I recently went to use Windows Update. Once I opened Windows Update, Internet explorer came up and couldn't connect to the update page. So I went to your chat room and was told to post a log of what a virus scan showed. So here it is :S
SpyBot Search & Destroy Log:
--- Report generated: 2009-07-22 06:27 ---
FunWebProducts: [SBI $561F0D2E] User settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\Microsoft\Internet Explorer\MenuExt\&Search\=...http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml...
FunWebProducts: [SBI $8CC75C5A] Settings (Registry value, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\Microsoft\Internet Explorer\URLSearchHooks\{00A6FAF6-072E-44cf-8957-5838F569A31D}
FunWebProducts: [SBI $E2D974B3] Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\Fun Web Products
MyWay.MyWebSearch: [SBI $6404C538] Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: [SBI $B1C70274] Browser helper object (Registry key, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\MyWebSearch
MyWay.MyWebSearch: [SBI $BF485355] IE toolbar (Registry value, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{07B18EA9-A523-4961-B6BB-170DE4475CCA}
MyWay.MyWebSearch: [SBI $205CC8F2] Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-1609600684-84054450-2037427041-1008\Software\FunWebProducts
HitsLink: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitsLink: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitsLink: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitsLink: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
WebTrends live: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
WebTrends live: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CoreMetrics: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
DoubleClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitBox: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitBox: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
HitBox: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Bryan Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
BurstMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
DoubleClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
CoreMetrics: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
AdRevolver: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
BurstMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Clickbank: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
MediaPlex: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Statcounter: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
AdRevolver: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
AdRevolver: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Adviva: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Adviva: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
CasaleMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
WebTrends live: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Zedo: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Zedo: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
Zedo: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
HitBox: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
HitBox: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
FastClick: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
BurstMedia: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
LinkSynergy: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
LinkSynergy: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
LinkSynergy: Tracking cookie (Firefox: Steve Monks (default)) (Cookie, fixed)
--- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---
2009-01-26 blindman.exe (1.0.0.8)
2009-01-26 SDFiles.exe (1.6.1.7)
2009-01-26 SDMain.exe (1.0.0.6)
2009-01-26 SDShred.exe (1.0.2.5)
2009-01-26 SDUpdate.exe (1.6.0.12)
2009-01-26 SpybotSD.exe (1.6.2.46)
2009-03-05 TeaTimer.exe (1.6.6.32)
2009-02-25 unins000.exe (51.49.0.0)
2009-01-26 Update.exe (1.6.0.7)
2009-01-26 advcheck.dll (1.6.2.15)
2007-04-02 aports.dll (2.1.0.0)
2008-06-14 DelZip179.dll (1.79.11.1)
2009-01-26 SDHelper.dll (1.6.2.14)
2008-06-19 sqlite3.dll
2009-01-26 Tools.dll (2.1.6.10)
2009-01-16 UninsSrv.dll (1.0.0.0)
2009-03-25 Includes\Adware.sbi (*)
2009-03-25 Includes\AdwareC.sbi (*)
2009-01-22 Includes\Cookies.sbi (*)
2009-03-31 Includes\Dialer.sbi (*)
2009-03-25 Includes\DialerC.sbi (*)
2009-01-22 Includes\HeavyDuty.sbi (*)
2009-02-10 Includes\Hijackers.sbi (*)
2009-03-03 Includes\HijackersC.sbi (*)
2009-03-17 Includes\Keyloggers.sbi (*)
2009-03-17 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi (*)
2009-04-07 Includes\Malware.sbi (*)
2009-04-14 Includes\MalwareC.sbi (*)
2009-03-25 Includes\PUPS.sbi (*)
2009-03-31 Includes\PUPSC.sbi (*)
2009-01-22 Includes\Revision.sbi (*)
2009-01-13 Includes\Security.sbi (*)
2009-03-23 Includes\SecurityC.sbi (*)
2008-06-03 Includes\Spybots.sbi (*)
2008-06-03 Includes\SpybotsC.sbi (*)
2009-04-07 Includes\Spyware.sbi (*)
2009-04-07 Includes\SpywareC.sbi (*)
2009-04-07 Includes\Tracks.uti
2009-04-15 Includes\Trojans.sbi (*)
2009-04-14 Includes\TrojansC.sbi (*)
2008-03-04 Plugins\Chai.dll
2008-03-05 Plugins\Fennel.dll
2008-02-26 Plugins\Mate.dll
2007-12-24 Plugins\TCPIPAddress.dll
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Malwarebytes' Anti-Malware Log:
Malwarebytes' Anti-Malware 1.39
Database version: 2478
Windows 5.1.2600 Service Pack 3
7/22/2009 8:32:45 AM
mbam-log-2009-07-22 (08-32-45).txt
Scan type: Quick Scan
Objects scanned: 51413
Time elapsed: 1 hour(s), 56 minute(s), 38 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 14
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{549b5ca7-4a86-11d7-a4df-000874180bb3} (Trojan.Agent) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Sorry for the length.