Should I delete this?

15 years ago

I just downloaded Malwarebytes to my computer and ran a quick scan. It brought up a bunch of things I don't know if I should delete or not. I did delete a few things but with so many of these wanted to get advise. I just know some computer basics of operation, not the tech stuff.

The is the log I got, hoping Joe or Raven can tell me what to do..

Scan type: Quick Scan

Objects scanned: 79055

Time elapsed: 17 minute(s), 58 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 19

Registry Values Infected: 0

Registry Data Items Infected: 2

Folders Infected: 7

Files Infected: 8

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> Not selected for removal.

HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> Not selected for removal.

HKEY_CLASSES_ROOT\funwebproductsinstaller.start (Adware.MyWebSearch) -> Not selected for removal.

HKEY_CLASSES_ROOT\funwebproductsinstaller.start.1 (Adware.MyWebSearch) -> Not selected for removal.

HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx (Adware.Minibug) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\(2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c) (Adware.Minibug) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\(3c2d2a1e-031f-4397-9614-87c932a848e0) (Adware.Minibug) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\(04a38f6b-006f-4247-ba4c-02a139d5531c) (Adware.Minibug) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\minibugtransporter.minibugtransporterx.1 (Adware.Minibug) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\(3e1656ed-f60e-4597-b6aa-b6a58e171495) (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\(63d0ed2b-b45b-4458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\(63d0ed2d-b45b-4458-8b3b-60c69bbbd83c) (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\(87255c51-cd7d-4506-b9ad-97606daf53f3) (Adware.Coupons) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\(3dc201fb-e9c9-499c-a11f-23c360d7c3f8) (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(9522b3fb-7a2b-4646-8af6-36e7f593073c) (Adware.Coupons) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\(42f2c9ba-614f-47c0-b3e3-ecfd34eed658) (Adware.ISTBar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\(9522b3fb-7a2b-4646-8af6-36e7f593073c) (Adware.Coupons) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\(1d4db7d2-6ec9-47a3-bd87-1e41684e07bb) (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Hijack.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:

C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\1.bin (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\setups (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> Not selected for removal.

Files Infected:

C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll (Adware.Minibug) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\00E957F6 (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\00E95EBC (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\00E96563 (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\00E96BDC (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\00E974F4 (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Installr\Cache\files.ini (Adware.MyWebSearch) -> Not selected for removal.

C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> Not selected for removal.

Sort by:Oldest

Comments (6)

zep516
15 years ago
last modified: 9 years ago
Yes all of it
zep516
15 years ago
last modified: 9 years ago
Nothing serious it's all add ware crap.
Related Discussions
worm/virus help please...
Q
Comments (3)
One thing you can do now is run the Microsoft Windows Malicious Software Removal Tool. click Start/Run/ type> MRT and do a scan. Win32/Spybot is listed as one that will be removed. Yes, you can delete that file if it will let you. Sometimes worms are set to reinstall from the registry and return. You may have to turn off system restore and run your symantec scan in safe-mode.
...See More
Help for an idiot
Q
Comments (2)
you can do what ever you prefer but it is actually much safer to use in daily use like surfing the net and stuff as a regular user account and not as an administrator account. When you want to install software or change settings you will have to do the switch to administrator to have the rights to be able to do that. In linux that is the way we always do it, use the pc as limited user but then when something requires admin rights it pops up asking for the admin account password. You can set it up so there is file sharing between both the accounts so that you can get to what you have from either one which makes it much easier. Just make sure you are using some good strong passwords for your accounts not any real words they need to be made up of letters and numbers combined and be sure you keep that info written down in a safe location where you can find it because if you lose your admin password it is a pain.
...See More
CCleaner upgrade
Q
Comments (2)
Thank you "owbist" had 14 of them sitting there, I did not touch any of the other things. Gillian.
...See More
Trojan Horse Dropper Agent JLF
Q
Comments (16)
super easy to install just the click of a button LOL but the right button!! SiteAdvisor: the Web, tested. If you look carefully you will see it says site advisor for firefox and below that a link that says site advisor for IE, select the one for which ever browser you are using, if you use both, go in with that browser and select to download the version for the browser you are using. That is it, then any time you go to a site it will have a bar down in your bottom bar of your screen which will be green if it is a clean site, yellow for questionable, RED for get the heck out of here. When you search on google it will put icons on each link with the same colors, never go red. that game is a very common game and can be found at good legit sites that are safe. I will find one for you to get it from. I too play that game. Yes if it is locked down in the vault and quarantined you should be good. I would just go to add remove and delete the game. Then do a search for that trojan name to make sure nothing shows up, plus do a search for the game too and delete anything you may find still associated with it. I will give you an online trojan scanner link please go there and allow it to scan your pc and clean anything it finds. TrojanScan http://www.ewido.net/en/ and to be absolutely sure do this one too. Trend Micro's FREE online virus scanner let me know how it goes. once we are sure you are clean you will likely need to clear out all your restore points in system restore because if you were to use one and go back in time to a point where you still had this trojan you would again be reinfected.
...See More
flower-09
Original Author
15 years ago
last modified: 9 years ago
Ok, Thanks, I didn't know if it was connected to some of my programs or not.
zep516
15 years ago
last modified: 9 years ago
Then do this:

Download ATF Cleaner by Atribune to your Desktop.

Note: Vista users must use Run As Administrator
Under Main: Select Files to Delete choose: Select All
Â Click the Empty Selected button.
Â If you use Firefox browser click Firefox] at the top and choose: Select All
Â Click the Empty Selected button.
If you would like to keep your saved passwords click No at the prompt.
Â If you use Opera browserclick Opera at the top and choose: Select All
Â Click the Empty Selected button.
If you would like to keep your saved passwords click No at the prompt.
Â Click Exit on the Main menu to close the program.
flower-09
Original Author
15 years ago
last modified: 9 years ago
It will be tomorrow before I do this part.
I am running XP home, IE7 as browser. Have paid McAfee Internet Security Center for virus, firewall, etc.
After reading this forum for awhile, thinking you guys know best as to the programs.

Will also run a FULL SCAN tomorrow of the Malwarebytes.

Thanks so much for the advice and help.
zep516
15 years ago
last modified: 9 years ago
Try a full scan next time you did a quick scan: Here are the instructions so everything is in one place.

Please download Malwarebytes' Anti-Malware to your desktop. Click here
Double Click mbam-setup.exe to install the application.
Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select "Perform Full Scan", then click Scan.
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected.
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

Should I delete this?

Comments (6)

zep516

zep516

Related Discussions

flower-09
Original Author

zep516

flower-09
Original Author

zep516

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

Should I delete this?

Comments (6)

zep516

zep516

Related Discussions

flower-09Original Author

zep516

flower-09Original Author

zep516

COMPANY

BUSINESS SERVICES

GET HELP

CONNECT WITH US

flower-09
Original Author

flower-09
Original Author