Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Virus & Other Malware Removal Virus & Other Malware Removal
Search Search
Search for:
Tech Support Guy > > >

Solved: want to get rid of adware permanently


(!)

puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
14-Apr-2012, 10:59 PM #1
Angry want to get rid of adware permanently
I do a malware bytes scan and it continues to tell me I have adware from PUP.MySearchWeb. How can I get rid of it permanently?
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 98,408 posts.
 
Join Date: Aug 2003
15-Apr-2012, 07:12 AM #2
Please post your MalwareBytes log.
flavallee's Avatar
flavallee   (Frank) flavallee is online now flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 59,424 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
15-Apr-2012, 10:19 AM #3
Also do the following:

----------------------------------------------------------

Go here and click the green "Download latest version" link to download and save

HiJackThis 2.0.4

After it's been downloaded and saved, close all open windows first, then double-click the saved file to install it.

Allow it to install in its default location - C:\Program Files.

After it's been installed, start it and allow its main window to load.

Uncheck "Do not show this window when I start HiJackThis".

Click "Do a system scan and save a log file".

When the scan is finished in 30 - 60 seconds, a log file will appear.

Save that log file.

Return here to your thread, then copy-and-paste the entire log file here.

----------------------------------------------------------

Start HiJackThis.

Click on the "Open The Misc Tools Section" button.

Click on the "Open Uninstall Manager" button.

Click on the "Save List" button.

Save the "uninstall_list.txt" file somewhere.

It'll then open in Notepad.

Return here to your thread, then copy-and-paste the entire file here.

----------------------------------------------------------
puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
15-Apr-2012, 03:38 PM #4
2EDEBC4C9D89} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MapsGalaxy_39bar Uninstall
(PUP.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy_39 Browser Plugin Loader
(PUP.MyWebSearch) -> Data: C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe -> Quarantined and
deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy Search Scope Monitor
(PUP.MyWebSearch) -> Data: "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h ->
Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{26842A09-FFA8-4E2C-AE12-
0C80F01C3295} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 8
C:\Program Files\MapsGalaxy_39\bar\1.bin\39brstub.dll (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon.exe (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39highin.exe (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39tpinst.dll (PUP.MyWebSearch) -> Delete on reboot.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrchMn.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
(end)
flavallee's Avatar
flavallee   (Frank) flavallee is online now flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 59,424 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
15-Apr-2012, 06:06 PM #5
You didn't submit the entire Malwarebytes log, so we have no way of knowing if it's a current log and what version you used.

