1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

want to get rid of adware permanently

Discussion in 'Virus & Other Malware Removal' started by puterjunkie4ever, Apr 14, 2012.

Thread Status:
Not open for further replies.
Advertisement
  1. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    I do a malware bytes scan and it continues to tell me I have adware from PUP.MySearchWeb. How can I get rid of it permanently?
     
  2. Cookiegal

    Cookiegal Administrator Malware Specialist Coordinator

    Joined:
    Aug 27, 2003
    Messages:
    101,542
    Please post your MalwareBytes log.
     
  3. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,573
    Also do the following:

    ----------------------------------------------------------

    Go here and click the green "Download latest version" link to download and save

    HiJackThis 2.0.4

    After it's been downloaded and saved, close all open windows first, then double-click the saved file to install it.

    Allow it to install in its default location - C:\Program Files.

    After it's been installed, start it and allow its main window to load.

    Uncheck "Do not show this window when I start HiJackThis".

    Click "Do a system scan and save a log file".

    When the scan is finished in 30 - 60 seconds, a log file will appear.

    Save that log file.

    Return here to your thread, then copy-and-paste the entire log file here.

    ----------------------------------------------------------

    Start HiJackThis.

    Click on the "Open The Misc Tools Section" button.

    Click on the "Open Uninstall Manager" button.

    Click on the "Save List" button.

    Save the "uninstall_list.txt" file somewhere.

    It'll then open in Notepad.

    Return here to your thread, then copy-and-paste the entire file here.

    ----------------------------------------------------------
     
  4. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    2EDEBC4C9D89} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MapsGalaxy_39bar Uninstall
    (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    Registry Values Detected: 3
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy_39 Browser Plugin Loader
    (PUP.MyWebSearch) -> Data: C:\PROGRA~1\MAPSGA~2\bar\1.bin\39brmon.exe -> Quarantined and
    deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|MapsGalaxy Search Scope Monitor
    (PUP.MyWebSearch) -> Data: "C:\PROGRA~1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h ->
    Quarantined and deleted successfully.
    HKCU\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks|{26842A09-FFA8-4E2C-AE12-
    0C80F01C3295} (PUP.MyWebSearch) -> Data: -> Quarantined and deleted successfully.
    Registry Data Items Detected: 0
    (No malicious items detected)
    Folders Detected: 0
    (No malicious items detected)
    Files Detected: 8
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39brstub.dll (PUP.MyWebSearch) -> Delete on reboot.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon.exe (PUP.MyWebSearch) -> Delete on reboot.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39highin.exe (PUP.MyWebSearch) -> Delete on reboot.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39tpinst.dll (PUP.MyWebSearch) -> Delete on reboot.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrchMn.exe (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39barsvc.exe (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39SrcAs.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    (end)
     
  5. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,573
    You didn't submit the entire Malwarebytes log, so we have no way of knowing if it's a current log and what version you used.

