MyFunCards[1].exe

BleepingComputer.com: MyFunCards[1].exe

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

MyFunCards[1].exe Do I have to remove this infection manually?

#1 sr8031

New Member

Group: Members
Posts: 11
Joined: 21-January 09
Gender:Male
Location:CA

Posted 06 November 2010 - 03:33 PM

My operating system is Windows Xp Professionnal. At start up, I am getting a Pop up message "Server Busy"...! This action cannot be completed because the other program is busy. Choose "Switch To" to activate the busy program and correct the problem. When I click on 'switch to" or "retry" buttons, nothing happens plus I can't close the pop up message unless I right click on task bar icon for Norton Internet Security. I googled this problem and someone suggested a malaware scan by Malwarebytes. A quick scan showed 3 infections (2 Broken.Open registry data and 1 file called MyFyncards[1].exe) and I am attaching that log plus a screen capture. I chose to have the infections removed. When I rebooted, the aforementioned "server busy" pop up message appeared again. I did a full scan which produced no further infections.

Am I still inefected? I did visit the website "myfuncards.com" on Wednesday, 11/3/10 and started having aforementioned problem yesterday, Friday, 11/5/10.

Here is the Malwarebytes quick scan log...11/5/2010 10:54:49 PM
mbam-log-2010-11-05 (22-54-49).txt

Scan type: Quick scan
Objects scanned: 163165
Time elapsed: 11 minute(s), 58 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_CLASSES_ROOT\scrfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: ("%1" /S) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: (NOTEPAD.EXE %1) Good: (regedit.exe "%1") -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
H:\Documents and Settings\XXXXX\Local Settings\Temporary Internet Files\Content.IE5\2QV2L5LI\MyFunCards[1].exe (PUP.FunWebProducts) -> Quarantined and deleted successfully.

This post has been edited by Blade Zephon: 07 April 2011 - 03:40 PM