Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Go to first new post Windows 7 Not Booting: autochk program n ...
Go to first new post Internet Explorer
Go to first new post Memory upgrade problems.
Go to first new post Windows 7 problem - white program backgr ...
Go to first new post Old computer running as slow as molasses
Go to first new post Audio has disappeared
Go to first new post MBR PhysicalDrive0 issue
Go to first new post email hacked
Go to first new post Phantom audio ads and popup ads
Go to first new post Email Hacked! Information compromised he ...
Go to first new post computer completely freezes randomly
Go to first new post Sudden failure of utilities
Go to first new post Very slow computer and comboFIX said it ...
Go to first new post Infection/browser hijack causing memory ...
Go to first new post Strange "Incorrect Password" e ...
Search Search
Search for:
Tech Support Guy Forums > > >

Solved: want to get rid of adware permanently


(!)

Reply
Page 1 of 3 1 23
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
14-Apr-2012, 11:59 PM #1
Angry want to get rid of adware permanently
I do a malware bytes scan and it continues to tell me I have adware from PUP.MySearchWeb. How can I get rid of it permanently?
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 90,221 posts.
  
Join Date: Aug 2003
Location: Quebec, Canada
15-Apr-2012, 08:12 AM #2
Please post your MalwareBytes log.
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 49,984 posts.
  
Join Date: May 2002
Location: Brandon/Valrico, Florida
Experience: Advanced
15-Apr-2012, 11:19 AM #3
Also do the following:

----------------------------------------------------------

Go here and click the green "Download latest version" link to download and save

HiJackThis 2.0.4

After it's been downloaded and saved, close all open windows first, then double-click the saved file to install it.

Allow it to install in its default location - C:\Program Files.

After it's been installed, start it and allow its main window to load.

Uncheck "Do not show this window when I start HiJackThis".

Click "Do a system scan and save a log file".

When the scan is finished in 30 - 60 seconds, a log file will appear.

Save that log file.

Return here to your thread, then copy-and-paste the entire log file here.

----------------------------------------------------------

Start HiJackThis.

Click on the "Open The Misc Tools Section" button.

Click on the "Open Uninstall Manager" button.

Click on the "Save List" button.

Save the "uninstall_list.txt" file somewhere.

It'll then open in Notepad.

Return here to your thread, then copy-and-paste the entire file here.

----------------------------------------------------------
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
15-Apr-2012, 04:38 PM #4
2EDEBC4C9D89} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MapsGalaxy_39bar Uninstall
(PUP.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy_39 Browser Plugin Loader
(PUP.MyWebSearch) -> Data: C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe -> Quarantined and
deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy Search Scope Monitor
(PUP.MyWebSearch) -> Data: "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h ->
Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{26842A09-FFA8-4E2C-AE12-
0C80F01C3295} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 8
C:\Program Files\MapsGalaxy_39\bar\1.bin\39brstub.dll (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon.exe (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39highin.exe (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39tpinst.dll (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrchMn.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
(end)
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 49,984 posts.
  
Join Date: May 2002
Location: Brandon/Valrico, Florida
Experience: Advanced
15-Apr-2012, 07:06 PM #5
You didn't submit the entire Malwarebytes log, so we have no way of knowing if it's a current log and what version you used.