    -----------------------------------------------------------
     
  6. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    Malwarebytes Anti-Malware 1.61.0.1400
    www.malwarebytes.org
    Database version: v2012.04.13.01
    Windows XP Service Pack 3 x86 NTFS
    Internet Explorer 8.0.6001.18702
    Quality :: QUALITY-7CD9246 [administrator]
    4/15/2012 1:46:57 PM
    mbam-log-2012-04-15 (13-46-57).txt
    Scan type: Full scan
    Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra |
    Heuristics/Shuriken | PUP | PUM
    Scan options disabled: P2P
    Objects scanned: 250938
    Time elapsed: 2 hour(s), 20 minute(s), 16 second(s)
    Memory Processes Detected: 0
    (No malicious items detected)
    Memory Modules Detected: 0
    (No malicious items detected)
    Registry Keys Detected: 103
    HKCR\CLSID\{e1e3eb24-ec60-42d4-a6cd-4c87bbecc6e2} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\CLSID\{aa2bce70-1c24-457d-8c63-4debc4185255} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{36978f8d-689a-4e9a-9c77-62d7d407b4e0} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{908A219B-30DC-4CFB-A2C6-01639E712559} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{a751f365-575b-4d1a-931a-598a56e7b4d5} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{e7f7d49b-46e8-497e-a0f9-507de0516981} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{614D2B09-9007-430C-B039-D341AFE9C313} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{9d4e4f05-7a77-45a1-befc-1fd6dbbc537d} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\CLSID\{687272a0-645a-4d14-ae7d-9ae8a96aa532} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{855a1c2b-e11c-4518-a8b0-0d204a47c4d8} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{C505872D-F02A-4240-8649-1841AE5AD8BA} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{9362fa55-5c21-4631-96ea-fc661f814423} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{a6acf80b-12be-4fdd-8f2e-0be53cf1a5d4} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{BBDEA6E1-D3E3-4D50-B9F8-0DC879B6F1CE} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\QuotationCafe_45.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9362FA55-5C21-4631-96EA-
    FC661F814423} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{CA98876E-BBEB-41BB-AD8A-972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\QuotationCafe_45.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CA98876E-BBEB-41BB-AD8A-
    972F1C7B4706} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{73eaaa8e-6d52-448f-9436-31e284148c05} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{eb31bcd4-1c56-4227-a448-e33f7fb27e9a} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{150F839C-4F8A-40DB-8ABC-094699A2C5DA} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{13a18f5d-bad1-4971-908c-2cf62e86bcd7} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{a675f307-5957-4405-9e96-607e6702ffa7} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{3677B40B-7584-47E5-B2C3-DD605D4A9765} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{13A18F5D-BAD1-4971-908C-
    2CF62E86BCD7} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{1d93a88a-e20d-4274-b788-4214a8004509} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.Radio.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\QuotationCafe_45.Radio (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{b60142b7-b49c-4c7b-bdcb-edbadb895f5a} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\CLSID\{3453118d-ecae-4832-9026-cade4301f2c1} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{dd712088-9e33-4016-8a9b-da8cbaa6f2ca} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{42564B8D-89ED-44BC-BBEA-3C413EB856FC} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.PseudoTransparentPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.PseudoTransparentPlugin (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3453118D-ECAE-4832-9026-
    CADE4301F2C1} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{c30c26aa-9775-43ac-9877-b8f9ca1a81b4} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\QuotationCafe_45.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\QuotationCafe_45.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\CLSID\{cae88e60-cea5-4fcb-b611-54ea6305d8ab} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.MultipleButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\MapsGalaxy_39.MultipleButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{4f28fa5f-7d15-4753-b4fc-d548a0f02bfb} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{0396d01a-1323-4a15-bd0c-1bc7510f46c6} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{A8168AFE-9F36-49DE-A80A-00D19FB50207} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{f3477e9d-d2f6-49f0-9b23-854d7958d07e} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{bf78452b-f168-4310-9ec0-4b9b66b845f0} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{7A739956-FB82-4379-AF60-E38C48226AA7} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{a083c35d-61a9-4625-bbb6-fb54e71b8527} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.DynamicBarButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\MapsGalaxy_39.DynamicBarButton (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\CLSID\{c4a25b73-8ef5-4282-9d21-c8920dd577a1} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{15106ae4-6bdf-443e-80b0-3e38b59d26ec} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{9EF88362-131D-48B0-8969-CCC96F897AB8} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.FeedManager.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\MapsGalaxy_39.FeedManager (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{a35ff019-6dbe-4044-b080-6f3fa78a947f} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{8feeda9e-8f71-45df-a797-468226d1d35b} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{C285FFF4-DE32-402D-B8FD-6F34F1D5920C} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.HTMLPanel.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\MapsGalaxy_39.HTMLPanel (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A35FF019-6DBE-4044-B080-
    6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A35FF019-6DBE-4044-B080-
    6F3FA78A947F} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.HTMLMenu.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\MapsGalaxy_39.HTMLMenu (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3ED5E5EC-0965-4DD3-B7D8-
    DBC48A1172B9} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{5e1bdcf6-dd5f-4dd3-8783-b1454aef1830} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{d833690c-6e56-46c2-a19f-cf5fd81c9c9a} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{200F1306-1316-473B-90CE-A777144BBDF5} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\CLSID\{1796ec91-d094-4a5f-b681-e16015d1ceac} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{3141fb47-2f0f-417d-a6fe-7047c5d2bbb4} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{16C7BB64-AC8D-4863-92ED-799D20F001DA} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.XMLSessionPlugin.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\MapsGalaxy_39.XMLSessionPlugin (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1796EC91-D094-4A5F-B681-
    E16015D1CEAC} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{37ed966d-4d0e-4d66-9633-bea542c92860} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{87792411-b73a-435e-86f3-ae633a690e84} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{E2DAE1A4-09EE-4209-AD3B-1C96330EDCEF} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.RadioSettings.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\MapsGalaxy_39.RadioSettings (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{db1384d8-1bda-4c8d-a743-e9ca671feb00} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.ScriptButton.1 (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\MapsGalaxy_39.ScriptButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{1241cebd-9777-4bc6-aae5-2a77e25db246} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\TypeLib\{64fbf8b6-c770-401a-8b84-f630edaf4448} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\Interface\{0D8734DB-7110-4CDB-833F-52BC93865AB2} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1241CEBD-9777-4BC6-
    AAE5-2A77E25DB246} (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    HKCR\CLSID\{b70e008c-967b-4104-bc7b-6f7c77dbc38d} (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    HKCR\MapsGalaxy_39.UrlAlertButton.1 (PUP.MyWebSearch) -> Quarantined and deleted
    successfully.
    HKCR\MapsGalaxy_39.UrlAlertButton (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    Registry Values Detected: 0
    (No malicious items detected)
    Registry Data Items Detected: 0
    (No malicious items detected)
    Folders Detected: 0
    (No malicious items detected)
    Files Detected: 52
    C:\Program Files\QuotationCafe_45\bar\1.bin\45mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45auxstb.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45datact.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45dlghk.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45dyn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45feedmg.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45hkstub.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45html.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45htmlmu.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45httpct.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45idle.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45ieovr.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45impipe.exe (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45medint.exe (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45msg.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45Plugin.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45radio.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45regfft.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45reghk.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45regiet.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45script.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45skin.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45skplay.exe (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\45uabtn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\QuotationCafe_45\bar\1.bin\NP45Stub.dll (PUP.MyWebSearch) -> Quarantined
    and deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39mlbtn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39auxstb.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39datact.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39dlghk.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39dyn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39feedmg.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39hkstub.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39html.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39htmlmu.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39httpct.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39idle.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39ieovr.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39impipe.exe (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39medint.exe (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39msg.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39Plugin.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39radio.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39regfft.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39reghk.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39regiet.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39script.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39skin.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39skplay.exe (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\39uabtn.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\Program Files\MapsGalaxy_39\bar\1.bin\NP39Stub.dll (PUP.MyWebSearch) -> Quarantined and
    deleted successfully.
    C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP455
    \A0221729.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    C:\System Volume Information\_restore{052ED6E8-2E99-4701-8CB8-81A7D33FD944}\RP469
    \A0236092.exe (PUP.MyWebSearch) -> Quarantined and deleted successfully.
    (end)
     
