Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Adware.MyWebSearch... is it gone?


  • Please log in to reply
1 reply to this topic

#1 carissa_lee_

carissa_lee_

  • Members
  • 43 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Oregon
  • Local time:02:08 PM

Posted 31 December 2009 - 07:01 PM

I wasn't having any signs that lead me to believe there might be something wrong, other than this computer being slower than dirt. But as a regular check, I updated MBAM and did a quick scan, and it returned these results:

Malwarebytes' Anti-Malware 1.43
Database version: 3465
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

12/31/2009 3:23:52 PM
mbam-log-2009-12-31 (15-23-52).txt

Scan type: Quick Scan
Objects scanned: 113313
Time elapsed: 15 minute(s), 11 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 5
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{0354731f-950c-4a53-bc2b-132b5ee6b0fa} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{9034a523-d068-4be8-a284-9df278be776e} (Trojan.Zlob) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)



It didn't request for me to restart after it removed what it listed above, but I did anyway, and ran another quick scan afterward. The second quick scan came back clean.

Is there anything else I should do, or did MBAM successfully remove it the first time? I'm not familiar with the "MyWebSearch" thing, but what the search tool on this site (and Google) pull up doesn't seem to be much fun. So, I wanted to make sure.

Thanks!

Edited by carissa_lee_, 31 December 2009 - 07:03 PM.


BC AdBot (Login to Remove)

 


#2 trev47

trev47

  • Members
  • 113 posts
  • OFFLINE
  •  
  • Local time:01:08 PM

Posted 02 January 2010 - 05:41 PM

Run an online virus scan at eset.com and let it fix any virus issues.

Here is a tutorial about slow PC issues. http://www.bleepingcomputer.com/forums/t/87058/slow-computerbrowser-check-here-first;-it-may-not-be-malware/

The loh from MBAM might be remnants leftover from a previous infection.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users