Jump to content


Photo

Whether or not to delete Malwarebytes objects found

PUP.MyWebSearch

  • Please log in to reply
3 replies to this topic

#1 mharski

mharski

    New Member

  • Members
  • Pip
  • 2 posts

Posted 17 December 2012 - 11:10 PM

On Sunday I received the Green Dot MoneyPak malware on my home computer. McAfee was up and running but MoneyPak got through anyway. Screen was frozen, couldnt do anything. Through google on another computer saw it was Malware and one suggestion which worked was to go to SafeMode with cmd prompt and do a restore to a previous day. I had a saved point of the 13th of Dec, the Malware cropped up on 15 Dec. The restore worked. Full McAfee scan revealed nothing. I downloaded free version of Malwarebytes and it found 6 objects, of which only two were checked. On reboot they were gone (quaranteened?) Subsequent Malwarebyte scans show the following 4 objects and my question is why aren't there check marks on the entries? Should I quaranteen them as well?

Here they are:

Vendor Category Item
PUP.MyWebSearch Folder C:\Program Files {x86}\FunWebProducts
PUP.MyWebSearch Registry Key HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9....and on and on
PUP.MyWebSearch Registry Key HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{1D4DB7D2-6EC9....and on
and on
PUP.FunWebProducts File C:\Users\Home\Local Settings|Temporary Internet Files\Content.IE5\NU313EC2\
Gaming\Wonderland.exe

Only fallout from the ordeal right now is that my home webpage of www.yahoo.com will not load up when launching my Internet Explorer 9. Everything else loads up ok, facebook, drudge, etc. But Yahoo gives me "OOPS - Internet Explorer could not connect to www.yahoo.com. Try reloading www.yahoo.com. Suggestion - Access a cached copy of www.yahoo.com

I can however, go to www.mail.yahoo.com and log in successfully. I use Windows 7, Internet options/tools shows www.yahoo.com as home page - but just wont load up when launching internet explorer. Is there a block list somewhere I can check? Any thoughts on the malware above and why I cant launch yahoo. Thanks so much // Mark

#2 daledoc1

daledoc1

    Forum Deity

  • Spam Hunters
  • PipPipPipPipPipPip
  • 11,884 posts
  • Gender:Not Telling

Posted 17 December 2012 - 11:20 PM

Hello and welcome, mharski: :)

PUP = Potentially Unwanted Program. These are legal software (toolbars, etc) that you may have intentionally installed on your system. That's why MBAM detects them but does not automatically flag them for quarantine, as they are not malware per se. If you want to remove these items, then you just need to manually select them (place a check mark next to them) for MBAM to remove them.

Having said that, if you are or recently have been infected with other, malicious malware, such as Green Dot MoneyPak, then it might be a good idea to have one of the malware experts guide you through checking your system and cleaning it of infection remnants.

We cannot work on malware removal in this sub-section of the forum, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making recovery difficult.

There are some excellent, self-help tutorials on getting MBAM to run on an infected system in the FAQ: HERE and in the KB section: HERE.

IF YOU WOULD LIKE EXPERT HELP WITH MALWARE REMOVAL, PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:
OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum. (Please see helpful tips below.)
OPTION 2: For licensed users of MBAM PRO, there is free, one-on-one, expert assistance from the MBAM support helpdesk.
OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:
  • Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" sticky topic.
  • -->If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  • Then please start a new post in the Malware Removal Forum.
  • An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.
  • -->>When starting your new post, please note the following:<<--
  • Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  • Please COPY/PASTE the requested logs directly into your post, rather than attaching them.
  • Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  • Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  • Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  • Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
OPTION 2:
If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them HERE.

OPTION 3:
If you prefer the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to the Premium Support site HERE.

Please be patient – someone will assist you as soon as possible.

Thank you very much,

daledoc1

Just a home user & forum volunteer
DT1: Win7/Ult/64 SP1; Intel Core i7-3770 @3.4 GHz; 16 GB RAM; NVidia GeForce GT620; IE9; Fx; TB; Cable HSI; MBAM PRO 1.75.0.1300; KIS2014; SAS Free; CCleaner
DT2: Win7 Ult/64 SP1; Intel Core i7-860 @2.8 GHz; 8 GB RAM; ATI Radeon HD 5770; IE 9, Fx; TB; Cable HSI; MBAM PRO 1.75.0.1300; KIS2014; SAS Free; CCleaner.
LT: Win7 Pro/64 SP1; Intel Core i7-3632 cached @3.2 GHz; 16 GB RAM; NVidia GeForce GT640M; IE 10; Fx; TB; WLAN; MBAM PRO 1.75.0.1300; Sophos ES 10.3; SAS Free; CCleaner.


#3 mharski

mharski

    New Member

  • Members
  • Pip
  • 2 posts

Posted 18 December 2012 - 02:46 AM

Hi - thank you for the response. Further to my original post, when I got home today from work I ran the Malwarebytes scan while in safe mode. When finished
it had detected the same 4 objects I reported previously. I restarted the computer and surprisingly, now yahoo home page comes up like normal again.
Not sure of the correlation with the scan while in safe mode, if any, but will better review your comments and decide whats the best course of action for me.
Again, tks for the quick response. Best regards // Mark

#4 AdvancedSetup

AdvancedSetup

    Staff

  • Root Admin
  • PipPipPipPipPipPip
  • 41,101 posts
  • Gender:Male
  • Location:US

Posted 18 December 2012 - 03:12 AM

The best thing is to have someone assist you in scanning and cleaning your computer before things get worse if you're having an issue.

Thanks

Ron Lewis
Forum Community Manager

staff.png

Follow us: Twitter, Become a fan: Facebook






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users