-----------------------------------------------------------
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
15-Apr-2012, 07:29 PM #6
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.04.13.01
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Quality :: QUALITY-7CD9246 [administrator]
4/15/2012 1:46:57 PM
mbam-log-2012-04-15 (13-46-57).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra |
Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 250938
Time elapsed: 2 hour(s), 20 minute(s), 16 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 103
HKCR\CLSID\{e1e3eb24-ec60-42d4-a6cd-4c87bbecc6e2} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{aa2bce70-1c24-457d-8c63-4debc4185255} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{36978f8d-689a-4e9a-9c77-62d7d407b4e0} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{908A219B-30DC-4CFB-A2C6-01639E712559} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{a751f365-575b-4d1a-931a-598a56e7b4d5} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{e7f7d49b-46e8-497e-a0f9-507de0516981} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{614D2B09-9007-430C-B039-D341AFE9C313} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{9d4e4f05-7a77-45a1-befc-1fd6dbbc537d} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{687272a0-645a-4d14-ae7d-9ae8a96aa532} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{855a1c2b-e11c-4518-a8b0-0d204a47c4d8} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{C505872D-F02A-4240-8649-1841AE5AD8BA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{9362fa55-5c21-4631-96ea-fc661f814423} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{a6acf80b-12be-4fdd-8f2e-0be53cf1a5d4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{BBDEA6E1-D3E3-4D50-B9F8-0DC879B6F1CE} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9362FA55-5C21-4631-96EA-
FC661F814423} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{CA98876E-BBEB-41BB-AD8A-972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CA98876E-BBEB-41BB-AD8A-
972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{73eaaa8e-6d52-448f-9436-31e284148c05} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{eb31bcd4-1c56-4227-a448-e33f7fb27e9a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{150F839C-4F8A-40DB-8ABC-094699A2C5DA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{13a18f5d-bad1-4971-908c-2cf62e86bcd7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{a675f307-5957-4405-9e96-607e6702ffa7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{3677B40B-7584-47E5-B2C3-DD605D4A9765} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{13A18F5D-BAD1-4971-908C-
2CF62E86BCD7} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{1d93a88a-e20d-4274-b788-4214a8004509} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.Radio.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.Radio (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{b60142b7-b49c-4c7b-bdcb-edbadb895f5a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{3453118d-ecae-4832-9026-cade4301f2c1} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{dd712088-9e33-4016-8a9b-da8cbaa6f2ca} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{42564B8D-89ED-44BC-BBEA-3C413EB856FC} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.PseudoTransparentPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3453118D-ECAE-4832-9026-
CADE4301F2C1} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{c30c26aa-9775-43ac-9877-b8f9ca1a81b4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{cae88e60-cea5-4fcb-b611-54ea6305d8ab} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{4f28fa5f-7d15-4753-b4fc-d548a0f02bfb} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{0396d01a-1323-4a15-bd0c-1bc7510f46c6} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{A8168AFE-9F36-49DE-A80A-00D19FB50207} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{f3477e9d-d2f6-49f0-9b23-854d7958d07e} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{bf78452b-f168-4310-9ec0-4b9b66b845f0} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{7A739956-FB82-4379-AF60-E38C48226AA7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{a083c35d-61a9-4625-bbb6-fb54e71b8527} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{c4a25b73-8ef5-4282-9d21-c8920dd577a1} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{15106ae4-6bdf-443e-80b0-3e38b59d26ec} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{9EF88362-131D-48B0-8969-CCC96F897AB8} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{a35ff019-6dbe-4044-b080-6f3fa78a947f} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{8feeda9e-8f71-45df-a797-468226d1d35b} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{C285FFF4-DE32-402D-B8FD-6F34F1D5920C} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A35FF019-6DBE-4044-B080-
6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A35FF019-6DBE-4044-B080-
6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3ED5E5EC-0965-4DD3-B7D8-
DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{5e1bdcf6-dd5f-4dd3-8783-b1454aef1830} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{d833690c-6e56-46c2-a19f-cf5fd81c9c9a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{200F1306-1316-473B-90CE-A777144BBDF5} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{1796ec91-d094-4a5f-b681-e16015d1ceac} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{3141fb47-2f0f-417d-a6fe-7047c5d2bbb4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{16C7BB64-AC8D-4863-92ED-799D20F001DA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1796EC91-D094-4A5F-B681-
E16015D1CEAC} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{37ed966d-4d0e-4d66-9633-bea542c92860} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{87792411-b73a-435e-86f3-ae633a690e84} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{E2DAE1A4-09EE-4209-AD3B-1C96330EDCEF} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.RadioSettings.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.RadioSettings (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{db1384d8-1bda-4c8d-a743-e9ca671feb00} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{1241cebd-9777-4bc6-aae5-2a77e25db246} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{64fbf8b6-c770-401a-8b84-f630edaf4448} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{0D8734DB-7110-4CDB-833F-52BC93865AB2} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1241CEBD-9777-4BC6-
AAE5-2A77E25DB246} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{b70e008c-967b-4104-bc7b-6f7c77dbc38d} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 52
C:\Program Files\QuotationCafe_45\bar\1.bin\45mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45auxstb.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45datact.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45dlghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45dyn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45feedmg.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45hkstub.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45html.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45htmlmu.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45httpct.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45idle.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45ieovr.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45impipe.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45medint.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45msg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45Plugin.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45radio.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45regfft.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45reghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45regiet.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45script.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45skin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45skplay.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45uabtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\NP45Stub.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39auxstb.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39datact.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39dlghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39dyn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39feedmg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39hkstub.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39html.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39htmlmu.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39httpct.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39idle.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39ieovr.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39impipe.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39medint.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39msg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39Plugin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39radio.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39regfft.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39reghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39regiet.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39script.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39skin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39skplay.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39uabtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP455
\A0221729.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP469
\A0236092.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
(end)
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 49,984 posts.
  
