also suggest you to install windows security essentials which is free and it automatically updates it’s easy to install You may download and install the same from the below link:http://www.microsoft.com/securepc Regards:Samhrutha G S - Microsoft Support.Visit our Microsoft Answers Feedback Forum and let us know what you think.
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2011 11:32am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics