Adware.Dropper

[Jamestec]

Hello, I recently scanned my computer with Malwarebytes Anti-Malware and got 6 hits.

2 of the hits are concerning, it says that the xcredist_x86.exe in both directories of Modern Warefare 2 and Fallout 3 are Adware.Droppers.

The other 2, Super Fast Shutdown and SolarlLight.exe is of no concern. And the system restore files are of the vcredist_x86.exe I guess?

The log is attached.

While i'm posting, I might as well ask, I have BitDefender, and I usually get asked by Bitdefender Support to get rid of Malwarebytes because its conflicting, but then I say that it doesn't have realtime protection enabled, so does Malwarebytes conflict with Bitdefender even though the realtime protection isn't enabled for Malwarebytes?

mbam_log_2010_06_29__20_06_35_.txt

[crysty2k5]

Without realtime protection, Malwarebytes doesn't conflict with Bitdefender.

Please pack the file(s) in an archive, protected with the password infected (with WinZIP, WinRAR, 7-ZIP, etc).

C:\Documents and Settings\User\My Documents\Skillz MS\SolarLight.exe

C:\Program Files\Bethesda Softworks\Fallout 3\#readme#\VC80_Redist\vcredist_x86.exe

C:\Program Files\Steam\SteamApps\common\call of duty modern warfare 2\Redist\vcredist_x86.exe

C:\Program Files\Super Fast Shutdown\shutdown.exe

Send me a PM with it.(if it's too big, upload it on www.rapidshare.com or other server and send me a Pm with the link).

[iroviskio]

Hello sir. Almost every game from STEAM comes with this vcredist and Malwarebytes Anti-Malware detected this "Adware.Dropper" in all of them... something is wrong with the program... Please fix this asap... i uploaded the file on rapidshare and mediafire with the password infected check:

http://rapidshare.com/files/403954736/vcre...x86_en.zip.html

http://www.mediafire.com/?zxkvuun1odm

[crysty2k5]

The problem has been reported here:

http://forums.malwarebytes.org/index.php?showtopic=55956

[crysty2k5]

Update/Run Malwarebytes

Double Click the Malwarebytes Anti-Malware icon to run the application.

• Click on the update tab then click on Check for updates.
  
• If an update is found, it will download and install the latest version.
  
• Once the update has loaded, go to the Scanner tab and select "Perform Full Scan", then click Scan.
  
• The scan may take some time to finish,so please be patient.
  
• When the scan is complete, click OK, then Show Results to view the results.
  
• Make sure that everything is checked, and click Remove Selected.
  
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.
  
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  
• Copy&Paste the entire report in your next reply.
  

[Jamestec]

Hello, this is the New Full Scan Log after updating.

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4262

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

7/1/2010 3:29:26 PM

mbam-log-2010-07-01 (15-29-26).txt

Scan type: Full scan (C:\|D:\|F:\|)

Objects scanned: 357467

Time elapsed: 1 hour(s), 47 minute(s), 4 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 2

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\Documents and Settings\User\My Documents\Skillz MS\SolarLight.exe (Trojan.Mapler) -> No action taken.

C:\Program Files\Super Fast Shutdown\shutdown.exe (HackTool.Shutdown) -> No action taken.

vcredist_x86.exe no longer shows up .

NOTE: I'm not removing Super Fast Shutdown because I have a shortcut to it and also a shortcut key, so I can shutdown my computer when things get crazy. And the other thing i'm not removing...

[crysty2k5]

Ok.

As you wish...