Join Date: May 2002
Location: Brandon/Valrico, Florida
Experience: Advanced
15-Apr-2012, 07:37 PM #7
Thanks for submitting the entire MBAM log.

I'm still waiting for a reply to post #3.

------------------------------------------------------------
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
15-Apr-2012, 07:47 PM #8
I think on the first log I only did a quick scan....then I updated malwarebytes and did a complete scan
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
15-Apr-2012, 08:07 PM #9
The second log was the most recent version.
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 49,984 posts.
  
Join Date: May 2002
Location: Brandon/Valrico, Florida
Experience: Advanced
15-Apr-2012, 08:10 PM #10
I'm getting ready to shut down for the night.

I'll check back here in the morning to see if you've submitted the 2 logs that I requested in post #3.

-------------------------------------------------------------
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 30,453 posts.
  
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
16-Apr-2012, 11:08 AM #11
Regarding your other issue HERE, would you happen to have SUPERAntiSpyware on your computer? It includes Home Page Protection. You'll be able to change your home page only within the program.
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
16-Apr-2012, 01:06 PM #12
phamton 010. I have checked the appropriate boxes....i tried IE and google comes up. I hope it will be permanate. thanks.
Phantom010's Avatar
Phantom010 has a Photo Album
Computer Specs
Trusted Advisor with 30,453 posts.
  
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
16-Apr-2012, 01:19 PM #13
Quote:
Originally Posted by puterjunkie4ever View Post
phamton 010. I have checked the appropriate boxes....i tried IE and google comes up. I hope it will be permanate. thanks.
You're welcome!
flavallee's Avatar
flavallee   (Frank) flavallee is offline flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 49,984 posts.
  
Join Date: May 2002
Location: Brandon/Valrico, Florida
Experience: Advanced
16-Apr-2012, 07:21 PM #14
I still haven't received a reply to post #3, so it appears that I'm wasting my time here.

I'm unsubscribing so I don't receive any further replies to this thread.

-----------------------------------------------------------
puterjunkie4ever's Avatar
Computer Specs
Member with 445 posts.
THREAD STARTER
  
Join Date: Oct 2008
Location: Arizona
Experience: Beginner
16-Apr-2012, 08:03 PM #15
I'm not quite sure which one is post #3....Please help me out on this.
Email This Email  Print This Print  Tweet This Send to Facebook Send to MySpace Send to StumbleUpon Digg This | More Services More
Reply
Page 1 of 3 1 23
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join Today!

(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!

« Previous Thread | Virus & Other Malware Removal | Next Thread »

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


TECH SUPPORT GUY
WELCOME
FOLLOW US
 
You Are Using: Server ID
All times are GMT -4. The time now is 08:06 PM.
Advertisements do not imply our endorsement of that product or service.
Copyright © 1996 - 2013 TechGuy, Inc. All rights reserved. Privacy & Terms.

VigLink badge
Trusted Website Back to the Top ↑