-----------------------------------------------------------
puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
15-Apr-2012, 06:29 PM #6
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org
Database version: v2012.04.13.01
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Quality :: QUALITY-7CD9246 [administrator]
4/15/2012 1:46:57 PM
mbam-log-2012-04-15 (13-46-57).txt
Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra |
Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 250938
Time elapsed: 2 hour(s), 20 minute(s), 16 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 103
HKCR\CLSID\{e1e3eb24-ec60-42d4-a6cd-4c87bbecc6e2} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{aa2bce70-1c24-457d-8c63-4debc4185255} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{36978f8d-689a-4e9a-9c77-62d7d407b4e0} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{908A219B-30DC-4CFB-A2C6-01639E712559} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{a751f365-575b-4d1a-931a-598a56e7b4d5} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{e7f7d49b-46e8-497e-a0f9-507de0516981} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{614D2B09-9007-430C-B039-D341AFE9C313} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{9d4e4f05-7a77-45a1-befc-1fd6dbbc537d} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{687272a0-645a-4d14-ae7d-9ae8a96aa532} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{855a1c2b-e11c-4518-a8b0-0d204a47c4d8} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{C505872D-F02A-4240-8649-1841AE5AD8BA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{9362fa55-5c21-4631-96ea-fc661f814423} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{a6acf80b-12be-4fdd-8f2e-0be53cf1a5d4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{BBDEA6E1-D3E3-4D50-B9F8-0DC879B6F1CE} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9362FA55-5C21-4631-96EA-
FC661F814423} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{CA98876E-BBEB-41BB-AD8A-972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CA98876E-BBEB-41BB-AD8A-
972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{73eaaa8e-6d52-448f-9436-31e284148c05} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{eb31bcd4-1c56-4227-a448-e33f7fb27e9a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{150F839C-4F8A-40DB-8ABC-094699A2C5DA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{13a18f5d-bad1-4971-908c-2cf62e86bcd7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{a675f307-5957-4405-9e96-607e6702ffa7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{3677B40B-7584-47E5-B2C3-DD605D4A9765} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{13A18F5D-BAD1-4971-908C-
2CF62E86BCD7} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{1d93a88a-e20d-4274-b788-4214a8004509} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.Radio.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\QuotationCafe_45.Radio (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{b60142b7-b49c-4c7b-bdcb-edbadb895f5a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{3453118d-ecae-4832-9026-cade4301f2c1} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{dd712088-9e33-4016-8a9b-da8cbaa6f2ca} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{42564B8D-89ED-44BC-BBEA-3C413EB856FC} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.PseudoTransparentPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3453118D-ECAE-4832-9026-
CADE4301F2C1} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{c30c26aa-9775-43ac-9877-b8f9ca1a81b4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\QuotationCafe_45.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\QuotationCafe_45.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{cae88e60-cea5-4fcb-b611-54ea6305d8ab} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{4f28fa5f-7d15-4753-b4fc-d548a0f02bfb} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{0396d01a-1323-4a15-bd0c-1bc7510f46c6} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{A8168AFE-9F36-49DE-A80A-00D19FB50207} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{f3477e9d-d2f6-49f0-9b23-854d7958d07e} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{bf78452b-f168-4310-9ec0-4b9b66b845f0} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{7A739956-FB82-4379-AF60-E38C48226AA7} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{a083c35d-61a9-4625-bbb6-fb54e71b8527} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\CLSID\{c4a25b73-8ef5-4282-9d21-c8920dd577a1} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{15106ae4-6bdf-443e-80b0-3e38b59d26ec} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{9EF88362-131D-48B0-8969-CCC96F897AB8} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{a35ff019-6dbe-4044-b080-6f3fa78a947f} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{8feeda9e-8f71-45df-a797-468226d1d35b} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{C285FFF4-DE32-402D-B8FD-6F34F1D5920C} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A35FF019-6DBE-4044-B080-
6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A35FF019-6DBE-4044-B080-
6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3ED5E5EC-0965-4DD3-B7D8-
DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{5e1bdcf6-dd5f-4dd3-8783-b1454aef1830} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{d833690c-6e56-46c2-a19f-cf5fd81c9c9a} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{200F1306-1316-473B-90CE-A777144BBDF5} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\CLSID\{1796ec91-d094-4a5f-b681-e16015d1ceac} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{3141fb47-2f0f-417d-a6fe-7047c5d2bbb4} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{16C7BB64-AC8D-4863-92ED-799D20F001DA} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1796EC91-D094-4A5F-B681-
E16015D1CEAC} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{37ed966d-4d0e-4d66-9633-bea542c92860} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{87792411-b73a-435e-86f3-ae633a690e84} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{E2DAE1A4-09EE-4209-AD3B-1C96330EDCEF} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.RadioSettings.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.RadioSettings (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{db1384d8-1bda-4c8d-a743-e9ca671feb00} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\MapsGalaxy_39.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{1241cebd-9777-4bc6-aae5-2a77e25db246} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\TypeLib\{64fbf8b6-c770-401a-8b84-f630edaf4448} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\Interface\{0D8734DB-7110-4CDB-833F-52BC93865AB2} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1241CEBD-9777-4BC6-
AAE5-2A77E25DB246} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
HKCR\CLSID\{b70e008c-967b-4104-bc7b-6f7c77dbc38d} (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
HKCR\MapsGalaxy_39.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
successfully.
HKCR\MapsGalaxy_39.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 52
C:\Program Files\QuotationCafe_45\bar\1.bin\45mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45auxstb.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45datact.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45dlghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45dyn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45feedmg.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45hkstub.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45html.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45htmlmu.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45httpct.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45idle.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45ieovr.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45impipe.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45medint.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45msg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45Plugin.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45radio.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45regfft.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45reghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45regiet.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45script.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45skin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45skplay.exe (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\45uabtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\QuotationCafe_45\bar\1.bin\NP45Stub.dll (PUP.MyWebSearch) -> Quarantined
and deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39auxstb.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39datact.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39dlghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39dyn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39feedmg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39hkstub.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39html.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39htmlmu.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39httpct.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39idle.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39ieovr.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39impipe.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39medint.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39msg.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39Plugin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39radio.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39regfft.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39reghk.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39regiet.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39script.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39skin.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39skplay.exe (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\39uabtn.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\Program Files\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (PUP.MyWebSearch) -> Quarantined and
deleted successfully.
C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP455
\A0221729.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP469
\A0236092.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
(end)
flavallee's Avatar
flavallee   (Frank) flavallee is online now flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 59,424 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
15-Apr-2012, 06:37 PM #7
Thanks for submitting the entire MBAM log.

I'm still waiting for a reply to post #3.

------------------------------------------------------------
puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
15-Apr-2012, 06:47 PM #8
I think on the first log I only did a quick scan....then I updated malwarebytes and did a complete scan
puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
15-Apr-2012, 07:07 PM #9
The second log was the most recent version.
flavallee's Avatar
flavallee   (Frank) flavallee is online now flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 59,424 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
15-Apr-2012, 07:10 PM #10
I'm getting ready to shut down for the night.

I'll check back here in the morning to see if you've submitted the 2 logs that I requested in post #3.

-------------------------------------------------------------
Phantom010's Avatar
Computer Specs
Trusted Advisor with 32,793 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
16-Apr-2012, 10:08 AM #11
Regarding your other issue HERE, would you happen to have SUPERAntiSpyware on your computer? It includes Home Page Protection. You'll be able to change your home page only within the program.

puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
16-Apr-2012, 12:06 PM #12
phamton 010. I have checked the appropriate boxes....i tried IE and google comes up. I hope it will be permanate. thanks.
Phantom010's Avatar
Computer Specs
Trusted Advisor with 32,793 posts.
 
Join Date: Mar 2009
Location: Cyberspace
Experience: Advanced
16-Apr-2012, 12:19 PM #13
Quote:
Originally Posted by puterjunkie4ever View Post
phamton 010. I have checked the appropriate boxes....i tried IE and google comes up. I hope it will be permanate. thanks.
You're welcome!
flavallee's Avatar
flavallee   (Frank) flavallee is online now flavallee is a Trusted Advisor with special permissions. flavallee has a Profile Picture
Computer Specs
Trusted Advisor with 59,424 posts.
 
Join Date: May 2002
Location: Hillsborough county, Florida
Experience: Advanced
16-Apr-2012, 06:21 PM #14
I still haven't received a reply to post #3, so it appears that I'm wasting my time here.

I'm unsubscribing so I don't receive any further replies to this thread.

-----------------------------------------------------------
puterjunkie4ever's Avatar
puterjunkie4ever puterjunkie4ever is offline
Account Closed with 465 posts.
THREAD STARTER
 
Join Date: Oct 2008
Experience: Beginner
16-Apr-2012, 07:03 PM #15
I'm not quite sure which one is post #3....Please help me out on this.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑

Content Relevant URLs by vBSEO 3.3.2