Jump to content

ComputerGranny

Members
  • Posts

    6
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Having same problem at 8:00 PM Pacific time.
  2. I ran the MalwareBytes Free version 2 today on one of our laptops. I do this every week or so. The laptop had 43 files related to the Cartwheelshopping PUP. In the past, I've just quarantined the PUP's & malware found and not thought a thing about it. However, I recently did that with my sister's laptop and completely hosed the computer. She had a large number of PUPs which I quarantined. After that she had errors on boot up, lost function in some of her applications, and was generally real unhappy. I was able to eventually to restore functionality, but am now really leery of just quarantining malware. I can see on some other sites that they think the removal of CartwheelShopping A is a lenthy process with many steps including uninstalling the program, resetting browsers, running multiple scans with multiple applications. Much of it sounds like applications I see you advising people to use. My question is - is it safe, generally, to quarantine PUPs or other malware or should I stop using Malwarebyes to remove scanned items and go to using the more multi-step processess after Malwarebytes finds the problems? Thanks for the help with this.
  3. David, Sorry for the delay in responding. Thanks to your link, I understand what's going on, and completely agree that even software like this is highly undesirable, and I'd rather know it's there and get rid of it. I'm just glad I understand how Malwarebytes works a little better now. It is incredibly helpful to have folks like you explain all this. This environment we are in now with all the virus/malware out there is very threatening, and people like me just don't have the knowledge to respond to it. I am so grateful that you give your time to help us. Thank you so much.
  4. David, Thanks for responding so quickly. Sorry it took me a while to finish the scan. Here is the log that was generated. I hope this is the information you are looking for. I have a list of items to be removed, but am holding off in case you think I should do something else. They all say PUP.Optional, which I hope means I don't have some awful thing going on. I did install some software recently that seemed to include this SweetPaks thing. I uninstalled the software including the SweetPaks, and ran antivirus and Malwarebytes after that. Today is the first time these have shown up, but as I said, I ran the full scan. Thanks, Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.08.02.07 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 9.0.8112.16421 Owner :: ADAMSLT04 [administrator] 8/2/2013 12:23:35 PM MBAM-log-2013-08-02 (14-32-47).txt Scan type: Full scan (C:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 537158 Time elapsed: 2 hour(s), 7 minute(s), 59 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 2 HKLM\SOFTWARE\Mozilla\Firefox\Extensions\{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} (PUP.Optional.SweetPacks.A) -> Data: -> No action taken. HKLM\SOFTWARE\Mozilla\Firefox\Extensions|{7D4F1959-3F72-49d5-8E59-F02F8AA6815D} (PUP.Optional.SweetPacks.A) -> Data: C:\Program Files\Updater By SweetPacks\Firefox -> No action taken. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 3 C:\ProgramData\Tarma Installer (PUP.Optional.Tarma.A) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} (PUP.Optional.Tarma.A) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache (PUP.Optional.Tarma.A) -> No action taken. Files Detected: 11 C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe (PUP.Optional.Tarma.A) -> No action taken. C:\Users\Owner\AppData\Local\Temp\1371868084_32799522_606_4.tmp (PUP.Optional.SweetIM) -> No action taken. C:\Users\Owner\AppData\Local\Temp\1371868117_32832344_855_6.tmp (PUP.Optional.SweetIM) -> No action taken. C:\Users\Owner\AppData\Local\Temp\hsbing_717_active.exe (PUP.Optional.SweetPacks.A) -> No action taken. C:\Users\Owner\AppData\Local\Temp\mgsqlite3.7z (PUP.Optional.SweetIM) -> No action taken. C:\Users\Owner\AppData\Local\Temp\mgsqlite3.dll (PUP.Optional.SweetIM) -> No action taken. C:\Users\Owner\AppData\Local\Temp\Shortcut_sweetpacks_632013.exe (PUP.Optional.SweetIM) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat (PUP.Optional.Tarma.A) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico (PUP.Optional.Tarma.A) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll (PUP.Optional.Tarma.A) -> No action taken. C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll (PUP.Optional.Tarma.A) -> No action taken. (end)
  5. I use Malwarebytes free on a regular schedule for years to ensure I am malware-free. Recently, I developed the symptoms of possible malware (problems with copy/paste) so I ran the full scan instead. It found a malware - I don't recall which one. I had it clean, and for a couple of days, things seemed ok. Today, I am running the full scan again, and it has found 3 more instances since it started. My question is - is the quick scan as good as the full scan? I can't understand what has changed. I always update Windows when required, keep Zone Alarm running and up-to-date, use Avast and keep it current, scan regularly for viruses and never find any. Have I been missing these malwares because I've been only using the quick scan, or is there likely some other source? I will come back with a report when the scan finishes (whenever that is ).
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.