Jump to content

Please Help! Would like to know if I should be concerned


Recommended Posts

Greetings,

 

I recently ran malwarebytes and it has detected a few things which has now been removed, although I am wondering if I need to change my passwords for paypal, facebook etc... as I don't know how long they have been on my computer.

I would also like to know how I could have acquired these infected files and whether or not someone who had access to this computer could have put them on.

Finally I would like to know if the files are keyloggers. Thanks in advance.

 

Here is the Log:

 

Scan type: Full scan (C:\|)

Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 355111
Time elapsed: 46 minute(s), 38 second(s)
 
Memory Processes Detected: 0
(No malicious items detected)
 
Memory Modules Detected: 0
(No malicious items detected)
 
Registry Keys Detected: 2
HKCU\SOFTWARE\glindorus (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\glindorus (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.
 
Registry Values Detected: 0
(No malicious items detected)
 
Registry Data Items Detected: 0
(No malicious items detected)
 
Folders Detected: 0
(No malicious items detected)
 
Files Detected: 8
C:\AdwCleaner\Quarantine\C\Program Files (x86)\glindorus\glindorusBHO.dll.vir (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\glindorus\updateglindorus.exe.vir (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\71DU78PA\Setup[1].exe (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QI28GA2S\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QI28GA2S\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VV2IXJM6\iminent[1].msi (PUP.Optional.Iminent) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VV2IXJM6\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
C:\Users\Chang\AppData\Local\Temp\ins7393\IminentSetup_2509-9f33b5cf.exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.
 
(end)
 
Link to post
Share on other sites

Registry Keys Detected: 2

HKCU\SOFTWARE\glindorus (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.

HKLM\SOFTWARE\glindorus (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.

 

These are harmless, just old registry entries from Glindorus

http://malwaretips.com/blogs/pup-optional-glindorus-removal/

----------------------------

 

Files Detected: 8

C:\AdwCleaner\Quarantine\C\Program Files (x86)\glindorus\glindorusBHO.dll.vir (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.

C:\AdwCleaner\Quarantine\C\Program Files (x86)\glindorus\updateglindorus.exe.vir (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.

 

These were already quarantined by AdwCleaner (harmless)

 

------------------------------------

 

C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\71DU78PA\Setup[1].exe (PUP.Optional.Glindorus.A) -> Quarantined and deleted successfully.

C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QI28GA2S\IminentMinibarIE[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\QI28GA2S\MinibarFirefox[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VV2IXJM6\iminent[1].msi (PUP.Optional.Iminent) -> Quarantined and deleted successfully.

C:\Users\Chang\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VV2IXJM6\MinibarChrome[1].exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

 

These are just Temporary Internet Files

 

--------------------------------------

 

C:\Users\Chang\AppData\Local\Temp\ins7393\IminentSetup_2509-9f33b5cf.exe (PUP.Optional.Iminent.A) -> Quarantined and deleted successfully.

 

This was the installer for Iminent:

http://download.cnet.com/Iminent/3000-2150_4-75623467.html

 

------------------------------------------

Most of the time PUPs are downloaded along with other programs such as free games, toolbars, etc.

http://searchsecurity.techtarget.com/definition/PUP

You have to pay close attention to what you download.

There's no keyloggers and no need to panic.

MrC

Link to post
Share on other sites

These are harmless, just old registry entries from Glindorus

http://malwaretips.com/blogs/pup-optional-glindorus-removal/

----------------------------

 

These were already quarantined by AdwCleaner (harmless)

 

------------------------------------

 

These are just Temporary Internet Files

 

--------------------------------------

 

This was the installer for Iminent:

http://download.cnet.com/Iminent/3000-2150_4-75623467.html

 

------------------------------------------

Most of the time PUPs are downloaded along with other programs such as free games, toolbars, etc.

http://searchsecurity.techtarget.com/definition/PUP

You have to pay close attention to what you download.

There's no keyloggers and no need to panic.

MrC

Thank you MrC, I appreciate your help.

Link to post
Share on other sites

  • Root Admin

Glad we could help. :)

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.