Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Funmoods???


  • Please log in to reply
12 replies to this topic

#1 judyjht

judyjht

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 08 October 2012 - 11:49 PM

What is this Funmoods Toolbar that is now showing?? I unchecked it but I would like to get rid of it forever. Thoughts??
Also, in Explorer, I disabled 2 Funmoods add ons but how can I delete them all together. Looks like trouble.
There is also a flashing bar telling me I am the lucky 100,000th visitor - click here - which I, of course, did not click.
TIA

BC AdBot (Login to Remove)

 


#2 jhayz

jhayz

  • BC Advisor
  • 6,922 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:14 PM

Posted 09 October 2012 - 12:08 AM

You can reset your IE browser and change home page by Internet options - General tab then use AdwCleaner by Xplode. Another great tool is Junkware Removal Tool by thisisu. Download and install Free Malwarebytes, update before running a quick scan then remove certain infections found.

Tekken
 


#3 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:03:14 PM

Posted 09 October 2012 - 04:16 AM

a flashing bar telling me I am the lucky 100,000th visitor - click here -

This appears on about 100 sites, and is always Junk / Spam -

#4 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 06:56 AM

But how do I get rid of it - it is only in Explorer?? It is really annoying. I heard on the radio over the weekend that there is a problem with Explorer that they are working on. I usually do not even use Explorer but I do have a security camera that will only work in Explorer - I cannot get access with Firefox.

#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,464 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:14 PM

Posted 09 October 2012 - 08:31 AM

The following information can be found at this site.
"Funmoods toolbar is a browser add-on that is used to add smileys to social networks and emails. However when installed on your computer this toolbar will change your default search engine and your homepage, furthermore start.funmoods.com displays deceptive advertisements which tricks computer users to fill various surveys or to subscribe to costly mobile services.

Another reason why Funmoods toolbar can be categorized as an unwanted application is a fact that uninstalling this add-on from your Control Panel won't fully remove it from your Internet browsers, further removal steps are required to fully eliminate this toolbar. You can download this toolbar from all major software distribution websites from it's homepage and other sources. On some cases funmoods toolbar is bundled with free software and people are unwillingly installing this browser add-on."

In this article it is suggested that you us Add or Remove programs in the Control Panel.

Go to Start> Control Panel> Add or remove.

It also may be worth using the search feature to find anything that may be left after removing this in Add or remove.

Go to Start> Search. Click on All files and folders and then type in funmoods and then press enter. If nothing shows under this listing try start.funmoods.com. If you do find entries click on them to highlight them and then right click and delete the entry.


Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 09:52 AM

OK - I found 43 items and deleted them. Should I run Malwarebytes now??

It found the 43 items then while still searching I got a message (now I forget what it said) and then I clicked OK and it stopped the scan sent me back to my desktop without any icons and I had to hold down the power button to re-boot. I scanned again and as soon as it hit the same 43 items I stopped the search and deleted them. I am getting a bit nervous though.

Edited by judyjht, 09 October 2012 - 10:14 AM.


#7 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 11:05 AM

I just ran the quick scan in Malwarebytes and it found 10 of the Funmoods items so I deleted them. I am now running thefull version to see what happens.

#8 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 12:18 PM

I just finished the full scan and it found 5 more so I deleted and quarentined them
Here is the first log with the 10 items:

Database version: v2012.10.09.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Judy Quickbooks :: JHT-99 [administrator]

10/9/2012 11:43:39 AM
mbam-log-2012-10-09 (11-54-55).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 284954
Time elapsed: 10 minute(s), 39 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 12
HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> No action taken.
HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> No action taken.
HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> No action taken.
HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.FunMoods) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.FunMoods) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> No action taken.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> No action taken.
HKCU\SOFTWARE\CROSSRIDER (Adware.GamePlayLab) -> No action taken.
HKCU\Software\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> No action taken.
HKLM\SOFTWARE\Google\Chrome\Extensions\bbjciahceamgodcoidkjpchnokgfpphh (PUP.Funmoods) -> No action taken.

Registry Values Detected: 1
HKCU\Software\Crossrider|215AppVerifier (Adware.GamePlayLab) -> Data: 9dacb127ac5f979f1b780aa56a41e7f3 -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 1
C:\Documents and Settings\Judy Quickbooks\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Storage\chrome-extension_bbjciahceamgodcoidkjpchnokgfpphh_0.localstorage (PUP.Funmoods) -> No action taken.

(end)

Here is the full version:

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Database version: v2012.10.09.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Judy Quickbooks :: JHT-99 [administrator]

10/9/2012 11:55:56 AM
mbam-log-2012-10-09 (13-11-09).txt

Scan type: Full scan (C:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 436325
Time elapsed: 1 hour(s), 14 minute(s), 15 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 5
C:\System Volume Information\_restore{8DA6CA14-D4B6-45D0-AC4D-2C80647B441F}\RP1140\A0159769.dll (PUP.Funmoods) -> No action taken.
C:\System Volume Information\_restore{8DA6CA14-D4B6-45D0-AC4D-2C80647B441F}\RP1140\A0159770.dll (PUP.FunMoods) -> No action taken.
C:\System Volume Information\_restore{8DA6CA14-D4B6-45D0-AC4D-2C80647B441F}\RP1140\A0159771.dll (PUP.FunMoods) -> No action taken.
C:\System Volume Information\_restore{8DA6CA14-D4B6-45D0-AC4D-2C80647B441F}\RP1140\A0159772.dll (PUP.FunMoods) -> No action taken.
C:\System Volume Information\_restore{8DA6CA14-D4B6-45D0-AC4D-2C80647B441F}\RP1140\A0159775.exe (PUP.FunMoods) -> No action taken.

(end)

Do I need to do anything else except reboot (going to do that now)???

#9 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,464 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:14 PM

Posted 09 October 2012 - 01:38 PM

Did you remove the program in Add or remove programs in the control panel?

If you used the search and then deleted what you found they will go into the recycle bin, you will need to empty or they will be seen when you do another search.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#10 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 01:44 PM

I did Add/Remove it but forgot to empty the trash! I just emptied it. I'll reboot again to be sure. I have to be more careful when I download something and other things slip through the cracks! Thanks so much for the help. Love BC!!!

Edited by judyjht, 09 October 2012 - 01:44 PM.


#11 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,464 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:14 PM

Posted 09 October 2012 - 01:47 PM

One of the things that seems to be increasing are downloads which will have another application in the installation with a box already checked to install it. If you don't take the time to read as you do the installation you will miss these additions.

I hope it's all gone now.Posted Image

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#12 judyjht

judyjht
  • Topic Starter

  • Members
  • 799 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Western Maine
  • Local time:01:14 AM

Posted 09 October 2012 - 01:49 PM

Yup - that is exactly what happened. Never again! Thanks so much.

#13 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,464 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:10:14 PM

Posted 09 October 2012 - 02:09 PM

You are most welcome.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users