Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

24x7 removal


  • Please log in to reply
27 replies to this topic

#1 Billy Chan

Billy Chan

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 01:43 PM

So I had CCleaner downloaded and it told me i needed to update it. SO i did so. And after it finished i noticed 3 programs i didnt want downloaded along with it. Weathebug, 27x7 help, and something called optimize your pc. I want to remove these.Edit: Moved topic from to the more appropriate forum. ~ Animal

Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of any malware logs included in the topic. ~ Animal

BC AdBot (Login to Remove)

 


#2 hbyton

hbyton

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:11:24 PM

Posted 20 September 2013 - 02:25 PM

These programs should take care of your problem :)

 

adwcleaner

http://www.bleepingcomputer.com/download/adwcleaner/dl/125/

 

junkware removal tool

http://www.bleepingcomputer.com/download/junkware-removal-tool/

 

Malwarebytes

http://www.bleepingcomputer.com/download/malwarebytes-anti-malware/     (don't accept the 7 day trial) 

 

any questions? feel free to ask.

 

Please post back and tell me if your problem is fixed or not


Edited by hbyton, 20 September 2013 - 02:26 PM.


#3 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 02:47 PM

I ran adwcleaner and JRT. I think the programs have been deleted but I'm not completely sure. Theres this icon on my desktop named Optimize your pc. Is this a threat?



#4 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 02:48 PM

And is weatherbug a threat?



#5 hbyton

hbyton

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:11:24 PM

Posted 20 September 2013 - 02:55 PM

It is not malware that will damage your computer but they can be annoying, try and remove them through the add and remove programs section, if they are not running in the backround and you cannot find them in the add and remove programs section it may that they are just shortcuts and the program its self has been deleted. 

 

I would also recommend that you run a scan with hitman pro just to make sure that you do not have any other infections and to clean off any remains. 

http://www.surfright.nl/en/downloads/


Edited by hbyton, 20 September 2013 - 03:05 PM.


#6 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 05:58 PM

I'm not really sure if I should run hitman because I've been here before and someone who helped me before didn't reccomend I use it unless I know what I'm doing.



#7 hbyton

hbyton

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:11:24 PM

Posted 20 September 2013 - 06:16 PM

I have personally used it countless times on customers pcs over the last few years and have never encountered any issues, however it is your pc and if you do not feel comfortable running it then i completely understand and respect your decision.

 

Have you managed to remove  weatherbug from the add and remove programs section on your control panel?


Edited by hbyton, 20 September 2013 - 06:20 PM.


#8 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 06:20 PM

I'm just running a full scan with MBAM to see if there are any leftovers before i tackle weatherbug.



#9 hbyton

hbyton

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:11:24 PM

Posted 20 September 2013 - 06:26 PM

Okay, please let me know if it finds anything.



#10 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 08:21 PM

Found 21 objects, heres the log:

 

9/20/2013 6:54:45 PM
mbam-log-2013-09-20 (18-54-45).txt

Scan type: Full scan (C:\|Q:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 534498
Time elapsed: 2 hour(s), 5 minute(s), 17 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 6
HKCR\CLSID\{CF190686-9E72-403C-B99D-682ABDB63C5B} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
HKCR\TypeLib\{39A17362-9C1D-4907-9428-0D28A94DC79D} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
HKCR\Interface\{627A968A-03E6-41C7-B11B-4E442B376F95} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{CF190686-9E72-403C-B99D-682ABDB63C5B} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
HKCU\Software\PCFixSpeed (PUP.Optional.PCFixSpeed) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\PCFixSpeed (PUP.Optional.PCFixSpeed) -> Quarantined and deleted successfully.

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 4
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3} (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\chrome (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\chrome\content (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\skin (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.

Files Detected: 11
C:\Users\Billy\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2ZZAR1HX\CCleanerSetup-10633410-pmfsb.exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Local\Temp\ICReinstall_CCleanerSetup-10633410-pmfsb.exe (PUP.Optional.Installcore) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Local\Temp\SetupToparcadehits.exe (Adware.GameVance) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Local\Temp\is1852162411\139543_stp\Toparcadehits.exe (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Local\Temp\SetupToparcadehits.exe (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\chrome.manifest (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\icon.png (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\install.rdf (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\chrome\content\browser.xul (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\chrome\content\toparcadehits.js (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.
C:\Users\Billy\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\{0113D088-8ED1-468C-B225-585A9C53B5E3}\skin\style.css (PUP.Optional.TopArcadeHits.A) -> Quarantined and deleted successfully.

(end)
 



#11 Billy Chan

Billy Chan
  • Topic Starter

  • Members
  • 35 posts
  • OFFLINE
  •  
  • Local time:05:24 PM

Posted 20 September 2013 - 08:28 PM

I just noticed in my programs a program called TopArcadeHits installed 9/20/13? Threat?



And when i try to remove weatherbug it starts updating



#12 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,108 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:24 PM

Posted 20 September 2013 - 08:50 PM

How do I uninstall WeatherBug?
- If there is a WeatherBug icon in the system tray, right-click on it and choose "Exit".
- Open Windows Task Manager, if WeatherBug.exe is listed, click on it and choose End Process.

AdwCleaner should have created a folder located at C:\AdwCleaner. All AdwCleaner.txt logs are all stored in that folder including the Cleaning report log. Please copy and paste the contents of AdwCleaner[S0].txt in your next reply for review.

JRT should have created a log file named JRT.txt that opened after using it and saved a copy to your Desktop. Please copy and paste the contents of JRT.txt in your next reply for review.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#13 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,108 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:24 PM

Posted 20 September 2013 - 08:58 PM

TopArcadeHits is a Potentially Unwanted Program (PUP) bundled with other software (often without the knowledge of the user) and can be the source of various issues and problems to include Adware and browser hijacking which may change your home page and search engine.

A Potentially Unwanted Program (PUP) is a very broad threat category which can encompass any number of different programs to include those which are benign as well as malicious. Thus, this type of detection does not always necessarily mean the file is malicious or a bad program. PUPs in and of themselves are not always bad...many are generally known, non-malicious but unwanted (bundled) software. PUPs are considered unwanted because they can cause undesirable system performance or other problems and are sometimes installed without the user's consent since they are often included when downloading legitimate programs. PUPs may also be defined somewhat differently by various security vendors and may or may not be detected/removed based on that definition.

How to remove TopArcadeHits?

Check for and remove any TopArcadeHits add-ons from your browser:
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,108 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:24 PM

Posted 20 September 2013 - 09:34 PM

This entry is from your Malwarebytes log.

CCleanerSetup-10633410-pmfsb.exe (PUP.Optional.Installcore)

InstallCore is an installer engine...it provides professional development tools for rapid and secure installer creation. Installcore is often distributed as an individual component bundled with other applications and commonly found on file-sharing or third-party application download sites. Since it has an advertising module that displays targeted advertising material and user information may be collected from the system in order to select the appropriate advertisements for display, it is considered a Potentially Unsafe Application (PUA) - FAQ #16. However, some security venders classify it as a Potentially Unwanted Program (PUP).

To avoid this type of junk, when downloading software it is best practice to download from the vendor's official site - CCleaner
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#15 hbyton

hbyton

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:England
  • Local time:11:24 PM

Posted 21 September 2013 - 05:26 AM

These PUPs are usually bundled into an installer, to avoid this problem in the future then you need to click through the installer very slowly and very carefully, you can then opt out on things like weatherbug and if it does not let you then just cancel the whole thing.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users