  7. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,573
    Thanks for submitting the entire MBAM log.

    I'm still waiting for a reply to post #3.

    ------------------------------------------------------------
     
  8. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    I think on the first log I only did a quick scan....then I updated malwarebytes and did a complete scan
     
  9. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    The second log was the most recent version.
     
  10. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,573
    I'm getting ready to shut down for the night.

    I'll check back here in the morning to see if you've submitted the 2 logs that I requested in post #3.

    -------------------------------------------------------------
     
  11. Phantom010

    Phantom010 Trusted Advisor

    Joined:
    Mar 9, 2009
    Messages:
    34,047
    Regarding your other issue HERE, would you happen to have SUPERAntiSpyware on your computer? It includes Home Page Protection. You'll be able to change your home page only within the program.

    [​IMG]
     
  12. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    phamton 010. I have checked the appropriate boxes....i tried IE and google comes up. I hope it will be permanate. thanks.
     
  13. Phantom010

    Phantom010 Trusted Advisor

    Joined:
    Mar 9, 2009
    Messages:
    34,047
    You're welcome! (y)
     
  14. flavallee

    flavallee Frank Trusted Advisor

    Joined:
    May 12, 2002
    Messages:
    63,573
    I still haven't received a reply to post #3, so it appears that I'm wasting my time here.

    I'm unsubscribing so I don't receive any further replies to this thread.

    -----------------------------------------------------------
     
  15. puterjunkie4ever

    puterjunkie4ever Thread Starter

    Joined:
    Oct 24, 2008
    Messages:
    465
    I'm not quite sure which one is post #3....Please help me out on this.
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1049388