Not sure what to do!!!!

[dillerboi]

Hi there,

A couple of days ago I received 2 emails from a friend which only contained links. I had heard of these types of viruses so I didn't open the link. I also emailed my friend and asked her if they were legit. Of course they weren't. I found Malwarebyte.org, installed the free version, and ran the scan which yielded 8 infections whichwere quarantined and removed. I suggested my friend do the same which she said she would do. At this point I can only assume she has, although I am not sure. The reason for my post is, today I have received 5 emails from her with only links in the body, but two of them actually had topics in the topic lines. What can we do. Help! Thanks in advance.

[Maurice Naggar]

Hello dillerboi,

First, you and your friend would take care for themselves. We can just address your issues.

Now, mind you, we can only deal with general MBAM related issues in this particular sub-forum.

It is a good thing you are aware of malicious emails. When you see them, just delete them.

Post a copy of your latest MBAM scan log for my review.

[Haider]

Hello dillerboi:

You may want to check these links at VirusTotal and URLVoid to verify whether these are malicious. Should you have any other question(s) please post back

[dillerboi]

Hello dillerboi,

First, you and your friend would take care for themselves. We can just address your issues.

Now, mind you, we can only deal with general MBAM related issues in this particular sub-forum.

It is a good thing you are aware of malicious emails. When you see them, just delete them.

Post a copy of your latest MBAM scan log for my review.

I hope this is the way I'm supposed to post the MBAM log. Thank you so much for taking the time to look at this.

Malwarebytes' Anti-Malware 1.46

www.malwarebytes.org

Database version: 4586

Windows 5.1.2600 Service Pack 3, v.3311

Internet Explorer 8.0.6001.18702

9/9/2010 10:44:55 PM

mbam-log-2010-09-09 (22-44-55).txt

Scan type: Quick scan

Objects scanned: 153606

Time elapsed: 13 minute(s), 49 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 3

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 3

Files Infected: 3

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

C:\Program Files\FunWebProducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.

C:\Program Files\FunWebProducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:

C:\Program Files\FunWebProducts\Installr\1.bin\F3EZSETP.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

C:\Program Files\FunWebProducts\Installr\1.bin\F3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

C:\Program Files\FunWebProducts\Installr\1.bin\NPFUNWEB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

[Haider]

Hello dillerboi:

Since infections were found, I'd suggest update definitions (current 4602) and run a Full Scan

[DarkSnakeKobra]

Hi dillerboi and welcome to malwarebytes.

I highly recommend changing your password and your friend getting a new email account. Most likely their account has been compromised and shouldn't be trusted.